joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400f2494
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
push rdi
sub rsp, 0x4991d3ff
add rsp, 0x4991d35f
xor ebx, ebx
mov rdi, rcx
mov qword [rax + 8], rbx
cmp qword [rcx + 0x2f8], rbx
je 0x1400f2534
mov edx, dword [rcx + 0x2ec]
mov ecx, 0x24e2c8c6
add ecx, 0x3cd8475e
xor ecx, 0x2e671bf8
add ecx, 0xb225d1
mov eax, dword [rdi + 0x2e8]
xor edx, ecx
xor eax, ecx
lea rcx, [rbx - 1]
imul edx, eax
lea eax, [rbx + 4]
movsxd rsi, edx
mul rsi
cmovo rax, rcx
mov rcx, rax
call fcn.1400987e0
test rsi, rsi
jle 0x1400f2551
mov rcx, qword [rdi + 0x2f8]
mov edx, dword [rcx + rbx*4]
xor edx, 0x6a9d6a96
mov dword [rax + rbx*4], edx
inc rbx
cmp rbx, rsi
jl 0x1400f2510
jmp 0x1400f2551
lea rdx, [rsp + 0xb0]
call fcn.1400f26ac
test al, al
je 0x1400f259c
mov rax, qword [rsp + 0xb0]
lea rcx, [0x14000bb68]
mov qword [rsp + 0x98], 0x6db2b417
sub qword [rsp + 0x98], 0x31dbc372
sub qword [rsp + 0x98], 0x3bd6f08d
mov qword [rsp + 0x20], rcx
lea rdx, [rsp + 0x20]
mov rcx, qword [rdi + 0x318]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x30], rax
call fcn.1400f160c
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x1400f7010
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
nop
add rsp, 0x16ee1dc5
sub rsp, 0x16ee1e25
mov rbp, qword [rcx + 0xaf0]
lea rax, [rsp + 0x28]
mov rbx, qword [rcx + 0xab8]
xorps xmm0, xmm0
mov r14, rdx
mov qword [rsp + 0x20], rax
mov rsi, rcx
lea rcx, [rsp + 0x20]
lea rdx, [rbp + 1]
movups xmmword [rsp + 0x28], xmm0
movups xmmword [rsp + 0x38], xmm0
movups xmmword [rsp + 0x48], xmm0
call fcn.14001791c
mov edi, 0x40af89a
xor edi, 0x44239393
add edi, 0x209bc8b0
mov r9, rax
mov ecx, edi
mov r15d, 0x17678f79
add r15d, 0x5e785e41
sub r15d, 0x723ee633
xor r15d, 0x3a10778
test rbp, rbp
je 0x1400f70e1
mov rdx, rax
sub rbx, rax
mov r8, rbp
nop dword [rax]
nop dword [rax + rax]
movzx eax, cx
lea rdx, [rdx + 2]
and ax, r15w
ror ecx, 8
xor ax, word [rbx + rdx - 2]
mov word [rdx - 2], ax
sub r8, 1
jne 0x1400f70c0
xor ebx, ebx
mov word [r9 + rbp*2], bx
cmp word [rsi + 0xb40], bx
je 0x1400f712c
mov edx, ebx
cmp qword [rsi + 0xaf0], rbx
jbe 0x1400f712c
nop dword [rax + rax]
mov rax, qword [rsp + 0x20]
movzx ecx, word [rsi + 0xb40]
mov word [rax + rdx*2], cx
inc rdx
cmp rdx, qword [rsi + 0xaf0]
jb 0x1400f710c
mov rsi, qword [rsp + 0x20]
lea rax, [r14 + 8]
xorps xmm0, xmm0
mov qword [r14], rax
movups xmmword [rax], xmm0
nop
movabs rdx, 0xffffffff2ece74d6
xor rdx, 0x2345f3a3
add rdx, 0x6624b9bf
add rdx, 0x7fffffff
add rdx, 0xc4fbecc
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
nop dword [rax]
inc rdx
cmp word [rsi + rdx*2], bx
jne 0x1400f7170
mov rcx, r14
mov qword [r14 + 0x38], rdx
call fcn.14001791c
cmp qword [r14 + 0x38], rbx
jbe 0x1400f71bc
sub rsi, rax
nop
movzx ecx, di
lea rax, [rax + 2]
and cx, r15w
ror edi, 8
xor cx, word [rsi + rax - 2]
inc rbx
mov word [rax - 2], cx
cmp rbx, qword [r14 + 0x38]
jb 0x1400f7198
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x28]
cmp rcx, rax
jne 0x1400f71ee
lea rdi, [rsp + 0x28]
xor eax, eax
mov ecx, 0x62ffaf1c
sub ecx, 0x48358d4
xor ecx, 0x5e7c5678
rep stosb byte [rdi], al
jmp 0x1400f71f3
call fcn.140098930
lea r11, [rsp + 0x60]
mov rax, r14
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rdi
ret
Function at 0x1401044c0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
add rsp, 0xffffffffffffffe0
mov r8, qword [rcx + 0x648]
xor esi, esi
mov rbx, rcx
test r8, r8
je 0x1401044f0
mov rdi, qword [rcx + 0x640]
jmp 0x1401044f7
mov rdi, rsi
nop dword [rax]
test r8, r8
je 0x140104510
mov rax, qword [rbx + 0x640]
lea rcx, [rax + r8*8]
jmp 0x140104513
mov rcx, rsi
cmp rdi, rcx
je 0x14010474d
mov rax, qword [rdi]
cmp qword [rax + 0x28], rdx
je 0x14010453d
nop
sub rdi, 0x2fa1b782
add rdi, 0x2fa1b78a
jmp 0x1401044f7
test r8, r8
je 0x140104604
cmp rdi, qword [rbx + 0x640]
jb 0x140104604
mov rax, qword [rbx + 0x640]
lea rcx, [rax + r8*8]
cmp rdi, rcx
jae 0x140104604
mov rdx, rdi
nop word [rax + rax]
mov rcx, qword [rbx + 0x648]
test rcx, rcx
je 0x140104594
mov rax, qword [rbx + 0x640]
lea rax, [rax + rcx*8]
jmp 0x140104597
mov rax, rsi
nop
add rax, 0xffffffff850685e3
sub rax, 0xffffffff850685eb
cmp rdx, rax
jae 0x1401045bd
mov rax, qword [rdx + 8]
mov qword [rdx], rax
add rdx, 8
jmp 0x140104574
test rcx, rcx
je 0x140104604
lea rax, [rcx - 1]
mov qword [rbx + 0x648], rax
test rax, rax
jne 0x140104604
mov rcx, qword [rbx + 0x640]
test rcx, rcx
je 0x1401045f6
call fcn.140098930
mov qword [rbx + 0x640], rsi
mov qword [rbx + 0x650], rsi
mov qword [rbx + 0x648], rsi
mov rcx, qword [rdi]
test rcx, rcx
je 0x14010462c
mov rax, qword [rcx]
mov edx, 0x6b5f4c3c
sub edx, 0x2cecede5
sub edx, 0xa3691c6
xor edx, 0x343bcc90
call qword [rax]
cmp qword [rbx + 0x648], rsi
je 0x14010474d
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400ef110
mov rcx, qword [rsp + 0x30]
mov r10d, 0x1c8a1129
xor r10d, 0x31934173
add r10d, 0x1f32b204
xor r10d, 0x4c4c02fe
mov r8d, dword [rsp + 0x34]
mov eax, ecx
mov r9, qword [rbx + 0x648]
sub eax, r8d
cdq
idiv dword [rbx + 0x648]
cmp eax, r10d
cmovl r10d, eax
test r9, r9
je 0x140104705
mov rdx, qword [rbx + 0x640]
lea r11, [rdx + r9*8]
cmp rdx, r11
je 0x140104705
mov r9d, r10d
xor r9d, 0x508e31ad
xor r8d, 0x508e31ad
nop dword [rax]
mov rcx, qword [rdx]
mov eax, esi
xor eax, 0x508e31ad
add esi, r10d
add rdx, 8
mov dword [rcx + 0x30], eax
mov dword [rcx + 0x34], 0x1ab64dcc
add dword [rcx + 0x34], 0x61700b03
sub dword [rcx + 0x34], 0x2661e015
xor dword [rcx + 0x34], 0x54a4917
mov dword [rcx + 0x38], r9d
mov dword [rcx + 0x3c], r8d
cmp rdx, r11
jne 0x1401046ba
mov rcx, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x34]
mov rax, qword [rbx + 0x660]
test rax, rax
je 0x140104745
sub ecx, r8d
mov dword [rax + 0x14], 0x33e0fdd3
sub dword [rax + 0x14], 0x230da91c
add dword [rax + 0x14], 0x3fbadcf6
xor ecx, 0x508e31ad
xor r8d, 0x508e31ad
mov dword [rax + 0x10], ecx
mov dword [rax + 0x18], r8d
mov dword [rax + 0x1c], r8d
mov rcx, rbx
call fcn.1400ee890
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
sub rsp, 0xffffffffffffffe0
pop rdi
ret
Function at 0x140104819
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x20
mov rax, qword [rcx]
mov rbx, rcx
call qword [rax + 0x78]
mov rdx, qword [rbx + 0x648]
mov rcx, rax
mov qword [rsp + 0x30], rax
call fcn.140100bf0
lea rcx, [rbx + 0x640]
lea rdx, [rsp + 0x30]
call fcn.1400f9ca0
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp 0x140104760
push rbx
sub rsp, 0x20
cmp qword [rcx + 0x648], 0
mov rbx, rcx
je 0x14010489b
lea rdx, [rsp + 0x30]
call fcn.1400ef110
mov r8, qword [rsp + 0x30]
mov r11d, 0x70f822f
xor r11d, 0x7881da12
sub r11d, 0x7f8e579d
mov r9d, dword [rsp + 0x34]
mov eax, r8d
sub eax, r9d
cdq
idiv dword [rbx + 0x648]
mov rdx, qword [rbx + 0x648]
cmp eax, r11d
cmovl r11d, eax
xor r10d, r10d
test rdx, rdx
je 0x140104851
mov rax, qword [rbx + 0x640]
mov qword [rsp + 0x38], rdi
lea rdi, [rax + rdx*8]
cmp rax, rdi
je 0x14010484c
mov r8d, r11d
xor r8d, 0x508e31ad
xor r9d, 0x508e31ad
nop word [rax + rax]
mov rdx, qword [rax]
mov ecx, r10d
xor ecx, 0x508e31ad
add r10d, r11d
nop
sub rax, 0x11ba821d
add rax, 0x11ba8225
mov dword [rdx + 0x30], ecx
mov dword [rdx + 0x34], 0x690f2904
sub dword [rdx + 0x34], 0x2a556a77
add dword [rdx + 0x34], 0x9901458
add dword [rdx + 0x34], 0x8445ec8
mov dword [rdx + 0x38], r8d
mov dword [rdx + 0x3c], r9d
cmp rax, rdi
jne 0x1401047f6
mov r8, qword [rsp + 0x30]
mov r9d, dword [rsp + 0x34]
mov rdi, qword [rsp + 0x38]
mov rax, qword [rbx + 0x660]
test rax, rax
je 0x140104893
sub r8d, r9d
mov dword [rax + 0x14], 0x6a31da8e
sub dword [rax + 0x14], 0x448bd356
add dword [rax + 0x14], 0x2ae82a75
xor r8d, 0x508e31ad
xor r9d, 0x508e31ad
mov dword [rax + 0x10], r8d
mov dword [rax + 0x18], r9d
mov dword [rax + 0x1c], r9d
mov rcx, rbx
call fcn.1400ee890
neg rsp
add rsp, 0xffffffffffffffe0
neg rsp
pop rbx
ret
Function at 0x1401182d4
Capabilities:
Encode data using xor

Disassembly:
xchg r10, rbx
mov qword [rsp + 0x10], r10
xchg rbx, r10
mov qword [rsp + 0x18], rsi
mov r14, r14
mov qword [rsp + 0x20], rdi
nop
mov qword [rsp - 8], rbp
sub rsp, 8
xchg rsp, rbp
mov rsp, rbp
xchg rsp, rbp
sub rsp, 0x80
xor esi, esi
mov dword [rsp - 0x24], 0x7aefea7b
mov dword [rbp - 0x50], 0x2704755c
add dword [rbp - 0x50], 0x538d19c1
xor dword [rbp - 0x50], 0xb947c07
add dword [rbp - 0x50], 0x73238a9
xor dword [rbp - 0x50], 0x78592b2a
mov dword [rbp - 0x4c], 0x3311b2e4
sub dword [rbp - 0x4c], 0x72af03c
add dword [rbp - 0x4c], 0x3b75feb9
sub dword [rbp - 0x4c], 0x6739c0d7
mov dword [rbp - 0x48], 0x7b35a469
xor dword [rbp - 0x48], 0x5f479fa2
xor dword [rbp - 0x48], 0x7f1ec0a5
sub dword [rbp - 0x48], 0x5b01fa72
mov dword [rbp - 0x44], 0x669ac690
xor dword [rbp - 0x44], 0x45b693a7
add dword [rbp - 0x44], 0x2931d2af
xor dword [rbp - 0x44], 0x4c722773
mov qword [rbp + 0x10], rsi
mov dword [rsp - 0x20], 0x26deca1c
lea ebx, [rsi + 1]
mov rax, qword [rbp + 0x10]
mov rcx, qword [rbp + 0x10]
xchg r13, r13
mov rax, qword [rbp + 0x10]
and cl, 3
shl cl, 1
shl cl, 1
shl cl, 1
movzx edx, word [rbp + rax*2 - 0x50]
mov eax, 0x2b5c1213
sub eax, 0x80d2438
add eax, 0x17e9f20c
sub eax, 0x8b24006
xor eax, 0x5243ac58
shr eax, cl
mov dword [rsp - 0x44], 0x4c22e6e0
movzx ecx, al
xchg rcx, rax
mov rcx, qword [rbp + 0x10]
xchg rcx, rax
xor cx, dx
mov dword [rsp - 0x2c], 0x37147a9b
mov word [rbp + rax*2 - 0x20], cx
mov rax, qword [rbp + 0x10]
add rax, rbx
mov dword [rsp - 0x14], edx
xchg r15, rax
mov qword [rbp + 0x10], r15
xchg r15, rax
xchg r10, rax
mov r10, qword [rbp + 0x10]
xchg r10, rax
cmp rax, 8
jb 0x14011839a
xchg r9, r9
lea rax, [rbp - 0x20]
mov word [rbp - 0x10], si
xorps xmm0, xmm0
mov r12, r12
xchg r8, rax
mov qword [rbp - 0x38], r8
xchg r8, rax
lea r9, [rbp - 0x30]
mov dword [rsp - 0x24], ebp
mov dword [rbp - 0x40], 0x77f4762a
xor dword [rbp - 0x40], 0x29c8d9ee
sub dword [rbp - 0x40], 0x5c370c74
xor dword [rbp - 0x40], 0x18b5df07
sub dword [rbp - 0x40], 0x1a9e7c47
lea r8, [rbp - 0x40]
mov dword [rsp + 0x20], esi
mov dword [rsp - 0x34], ebp
xor edx, edx
xor ecx, ecx
xchg rbp, rsp
movups xmmword [rsp - 0x30], xmm0
xchg rbp, rsp
call fcn.140133170
xchg rdi, rax
mov rax, rdi
xchg rdi, rax
test rax, rax
je 0x1401184c5
mov dword [rsp - 0x24], esp
xchg rcx, r12
mov r12, rax
xchg rcx, r12
call fcn.14010e968
test al, al
mov dword [rsp - 0x1c], esi
je 0x1401184c5
lea rdx, [rbp - 0x40]
xchg rdi, rcx
mov rdi, rcx
xchg rdi, rcx
call fcn.14010d880
mov r9, r9
test al, al
jne 0x1401184cc
mov bl, sil
mov dword [rsp - 0x20], esi
xor eax, eax
lea r11, [rsp + 0x80]
mov rsi, qword [r11 + 0x20]
lea rdi, [rbp - 0x20]
xchg r11, r11
lea ecx, [rax + 8]
rep stosb byte [rdi], al
xchg r9, rdi
mov r9, qword [r11 + 0x28]
xchg r9, rdi
mov al, bl
xchg rdx, rbx
mov rdx, qword [r11 + 0x18]
xchg rbx, rdx
xchg rdx, rsp
mov rdx, r11
xchg rsp, rdx
nop
add rsp, 8
mov rbp, qword [rsp - 8]
ret
Function at 0x14011c900
Capabilities:
Encode data using xor

Disassembly:
push rbx
add rsp, 0x1f937ef5
sub rsp, 0x1f938125
mov rax, qword [0x140141450]
xchg rbx, rcx
mov rcx, rbx
xchg rbx, rcx
not rax
movabs rcx, 0x13ca1a1177fab243
sub rcx, 0x534be043
add rcx, 0x453cb5c3
sub rcx, 0x2e6a25ea
xor rax, rcx
mov dword [rsp - 0x30], ebx
mov edx, 0x449e2a58
add edx, 0x11546b2b
xor edx, 0x40ec279b
sub edx, 0x58e62b1
sub edx, 0xf904e63
movabs rcx, 0x7761f8027c3e5c3f
sub rcx, 0x5925f7d6
xor rcx, 0x528f70d
add rcx, 0x47843412
add rax, rcx
movabs rcx, 0x3c87f58204183b43
add rcx, 0x7b3f5aae
sub rcx, 0x32291304
add rcx, 0x7fffffff
add rcx, 0x1f2892d
xor rax, rcx
mov dword [rsp - 0x38], 0x6db26400
lea rcx, [rsp + 0x20]
call rax
lea rax, [rbx + 8]
mov r15, r15
xorps xmm0, xmm0
xchg rsp, rax
mov qword [rbx], rsp
xchg rsp, rax
nop
movabs rdx, 0xffffffff07f92600
add rdx, 0x1fa9999f
add rdx, 0x4aaabecb
xor rdx, 0x47f6e5c5
add rdx, 0x7fffffff
xor rdx, 0x4a446451
xchg rbp, rax
movups xmmword [rbp], xmm0
xchg rbp, rax
xchg rbx, rax
movups xmmword [rbx + 0x10], xmm0
xchg rbx, rax
movups xmmword [rax + 0x20], xmm0
xchg r15, r15
lea rax, [rsp + 0x20]
nop word [rax + rax]
inc rdx
cmp word [rax + rdx*2], 0
mov r14, r14
jne 0x14011ca21
xchg rbx, rsp
mov rcx, rsp
xchg rbx, rsp
xchg r15, rdx
mov qword [rbx + 0x38], r15
xchg r15, rdx
call fcn.14001791c
xor r8d, r8d
xchg r8, r8
mov edx, 0x292b652a
xor edx, 0xec72fc1
xor edx, 0x5c99ee22
sub edx, 0x1ab07110
cmp qword [rbx + 0x38], r8
mov dword [rsp - 0x40], ecx
jbe 0x14011cad1
lea r9, [rsp + 0x20]
mov r10d, 0x77766075
sub r10d, 0x49264e15
sub r10d, 0x1efb9906
add r10d, 0x11e7283a
sub r10d, 0x213ba095
sub r9, rax
movzx ecx, dx
lea rax, [rax + 2]
mov dword [rsp - 0x3c], esi
and cx, r10w
ror edx, 1
ror edx, 5
ror edx, 1
ror edx, 1
xor cx, word [r9 + rax - 2]
inc r8
xchg r9, r9
mov word [rax - 2], cx
cmp r8, qword [rbx + 0x38]
jb 0x14011ca9f
xchg rbx, rax
mov rbx, rax
xchg rbx, rax
sub rsp, 0x2fa8ff54
add rsp, 0x2fa90184
nop
mov rbx, qword [rsp]
add rsp, 8
ret
Function at 0x140133170
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov dword [rsp - 0x38], ecx
mov eax, dword [0x140141ba4]
cmp qword [0x140141bb8], 0
jne 0x14008d3b0
mov dword [rsp - 0x1c], 0x37dc011
syscall
ret
jmp 0x14008de93
Function at 0x140135808
Capabilities:
Encode data using xor

Disassembly:
xchg r13, rbx
mov qword [rsp + 8], r13
xchg rbx, r13
mov qword [rsp + 0x10], rsi
xchg rdi, r14
mov qword [rsp + 0x18], r14
xchg rdi, r14
nop
push 0x14c7898f
mov qword [rsp], rbp
push r12
mov rdx, rdx
nop
mov qword [rsp - 8], r14
sub rsp, 8
xchg rbp, rdi
mov rdi, rsp
xchg rbp, rdi
nop
add rsp, 0x1dceb3a0
sub rsp, 0x1dceb410
xchg r8, rdi
mov r8, rdi
xchg rdi, r8
xchg r14, r8
mov r8, rdx
xchg r14, r8
xchg rsi, rcx
mov rcx, rsi
xchg rcx, rsi
movabs r12, 0x3eaf3ba80339796f
xor r12, 0xed458b7
add r12, 0x4891de59
sub r12, 0x2aac7be
add r12, 0x1a5da05
cmp r9d, 0x60001
jne 0x140135a31
mov dword [rbp - 0x40], 0x39ee03fc
add dword [rbp - 0x40], 0x450bff1b
xor dword [rbp - 0x40], 0x1117b6fa
xor dword [rbp - 0x40], 0xfb00e09
add dword [rbp - 0x40], 0x2b281f0c
xor edx, edx
xchg rsp, rsp
mov dword [rbp - 0x3c], 0x4d84de41
add dword [rbp - 0x3c], 0x5d78129
sub dword [rbp - 0x3c], 0x49f815db
add dword [rbp - 0x3c], 0x2cb1e588
mov dword [rbp - 0x38], 0x6fe2db15
xor dword [rbp - 0x38], 0x384d4ef1
sub dword [rbp - 0x38], 0x2fbdd688
add dword [rbp - 0x38], 0x52b93cdb
xor dword [rbp - 0x38], 0x63c94098
mov ecx, edx
mov eax, 0x15c729b4
xor eax, 0x281ac5ee
sub eax, 0x3127fcd0
xor eax, 0x46155147
add eax, 0x2f85b2e4
rol eax, cl
mov rsi, rsi
xor al, byte [rbp + rdx - 0x40]
mov byte [rbp + rdx - 0x34], al
inc rdx
cmp rdx, 0xc
mov dword [rsp - 0x2c], 0x242d6242
jb 0x140135909
mov r9d, 0x56e127a5
sub r9d, 0xffe5f2f
sub r9d, 0x99a3f8a
xor r9d, 0x3d488713
mov qword [rsp + 0x20], 0x2a7b01b9
xor qword [rsp + 0x20], 0x43c2cb7e
add qword [rsp + 0x20], 0x10d8aa39
xor qword [rsp + 0x20], 0x7358576f
xor qword [rsp + 0x20], 0x9ca2263
lea r8, [rbp - 0x34]
xchg rdx, rdi
mov rdi, rdx
xchg rdx, rdi
xchg r14, r13
mov rcx, r13
xchg r13, r14
call fcn.140132d78
mov dword [rsp - 0x44], esp
mov rbx, rax
lea rdi, [rbp - 0x34]
xor eax, eax
lea ecx, [rax + 0xc]
mov r8, r8
rep stosb byte [rdi], al
test rbx, rbx
je 0x140135a7e
lea rdx, [rbp - 0x28]
mov rbx, rbx
lea rcx, [rbx + 0xc]
call fcn.14008f6a4
test dword [rbp - 7], 0x1000
jne 0x140135a7e
mov dword [rsp - 0x20], ebp
cmp byte [rbp - 0x1d], 0xe8
jne 0x140135a7e
lea rdx, [rbx + 0xc]
xchg rcx, rbx
mov rbx, r14
xchg rbx, rcx
call fcn.1400850e0
mov rbp, rbp
movzx edx, byte [rbp - 0x28]
add edx, dword [rbp - 0x13]
add edx, eax
mov dword [rsp - 0x14], edi
xchg rcx, rax
mov rcx, qword [rsi + 8]
xchg rcx, rax
xor rax, r12
add rdx, rax
xor rdx, r12
mov dword [rsp - 0x40], 0x2edaef92
mov qword [rsi + 0x20], rdx
cmp qword [rsi + 0x20], r12
setne al
lea r11, [rsp + 0x70]
xchg rdx, rdx
xchg rbx, r12
mov r12, qword [r11 + 0x20]
xchg r12, rbx
xchg rcx, rsi
mov rcx, qword [r11 + 0x28]
xchg rcx, rsi
mov rdi, qword [r11 + 0x30]
xchg r11, rsp
mov r11, rsp
xchg rsp, r11
nop
mov r14, qword [rsp]
add rsp, 8
nop
add rsp, 8
mov r12, qword [rsp - 8]
nop
mov rbp, qword [rsp]
add rsp, 8
ret
xor al, al
jmp 0x140135a38
Function at 0x404c20
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x404cba
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
test rax, rax
je 0x404c76
mov rdx, qword [rax + 0x18]
test rdx, rdx
je 0x404c85
movzx esi, byte [rax + 0x17]
test sil, 0x20
je 0x404c61
cmp rbx, rcx
sete al
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
nop
ret
mov rsi, qword [rdx]
mov rax, rbx
mov rbx, rcx
call rsi
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, 1
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
call fcn.0045d300
mov ecx, 0x1c
mov rdi, rax
mov rsi, rbx
xor eax, eax
lea rbx, [0x00ad979a]
nop
call fcn.00450540
call fcn.0040c740
mov rbx, rax
lea rax, [0x00a3d400]
call fcn.00438220
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
call fcn.00466260
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
nop dword [rax]
jmp fcn.00404c20

Function at 0x404d00
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x404d9b
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
test rax, rax
je 0x404d59
mov rax, qword [rax + 8]
mov rdx, qword [rax + 0x18]
test rdx, rdx
je 0x404d68
movzx esi, byte [rax + 0x17]
test sil, 0x20
je 0x404d44
cmp rbx, rcx
sete al
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov rsi, qword [rdx]
mov rax, rbx
mov rbx, rcx
call rsi
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, 1
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
call fcn.0045d300
mov ecx, 0x1c
mov rdi, rax
mov rsi, rbx
xor eax, eax
lea rbx, [0x00ad979a]
call fcn.00450540
call fcn.0040c740
mov rbx, rax
lea rax, [0x00a3d400]
call fcn.00438220
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
call fcn.00466260
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
nop
jmp fcn.00404d00
Function at 0x4053a0
Capabilities:
Reference sql statements

Disassembly:
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
mov qword [rsp + 0x20], rcx
mov qword [rsp + 0x78], rbx
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x60], r14
mov rdx, qword [r14 + 0x30]
mov rsi, r14
cmp qword [rdx + 0x90], rsi
je 0x40540a
nop dword [rax + rax]
call fcn.0043a300
lea rax, [0x00adb307]
mov ebx, 0x1e
call fcn.0043ac00
call fcn.0043a380
mov eax, 2
call fcn.00434440
mov rsi, qword [rsp + 0x60]
mov rax, qword [r14 + 0x30]
nop
inc dword [rax + 0x23c]
mov rax, qword [r14 + 0x30]
nop
mov rcx, r14
mov qword [rax + 0x130], rcx
mov rax, qword [r14 + 0x30]
mov qword [r14 + 0xe8], rax
mov rax, qword [rsi + 0x30]
mov qword [rsp + 0x68], rax
movups xmm0, xmmword [rax + 0x2c0]
movups xmmword [rsp + 0x28], xmm0
movups xmm0, xmmword [rax + 0x2d0]
movups xmmword [rsp + 0x38], xmm0
movups xmm0, xmmword [rax + 0x2e0]
movups xmmword [rsp + 0x48], xmm0
mov rcx, qword [rsi + 0x70]
mov qword [rsp + 0x58], rcx
mov rdx, qword [rsi + 0x78]
mov qword [rsp + 0x18], rdx
call fcn.00462a20
mov rax, qword [rsp + 0x60]
mov rcx, qword [rax + 0x30]
mov byte [rcx + 0xe8], 0
mov rcx, qword [rax + 0x30]
xor edx, edx
xchg dword [rcx + 0x330], edx
mov rbx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x20]
mov rax, qword [rsp + 0x70]
nop
call fcn.00405580
mov rax, qword [rsp + 0x60]
mov rcx, qword [rax + 0x30]
mov byte [rcx + 0xe8], 1
mov rcx, qword [rax + 0x30]
mov rdx, qword [rsp + 0x68]
nop
cmp rcx, rdx
jne 0x405565
mov qword [rsp + 0x68], rcx
nop
jmp 0x405501
lea rax, [0x00b12288]
mov qword [rsp], rax
nop dword [rax]
call fcn.00466120
xorps xmm15, xmm15
mov r14, qword [0x00f0c1e0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x68]
xor eax, eax
mov esi, 1
lock cmpxchg dword [rcx + 0x330], esi
sete dil
test dil, dil
je 0x4054d1
mov rbx, qword [rsp + 0x58]
mov rax, qword [rsp + 0x18]
call fcn.00442860
mov rcx, qword [rsp + 0x60]
mov rcx, qword [rcx + 0x30]
movups xmm0, xmmword [rsp + 0x28]
movups xmmword [rcx + 0x2c0], xmm0
movups xmm0, xmmword [rsp + 0x38]
movups xmmword [rcx + 0x2d0], xmm0
movups xmm0, xmmword [rsp + 0x48]
movups xmmword [rcx + 0x2e0], xmm0
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
lea rax, [0x00ae06bb]
mov ebx, 0x26
call fcn.004389c0
nop
int3
Function at 0x40ce00
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x40ceb7
sub rsp, 0x28
mov qword [rsp + 0x20], rbp
lea rbp, [rsp + 0x20]
mov qword [rsp + 0x30], rax
xor ebx, ebx
mov rcx, rbx
call fcn.00415ca0
test rax, rax
jne 0x40cea5
mov rax, qword [rsp + 0x30]
mov rcx, rax
shl rax, 0x10
or rax, 0x7ffff
sar rax, 0x13
shl rax, 3
cmp rcx, rax
jne 0x40ce55
mov rbp, qword [rsp + 0x20]
add rsp, 0x28
ret
call fcn.0043a300
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x18], rax
call fcn.0043a300
lea rax, [0x00ad9d82]
mov ebx, 0x1c
call fcn.0043ac00
mov rax, qword [rsp + 0x18]
nop
call fcn.0043aa60
call fcn.0043a560
call fcn.0043a380
lea rax, [0x00ad1263]
mov ebx, 0x12
nop dword [rax + rax]
call fcn.004389c0
lea rax, [0x00adf1c2]
mov ebx, 0x24
call fcn.004389c0
nop
mov qword [rsp + 8], rax
nop dword [rax]
call fcn.00466260
mov rax, qword [rsp + 8]
jmp fcn.0040ce00

Function at 0x40d2a0
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x40d3c0
sub rsp, 0x28
mov qword [rsp + 0x20], rbp
lea rbp, [rsp + 0x20]
mov rcx, qword [r14 + 0x30]
mov rdx, r14
nop
cmp qword [rcx], rdx
jne 0x40d3ae
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x18], rdx
mov rax, rcx
call fcn.00434d60
mov rcx, qword [rsp + 0x18]
mov rdx, qword [rcx + 0x30]
xor eax, eax
mov rbx, qword [rsp + 0x30]
lock cmpxchg qword [rbx], rdx
sete dl
test dl, dl
je 0x40d327
mov rdx, qword [rcx + 0x30]
mov byte [rdx + 0xe5], 1
mov rdx, qword [0x009c8250]
cmp qword [rdx], 0
je 0x40d314
jmp 0x40d3a4
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
call fcn.004349e0
jmp 0x40d348
cmp qword [rbx], 1
jne 0x40d337
mov rbp, qword [rsp + 0x20]
add rsp, 0x28
ret
lea rax, [0x00ada6a3]
mov ebx, 0x1d
call fcn.004389c0
mov rax, qword [rsp + 0x18]
mov rax, qword [rax + 0x30]
mov byte [rax + 0xe5], 0
mov rbp, qword [rsp + 0x20]
add rsp, 0x28
ret
mov eax, 0x989680
call fcn.004349e0
mov rcx, qword [0x009c8250]
mov rcx, qword [rcx]
mov qword [rsp], rcx
mov qword [rsp + 8], 0
call fcn.00468020
xorps xmm15, xmm15
mov r14, qword [0x00f0c1e0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rcx, qword [rsp + 0x18]
mov rbx, qword [rsp + 0x30]
mov rdx, qword [rbx]
test rdx, rdx
je 0x40d362
jmp 0x40d348
lea rax, [0x00ad24a2]
mov ebx, 0x13
call fcn.004389c0
nop
mov qword [rsp + 8], rax
call fcn.00466260
mov rax, qword [rsp + 8]
jmp fcn.0040d2a0