joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400110f0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x110d0
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x14001116f
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x140011150
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret

Function at 0x1400114b0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x11490
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x14001152f
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x140011510
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret

Function at 0x140011960
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x11940
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x1400119df
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x1400119c0
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret
Function at 0x140011a50
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x11a30
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x140011acf
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x140011ab0
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret

Function at 0x140011d20
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x11d00
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x140011d9f
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x140011d80
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret

Function at 0x140011e10
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x11df0
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x140011e8f
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x140011e70
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret
Function at 0x1400120e0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x120c0
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x14001215f
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x140012140
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret

Function at 0x1400121d0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x121b0
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x14001224f
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x140012230
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret

Function at 0x1400123b0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x12390
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x14001242f
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x140012410
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret
Function at 0x1400124a0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x12480
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x14001251f
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x140012500
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret

Function at 0x140012590
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x12570
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x14001260f
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x1400125f0
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret

Function at 0x140012770
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x12750
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x1400127ef
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x1400127d0
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret
Function at 0x140012950
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x12930
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x1400129cf
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x1400129b0
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret

Function at 0x140012c20
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x12c00
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x140012c9f
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x140012c80
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret

Function at 0x140012e00
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x12de0
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x140012e7f
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x140012e60
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret
Function at 0x140012ef0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x12ed0
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x140012f6f
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x140012f50
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret

Function at 0x1400131c0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x131a0
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x14001323f
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x140013220
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret

Function at 0x1400132b0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x13290
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x14001332f
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x140013310
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret
Function at 0x140013580
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x13560
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x1400135ff
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x1400135e0
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret

Function at 0x140013760
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x13740
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x1400137df
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x1400137c0
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret

Function at 0x140013a30
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x13a10
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x140013aaf
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x140013a90
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret
Function at 0x140013d00
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x13ce0
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x140013d7f
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x140013d60
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret

Function at 0x1400140c0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x140a0
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x14001413f
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x140014120
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret

Function at 0x1400141b0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x14190
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x14001422f
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x140014210
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret
Function at 0x140014390
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x14370
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x14001440f
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x1400143f0
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret

Function at 0x140014480
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x14460
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x1400144ff
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x1400144e0
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret

Function at 0x140014b10
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rax
mov rbp, rsp
push r10
push r9
push r8
push rdx
push rax
push rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
movabs rcx, 0x14af0
mov qword [rbp], rcx
mov rcx, qword [rbp]
mov r8, qword [rcx + rax + 8]
mov rdx, qword [rcx + rax + 0x10]
mov qword [rcx + rax + 0x10], 0
lea r9, [rax + rdx]
add r9, r8
add r9, 0xfffffffffffffffc
add r8, rax
cmp r8, r9
jae 0x140014b8f
add rdx, rax
add rdx, 0xfffffffffffffffc
nop word [rax + rax]
mov r9d, dword [rcx + rax + 0x18]
xor dword [r8], r9d
mov r9, r8
add r9, 4
mov r10, qword [rcx + rax + 8]
add r10, rdx
mov r8, r9
cmp r9, r10
jb 0x140014b70
mov edx, dword [rcx + rax + 0x18]
mov rcx, qword [rcx + rax]
mov dword [rcx + rax], edx
pop rcx
pop rax
pop rdx
pop r8
pop r9
pop r10
add rsp, 8
pop rbp
ret