joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14003c17e
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rsi
push rdi
nop
add rsp, 0x5982898d
sub rsp, 0x598289ed
lea rax, [rcx + 8]
mov qword [rsp + 0x70], rbx
mov qword [rcx], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov rsi, rcx
mov qword [rsp + 0x78], rbp
movups xmmword [rax + 0x10], xmm0
lea rcx, [rsp + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
movups xmmword [rax + 0x70], xmm0
mov rbp, qword [rdx + 0x38]
lea rax, [rsp + 0x28]
mov rbx, qword [rdx]
mov qword [rsp + 0x20], rax
movups xmmword [rsp + 0x28], xmm0
lea rdx, [rbp + 1]
movups xmmword [rsp + 0x38], xmm0
movups xmmword [rsp + 0x48], xmm0
call fcn.14001739c
mov edx, 0x69e5689a
add edx, 0x9998f7d
sub edx, 0x424bf1e5
test rbp, rbp
je 0x14003c251
mov rdi, rax
sub rbx, rax
mov r9, rbp
mov r8d, 0x25fbf864
xor r8d, 0x2aa3e0
sub r8d, 0xfd17216
sub r8d, 0x15ffe86f
nop word [rax + rax]
movzx ecx, dx
lea rdi, [rdi + 2]
and cx, r8w
ror edx, 8
xor cx, word [rbx + rdi - 2]
mov word [rdi - 2], cx
sub r9, 1
jne 0x14003c230
xor ecx, ecx
mov r8, rbp
mov word [rax + rbp*2], cx
mov rcx, rsi
mov rdx, qword [rsp + 0x20]
call fcn.1400a24a0
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x28]
mov rbp, qword [rsp + 0x78]
mov rbx, qword [rsp + 0x70]
cmp rcx, rax
jne 0x14003c2b5
xor eax, eax
lea rdi, [rsp + 0x28]
mov ecx, 0xef40204
add ecx, 0x6301f8d5
xor ecx, 0x109c3a6b
sub ecx, 0x6169c082
rep stosb byte [rdi], al
mov rax, rsi
mov rsi, qword [rsp + 0x80]
add rsp, 0x60
pop rdi
ret
call fcn.1400b9840
mov rax, rsi
mov rsi, qword [rsp + 0x80]
add rsp, 0x60
pop rdi
ret
Function at 0x14003dbd4
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x54ac0ec6
add rsp, 0x54ac0e16
mov rsi, rcx
lea rdx, [rcx + 0x298]
lea rcx, [rsp + 0x20]
call fcn.14003c170
or ebx, 0xffffffff
mov dword [rsp + 0xc0], ebx
mov rdi, qword [rax]
cmp byte [rdi], 0
je 0x14003dc55
mov rdx, rdi
lea rcx, [rsp + 0xc0]
mov r8d, 0x73deb78b
sub r8d, 0x2cd3f969
xor r8d, 0x7a37269f
sub r8d, 0x3d3d98bc
inc rdi
call fcn.1400a1550
cmp byte [rdi], 0
jne 0x14003dc17
mov ebx, dword [rsp + 0xc0]
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x28]
not ebx
cmp rcx, rax
jne 0x14003dc89
lea rdi, [rsp + 0x28]
xor eax, eax
mov ecx, 0x343e6078
sub ecx, 0x1f25cf83
sub ecx, 0x15189075
rep stosb byte [rdi], al
jmp 0x14003dc8e
call fcn.1400b9840
mov eax, dword [rsi + 0x2f0]
lea r11, [rsp + 0xb0]
xor eax, 0x670a
shl eax, 0x10
or eax, dword [rsi + 0x2d8]
mov rsi, qword [r11 + 0x20]
xor eax, ebx
mov rbx, qword [r11 + 0x18]
xor eax, 2
mov rsp, r11
pop rdi
ret

Function at 0x14003dddc
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
mov r10d, 0x1e7972e4
xor r10d, 0x5479ccde
sub r10d, 0x11d82dbb
add r10d, 0x1608d68b
mov r8d, dword [rcx + 0x2f4]
xor eax, r10d
xor r8d, r10d
xor r9d, r9d
add r8d, r8d
movd xmm2, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x35d84a26
mov dword [rsp + 8], eax
movss xmm3, dword [rsp + 8]
mov al, byte [rdx]
cvtdq2ps xmm2, xmm2
test al, al
je 0x14003de79
mov r10, qword [rcx + 0x300]
movzx eax, al
inc rdx
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
xorps xmm0, xmmword [0x140130520]
mov al, byte [rdx]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm2
addss xmm1, xmm3
cvttss2si ecx, xmm1
sub ecx, r8d
add r9d, ecx
test al, al
jne 0x14003de3d
mov eax, r9d
ret

Function at 0x14003df78
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
mov r10d, 0x496791aa
sub r10d, 0x2beda280
add r10d, 0xc4a9c90
add r10d, 0x246cdb50
mov r8d, dword [rcx + 0x2f4]
xor eax, r10d
xor r8d, r10d
xor r11d, r11d
add r8d, r8d
mov r9d, r11d
movd xmm2, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x35d84a26
mov dword [rsp + 8], eax
movss xmm3, dword [rsp + 8]
movzx eax, word [rdx]
cvtdq2ps xmm2, xmm2
test ax, ax
je 0x14003e023
mov r10, qword [rcx + 0x300]
movzx eax, ax
neg rdx
add rdx, 0xfffffffffffffffe
neg rdx
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
xorps xmm0, xmmword [0x140130520]
movzx eax, word [rdx]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm2
addss xmm1, xmm3
cvttss2si ecx, xmm1
sub ecx, r8d
add r9d, ecx
test ax, ax
jne 0x14003dfde
mov eax, r9d
ret
Function at 0x14003e09c
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
push rdi
add rsp, 0xffffffffffffff60
xor ebx, ebx
mov rdi, rcx
mov qword [rax + 8], rbx
cmp qword [rcx + 0x2f8], rbx
je 0x14003e12f
mov edx, dword [rcx + 0x2ec]
mov ecx, 0x225b2756
add ecx, 0x14a704a2
add ecx, 0x172f3b12
mov eax, dword [rdi + 0x2e8]
xor edx, ecx
xor eax, ecx
lea rcx, [rbx - 1]
imul edx, eax
lea eax, [rbx + 4]
movsxd rsi, edx
mul rsi
cmovo rax, rcx
mov rcx, rax
call fcn.1400b96e0
test rsi, rsi
jle 0x14003e14c
mov rcx, qword [rdi + 0x2f8]
mov edx, dword [rcx + rbx*4]
xor edx, 0x71c6092d
mov dword [rax + rbx*4], edx
inc rbx
cmp rbx, rsi
jl 0x14003e10b
jmp 0x14003e14c
lea rdx, [rsp + 0xb0]
call fcn.14003e314
test al, al
je 0x14003e1a3
mov rax, qword [rsp + 0xb0]
lea rcx, [0x140001490]
mov qword [rsp + 0x98], 0x30a9730b
add qword [rsp + 0x98], 0x2163743c
xor qword [rsp + 0x98], 0x2b0bca0b
sub qword [rsp + 0x98], 0x79072d34
mov qword [rsp + 0x20], rcx
lea rdx, [rsp + 0x20]
mov rcx, qword [rdi + 0x318]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x30], rax
call fcn.14003ce14
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x140054ce0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
nop
add rsp, 0x2db41ad7
sub rsp, 0x2db41b37
mov rbp, qword [rcx + 0xaf0]
lea rax, [rsp + 0x28]
mov rbx, qword [rcx + 0xab8]
xorps xmm0, xmm0
mov r14, rdx
mov qword [rsp + 0x20], rax
mov rsi, rcx
lea rcx, [rsp + 0x20]
lea rdx, [rbp + 1]
movups xmmword [rsp + 0x28], xmm0
movups xmmword [rsp + 0x38], xmm0
movups xmmword [rsp + 0x48], xmm0
call fcn.14001739c
mov edi, 0x51c42b13
sub edi, 0xb0a4e23
add edi, 0x1b7122a1
sub edi, 0x30f7f95f
mov r9, rax
mov ecx, edi
mov r15d, 0x4e85ef0
add r15d, 0x170a9779
xor r15d, 0x1bf2f696
test rbp, rbp
je 0x140054db0
mov rdx, rax
sub rbx, rax
mov r8, rbp
nop dword [rax]
nop dword [rax + rax]
movzx eax, cx
lea rdx, [rdx + 2]
and ax, r15w
ror ecx, 8
xor ax, word [rbx + rdx - 2]
mov word [rdx - 2], ax
sub r8, 1
jne 0x140054d8f
xor ebx, ebx
mov word [r9 + rbp*2], bx
cmp word [rsi + 0xb40], bx
je 0x140054dfb
mov edx, ebx
cmp qword [rsi + 0xaf0], rbx
jbe 0x140054dfb
nop dword [rax + rax]
mov rax, qword [rsp + 0x20]
movzx ecx, word [rsi + 0xb40]
mov word [rax + rdx*2], cx
inc rdx
cmp rdx, qword [rsi + 0xaf0]
jb 0x140054ddb
mov rsi, qword [rsp + 0x20]
lea rax, [r14 + 8]
xorps xmm0, xmm0
mov qword [r14], rax
movups xmmword [rax], xmm0
nop
movabs rdx, 0xffffffff3a8ffa82
sub rdx, 0x10a2ce68
add rdx, 0x4dc9fe10
add rdx, 0x7fffffff
add rdx, 0x848d5d6
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
nop dword [rax]
inc rdx
cmp word [rsi + rdx*2], bx
jne 0x140054e3f
mov rcx, r14
mov qword [r14 + 0x38], rdx
call fcn.14001739c
cmp qword [r14 + 0x38], rbx
jbe 0x140054e8b
sub rsi, rax
nop
movzx ecx, di
lea rax, [rax + 2]
and cx, r15w
ror edi, 8
xor cx, word [rsi + rax - 2]
inc rbx
mov word [rax - 2], cx
cmp rbx, qword [r14 + 0x38]
jb 0x140054e67
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x28]
cmp rcx, rax
jne 0x140054ebd
lea rdi, [rsp + 0x28]
xor eax, eax
mov ecx, 0x748ffafe
sub ecx, 0x3eea7675
sub ecx, 0x35a58459
rep stosb byte [rdi], al
jmp 0x140054ec2
call fcn.1400b9840
lea r11, [rsp + 0x60]
mov rax, r14
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rdi
ret
Function at 0x14005fe60
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
nop
sub rsp, 0x3f4b9305
add rsp, 0x3f4b92e5
mov r8, qword [rcx + 0x648]
xor esi, esi
mov rbx, rcx
test r8, r8
je 0x14005fe9b
mov rdi, qword [rcx + 0x640]
jmp 0x14005fea2
mov rdi, rsi
nop dword [rax]
test r8, r8
je 0x14005febb
mov rax, qword [rbx + 0x640]
lea rcx, [rax + r8*8]
jmp 0x14005febe
mov rcx, rsi
cmp rdi, rcx
je 0x1400600e4
mov rax, qword [rdi]
cmp qword [rax + 0x28], rdx
je 0x14005fedd
add rdi, 8
jmp 0x14005fea2
test r8, r8
je 0x14005ffa1
cmp rdi, qword [rbx + 0x640]
jb 0x14005ffa1
mov rax, qword [rbx + 0x640]
lea rcx, [rax + r8*8]
cmp rdi, rcx
jae 0x14005ffa1
mov rdx, rdi
nop word [rax + rax]
mov rcx, qword [rbx + 0x648]
test rcx, rcx
je 0x14005ff34
mov rax, qword [rbx + 0x640]
lea rax, [rax + rcx*8]
jmp 0x14005ff37
mov rax, rsi
sub rax, 8
cmp rdx, rax
jae 0x14005ff5a
mov rax, qword [rdx + 8]
mov qword [rdx], rax
neg rdx
add rdx, 0xfffffffffffffff8
neg rdx
jmp 0x14005ff14
test rcx, rcx
je 0x14005ffa1
lea rax, [rcx - 1]
mov qword [rbx + 0x648], rax
test rax, rax
jne 0x14005ffa1
mov rcx, qword [rbx + 0x640]
test rcx, rcx
je 0x14005ff93
call fcn.1400b9840
mov qword [rbx + 0x640], rsi
mov qword [rbx + 0x650], rsi
mov qword [rbx + 0x648], rsi
mov rcx, qword [rdi]
test rcx, rcx
je 0x14005ffc3
mov rax, qword [rcx]
mov edx, 0x30834a49
sub edx, 0x11525b1
sub edx, 0x2f6e2497
call qword [rax]
cmp qword [rbx + 0x648], rsi
je 0x1400600e4
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400594b0
mov rcx, qword [rsp + 0x30]
mov r10d, 0x76a112a4
xor r10d, 0x7e0e4359
add r10d, 0x25ef79f8
sub r10d, 0x2e9ecb55
mov r8d, dword [rsp + 0x34]
mov eax, ecx
mov r9, qword [rbx + 0x648]
sub eax, r8d
cdq
idiv dword [rbx + 0x648]
cmp eax, r10d
cmovl r10d, eax
test r9, r9
je 0x140060095
mov rdx, qword [rbx + 0x640]
lea r11, [rdx + r9*8]
cmp rdx, r11
je 0x140060095
mov r9d, r10d
xor r9d, 0x4e31670a
xor r8d, 0x4e31670a
nop dword [rax]
mov rcx, qword [rdx]
mov eax, esi
xor eax, 0x4e31670a
add esi, r10d
sub rdx, 0xfffffffffffffff8
mov dword [rcx + 0x30], eax
mov dword [rcx + 0x34], 0x743f314e
sub dword [rcx + 0x34], 0x2d5105c2
add dword [rcx + 0x34], 0x7433b7e
mov dword [rcx + 0x38], r9d
mov dword [rcx + 0x3c], r8d
cmp rdx, r11
jne 0x140060051
mov rcx, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x34]
mov rax, qword [rbx + 0x660]
test rax, rax
je 0x1400600dc
sub ecx, r8d
mov dword [rax + 0x14], 0x7dde4e95
sub dword [rax + 0x14], 0x3b6abc79
xor dword [rax + 0x14], 0x97b3889
xor dword [rax + 0x14], 0x539cd9f
xor ecx, 0x4e31670a
xor r8d, 0x4e31670a
mov dword [rax + 0x10], ecx
mov dword [rax + 0x18], r8d
mov dword [rax + 0x1c], r8d
mov rcx, rbx
call fcn.14004c740
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
ret
Function at 0x140060100
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x20
mov rax, qword [rcx]
mov rbx, rcx
call qword [rax + 0x78]
mov rdx, qword [rbx + 0x648]
mov rcx, rax
mov qword [rsp + 0x30], rax
call fcn.14004cd00
lea rcx, [rbx + 0x640]
lea rdx, [rsp + 0x30]
call fcn.14005fd20
mov rcx, rbx
sub rsp, 0xffffffffffffffe0
pop rbx
jmp 0x140060100
push rbx
nop
sub rsp, 0x376af58
add rsp, 0x376af38
cmp qword [rcx + 0x648], 0
mov rbx, rcx
je 0x140060243
lea rdx, [rsp + 0x30]
call fcn.1400594b0
mov r8, qword [rsp + 0x30]
mov r11d, 0x60c99e99
sub r11d, 0x134a8acd
xor r11d, 0x5cb0dcc1
sub r11d, 0x11cfce6d
mov r9d, dword [rsp + 0x34]
mov eax, r8d
sub eax, r9d
cdq
idiv dword [rbx + 0x648]
mov rdx, qword [rbx + 0x648]
cmp eax, r11d
cmovl r11d, eax
xor r10d, r10d
test rdx, rdx
je 0x1400601f9
mov rax, qword [rbx + 0x640]
mov qword [rsp + 0x38], rdi
lea rdi, [rax + rdx*8]
cmp rax, rdi
je 0x1400601f4
mov r8d, r11d
xor r8d, 0x4e31670a
xor r9d, 0x4e31670a
nop word [rax + rax]
mov rdx, qword [rax]
mov ecx, r10d
xor ecx, 0x4e31670a
add r10d, r11d
neg rax
add rax, 0xfffffffffffffff8
neg rax
mov dword [rdx + 0x30], ecx
mov dword [rdx + 0x34], 0x38ea93e4
xor dword [rdx + 0x34], 0x67e7aef0
sub dword [rdx + 0x34], 0x10dbd60a
mov dword [rdx + 0x38], r8d
mov dword [rdx + 0x3c], r9d
cmp rax, rdi
jne 0x1400601a8
mov r8, qword [rsp + 0x30]
mov r9d, dword [rsp + 0x34]
mov rdi, qword [rsp + 0x38]
mov rax, qword [rbx + 0x660]
test rax, rax
je 0x14006023b
sub r8d, r9d
mov dword [rax + 0x14], 0x504f1207
sub dword [rax + 0x14], 0x372c4512
add dword [rax + 0x14], 0x350e9a15
xor r8d, 0x4e31670a
xor r9d, 0x4e31670a
mov dword [rax + 0x10], r8d
mov dword [rax + 0x18], r9d
mov dword [rax + 0x1c], r9d
mov rcx, rbx
call fcn.14004c740
neg rsp
add rsp, 0xffffffffffffffe0
neg rsp
pop rbx
ret

Function at 0x140061e70
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
nop
sub rsp, 8
mov qword [rsp], rdi
nop
sub rsp, 0x63afb86d
add rsp, 0x63afb84d
xchg rdx, rcx
mov rbx, rcx
xchg rdx, rcx
xchg rcx, rdx
mov rdi, rdx
xchg rdx, rcx
nop
movabs rdx, 0xffffffff5dbd8aa4
xor rdx, 0x1b33b052
add rdx, 0x1a1787b7
sub rdx, 0x54c84e2c
add rdx, 0x7fffffff
add rdx, 0x74228b7f
nop word [rax + rax]
inc rdx
xchg r10, r10
cmp word [rbx + rdx*2], 0
jne 0x140061ed6
mov qword [rcx + 0x38], rdx
call fcn.14001739c
xchg rbx, rbx
xor r8d, r8d
mov edx, 0x591b0a76
xor edx, 0x7945330
sub edx, 0x4211ee87
add edx, 0x14b59b73
cmp qword [rdi + 0x38], r8
xchg rbx, rbx
jbe 0x140061f7d
sub rbx, rax
mov r9d, 0x6b3fd6b9
sub r9d, 0x4a01fd60
add r9d, 0x487dff7e
xor r9d, 0x79bcff4b
xor r9d, 0x10072763
nop word [rax + rax]
mov dword [rsp - 0x20], ecx
movzx ecx, dx
lea rax, [rax + 2]
and cx, r9w
ror edx, 1
ror edx, 2
ror edx, 1
ror edx, 1
ror edx, 1
ror edx, 1
ror edx, 1
xor cx, word [rbx + rax - 2]
inc r8
mov word [rax - 2], cx
mov dword [rsp - 0x34], ebp
cmp r8, qword [rdi + 0x38]
jb 0x140061f49
xchg rsi, rbx
mov rsi, qword [rsp + 0x30]
xchg rbx, rsi
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
nop
add rsp, 0x2b08fbb5
sub rsp, 0x2b08fb95
pop rdi
xchg r8, r8
ret
Function at 0x140062930
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov r12, r12
mov qword [rsp + 0x10], rsi
nop
mov qword [rsp - 8], rdi
sub rsp, 8
neg rsp
sub rsp, 0xffffffffffffffe0
neg rsp
xchg rsi, r12
mov r12, qword [rcx + 0x38]
xchg rsi, r12
xchg r13, rdx
mov rbx, r13
xchg r13, rdx
mov r8, qword [rdx + 0x38]
xchg r9, r9
xchg rdi, rcx
mov rcx, rdi
xchg rcx, rdi
add r8, rsi
mov dword [rsp - 0x28], 0x2be8fe8f
mov rdx, rsi
xchg r8, r14
mov qword [rcx + 0x38], r14
xchg r8, r14
call fcn.1400635a0
xchg r9, r13
mov r13, qword [rbx]
xchg r9, r13
mov ecx, esi
mov dword [rsp - 0x40], 0x183c49af
and ecx, 3
mov r8d, 0x19d93a6
add r8d, 0x68ff5c22
add r8d, 0xfb77bcb
xor r8d, 0x355db82f
sub r8d, 0x1dd6cd8a
shl ecx, 1
shl ecx, 1
shl ecx, 1
mov edx, r8d
ror edx, cl
mov rbp, rbp
xchg r14, rax
mov r10, r14
xchg r14, rax
xor ecx, ecx
mov rcx, rcx
cmp qword [rbx + 0x38], rcx
jbe 0x140062a65
lea rax, [rsi + rsi]
xchg r10, r10
mov r11d, 0x23d25c7d
add r11d, 0x54e04fc4
sub r11d, 0x7279c58f
xor r11d, 0x638e64d
sub rax, r9
add r10, rax
nop dword [rax]
mov dword [rsp - 0x24], edx
movzx eax, dx
lea r9, [r9 + 2]
xor ax, r8w
mov dword [rsp - 0x34], 0x64055d33
ror edx, 2
ror edx, 3
ror edx, 3
and ax, r11w
ror r8d, 4
ror r8d, 3
ror r8d, 1
xor ax, word [r9 - 2]
mov rsi, rsi
inc rcx
mov word [r10 + r9 - 2], ax
cmp rcx, qword [rbx + 0x38]
jb 0x140062a1c
xchg r11, r11
xchg rbx, r13
mov r13, qword [rsp + 0x30]
xchg r13, rbx
mov rax, rdi
mov rsi, qword [rsp + 0x38]
mov r9, r9
neg rsp
add rsp, 0xffffffffffffffe0
neg rsp
pop rdi
mov dword [rsp - 0x28], esi
ret
Function at 0x140062a90
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
xchg rbx, rdi
mov qword [rsp + 0x18], rbx
xchg rbx, rdi
nop
sub rsp, 8
mov qword [rsp], r14
nop
sub rsp, 0x2e81e341
add rsp, 0x2e81e321
xchg r14, r10
mov r10, qword [rcx + 0x38]
xchg r10, r14
mov rdi, rdx
xchg rsi, rsi
xchg rcx, rbx
mov rsi, rbx
xchg rcx, rbx
nop
movabs rbx, 0xffffffff551c0de3
add rbx, 0xa5bee15
sub rbx, 0x24791b88
add rbx, 0x7fffffff
add rbx, 0x45011f90
inc rbx
mov r15, r15
cmp word [rdx + rbx*2], 0
jne 0x140062afd
lea r8, [r14 + rbx]
xchg r10, r10
xchg rdx, r13
mov r13, r14
xchg rdx, r13
mov qword [rcx + 0x38], r8
call fcn.1400635a0
mov ecx, r14d
xchg r9, r9
mov edx, 0x6edba82c
sub edx, 0x4f8767da
xor edx, 0x1dd2a28b
xor edx, 0x33b5e4eb
and ecx, 3
shl ecx, 3
mov dword [rsp - 0x20], esi
ror edx, cl
test rbx, rbx
je 0x140062bc6
lea r8, [r14 + r14]
mov dword [rsp - 0x38], ebp
mov ecx, 0x401c0e22
sub ecx, 0x35ec3c08
add ecx, 0x17918917
xor ecx, 0x233d9f8a
sub ecx, 0x2fcc3bc
sub r8, rdi
add r8, rax
mov dword [rsp - 0x20], 0x5469cf8
nop dword [rax]
nop dword [rax + rax]
movzx eax, dx
lea rdi, [rdi + 2]
mov dword [rsp - 0x20], edi
and ax, cx
ror edx, 7
ror edx, 1
xor ax, word [rdi - 2]
mov dword [rsp - 0x1c], edi
mov word [r8 + rdi - 2], ax
sub rbx, 1
jne 0x140062b98
mov r15, r15
xchg rbx, r11
mov r11, qword [rsp + 0x30]
xchg r11, rbx
xchg rsi, rax
mov rsi, rax
xchg rsi, rax
xchg rbp, rsi
mov rbp, qword [rsp + 0x38]
xchg rbp, rsi
xchg rdi, rsi
mov rsi, qword [rsp + 0x40]
xchg rsi, rdi
sub rsp, 0xffffffffffffffe0
mov dword [rsp - 0x28], 0x7a6648de
pop r14
ret
Function at 0x1400633e1
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov dword [rsp - 0x38], ebx
nop
mov qword [rsp - 8], rsi
sub rsp, 8
nop
push r14
mov qword [rsp], rdi
nop
sub rsp, 8
mov qword [rsp], r14
nop
sub rsp, 0x7bf85573
add rsp, 0x7bf85553
lea rsi, [rdx + 8]
xorps xmm0, xmm0
mov qword [rdx], rsi
mov dword [rsp - 0x2c], ebx
xor edi, edi
xchg rbp, rsi
movups xmmword [rbp], xmm0
xchg rbp, rsi
xchg r14, r9
mov r9, r14
xchg r14, r9
xchg r8, rbp
mov r8, rbp
xchg rbp, r8
xchg rcx, rsi
movups xmmword [rcx + 0x10], xmm0
xchg rsi, rcx
xchg rbp, rdx
mov rbx, rbp
xchg rbp, rdx
xchg rcx, rsi
movups xmmword [rcx + 0x20], xmm0
xchg rcx, rsi
xchg rdi, rsp
mov qword [rdx + 0x38], rsp
xchg rdi, rsp
mov rax, qword [rcx + 0x38]
mov dword [rsp - 0x10], 0x673c5a31
cmp r8, rax
jae 0x140063534
sub rax, r8
xchg rbx, rbx
xchg r15, rbp
mov qword [rsp + 0x40], rbp
xchg rbp, r15
cmp rax, r9
mov rcx, rcx
cmovb r14, rax
xchg rbx, r14
mov qword [rdx + 0x38], rbx
xchg r14, rbx
mov rax, qword [rcx]
mov dword [rsp - 0x38], 0x7594658
xchg rcx, r10
mov r10, qword [rdx]
xchg r10, rcx
lea r15, [rax + r8*2]
mov dword [rsp - 0x3c], 0x17f8a5f7
cmp rcx, rsi
je 0x1400633d2
call fcn.1400b9840
cmp r14, 0x18
mov r13, r13
jbe 0x14006340f
lea rcx, [r14 + r14]
call fcn.1400b9ad0
xchg r9, r9
xchg rsp, rax
mov qword [rbx], rsp
xchg rsp, rax
test rax, rax
xchg r8, r8
jne 0x14006341e
mov qword [rbx], rsi
xchg rdx, r9
mov rdx, rdi
xchg rdx, r9
jmp 0x14006343e
xchg rsi, r11
mov qword [rbx], r11
xchg r11, rsi
mov rax, rsi
xchg r10, r10
xorps xmm0, xmm0
movups xmmword [rax], xmm0
xchg rsi, rax
movups xmmword [rsi + 0x10], xmm0
xchg rsi, rax
xchg r15, rax
movups xmmword [r15 + 0x20], xmm0
xchg r15, rax
xchg r14, r9
mov r14, qword [rbx]
xchg r14, r9
and ebp, 3
mov dword [rsp - 0x1c], 0x13a1ed09
mov r8d, 0x46762c48
xor r8d, 0x2fc28d81
xor r8d, 0x1e99f697
sub r8d, 0x45fa512c
shl ebp, 1
shl ebp, 2
mov edx, r8d
xchg r13, r13
movzx ecx, bpl
ror edx, cl
cmp qword [rbx + 0x38], rdi
jbe 0x1400634fc
mov dword [rsp - 0x30], esp
sub r15, r9
mov ecx, 0xd15dc60
add ecx, 0x6aa81f19
sub ecx, 0x4de9f2fe
xor ecx, 0x35a4ea27
sub ecx, 0x1c70e15d
nop dword [rax]
nop word [rax + rax]
movzx eax, dx
mov r11, r11
lea r9, [r9 + 2]
xor ax, r8w
ror edx, 1
ror edx, 2
ror edx, 2
ror edx, 2
ror edx, 1
and ax, cx
mov dword [rsp - 0x40], ecx
ror r8d, 5
ror r8d, 2
ror r8d, 1
xor ax, word [r15 + r9 - 2]
mov dword [rsp - 0xc], edx
inc rdi
mov word [r9 - 2], ax
cmp rdi, qword [rbx + 0x38]
mov r10, r10
jb 0x1400634b0
mov r15, qword [rsp + 0x40]
xchg rsi, rax
mov rsi, rbx
xchg rsi, rax
xchg rbx, rdi
mov rdi, qword [rsp + 0x48]
xchg rdi, rbx
mov rbp, qword [rsp + 0x50]
sub rsp, 0xffffffffffffffe0
mov rcx, rcx
pop r14
nop
mov rdi, qword [rsp]
add rsp, 8
nop
mov rsi, qword [rsp]
add rsp, 8
ret
xchg rbx, rax
mov rbx, rax
xchg rbx, rax
jmp 0x140063508
Function at 0x1400663fc
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg r13, r13
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
nop
sub rsp, 8
mov qword [rsp], rdi
push r14
mov dword [rsp - 0x38], 0x3833b0db
push r15
sub rsp, 0x3f59aaf2
add rsp, 0x3f59aa42
mov r15d, edx
mov r13, r13
xchg r13, rbp
mov r13, rcx
xchg rbp, r13
mov rdx, r9
mov dword [rsp - 0x3c], 0x5055cc
lea rcx, [rsp + 0x20]
mov r14d, r8d
call fcn.14003c170
xchg r13, r13
mov rbx, qword [rsp + 0xa8]
mov eax, 0x4c03b26
add eax, 0x3cab0e76
sub eax, 0x2c774a28
sub eax, 0x14f37f75
cmp rbx, rax
cmova rbx, rax
xchg rbx, rbx
mov rcx, rbx
call fcn.1400b96e0
xor edi, edi
xchg rsi, rax
mov rax, rsi
xchg rsi, rax
test rbx, rbx
je 0x1400664c2
xchg rcx, rbx
mov rbx, qword [rsp + 0x20]
xchg rcx, rbx
mov dl, byte [rcx + rdi]
mov r9, r9
xor dl, 0x37
mov byte [rdi + rax], dl
inc rdi
mov dword [rsp - 0x14], edi
cmp rdi, rbx
jb 0x14006649b
mov r8d, r14d
mov dword [rsp - 0x44], esi
mov edx, r15d
mov rcx, rbp
call fcn.140064564
xchg rcx, rcx
xchg rsi, r13
mov qword [rax + 8], r13
xchg rsi, r13
mov byte [rax + 4], 0x61
sub byte [rax + 4], 0x4c
add byte [rax + 4], 0x1d
sub byte [rax + 4], 0x2e
mov word [rax + 5], bx
lea rax, [rsp + 0x28]
xchg r10, r10
mov rcx, qword [rsp + 0x20]
mov byte [rbp + 8], 0x5c
xor byte [rbp + 8], 0x22
xor byte [rbp + 8], 0xa
xor byte [rbp + 8], 0x75
cmp rcx, rax
xchg r14, r14
jne 0x14006654b
lea rdi, [rsp + 0x28]
xor eax, eax
mov ecx, 0x250882fe
add ecx, 0x1bb5a932
sub ecx, 0x3d3874be
sub ecx, 0x385b6f2
rep stosb byte [rdi], al
mov dword [rsp - 0x44], 0x52345fbd
jmp 0x140066554
call fcn.1400b9840
mov dword [rsp - 0x1c], edi
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x20]
xchg rdi, rbp
mov rdi, qword [r11 + 0x28]
xchg rbp, rdi
xchg rsi, r15
mov r15, qword [r11 + 0x30]
xchg r15, rsi
xchg r14, r11
mov rsp, r14
xchg r11, r14
pop r15
mov dword [rsp - 0x1c], ecx
pop r14
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret