joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140014cf0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x14cd0
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x140014d6f
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x140014d50
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret

Function at 0x140014de0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x14dc0
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x140014e5f
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x140014e40
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret

Function at 0x140014fc0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x14fa0
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x14001503f
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x140015020
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret
Function at 0x1400150b0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x15090
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x14001512f
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x140015110
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret

Function at 0x1400151a0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x15180
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x14001521f
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x140015200
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret

Function at 0x140015290
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x15270
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x14001530f
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x1400152f0
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret
Function at 0x140015380
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x15360
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x1400153ff
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x1400153e0
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret

Function at 0x140015470
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x15450
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x1400154ef
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x1400154d0
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret

Function at 0x140015560
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x15540
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x1400155df
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x1400155c0
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret
Function at 0x140015650
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x15630
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x1400156cf
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x1400156b0
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret

Function at 0x140015920
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x15900
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x14001599f
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x140015980
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret

Function at 0x140015ce0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x15cc0
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x140015d5f
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x140015d40
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret
Function at 0x140015fb0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x15f90
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x14001602f
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x140016010
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret

Function at 0x1400160a0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x16080
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x14001611f
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x140016100
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret

Function at 0x140016190
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x16170
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x14001620f
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x1400161f0
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret
Function at 0x140016550
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x16530
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x1400165cf
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x1400165b0
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret

Function at 0x140016640
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x16620
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x1400166bf
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x1400166a0
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret

Function at 0x140016730
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x16710
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x1400167af
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x140016790
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret
Function at 0x140016820
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x16800
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x14001689f
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x140016880
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret

Function at 0x140016910
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x168f0
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x14001698f
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x140016970
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret

Function at 0x140016a00
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x169e0
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x140016a7f
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x140016a60
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret
Function at 0x140016be0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x16bc0
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x140016c5f
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x140016c40
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret

Function at 0x140016dc0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x16da0
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x140016e3f
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x140016e20
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret

Function at 0x140016eb0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x16e90
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x140016f2f
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x140016f10
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret
Function at 0x140017090
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x17070
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x14001710f
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x1400170f0
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret

Function at 0x140017180
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x17160
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x1400171ff
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x1400171e0
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret

Function at 0x140017270
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x17250
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x1400172ef
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x1400172d0
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret