joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140053082
Capabilities:
Execute syscall

Disassembly:
invalid
rcr ebp, 0x31
sub esi, 0x5040c69e
jge 0x14005251e
syscall
call rcx
ret

Function at 0x140053ec0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rdi
xchg r11, r11
add rsp, 0xffffffffffffffe0
xchg rbx, rdx
mov rdx, rbx
xchg rdx, rbx
xchg rdi, rcx
mov rcx, rdi
xchg rdi, rcx
nop
movabs rdx, 0xffffffff651e3bf7
sub rdx, 0x6189aa11
add rdx, 0x1a1dae87
add rdx, 0x7fffffff
add rdx, 0x624dbf93
nop word [rax + rax]
mov dword [rsp - 0x28], ebx
inc rdx
cmp word [rbx + rdx*2], 0
jne 0x140053f13
mov r13, r13
xchg r14, rdx
mov qword [rcx + 0x38], r14
xchg r14, rdx
call fcn.14001795c
mov r8, r8
xor r8d, r8d
mov edx, 0x59ba0d90
sub edx, 0x159e68f8
sub edx, 0x26a3281
xor edx, 0x73a5d550
xor edx, 0x1f41e448
cmp qword [rdi + 0x38], r8
jbe 0x140053fbf
sub rbx, rax
xchg r15, r15
mov r9d, 0x24151dbf
sub r9d, 0x442421d
xor r9d, 0x18d7b83a
add r9d, 0x5193e1cb
xor r9d, 0x5899459c
nop word [rax + rax]
movzx ecx, dx
mov r9, r9
lea rax, [rax + 2]
and cx, r9w
ror edx, 3
ror edx, 3
ror edx, 1
ror edx, 1
xor cx, word [rbx + rax - 2]
inc r8
mov word [rax - 2], cx
xchg r14, r14
cmp r8, qword [rdi + 0x38]
jb 0x140053f8e
xchg rbx, r10
mov r10, qword [rsp + 0x30]
xchg rbx, r10
mov rax, rdi
xchg rbp, rbp
xchg ebp, ebp
Function at 0x140054670
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r12
mov qword [rsp + 8], r12
xchg r12, rbx
xchg rbp, rsi
mov qword [rsp + 0x10], rbp
xchg rbp, rsi
nop
push 0x243c3193
mov qword [rsp], rdi
add rsp, 0xffffffffffffffe0
xchg rsi, rbp
mov rbp, qword [rcx + 0x38]
xchg rsi, rbp
mov rbx, rdx
mov dword [rsp - 0x44], ebx
mov r8, qword [rdx + 0x38]
xchg rdx, rcx
mov rdi, rdx
xchg rcx, rdx
add r8, rsi
xchg rbx, rsi
mov rdx, rbx
xchg rbx, rsi
xchg r8, r9
mov qword [rcx + 0x38], r9
xchg r9, r8
call fcn.140055390
mov r12, r12
xchg rcx, r9
mov rcx, qword [rbx]
xchg r9, rcx
mov ecx, esi
mov dword [rsp - 0x24], 0x75711943
and ecx, 3
mov r8d, 0x2969481f
add r8d, 0xecc5f2b
xor r8d, 0x30514820
xor r8d, 0x1098afee
add r8d, 0x1459028b
shl ecx, 1
shl ecx, 1
shl ecx, 1
mov edx, r8d
ror edx, cl
xchg r12, r12
xchg r10, r15
mov r15, rax
xchg r15, r10
xor ecx, ecx
mov r15, r15
cmp qword [rbx + 0x38], rcx
jbe 0x1400547aa
lea rax, [rsi + rsi]
mov r11d, 0x4c22e0c4
add r11d, 0x31a0449
sub r11d, 0x3e10419d
sub r11d, 0x112ca271
sub rax, r9
mov dword [rsp - 0x2c], edi
add r10, rax
nop dword [rax]
movzx eax, dx
lea r9, [r9 + 2]
mov dword [rsp - 0x40], ecx
xor ax, r8w
ror edx, 5
ror edx, 1
ror edx, 1
ror edx, 1
and ax, r11w
mov dword [rsp - 0x44], 0x66c3151d
ror r8d, 2
ror r8d, 2
ror r8d, 4
xor ax, word [r9 - 2]
inc rcx
mov dword [rsp - 0xc], ecx
mov word [r10 + r9 - 2], ax
cmp rcx, qword [rbx + 0x38]
jb 0x14005475a
mov dword [rsp - 0x44], ebx
xchg rbx, r11
mov r11, qword [rsp + 0x30]
xchg r11, rbx
mov rax, rdi
mov dword [rsp - 0x10], 0x2d5bf0ab
xchg rsi, rbp
mov rbp, qword [rsp + 0x38]
xchg rsi, rbp
neg rsp
add rsp, 0xffffffffffffffe0
neg rsp
pop rdi
mov rsi, rsi
ret
Function at 0x1400547e0
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r9
mov qword [rsp + 8], r9
xchg rbx, r9
xchg rsi, r8
mov qword [rsp + 0x10], r8
xchg r8, rsi
mov qword [rsp + 0x18], rdi
nop
mov qword [rsp - 8], r14
sub rsp, 8
nop
add rsp, 0x6b406c84
sub rsp, 0x6b406ca4
mov r14, qword [rcx + 0x38]
xchg rbp, rbp
xchg rdi, r8
mov r8, rdx
xchg r8, rdi
xchg rsi, rcx
mov rcx, rsi
xchg rcx, rsi
nop
movabs rbx, 0xffffffff6d82131c
sub rbx, 0x42fd82b6
add rbx, 0x50e525d3
add rbx, 0x7fffffff
add rbx, 0x49649c7
inc rbx
mov dword [rsp - 0xc], 0x3bdf3f24
cmp word [rdx + rbx*2], 0
jne 0x140054854
lea r8, [r14 + rbx]
mov rdx, r14
mov r15, r15
xchg r8, r10
mov qword [rcx + 0x38], r10
xchg r10, r8
call fcn.140055390
mov ecx, r14d
mov r15, r15
mov edx, 0x580f7239
xor edx, 0x1200142b
sub edx, 0x4686748
sub edx, 0x846c56f
xor edx, 0x10357a54
and ecx, 3
shl ecx, 1
shl ecx, 2
ror edx, cl
test rbx, rbx
mov rdi, rdi
je 0x14005491c
lea r8, [r14 + r14]
mov ecx, 0x7677764f
sub ecx, 0x6961a49b
add ecx, 0x6a0510b6
sub ecx, 0x771ae16b
sub r8, rdi
mov rbx, rbx
add r8, rax
nop dword [rax]
nop dword [rax + rax]
movzx eax, dx
xchg r10, r10
lea rdi, [rdi + 2]
and ax, cx
ror edx, 1
ror edx, 6
ror edx, 1
xor ax, word [rdi - 2]
mov word [r8 + rdi - 2], ax
mov dword [rsp - 0x1c], 0x748344f4
sub rbx, 1
jne 0x1400548ec
xchg r12, rbx
mov r12, qword [rsp + 0x30]
xchg r12, rbx
xchg rsi, rax
mov rsi, rax
xchg rsi, rax
mov rsi, qword [rsp + 0x38]
mov r9, r9
xchg r12, rdi
mov r12, qword [rsp + 0x40]
xchg rdi, r12
nop
sub rsp, 0x5a0e90cc
add rsp, 0x5a0e90ec
pop r14
xchg r11, r11
ret
Function at 0x1400551c1
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
xchg rbx, rbx
xchg rbp, r15
mov qword [rsp + 0x18], r15
xchg rbp, r15
nop
sub rsp, 8
mov qword [rsp], rsi
push rdi
mov dword [rsp - 0x1c], edi
nop
mov qword [rsp - 8], r14
sub rsp, 8
nop
add rsp, 0x4ddadbef
sub rsp, 0x4ddadc0f
lea rsi, [rdx + 8]
xchg rcx, rcx
xorps xmm0, xmm0
xchg rsi, r13
mov qword [rdx], r13
xchg rsi, r13
xor edi, edi
mov dword [rsp - 0x24], ebp
xchg rsi, r12
movups xmmword [r12], xmm0
xchg r12, rsi
xchg r15, r14
mov r15, r9
xchg r14, r15
xchg rbp, r10
mov r10, r8
xchg rbp, r10
xchg rsi, r10
movups xmmword [r10 + 0x10], xmm0
xchg r10, rsi
xchg rbx, r15
mov r15, rdx
xchg r15, rbx
xchg rbp, rsi
movups xmmword [rbp + 0x20], xmm0
xchg rbp, rsi
mov qword [rdx + 0x38], rdi
mov rax, qword [rcx + 0x38]
mov dword [rsp - 0x28], 0x4ded888
cmp r8, rax
jae 0x140055313
sub rax, r8
xchg r13, r15
mov qword [rsp + 0x40], r13
xchg r15, r13
cmp rax, r9
mov r12, r12
cmovb r14, rax
mov qword [rdx + 0x38], r14
xchg r8, rax
mov r8, qword [rcx]
xchg r8, rax
xchg r13, rcx
mov r13, qword [rdx]
xchg r13, rcx
lea r15, [rax + r8*2]
mov dword [rsp - 0x3c], 0x43daf8b1
cmp rcx, rsi
je 0x1400551ad
call fcn.140098ac0
cmp r14, 0x18
xchg r8, r8
jbe 0x1400551ec
lea rcx, [r14 + r14]
call fcn.140098d80
mov dword [rsp - 0x10], 0x78fe3d44
mov qword [rbx], rax
test rax, rax
jne 0x1400551fe
mov qword [rbx], rsi
mov dword [rsp - 0x2c], edx
xchg r9, r13
mov r13, rdi
xchg r9, r13
jmp 0x140055221
xchg rbp, rsi
mov qword [rbx], rbp
xchg rbp, rsi
xchg rsi, r11
mov rax, r11
xchg rsi, r11
xorps xmm0, xmm0
xchg rbx, rax
movups xmmword [rbx], xmm0
xchg rbx, rax
movups xmmword [rax + 0x10], xmm0
mov dword [rsp - 0x30], ebp
xchg rdi, rax
movups xmmword [rdi + 0x20], xmm0
xchg rdi, rax
xchg rsi, r9
mov rsi, qword [rbx]
xchg r9, rsi
and ebp, 3
mov r8d, 0x77f86833
sub r8d, 0x19dda363
xor r8d, 0x2498b8d1
sub r8d, 0x4f94380b
xor r8d, 0x7bb00f9
shl ebp, 1
shl ebp, 2
mov edx, r8d
xchg r12, r12
movzx ecx, bpl
ror edx, cl
cmp qword [rbx + 0x38], rdi
jbe 0x1400552ce
mov dword [rsp - 0x30], edx
sub r15, r9
mov ecx, 0x76eea497
sub ecx, 0x223cf837
sub ecx, 0x23fc6b02
sub ecx, 0x30b5405f
nop dword [rax]
nop word [rax + rax]
mov rsp, rsp
movzx eax, dx
lea r9, [r9 + 2]
xor ax, r8w
ror edx, 6
ror edx, 1
ror edx, 1
and ax, cx
ror r8d, 4
ror r8d, 3
ror r8d, 1
xor ax, word [r15 + r9 - 2]
xchg rbx, rbx
inc rdi
mov word [r9 - 2], ax
cmp rdi, qword [rbx + 0x38]
jb 0x14005528f
mov dword [rsp - 0x44], esp
mov r15, qword [rsp + 0x40]
xchg rdi, rax
mov rdi, rbx
xchg rdi, rax
mov rbx, qword [rsp + 0x48]
mov rcx, rcx
mov rbp, qword [rsp + 0x50]
nop
add rsp, 0x4ff8b7bf
sub rsp, 0x4ff8b79f
nop
mov r14, qword [rsp]
add rsp, 8
pop rdi
mov dword [rsp - 0x10], 0x3dde812c
nop
add rsp, 8
mov rsi, qword [rsp - 8]
ret
xchg r15, rax
mov r15, rbx
xchg r15, rax
jmp 0x1400552da

Function at 0x1400556f0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d88f
mov r10, rcx
mov eax, dword [0x140142ad0]
cmp qword [0x140142bb8], 0
mov dword [rsp - 0x1c], 0x4e211ccd
jne 0x14008d610
syscall
ret
Function at 0x140055710
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x28]
mov dword [rsp - 0x10], 0x65b9d3c7
mov byte [rsp + 0x28], al
jmp 0x14008decd
xchg rcx, rbx
mov r10, rbx
xchg rbx, rcx
mov eax, dword [0x140142b68]
cmp qword [0x140142bb8], 0
xchg r15, r15
jne 0x14008d610
syscall
ret

Function at 0x140055730
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d691
xchg rcx, rbx
mov r10, rbx
xchg rcx, rbx
mov eax, dword [0x140142aa0]
cmp qword [0x140142bb8], 0
mov dword [rsp - 0x38], 0x1fd71b6f
jne 0x14008d610
syscall
ret

Function at 0x140055740
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008dc20
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140142b28]
cmp qword [0x140142bb8], 0
mov rdi, rdi
jne 0x14008d610
syscall
ret

Function at 0x140055750
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008dade
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140142b08]
cmp qword [0x140142bb8], 0
mov rsp, rsp
jne 0x14008d610
syscall
ret

Function at 0x140055760
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d6f1
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140142aa8]
mov rsi, rsi
cmp qword [0x140142bb8], 0
jne 0x14008d610
syscall
mov dword [rsp - 0x30], ecx
ret

Function at 0x140055770
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008dd39
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140142b44]
xchg r10, r10
cmp qword [0x140142bb8], 0
jne 0x14008d610
syscall
ret

Function at 0x140055780
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008dd62
xchg rdx, r10
mov rdx, rcx
xchg rdx, r10
mov eax, dword [0x140142b48]
mov dword [rsp - 0x14], 0xb6b15d7
cmp qword [0x140142bb8], 0
jne 0x14008d610
syscall
mov dword [rsp - 0x40], 0x5c90afe
ret

Function at 0x140055790
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008dc98
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140142b34]
cmp qword [0x140142bb8], 0
mov dword [rsp - 0x24], ebx
jne 0x14008d610
syscall
ret

Function at 0x1400557a0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008dcc2
xchg r15, r10
mov r15, rcx
xchg r10, r15
mov eax, dword [0x140142b38]
cmp qword [0x140142bb8], 0
mov dword [rsp - 0x44], esp
jne 0x14008d610
syscall
ret

Function at 0x1400557b0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d8b7
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140142ad4]
xchg rsp, rsp
cmp qword [0x140142bb8], 0
jne 0x14008d610
syscall
mov r12, r12
ret

Function at 0x1400557c0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008db7c
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140142b18]
cmp qword [0x140142bb8], 0
jne 0x14008d610
mov dword [rsp - 0x24], 0xe8299cb
syscall
ret

Function at 0x1400557d0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008dbd0
mov r10, rcx
mov dword [rsp - 0x38], esp
mov eax, dword [0x140142b20]
cmp qword [0x140142bb8], 0
jne 0x14008d610
xchg rdx, rdx
syscall
ret

Function at 0x1400557e0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d6c3
xchg rsp, r10
mov rsp, rcx
xchg r10, rsp
mov eax, dword [0x140142aa4]
mov dword [rsp - 0x44], ebp
cmp qword [0x140142bb8], 0
jne 0x14008d610
syscall
ret
Function at 0x1400557f0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008dc49
mov r10, rcx
mov r15, r15
mov eax, dword [0x140142b2c]
cmp qword [0x140142bb8], 0
jne 0x14008d610
xchg r14, r14
syscall
ret

Function at 0x140055800
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008da87
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140142b00]
mov dword [rsp - 0x24], 0x453f318e
cmp qword [0x140142bb8], 0
jne 0x14008d610
syscall
ret

Function at 0x140055810
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008dab5
xchg rcx, rdx
mov r10, rdx
xchg rcx, rdx
mov eax, dword [0x140142b04]
cmp qword [0x140142bb8], 0
xchg rsi, rsi
jne 0x14008d610
syscall
ret

Function at 0x140055820
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d941
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140142ae0]
mov dword [rsp - 0x38], 0x57ac4690
cmp qword [0x140142bb8], 0
jne 0x14008d610
syscall
ret

Function at 0x140055830
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x58]
mov dword [rsp - 0x28], ecx
mov byte [rsp + 0x58], al
movzx eax, byte [rsp + 0x48]
mov byte [rsp + 0x48], al
jmp 0x14008de97
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140142b64]
mov dword [rsp - 0x18], 0x7571d066
cmp qword [0x140142bb8], 0
jne 0x14008d610
syscall
mov dword [rsp - 0x14], 0x6ea0dbe7
ret

Function at 0x140055850
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d7bf
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140142abc]
cmp qword [0x140142bb8], 0
mov r15, r15
jne 0x14008d610
syscall
ret

Function at 0x140055860
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d7e8
mov r10, rcx
mov eax, dword [0x140142ac0]
cmp qword [0x140142bb8], 0
mov dword [rsp - 0x40], 0x294046bf
jne 0x14008d610
syscall
ret

Function at 0x140055870
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d810
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140142ac4]
cmp qword [0x140142bb8], 0
mov dword [rsp - 0x18], esp
jne 0x14008d610
syscall
ret

Function at 0x140055880
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d83a
xchg rbx, rcx
mov r10, rbx
xchg rcx, rbx
mov eax, dword [0x140142ac8]
xchg rdi, rdi
cmp qword [0x140142bb8], 0
jne 0x14008d610
syscall
mov rbx, rbx
ret

Function at 0x140055890
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d79c
mov r10, rcx
mov eax, dword [0x140142ab8]
cmp qword [0x140142bb8], 0
mov rcx, rcx
jne 0x14008d610
syscall
ret

Function at 0x1400558a0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008dcec
xchg r10, rbx
mov rbx, rcx
xchg r10, rbx
mov eax, dword [0x140142b3c]
cmp qword [0x140142bb8], 0
mov dword [rsp - 0xc], ebx
jne 0x14008d610
syscall
ret

Function at 0x1400558b0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d866
xchg rcx, r13
mov r10, r13
xchg r13, rcx
mov eax, dword [0x140142acc]
cmp qword [0x140142bb8], 0
mov r15, r15
jne 0x14008d610
syscall
ret

Function at 0x1400558c0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d71e
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140142aac]
cmp qword [0x140142bb8], 0
mov dword [rsp - 0x40], 0x313775ad
jne 0x14008d610
syscall
ret
Function at 0x1400558d0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d8e3
xchg rcx, r14
mov r10, r14
xchg r14, rcx
mov eax, dword [0x140142ad8]
mov dword [rsp - 0x20], edi
cmp qword [0x140142bb8], 0
jne 0x14008d610
syscall
mov rcx, rcx
ret

Function at 0x1400558e0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008db30
mov r10, rcx
mov eax, dword [0x140142b10]
cmp qword [0x140142bb8], 0
mov r11, r11
jne 0x14008d610
syscall
ret

Function at 0x1400558f0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008dbaa
mov r10, rcx
xchg r8, r8
mov eax, dword [0x140142b1c]
cmp qword [0x140142bb8], 0
jne 0x14008d610
xchg r10, r10
syscall
ret

Function at 0x140055910
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d772
xchg r13, r10
mov r13, rcx
xchg r10, r13
mov eax, dword [0x140142ab4]
cmp qword [0x140142bb8], 0
mov dword [rsp - 0x1c], ecx
jne 0x14008d610
syscall
ret

Function at 0x140055920
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008de6e
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140142b60]
cmp qword [0x140142bb8], 0
mov rsp, rsp
jne 0x14008d610
syscall
ret

Function at 0x140055930
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008dd16
mov r10, rcx
mov eax, dword [0x140142b40]
cmp qword [0x140142bb8], 0
mov rcx, rcx
jne 0x14008d610
syscall
ret

Function at 0x140055940
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008de1d
mov r10, rcx
mov eax, dword [0x140142b58]
cmp qword [0x140142bb8], 0
mov dword [rsp - 0x10], 0x7848853d
jne 0x14008d610
syscall
ret

Function at 0x140055950
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008dbf7
xchg rcx, rdi
mov r10, rdi
xchg rdi, rcx
mov eax, dword [0x140142b24]
cmp qword [0x140142bb8], 0
jne 0x14008d610
xchg rsi, rsi
syscall
ret

Function at 0x140055960
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008de45
xchg r9, r10
mov r9, rcx
xchg r9, r10
mov eax, dword [0x140142b5c]
cmp qword [0x140142bb8], 0
xchg r14, r14
jne 0x14008d610
syscall
ret

Function at 0x140055970
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d74c
mov r10, rcx
xchg rdx, rdx
mov eax, dword [0x140142ab0]
cmp qword [0x140142bb8], 0
jne 0x14008d610
mov r11, r11
syscall
ret

Function at 0x140055980
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d910
xchg rcx, rsi
mov r10, rsi
xchg rsi, rcx
mov eax, dword [0x140142adc]
xchg r8, r8
cmp qword [0x140142bb8], 0
jne 0x14008d610
syscall
mov dword [rsp - 0x14], 0x313a6173
ret
Function at 0x14005c058
Capabilities:
Hash data using murmur3

Disassembly:
push rbx
sub rsp, 0x20
xchg rdx, rbx
mov rdx, rbx
xchg rbx, rdx
mov edx, 0x691d1523
sub edx, 0x5ab0af54
add edx, 0x204557c1
add edx, 0x335a536a
add edx, 0x19ce3b86
call fcn.140084ef0
mov dword [rsp - 0x18], ebx
xor ecx, ecx
test rax, rax
je 0x14005c14a
xchg rsi, rsi
rol rax, 4
rol rax, 3
rol rax, 1
movabs rcx, 0xd81a1f4c20200a4b
add rcx, 0x265648e7
add rcx, 0x156ba7c8
sub rcx, 0x3a9811b4
add rcx, 0x4c849c30
not rax
mov dword [rsp - 0x20], 0x65e86b0d
rol rax, 0xf
rol rax, 6
rol rax, 1
add rax, rcx
mov rdx, rdx
movabs rcx, 0x5c9767641f31e67c
add rcx, 0x33e19a36
xor rcx, 0x7dfe7ac5
add rcx, 0x7fffffff
xor rcx, 0x7a2db16f
xor rax, rcx
mov rdx, rdx
mov cl, 0x67
sub cl, 0x28
add cl, 0x37
xor cl, 0x77
rol rax, 0xd
rol rax, 6
rol rax, 0xb
rol rax, 8
rol rax, 3
rol rax, 1
rol rax, 2
rol rax, 1
rol rax, 1
mov qword [rbx + 0x1d0], rax
mov r11, r11
mov al, cl
nop
sub rsp, 0x20a34f23
add rsp, 0x20a34f43
nop
add rsp, 8
mov rbx, qword [rsp - 8]
ret
Function at 0x140068db0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
xchg r15, rdi
mov qword [rsp + 0x20], r15
xchg r15, rdi
push rbp
mov dword [rsp - 0x1c], 0x40a1ccc1
xchg rsp, rsi
mov rbp, rsi
xchg rsi, rsp
add rsp, 0xffffffffffffffa0
mov dword [rsp - 0x28], 0x64e412f6
movabs rbx, 0x77ee73b443166405
sub rbx, 0x2a02f596
add rbx, 0x356eee80
sub rbx, 0x32a73b56
mov rdi, rcx
cmp qword [rcx + 0x30], rbx
mov dword [rsp - 0x44], esp
jne 0x140068fcd
xor esi, esi
mov dword [rbp - 0x40], 0x44450bd0
sub dword [rbp - 0x40], 0x2f8bc01b
sub dword [rbp - 0x40], 0x8b5014
add dword [rbp - 0x40], 0x3e32e4b8
xor dword [rbp - 0x40], 0x5247e017
mov dword [rbp - 0x3c], 0x23bf6eec
add dword [rbp - 0x3c], 0x5543062d
sub dword [rbp - 0x3c], 0x138e149c
sub dword [rbp - 0x3c], 0x6178efe6
sub dword [rbp - 0x3c], 0x3af7074
mov dword [rbp - 0x38], 0x5cbc8f27
sub dword [rbp - 0x38], 0x593f91ac
xor dword [rbp - 0x38], 0x30df9ecb
sub dword [rbp - 0x38], 0x33796331
mov dword [rbp - 0x34], 0x30ffab5c
xor dword [rbp - 0x34], 0x5a7c9586
sub dword [rbp - 0x34], 0x62371a47
add dword [rbp - 0x34], 0x10f65ce2
sub dword [rbp - 0x34], 0x1923810f
mov dword [rbp - 0x30], 0x2d523c1f
add dword [rbp - 0x30], 0x27e294bd
sub dword [rbp - 0x30], 0xb69b857
xor dword [rbp - 0x30], 0x49ec18a4
mov dword [rbp - 0x2c], 0x46d2953c
xor dword [rbp - 0x2c], 0x226e0e9e
xor dword [rbp - 0x2c], 0x443d8deb
add dword [rbp - 0x2c], 0x3d20ed3e
sub dword [rbp - 0x2c], 0x5d61034e
xchg rsp, rsi
mov qword [rbp + 0x10], rsp
xchg rsp, rsi
xchg rsi, rax
mov rsi, qword [rbp + 0x10]
xchg rsi, rax
mov rcx, qword [rbp + 0x10]
xchg r9, r9
mov rax, qword [rbp + 0x10]
and cl, 3
shl cl, 3
movzx edx, word [rbp + rax*2 - 0x40]
mov dword [rsp - 0x38], 0x41cba608
mov eax, 0x113462fa
xor eax, 0x47def137
xor eax, 0x782c0c77
add eax, 0x316cc144
sub eax, 0x32de1def
shr eax, cl
movzx ecx, al
mov dword [rsp - 0x40], ecx
mov rax, qword [rbp + 0x10]
xor cx, dx
mov word [rbp + rax*2 - 0x28], cx
mov rax, qword [rbp + 0x10]
mov rbp, rbp
inc rax
mov qword [rbp + 0x10], rax
xchg rbx, rax
mov rbx, qword [rbp + 0x10]
xchg rbx, rax
cmp rax, 0xc
jb 0x140068eeb
mov dword [rsp - 0x10], 0x47006072
xor edx, edx
mov word [rbp - 0x10], si
lea rcx, [rbp - 0x28]
call fcn.14008b060
mov dword [rsp - 0x2c], 0x76f0374
xchg rdx, rax
mov rax, rdx
xchg rdx, rax
mov r8, rax
xor eax, eax
xor rdx, rbx
mov dword [rsp - 0x2c], 0x6591f7dc
mov qword [rdi + 0x30], rdx
lea rdi, [rbp - 0x28]
lea ecx, [rax + 0xc]
rep stosb byte [rdi], al
mov dword [rsp - 0x30], 0x2983883d
cmp rdx, rbx
je 0x140068fd7
lea rdx, [0x1401422c0]
xchg r8, rcx
mov r8, rcx
xchg r8, rcx
call fcn.14006d334
mov rdi, rdi
test al, al
setne al
jmp 0x140068fd7
mov al, 0x57
xor al, 0x5f
xor al, 0x14
add al, 0x42
xor al, 0x5f
lea r11, [rsp + 0x60]
mov dword [rsp - 0x34], 0x433f3557
xchg rbx, r10
mov r10, qword [r11 + 0x18]
xchg rbx, r10
mov rsi, qword [r11 + 0x20]
mov dword [rsp - 0x14], ecx
xchg rdi, rdx
mov rdx, qword [r11 + 0x28]
xchg rdx, rdi
mov rsp, r11
mov rbp, rbp
nop
mov rbp, qword [rsp]
add rsp, 8
ret
Function at 0x140069010
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
xchg rdi, rdi
nop
mov qword [rsp - 8], rbp
sub rsp, 8
xchg rbp, rsp
mov rsp, rbp
xchg rbp, rsp
sub rsp, 0x50
mov rdx, rdx
movabs rbx, 0x77ee73b42f5bcd28
xor rbx, 0x3f4fb25e
xor rbx, 0x6914a978
sub rbx, 0x6141e5a2
xor rbx, 0xc65d1f5
xchg rsp, rcx
mov rdi, rsp
xchg rsp, rcx
cmp qword [rcx + 0x28], rbx
jne 0x140069217
mov dword [rsp - 0x44], 0x3a64ea6
mov eax, 0x740cd4d4
sub eax, 0x6beed1df
sub eax, 0x21de5a4
add eax, 0xa924dcc
sub eax, 0x10926aba
mov dword [rbp - 0x30], 0x2c3d2b4e
sub dword [rbp - 0x30], 0x187ed1d4
xor dword [rbp - 0x30], 0x49de1370
xor dword [rbp - 0x30], 0x5a4f4a4a
mov word [rbp - 0x20], ax
xchg r13, r13
xor esi, esi
mov dword [rbp - 0x2c], 0x12d571b5
add dword [rbp - 0x2c], 0x55ddd70c
sub dword [rbp - 0x2c], 0x5928e960
sub dword [rbp - 0x2c], 0xf6c5f31
mov dword [rbp - 0x28], 0x6fc4ff8f
xor dword [rbp - 0x28], 0x20097b4b
xor dword [rbp - 0x28], 0x3ed80f5d
xor dword [rbp - 0x28], 0x59c02611
sub dword [rbp - 0x28], 0x2868ad4b
mov dword [rbp - 0x24], 0x6bf4e6ef
xor dword [rbp - 0x24], 0x4348c67d
sub dword [rbp - 0x24], 0x5a68a91
xor dword [rbp - 0x24], 0x350ce9eb
sub dword [rbp - 0x24], 0x15d87fb9
mov qword [rbp + 0x10], rsi
mov rax, qword [rbp + 0x10]
mov dword [rsp - 0x40], edx
xchg rcx, r9
mov r9, qword [rbp + 0x10]
xchg r9, rcx
xchg r15, rax
mov r15, qword [rbp + 0x10]
xchg r15, rax
and cl, 3
mov dword [rsp - 0x2c], 0x7cb0fa0a
shl cl, 1
shl cl, 1
shl cl, 1
movzx edx, word [rbp + rax*2 - 0x30]
mov rbx, rbx
mov eax, 0x208f28e0
add eax, 0x2f07ca04
sub eax, 0x474ab4a4
add eax, 0x3f6cbf38
xor eax, 0x6aedbe77
shr eax, cl
movzx ecx, al
mov dword [rsp - 0x44], edx
mov rax, qword [rbp + 0x10]
xor cx, dx
mov word [rbp + rax*2 - 0x1e], cx
xchg rsp, rsp
mov rax, qword [rbp + 0x10]
inc rax
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov dword [rsp - 0x3c], 0x6875257d
cmp rax, 9
jb 0x140069129
xor edx, edx
xchg r13, r13
mov word [rbp - 0xc], si
lea rcx, [rbp - 0x1e]
call fcn.14008b060
mov rbp, rbp
xchg rdx, rax
mov rax, rdx
xchg rdx, rax
xchg r8, rax
mov rax, r8
xchg r8, rax
xor eax, eax
xor rdx, rbx
xchg rdx, r13
mov qword [rdi + 0x28], r13
xchg rdx, r13
lea rdi, [rbp - 0x1e]
mov dword [rsp - 0xc], 0x220a0d23
lea ecx, [rax + 9]
rep stosb byte [rdi], al
cmp rdx, rbx
xchg r9, r9
je 0x140069221
lea rdx, [0x140142810]
xchg r10, r8
mov rcx, r10
xchg r10, r8
call fcn.1400716c0
test al, al
mov rsi, rsi
setne al
jmp 0x140069221
mov al, 0x2f
add al, 0x16
xor al, 0x13
sub al, 0x53
sub al, 2
mov rbx, qword [rsp + 0x68]
xchg rbp, rbp
mov rsi, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x78]
nop
add rsp, 0x656fb8b4
sub rsp, 0x656fb864
pop rbp
mov dword [rsp - 0x40], 0x7f0143ce
ret