joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140054470
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
nop
sub rsp, 8
mov qword [rsp], rdi
nop
add rsp, 0x5d135b61
sub rsp, 0x5d135b81
xchg r10, rbx
mov r10, rdx
xchg r10, rbx
xchg rdi, r14
mov r14, rcx
xchg r14, rdi
nop
movabs rdx, 0xffffffff7f34c679
sub rdx, 0x7b7ce9a6
add rdx, 0x2d318336
add rdx, 0x495b6880
add rdx, 0x7fffffff
xor rdx, 0x5bb3777
nop word [rax + rax]
mov rdi, rdi
inc rdx
cmp word [rbx + rdx*2], 0
jne 0x1400544d9
mov dword [rsp - 0x14], 0x1b1dca93
mov qword [rcx + 0x38], rdx
call fcn.140017a7c
xor r8d, r8d
mov dword [rsp - 0xc], edi
mov edx, 0x17997ff9
xor edx, 0x1bbdc72
xor edx, 0x2e2189f5
sub edx, 0x16c0e8f7
add edx, 0xf0b0287
cmp qword [rdi + 0x38], r8
mov dword [rsp - 0x28], ebp
jbe 0x14005458f
sub rbx, rax
mov r9d, 0x49af2fc3
sub r9d, 0x18748d58
xor r9d, 0x1e78765
sub r9d, 0x30dd240f
nop word [rax + rax]
mov r15, r15
movzx ecx, dx
lea rax, [rax + 2]
and cx, r9w
mov dword [rsp - 0x20], 0x131040b9
ror edx, 1
ror edx, 4
ror edx, 2
ror edx, 1
xor cx, word [rbx + rax - 2]
mov r12, r12
inc r8
mov word [rax - 2], cx
cmp r8, qword [rdi + 0x38]
mov dword [rsp - 0x30], 0x2d37647b
jb 0x140054551
xchg rcx, rbx
mov rcx, qword [rsp + 0x30]
xchg rcx, rbx
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
add rsp, 0x20
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret
Function at 0x1400548a0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov dword [rsp - 0x30], ecx
xchg r11, rsi
mov qword [rsp + 0x20], r11
xchg r11, rsi
mov word [rsp + 0x18], r8w
push rdi
nop
sub rsp, 8
mov qword [rsp], r12
push r13
xchg rsi, rsi
push r14
nop
sub rsp, 8
mov qword [rsp], r15
nop
sub rsp, 0x2559cf59
add rsp, 0x2559cef9
mov r12, qword [rdx + 0x38]
mov rcx, rcx
mov rdi, rdx
mov r15, rcx
neg r12
add r12, 0xfffffffffffffffe
neg r12
mov eax, 0x14a8e69a
xor eax, 0x39a4f7bb
add eax, 0x44d2c0c5
sub eax, 0x71ded1e4
nop
movabs rsi, 0xffffffff2bf6f571
sub rsi, 0x121bebd9
add rsi, 0x9b4f28c
add rsi, 0x7fffffff
xor rsi, 0x5c7003dc
mul r12
xchg r15, r15
cmovo rax, rsi
xchg rsp, rax
mov rcx, rsp
xchg rsp, rax
call fcn.140099c50
mov dword [rsp - 0x38], 0x12f0830d
xchg rcx, r13
mov rcx, qword [rdi + 0x38]
xchg rcx, r13
lea rcx, [rsp + 0x20]
mov rbp, qword [rdi]
xorps xmm0, xmm0
mov dword [rsp - 0x34], 0xe5b846b
mov r14, rax
lea rax, [rsp + 0x28]
xchg r15, rax
mov qword [rsp + 0x20], r15
xchg r15, rax
lea rdx, [r13 + 1]
xchg r14, rsp

Function at 0x140054c00
Capabilities:
Encode data using xor

Disassembly:
xchg r10, rbx
mov qword [rsp + 8], r10
xchg rbx, r10
mov qword [rsp + 0x10], rsi
mov r8, r8
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
mov dword [rsp - 0x40], esp
xchg r10, rsi
mov r10, qword [rcx + 0x38]
xchg r10, rsi
xchg rdi, rdx
mov rbx, rdi
xchg rdx, rdi
xchg r8, r11
mov r11, qword [rdx + 0x38]
xchg r8, r11
xchg rcx, rdi
mov rcx, rdi
xchg rdi, rcx
add r8, rsi
xchg r9, r9
xchg rdx, rcx
mov rcx, rsi
xchg rdx, rcx
xchg r8, rbp
mov qword [rcx + 0x38], rbp
xchg r8, rbp
call fcn.140055920
mov dword [rsp - 0x10], ecx
mov r9, qword [rbx]
mov ecx, esi
and ecx, 3
mov r8d, 0x26273709
xor r8d, 0x68e471fc
sub r8d, 0x3db5df6
sub r8d, 0x1a9aa4f1
shl ecx, 2
shl ecx, 1
mov edx, r8d
mov dword [rsp - 0x38], 0x515bd81f
ror edx, cl
xchg r10, rax
mov rax, r10
xchg r10, rax
xor ecx, ecx
mov dword [rsp - 0x28], 0xfa8b00a
cmp qword [rbx + 0x38], rcx
jbe 0x140054d2f
lea rax, [rsi + rsi]
mov r11d, 0x7b0f8c24
xor r11d, 0x976ecde
xor r11d, 0x391a2c93
sub r11d, 0x4b634b6a
sub rax, r9
mov dword [rsp - 0x24], 0xafa319b
add r10, rax
nop dword [rax]
movzx eax, dx
lea r9, [r9 + 2]
mov r11, r11
xor ax, r8w
ror edx, 1
ror edx, 5
ror edx, 1
ror edx, 1
and ax, r11w
ror r8d, 8
mov dword [rsp - 0x28], 0x363b0e19
xor ax, word [r9 - 2]
inc rcx
mov word [r10 + r9 - 2], ax
cmp rcx, qword [rbx + 0x38]
mov r8, r8
jb 0x140054ced
xchg r13, rbx
mov r13, qword [rsp + 0x30]
xchg r13, rbx
xchg r8, rdi
mov rax, r8
xchg rdi, r8
mov rsi, qword [rsp + 0x38]
mov dword [rsp - 0x2c], 0x1a0685ae
sub rsp, 0xffffffffffffffe0
pop rdi
ret
Function at 0x140054d60
Capabilities:
Encode data using xor

Disassembly:
xchg rdx, rbx
mov qword [rsp + 8], rdx
xchg rdx, rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push r14
mov dword [rsp - 0x1c], esi
nop
add rsp, 0x49888af1
sub rsp, 0x49888b11
mov r14, qword [rcx + 0x38]
xchg r8, r8
xchg rbx, rdx
mov rdi, rbx
xchg rdx, rbx
xchg rcx, r15
mov rsi, r15
xchg r15, rcx
nop
movabs rbx, 0xffffffff0fbe1199
sub rbx, 0x3db2163
xor rbx, 0x11b050aa
add rbx, 0x7fffffff
add rbx, 0x65ad5f64
inc rbx
cmp word [rdx + rbx*2], 0
jne 0x140054dca
mov r10, r10
lea r8, [r14 + rbx]
mov rdx, r14
mov qword [rcx + 0x38], r8
mov dword [rsp - 0x40], 0x5372bd7e
call fcn.140055920
mov ecx, r14d
mov edx, 0x27decd08
sub edx, 0x1ae181d6
add edx, 0x575df4d1
add edx, 0xa22dc56
xor edx, 0x5e335857
and ecx, 3
shl ecx, 2
shl ecx, 1
ror edx, cl
test rbx, rbx
mov dword [rsp - 0x14], 0x7a8ff0f9
je 0x140054e91
lea r8, [r14 + r14]
mov ecx, 0x6e7f3074
add ecx, 0x45543f5
sub ecx, 0x1d29de2d
sub ecx, 0x55aa953d
sub r8, rdi
mov dword [rsp - 0x20], 0x3dc7d5bf
add r8, rax
nop dword [rax]
nop dword [rax + rax]
mov dword [rsp - 0x34], edi
movzx eax, dx
lea rdi, [rdi + 2]
and ax, cx
xchg rcx, rcx
ror edx, 3
ror edx, 5
xor ax, word [rdi - 2]
mov r8, r8
mov word [r8 + rdi - 2], ax
sub rbx, 1
jne 0x140054e67
mov rbx, qword [rsp + 0x30]
mov r13, r13
mov rax, rsi
mov rsi, qword [rsp + 0x38]
xchg rdi, rbp
mov rbp, qword [rsp + 0x40]
xchg rdi, rbp
nop
sub rsp, 0x36db0a8e
add rsp, 0x36db0aae
nop
add rsp, 8
mov r14, qword [rsp - 8]
ret
Function at 0x1400556a6
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r13
mov qword [rsp + 0x10], r13
xchg r13, rbx
mov qword [rsp + 0x18], rbp
mov dword [rsp - 0xc], 0x721e859
nop
mov qword [rsp - 8], rsi
sub rsp, 8
nop
push 0x61f11724
mov qword [rsp], rdi
nop
sub rsp, 8
mov qword [rsp], r14
neg rsp
sub rsp, 0xffffffffffffffe0
neg rsp
lea rsi, [rdx + 8]
mov dword [rsp - 0x24], 0x2351622d
xorps xmm0, xmm0
xchg r8, rsi
mov qword [rdx], r8
xchg r8, rsi
xor edi, edi
mov dword [rsp - 0x3c], edi
xchg rsi, rbx
movups xmmword [rbx], xmm0
xchg rsi, rbx
xchg r9, r8
mov r14, r8
xchg r8, r9
xchg r8, rcx
mov rbp, rcx
xchg r8, rcx
xchg rsi, rdi
movups xmmword [rdi + 0x10], xmm0
xchg rsi, rdi
xchg rbx, rdx
mov rdx, rbx
xchg rdx, rbx
movups xmmword [rsi + 0x20], xmm0
mov dword [rsp - 0x14], 0x6f8bc513
xchg rdi, rsi
mov qword [rdx + 0x38], rsi
xchg rsi, rdi
mov rax, qword [rcx + 0x38]
xchg r14, r14
cmp r8, rax
jae 0x1400558b4
sub rax, r8
mov qword [rsp + 0x40], r15
mov rbp, rbp
cmp rax, r9
cmovb r14, rax
mov qword [rdx + 0x38], r14
mov rax, qword [rcx]
mov dword [rsp - 0x24], 0x137bc45b
mov rcx, qword [rdx]
lea r15, [rax + r8*2]
cmp rcx, rsi
je 0x14005574b
mov dword [rsp - 0x24], edi
call fcn.140099d90
cmp r14, 0x18
jbe 0x14005577c
lea rcx, [r14 + r14]
mov dword [rsp - 0x14], ebx
call fcn.14009a000
mov qword [rbx], rax
test rax, rax
jne 0x14005578c
mov rsi, rsi
mov qword [rbx], rsi
mov r9, rdi
jmp 0x1400557b3
xchg rsi, rdi
mov qword [rbx], rdi
xchg rsi, rdi
xchg rsi, rax
mov rsi, rax
xchg rsi, rax
xorps xmm0, xmm0
xchg rdx, rdx
xchg rcx, rax
movups xmmword [rcx], xmm0
xchg rcx, rax
xchg r14, rax
movups xmmword [r14 + 0x10], xmm0
xchg r14, rax
xchg rbx, rax
movups xmmword [rbx + 0x20], xmm0
xchg rbx, rax
xchg r8, r9
mov r8, qword [rbx]
xchg r8, r9
and ebp, 3
mov r8d, 0x46a88a24
add r8d, 0x3349a85c
sub r8d, 0x4b89e930
add r8d, 0x85aaf7b
sub r8d, 0x675b4bd
shl ebp, 3
mov edx, r8d
mov dword [rsp - 0x1c], 0x37531a76
movzx ecx, bpl
ror edx, cl
cmp qword [rbx + 0x38], rdi
xchg r15, r15
jbe 0x140055864
sub r15, r9
mov ecx, 0x4c676f30
xor ecx, 0x6f3a59a8
add ecx, 0x5f9fc3d
sub ecx, 0x295731d6
nop dword [rax]
mov dword [rsp - 0x24], 0x76a8c51c
nop word [rax + rax]
movzx eax, dx
lea r9, [r9 + 2]
xor ax, r8w
mov dword [rsp - 0x34], esp
ror edx, 5
ror edx, 2
ror edx, 1
and ax, cx
ror r8d, 1
ror r8d, 7
xor ax, word [r15 + r9 - 2]
inc rdi
mov r8, r8
mov word [r9 - 2], ax
cmp rdi, qword [rbx + 0x38]
jb 0x140055828
xchg r15, rdx
mov rdx, qword [rsp + 0x40]
xchg rdx, r15
mov rax, rbx
xchg rdx, rbx
mov rdx, qword [rsp + 0x48]
xchg rdx, rbx
xchg rsi, rbp
mov rsi, qword [rsp + 0x50]
xchg rbp, rsi
nop
add rsp, 0x3f372682
sub rsp, 0x3f372662
nop
add rsp, 8
mov r14, qword [rsp - 8]
nop
mov rdi, qword [rsp]
add rsp, 8
nop
mov rsi, qword [rsp]
add rsp, 8
ret
xchg rbx, rax
mov rbx, rax
xchg rbx, rax
jmp 0x140055872

Function at 0x140055c80
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e88e
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140143f30]
mov dword [rsp - 0x34], ebx
cmp qword [0x140144018], 0
jne 0x14008e620
syscall
ret
Function at 0x140055ca0
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x28]
xchg rdx, rdx
mov byte [rsp + 0x28], al
jmp 0x14008eebd
xchg r13, r10
mov r13, rcx
xchg r13, r10
mov eax, dword [0x140143fc8]
xchg r11, r11
cmp qword [0x140144018], 0
jne 0x14008e620
syscall
ret

Function at 0x140055cc0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e69d
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140143f00]
cmp qword [0x140144018], 0
mov dword [rsp - 0x38], esi
jne 0x14008e620
syscall
ret

Function at 0x140055cd0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ec12
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140143f88]
mov dword [rsp - 0x34], 0x2c0028ca
cmp qword [0x140144018], 0
jne 0x14008e620
syscall
ret

Function at 0x140055ce0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008eac6
xchg rbx, r10
mov rbx, rcx
xchg r10, rbx
mov eax, dword [0x140143f68]
mov dword [rsp - 0x24], ebx
cmp qword [0x140144018], 0
jne 0x14008e620
syscall
ret

Function at 0x140055cf0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e6fa
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140143f08]
xchg rdx, rdx
cmp qword [0x140144018], 0
jne 0x14008e620
syscall
ret

Function at 0x140055d00
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ed41
mov r10, rcx
mov dword [rsp - 0x30], 0x30db81c1
mov eax, dword [0x140143fa4]
cmp qword [0x140144018], 0
jne 0x14008e620
xchg r8, r8
syscall
ret

Function at 0x140055d10
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ed6c
mov r10, rcx
mov eax, dword [0x140143fa8]
xchg rbp, rbp
cmp qword [0x140144018], 0
jne 0x14008e620
syscall
mov dword [rsp - 0x20], 0x7a6810ed
ret

Function at 0x140055d20
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ec9a
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140143f94]
xchg r12, r12
cmp qword [0x140144018], 0
jne 0x14008e620
syscall
ret

Function at 0x140055d30
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ecc3
xchg r15, r10
mov r15, rcx
xchg r10, r15
mov eax, dword [0x140143f98]
cmp qword [0x140144018], 0
mov dword [rsp - 0x20], esi
jne 0x14008e620
syscall
ret

Function at 0x140055d40
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e8b8
xchg r10, rbp
mov rbp, rcx
xchg rbp, r10
mov eax, dword [0x140143f34]
cmp qword [0x140144018], 0
mov dword [rsp - 0x10], ecx
jne 0x14008e620
syscall
ret

Function at 0x140055d50
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008eb72
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140143f78]
cmp qword [0x140144018], 0
mov rbp, rbp
jne 0x14008e620
syscall
ret

Function at 0x140055d60
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ebc4
mov r10, rcx
mov eax, dword [0x140143f80]
cmp qword [0x140144018], 0
mov dword [rsp - 0x40], ebp
jne 0x14008e620
syscall
ret

Function at 0x140055d70
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e6cb
mov r10, rcx
mov r11, r11
mov eax, dword [0x140143f04]
cmp qword [0x140144018], 0
jne 0x14008e620
syscall
mov dword [rsp - 0xc], 0x2867c46a
ret
Function at 0x140055d80
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ec40
xchg r10, rbp
mov rbp, rcx
xchg rbp, r10
mov eax, dword [0x140143f8c]
cmp qword [0x140144018], 0
mov dword [rsp - 0x30], 0xd9f07b3
jne 0x14008e620
syscall
ret

Function at 0x140055d90
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ea7a
mov r10, rcx
mov eax, dword [0x140143f60]
cmp qword [0x140144018], 0
mov r9, r9
jne 0x14008e620
syscall
ret

Function at 0x140055da0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ea9d
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140143f64]
cmp qword [0x140144018], 0
mov rcx, rcx
jne 0x14008e620
syscall
ret

Function at 0x140055db0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e92e
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140143f40]
cmp qword [0x140144018], 0
jne 0x14008e620
mov dword [rsp - 0x28], ebp
syscall
ret

Function at 0x140055dc0
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x58]
xchg rsi, rsi
mov byte [rsp + 0x58], al
movzx eax, byte [rsp + 0x48]
mov byte [rsp + 0x48], al
jmp 0x14008ee92
mov r10, rcx
mov dword [rsp - 0x28], 0x1bbff0a9
mov eax, dword [0x140143fc4]
cmp qword [0x140144018], 0
jne 0x14008e620
syscall
xchg rbx, rbx
ret

Function at 0x140055de0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e7c5
mov r10, rcx
mov eax, dword [0x140143f1c]
mov r11, r11
cmp qword [0x140144018], 0
jne 0x14008e620
syscall
mov rbp, rbp
ret

Function at 0x140055df0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e7eb
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140143f20]
cmp qword [0x140144018], 0
jne 0x14008e620
mov dword [rsp - 0x40], 0x2b5c00b0
syscall
ret

Function at 0x140055e00
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e819
xchg rbx, rcx
mov r10, rbx
xchg rcx, rbx
mov eax, dword [0x140143f24]
cmp qword [0x140144018], 0
mov rsp, rsp
jne 0x14008e620
syscall
ret

Function at 0x140055e10
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e842
mov r10, rcx
mov eax, dword [0x140143f28]
cmp qword [0x140144018], 0
xchg r12, r12
jne 0x14008e620
syscall
ret

Function at 0x140055e20
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e7a1
mov r10, rcx
mov eax, dword [0x140143f18]
cmp qword [0x140144018], 0
mov dword [rsp - 0x3c], ebp
jne 0x14008e620
syscall
ret

Function at 0x140055e30
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008eced
mov r10, rcx
mov r12, r12
mov eax, dword [0x140143f9c]
cmp qword [0x140144018], 0
jne 0x14008e620
syscall
mov dword [rsp - 0x30], 0x4c8e5e8
ret

Function at 0x140055e40
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e865
xchg rsi, r10
mov rsi, rcx
xchg r10, rsi
mov eax, dword [0x140143f2c]
cmp qword [0x140144018], 0
xchg r15, r15
jne 0x14008e620
syscall
ret

Function at 0x140055e50
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e723
mov r10, rcx
mov eax, dword [0x140143f0c]
xchg r13, r13
cmp qword [0x140144018], 0
jne 0x14008e620
syscall
xchg r12, r12
ret
Function at 0x140055e60
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e8e2
xchg rsi, r10
mov rsi, rcx
xchg rsi, r10
mov eax, dword [0x140143f38]
cmp qword [0x140144018], 0
mov rcx, rcx
jne 0x14008e620
syscall
ret

Function at 0x140055e70
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008eb1e
xchg rsp, r10
mov rsp, rcx
xchg rsp, r10
mov eax, dword [0x140143f70]
cmp qword [0x140144018], 0
jne 0x14008e620
mov dword [rsp - 0x14], edx
syscall
ret

Function at 0x140055e80
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008eb9b
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140143f7c]
cmp qword [0x140144018], 0
jne 0x14008e620
xchg r11, r11
syscall
ret

Function at 0x140055ea0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e777
xchg r14, r10
mov r14, rcx
xchg r14, r10
mov eax, dword [0x140143f14]
mov dword [rsp - 0x24], ecx
cmp qword [0x140144018], 0
jne 0x14008e620
syscall
ret

Function at 0x140055eb0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ee66
xchg r12, rcx
mov r10, r12
xchg rcx, r12
mov eax, dword [0x140143fc0]
mov r15, r15
cmp qword [0x140144018], 0
jne 0x14008e620
syscall
mov rbp, rbp
ret

Function at 0x140055ec0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ed18
xchg rcx, r13
mov r10, r13
xchg rcx, r13
mov eax, dword [0x140143fa0]
cmp qword [0x140144018], 0
mov rbx, rbx
jne 0x14008e620
syscall
ret

Function at 0x140055ed0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ee19
mov r10, rcx
mov eax, dword [0x140143fb8]
cmp qword [0x140144018], 0
xchg rcx, rcx
jne 0x14008e620
syscall
ret

Function at 0x140055ee0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ebe8
xchg r10, r12
mov r12, rcx
xchg r10, r12
mov eax, dword [0x140143f84]
cmp qword [0x140144018], 0
jne 0x14008e620
mov dword [rsp - 0x24], edi
syscall
ret

Function at 0x140055ef0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ee3c
xchg r10, rsp
mov rsp, rcx
xchg r10, rsp
mov eax, dword [0x140143fbc]
cmp qword [0x140144018], 0
mov dword [rsp - 0x34], esp
jne 0x14008e620
syscall
ret

Function at 0x140055f00
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e749
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140143f10]
mov dword [rsp - 0x30], 0x1fe6416e
cmp qword [0x140144018], 0
jne 0x14008e620
syscall
ret

Function at 0x140055f10
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e90b
mov r10, rcx
mov eax, dword [0x140143f3c]
xchg rdx, rdx
cmp qword [0x140144018], 0
jne 0x14008e620
syscall
ret
Function at 0x1400691b8
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
xchg rdi, rbx
mov qword [rsp + 0x20], rbx
xchg rdi, rbx
nop
mov qword [rsp - 8], rbp
sub rsp, 8
mov rbp, rsp
sub rsp, 0x60
movabs rbx, 0x28510a1f2f9523d9
add rbx, 0x25c2a69a
sub rbx, 0x28143f5a
add rbx, 0x2b4e8b32
xchg rcx, r8
mov rdi, r8
xchg rcx, r8
cmp qword [rcx + 0x30], rbx
jne 0x1400693cc
xor esi, esi
mov dword [rsp - 0x38], ecx
mov dword [rbp - 0x40], 0x31ba1337
add dword [rbp - 0x40], 0x2ff84df3
xor dword [rbp - 0x40], 0x7788aee8
xor dword [rbp - 0x40], 0x161acf8d
mov dword [rbp - 0x3c], 0x25442df0
xor dword [rbp - 0x3c], 0x23bcd084
add dword [rbp - 0x3c], 0x173448cb
xor dword [rbp - 0x3c], 0x8a20bde
xor dword [rbp - 0x3c], 0x16de4dda
mov dword [rbp - 0x38], 0x24de692a
xor dword [rbp - 0x38], 0x232f7c34
xor dword [rbp - 0x38], 0x5effd014
sub dword [rbp - 0x38], 0x21232d40
xor dword [rbp - 0x38], 0x37c697b4
mov dword [rbp - 0x34], 0x3888301d
xor dword [rbp - 0x34], 0x5d68e3d0
sub dword [rbp - 0x34], 0x45af903f
add dword [rbp - 0x34], 0x2b979f55
sub dword [rbp - 0x34], 0x4bc6e265
mov dword [rbp - 0x30], 0x8fb9540
add dword [rbp - 0x30], 0x4d0d22c1
add dword [rbp - 0x30], 0x87af53b
sub dword [rbp - 0x30], 0x5e63ad1c
mov dword [rbp - 0x2c], 0x586e036f
sub dword [rbp - 0x2c], 0x3e2a630f
xor dword [rbp - 0x2c], 0x2d692454
sub dword [rbp - 0x2c], 0x207646fc
sub dword [rbp - 0x2c], 0x16583d17
xchg rsp, rsi
mov qword [rbp + 0x10], rsp
xchg rsp, rsi
mov rax, qword [rbp + 0x10]
xchg rcx, r9
mov r9, qword [rbp + 0x10]
xchg rcx, r9
xchg r14, rax
mov r14, qword [rbp + 0x10]
xchg r14, rax
and cl, 3
xchg r11, r11
shl cl, 3
movzx edx, word [rbp + rax*2 - 0x40]
mov eax, 0x1f12f7b5
add eax, 0x13001fe3
xor eax, 0x7c1c7826
add eax, 0x1d0f6e77
sub eax, 0x3ad19a27
shr eax, cl
movzx ecx, al
mov rax, qword [rbp + 0x10]
mov rdx, rdx
xor cx, dx
mov word [rbp + rax*2 - 0x28], cx
mov rax, qword [rbp + 0x10]
inc rax
mov dword [rsp - 0x10], 0x20828435
xchg rdi, rax
mov qword [rbp + 0x10], rdi
xchg rdi, rax
xchg rbx, rax
mov rbx, qword [rbp + 0x10]
xchg rbx, rax
cmp rax, 0xc
mov dword [rsp - 0x14], ecx
jb 0x1400692e8
xor edx, edx
mov word [rbp - 0x10], si
lea rcx, [rbp - 0x28]
mov dword [rsp - 0x18], 0x1726d562
call fcn.14008c080
xchg rdx, r11
mov r11, rax
xchg rdx, r11
xchg rbx, rax
mov r8, rbx
xchg rbx, rax
xor eax, eax
xor rdx, rbx
mov qword [rdi + 0x30], rdx
mov r15, r15
lea rdi, [rbp - 0x28]
lea ecx, [rax + 0xc]
rep stosb byte [rdi], al
cmp rdx, rbx
mov dword [rsp - 0x30], 0x12f0d821
je 0x1400693d4
lea rdx, [0x1401432c0]
mov rcx, r8
mov dword [rsp - 0x44], edi
call fcn.14006df3c
test al, al
setne al
jmp 0x1400693d4
mov al, 2
xor al, 0x6f
sub al, 0x29
sub al, 0x43
lea r11, [rsp + 0x60]
xchg r15, r15
xchg r9, rbx
mov r9, qword [r11 + 0x18]
xchg r9, rbx
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov dword [rsp - 0x20], esi
xchg r11, rcx
mov rsp, rcx
xchg rcx, r11
pop rbp
mov dword [rsp - 0x24], 0x7b5b680b
ret
Function at 0x140069408
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
xchg rbx, rsi
mov qword [rsp + 0x18], rbx
xchg rbx, rsi
mov qword [rsp + 0x20], rdi
push rbp
mov r9, r9
xchg rbp, rsp
mov rsp, rbp
xchg rbp, rsp
neg rsp
sub rsp, 0xffffffffffffffb0
neg rsp
movabs rbx, 0x28510a1f188f9973
xor rbx, 0x2713af58
sub rbx, 0x3f4475a3
xor rbx, 0x5b1ee9b6
sub rbx, 0x2b712f3
xchg rdi, rdx
mov rdx, rcx
xchg rdi, rdx
cmp qword [rcx + 0x28], rbx
jne 0x140069605
mov r8d, 0x6c359e05
sub r8d, 0x54016bfc
xor r8d, 0x32e67afc
sub r8d, 0x2ad248f2
mov dword [rbp - 0x30], 0x39db624e
add dword [rbp - 0x30], 0x62e8f0f
xor dword [rbp - 0x30], 0x541ebba7
xor dword [rbp - 0x30], 0x10ec5a0e
xor dword [rbp - 0x30], 0x4d310b5
xor esi, esi
mov dword [rbp - 0x2c], 0x30b611b6
add dword [rbp - 0x2c], 0x36388448
sub dword [rbp - 0x2c], 0xa1b9823
sub dword [rbp - 0x2c], 0x4fbef230
xor dword [rbp - 0x2c], 0xd170b83
mov dword [rbp - 0x28], 0x464d7afa
xor dword [rbp - 0x28], 0x5fcada49
add dword [rbp - 0x28], 0x2b68a932
xor dword [rbp - 0x28], 0x449a49d9
mov dword [rbp - 0x24], 0x6a6b46cf
xor dword [rbp - 0x24], 0x558ee3a1
add dword [rbp - 0x24], 0x282d5ad2
sub dword [rbp - 0x24], 0xc311470
xor dword [rbp - 0x24], 0x5bbdebf9
lea eax, [r8 + 0x5f]
mov word [rbp - 0x20], ax
xchg r15, r15
mov qword [rbp + 0x10], rsi
mov rax, qword [rbp + 0x10]
mov rcx, qword [rbp + 0x10]
mov dword [rsp - 0x28], esi
mov rax, qword [rbp + 0x10]
and cl, r8b
shl cl, 3
movzx edx, word [rbp + rax*2 - 0x30]
mov r12, r12
mov eax, 0x70761028
sub eax, 0x18893eac
xor eax, 0x8cd4326
sub eax, 0x2ed44e4c
shr eax, cl
mov r8, r8
movzx ecx, al
xchg r12, rax
mov r12, qword [rbp + 0x10]
xchg r12, rax
xor cx, dx
mov word [rbp + rax*2 - 0x1e], cx
mov dword [rsp - 0x34], 0x4c29c1f2
mov rax, qword [rbp + 0x10]
inc rax
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov r9, r9
cmp rax, 9
jb 0x140069522
xor edx, edx
mov dword [rsp - 0x10], 0x1c9d2185
mov word [rbp - 0xc], si
lea rcx, [rbp - 0x1e]
call fcn.14008c080
xchg rdx, rax
mov rax, rdx
xchg rdx, rax
mov r8, rax
xor eax, eax
xor rdx, rbx
mov dword [rsp - 0x3c], esp
xchg rdx, r14
mov qword [rdi + 0x28], r14
xchg rdx, r14
lea rdi, [rbp - 0x1e]
mov dword [rsp - 0x3c], 0x65ba2c1d
lea ecx, [rax + 9]
rep stosb byte [rdi], al
cmp rdx, rbx
mov dword [rsp - 0x44], 0x7419f530
je 0x14006960d
lea rdx, [0x140143810]
xchg r11, rcx
mov r11, r8
xchg rcx, r11
call fcn.140072534
test al, al
setne al
mov dword [rsp - 0x14], ebp
jmp 0x14006960d
mov al, 0xa
xor al, 0x2e
add al, 0x57
xor al, 0x7a
mov rbx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
mov dword [rsp - 0x28], 0x5928359e
mov rdi, qword [rsp + 0x78]
sub rsp, 0xffffffffffffffb0
nop
add rsp, 8
mov rbp, qword [rsp - 8]
ret