joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400589f0
Capabilities:
Encode data using xor

Disassembly:
xchg rdx, rbx
mov qword [rsp + 0x10], rdx
xchg rdx, rbx
xchg rbp, r11
mov qword [rsp + 0x18], r11
xchg rbp, r11
push rdi
mov qword [rsp], rsi
nop
sub rsp, 8
mov qword [rsp], rdi
nop
mov qword [rsp - 8], r14
sub rsp, 8
add rsp, 0xffffffffffffffe0
lea rsi, [rdx + 8]
xchg rdx, rdx
xorps xmm0, xmm0
mov qword [rdx], rsi
xor edi, edi
mov dword [rsp - 0xc], 0x3e99e56c
movups xmmword [rsi], xmm0
xchg r14, rcx
mov rcx, r9
xchg rcx, r14
xchg r8, r14
mov rbp, r14
xchg r14, r8
xchg rsi, r13
movups xmmword [r13 + 0x10], xmm0
xchg r13, rsi
mov rbx, rdx
xchg rsi, rcx
movups xmmword [rcx + 0x20], xmm0
xchg rcx, rsi
mov qword [rdx + 0x38], rdi
mov dword [rsp - 0x14], 0x3822ef9
xchg r10, rax
mov r10, qword [rcx + 0x38]
xchg r10, rax
cmp r8, rax
xchg r15, r15
jae 0x140058c1f
sub rax, r8
mov qword [rsp + 0x40], r15
mov dword [rsp - 0x20], 0x105ddea0
cmp rax, r9
cmovb r14, rax
mov qword [rdx + 0x38], r14
mov dword [rsp - 0x2c], 0x34f8026d
mov rax, qword [rcx]
xchg rsi, rcx
mov rsi, qword [rdx]
xchg rcx, rsi
lea r15, [rax + r8*2]
cmp rcx, rsi
je 0x140058aca
mov r15, r15
call fcn.1400bb730
cmp r14, 0x18
jbe 0x140058b04
xchg r14, r14
lea rcx, [r14 + r14]
call fcn.1400bba10
xchg r11, rax
mov qword [rbx], r11
xchg r11, rax
test rax, rax
jne 0x140058b0e
xchg rsi, rsi
mov qword [rbx], rsi
xchg r9, rdi
mov rdi, r9
xchg rdi, r9
jmp 0x140058b2b
mov qword [rbx], rsi
xchg r13, rax
mov r13, rsi
xchg r13, rax
xorps xmm0, xmm0
mov dword [rsp - 0x14], esi
xchg rdi, rax
movups xmmword [rdi], xmm0
xchg rdi, rax
movups xmmword [rax + 0x10], xmm0
xchg rcx, rax
movups xmmword [rcx + 0x20], xmm0
xchg rcx, rax
mov r9, qword [rbx]
and ebp, 3
mov dword [rsp - 0x1c], esp
mov r8d, 0x3d25be79
add r8d, 0xb2506c9
sub r8d, 0x3b33834d
add r8d, 0x4b240309
sub r8d, 0x14d7e3bc
shl ebp, 1
shl ebp, 1
shl ebp, 1
mov edx, r8d
movzx ecx, bpl
mov dword [rsp - 0x40], 0x21cbad5
ror edx, cl
cmp qword [rbx + 0x38], rdi
jbe 0x140058be7
sub r15, r9
mov rbx, rbx
mov ecx, 0x5e51759e
sub ecx, 0x5c33b738
xor ecx, 0x55f3b947
xor ecx, 0x2ef7f47d
xor ecx, 0x7919f3a3
nop dword [rax]
mov rdi, rdi
nop word [rax + rax]
movzx eax, dx
lea r9, [r9 + 2]
mov rbp, rbp
xor ax, r8w
ror edx, 7
ror edx, 1
and ax, cx
xchg r10, r10
ror r8d, 7
ror r8d, 1
xor ax, word [r15 + r9 - 2]
mov dword [rsp - 0x10], ebx
inc rdi
mov word [r9 - 2], ax
cmp rdi, qword [rbx + 0x38]
xchg rdi, rdi
jb 0x140058ba8
xchg r15, rdi
mov rdi, qword [rsp + 0x40]
xchg rdi, r15
mov rax, rbx
mov rbx, qword [rsp + 0x48]
mov r14, r14
mov rbp, qword [rsp + 0x50]
nop
sub rsp, 0x2e0dbb6b
add rsp, 0x2e0dbb8b
pop r14
pop rdi
nop
add rsp, 8
mov rsi, qword [rsp - 8]
ret
xchg rbx, rdx
mov rax, rdx
xchg rdx, rbx
jmp 0x140058bf5
Function at 0x14005bb0c
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg rbp, r8
mov qword [rsp + 0x10], r8
xchg rbp, r8
mov qword [rsp + 0x18], rsi
mov rsp, rsp
push rdi
push r14
push r15
sub rsp, 0x525eec94
add rsp, 0x525eebe4
mov r15d, edx
xchg rbp, rcx
mov rcx, rbp
xchg rcx, rbp
mov rdx, r9
mov dword [rsp - 0x1c], esi
lea rcx, [rsp + 0x20]
mov r14d, r8d
call fcn.1400310d0
mov dword [rsp - 0x38], esi
mov rbx, qword [rsp + 0xa8]
mov eax, 0x42c221e4
xor eax, 0x6d200148
sub eax, 0x26e49c42
sub eax, 0x8fd046b
cmp rbx, rax
cmova rbx, rax
mov dword [rsp - 0x14], edx
xchg rbx, rcx
mov rbx, rcx
xchg rbx, rcx
call fcn.1400bb5d0
xchg rcx, rcx
xor edi, edi
mov rsi, rax
test rbx, rbx
xchg r12, r12
je 0x14005bbc9
mov rcx, qword [rsp + 0x20]
mov dl, byte [rcx + rdi]
mov dword [rsp - 0x40], 0x3c2ffe68
xor dl, 0x37
mov byte [rdi + rax], dl
inc rdi
cmp rdi, rbx
xchg r14, r14
jb 0x14005bba4
mov r8d, r14d
mov edx, r15d
xchg rsi, rbp
mov rcx, rsi
xchg rsi, rbp
call fcn.140059c88
mov dword [rsp - 0x28], 0x43a43fec
xchg rsp, rsi
mov qword [rax + 8], rsp
xchg rsp, rsi
mov byte [rax + 4], 0x19
xor byte [rax + 4], 0x50
sub byte [rax + 4], 0x28
sub byte [rax + 4], 0x1d
add byte [rax + 4], 0
mov word [rax + 5], bx
lea rax, [rsp + 0x28]
xchg r11, r11
mov rcx, qword [rsp + 0x20]
mov byte [rbp + 8], 2
xor byte [rbp + 8], 0x59
sub byte [rbp + 8], 0x47
xor byte [rbp + 8], 0x15
cmp rcx, rax
mov dword [rsp - 0x28], 0x15c49f35
jne 0x14005bc5d
lea rdi, [rsp + 0x28]
xor eax, eax
mov rsi, rsi
mov ecx, 0x11b382f9
xor ecx, 0x70516b0d
sub ecx, 0x1254d865
sub ecx, 0x4f8e110f
rep stosb byte [rdi], al
jmp 0x14005bc62
call fcn.1400bb730
lea r11, [rsp + 0xb0]
mov dword [rsp - 0x14], ecx
mov rbx, qword [r11 + 0x20]
xchg r15, rbp
mov r15, qword [r11 + 0x28]
xchg r15, rbp
xchg r13, rsi
mov r13, qword [r11 + 0x30]
xchg r13, rsi
xchg rsp, r13
mov r13, r11
xchg r13, rsp
nop
add rsp, 8
mov r15, qword [rsp - 8]
nop
add rsp, 8
mov r14, qword [rsp - 8]
pop rdi
mov dword [rsp - 0x20], 0x75502c78
ret
Function at 0x14005ef18
Capabilities:
Hash data using murmur3

Disassembly:
mov rax, qword [rdx + 0x138]
movabs rcx, 0x1314079c20c624f7
add rcx, 0x2336081d
add rcx, 0x1477b9ce
xor rcx, 0x24a8c938
rol rax, 0xf
rol rax, 0xd
rol rax, 5
rol rax, 2
rol rax, 1
rol rax, 1
rol rax, 1
rol rax, 1
not rax
sub rax, rcx
movabs rcx, 0x78c20d3b5940f5c8
add rcx, 0x9ee98
xor rcx, 0x1436b122
add rcx, 0x6d65676
add rcx, 0x55652622
xor rax, rcx
mov dword [rsp - 0x28], 0x351efd55
movabs rcx, 0x1f312ad229b98d62
add rcx, 0x536cbd6c
xor rcx, 0x1bd6e5f1
sub rcx, 0x39e8f7b
add rcx, 0x7fffffff
sub rcx, 0x460c1a5c
add rax, rcx
mov dword [rsp - 0x34], edi
ror rax, 0x1b
ror rax, 0xc
ror rax, 9
ror rax, 1
movzx eax, word [rax + 4]
mov r15, r15
mov dword [0x140489fcc], eax
mov al, 0x2d
xor al, 0x30
add al, 0x27
xor al, 0x45
ret

Function at 0x140067e90
Capabilities:
Hash data using murmur3

Disassembly:
push rbx
mov dword [rsp - 0x38], 0x388783aa
add rsp, 0xffffffffffffffe0
xchg rdx, rbx
mov rdx, rbx
xchg rbx, rdx
mov edx, 0x778cbb0a
sub edx, 0x1f09fbe1
add edx, 0x15354d2
xor edx, 0xc356f672
call fcn.14009fff0
mov dword [rsp - 0x44], ecx
xor ecx, ecx
test rax, rax
je 0x140067f41
not rax
mov dword [rsp - 0x10], 0x19b57f57
movabs rcx, 0x20c8e915053abf87
xor rcx, 0x30797e68
xor rcx, 0x1dcf34ce
add rcx, 0x7fffffff
xor rcx, 0x6d0fe91a
rol rax, 0xf
rol rax, 0xd
rol rax, 9
rol rax, 1
rol rax, 1
xor rax, rcx
mov cl, 0x5f
xor cl, 0x1f
xor cl, 0x6b
add cl, 8
sub cl, 0x32
ror rax, 0xf
ror rax, 0x10
ror rax, 0x18
ror rax, 4
xchg rsp, rax
mov qword [rbx + 0x160], rsp
xchg rsp, rax
mov al, cl
sub rsp, 0xffffffffffffffe0
nop
mov rbx, qword [rsp]
add rsp, 8
ret
Function at 0x14006d1b4
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r10
mov qword [rsp + 0x10], r10
xchg r10, rbx
xchg r13, rsi
mov qword [rsp + 0x18], r13
xchg rsi, r13
mov qword [rsp + 0x20], rdi
mov rcx, rcx
push rbp
xchg rbp, rsp
mov rsp, rbp
xchg rsp, rbp
add rsp, 0xffffffffffffffa0
movabs rbx, 0x4ef446ac423e5db7
sub rbx, 0x39169f18
add rbx, 0x51daced
xor rbx, 0x507614a1
xchg rdi, r11
mov r11, rcx
xchg rdi, r11
cmp qword [rcx + 0x30], rbx
mov dword [rsp - 0x44], esp
jne 0x14006d3d8
xor esi, esi
mov dword [rbp - 0x40], 0x107b5cd5
xor dword [rbp - 0x40], 0x11101f4d
add dword [rbp - 0x40], 0x879b94c
add dword [rbp - 0x40], 0x4aee55ce
sub dword [rbp - 0x40], 0x54ce52af
mov dword [rbp - 0x3c], 0x5b7e77a0
xor dword [rbp - 0x3c], 0x5b9a70c4
add dword [rbp - 0x3c], 0x5bee659c
add dword [rbp - 0x3c], 0x30cd8dd
xor dword [rbp - 0x3c], 0x5ffd45c8
mov r8d, 0x3bbc03f2
add r8d, 0x2e204821
xor r8d, 0x5e44c479
add r8d, 0x408ec9d8
sub r8d, 0x7827523f
mov dword [rbp - 0x38], 0x4f93a351
add dword [rbp - 0x38], 0x10e6a89d
xor dword [rbp - 0x38], 0x1b3b1e91
sub dword [rbp - 0x38], 0x7b39554d
mov dword [rbp - 0x34], 0x41b49ad6
add dword [rbp - 0x34], 0x189a1b24
xor dword [rbp - 0x34], 0x26b413f7
xor dword [rbp - 0x34], 0x7c8ba65d
mov dword [rbp - 0x30], 0x36db57ab
xor dword [rbp - 0x30], 0x5db18f57
xor dword [rbp - 0x30], 0x63296fc7
sub dword [rbp - 0x30], 0x83eb6cf
mov dword [rbp - 0x2c], 0x554adc5
xor dword [rbp - 0x2c], 0x69b29cf4
xor dword [rbp - 0x2c], 0x3199c323
sub dword [rbp - 0x2c], 0x3c9597bf
xor dword [rbp - 0x2c], 0x20c55a5c
mov qword [rbp + 0x10], rsi
xchg rsi, rax
mov rsi, qword [rbp + 0x10]
xchg rsi, rax
mov rcx, qword [rbp + 0x10]
xchg r10, r10
xchg r8, rax
mov r8, qword [rbp + 0x10]
xchg r8, rax
and cl, r8b
shl cl, 1
shl cl, 1
shl cl, 1
movzx edx, word [rbp + rax*2 - 0x40]
xchg r9, r9
mov eax, 0x1cb69299
xor eax, 0x509b3df4
add eax, 0x23b5eb9a
xor eax, 0x2c80fa45
shr eax, cl
movzx ecx, al
xchg r9, r9
mov rax, qword [rbp + 0x10]
xor cx, dx
mov word [rbp + rax*2 - 0x28], cx
xchg rdi, rax
mov rdi, qword [rbp + 0x10]
xchg rdi, rax
inc rax
mov dword [rsp - 0x24], esi
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
cmp rax, 0xc
jb 0x14006d303
xchg rdx, rdx
xor edx, edx
mov word [rbp - 0x10], si
lea rcx, [rbp - 0x28]
call fcn.1400a7d60
mov r12, r12
xchg rdx, rsi
mov rsi, rax
xchg rsi, rdx
mov r8, rax
xchg rsi, rsi
xor eax, eax
xor rdx, rbx
mov qword [rdi + 0x30], rdx
mov r14, r14
lea rdi, [rbp - 0x28]
lea ecx, [rax + 0xc]
rep stosb byte [rdi], al
cmp rdx, rbx
mov dword [rsp - 0x24], 0x4214fa3d
je 0x14006d3e0
lea rdx, [0x1404892e0]
xchg r8, rcx
mov r8, rcx
xchg rcx, r8
call fcn.140071ac8
mov r14, r14
test al, al
setne al
jmp 0x14006d3e0
mov al, 0x6b
sub al, 0x1a
sub al, 0x4b
sub al, 5
lea r11, [rsp + 0x60]
xchg rdi, rbx
mov rdi, qword [r11 + 0x18]
xchg rbx, rdi
mov rsi, qword [r11 + 0x20]
xchg rdi, r15
mov r15, qword [r11 + 0x28]
xchg rdi, r15
xchg r10, r11
mov rsp, r10
xchg r10, r11
nop
mov rbp, qword [rsp]
add rsp, 8
ret
Function at 0x14006d410
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov rdi, rdi
xchg rsi, rbp
mov qword [rsp + 0x18], rbp
xchg rbp, rsi
xchg rdi, r12
mov qword [rsp + 0x20], r12
xchg rdi, r12
nop
mov qword [rsp - 8], rbp
sub rsp, 8
mov rbp, rsp
nop
add rsp, 0x6c0f9915
sub rsp, 0x6c0f9965
movabs rbx, 0x4ef446ac5b9a4108
sub rbx, 0x402e5378
add rbx, 0x244b253e
add rbx, 0x1e7c6c5f
mov rdi, rcx
cmp qword [rcx + 0x28], rbx
mov rdi, rdi
jne 0x14006d61a
mov eax, 0x4d1e4170
add eax, 0x85e0030
sub eax, 0x180b478
sub eax, 0x53fb8cfa
mov dword [rbp - 0x30], 0x58db9e31
sub dword [rbp - 0x30], 0x4ce6ae08
add dword [rbp - 0x30], 0x2189df14
add dword [rbp - 0x30], 0x3d907de2
sub dword [rbp - 0x30], 0x6b024d12
mov word [rbp - 0x20], ax
mov dword [rsp - 0x40], ebx
xor esi, esi
mov dword [rbp - 0x2c], 0x3c45e5bc
xor dword [rbp - 0x2c], 0x794dd1ba
xor dword [rbp - 0x2c], 0x6d95797e
xor dword [rbp - 0x2c], 0x7cf622e3
sub dword [rbp - 0x2c], 0x53fb6f95
mov dword [rbp - 0x28], 0x550fe42b
xor dword [rbp - 0x28], 0x19bcbcc8
add dword [rbp - 0x28], 0x7028a61
sub dword [rbp - 0x28], 0x5366e2d4
mov dword [rbp - 0x24], 0x42d4a996
xor dword [rbp - 0x24], 0x2a64f846
xor dword [rbp - 0x24], 0x252c47a0
xor dword [rbp - 0x24], 0x4db31677
mov qword [rbp + 0x10], rsi
xchg rdx, rax
mov rdx, qword [rbp + 0x10]
xchg rdx, rax
xchg rsi, rcx
mov rsi, qword [rbp + 0x10]
xchg rcx, rsi
mov rax, qword [rbp + 0x10]
xchg rcx, rcx
and cl, 3
shl cl, 2
shl cl, 1
movzx edx, word [rbp + rax*2 - 0x30]
mov dword [rsp - 0x44], esp
mov eax, 0x4469ecc0
xor eax, 0x4da0a02d
xor eax, 0x7700660d
sub eax, 0x468a1dfc
xor eax, 0x7b5c6da6
shr eax, cl
movzx ecx, al
xchg r13, r13
xchg rsp, rax
mov rsp, qword [rbp + 0x10]
xchg rsp, rax
xor cx, dx
mov dword [rsp - 0x40], 0x5198144b
mov word [rbp + rax*2 - 0x1e], cx
xchg rdx, rax
mov rdx, qword [rbp + 0x10]
xchg rdx, rax
inc rax
mov dword [rsp - 0x1c], 0x3b50bd4f
xchg rcx, rax
mov qword [rbp + 0x10], rcx
xchg rcx, rax
xchg r11, rax
mov r11, qword [rbp + 0x10]
xchg r11, rax
cmp rax, 9
jb 0x14006d521
xor edx, edx
mov r14, r14
mov word [rbp - 0xc], si
lea rcx, [rbp - 0x1e]
call fcn.1400a7d60
mov rdx, rdx
mov rdx, rax
xchg r8, rax
mov rax, r8
xchg r8, rax
xor eax, eax
xchg rbp, rbp
xor rdx, rbx
xchg rdx, r14
mov qword [rdi + 0x28], r14
xchg r14, rdx
lea rdi, [rbp - 0x1e]
mov dword [rsp - 0x20], esp
lea ecx, [rax + 9]
rep stosb byte [rdi], al
cmp rdx, rbx
je 0x14006d624
xchg rcx, rcx
lea rdx, [0x140489830]
xchg r13, rcx
mov r13, r8
xchg rcx, r13
call fcn.140075ca4
test al, al
setne al
mov dword [rsp - 0x34], 0x28c02709
jmp 0x14006d624
mov al, 0x20
sub al, 0xa
add al, 0x49
add al, 0xd
sub al, 0x6b
mov rbx, qword [rsp + 0x68]
mov dword [rsp - 0x10], 0x103126ee
mov rsi, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x78]
nop
add rsp, 0x268c6641
sub rsp, 0x268c65f1
nop
mov rbp, qword [rsp]
add rsp, 8
ret
Function at 0x14006d654
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov dword [rsp - 0x30], edi
xchg r15, rdi
mov qword [rsp + 0x20], r15
xchg r15, rdi
nop
sub rsp, 8
mov qword [rsp], rbp
xchg rbp, r12
mov r12, rsp
xchg r12, rbp
nop
add rsp, 0x21e96904
sub rsp, 0x21e96954
movabs rbx, 0x4ef446ac1e4a59c7
add rbx, 0x46b744bc
xor rbx, 0x2581ce2b
add rbx, 0xe860531
add rbx, 0xf2d2954
xchg rcx, rdi
mov rcx, rdi
xchg rcx, rdi
cmp qword [rcx + 0x38], rbx
mov rbx, rbx
jne 0x14006d84c
xor esi, esi
mov dword [rbp - 0x30], 0x5e815aed
xor dword [rbp - 0x30], 0x707d666e
xor dword [rbp - 0x30], 0x3bc6101c
xor dword [rbp - 0x30], 0x152b2c8f
mov dword [rbp - 0x2c], 0x3ec7a742
sub dword [rbp - 0x2c], 0x23658eb2
xor dword [rbp - 0x2c], 0x4431d46a
xor dword [rbp - 0x2c], 0x5f62ccfa
mov dword [rbp - 0x28], 0x27d15c0c
sub dword [rbp - 0x28], 0x36a1b99
xor dword [rbp - 0x28], 0xceed5a9
xor dword [rbp - 0x28], 0x28dc95ec
mov dword [rbp - 0x24], 0x2d7882da
sub dword [rbp - 0x24], 0x8d8ed33
add dword [rbp - 0x24], 0x5481e03e
sub dword [rbp - 0x24], 0x78fa7598
mov dword [rbp - 0x20], 0x76f77176
sub dword [rbp - 0x20], 0x716dbf4e
add dword [rbp - 0x20], 0x6c3a7c63
sub dword [rbp - 0x20], 0x71b72e5d
xchg rsp, rsi
mov qword [rbp + 0x10], rsp
xchg rsi, rsp
mov rax, qword [rbp + 0x10]
mov dword [rsp - 0x1c], 0x2b6a4590
xchg r12, rcx
mov r12, qword [rbp + 0x10]
xchg r12, rcx
xchg r15, rax
mov r15, qword [rbp + 0x10]
xchg r15, rax
and cl, 3
shl cl, 2
shl cl, 1
movzx edx, word [rbp + rax*2 - 0x30]
mov dword [rsp - 0x30], edx
mov eax, 0xa5ca6dc
add eax, 0x901f379
add eax, 0x2afa7109
add eax, 0x50a55e4
shr eax, cl
movzx ecx, al
xchg rdx, rdx
mov rax, qword [rbp + 0x10]
xor cx, dx
mov word [rbp + rax*2 - 0x1c], cx
xchg r10, rax
mov r10, qword [rbp + 0x10]
xchg r10, rax
inc rax
xchg r15, rax
mov qword [rbp + 0x10], r15
xchg r15, rax
mov rax, qword [rbp + 0x10]
mov dword [rsp - 0x1c], ebx
cmp rax, 0xa
jb 0x14006d76e
xor edx, edx
mov word [rbp - 8], si
xchg r14, r14
lea rcx, [rbp - 0x1c]
call fcn.1400a7d60
xchg rdi, rax
mov rdx, rdi
xchg rdi, rax
xchg rbx, rax
mov r8, rbx
xchg rbx, rax
xor eax, eax
xor rdx, rbx
xchg rdx, rsi
mov qword [rdi + 0x38], rsi
xchg rsi, rdx
lea rdi, [rbp - 0x1c]
lea ecx, [rax + 0xa]
mov r10, r10
rep stosb byte [rdi], al
cmp rdx, rbx
je 0x14006d854
mov r9, r9
lea rdx, str._M
xchg r15, rcx
mov r15, r8
xchg r15, rcx
call fcn.140076218
test al, al
setne al
mov dword [rsp - 0x18], 0x30ec0404
jmp 0x14006d854
mov al, 0x69
sub al, 0x22
xor al, 0x12
xor al, 0x54
xchg rbx, r12
mov r12, qword [rsp + 0x68]
xchg r12, rbx
xchg rsi, r14
mov r14, qword [rsp + 0x70]
xchg rsi, r14
mov rdi, qword [rsp + 0x78]
sub rsp, 0xffffffffffffffb0
mov dword [rsp - 0x44], edx
nop
mov rbp, qword [rsp]
add rsp, 8
ret
Function at 0x14006d884
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov dword [rsp - 0x10], edx
mov qword [rsp + 0x18], rsi
xchg rdi, rbx
mov qword [rsp + 0x20], rbx
xchg rbx, rdi
push rbp
mov dword [rsp - 0x2c], edx
xchg rsp, rbp
mov rsp, rbp
xchg rsp, rbp
add rsp, 0xffffffffffffffb0
xchg rdi, rdi
movabs rbx, 0x4ef446ac0bfa8362
add rbx, 0x5845da5d
xor rbx, 0x57bc509a
add rbx, 0x2a377208
xchg rcx, rdi
mov rcx, rdi
xchg rdi, rcx
cmp qword [rcx + 0x20], rbx
jne 0x14006da89
mov rsi, rsi
mov eax, 0x11bb09e9
add eax, 0x38268424
xor eax, 0x189e3cee
sub eax, 0x517fb2d4
mov dword [rbp - 0x30], 0xe97601b
xor dword [rbp - 0x30], 0x12b76472
add dword [rbp - 0x30], 0x1ae35567
xor dword [rbp - 0x30], 0x46d37fbb
sub dword [rbp - 0x30], 0x71c7265a
mov word [rbp - 0x1c], ax
mov dword [rsp - 0x1c], esi
xor esi, esi
mov dword [rbp - 0x2c], 0x3432fb74
sub dword [rbp - 0x2c], 0x237a8f11
sub dword [rbp - 0x2c], 0x9e7803b
add dword [rbp - 0x2c], 0x720f81e0
sub dword [rbp - 0x2c], 0x78b16e02
mov dword [rbp - 0x28], 0x29cd8d1d
add dword [rbp - 0x28], 0x4dffa97f
xor dword [rbp - 0x28], 0x40a73874
sub dword [rbp - 0x28], 0x37180eba
mov dword [rbp - 0x24], 0x6ad153a4
sub dword [rbp - 0x24], 0x2e3ba11d
sub dword [rbp - 0x24], 0xf2cf5be
xor dword [rbp - 0x24], 0x69b5ebb
xor dword [rbp - 0x24], 0x2b9ee223
mov dword [rbp - 0x20], 0x690a53a7
sub dword [rbp - 0x20], 0x5d93d874
add dword [rbp - 0x20], 0x494cf932
sub dword [rbp - 0x20], 0x5fc7688
xor dword [rbp - 0x20], 0x4ecbfdfb
mov qword [rbp + 0x10], rsi
mov rax, qword [rbp + 0x10]
mov rcx, qword [rbp + 0x10]
mov rdx, rdx
xchg rdi, rax
mov rdi, qword [rbp + 0x10]
xchg rdi, rax
and cl, 3
shl cl, 2
shl cl, 1
movzx edx, word [rbp + rax*2 - 0x30]
mov rsp, rsp
mov eax, 0x1f181581
sub eax, 0x181942ba
sub eax, 0x6cac76a
add eax, 0x39e6eec2
add eax, 0x9486723
shr eax, cl
movzx ecx, al
mov r12, r12
mov rax, qword [rbp + 0x10]
xor cx, dx
mov word [rbp + rax*2 - 0x1a], cx
mov rax, qword [rbp + 0x10]
mov r14, r14
inc rax
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
cmp rax, 0xb
xchg r9, r9
jb 0x14006d9b5
xor edx, edx
mov word [rbp - 4], si
mov r10, r10
lea rcx, [rbp - 0x1a]
call fcn.1400a7d60
mov rdx, rax
mov dword [rsp - 0x34], ebx
xchg r11, r8
mov r11, rax
xchg r8, r11
xor eax, eax
mov dword [rsp - 0x44], ecx
xor rdx, rbx
mov qword [rdi + 0x20], rdx
lea rdi, [rbp - 0x1a]
lea ecx, [rax + 0xb]
xchg rbx, rbx
rep stosb byte [rdi], al
cmp rdx, rbx
je 0x14006da93
mov r12, r12
lea rdx, [0x1404892b8]
xchg rcx, r8
mov r8, rcx
xchg rcx, r8
call fcn.1400765cc
xchg rbp, rbp
test al, al
setne al
jmp 0x14006da93
mov al, 0x75
sub al, 0x2a
xor al, 0x59
xor al, 0x32
sub al, 0x1f
mov rbx, qword [rsp + 0x68]
mov dword [rsp - 0x1c], ecx
xchg rsi, r11
mov r11, qword [rsp + 0x70]
xchg r11, rsi
xchg rbx, rdi
mov rbx, qword [rsp + 0x78]
xchg rdi, rbx
sub rsp, 0xffffffffffffffb0
mov rdx, rdx
nop
add rsp, 8
mov rbp, qword [rsp - 8]
ret
Function at 0x1400893c4
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
mov rbp, rbp
push rbp
xchg rbp, rsp
mov rsp, rbp
xchg rbp, rsp
add rsp, 0xffffffffffffff80
mov r8, r8
xor esi, esi
mov dword [rbp - 0x50], 0x38ee2914
sub dword [rbp - 0x50], 0x15b9c7c1
add dword [rbp - 0x50], 0x433a822c
sub dword [rbp - 0x50], 0x663be36d
mov dword [rbp - 0x4c], 0x3ddf3ae6
sub dword [rbp - 0x4c], 0x3771e355
add dword [rbp - 0x4c], 0x25b233c5
xor dword [rbp - 0x4c], 0x35263ec9
sub dword [rbp - 0x4c], 0x1939b573
mov dword [rbp - 0x48], 0xeb39d83
add dword [rbp - 0x48], 0x2a59be15
xor dword [rbp - 0x48], 0x761ab80d
sub dword [rbp - 0x48], 0x2afdf8bc
sub dword [rbp - 0x48], 0x23e0ead2
mov dword [rbp - 0x44], 0x36f0e3d8
add dword [rbp - 0x44], 0x18173cdf
sub dword [rbp - 0x44], 0x1e2347d5
add dword [rbp - 0x44], 0x1acbaf7c
xor dword [rbp - 0x44], 0x4bbf886d
mov qword [rbp + 0x10], rsi
lea ebx, [rsi + 1]
mov dword [rsp - 0x28], 0x4fd74898
xchg rdx, rax
mov rdx, qword [rbp + 0x10]
xchg rdx, rax
xchg r14, rcx
mov r14, qword [rbp + 0x10]
xchg rcx, r14
xchg r14, rax
mov r14, qword [rbp + 0x10]
xchg r14, rax
and cl, 3
shl cl, 3
mov rbp, rbp
movzx edx, word [rbp + rax*2 - 0x50]
mov eax, 0x451c08d8
add eax, 0x15e1a64b
sub eax, 0x4fa1c1b4
xor eax, 0x716df09b
xor eax, 0x39557cb6
shr eax, cl
movzx ecx, al
mov dword [rsp - 0x44], 0x79855881
mov rax, qword [rbp + 0x10]
xor cx, dx
mov word [rbp + rax*2 - 0x20], cx
mov dword [rsp - 0x40], ebp
xchg r10, rax
mov r10, qword [rbp + 0x10]
xchg r10, rax
add rax, rbx
mov dword [rsp - 0x40], 0x19e8ef74
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
cmp rax, 8
jb 0x140089485
xchg rdi, rdi
lea rax, [rbp - 0x20]
mov word [rbp - 0x10], si
xorps xmm0, xmm0
xchg rdx, rax
mov qword [rbp - 0x38], rdx
xchg rdx, rax
lea r9, [rbp - 0x30]
mov dword [rsp - 0x20], esp
mov dword [rbp - 0x40], 0x5306b312
sub dword [rbp - 0x40], 0x4c3927f0
add dword [rbp - 0x40], 0x436aa41a
xor dword [rbp - 0x40], 0x7b6482da
xor dword [rbp - 0x40], 0x314eadf6
lea r8, [rbp - 0x40]
mov dword [rsp - 0x18], 0x2576f51e
mov dword [rsp + 0x20], esi
xor edx, edx
xor ecx, ecx
mov dword [rsp - 0x24], 0x5a2551be
movups xmmword [rbp - 0x30], xmm0
call fcn.1400ac3a0
xchg rdi, rax
mov rax, rdi
xchg rdi, rax
test rax, rax
je 0x1400895b2
mov r12, r12
xchg rcx, rax
mov rax, rcx
xchg rcx, rax
call fcn.14007f924
test al, al
mov dword [rsp - 0x20], 0x5e01604
je 0x1400895b2
lea rdx, [rbp - 0x40]
xchg rcx, rdi
mov rdi, rcx
xchg rdi, rcx
call fcn.14007e8c4
test al, al
mov r10, r10
jne 0x1400895b5
mov bl, sil
xor eax, eax
lea r11, [rsp + 0x80]
mov dword [rsp - 0x28], edx
xchg rsi, r12
mov r12, qword [r11 + 0x20]
xchg r12, rsi
lea rdi, [rbp - 0x20]
lea ecx, [rax + 8]
mov dword [rsp - 0x40], esp
rep stosb byte [rdi], al
mov rdi, qword [r11 + 0x28]
mov al, bl
mov rbx, qword [r11 + 0x18]
mov dword [rsp - 0x30], 0x3a5308fd
xchg rsp, r11
mov r11, rsp
xchg rsp, r11
pop rbp
mov r12, r12
ret
Function at 0x1400955c0
Capabilities:
Encode data using xor
Hash data with crc32

Disassembly:
cmp dword [0x14048a0b4], 0
mov dword [rsp - 0x40], 0x546d9db8
jne 0x1400956d0
xor edx, edx
lea r8, [0x14048a0b0]
nop word [rax + rax]
mov dword [rsp - 0x40], ecx
mov ecx, edx
lea r8, [r8 + 4]
and ecx, 1
mov dword [rsp - 0x14], 0x1c065419
mov eax, edx
shr eax, 1
neg ecx
and ecx, 0xedb88320
mov dword [rsp - 0x38], ecx
inc edx
xor ecx, eax
mov eax, ecx
mov dword [rsp - 0x10], edi
shr ecx, 1
and eax, 1
neg eax
and eax, 0xedb88320
mov r8, r8
xor eax, ecx
mov ecx, eax
shr eax, 1
and ecx, 1
mov dword [rsp - 0x38], 0x1a1023d7
neg ecx
and ecx, 0xedb88320
xor ecx, eax
xchg rcx, rcx
mov eax, ecx
shr ecx, 1
and eax, 1
neg eax
mov dword [rsp - 0x44], 0x2b27459d
and eax, 0xedb88320
xor eax, ecx
mov ecx, eax
shr eax, 1
mov dword [rsp - 0x1c], edx
and ecx, 1
neg ecx
and ecx, 0xedb88320
xor ecx, eax
mov dword [rsp - 0x10], edx
mov eax, ecx
shr ecx, 1
and eax, 1
neg eax
xchg r10, r10
and eax, 0xedb88320
xor eax, ecx
mov ecx, eax
mov dword [rsp - 0xc], ebp
shr eax, 1
and ecx, 1
neg ecx
mov dword [rsp - 0x30], 0xf50e65c
and ecx, 0xedb88320
xor ecx, eax
mov eax, ecx
mov dword [rsp - 0x14], edx
shr ecx, 1
and eax, 1
neg eax
and eax, 0xedb88320
xchg r11, r11
xor eax, ecx
mov dword [r8 - 4], eax
cmp edx, 0x100
jb 0x1400955ec
mov dword [rsp - 0x34], edi
ret

Function at 0x1400956e0
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400add2d
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140489f60]
mov dword [rsp - 0x40], 0x7b2dfdbd
cmp qword [0x14048a048], 0
jne 0x1400adab0
syscall
mov dword [rsp - 0x30], ebx
ret

Function at 0x140095700
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x28]
mov dword [rsp - 0x10], 0x4570af81
mov byte [rsp + 0x28], al
jmp 0x1400ae382
xchg rcx, r15
mov r10, r15
xchg r15, rcx
mov eax, dword [0x140489ff8]
mov dword [rsp - 0x1c], esi
cmp qword [0x14048a048], 0
jne 0x1400adab0
syscall
ret

Function at 0x140095720
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400adb1c
xchg rsp, r10
mov rsp, rcx
xchg r10, rsp
mov eax, dword [0x140489f30]
xchg rbx, rbx
cmp qword [0x14048a048], 0
jne 0x1400adab0
syscall
xchg rcx, rcx
ret

Function at 0x140095730
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400ae0d8
mov r10, rcx
mov dword [rsp - 0x38], edx
mov eax, dword [0x140489fb8]
cmp qword [0x14048a048], 0
jne 0x1400adab0
mov dword [rsp - 0x3c], edi
syscall
ret

Function at 0x140095740
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400adf80
mov r10, rcx
mov eax, dword [0x140489f98]
xchg r8, r8
cmp qword [0x14048a048], 0
jne 0x1400adab0
syscall
ret

Function at 0x140095750
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400adb79
xchg r12, rcx
mov r10, r12
xchg r12, rcx
mov eax, dword [0x140489f38]
mov dword [rsp - 0x38], 0x1353d7de
cmp qword [0x14048a048], 0
jne 0x1400adab0
syscall
ret

Function at 0x140095760
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400ae206
mov r10, rcx
mov dword [rsp - 0x28], ebx
mov eax, dword [0x140489fd4]
cmp qword [0x14048a048], 0
jne 0x1400adab0
mov dword [rsp - 0x2c], 0x7ad10cf6
syscall
ret