joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140055ae0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
xchg rbp, r9
mov qword [rsp + 0x18], r9
xchg rbp, r9
push rsi
nop
mov qword [rsp - 8], rdi
sub rsp, 8
nop
mov qword [rsp - 8], r14
sub rsp, 8
sub rsp, 0x20
mov dword [rsp - 0x14], 0x2cfb7d8e
lea rsi, [rdx + 8]
xorps xmm0, xmm0
xchg rbx, rsi
mov qword [rdx], rbx
xchg rsi, rbx
xor edi, edi
mov dword [rsp - 0x3c], esi
xchg rsi, r8
movups xmmword [r8], xmm0
xchg rsi, r8
mov r14, r9
xchg rbp, r12
mov r12, r8
xchg rbp, r12
xchg r11, rsi
movups xmmword [r11 + 0x10], xmm0
xchg rsi, r11
xchg rdx, rbx
mov rdx, rbx
xchg rdx, rbx
xchg r12, rsi
movups xmmword [r12 + 0x20], xmm0
xchg r12, rsi
mov qword [rdx + 0x38], rdi
mov dword [rsp - 0x10], 0x130ed99c
xchg r13, rax
mov r13, qword [rcx + 0x38]
xchg r13, rax
cmp r8, rax
jae 0x140055d4c
sub rax, r8
mov dword [rsp - 0x30], ebx
mov qword [rsp + 0x40], r15
cmp rax, r9
cmovb r14, rax
mov qword [rdx + 0x38], r14
mov dword [rsp - 0x30], 0x45f95ce2
mov rax, qword [rcx]
xchg r9, rcx
mov r9, qword [rdx]
xchg r9, rcx
lea r15, [rax + r8*2]
mov r9, r9
cmp rcx, rsi
je 0x140055bba
call fcn.140098930
cmp r14, 0x18
mov r15, r15
jbe 0x140055bfc
lea rcx, [r14 + r14]
call fcn.140098be0
mov dword [rsp - 0x28], 0x20b4f16c
xchg rdx, rax
mov qword [rbx], rdx
xchg rdx, rax
test rax, rax
mov r15, r15
jne 0x140055c08
mov qword [rbx], rsi
xchg rdi, r9
mov rdi, r9
xchg r9, rdi
jmp 0x140055c31
mov qword [rbx], rsi
xchg r9, rsi
mov rax, r9
xchg rsi, r9
xorps xmm0, xmm0
mov dword [rsp - 0x18], 0x5d636a3a
xchg r15, rax
movups xmmword [r15], xmm0
xchg r15, rax
movups xmmword [rax + 0x10], xmm0
xchg r8, rax
movups xmmword [r8 + 0x20], xmm0
xchg r8, rax
xchg r14, r9
mov r14, qword [rbx]
xchg r9, r14
and ebp, 3
mov dword [rsp - 0x2c], ebx
mov r8d, 0x70441c0d
sub r8d, 0x25bce8e0
xor r8d, 0x1dbc2050
xor r8d, 0x1ee3027a
add r8d, 0x16ed22b2
shl ebp, 3
mov dword [rsp - 0x1c], 0x7ae5cdd3
mov edx, r8d
movzx ecx, bpl
ror edx, cl
mov r13, r13
cmp qword [rbx + 0x38], rdi
jbe 0x140055d03
sub r15, r9
mov dword [rsp - 0x14], 0x1ab75543
mov ecx, 0x202ac0ab
add ecx, 0x4a018e37
sub ecx, 0x371ec6d6
xor ecx, 0x3789d43b
sub ecx, 0x4845b38
nop dword [rax]
nop word [rax + rax]
mov dword [rsp - 0x14], 0x25c1d2cc
movzx eax, dx
lea r9, [r9 + 2]
xor ax, r8w
ror edx, 7
ror edx, 1
and ax, cx
mov dword [rsp - 0xc], 0x45366a6d
ror r8d, 4
ror r8d, 4
xor ax, word [r15 + r9 - 2]
mov dword [rsp - 0x18], 0xa89ab86
inc rdi
mov word [r9 - 2], ax
cmp rdi, qword [rbx + 0x38]
mov dword [rsp - 0x3c], 0x1efa863d
jb 0x140055cb8
xchg r15, rcx
mov rcx, qword [rsp + 0x40]
xchg rcx, r15
mov rax, rbx
mov dword [rsp - 0xc], ecx
xchg rbp, rbx
mov rbp, qword [rsp + 0x48]
xchg rbx, rbp
mov rbp, qword [rsp + 0x50]
mov rcx, rcx
nop
sub rsp, 0x27928d6c
add rsp, 0x27928d8c
nop
mov r14, qword [rsp]
add rsp, 8
nop
add rsp, 8
mov rdi, qword [rsp - 8]
pop rsi
ret
xchg rbx, rax
mov rbx, rax
xchg rbx, rax
jmp 0x140055d15

Function at 0x140056130
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d627
xchg rcx, rbp
mov r10, rbp
xchg rbp, rcx
mov eax, dword [0x140141ad0]
mov dword [rsp - 0x38], 0x3e2a050a
cmp qword [0x140141bb8], 0
jne 0x14008d3b0
syscall
ret
Function at 0x140056150
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x28]
mov byte [rsp + 0x28], al
mov dword [rsp - 0xc], ebx
jmp 0x14008dc53
xchg r10, rdi
mov rdi, rcx
xchg rdi, r10
mov eax, dword [0x140141b68]
mov rcx, rcx
cmp qword [0x140141bb8], 0
jne 0x14008d3b0
syscall
ret

Function at 0x140056170
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d427
xchg r8, rcx
mov r10, r8
xchg rcx, r8
mov eax, dword [0x140141aa0]
cmp qword [0x140141bb8], 0
jne 0x14008d3b0
mov r12, r12
syscall
ret

Function at 0x140056180
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d9b3
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140141b28]
cmp qword [0x140141bb8], 0
mov dword [rsp - 0x38], ebx
jne 0x14008d3b0
syscall
ret

Function at 0x140056190
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d866
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140141b08]
cmp qword [0x140141bb8], 0
jne 0x14008d3b0
mov dword [rsp - 0x20], ebx
syscall
ret

Function at 0x1400561a0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d47f
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140141aa8]
cmp qword [0x140141bb8], 0
jne 0x14008d3b0
mov dword [rsp - 0x3c], 0x631046df
syscall
ret

Function at 0x1400561b0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008dad6
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140141b44]
mov dword [rsp - 0x14], esi
cmp qword [0x140141bb8], 0
jne 0x14008d3b0
syscall
ret

Function at 0x1400561c0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008db00
xchg r13, rcx
mov r10, r13
xchg r13, rcx
mov eax, dword [0x140141b48]
cmp qword [0x140141bb8], 0
mov dword [rsp - 0x30], 0x50b6b060
jne 0x14008d3b0
syscall
ret

Function at 0x1400561d0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008da32
mov r10, rcx
mov eax, dword [0x140141b34]
mov dword [rsp - 0x28], esp
cmp qword [0x140141bb8], 0
jne 0x14008d3b0
syscall
mov dword [rsp - 0x3c], edx
ret

Function at 0x1400561e0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008da5a
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140141b38]
xchg r15, r15
cmp qword [0x140141bb8], 0
jne 0x14008d3b0
syscall
ret

Function at 0x1400561f0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d655
mov r10, rcx
mov eax, dword [0x140141ad4]
mov dword [rsp - 0x44], 0x46f673a7
cmp qword [0x140141bb8], 0
jne 0x14008d3b0
syscall
ret

Function at 0x140056200
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d90f
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140141b18]
cmp qword [0x140141bb8], 0
xchg rdx, rdx
jne 0x14008d3b0
syscall
ret

Function at 0x140056210
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d961
xchg r15, rcx
mov r10, r15
xchg r15, rcx
mov eax, dword [0x140141b20]
cmp qword [0x140141bb8], 0
xchg r8, r8
jne 0x14008d3b0
syscall
ret

Function at 0x140056220
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d454
mov r10, rcx
mov eax, dword [0x140141aa4]
mov dword [rsp - 0x18], esi
cmp qword [0x140141bb8], 0
jne 0x14008d3b0
syscall
xchg r11, r11
ret
Function at 0x140056230
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d9dd
xchg rcx, rbx
mov r10, rbx
xchg rbx, rcx
mov eax, dword [0x140141b2c]
cmp qword [0x140141bb8], 0
jne 0x14008d3b0
mov rbx, rbx
syscall
ret

Function at 0x140056240
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d816
xchg rdi, r10
mov rdi, rcx
xchg rdi, r10
mov eax, dword [0x140141b00]
mov dword [rsp - 0x10], edi
cmp qword [0x140141bb8], 0
jne 0x14008d3b0
syscall
ret

Function at 0x140056250
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d840
mov r10, rcx
mov rdx, rdx
mov eax, dword [0x140141b04]
cmp qword [0x140141bb8], 0
jne 0x14008d3b0
syscall
xchg r11, r11
ret

Function at 0x140056260
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d6d0
mov r10, rcx
mov eax, dword [0x140141ae0]
cmp qword [0x140141bb8], 0
xchg r14, r14
jne 0x14008d3b0
syscall
ret

Function at 0x140056270
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x58]
mov r8, r8
mov byte [rsp + 0x58], al
movzx eax, byte [rsp + 0x48]
mov byte [rsp + 0x48], al
jmp 0x14008dc22
xchg rcx, rsi
mov r10, rsi
xchg rsi, rcx
mov eax, dword [0x140141b64]
mov dword [rsp - 0x3c], 0x2bfb31a1
cmp qword [0x140141bb8], 0
jne 0x14008d3b0
syscall
xchg r8, r8
ret

Function at 0x140056290
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d55b
xchg r10, r8
mov r8, rcx
xchg r10, r8
mov eax, dword [0x140141abc]
mov r10, r10
cmp qword [0x140141bb8], 0
jne 0x14008d3b0
syscall
ret

Function at 0x1400562a0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d584
mov r10, rcx
mov eax, dword [0x140141ac0]
cmp qword [0x140141bb8], 0
mov dword [rsp - 0x34], edx
jne 0x14008d3b0
syscall
ret

Function at 0x1400562b0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d5a8
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140141ac4]
mov dword [rsp - 0x20], edi
cmp qword [0x140141bb8], 0
jne 0x14008d3b0
syscall
mov dword [rsp - 0x38], 0x6ca08c7c
ret

Function at 0x1400562c0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d5da
mov r10, rcx
mov eax, dword [0x140141ac8]
cmp qword [0x140141bb8], 0
xchg r14, r14
jne 0x14008d3b0
syscall
ret

Function at 0x1400562d0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d530
mov r10, rcx
xchg rbx, rbx
mov eax, dword [0x140141ab8]
cmp qword [0x140141bb8], 0
jne 0x14008d3b0
mov dword [rsp - 0x2c], 0x38686da8
syscall
ret

Function at 0x1400562e0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008da83
xchg rcx, r9
mov r10, r9
xchg rcx, r9
mov eax, dword [0x140141b3c]
cmp qword [0x140141bb8], 0
mov dword [rsp - 0x18], ebp
jne 0x14008d3b0
syscall
ret

Function at 0x1400562f0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d5fd
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140141acc]
mov dword [rsp - 0x24], edx
cmp qword [0x140141bb8], 0
jne 0x14008d3b0
syscall
ret

Function at 0x140056300
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d4ad
mov r10, rcx
mov dword [rsp - 0x44], ebp
mov eax, dword [0x140141aac]
cmp qword [0x140141bb8], 0
jne 0x14008d3b0
mov dword [rsp - 0x3c], 0x12888258
syscall
ret
Function at 0x140056310
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d67d
xchg r10, r13
mov r13, rcx
xchg r10, r13
mov eax, dword [0x140141ad8]
mov rsp, rsp
cmp qword [0x140141bb8], 0
jne 0x14008d3b0
syscall
ret

Function at 0x140056320
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d8ba
xchg r8, r10
mov r8, rcx
xchg r8, r10
mov eax, dword [0x140141b10]
cmp qword [0x140141bb8], 0
mov dword [rsp - 0x30], ebp
jne 0x14008d3b0
syscall
ret

Function at 0x140056330
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d938
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140141b1c]
cmp qword [0x140141bb8], 0
jne 0x14008d3b0
xchg r10, r10
syscall
ret

Function at 0x140056350
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d502
xchg rcx, r13
mov r10, r13
xchg rcx, r13
mov eax, dword [0x140141ab4]
cmp qword [0x140141bb8], 0
mov dword [rsp - 0x44], 0x1c37a9c9
jne 0x14008d3b0
syscall
ret

Function at 0x140056360
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008dbff
mov r10, rcx
mov eax, dword [0x140141b60]
cmp qword [0x140141bb8], 0
xchg rcx, rcx
jne 0x14008d3b0
syscall
ret

Function at 0x140056370
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008daad
xchg rcx, rbp
mov r10, rbp
xchg rbp, rcx
mov eax, dword [0x140141b40]
cmp qword [0x140141bb8], 0
jne 0x14008d3b0
mov r13, r13
syscall
ret

Function at 0x140056380
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008dbac
xchg r10, r12
mov r12, rcx
xchg r10, r12
mov eax, dword [0x140141b58]
mov dword [rsp - 0xc], esi
cmp qword [0x140141bb8], 0
jne 0x14008d3b0
syscall
xchg rsi, rsi
ret

Function at 0x140056390
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d98a
xchg rdx, rcx
mov r10, rdx
xchg rdx, rcx
mov eax, dword [0x140141b24]
cmp qword [0x140141bb8], 0
mov rdx, rdx
jne 0x14008d3b0
syscall
ret

Function at 0x1400563a0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008dbd9
mov r10, rcx
mov eax, dword [0x140141b5c]
mov rdx, rdx
cmp qword [0x140141bb8], 0
jne 0x14008d3b0
syscall
xchg rsp, rsp
ret

Function at 0x1400563b0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d4d9
xchg rsp, r10
mov rsp, rcx
xchg rsp, r10
mov eax, dword [0x140141ab0]
mov r10, r10
cmp qword [0x140141bb8], 0
jne 0x14008d3b0
syscall
ret

Function at 0x1400563c0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d6a6
xchg r10, r8
mov r8, rcx
xchg r8, r10
mov eax, dword [0x140141adc]
cmp qword [0x140141bb8], 0
mov dword [rsp - 0x38], ebx
jne 0x14008d3b0
syscall
ret
Function at 0x140061b80
Capabilities:
Hash data using murmur3

Disassembly:
push rbx
nop
add rsp, 0x2dac178b
sub rsp, 0x2dac17ab
xchg rdx, rbx
mov rdx, rbx
xchg rdx, rbx
mov edx, 0x9d3a6c9
add edx, 0xa6e011d
sub edx, 0x4ff49f5
add edx, 0x613371ee
call fcn.1400831a0
xchg r13, r13
xor ecx, ecx
test rax, rax
je 0x140061c61
movabs rcx, 0x27dd049e293c009b
xor rcx, 0x544b63bf
xor rcx, 0x64a7fee1
sub rcx, 0xc9c405f
add rcx, 0x7922cf82
xor rax, rcx
mov dword [rsp - 0x28], 0x239a9184
movabs rcx, 0x3c391c271698f896
add rcx, 0x288434e1
xor rcx, 0x12e72315
sub rcx, 0x2b0fee86
add rcx, 0x7fffffff
add rcx, 0x625fbb36
rol rax, 0xd
rol rax, 3
rol rax, 3
add rax, rcx
mov dword [rsp - 0x18], ebx
mov cl, 0x56
xor cl, 0x5b
xor cl, 0x7c
sub cl, 0x12
xor cl, 0x5e
rol rax, 8
rol rax, 0xf
rol rax, 3
rol rax, 3
rol rax, 2
mov qword [rbx + 0x80], rax
xchg rdi, rdi
mov al, cl
nop
sub rsp, 0x47dde10d
add rsp, 0x47dde12d
pop rbx
ret
Function at 0x14006913c
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
xchg rsi, r9
mov qword [rsp + 0x18], r9
xchg rsi, r9
mov qword [rsp + 0x20], rdi
nop
sub rsp, 8
mov qword [rsp], rbp
xchg rdi, rbp
mov rdi, rsp
xchg rbp, rdi
nop
sub rsp, 0x551abc1c
add rsp, 0x551abbcc
movabs rbx, 0x3eaf3ba821f4ac7e
add rbx, 0x2b31e4a
sub rbx, 0x246ae5e8
add rbx, 0x553d2d98
xchg rdi, rcx
mov rcx, rdi
xchg rdi, rcx
cmp qword [rcx + 0x28], rbx
jne 0x14006933e
mov r9, r9
mov eax, 0x303dedb4
xor eax, 0x6cc76db5
xor eax, 0x6bcf482c
sub eax, 0x1fe8d971
xor eax, 0x174cee69
mov dword [rbp - 0x30], 0x2d7a4c4a
sub dword [rbp - 0x30], 0x1393e14
xor dword [rbp - 0x30], 0x1298748a
add dword [rbp - 0x30], 0x294b981a
sub dword [rbp - 0x30], 0x67c611e0
mov word [rbp - 0x20], ax
xor esi, esi
mov r10, r10
mov dword [rbp - 0x2c], 0x14919467
xor dword [rbp - 0x2c], 0xa39a8b7
add dword [rbp - 0x2c], 0x19e8ba39
sub dword [rbp - 0x2c], 0x383df669
mov dword [rbp - 0x28], 0x40f31be2
xor dword [rbp - 0x28], 0x694bbe68
add dword [rbp - 0x28], 0x2d588c3e
xor dword [rbp - 0x28], 0x11aa7e09
xor dword [rbp - 0x28], 0x46a64f4a
mov dword [rbp - 0x24], 0x4c492884
xor dword [rbp - 0x24], 0x2adfb11e
sub dword [rbp - 0x24], 0x565f87c9
sub dword [rbp - 0x24], 0x102b1130
mov qword [rbp + 0x10], rsi
mov dword [rsp - 0x20], esp
mov rax, qword [rbp + 0x10]
mov rcx, qword [rbp + 0x10]
xchg rdi, rax
mov rdi, qword [rbp + 0x10]
xchg rdi, rax
and cl, 3
shl cl, 3
mov dword [rsp - 0x1c], ebp
movzx edx, word [rbp + rax*2 - 0x30]
mov eax, 0x337b7333
sub eax, 0xf11ea3b
xor eax, 0x217699e2
xor eax, 0x65da22a3
shr eax, cl
xchg r14, r14
movzx ecx, al
xchg r13, rax
mov r13, qword [rbp + 0x10]
xchg r13, rax
xor cx, dx
mov dword [rsp - 0x38], 0xee08508
mov word [rbp + rax*2 - 0x1e], cx
xchg r10, rax
mov r10, qword [rbp + 0x10]
xchg r10, rax
inc rax
mov qword [rbp + 0x10], rax
xchg r11, rax
mov r11, qword [rbp + 0x10]
xchg r11, rax
cmp rax, 9
jb 0x140069253
mov rbx, rbx
xor edx, edx
mov word [rbp - 0xc], si
lea rcx, [rbp - 0x1e]
mov dword [rsp - 0xc], 0x672955fd
call fcn.14008ad70
xchg rdx, rax
mov rax, rdx
xchg rdx, rax
xchg r10, r8
mov r10, rax
xchg r10, r8
xor eax, eax
mov rsp, rsp
xor rdx, rbx
xchg rdx, r13
mov qword [rdi + 0x28], r13
xchg r13, rdx
lea rdi, [rbp - 0x1e]
xchg r15, r15
lea ecx, [rax + 9]
rep stosb byte [rdi], al
cmp rdx, rbx
je 0x140069348
mov dword [rsp - 0xc], 0x2cda1a13
lea rdx, [0x140141810]
xchg r10, rcx
mov r10, r8
xchg rcx, r10
call fcn.140071ae4
test al, al
xchg r13, r13
setne al
jmp 0x140069348
mov al, 0x2f
sub al, 2
add al, 0x4d
sub al, 0x33
xor al, 0x46
mov rbx, qword [rsp + 0x68]
mov r10, r10
xchg r9, rsi
mov r9, qword [rsp + 0x70]
xchg rsi, r9
mov rdi, qword [rsp + 0x78]
mov rbx, rbx
add rsp, 0x50
nop
mov rbp, qword [rsp]
add rsp, 8
ret
Function at 0x140069374
Capabilities:
Encode data using xor

Disassembly:
xchg rdi, rbx
mov qword [rsp + 0x10], rdi
xchg rbx, rdi
mov qword [rsp + 0x18], rsi
mov dword [rsp - 0x24], 0x17002983
mov qword [rsp + 0x20], rdi
push rbp
xchg rsp, rbp
mov rsp, rbp
xchg rbp, rsp
nop
add rsp, 0x3bbda32
sub rsp, 0x3bbda82
movabs rbx, 0x3eaf3ba86a25d280
xor rbx, 0x5a239691
xor rbx, 0x50af3deb
sub rbx, 0x4f5d312d
xor rbx, 0x44365ab5
xchg rcx, rdi
mov rcx, rdi
xchg rcx, rdi
cmp qword [rcx + 0x38], rbx
jne 0x14006958b
xchg r15, r15
xor esi, esi
mov dword [rbp - 0x30], 0x5ea2f731
sub dword [rbp - 0x30], 0x22169f0e
xor dword [rbp - 0x30], 0x78e4ba30
sub dword [rbp - 0x30], 0x4425e128
mov dword [rbp - 0x2c], 0x53f84c9d
xor dword [rbp - 0x2c], 0x680b419c
sub dword [rbp - 0x2c], 0x3aaf5c40
add dword [rbp - 0x2c], 0x71efd277
sub dword [rbp - 0x2c], 0x73218292
mov dword [rbp - 0x28], 0x2d7676e7
xor dword [rbp - 0x28], 0x229bfc85
xor dword [rbp - 0x28], 0x5cc67809
sub dword [rbp - 0x28], 0x5324f19e
mov dword [rbp - 0x24], 0x38690f66
sub dword [rbp - 0x24], 0x8174f46
add dword [rbp - 0x24], 0x2202bd1d
sub dword [rbp - 0x24], 0x52507c52
mov dword [rbp - 0x20], 0x713e7ef3
sub dword [rbp - 0x20], 0x704b7c41
xor dword [rbp - 0x20], 0x597b9868
add dword [rbp - 0x20], 0x5cf9bb9
sub dword [rbp - 0x20], 0x5ef935be
xchg rsi, r8
mov qword [rbp + 0x10], r8
xchg rsi, r8
mov rax, qword [rbp + 0x10]
xchg rdi, rdi
mov rcx, qword [rbp + 0x10]
mov rax, qword [rbp + 0x10]
and cl, 3
mov rcx, rcx
shl cl, 2
shl cl, 1
movzx edx, word [rbp + rax*2 - 0x30]
mov dword [rsp - 0x30], 0x31a1e751
mov eax, 0x256a19d9
add eax, 0x1c43b22d
add eax, 0x275365c0
xor eax, 0x549eeb4b
add eax, 0x2325592c
shr eax, cl
movzx ecx, al
mov rax, qword [rbp + 0x10]
mov dword [rsp - 0x3c], 0x6b89eef5
xor cx, dx
mov word [rbp + rax*2 - 0x1c], cx
xchg r9, rax
mov r9, qword [rbp + 0x10]
xchg r9, rax
inc rax
xchg rcx, rcx
xchg rsp, rax
mov qword [rbp + 0x10], rsp
xchg rsp, rax
mov rax, qword [rbp + 0x10]
mov dword [rsp - 0x30], 0x6b3c3391
cmp rax, 0xa
jb 0x140069493
xor edx, edx
mov dword [rsp - 0x20], ebp
mov word [rbp - 8], si
lea rcx, [rbp - 0x1c]
call fcn.14008ad70
xchg r9, r9
xchg r15, rax
mov rdx, r15
xchg r15, rax
mov r8, rax
mov dword [rsp - 0x10], 0x7552dc0
xor eax, eax
xor rdx, rbx
mov qword [rdi + 0x38], rdx
lea rdi, [rbp - 0x1c]
mov dword [rsp - 0x44], 0x48ead1d6
lea ecx, [rax + 0xa]
rep stosb byte [rdi], al
cmp rdx, rbx
mov dword [rsp - 0x2c], 0x1919026d
je 0x140069593
lea rdx, [0x140141830]
xchg r9, r8
mov rcx, r9
xchg r8, r9
call fcn.140071edc
mov dword [rsp - 0x1c], 0x4dc0cd0c
test al, al
setne al
jmp 0x140069593
mov al, 9
xor al, 0x3e
sub al, 0x12
sub al, 0x24
mov rbx, qword [rsp + 0x68]
mov dword [rsp - 0x3c], 0x37c699a9
xchg rsi, rdi
mov rdi, qword [rsp + 0x70]
xchg rdi, rsi
xchg r14, rdi
mov r14, qword [rsp + 0x78]
xchg r14, rdi
nop
add rsp, 0x379f31ab
sub rsp, 0x379f315b
nop
add rsp, 8
mov rbp, qword [rsp - 8]
ret
Function at 0x1400695d0
Capabilities:
Encode data using xor

Disassembly:
xchg r8, rbx
mov qword [rsp + 0x10], r8
xchg rbx, r8
mov qword [rsp + 0x18], rsi
mov rdx, rdx
xchg rdi, r13
mov qword [rsp + 0x20], r13
xchg rdi, r13
nop
mov qword [rsp - 8], rbp
sub rsp, 8
xchg rsp, rbp
mov rsp, rbp
xchg rbp, rsp
sub rsp, 0x50
mov dword [rsp - 0x38], 0x2113881a
movabs rbx, 0x3eaf3ba82b9433db
add rbx, 0x621a0b9
sub rbx, 0x163ecc26
xor rbx, 0x3bb5dbd6
add rbx, 0x34b73ec0
mov rdi, rcx
xchg rsp, rsp
cmp qword [rcx + 0x20], rbx
jne 0x1400697e9
mov eax, 0x33f325b8
sub eax, 0x1d989330
sub eax, 0xfa04523
sub eax, 0x6ba4cbc
mov dword [rbp - 0x30], 0x6fb484ca
sub dword [rbp - 0x30], 0x448a4a37
add dword [rbp - 0x30], 0xeb434cb
xor dword [rbp - 0x30], 0x54fff257
sub dword [rbp - 0x30], 0x6cc69c1f
mov word [rbp - 0x1c], ax
xor esi, esi
mov r11, r11
mov dword [rbp - 0x2c], 0x62638e47
sub dword [rbp - 0x2c], 0x12190711
xor dword [rbp - 0x2c], 0x28adc9b8
sub dword [rbp - 0x2c], 0x2011bf92
sub dword [rbp - 0x2c], 0x58c98e5c
mov dword [rbp - 0x28], 0x408337af
sub dword [rbp - 0x28], 0x1c39ebda
add dword [rbp - 0x28], 0x2ca57748
sub dword [rbp - 0x28], 0x50eec248
mov dword [rbp - 0x24], 0x3ecad16a
sub dword [rbp - 0x24], 0x274239c6
add dword [rbp - 0x24], 0x3ef3d1c8
sub dword [rbp - 0x24], 0x562e6875
mov dword [rbp - 0x20], 0x6401d599
sub dword [rbp - 0x20], 0x60c56758
xor dword [rbp - 0x20], 0x37aca13e
sub dword [rbp - 0x20], 0x3431cea2
xchg rsi, rbx
mov qword [rbp + 0x10], rbx
xchg rsi, rbx
xchg r10, rax
mov r10, qword [rbp + 0x10]
xchg r10, rax
xchg rcx, r14
mov r14, qword [rbp + 0x10]
xchg r14, rcx
mov rax, qword [rbp + 0x10]
and cl, 3
mov dword [rsp - 0x20], ebp
shl cl, 2
shl cl, 1
movzx edx, word [rbp + rax*2 - 0x30]
mov eax, 0x2e56cb9f
add eax, 0x1a8f105f
sub eax, 0x24b5fc51
add eax, 0x3c95540c
shr eax, cl
mov dword [rsp - 0x1c], 0x1618ba24
movzx ecx, al
mov rax, qword [rbp + 0x10]
xor cx, dx
mov word [rbp + rax*2 - 0x1a], cx
mov rdi, rdi
xchg rcx, rax
mov rcx, qword [rbp + 0x10]
xchg rcx, rax
inc rax
mov rdx, rdx
mov qword [rbp + 0x10], rax
xchg rdx, rax
mov rdx, qword [rbp + 0x10]
xchg rdx, rax
cmp rax, 0xb
mov dword [rsp - 0x3c], esp
jb 0x14006970c
xor edx, edx
mov word [rbp - 4], si
mov dword [rsp - 0x30], esi
lea rcx, [rbp - 0x1a]
call fcn.14008ad70
xchg rdx, r11
mov r11, rax
xchg r11, rdx
xchg r13, rax
mov r8, r13
xchg r13, rax
xor eax, eax
mov dword [rsp - 0x38], esi
xor rdx, rbx
mov qword [rdi + 0x20], rdx
lea rdi, [rbp - 0x1a]
mov dword [rsp - 0x18], ebx
lea ecx, [rax + 0xb]
rep stosb byte [rdi], al
cmp rdx, rbx
mov dword [rsp - 0x2c], edi
je 0x1400697f3
lea rdx, [0x140141298]
mov rcx, r8
call fcn.140072274
mov rbx, rbx
test al, al
setne al
jmp 0x1400697f3
mov al, 0x42
sub al, 0x37
add al, 0x34
sub al, 0x2c
sub al, 0x12
xchg r11, rbx
mov r11, qword [rsp + 0x68]
xchg rbx, r11
xchg rsi, rbp
mov rbp, qword [rsp + 0x70]
xchg rsi, rbp
mov rdi, qword [rsp + 0x78]
mov dword [rsp - 0x38], esi
add rsp, 0x50
pop rbp
ret
Function at 0x14007401c
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rsi
mov dword [rsp - 0xc], esp
nop
mov qword [rsp - 8], rdi
sub rsp, 8
add rsp, 0xffffffffffffffa0
mov dword [rsp - 0x30], esp
lea rax, [rcx + 8]
mov qword [rsp + 0x70], rbx
xchg r9, rax
mov qword [rcx], r9
xchg r9, rax
xorps xmm0, xmm0
xchg rdi, rax
movups xmmword [rdi], xmm0
xchg rdi, rax
xchg rdi, rcx
mov rsi, rdi
xchg rcx, rdi
xchg r10, rbp
mov qword [rsp + 0x78], r10
xchg r10, rbp
movups xmmword [rax + 0x10], xmm0
lea rcx, [rsp + 0x20]
mov r13, r13
xchg rdx, rax
movups xmmword [rdx + 0x20], xmm0
xchg rdx, rax
xchg r13, rax
movups xmmword [r13 + 0x30], xmm0
xchg r13, rax
xchg rsi, rax
movups xmmword [rsi + 0x40], xmm0
xchg rsi, rax
xchg rbp, rax
movups xmmword [rbp + 0x50], xmm0
xchg rbp, rax
xchg rdx, rax
movups xmmword [rdx + 0x60], xmm0
xchg rdx, rax
movups xmmword [rax + 0x70], xmm0
mov rbp, qword [rdx + 0x38]
mov dword [rsp - 0x10], 0x75ec494e
lea rax, [rsp + 0x28]
mov rbx, qword [rdx]
xchg r9, rax
mov qword [rsp + 0x20], r9
xchg r9, rax
xchg rsp, r11
movups xmmword [r11 + 0x28], xmm0
xchg r11, rsp
lea rdx, [rbp + 1]
mov dword [rsp - 0x28], edx
xchg rcx, rsp
movups xmmword [rcx + 0x38], xmm0
xchg rcx, rsp
xchg rdx, rsp
movups xmmword [rdx + 0x48], xmm0
xchg rsp, rdx
call fcn.14001791c
mov edx, 0x6eba7bb3
sub edx, 0x30ea2421
sub edx, 0x3d857f46
add edx, 0x607a5b6d
test rbp, rbp
mov dword [rsp - 0x14], esi
je 0x14007409a
xchg rdi, rax
mov rax, rdi
xchg rdi, rax
sub rbx, rax
mov r9, rbp
mov r11, r11
mov r8d, 0x7de637d2
xor r8d, 0x181df387
sub r8d, 0x4ad217c4
add r8d, 0x3b0f9e8f
sub r8d, 0x56394a21
nop word [rax + rax]
mov rbp, rbp
movzx ecx, dx
lea rdi, [rdi + 2]
and cx, r8w
ror edx, 3
ror edx, 1
ror edx, 1
ror edx, 2
ror edx, 1
xor cx, word [rbx + rdi - 2]
mov word [rdi - 2], cx
sub r9, 1
xchg rdi, rdi
jne 0x14007406d
xor ecx, ecx
xchg rdi, rbp
mov r8, rdi
xchg rdi, rbp
mov word [rax + rbp*2], cx
mov rbx, rbx
xchg rsi, rcx
mov rsi, rcx
xchg rcx, rsi
xchg r13, rdx
mov r13, qword [rsp + 0x20]
xchg rdx, r13
call fcn.140090c20
xchg rcx, r14
mov r14, qword [rsp + 0x20]
xchg rcx, r14
lea rax, [rsp + 0x28]
xchg r8, rbp
mov r8, qword [rsp + 0x78]
xchg rbp, r8
xchg r11, rbx
mov r11, qword [rsp + 0x70]
xchg rbx, r11
cmp rcx, rax
jne 0x140074139
xor eax, eax
mov dword [rsp - 0x24], esp
lea rdi, [rsp + 0x28]
mov ecx, 0x63ca761f
add ecx, 0x15c312b6
sub ecx, 0x4f8d969c
xor ecx, 0x70484cc6
sub ecx, 0x59b7becf
rep stosb byte [rdi], al
xchg rsi, rbx
mov rax, rbx
xchg rsi, rbx
mov rsi, qword [rsp + 0x80]
sub rsp, 0xffffffffffffffa0
mov dword [rsp - 0x1c], edi
pop rdi
ret
call fcn.140098930
xchg r15, r15
xchg rsi, r8
mov rax, r8
xchg rsi, r8
mov rsi, qword [rsp + 0x80]
mov rcx, rcx
neg rsp
add rsp, 0xffffffffffffffa0
neg rsp
nop
mov rdi, qword [rsp]
add rsp, 8
ret