joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140052dd0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov dword [rsp - 0x10], 0x3c1baf34
nop
mov qword [rsp - 8], rdi
sub rsp, 8
nop
add rsp, 0x56de9cdb
sub rsp, 0x56de9d2b
movabs rbx, 0x428075085d3a7b74
sub rbx, 0x1090b579
xor rbx, 0x54e8614
xor rbx, 0x29eeead4
add rbx, 0xf268c21
xchg rdi, rcx
mov rcx, rdi
xchg rcx, rdi
cmp qword [rcx + 0x28], rbx
jne 0x140053018
mov eax, 0x6e2d1ad
xor eax, 0x70e838a1
xor eax, 0x1a5efe38
sub eax, 0x161666c8
sub eax, 0x563daf91
mov dword [rsp + 0x20], 0x7cbdbbd0
xor dword [rsp + 0x20], 0x1fed8802
sub dword [rsp + 0x20], 0x548b6407
sub dword [rsp + 0x20], 0xe94ced3
mov word [rsp + 0x30], ax
xor r8d, r8d
mov dword [rsp - 0x3c], ebp
mov dword [rsp + 0x24], 0x59cc1d5d
sub dword [rsp + 0x24], 0x4f4ca9d9
add dword [rsp + 0x24], 0x7332d2b9
sub dword [rsp + 0x24], 0x7d694540
mov dword [rsp + 0x28], 0x2495d088
add dword [rsp + 0x28], 0x58f48fdd
xor dword [rsp + 0x28], 0x34d5c279
sub dword [rsp + 0x28], 0x48eda197
mov dword [rsp + 0x2c], 0x17133804
sub dword [rsp + 0x2c], 0x5e21f5d
sub dword [rsp + 0x2c], 0x5968ce6
xor dword [rsp + 0x2c], 0xb8c8b3d
mov qword [rsp + 0x60], r8
xchg rdx, rax
mov rdx, qword [rsp + 0x60]
xchg rdx, rax
nop dword [rax + rax]
mov rcx, qword [rsp + 0x60]
mov dword [rsp - 0x3c], edi
mov rax, qword [rsp + 0x60]
and cl, 3
shl cl, 3
mov dword [rsp - 0x40], esi
movzx edx, word [rsp + rax*2 + 0x20]
mov eax, 0x29ea5db0
add eax, 0x5379e748
sub eax, 0x29d1c13e
xor eax, 0x1299c303
add eax, 0x398d1bfe
shr eax, cl
mov dword [rsp - 0xc], 0x3e58859a
movzx ecx, al
mov rax, qword [rsp + 0x60]
xor cx, dx
mov dword [rsp - 0x34], 0x6853f1ec
mov word [rsp + rax*2 + 0x32], cx
mov rax, qword [rsp + 0x60]
inc rax
xchg rdx, rdx
mov qword [rsp + 0x60], rax
xchg rdi, rax
mov rdi, qword [rsp + 0x60]
xchg rdi, rax
cmp rax, 9
jb 0x140052eea
mov dword [rsp - 0x38], 0x31cd7aa0
xor edx, edx
mov word [rsp + 0x44], r8w
lea rcx, [rsp + 0x32]
mov dword [rsp - 0x40], 0x7544d9b1
call fcn.14009cac0
mov rdx, rax
mov r8, rax
xor rdx, rbx
xchg r13, r13
xor eax, eax
mov qword [rdi + 0x28], rdx
lea rdi, [rsp + 0x32]
mov dword [rsp - 0x18], 0x6ae09abf
mov ecx, 0x1cadb4fc
add ecx, 0x3bcfeab4
xor ecx, 0x1736db00
sub ecx, 0x3cf9b69e
sub ecx, 0x12518e09
rep stosb byte [rdi], al
xchg r8, r8
cmp rdx, rbx
je 0x140053020
lea rdx, [0x1404df830]
mov rbp, rbp
xchg rcx, r14
mov r14, r8
xchg rcx, r14
call fcn.140065a10
mov dword [rsp - 0x20], 0x1a69ca95
test al, al
setne al
mov rbx, qword [rsp + 0x68]
mov dword [rsp - 0x24], esi
nop
sub rsp, 0x17e8c11e
add rsp, 0x17e8c16e
pop rdi
mov dword [rsp - 0x34], 0x4001a960
ret
mov al, 0x28
add al, 7
xor al, 0x10
sub al, 0x3e
mov rbx, qword [rsp + 0x68]
add rsp, 0x50
mov rsp, rsp
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret
Function at 0x1400535b0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov dword [rsp - 0x18], esp
nop
sub rsp, 8
mov qword [rsp], rdi
neg rsp
sub rsp, 0xffffffffffffffb0
neg rsp
movabs rbx, 0x428075083838b2f0
xor rbx, 0x3d740ee3
add rbx, 0x52a9def8
xor rbx, 0x38c6ae57
xchg rcx, r12
mov rdi, r12
xchg r12, rcx
cmp qword [rcx + 0x20], rbx
jne 0x1400537fc
mov eax, 0x16c259de
sub eax, 0x1244be50
xor eax, 0x73c8f8f9
sub eax, 0x222401e7
xor eax, 0x55916164
mov dword [rsp + 0x20], 0x3265e1c1
xor dword [rsp + 0x20], 0x2f4ac641
add dword [rsp + 0x20], 0x607bd30a
sub dword [rsp + 0x20], 0x7d76f9a6
mov word [rsp + 0x34], ax
xor r8d, r8d
mov r13, r13
mov dword [rsp + 0x24], 0x64a23681
add dword [rsp + 0x24], 0x13b015d1
xor dword [rsp + 0x24], 0x6b1b33e7
sub dword [rsp + 0x24], 0x13337eb8
mov dword [rsp + 0x28], 0x10cd92f8
add dword [rsp + 0x28], 0x30cb8a27
sub dword [rsp + 0x28], 0x2e841e31
sub dword [rsp + 0x28], 0x12a5fe13
mov dword [rsp + 0x2c], 0x59131a1a
xor dword [rsp + 0x2c], 0xa43f317
xor dword [rsp + 0x2c], 0x443e619
sub dword [rsp + 0x2c], 0x56bf0e6a
mov dword [rsp + 0x30], 0x538b4b03
sub dword [rsp + 0x30], 0x4ee31c4
xor dword [rsp + 0x30], 0x74d02378
xor dword [rsp + 0x30], 0x3f9feb68
sub dword [rsp + 0x30], 0x5a2d05c
xchg r8, rsi
mov qword [rsp + 0x60], rsi
xchg r8, rsi
xchg rsi, rax
mov rsi, qword [rsp + 0x60]
xchg rsi, rax
mov rcx, qword [rsp + 0x60]
mov dword [rsp - 0x10], esi
xchg rdi, rax
mov rdi, qword [rsp + 0x60]
xchg rdi, rax
and cl, 3
xchg rdi, rdi
shl cl, 3
movzx edx, word [rsp + rax*2 + 0x20]
mov eax, 0x6340fac
add eax, 0x52a7388
add eax, 0x4b5ca342
sub eax, 0x399dd69
add eax, 0x277713aa
shr eax, cl
xchg r9, r9
movzx ecx, al
xchg rbx, rax
mov rbx, qword [rsp + 0x60]
xchg rbx, rax
xor cx, dx
xchg rdx, rdx
mov word [rsp + rax*2 + 0x36], cx
mov rax, qword [rsp + 0x60]
inc rax
xchg rcx, rcx
xchg rdi, rax
mov qword [rsp + 0x60], rdi
xchg rdi, rax
xchg r12, rax
mov r12, qword [rsp + 0x60]
xchg r12, rax
cmp rax, 0xb
mov rsp, rsp
jb 0x1400536de
xor edx, edx
mov word [rsp + 0x4c], r8w
mov rdx, rdx
lea rcx, [rsp + 0x36]
call fcn.14009cac0
xchg rdx, rax
mov rax, rdx
xchg rdx, rax
xchg rcx, rax
mov r8, rcx
xchg rcx, rax
xor rdx, rbx
mov dword [rsp - 0x40], 0xa4b498e
xor eax, eax
xchg r10, rdx
mov qword [rdi + 0x20], r10
xchg rdx, r10
lea rdi, [rsp + 0x36]
mov ecx, 0x6a53e03c
xor ecx, 0x7242c100
xor ecx, 0x2e49c708
sub ecx, 0x3658e629
rep stosb byte [rdi], al
cmp rdx, rbx
mov dword [rsp - 0x18], ecx
je 0x140053804
lea rdx, [0x1404df2b8]
xchg r8, rcx
mov r8, rcx
xchg rcx, r8
call fcn.140065fa0
test al, al
mov dword [rsp - 0x34], ebp
setne al
xchg r11, rbx
mov r11, qword [rsp + 0x68]
xchg rbx, r11
nop
add rsp, 0x79ed4ece
sub rsp, 0x79ed4e7e
pop rdi
ret
mov al, 0x5e
sub al, 0x52
add al, 0x69
xor al, 0x74
mov rbx, qword [rsp + 0x68]
nop
add rsp, 0x1af15f68
sub rsp, 0x1af15f18
nop
mov rdi, qword [rsp]
add rsp, 8
ret
Function at 0x14006c1b0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rdi
mov dword [rsp - 0x24], edi
nop
sub rsp, 0x57a73f60
add rsp, 0x57a73f40
xchg rdx, rcx
mov rbx, rcx
xchg rdx, rcx
xchg rcx, r8
mov rdi, r8
xchg rcx, r8
nop
movabs rdx, 0xffffffff11a8eb3c
xor rdx, 0x537a9729
add rdx, 0x276e2149
sub rdx, 0x4bac40fb
add rdx, 0x7fffffff
add rdx, 0x616ba39d
nop word [rax + rax]
inc rdx
cmp word [rbx + rdx*2], 0
mov dword [rsp - 0xc], ecx
jne 0x14006c212
mov qword [rcx + 0x38], rdx
call fcn.1400189f0
xor r8d, r8d
mov dword [rsp - 0x44], 0x53c01b25
mov edx, 0x52b2816a
xor edx, 0x1e084edc
xor edx, 0x4f9b60e2
xor edx, 0x79b9f3e3
cmp qword [rdi + 0x38], r8
mov rcx, rcx
jbe 0x14006c2bb
sub rbx, rax
mov r9d, 0x14986993
sub r9d, 0xe68eb3c
add r9d, 0x4dc453f2
xor r9d, 0x1807b58c
sub r9d, 0x4bf466c6
nop word [rax + rax]
mov rcx, rcx
movzx ecx, dx
lea rax, [rax + 2]
and cx, r9w
ror edx, 2
ror edx, 5
ror edx, 1
xor cx, word [rbx + rax - 2]
inc r8
mov word [rax - 2], cx
mov dword [rsp - 0x40], 0x3c27d928
cmp r8, qword [rdi + 0x38]
jb 0x14006c28a
xchg rbx, rdx
mov rdx, qword [rsp + 0x30]
xchg rdx, rbx
xchg r14, rax
mov r14, rdi
xchg r14, rax
nop
add rsp, 0x3368bb48
sub rsp, 0x3368bb28
nop
mov rdi, qword [rsp]
add rsp, 8
ret
Function at 0x14006ccc0
Capabilities:
Encode data using xor

Disassembly:
xchg r15, rbx
mov qword [rsp + 8], r15
xchg rbx, r15
mov qword [rsp + 0x10], rsi
push rdi
mov dword [rsp - 0x10], ebx
nop
sub rsp, 0x200c9f6f
add rsp, 0x200c9f4f
mov rsi, qword [rcx + 0x38]
mov rcx, rcx
xchg rdx, rbx
mov rdx, rbx
xchg rbx, rdx
mov r8, qword [rdx + 0x38]
mov r14, r14
xchg rdi, r14
mov r14, rcx
xchg rdi, r14
add r8, rsi
mov rbx, rbx
xchg rbp, rdx
mov rbp, rsi
xchg rbp, rdx
mov qword [rcx + 0x38], r8
mov dword [rsp - 0x1c], edi
call fcn.14006d8d0
mov r9, qword [rbx]
mov ecx, esi
mov dword [rsp - 0x28], esi
and ecx, 3
mov r8d, 0x7f2aaa07
sub r8d, 0x43362f8a
sub r8d, 0x1d219243
xor r8d, 0x1fe3a6f
xor r8d, 0x65b48ee2
shl ecx, 3
mov edx, r8d
mov dword [rsp - 0x24], 0x5b072959
ror edx, cl
mov r10, rax
xor ecx, ecx
mov dword [rsp - 0x38], edi
cmp qword [rbx + 0x38], rcx
jbe 0x14006cddb
lea rax, [rsi + rsi]
mov rcx, rcx
mov r11d, 0x273803ad
xor r11d, 0x5e235aab
sub r11d, 0x16652722
sub r11d, 0x62b630e5
sub rax, r9
add r10, rax
mov rsi, rsi
nop dword [rax]
movzx eax, dx
lea r9, [r9 + 2]
mov dword [rsp - 0x14], edx
xor ax, r8w
ror edx, 8
and ax, r11w
ror r8d, 2
ror r8d, 6
xor ax, word [r9 - 2]
xchg rbx, rbx
inc rcx
mov word [r10 + r9 - 2], ax
cmp rcx, qword [rbx + 0x38]
jb 0x14006cd9f
xchg rdx, rdx
xchg rbx, r15
mov r15, qword [rsp + 0x30]
xchg r15, rbx
mov rax, rdi
xchg rsi, r8
mov r8, qword [rsp + 0x38]
xchg r8, rsi
nop
sub rsp, 0x2186807f
add rsp, 0x2186809f
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret

Function at 0x14006ce10
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov dword [rsp - 0x38], 0x389d4d9b
push r14
nop
add rsp, 0x5aa1f30
sub rsp, 0x5aa1f50
xchg rbp, r14
mov rbp, qword [rcx + 0x38]
xchg rbp, r14
xchg rdx, rsp
mov rdi, rsp
xchg rdx, rsp
xchg rsi, r13
mov r13, rcx
xchg r13, rsi
nop
movabs rbx, 0xffffffff6963d684
sub rbx, 0x2c8f365a
sub rbx, 0x26701d22
add rbx, 0x7fffffff
add rbx, 0x699b7cf8
inc rbx
cmp word [rdx + rbx*2], 0
xchg r9, r9
jne 0x14006ce7b
lea r8, [r14 + rbx]
xchg rcx, r14
mov rdx, rcx
xchg r14, rcx
mov qword [rcx + 0x38], r8
call fcn.14006d8d0
mov ecx, r14d
mov dword [rsp - 0x1c], ebp
mov edx, 0xec3ed54
add edx, 0x4476e06b
sub edx, 0x433c7edd
xor edx, 0x75661255
and ecx, 3
shl ecx, 1
shl ecx, 2
ror edx, cl
test rbx, rbx
mov dword [rsp - 0x40], 0x2e369847
je 0x14006cf35
lea r8, [r14 + r14]
mov ecx, 0x259b9927
add ecx, 0x83e366a
add ecx, 0x17ca0fac
sub ecx, 0x45a3de3e
sub r8, rdi
add r8, rax
mov r12, r12
nop dword [rax]
nop dword [rax + rax]
movzx eax, dx
mov rsi, rsi
lea rdi, [rdi + 2]
and ax, cx
ror edx, 8
mov rsp, rsp
xor ax, word [rdi - 2]
mov word [r8 + rdi - 2], ax
sub rbx, 1
jne 0x14006cf0b
xchg r9, r9
mov rbx, qword [rsp + 0x30]
xchg rsi, r13
mov rax, r13
xchg rsi, r13
xchg rdx, rsi
mov rdx, qword [rsp + 0x38]
xchg rsi, rdx
mov rdi, qword [rsp + 0x40]
xchg rbp, rbp
sub rsp, 0xffffffffffffffe0
pop r14
ret
Function at 0x14006d721
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
xchg rbp, r11
mov qword [rsp + 0x18], r11
xchg rbp, r11
push rsi
push rdi
nop
sub rsp, 8
mov qword [rsp], r14
neg rsp
sub rsp, 0xffffffffffffffe0
neg rsp
lea rsi, [rdx + 8]
mov r14, r14
xorps xmm0, xmm0
xchg rsi, rcx
mov qword [rdx], rcx
xchg rcx, rsi
xor edi, edi
xchg rsi, r9
movups xmmword [r9], xmm0
xchg rsi, r9
xchg r9, rdi
mov r14, rdi
xchg rdi, r9
xchg rbp, r8
mov r8, rbp
xchg r8, rbp
xchg rsi, rdi
movups xmmword [rdi + 0x10], xmm0
xchg rsi, rdi
xchg rdx, rbx
mov rdx, rbx
xchg rbx, rdx
xchg rdi, rsi
movups xmmword [rdi + 0x20], xmm0
xchg rsi, rdi
mov qword [rdx + 0x38], rdi
mov dword [rsp - 0x38], ecx
xchg rbp, rax
mov rbp, qword [rcx + 0x38]
xchg rbp, rax
cmp r8, rax
jae 0x14006d857
sub rax, r8
mov dword [rsp - 0x34], ebp
xchg r15, r13
mov qword [rsp + 0x40], r13
xchg r13, r15
cmp rax, r9
mov dword [rsp - 0x3c], 0x33e030f3
cmovb r14, rax
mov qword [rdx + 0x38], r14
mov rax, qword [rcx]
xchg rcx, rbp
mov rbp, qword [rdx]
xchg rbp, rcx
lea r15, [rax + r8*2]
xchg rsp, rsp
cmp rcx, rsi
je 0x14006d6f2
call fcn.1400bbca0
cmp r14, 0x18
mov rcx, rcx
jbe 0x14006d732
lea rcx, [r14 + r14]
call fcn.1400bbfa0
xchg r13, rax
mov qword [rbx], r13
xchg r13, rax
test rax, rax
xchg rdx, rdx
jne 0x14006d73c
xchg r12, rsi
mov qword [rbx], r12
xchg rsi, r12
xchg rdi, r9
mov rdi, r9
xchg rdi, r9
jmp 0x14006d75f
mov qword [rbx], rsi
mov rax, rsi
mov dword [rsp - 0x2c], edi
xorps xmm0, xmm0
xchg r12, rax
movups xmmword [r12], xmm0
xchg r12, rax
xchg rdi, rax
movups xmmword [rdi + 0x10], xmm0
xchg rdi, rax
movups xmmword [rax + 0x20], xmm0
mov dword [rsp - 0x44], 0x42645d4
mov r9, qword [rbx]
and ebp, 3
mov r8d, 0x528e8f81
sub r8d, 0x142acd14
add r8d, 0x1651c8d1
add r8d, 0x25e2d179
shl ebp, 2
shl ebp, 1
mov edx, r8d
mov dword [rsp - 0x28], esi
movzx ecx, bpl
ror edx, cl
cmp qword [rbx + 0x38], rdi
mov dword [rsp - 0xc], edx
jbe 0x14006d81a
sub r15, r9
mov ecx, 0x7714e9f5
sub ecx, 0x5da736df
xor ecx, 0x62a817ea
xor ecx, 0x40f83eec
xor ecx, 0x3b3d9aef
nop dword [rax]
nop word [rax + rax]
movzx eax, dx
mov dword [rsp - 0xc], 0x27fa78a2
lea r9, [r9 + 2]
xor ax, r8w
ror edx, 1
ror edx, 6
ror edx, 1
and ax, cx
mov dword [rsp - 0xc], 0x7ac365f3
ror r8d, 3
ror r8d, 5
xor ax, word [r15 + r9 - 2]
mov dword [rsp - 0x34], 0x282add20
inc rdi
mov word [r9 - 2], ax
cmp rdi, qword [rbx + 0x38]
jb 0x14006d7ca
xchg rsp, rsp
mov r15, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x48]
xchg rdx, rdx
xchg rbp, r11
mov r11, qword [rsp + 0x50]
xchg rbp, r11
sub rsp, 0xffffffffffffffe0
nop
mov r14, qword [rsp]
add rsp, 8
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
add rsp, 8
mov rsi, qword [rsp - 8]
ret
mov rax, rbx
jmp 0x14006d822
Function at 0x140070e40
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r11
mov qword [rsp + 0x10], r11
xchg r11, rbx
mov qword [rsp + 0x18], rbp
nop
sub rsp, 8
mov qword [rsp], rsi
nop
push 0x549aa706
mov qword [rsp], rdi
push r14
sub rsp, 0x2a719b0b
add rsp, 0x2a719a5b
mov r14d, edx
xchg rcx, rsi
mov rcx, rsi
xchg rcx, rsi
xchg rdx, r11
mov r11, r9
xchg r11, rdx
lea rcx, [rsp + 0x20]
mov r14, r14
mov ebp, r8d
call fcn.1400341d0
mov rax, qword [rsp + 0xa8]
mov edi, 0x1ecf0de2
sub edi, 0x1cb1af0
add edi, 0x4da89f18
xor edi, 0x10916d26
sub edi, 0x7a3d7f2d
cmp rax, rdi
jbe 0x140070ee0
mov rbp, rbp
mov ecx, edi
call fcn.1400bbad0
xchg rbx, rsi
mov rsi, rax
xchg rbx, rsi
xor edx, edx
jmp 0x140070f09
xchg r10, rax
mov rcx, r10
xchg r10, rax
mov rdi, rax
xchg r10, r10
call fcn.1400bbad0
xor edx, edx
xchg rbx, r8
mov r8, rax
xchg r8, rbx
test rdi, rdi
mov r13, r13
je 0x140070f2f
xchg r9, rax
mov r9, qword [rsp + 0x20]
xchg r9, rax
movzx ecx, byte [rax + rdx]
xor cl, 0x37
mov byte [rdx + rbx], cl
xchg rdi, rdi
inc rdx
cmp rdx, rdi
jb 0x140070f09
mov dword [rsp - 0x2c], edx
mov r8d, ebp
mov edx, r14d
mov rcx, rsi
call fcn.14006e890
mov rcx, rcx
xchg rbx, r13
mov qword [rax + 8], r13
xchg rbx, r13
mov byte [rax + 4], 0x16
add byte [rax + 4], 0x58
add byte [rax + 4], 0xe
sub byte [rax + 4], 0xc
xor byte [rax + 4], 0x74
mov word [rax + 5], di
mov r14, r14
lea rax, [rsp + 0x28]
mov rcx, qword [rsp + 0x20]
mov byte [rsi + 8], 0x54
sub byte [rsi + 8], 0x45
sub byte [rsi + 8], 0xf
add byte [rsi + 8], 1
cmp rcx, rax
jne 0x140070fb0
xchg rdi, rdi
lea rdi, [rsp + 0x28]
xor eax, eax
mov ecx, 0x13b0d5c6
add ecx, 0x691857ec
sub ecx, 0x4d8be569
xor ecx, 0x2f3d48c9
rep stosb byte [rdi], al
jmp 0x140070fb5
call fcn.1400bbca0
lea r11, [rsp + 0xb0]
mov dword [rsp - 0x28], 0x70859a24
xchg rsi, rbx
mov rsi, qword [r11 + 0x28]
xchg rbx, rsi
xchg rbp, rcx
mov rcx, qword [r11 + 0x30]
xchg rcx, rbp
xchg rsp, r11
mov r11, rsp
xchg r11, rsp
pop r14
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
add rsp, 8
mov rsi, qword [rsp - 8]
ret
Function at 0x1400949d0
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400adc57
xchg r10, rbx
mov rbx, rcx
xchg r10, rbx
mov eax, dword [0x1404dff90]
cmp qword [0x1404e0078], 0
mov dword [rsp - 0x10], 0x762ccf8f
jne 0x1400ad9e0
syscall
ret

Function at 0x1400949f0
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x28]
mov byte [rsp + 0x28], al
mov dword [rsp - 0x44], ecx
jmp 0x1400ae2ae
mov r10, rcx
mov eax, dword [0x1404e0028]
mov rsp, rsp
cmp qword [0x1404e0078], 0
jne 0x1400ad9e0
syscall
mov dword [rsp - 0x30], ebp
ret

Function at 0x140094a10
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400ada55
mov r10, rcx
mov eax, dword [0x1404dff60]
mov dword [rsp - 0x40], ebx
cmp qword [0x1404e0078], 0
jne 0x1400ad9e0
syscall
ret

Function at 0x140094a20
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400ae00c
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x1404dffe8]
cmp qword [0x1404e0078], 0
mov dword [rsp - 0x14], 0xe19c079
jne 0x1400ad9e0
syscall
ret

Function at 0x140094a30
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400adeb7
xchg r13, r10
mov r13, rcx
xchg r13, r10
mov eax, dword [0x1404dffc8]
mov dword [rsp - 0x10], ebx
cmp qword [0x1404e0078], 0
jne 0x1400ad9e0
syscall
ret

Function at 0x140094a40
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400adaaf
xchg rdi, r10
mov rdi, rcx
xchg r10, rdi
mov eax, dword [0x1404dff68]
mov r10, r10
cmp qword [0x1404e0078], 0
jne 0x1400ad9e0
syscall
ret

Function at 0x140094a50
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400ae13f
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x1404e0004]
cmp qword [0x1404e0078], 0
jne 0x1400ad9e0
mov rdx, rdx
syscall
ret

Function at 0x140094a60
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400ae168
mov r10, rcx
mov eax, dword [0x1404e0008]
cmp qword [0x1404e0078], 0
mov r11, r11
jne 0x1400ad9e0
syscall
ret

Function at 0x140094a70
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400ae08f
xchg rcx, r12
mov r10, r12
xchg rcx, r12
mov eax, dword [0x1404dfff4]
cmp qword [0x1404e0078], 0
jne 0x1400ad9e0
mov r11, r11
syscall
ret

Function at 0x140094a80
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400ae0b8
xchg r9, rcx
mov r10, r9
xchg rcx, r9
mov eax, dword [0x1404dfff8]
mov dword [rsp - 0x3c], ebx
cmp qword [0x1404e0078], 0
jne 0x1400ad9e0
syscall
mov dword [rsp - 0x28], 0x61a7d90
ret

Function at 0x140094a90
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400adc85
xchg r13, rcx
mov r10, r13
xchg r13, rcx
mov eax, dword [0x1404dff94]
mov dword [rsp - 0x14], edi
cmp qword [0x1404e0078], 0
jne 0x1400ad9e0
syscall
mov dword [rsp - 0x24], 0x81db229
ret

Function at 0x140094ab0
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400adfb0
xchg r9, rcx
mov r10, r9
xchg rcx, r9
mov eax, dword [0x1404dffe0]
mov dword [rsp - 0x40], 0x278ea978
cmp qword [0x1404e0078], 0
jne 0x1400ad9e0
syscall
ret

Function at 0x140094ac0
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400ada7d
xchg r10, rdi
mov rdi, rcx
xchg rdi, r10
mov eax, dword [0x1404dff64]
cmp qword [0x1404e0078], 0
mov dword [rsp - 0x14], 0x69969b5c
jne 0x1400ad9e0
syscall
ret
Function at 0x140094ad0
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400ae03a
mov r10, rcx
mov eax, dword [0x1404dffec]
mov dword [rsp - 0x20], 0x1abd56da
cmp qword [0x1404e0078], 0
jne 0x1400ad9e0
syscall
ret

Function at 0x140094ae0
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400ade5d
mov r10, rcx
mov dword [rsp - 0xc], ebx
mov eax, dword [0x1404dffc0]
cmp qword [0x1404e0078], 0
jne 0x1400ad9e0
mov dword [rsp - 0x20], 0x3623216f
syscall
ret

Function at 0x140094af0
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400ade89
xchg r13, rcx
mov r10, r13
xchg rcx, r13
mov eax, dword [0x1404dffc4]
mov dword [rsp - 0x1c], 0x79f5d7f
cmp qword [0x1404e0078], 0
jne 0x1400ad9e0
syscall
ret

Function at 0x140094b00
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400add07
xchg rsp, r10
mov rsp, rcx
xchg r10, rsp
mov eax, dword [0x1404dffa0]
cmp qword [0x1404e0078], 0
mov dword [rsp - 0x1c], 0x2d9fcb61
jne 0x1400ad9e0
syscall
ret

Function at 0x140094b10
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x58]
mov r11, r11
mov byte [rsp + 0x58], al
movzx eax, byte [rsp + 0x48]
mov byte [rsp + 0x48], al
mov dword [rsp - 0x44], edx
jmp 0x1400ae28a
mov r10, rcx
mov eax, dword [0x1404e0024]
mov dword [rsp - 0x14], esi
cmp qword [0x1404e0078], 0
jne 0x1400ad9e0
syscall
ret

Function at 0x140094b30
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400adb7f
xchg rcx, r12
mov r10, r12
xchg rcx, r12
mov eax, dword [0x1404dff7c]
cmp qword [0x1404e0078], 0
mov dword [rsp - 0x34], 0xe5fa67a
jne 0x1400ad9e0
syscall
ret

Function at 0x140094b40
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400adbad
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x1404dff80]
cmp qword [0x1404e0078], 0
xchg rsi, rsi
jne 0x1400ad9e0
syscall
ret

Function at 0x140094b50
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400adbd6
xchg rcx, rdx
mov r10, rdx
xchg rcx, rdx
mov eax, dword [0x1404dff84]
cmp qword [0x1404e0078], 0
mov r10, r10
jne 0x1400ad9e0
syscall
ret

Function at 0x140094b60
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400adbff
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x1404dff88]
mov dword [rsp - 0x3c], ebp
cmp qword [0x1404e0078], 0
jne 0x1400ad9e0
syscall
ret

Function at 0x140094b70
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400adb52
xchg r10, r13
mov r13, rcx
xchg r13, r10
mov eax, dword [0x1404dff78]
mov dword [rsp - 0xc], edi
cmp qword [0x1404e0078], 0
jne 0x1400ad9e0
syscall
mov r13, r13
ret

Function at 0x140094b80
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400ae0ea
xchg r10, r11
mov r11, rcx
xchg r11, r10
mov eax, dword [0x1404dfffc]
cmp qword [0x1404e0078], 0
jne 0x1400ad9e0
mov rcx, rcx
syscall
ret

Function at 0x140094b90
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400adc29
xchg rcx, r12
mov r10, r12
xchg r12, rcx
mov eax, dword [0x1404dff8c]
mov dword [rsp - 0x24], 0x6d890e05
cmp qword [0x1404e0078], 0
jne 0x1400ad9e0
syscall
ret

Function at 0x140094ba0
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400adad8
xchg r13, rcx
mov r10, r13
xchg r13, rcx
mov eax, dword [0x1404dff6c]
cmp qword [0x1404e0078], 0
mov rcx, rcx
jne 0x1400ad9e0
syscall
ret
Function at 0x140094bb0
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400adcb7
mov r10, rcx
mov eax, dword [0x1404dff98]
xchg r12, r12
cmp qword [0x1404e0078], 0
jne 0x1400ad9e0
syscall
mov dword [rsp - 0x44], edx
ret

Function at 0x140094be0
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400ae2d5
sub rsp, 0x1673688e
add rsp, 0x1673676e
lea rcx, [0x1400ada48]
push rcx
mov r8, r8
nop
sub rsp, 8
mov qword [rsp], rbp
push rsi
mov dword [rsp - 0x20], esp
nop
mov qword [rsp - 8], rdi
sub rsp, 8
push qword [0x1404e0080]
lea rsi, [rsp + 0x170]
mov dword [rsp - 0x2c], ebx
lea rdi, [rsp + 0x28]
mov ecx, 0xe3266a5
add ecx, 0x440ccef8
xor ecx, 0x45488c7e
xor ecx, 0x1777b9f3
rep movsq qword [rdi], qword [rsi]
jmp qword [0x1404e0078]
mov r10, rcx
mov eax, dword [0x1404e002c]
mov dword [rsp - 0x10], edi
cmp qword [0x1404e0078], 0
jne 0x1400ad9e0
syscall
xchg r14, r14
ret

Function at 0x140094bf0
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400adb25
xchg r14, r10
mov r14, rcx
xchg r10, r14
mov eax, dword [0x1404dff74]
mov dword [rsp - 0x2c], esi
cmp qword [0x1404e0078], 0
jne 0x1400ad9e0
syscall
mov rbx, rbx
ret

Function at 0x140094c00
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400ae25a
mov r10, rcx
mov eax, dword [0x1404e0020]
mov dword [rsp - 0x18], 0x2a40dd0f
cmp qword [0x1404e0078], 0
jne 0x1400ad9e0
syscall
mov dword [rsp - 0x34], 0x6ac3afd
ret

Function at 0x140094c10
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400ae113
xchg rcx, r15
mov r10, r15
xchg r15, rcx
mov eax, dword [0x1404e0000]
mov rsi, rsi
cmp qword [0x1404e0078], 0
jne 0x1400ad9e0
syscall
mov rsi, rsi
ret

Function at 0x140094c20
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400ae20c
xchg rbx, rcx
mov r10, rbx
xchg rbx, rcx
mov eax, dword [0x1404e0018]
cmp qword [0x1404e0078], 0
jne 0x1400ad9e0
mov dword [rsp - 0x2c], edx
syscall
ret

Function at 0x140094c30
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400adfde
xchg rcx, rbx
mov r10, rbx
xchg rbx, rcx
mov eax, dword [0x1404dffe4]
cmp qword [0x1404e0078], 0
mov dword [rsp - 0x20], 0x1f1f9768
jne 0x1400ad9e0
syscall
ret

Function at 0x140094c40
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400ae236
mov r10, rcx
mov eax, dword [0x1404e001c]
cmp qword [0x1404e0078], 0
mov dword [rsp - 0x40], edi
jne 0x1400ad9e0
syscall
ret

Function at 0x140094c50
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400adb01
mov r10, rcx
mov eax, dword [0x1404dff70]
cmp qword [0x1404e0078], 0
mov dword [rsp - 0x24], esi
jne 0x1400ad9e0
syscall
ret

Function at 0x140094c60
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400adcde
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x1404dff9c]
cmp qword [0x1404e0078], 0
jne 0x1400ad9e0
mov r13, r13
syscall
ret