joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400343b0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
sub rsp, 0x40
mov eax, dword [rcx + 0x2e8]
mov r14, rdx
mov edi, dword [rcx + 0x2f4]
xor eax, 0x6d2e7543
movaps xmmword [rsp + 0x30], xmm6
mov rbp, rcx
movaps xmmword [rsp + 0x20], xmm7
xor ebx, ebx
xor edi, 0x6d2e7543
xor edx, edx
movd xmm6, eax
add edi, edi
mov eax, dword [rcx + 0x308]
mov esi, ebx
xor eax, 0x3b324538
mov rcx, r14
mov dword [rsp + 0x60], eax
movss xmm7, dword [rsp + 0x60]
cvtdq2ps xmm6, xmm6
call fcn.1400536b0
test ax, ax
je 0x14003446e
nop word [rax + rax]
movzx ecx, ax
inc rsi
mov rax, qword [rbp + 0x300]
add rcx, rcx
mov rdx, rsi
movups xmm0, xmmword [rax + rcx*8]
xorps xmm0, xmmword [0x1404a0540]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm6
addss xmm1, xmm7
cvttss2si ecx, xmm1
sub ecx, edi
add ebx, ecx
mov rcx, r14
call fcn.1400536b0
test ax, ax
jne 0x140034424
mov rbp, qword [rsp + 0x70]
mov eax, ebx
mov rbx, qword [rsp + 0x68]
movaps xmm6, xmmword [rsp + 0x30]
movaps xmm7, xmmword [rsp + 0x20]
nop
add rsp, 0x3695aa60
sub rsp, 0x3695aa20
pop r14
pop rdi
pop rsi
ret

Function at 0x1400344a0
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
xor r8d, r8d
mov r9d, dword [rcx + 0x2f4]
xor eax, 0x6d2e7543
xor r9d, 0x6d2e7543
add r9d, r9d
movd xmm3, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x3b324538
mov dword [rsp + 8], eax
movss xmm4, dword [rsp + 8]
movzx eax, word [rdx]
cvtdq2ps xmm3, xmm3
test ax, ax
je 0x14003453b
mov r10, qword [rcx + 0x300]
movaps xmm2, xmmword [0x1404a0540]
movzx eax, ax
nop
add rdx, 0x1ba82c3d
sub rdx, 0x1ba82c3b
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
movzx eax, word [rdx]
xorps xmm0, xmm2
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm3
addss xmm1, xmm4
cvttss2si ecx, xmm1
sub ecx, r9d
add r8d, ecx
test ax, ax
jne 0x1400344f5
mov eax, r8d
ret
Function at 0x140034540
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
neg rsp
sub rsp, 0xffffffffffffff60
neg rsp
cmp qword [rcx + 0x2f8], 0
mov rdi, rcx
pushf
mov qword [rsp + 0xb2], 0x50e11da2
add qword [rsp + 0xb2], 0xe56598e
xor qword [rsp + 0xb2], 0x5f377730
popf
pushf
movabs rsi, 0xffffffff0acdd0c6
add rsi, 0x6fb1e020
xor rsi, 0x7e7478e5
add rsi, 0x7fffffff
xor rsi, 0x7bf437fd
popf
je 0x1400346e3
mov edx, dword [rcx + 0x2ec]
mov eax, dword [rcx + 0x2e8]
xor edx, 0x6d2e7543
xor eax, 0x6d2e7543
imul edx, eax
mov eax, 0x641b259e
xor eax, 0x639c0bda
xor eax, 0x7872e40
movsxd rbx, edx
mul rbx
cmovo rax, rsi
mov rcx, rax
call fcn.140096050
mov qword [rsp + 0xb0], rax
test rbx, rbx
jle 0x140034630
xor edx, edx
mov rax, qword [rdi + 0x2f8]
mov ecx, dword [rax + rdx*4]
mov rax, qword [rsp + 0xb0]
xor ecx, 0x28cb554b
mov dword [rax + rdx*4], ecx
inc rdx
cmp rdx, rbx
jl 0x140034609
mov rbx, qword [rdi + 0x318]
lea rax, [0x140001bb8]
mov qword [rsp + 0x20], rax
movabs rdx, 0x2d4c5ee57b48f890
sub rdx, 0x62ff7755
xor rdx, 0x59ff919c
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x98], 0xa76de34
add qword [rsp + 0x98], 0x33db6f71
sub qword [rsp + 0x98], 0x3e524d8d
mov qword [rsp + 0x28], rdi
mov rcx, qword gs:[0x30]
mov rax, qword [rbx + 0x98]
xor rax, rdx
cmp rax, qword [rcx + 0x48]
jne 0x1400346fd
lea rcx, [rsp + 0x20]
call fcn.140033190
movzx edi, al
mov rax, qword [rsp + 0x98]
cmp rax, 0x78
ja 0x1400347f5
test rax, rax
je 0x14003483b
mov rax, qword [rsp + 0x20]
mov r8, qword [rax]
jmp 0x140034821
lea rdx, [rsp + 0xb0]
call fcn.140034860
test al, al
jne 0x140034630
jmp 0x14003483f
mov rax, qword gs:[0x30]
mov rdi, qword [rax + 0x48]
lock inc dword [rbx + 0xf0]
je 0x140034735
cmp rdi, qword [rbx + 0xe0]
je 0x1400347d1
mov rcx, qword [rbx + 0xe8]
xor r8d, r8d
xor edx, edx
call fcn.140053f20
mov qword [rbx + 0xe0], rdi
mov dword [rbx + 0xf4], 0x1b455420
add dword [rbx + 0xf4], 0x479400e9
sub dword [rbx + 0xf4], 0x62d95508
lea rcx, [rbx + 0xc0]
lea rdx, [rsp + 0x20]
call fcn.140031c30
test rax, rax
setne dil
sub dword [rbx + 0xf4], 1
jne 0x1400347dc
mov qword [rbx + 0xe0], 0x415f2c99
add qword [rbx + 0xe0], 0x369656ff
sub qword [rbx + 0xe0], 0x5173aa3e
xor qword [rbx + 0xe0], 0x2681d95a
lock xadd dword [rbx + 0xf0], esi
dec esi
cmp esi, 0xffffffff
je 0x1400347e3
mov rcx, qword [rbx + 0xe8]
xor edx, edx
call fcn.140053ee0
jmp 0x1400347e3
inc dword [rbx + 0xf4]
jmp 0x14003475a
lock dec dword [rbx + 0xf0]
mov rax, qword [rsp + 0x98]
cmp rax, 0x78
jbe 0x140034810
mov rcx, qword [rsp + 0x20]
xor edx, edx
mov rax, qword [rcx]
call qword [rax]
mov rcx, qword [rsp + 0x20]
call fcn.140096230
jmp 0x14003483b
test rax, rax
je 0x14003483b
mov rcx, qword [rsp + 0x20]
mov r8, qword [rcx]
lea rax, [0x1400331e0]
cmp r8, rax
je 0x14003483b
xor edx, edx
lea rcx, [rsp + 0x20]
call r8
movzx eax, dil
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x14003f7d0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
nop
add rsp, 0x7c295352
sub rsp, 0x7c2953b2
mov rbp, qword [rcx + 0xaf0]
lea rax, [rsp + 0x28]
mov rbx, qword [rcx + 0xab8]
xorps xmm0, xmm0
mov r14, rdx
mov qword [rsp + 0x20], rax
mov rsi, rcx
lea rcx, [rsp + 0x20]
lea rdx, [rbp + 1]
movups xmmword [rsp + 0x28], xmm0
movups xmmword [rsp + 0x38], xmm0
movups xmmword [rsp + 0x48], xmm0
call fcn.14000ed30
mov edi, 0x5fb44515
sub edi, 0x32f93b92
sub edi, 0x27c7a102
mov r9, rax
mov ecx, edi
mov r15d, 0x77024105
xor r15d, 0x7f471cf9
xor r15d, 0x8455d03
test rbp, rbp
je 0x14003f89a
mov rdx, rax
sub rbx, rax
mov r8, rbp
nop dword [rax]
nop dword [rax + rax]
movzx eax, cx
lea rdx, [rdx + 2]
and ax, r15w
ror ecx, 8
xor ax, word [rbx + rdx - 2]
mov word [rdx - 2], ax
sub r8, 1
jne 0x14003f879
xor ebx, ebx
mov word [r9 + rbp*2], bx
cmp word [rsi + 0xb40], bx
je 0x14003f8e5
mov edx, ebx
cmp qword [rsi + 0xaf0], rbx
jbe 0x14003f8e5
nop dword [rax + rax]
mov rax, qword [rsp + 0x20]
movzx ecx, word [rsi + 0xb40]
mov word [rax + rdx*2], cx
inc rdx
cmp rdx, qword [rsi + 0xaf0]
jb 0x14003f8c5
mov rsi, qword [rsp + 0x20]
lea rax, [r14 + 8]
xorps xmm0, xmm0
mov qword [r14], rax
movups xmmword [rax], xmm0
nop
movabs rdx, 0xffffffff3c37519f
add rdx, 0x3395dd07
add rdx, 0x7fffffff
add rdx, 0x1032d15a
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
nop dword [rax]
inc rdx
cmp word [rsi + rdx*2], bx
jne 0x14003f922
mov rcx, r14
mov qword [r14 + 0x38], rdx
call fcn.14000ed30
cmp qword [r14 + 0x38], rbx
jbe 0x14003f96e
sub rsi, rax
nop
movzx ecx, di
lea rax, [rax + 2]
and cx, r15w
ror edi, 8
xor cx, word [rsi + rax - 2]
inc rbx
mov word [rax - 2], cx
cmp rbx, qword [r14 + 0x38]
jb 0x14003f94a
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x28]
cmp rcx, rax
jne 0x14003f9a6
lea rdi, [rsp + 0x28]
xor eax, eax
mov ecx, 0x570bac5d
xor ecx, 0x7a5537d7
add ecx, 0xa45e534
sub ecx, 0x37a4808e
rep stosb byte [rdi], al
jmp 0x14003f9ab
call fcn.140096230
lea r11, [rsp + 0x60]
mov rax, r14
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rdi
ret
Function at 0x140048090
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
neg rsp
sub rsp, 0xffffffffffffffe0
neg rsp
mov r8, qword [rcx + 0x648]
xor esi, esi
mov rbx, rcx
test r8, r8
je 0x1400480c6
mov rdi, qword [rcx + 0x640]
jmp 0x1400480cd
mov rdi, rsi
nop dword [rax]
test r8, r8
je 0x1400480e6
mov rax, qword [rbx + 0x640]
lea rcx, [rax + r8*8]
jmp 0x1400480e9
mov rcx, rsi
cmp rdi, rcx
je 0x140048313
mov rax, qword [rdi]
cmp qword [rax + 0x28], rdx
je 0x140048113
nop
sub rdi, 0x7980bbf
add rdi, 0x7980bc7
jmp 0x1400480cd
test r8, r8
je 0x1400481d1
cmp rdi, qword [rbx + 0x640]
jb 0x1400481d1
mov rax, qword [rbx + 0x640]
lea rcx, [rax + r8*8]
cmp rdi, rcx
jae 0x1400481d1
mov rdx, rdi
nop word [rax + rax]
mov rcx, qword [rbx + 0x648]
test rcx, rcx
je 0x14004816a
mov rax, qword [rbx + 0x640]
lea rax, [rax + rcx*8]
jmp 0x14004816d
mov rax, rsi
sub rax, 8
cmp rdx, rax
jae 0x14004818a
mov rax, qword [rdx + 8]
mov qword [rdx], rax
add rdx, 8
jmp 0x14004814a
test rcx, rcx
je 0x1400481d1
lea rax, [rcx - 1]
mov qword [rbx + 0x648], rax
test rax, rax
jne 0x1400481d1
mov rcx, qword [rbx + 0x640]
test rcx, rcx
je 0x1400481c3
call fcn.140096230
mov qword [rbx + 0x640], rsi
mov qword [rbx + 0x650], rsi
mov qword [rbx + 0x648], rsi
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400481f3
mov rax, qword [rcx]
mov edx, 0x25b30a1e
add edx, 0x55c3e18a
xor edx, 0x7b76eba9
call qword [rax]
cmp qword [rbx + 0x648], rsi
je 0x140048313
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.140039090
mov rcx, qword [rsp + 0x30]
mov r10d, 0x4892315c
add r10d, 0x24899fdb
xor r10d, 0x424b1b74
sub r10d, 0x2f50c9a3
mov r8d, dword [rsp + 0x34]
mov eax, ecx
mov r9, qword [rbx + 0x648]
sub eax, r8d
cdq
idiv dword [rbx + 0x648]
cmp eax, r10d
cmovl r10d, eax
test r9, r9
je 0x1400482cb
mov rdx, qword [rbx + 0x640]
lea r11, [rdx + r9*8]
cmp rdx, r11
je 0x1400482cb
mov r9d, r10d
xor r9d, 0x6d2e7543
xor r8d, 0x6d2e7543
nop dword [rax]
mov rcx, qword [rdx]
mov eax, esi
xor eax, 0x6d2e7543
add esi, r10d
neg rdx
add rdx, 0xfffffffffffffff8
neg rdx
mov dword [rcx + 0x30], eax
mov dword [rcx + 0x34], 0x8673173
add dword [rcx + 0x34], 0x7d04a64
xor dword [rcx + 0x34], 0x7d190e94
mov dword [rcx + 0x38], r9d
mov dword [rcx + 0x3c], r8d
cmp rdx, r11
jne 0x140048281
mov rcx, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x34]
mov rax, qword [rbx + 0x660]
test rax, rax
je 0x14004830b
sub ecx, r8d
mov dword [rax + 0x14], 0x42ba5c31
add dword [rax + 0x14], 0x1598a901
xor dword [rax + 0x14], 0x357d7071
xor ecx, 0x6d2e7543
xor r8d, 0x6d2e7543
mov dword [rax + 0x10], ecx
mov dword [rax + 0x18], r8d
mov dword [rax + 0x1c], r8d
mov rcx, rbx
call fcn.140038080
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
nop
sub rsp, 0x6ab21563
add rsp, 0x6ab21583
pop rdi
ret
Function at 0x140048330
Capabilities:
Encode data using xor

Disassembly:
push rbx
nop
sub rsp, 0x629fcb91
add rsp, 0x629fcb71
mov rax, qword [rcx]
mov rbx, rcx
call qword [rax + 0x78]
mov rdx, qword [rbx + 0x648]
mov rcx, rax
mov qword [rsp + 0x30], rax
call fcn.1400389b0
lea rcx, [rbx + 0x640]
lea rdx, [rsp + 0x30]
call fcn.140047f40
mov rcx, rbx
nop
sub rsp, 0x5e95943c
add rsp, 0x5e95945c
pop rbx
jmp 0x140048330
push rbx
neg rsp
sub rsp, 0xffffffffffffffe0
neg rsp
cmp qword [rcx + 0x648], 0
mov rbx, rcx
je 0x140048471
lea rdx, [rsp + 0x30]
call fcn.140039090
mov r8, qword [rsp + 0x30]
mov r11d, 0x123cb5f2
add r11d, 0xdc3fbcd
xor r11d, 0x2000b11f
mov r9d, dword [rsp + 0x34]
mov eax, r8d
sub eax, r9d
cdq
idiv dword [rbx + 0x648]
mov rdx, qword [rbx + 0x648]
cmp eax, r11d
cmovl r11d, eax
xor r10d, r10d
test rdx, rdx
je 0x140048420
mov rax, qword [rbx + 0x640]
mov qword [rsp + 0x38], rdi
lea rdi, [rax + rdx*8]
cmp rax, rdi
je 0x14004841b
mov r8d, r11d
xor r8d, 0x6d2e7543
xor r9d, 0x6d2e7543
nop word [rax + rax]
mov rdx, qword [rax]
mov ecx, r10d
xor ecx, 0x6d2e7543
add r10d, r11d
nop
sub rax, 0x94b1665
add rax, 0x94b166d
mov dword [rdx + 0x30], ecx
mov dword [rdx + 0x34], 0x42c99478
xor dword [rdx + 0x34], 0x270c1b72
xor dword [rdx + 0x34], 0x8ebfa49
mov dword [rdx + 0x38], r8d
mov dword [rdx + 0x3c], r9d
cmp rax, rdi
jne 0x1400483cc
mov r8, qword [rsp + 0x30]
mov r9d, dword [rsp + 0x34]
mov rdi, qword [rsp + 0x38]
mov rax, qword [rbx + 0x660]
test rax, rax
je 0x140048469
sub r8d, r9d
mov dword [rax + 0x14], 0x5dca0c1f
add dword [rax + 0x14], 0x193738b9
sub dword [rax + 0x14], 0x4d6a26f2
xor dword [rax + 0x14], 0x44b968a5
xor r8d, 0x6d2e7543
xor r9d, 0x6d2e7543
mov dword [rax + 0x10], r8d
mov dword [rax + 0x18], r9d
mov dword [rax + 0x1c], r9d
mov rcx, rbx
call fcn.140038080
neg rsp
add rsp, 0xffffffffffffffe0
neg rsp
pop rbx
ret

Function at 0x140051f90
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
add rsp, 0xffffffffffffffe0
xchg r15, rbx
mov r15, rdx
xchg rbx, r15
mov rdi, rcx
nop
movabs rdx, 0xffffffff0499d047
xor rdx, 0x551c61fc
add rdx, 0x13e9824c
add rdx, 0x7fffffff
xor rdx, 0x1a90cbf9
nop word [rax + rax]
inc rdx
cmp word [rbx + rdx*2], 0
mov dword [rsp - 0x38], 0x332be03b
jne 0x140051fdf
xchg rdx, r15
mov qword [rcx + 0x38], r15
xchg rdx, r15
call fcn.14000ed30
mov dword [rsp - 0x24], edi
xor r8d, r8d
mov edx, 0x66d79398
sub edx, 0x254872e
xor edx, 0xaeb06d8
sub edx, 0x6974a231
cmp qword [rdi + 0x38], r8
mov rsp, rsp
jbe 0x140052089
sub rbx, rax
mov r9d, 0x6728ad44
sub r9d, 0x35ae261d
add r9d, 0x3e4f9988
sub r9d, 0x6fca1fb0
nop word [rax + rax]
mov dword [rsp - 0x18], 0x37a33b8a
movzx ecx, dx
lea rax, [rax + 2]
and cx, r9w
mov r14, r14
ror edx, 6
ror edx, 1
ror edx, 1
xor cx, word [rbx + rax - 2]
inc r8
mov word [rax - 2], cx
xchg rbp, rbp
cmp r8, qword [rdi + 0x38]
jb 0x14005205b
xchg r11, rbx
mov r11, qword [rsp + 0x30]
xchg rbx, r11
xchg r15, rdi
mov rax, r15
xchg r15, rdi
neg rsp
add rsp, 0xffffffffffffffe0
neg rsp
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret
Function at 0x140052a50
Capabilities:
Encode data using xor

Disassembly:
xchg r9, rbx
mov qword [rsp + 8], r9
xchg rbx, r9
xchg rsi, rcx
mov qword [rsp + 0x10], rcx
xchg rsi, rcx
push rdi
add rsp, 0xffffffffffffffe0
mov rdx, rdx
mov rsi, qword [rcx + 0x38]
xchg r8, rbx
mov r8, rdx
xchg r8, rbx
xchg rsi, r8
mov rsi, qword [rdx + 0x38]
xchg r8, rsi
xchg rdi, r12
mov r12, rcx
xchg r12, rdi
add r8, rsi
mov rdx, rsi
mov r11, r11
mov qword [rcx + 0x38], r8
call fcn.140053710
mov r9, qword [rbx]
mov ecx, esi
mov r9, r9
and ecx, 3
mov r8d, 0x3b1cb708
xor r8d, 0x6a114e22
sub r8d, 0x4f6deafb
add r8d, 0x58c4c3fd
xor r8d, 0x5e97baad
shl ecx, 2
shl ecx, 1
mov edx, r8d
mov r14, r14
ror edx, cl
xchg r10, r9
mov r9, rax
xchg r9, r10
xor ecx, ecx
cmp qword [rbx + 0x38], rcx
jbe 0x140052b77
xchg r15, r15
lea rax, [rsi + rsi]
mov r11d, 0x36786d02
add r11d, 0x276283dc
add r11d, 0x214d4fa6
sub r11d, 0x7d1a7995
sub r11d, 0x20dc5f0
sub rax, r9
mov dword [rsp - 0x44], 0x7cee5ffd
add r10, rax
nop dword [rax]
movzx eax, dx
mov r14, r14
lea r9, [r9 + 2]
xor ax, r8w
ror edx, 2
ror edx, 5
ror edx, 1
and ax, r11w
mov dword [rsp - 0x24], 0x1b274d0d
ror r8d, 3
ror r8d, 3
ror r8d, 1
ror r8d, 1
xor ax, word [r9 - 2]
inc rcx
mov r12, r12
mov word [r10 + r9 - 2], ax
cmp rcx, qword [rbx + 0x38]
jb 0x140052b29
xchg rcx, rcx
mov rbx, qword [rsp + 0x30]
xchg rdi, rcx
mov rax, rcx
xchg rcx, rdi
mov rsi, qword [rsp + 0x38]
xchg r10, r10
nop
sub rsp, 0x5d0e1c79
add rsp, 0x5d0e1c99
pop rdi
mov dword [rsp - 0x2c], ecx
ret

Function at 0x140052bb0
Capabilities:
Encode data using xor

Disassembly:
xchg rbp, rbx
mov qword [rsp + 8], rbp
xchg rbx, rbp
xchg r11, rsi
mov qword [rsp + 0x10], r11
xchg rsi, r11
mov qword [rsp + 0x18], rdi
xchg rdi, rdi
nop
sub rsp, 8
mov qword [rsp], r14
neg rsp
sub rsp, 0xffffffffffffffe0
neg rsp
xchg rsi, r14
mov rsi, qword [rcx + 0x38]
xchg rsi, r14
xchg r12, rdi
mov r12, rdx
xchg rdi, r12
mov rsi, rcx
nop
movabs rbx, 0xffffffff5422ae03
sub rbx, 0x2429b40a
add rbx, 0x580d873
sub rbx, 0x2ff17c36
add rbx, 0x7fffffff
xor rbx, 0x7a77a9ca
inc rbx
cmp word [rdx + rbx*2], 0
mov r10, r10
jne 0x140052c25
lea r8, [r14 + rbx]
xchg r14, rcx
mov rdx, rcx
xchg r14, rcx
xchg r8, rdx
mov qword [rcx + 0x38], rdx
xchg r8, rdx
call fcn.140053710
mov r11, r11
mov ecx, r14d
mov edx, 0x29b34ef3
sub edx, 0x19ec4e00
add edx, 0x323b98bd
sub edx, 0x3d0f312f
and ecx, 3
shl ecx, 2
shl ecx, 1
ror edx, cl
mov dword [rsp - 0x40], ebp
test rbx, rbx
je 0x140052ce9
lea r8, [r14 + r14]
xchg rcx, rcx
mov ecx, 0x13317039
xor ecx, 0x4fa86ed1
sub ecx, 0x323941eb
sub ecx, 0x2a5fdbfe
sub r8, rdi
add r8, rax
mov dword [rsp - 0x10], ebp
nop dword [rax]
nop dword [rax + rax]
movzx eax, dx
xchg rsi, rsi
lea rdi, [rdi + 2]
and ax, cx
ror edx, 1
ror edx, 3
ror edx, 3
ror edx, 1
xor ax, word [rdi - 2]
mov dword [rsp - 0x24], ecx
mov word [r8 + rdi - 2], ax
sub rbx, 1
jne 0x140052cba
mov rbx, qword [rsp + 0x30]
mov r9, r9
xchg rsi, rcx
mov rax, rcx
xchg rcx, rsi
xchg rdx, rsi
mov rdx, qword [rsp + 0x38]
xchg rsi, rdx
xchg rcx, rdi
mov rcx, qword [rsp + 0x40]
xchg rdi, rcx
add rsp, 0x20
nop
add rsp, 8
mov r14, qword [rsp - 8]
ret
Function at 0x140053440
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
xchg rbx, rbp
mov qword [rsp + 0x18], rbx
xchg rbx, rbp
nop
sub rsp, 8
mov qword [rsp], rsi
nop
mov qword [rsp - 8], rdi
sub rsp, 8
nop
sub rsp, 8
mov qword [rsp], r14
nop
add rsp, 0x5ddba06f
sub rsp, 0x5ddba08f
lea rsi, [rdx + 8]
xorps xmm0, xmm0
mov r9, r9
xchg rsi, r11
mov qword [rdx], r11
xchg rsi, r11
xor edi, edi
xchg r8, r8
xchg r11, rsi
movups xmmword [r11], xmm0
xchg rsi, r11
mov r14, r9
mov dword [rsp - 0x34], 0x5e17925a
xchg r8, rbp
mov r8, rbp
xchg rbp, r8
xchg r13, rsi
movups xmmword [r13 + 0x10], xmm0
xchg rsi, r13
xchg r12, rbx
mov r12, rdx
xchg r12, rbx
xchg r11, rsi
movups xmmword [r11 + 0x20], xmm0
xchg r11, rsi
mov qword [rdx + 0x38], rdi
mov rax, qword [rcx + 0x38]
mov dword [rsp - 0x14], ebx
cmp r8, rax
jae 0x1400536a1
sub rax, r8
mov rbp, rbp
mov qword [rsp + 0x40], r15
cmp rax, r9
cmovb r14, rax
xchg r11, r11
xchg r13, r14
mov qword [rdx + 0x38], r13
xchg r14, r13
xchg rdx, rax
mov rdx, qword [rcx]
xchg rdx, rax
mov rcx, qword [rdx]
mov rsp, rsp
lea r15, [rax + r8*2]
cmp rcx, rsi
je 0x140053527
mov dword [rsp - 0x18], ecx
call fcn.140096230
cmp r14, 0x18
jbe 0x140053567
lea rcx, [r14 + r14]
mov dword [rsp - 0x38], 0x5284220c
call fcn.1400964f0
mov qword [rbx], rax
test rax, rax
mov dword [rsp - 0x44], 0x18241406
jne 0x14005357b
mov qword [rbx], rsi
xchg rdi, r9
mov rdi, r9
xchg rdi, r9
jmp 0x14005359c
xchg rsi, rdi
mov qword [rbx], rdi
xchg rsi, rdi
mov rax, rsi
mov dword [rsp - 0x14], 0x628522e8
xorps xmm0, xmm0
xchg r15, rax
movups xmmword [r15], xmm0
xchg r15, rax
movups xmmword [rax + 0x10], xmm0
xchg r13, rax
movups xmmword [r13 + 0x20], xmm0
xchg r13, rax
xchg r10, r9
mov r10, qword [rbx]
xchg r9, r10
and ebp, 3
mov r8d, 0x3052014b
xor r8d, 0x2a1685b
add r8d, 0x1e536cf7
sub r8d, 0x18ede217
xor r8d, 0x3cab9b71
shl ebp, 1
shl ebp, 2
mov edx, r8d
movzx ecx, bpl
ror edx, cl
mov dword [rsp - 0x30], 0x65d6625e
cmp qword [rbx + 0x38], rdi
jbe 0x140053656
sub r15, r9
mov dword [rsp - 0x30], 0x2923739b
mov ecx, 0x1c8c1985
xor ecx, 0x60616fbf
sub ecx, 0x559a6f3d
sub ecx, 0x275305fe
nop dword [rax]
mov dword [rsp - 0x38], 0x2db1706f
nop word [rax + rax]
movzx eax, dx
lea r9, [r9 + 2]
xor ax, r8w
mov rdi, rdi
ror edx, 6
ror edx, 1
ror edx, 1
and ax, cx
mov r14, r14
ror r8d, 8
xor ax, word [r15 + r9 - 2]
inc rdi
mov dword [rsp - 0x10], edx
mov word [r9 - 2], ax
cmp rdi, qword [rbx + 0x38]
jb 0x140053618
mov r10, r10
xchg r15, r9
mov r9, qword [rsp + 0x40]
xchg r9, r15
mov rax, rbx
xchg rdx, rbx
mov rdx, qword [rsp + 0x48]
xchg rbx, rdx
xchg rbp, r8
mov r8, qword [rsp + 0x50]
xchg rbp, r8
neg rsp
add rsp, 0xffffffffffffffe0
neg rsp
nop
add rsp, 8
mov r14, qword [rsp - 8]
nop
mov rdi, qword [rsp]
add rsp, 8
nop
mov rsi, qword [rsp]
add rsp, 8
ret
xchg rdi, rbx
mov rax, rdi
xchg rbx, rdi
jmp 0x140053664
Function at 0x140053d30
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400876e0
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x14049ffb0]
xchg r13, r13
cmp qword [0x1404a0098], 0
jne 0x140087450
syscall
mov dword [rsp - 0x20], ecx
ret

Function at 0x140053d50
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x28]
mov byte [rsp + 0x28], al
jmp 0x140087d02
xchg rsp, r10
mov rsp, rcx
xchg rsp, r10
mov eax, dword [0x1404a0048]
cmp qword [0x1404a0098], 0
xchg rsp, rsp
jne 0x140087450
syscall
ret

Function at 0x140053d60
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400874d3
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x14049ff80]
cmp qword [0x1404a0098], 0
mov dword [rsp - 0x40], 0x36e4e811
jne 0x140087450
syscall
ret

Function at 0x140053d70
Capabilities:
Execute syscall

Disassembly:
jmp 0x140087916
xchg rcx, r9
mov r10, r9
xchg r9, rcx
mov eax, dword [0x14049ffe8]
mov r11, r11
cmp qword [0x1404a0098], 0
jne 0x140087450
syscall
xchg rsi, rsi
ret

Function at 0x140053d80
Capabilities:
Execute syscall

Disassembly:
jmp 0x140087532
xchg r10, r8
mov r8, rcx
xchg r10, r8
mov eax, dword [0x14049ff88]
cmp qword [0x1404a0098], 0
jne 0x140087450
mov dword [rsp - 0x10], 0x62371187
syscall
ret

Function at 0x140053d90
Capabilities:
Execute syscall

Disassembly:
jmp 0x140087b07
mov r10, rcx
mov eax, dword [0x1404a0018]
cmp qword [0x1404a0098], 0
mov dword [rsp - 0x38], 0x1bbf3a53
jne 0x140087450
syscall
ret

Function at 0x140053da0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008770d
mov r10, rcx
mov rbx, rbx
mov eax, dword [0x14049ffb4]
cmp qword [0x1404a0098], 0
jne 0x140087450
xchg r9, r9
syscall
ret

Function at 0x140053dc0
Capabilities:
Execute syscall

Disassembly:
jmp 0x140087505
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x14049ff84]
mov r12, r12
cmp qword [0x1404a0098], 0
jne 0x140087450
syscall
ret

Function at 0x140053dd0
Capabilities:
Execute syscall

Disassembly:
jmp 0x140087a8c
xchg r13, rcx
mov r10, r13
xchg rcx, r13
mov eax, dword [0x1404a000c]
cmp qword [0x1404a0098], 0
xchg rbp, rbp
jne 0x140087450
syscall
ret

Function at 0x140053de0
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400878c3
xchg r10, r15
mov r15, rcx
xchg r15, r10
mov eax, dword [0x14049ffe0]
cmp qword [0x1404a0098], 0
jne 0x140087450
mov dword [rsp - 0x34], ecx
syscall
ret

Function at 0x140053df0
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400878ed
xchg rcx, rdx
mov r10, rdx
xchg rdx, rcx
mov eax, dword [0x14049ffe4]
cmp qword [0x1404a0098], 0
xchg rsi, rsi
jne 0x140087450
syscall
ret

Function at 0x140053e00
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008778b
mov r10, rcx
mov dword [rsp - 0x24], 0x7b41a7bc
mov eax, dword [0x14049ffc0]
cmp qword [0x1404a0098], 0
jne 0x140087450
syscall
mov r10, r10
ret

Function at 0x140053e10
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x58]
mov rdx, rdx
mov byte [rsp + 0x58], al
movzx eax, byte [rsp + 0x48]
mov byte [rsp + 0x48], al
jmp 0x140087cd7
mov r10, rcx
mov dword [rsp - 0x24], 0x26d24fe6
mov eax, dword [0x1404a0044]
cmp qword [0x1404a0098], 0
jne 0x140087450
xchg rdx, rdx
syscall
ret