joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140033220
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
nop
add rsp, 0x458f9cf2
sub rsp, 0x458f9d32
mov eax, dword [rcx + 0x2e8]
mov r14, rdx
mov edi, dword [rcx + 0x2f4]
xor eax, 0x32241201
movaps xmmword [rsp + 0x30], xmm6
mov rbp, rcx
movaps xmmword [rsp + 0x20], xmm7
xor ebx, ebx
xor edi, 0x32241201
xor edx, edx
movd xmm6, eax
add edi, edi
mov eax, dword [rcx + 0x308]
mov esi, ebx
xor eax, 0x63cf5cc6
mov rcx, r14
mov dword [rsp + 0x60], eax
movss xmm7, dword [rsp + 0x60]
cvtdq2ps xmm6, xmm6
call fcn.140053ac0
test ax, ax
je 0x1400332e9
nop word [rax + rax]
movzx ecx, ax
inc rsi
mov rax, qword [rbp + 0x300]
add rcx, rcx
mov rdx, rsi
movups xmm0, xmmword [rax + rcx*8]
xorps xmm0, xmmword [0x1404a6590]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm6
addss xmm1, xmm7
cvttss2si ecx, xmm1
sub ecx, edi
add ebx, ecx
mov rcx, r14
call fcn.140053ac0
test ax, ax
jne 0x14003329f
mov rbp, qword [rsp + 0x70]
mov eax, ebx
mov rbx, qword [rsp + 0x68]
movaps xmm6, xmmword [rsp + 0x30]
movaps xmm7, xmmword [rsp + 0x20]
sub rsp, 0xffffffffffffffc0
pop r14
pop rdi
pop rsi
ret

Function at 0x140033310
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
xor r8d, r8d
mov r9d, dword [rcx + 0x2f4]
xor eax, 0x32241201
xor r9d, 0x32241201
add r9d, r9d
movd xmm3, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x63cf5cc6
mov dword [rsp + 8], eax
movss xmm4, dword [rsp + 8]
movzx eax, byte [rdx]
cvtdq2ps xmm3, xmm3
test al, al
je 0x14003339d
mov r10, qword [rcx + 0x300]
movaps xmm2, xmmword [0x1404a6590]
movzx eax, al
inc rdx
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
movzx eax, byte [rdx]
xorps xmm0, xmm2
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm3
addss xmm1, xmm4
cvttss2si ecx, xmm1
sub ecx, r9d
add r8d, ecx
test al, al
jne 0x140033364
mov eax, r8d
ret

Function at 0x1400333b0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
neg rsp
sub rsp, 0xffffffffffffffc0
neg rsp
mov eax, dword [rcx + 0x2e8]
mov r14, rdx
mov edi, dword [rcx + 0x2f4]
xor eax, 0x32241201
movaps xmmword [rsp + 0x30], xmm6
mov rbp, rcx
movaps xmmword [rsp + 0x20], xmm7
xor ebx, ebx
xor edi, 0x32241201
xor edx, edx
movd xmm6, eax
add edi, edi
mov eax, dword [rcx + 0x308]
mov esi, ebx
xor eax, 0x63cf5cc6
mov rcx, r14
mov dword [rsp + 0x60], eax
movss xmm7, dword [rsp + 0x60]
cvtdq2ps xmm6, xmm6
call fcn.140053ac0
test ax, ax
je 0x140033474
nop word [rax + rax]
movzx ecx, ax
inc rsi
mov rax, qword [rbp + 0x300]
add rcx, rcx
mov rdx, rsi
movups xmm0, xmmword [rax + rcx*8]
xorps xmm0, xmmword [0x1404a6590]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm6
addss xmm1, xmm7
cvttss2si ecx, xmm1
sub ecx, edi
add ebx, ecx
mov rcx, r14
call fcn.140053ac0
test ax, ax
jne 0x14003342a
mov rbp, qword [rsp + 0x70]
mov eax, ebx
mov rbx, qword [rsp + 0x68]
movaps xmm6, xmmword [rsp + 0x30]
movaps xmm7, xmmword [rsp + 0x20]
add rsp, 0x40
pop r14
pop rdi
pop rsi
ret
Function at 0x1400334a0
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
xor r8d, r8d
mov r9d, dword [rcx + 0x2f4]
xor eax, 0x32241201
xor r9d, 0x32241201
add r9d, r9d
movd xmm3, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x63cf5cc6
mov dword [rsp + 8], eax
movss xmm4, dword [rsp + 8]
movzx eax, word [rdx]
cvtdq2ps xmm3, xmm3
test ax, ax
je 0x14003353b
mov r10, qword [rcx + 0x300]
movaps xmm2, xmmword [0x1404a6590]
movzx eax, ax
nop
sub rdx, 0x4d404f9e
add rdx, 0x4d404fa0
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
movzx eax, word [rdx]
xorps xmm0, xmm2
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm3
addss xmm1, xmm4
cvttss2si ecx, xmm1
sub ecx, r9d
add r8d, ecx
test ax, ax
jne 0x1400334f5
mov eax, r8d
ret

Function at 0x1400335db
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rdi
sub rsp, 0x20f2b6db
add rsp, 0x20f2b62b
xor ebx, ebx
mov rdi, rcx
mov qword [rax + 8], rbx
cmp qword [rcx + 0x2f8], rbx
je 0x140033692
mov edx, dword [rcx + 0x2ec]
mov qword [rax + 0x10], rsi
xor edx, 0x32241201
mov eax, dword [rcx + 0x2e8]
nop
movabs rcx, 0xffffffff0709568e
add rcx, 0x4d29bd2a
add rcx, 0x7fffffff
add rcx, 0x2bccec48
xor eax, 0x32241201
imul edx, eax
mov eax, 0x57e8f1d6
sub eax, 0x3d9eabfb
add eax, 0x335eb506
sub eax, 0x4da8fadd
movsxd rsi, edx
mul rsi
cmovb rax, rcx
mov rcx, rax
call fcn.140098010
mov qword [rsp + 0xc0], rax
test rsi, rsi
jle 0x14003360a
nop
mov rax, qword [rdi + 0x2f8]
mov ecx, dword [rax + rbx*4]
mov rax, qword [rsp + 0xc0]
xor ecx, 0x1cb47428
mov dword [rax + rbx*4], ecx
inc rbx
cmp rbx, rsi
jl 0x1400335e3
mov rsi, qword [rsp + 0xc8]
mov rax, qword [rsp + 0xc0]
lea rdx, [rsp + 0x30]
mov rcx, qword [rdi + 0x318]
mov qword [rsp + 0x28], rax
lea rax, [0x140001bb0]
mov qword [rsp + 0x20], rdi
movups xmm0, xmmword [rsp + 0x20]
mov qword [rsp + 0xa8], 0x7fe60cb5
sub qword [rsp + 0xa8], 0xf39e7a7
xor qword [rsp + 0xa8], 0x7f890cb2
sub qword [rsp + 0xa8], 0xf2529a4
mov qword [rsp + 0x30], rax
movups xmmword [rsp + 0x38], xmm0
call fcn.140032570
mov rbx, qword [rsp + 0xd0]
neg rsp
add rsp, 0xffffffffffffff50
neg rsp
pop rdi
ret
lea rdx, [rsp + 0xc0]
call fcn.1400336c0
test al, al
jne 0x140033612
mov rbx, qword [rsp + 0xd0]
neg rsp
add rsp, 0xffffffffffffff50
neg rsp
pop rdi
ret
Function at 0x14003ef70
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x60
mov rbp, qword [rcx + 0xaf8]
lea rax, [rsp + 0x28]
mov rbx, qword [rcx + 0xac0]
xorps xmm0, xmm0
mov r14, rdx
mov qword [rsp + 0x20], rax
mov rsi, rcx
lea rcx, [rsp + 0x20]
lea rdx, [rbp + 1]
movups xmmword [rsp + 0x28], xmm0
movups xmmword [rsp + 0x38], xmm0
movups xmmword [rsp + 0x48], xmm0
call fcn.14000ef40
mov edi, 0x490f9eb5
add edi, 0x3542f763
sub edi, 0x219645d6
mov r9, rax
mov ecx, edi
mov r15d, 0x4be8635e
add r15d, 0x4f9e6e5
sub r15d, 0x50e24944
test rbp, rbp
je 0x14003f02f
mov rdx, rax
sub rbx, rax
mov r8, rbp
nop dword [rax]
nop dword [rax + rax]
movzx eax, cx
lea rdx, [rdx + 2]
and ax, r15w
ror ecx, 8
xor ax, word [rdx + rbx - 2]
mov word [rdx - 2], ax
sub r8, 1
jne 0x14003f00e
xor ebx, ebx
mov word [r9 + rbp*2], bx
cmp word [rsi + 0xb48], bx
je 0x14003f07f
mov r8d, ebx
cmp qword [rsi + 0xaf8], rbx
jbe 0x14003f07f
mov edx, ebx
nop dword [rax + rax]
mov rax, qword [rsp + 0x20]
lea rdx, [rdx + 2]
movzx ecx, word [rsi + 0xb48]
inc r8
mov word [rdx + rax - 2], cx
cmp r8, qword [rsi + 0xaf8]
jb 0x14003f05a
mov rsi, qword [rsp + 0x20]
lea rax, [r14 + 8]
xorps xmm0, xmm0
mov qword [r14], rax
movups xmmword [rax], xmm0
nop
movabs rdx, 0xffffffff411e996d
add rdx, 0x30f9290a
add rdx, 0xd9d0890
add rdx, 0x7fffffff
add rdx, 0x4b34f9
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
inc rdx
cmp word [rsi + rdx*2], bx
jne 0x14003f0c0
mov rcx, r14
mov qword [r14 + 0x38], rdx
call fcn.14000ef40
cmp qword [r14 + 0x38], rbx
jbe 0x14003f10a
sub rsi, rax
movzx ecx, di
lea rax, [rax + 2]
and cx, r15w
ror edi, 8
xor cx, word [rax + rsi - 2]
inc rbx
mov word [rax - 2], cx
cmp rbx, qword [r14 + 0x38]
jb 0x14003f0e6
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x28]
cmp rcx, rax
jne 0x14003f142
lea rdi, [rsp + 0x28]
xor eax, eax
mov ecx, 0x71086e95
xor ecx, 0x3cf3439
sub ecx, 0x1037963b
sub ecx, 0x628fc441
rep stosb byte [rdi], al
jmp 0x14003f147
call fcn.140098180
lea r11, [rsp + 0x60]
mov rax, r14
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rdi
ret
Function at 0x140047d8a
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
push rdi
sub rsp, 0x20
mov r8, qword [rcx + 0x650]
xor edi, edi
mov r9, rdx
mov rbx, rcx
test r8, r8
je 0x140047cae
mov rax, qword [rcx + 0x648]
jmp 0x140047cb7
mov rax, rdi
nop word [rax + rax]
test r8, r8
je 0x140047cd0
mov rcx, qword [rbx + 0x648]
lea rdx, [rcx + r8*8]
jmp 0x140047cd3
mov rdx, rdi
cmp rax, rdx
je 0x140047f00
mov rcx, qword [rax]
cmp qword [rcx + 0x30], r9
je 0x140047cf2
add rax, 8
jmp 0x140047cb7
mov qword [rsp + 0x38], rsi
mov rsi, rax
test r8, r8
je 0x140047dc4
cmp rax, qword [rbx + 0x648]
jb 0x140047dc4
mov rcx, qword [rbx + 0x648]
lea rdx, [rcx + r8*8]
cmp rax, rdx
jae 0x140047dc4
nop dword [rax + rax]
mov rdx, qword [rbx + 0x650]
test rdx, rdx
je 0x140047d49
mov rcx, qword [rbx + 0x648]
lea rcx, [rcx + rdx*8]
jmp 0x140047d4c
mov rcx, rdi
nop
add rcx, 0xffffffffd6346371
sub rcx, 0xffffffffd6346379
cmp rax, rcx
jae 0x140047d7d
mov rcx, qword [rax + 8]
mov qword [rax], rcx
nop
sub rax, 0x1dc5fdea
add rax, 0x1dc5fdf2
jmp 0x140047d29
test rdx, rdx
je 0x140047dc4
lea rax, [rdx - 1]
mov qword [rbx + 0x650], rax
test rax, rax
jne 0x140047dc4
mov rcx, qword [rbx + 0x648]
test rcx, rcx
je 0x140047db6
call fcn.140098180
mov qword [rbx + 0x648], rdi
mov qword [rbx + 0x658], rdi
mov qword [rbx + 0x650], rdi
mov rcx, qword [rsi]
mov rsi, qword [rsp + 0x38]
test rcx, rcx
je 0x140047deb
mov rax, qword [rcx]
mov edx, 0x39a21933
add edx, 0x33c808b7
sub edx, 0x6d6a21e9
call qword [rax]
cmp qword [rbx + 0x650], rdi
je 0x140047f00
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.140038330
mov rcx, qword [rsp + 0x30]
mov r10d, 0x46115d82
xor r10d, 0x72f7f7b0
sub r10d, 0x34e6a992
mov r8d, dword [rsp + 0x34]
mov eax, ecx
mov r9, qword [rbx + 0x650]
sub eax, r8d
cdq
idiv dword [rbx + 0x650]
cmp eax, r10d
cmovl r10d, eax
test r9, r9
je 0x140047eb1
mov rdx, qword [rbx + 0x648]
lea r11, [rdx + r9*8]
cmp rdx, r11
je 0x140047eb1
mov r9d, r10d
xor r9d, 0x32241201
xor r8d, 0x32241201
nop
mov rcx, qword [rdx]
mov eax, edi
xor eax, 0x32241201
add edi, r10d
add rdx, 8
mov dword [rcx + 0x38], eax
mov dword [rcx + 0x3c], 0x4879acb7
xor dword [rcx + 0x3c], 0x4c8f4798
xor dword [rcx + 0x3c], 0x36d2f92e
mov dword [rcx + 0x40], r9d
mov dword [rcx + 0x44], r8d
cmp rdx, r11
jne 0x140047e6d
mov rcx, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x34]
mov rax, qword [rbx + 0x668]
test rax, rax
je 0x140047ef8
sub ecx, r8d
mov dword [rax + 0x1c], 0x74cda730
xor dword [rax + 0x1c], 0x46721cc4
add dword [rax + 0x1c], 0x22dc168d
xor dword [rax + 0x1c], 0x67bfc080
xor ecx, 0x32241201
xor r8d, 0x32241201
mov dword [rax + 0x18], ecx
mov dword [rax + 0x20], r8d
mov dword [rax + 0x24], r8d
mov rcx, rbx
call fcn.140037370
mov rbx, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
ret
Function at 0x140047f10
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
add rsp, 0xffffffffffffffe0
mov rax, qword [rcx]
mov rdi, rcx
call qword [rax + 0x78]
mov rdx, qword [rdi + 0x650]
mov rcx, rax
mov rbx, rax
mov qword [rsp + 0x30], rax
call fcn.140037c50
mov rcx, rdi
call fcn.1400372d0
mov rcx, qword [0x1404a5bd8]
mov rdx, qword [rax + 0x98]
call fcn.14002e8e0
mov rcx, rax
call fcn.14003b250
lea rcx, [rdi + 0x648]
mov qword [rbx + 0x20], rax
lea rdx, [rsp + 0x30]
call fcn.14002bd10
mov rcx, rdi
mov rbx, qword [rsp + 0x38]
nop
add rsp, 0x68c06af3
sub rsp, 0x68c06ad3
pop rdi
jmp 0x140047f10
push rbx
nop
sub rsp, 0x44e2b1a3
add rsp, 0x44e2b183
cmp qword [rcx + 0x650], 0
mov rbx, rcx
je 0x14004804c
lea rdx, [rsp + 0x30]
call fcn.140038330
mov r8, qword [rsp + 0x30]
mov r11d, 0x7d83063e
xor r11d, 0x3695b9d2
sub r11d, 0x4b16bf4c
mov r9d, dword [rsp + 0x34]
mov eax, r8d
sub eax, r9d
cdq
idiv dword [rbx + 0x650]
mov rdx, qword [rbx + 0x650]
cmp eax, r11d
cmovl r11d, eax
xor r10d, r10d
test rdx, rdx
je 0x140048002
mov rax, qword [rbx + 0x648]
mov qword [rsp + 0x38], rdi
lea rdi, [rax + rdx*8]
cmp rax, rdi
je 0x140047ffd
mov r8d, r11d
xor r8d, 0x32241201
xor r9d, 0x32241201
nop word [rax + rax]
mov rdx, qword [rax]
mov ecx, r10d
xor ecx, 0x32241201
add r10d, r11d
neg rax
add rax, 0xfffffffffffffff8
neg rax
mov dword [rdx + 0x38], ecx
mov dword [rdx + 0x3c], 0x686957e2
xor dword [rdx + 0x3c], 0x22d9f75a
xor dword [rdx + 0x3c], 0x7894b2b9
mov dword [rdx + 0x40], r8d
mov dword [rdx + 0x44], r9d
cmp rax, rdi
jne 0x140047fb1
mov r8, qword [rsp + 0x30]
mov r9d, dword [rsp + 0x34]
mov rdi, qword [rsp + 0x38]
mov rax, qword [rbx + 0x668]
test rax, rax
je 0x140048044
sub r8d, r9d
mov dword [rax + 0x1c], 0x68b28c53
sub dword [rax + 0x1c], 0x3f045fd9
add dword [rax + 0x1c], 0x875e587
xor r8d, 0x32241201
xor r9d, 0x32241201
mov dword [rax + 0x18], r8d
mov dword [rax + 0x20], r9d
mov dword [rax + 0x24], r9d
mov rcx, rbx
call fcn.140037370
nop
add rsp, 0x5da0a01f
sub rsp, 0x5da09fff
pop rbx
ret
Function at 0x140052350
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, rsi
mov qword [rsp + 8], rsi
xchg rbx, rsi
push rdi
xchg rcx, rcx
nop
add rsp, 0x6bd4212
sub rsp, 0x6bd4232
xchg r8, rdx
mov rbx, r8
xchg r8, rdx
mov rdi, rcx
mov rbx, rbx
nop
movabs rdx, 0xffffffff17862081
xor rdx, 0x5ab43108
xor rdx, 0x4f3426d8
add rdx, 0x7fffffff
add rdx, 0x7df9c8af
nop word [rax + rax]
inc rdx
xchg rbx, rbx
cmp word [rbx + rdx*2], 0
jne 0x1400523ad
mov qword [rcx + 0x38], rdx
call fcn.14000ef40
mov rcx, rcx
xor r8d, r8d
mov edx, 0x641d3d10
xor edx, 0x16716dab
sub edx, 0x945b92c
sub edx, 0xc6a474d
cmp qword [rdi + 0x38], r8
jbe 0x140052452
mov rdi, rdi
sub rbx, rax
mov r9d, 0x6db17a87
xor r9d, 0x769d2ef4
add r9d, 0x59098769
xor r9d, 0x205a6e40
sub r9d, 0x546fb49d
nop word [rax + rax]
mov dword [rsp - 0x1c], esp
movzx ecx, dx
lea rax, [rax + 2]
and cx, r9w
mov dword [rsp - 0x30], ebp
ror edx, 3
ror edx, 1
ror edx, 3
ror edx, 1
xor cx, word [rax + rbx - 2]
inc r8
mov word [rax - 2], cx
xchg r11, r11
cmp r8, qword [rdi + 0x38]
jb 0x140052420
xchg rbx, rcx
mov rcx, qword [rsp + 0x30]
xchg rcx, rbx
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
nop
sub rsp, 0x17f5ead2
add rsp, 0x17f5eaf2
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret
Function at 0x140052e90
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r15
mov qword [rsp + 8], r15
xchg rbx, r15
xchg r11, rsi
mov qword [rsp + 0x10], r11
xchg r11, rsi
push rdi
sub rsp, 0x20
xchg rsi, rbp
mov rbp, qword [rcx + 0x38]
xchg rsi, rbp
xchg rdi, rdx
mov rbx, rdi
xchg rdi, rdx
xchg rcx, r8
mov rcx, qword [rdx + 0x38]
xchg rcx, r8
mov rdi, rcx
mov dword [rsp - 0x20], esi
add r8, rsi
xchg r15, rdx
mov r15, rsi
xchg r15, rdx
xchg r8, rdi
mov qword [rcx + 0x38], rdi
xchg r8, rdi
call fcn.140053b20
mov r15, r15
mov r9, qword [rbx]
mov ecx, esi
and ecx, 3
mov r8d, 0x5b0d4cd8
xor r8d, 0x777c5993
add r8d, 0x288ee75a
add r8d, 0x7bc539d
shl ecx, 3
mov edx, r8d
mov rbp, rbp
ror edx, cl
xor ecx, ecx
cmp qword [rbx + 0x38], rcx
jbe 0x140052fa0
mov r8, r8
lea r10, [rsi + rsi]
mov r11d, 0x18c3e8d2
xor r11d, 0x44be0a06
xor r11d, 0x4a0f0e5c
xor r11d, 0x1672ec77
sub r10, r9
add r10, rax
xchg r13, r13
nop word [rax + rax]
movzx eax, r8w
lea r9, [r9 + 2]
xchg rcx, rcx
xor ax, dx
ror r8d, 1
ror r8d, 1
ror r8d, 4
ror r8d, 1
ror r8d, 1
and ax, r11w
ror edx, 8
xor ax, word [r9 - 2]
mov rbx, rbx
inc rcx
mov word [r9 + r10 - 2], ax
cmp rcx, qword [rbx + 0x38]
jb 0x140052f58
mov dword [rsp - 0x38], 0x65216c93
mov rbx, qword [rsp + 0x30]
xchg rbx, rax
mov rbx, rdi
xchg rbx, rax
xchg rsi, rbx
mov rbx, qword [rsp + 0x38]
xchg rbx, rsi
sub rsp, 0xffffffffffffffe0
mov r9, r9
pop rdi
ret

Function at 0x140052fc0
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, rdi
mov qword [rsp + 8], rdi
xchg rbx, rdi
mov qword [rsp + 0x10], rsi
xchg rdi, rbp
mov qword [rsp + 0x18], rbp
xchg rdi, rbp
nop
sub rsp, 8
mov qword [rsp], r14
sub rsp, 0x20
mov dword [rsp - 0x30], 0x5b903c6c
xchg r15, r14
mov r15, qword [rcx + 0x38]
xchg r15, r14
mov rdi, rdx
mov rcx, rcx
xchg rcx, rsi
mov rcx, rsi
xchg rcx, rsi
nop
movabs rbx, 0xffffffff4df26165
sub rbx, 0xf97a10d
add rbx, 0x35fbe3e
add rbx, 0x2b385f6c
add rbx, 0x7fffffff
add rbx, 0x130d21fe
inc rbx
mov rsi, rsi
cmp word [rdx + rbx*2], 0
jne 0x140053037
lea r8, [r14 + rbx]
xchg r14, rsi
mov rdx, rsi
xchg rsi, r14
mov qword [rcx + 0x38], r8
call fcn.140053b20
mov r9, r9
mov ecx, r14d
mov edx, 0x31a04ce1
sub edx, 0x1e5bd151
add edx, 0x111f9832
sub edx, 0x14d45c6
add edx, 0x39a58246
and ecx, 3
shl ecx, 2
shl ecx, 1
ror edx, cl
test rbx, rbx
mov dword [rsp - 0x18], ebp
je 0x140053108
lea rcx, [r14 + r14]
mov r8d, 0x23a400ed
xor r8d, 0x6b4e6c1d
xor r8d, 0x1058979b
sub r8d, 0x80e2911
xor r8d, 0x50a4d2a5
sub rcx, rdi
mov dword [rsp - 0x38], 0x35bd5665
add rcx, rax
nop word [rax + rax]
movzx eax, dx
xchg r8, r8
lea rdi, [rdi + 2]
and ax, r8w
ror edx, 5
ror edx, 2
ror edx, 1
xor ax, word [rdi - 2]
mov word [rdi + rcx - 2], ax
sub rbx, 1
mov dword [rsp - 0x40], 0x1d3d065a
jne 0x1400530d7
mov rbx, qword [rsp + 0x30]
xchg rsi, r12
mov rax, r12
xchg rsi, r12
mov rsi, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x40]
mov r12, r12
neg rsp
add rsp, 0xffffffffffffffe0
neg rsp
pop r14
mov rsp, rsp
ret
Function at 0x1400538b6
Capabilities:
Encode data using xor

Disassembly:
xchg r10, rbx
mov qword [rsp + 0x10], r10
xchg rbx, r10
mov qword [rsp + 0x18], rbp
nop
sub rsp, 8
mov qword [rsp], rsi
push rdi
push r10
mov qword [rsp], r14
nop
sub rsp, 0x222d800e
add rsp, 0x222d7fee
lea rsi, [rdx + 8]
mov dword [rsp - 0x2c], 0x83cda92
xorps xmm0, xmm0
mov qword [rdx], rsi
xor edi, edi
movups xmmword [rsi], xmm0
mov dword [rsp - 0x34], edx
xchg r9, r14
mov r9, r14
xchg r14, r9
xchg rbp, r8
mov r8, rbp
xchg r8, rbp
movups xmmword [rsi + 0x10], xmm0
xchg rsi, rsi
xchg rbx, rdx
mov rdx, rbx
xchg rdx, rbx
xchg rsi, r9
movups xmmword [r9 + 0x20], xmm0
xchg rsi, r9
xchg rsp, rdi
mov qword [rdx + 0x38], rsp
xchg rsp, rdi
mov rax, qword [rcx + 0x38]
cmp r8, rax
mov dword [rsp - 0x30], edi
jae 0x140053aa5
sub rax, r8
xchg r15, r10
mov qword [rsp + 0x40], r10
xchg r15, r10
cmp rax, r9
cmovb r14, rax
xchg r14, rdi
mov qword [rdx + 0x38], rdi
xchg rdi, r14
mov rax, qword [rcx]
xchg r10, r10
xchg rcx, r8
mov r8, qword [rdx]
xchg r8, rcx
lea r15, [rax + r8*2]
mov dword [rsp - 0x20], 0x33ac5543
cmp rcx, rsi
je 0x14005394a
call fcn.140098180
cmp r14, 0x18
xchg r9, r9
jbe 0x14005398c
lea rcx, [r14 + r14]
call fcn.1400984c0
mov r11, r11
xchg r13, rax
mov qword [rbx], r13
xchg r13, rax
test rax, rax
jne 0x140053998
mov qword [rbx], rsi
mov dword [rsp - 0x30], 0x1f78eb06
xchg r8, r14
mov r14, rdi
xchg r14, r8
jmp 0x1400539b0
mov qword [rbx], rsi
xchg rsi, r12
mov rax, r12
xchg r12, rsi
xorps xmm0, xmm0
movups xmmword [rax], xmm0
xchg rcx, rax
movups xmmword [rcx + 0x10], xmm0
xchg rcx, rax
movups xmmword [rax + 0x20], xmm0
mov rcx, rcx
mov r8, qword [rbx]
and ebp, 3
mov r9d, 0x515e6bbc
add r9d, 0x109a8bdd
sub r9d, 0x25b5fcd1
xor r9d, 0x13014b4e
add r9d, 0x2d789ebc
shl ebp, 3
mov r13, r13
mov edx, r9d
movzx ecx, bpl
ror edx, cl
mov dword [rsp - 0x20], 0x1e897520
cmp qword [rbx + 0x38], rdi
jbe 0x140053a5f
sub r15, r8
mov ecx, 0x728ae16d
sub ecx, 0x702e3e88
add ecx, 0x7b91cd0a
sub ecx, 0x7dee6ef0
nop dword [rax]
nop word [rax + rax]
movzx eax, r9w
mov dword [rsp - 0x30], ecx
lea r8, [r8 + 2]
xor ax, dx
ror r9d, 8
and ax, cx
xchg rcx, rcx
ror edx, 1
ror edx, 4
ror edx, 1
ror edx, 2
xor ax, word [r8 + r15 - 2]
mov dword [rsp - 0x40], esi
inc rdi
mov word [r8 - 2], ax
cmp rdi, qword [rbx + 0x38]
jb 0x140053a1d
mov rbp, rbp
mov r15, qword [rsp + 0x40]
xchg rsi, rbx
mov rax, rsi
xchg rsi, rbx
xchg rcx, rbx
mov rcx, qword [rsp + 0x48]
xchg rcx, rbx
xchg rbp, r9
mov r9, qword [rsp + 0x50]
xchg r9, rbp
sub rsp, 0xffffffffffffffe0
mov dword [rsp - 0x38], 0x793bf127
pop r14
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
mov rsi, qword [rsp]
add rsp, 8
ret
xchg rbx, rax
mov rbx, rax
xchg rbx, rax
jmp 0x140053a6d
Function at 0x140054170
Capabilities:
Execute syscall

Disassembly:
jmp 0x140088ea9
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x1404a5ff0]
mov r8, r8
cmp qword [0x1404a60e0], 0
jne 0x140088c10
syscall
ret

Function at 0x140054190
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x28]
mov byte [rsp + 0x28], al
xchg rbp, rbp
jmp 0x1400894f6
mov r10, rcx
mov eax, dword [0x1404a6088]
xchg rdi, rdi
cmp qword [0x1404a60e0], 0
jne 0x140088c10
syscall
mov dword [rsp - 0x18], 0x58215abc
ret

Function at 0x1400541b0
Capabilities:
Execute syscall

Disassembly:
jmp 0x140088c8c
xchg rcx, r13
mov r10, r13
xchg rcx, r13
mov eax, dword [0x1404a5fc0]
cmp qword [0x1404a60e0], 0
mov dword [rsp - 0x34], 0x73332f3e
jne 0x140088c10
syscall
ret

Function at 0x1400541c0
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400890f9
mov r10, rcx
mov eax, dword [0x1404a6028]
mov r9, r9
cmp qword [0x1404a60e0], 0
jne 0x140088c10
syscall
xchg r12, r12
ret

Function at 0x1400541e0
Capabilities:
Execute syscall

Disassembly:
jmp 0x140088cf4
xchg rdi, rcx
mov r10, rdi
xchg rcx, rdi
mov eax, dword [0x1404a5fc8]
cmp qword [0x1404a60e0], 0
mov rcx, rcx
jne 0x140088c10
syscall
ret

Function at 0x1400541f0
Capabilities:
Execute syscall

Disassembly:
jmp 0x140089307
mov r10, rcx
mov dword [rsp - 0x10], 0x5e57c190
mov eax, dword [0x1404a6058]
cmp qword [0x1404a60e0], 0
jne 0x140088c10
mov r14, r14
syscall
ret

Function at 0x140054200
Capabilities:
Execute syscall

Disassembly:
jmp 0x140088ed2
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x1404a5ff4]
cmp qword [0x1404a60e0], 0
jne 0x140088c10
mov dword [rsp - 0x34], esp
syscall
ret

Function at 0x140054220
Capabilities:
Execute syscall

Disassembly:
jmp 0x140088cbe
xchg r13, rcx
mov r10, r13
xchg r13, rcx
mov eax, dword [0x1404a5fc4]
mov dword [rsp - 0x18], 0x57473f0b
cmp qword [0x1404a60e0], 0
jne 0x140088c10
syscall
mov dword [rsp - 0x10], edx
ret

Function at 0x140054230
Capabilities:
Execute syscall

Disassembly:
jmp 0x140089287
mov r10, rcx
mov dword [rsp - 0x14], esi
mov eax, dword [0x1404a604c]
cmp qword [0x1404a60e0], 0
jne 0x140088c10
mov dword [rsp - 0x24], 0x2b85071a
syscall
ret

Function at 0x140054240
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400890a2
xchg r10, r8
mov r8, rcx
xchg r8, r10
mov eax, dword [0x1404a6020]
cmp qword [0x1404a60e0], 0
jne 0x140088c10
xchg rbx, rbx
syscall
ret

Function at 0x140054250
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400890cb
xchg rbx, r10
mov rbx, rcx
xchg r10, rbx
mov eax, dword [0x1404a6024]
cmp qword [0x1404a60e0], 0
jne 0x140088c10
mov dword [rsp - 0x38], 0x2bcd1af9
syscall
ret

Function at 0x140054260
Capabilities:
Execute syscall

Disassembly:
jmp 0x140088f53
xchg r10, rbx
mov rbx, rcx
xchg rbx, r10
mov eax, dword [0x1404a6000]
cmp qword [0x1404a60e0], 0
xchg rcx, rcx
jne 0x140088c10
syscall
ret