joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140033f50
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
add rsp, 0xffffffffffffffc0
mov eax, dword [rcx + 0x2e8]
mov r14, rdx
mov edi, dword [rcx + 0x2f4]
xor eax, 0x63c4968
movaps xmmword [rsp + 0x30], xmm6
mov rbp, rcx
movaps xmmword [rsp + 0x20], xmm7
xor ebx, ebx
xor edi, 0x63c4968
xor edx, edx
movd xmm6, eax
add edi, edi
mov eax, dword [rcx + 0x308]
mov esi, ebx
xor eax, 0xe047f30
mov rcx, r14
mov dword [rsp + 0x60], eax
movss xmm7, dword [rsp + 0x60]
cvtdq2ps xmm6, xmm6
call fcn.140054670
test ax, ax
je 0x14003400e
nop word [rax + rax]
movzx ecx, ax
inc rsi
mov rax, qword [rbp + 0x300]
add rcx, rcx
mov rdx, rsi
movups xmm0, xmmword [rax + rcx*8]
xorps xmm0, xmmword [0x1404a8590]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm6
addss xmm1, xmm7
cvttss2si ecx, xmm1
sub ecx, edi
add ebx, ecx
mov rcx, r14
call fcn.140054670
test ax, ax
jne 0x140033fc4
mov rbp, qword [rsp + 0x70]
mov eax, ebx
mov rbx, qword [rsp + 0x68]
movaps xmm6, xmmword [rsp + 0x30]
movaps xmm7, xmmword [rsp + 0x20]
nop
sub rsp, 0x5cad926b
add rsp, 0x5cad92ab
pop r14
pop rdi
pop rsi
ret

Function at 0x140034040
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
xor r8d, r8d
mov r9d, dword [rcx + 0x2f4]
xor eax, 0x63c4968
xor r9d, 0x63c4968
add r9d, r9d
movd xmm3, eax
mov eax, dword [rcx + 0x308]
xor eax, 0xe047f30
mov dword [rsp + 8], eax
movss xmm4, dword [rsp + 8]
movzx eax, byte [rdx]
cvtdq2ps xmm3, xmm3
test al, al
je 0x1400340cd
mov r10, qword [rcx + 0x300]
movaps xmm2, xmmword [0x1404a8590]
movzx eax, al
inc rdx
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
movzx eax, byte [rdx]
xorps xmm0, xmm2
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm3
addss xmm1, xmm4
cvttss2si ecx, xmm1
sub ecx, r9d
add r8d, ecx
test al, al
jne 0x140034094
mov eax, r8d
ret

Function at 0x1400340e0
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
xor r8d, r8d
mov r9d, dword [rcx + 0x2f4]
xor eax, 0x63c4968
xor r9d, 0x63c4968
add r9d, r9d
movd xmm3, eax
mov eax, dword [rcx + 0x308]
xor eax, 0xe047f30
mov dword [rsp + 8], eax
movss xmm4, dword [rsp + 8]
movzx eax, word [rdx]
cvtdq2ps xmm3, xmm3
test ax, ax
je 0x14003417b
mov r10, qword [rcx + 0x300]
movaps xmm2, xmmword [0x1404a8590]
movzx eax, ax
nop
sub rdx, 0x73aa9149
add rdx, 0x73aa914b
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
movzx eax, word [rdx]
xorps xmm0, xmm2
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm3
addss xmm1, xmm4
cvttss2si ecx, xmm1
sub ecx, r9d
add r8d, ecx
test ax, ax
jne 0x140034135
mov eax, r8d
ret
Function at 0x14003421b
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rdi
sub rsp, 0x7cc66991
add rsp, 0x7cc668e1
xor ebx, ebx
mov rdi, rcx
mov qword [rax + 8], rbx
cmp qword [rcx + 0x2f8], rbx
je 0x1400342c0
mov edx, dword [rcx + 0x2ec]
mov qword [rax + 0x10], rsi
xor edx, 0x63c4968
mov eax, dword [rcx + 0x2e8]
nop
movabs rcx, 0xffffffff317b4881
xor rcx, 0x5d85d459
add rcx, 0x7fffffff
add rcx, 0x13016328
xor eax, 0x63c4968
imul edx, eax
mov eax, 0x2d57b3a7
add eax, 0x52fbe0c
add eax, 0x28e2165e
sub eax, 0x5b69880d
movsxd rsi, edx
mul rsi
cmovb rax, rcx
mov rcx, rax
call fcn.1400985f0
mov qword [rsp + 0xc0], rax
test rsi, rsi
jle 0x14003424a
nop
mov rax, qword [rdi + 0x2f8]
mov ecx, dword [rax + rbx*4]
mov rax, qword [rsp + 0xc0]
xor ecx, 0x2dbe645e
mov dword [rax + rbx*4], ecx
inc rbx
cmp rbx, rsi
jl 0x140034223
mov rsi, qword [rsp + 0xc8]
mov rax, qword [rsp + 0xc0]
lea rdx, [rsp + 0x30]
mov rcx, qword [rdi + 0x318]
mov qword [rsp + 0x28], rax
lea rax, [0x140001bb0]
mov qword [rsp + 0x20], rdi
movups xmm0, xmmword [rsp + 0x20]
mov qword [rsp + 0xa8], 0x352136e5
add qword [rsp + 0xa8], 0x4a4b3323
sub qword [rsp + 0xa8], 0x7f6c69f0
mov qword [rsp + 0x30], rax
movups xmmword [rsp + 0x38], xmm0
call fcn.1400332e0
mov rbx, qword [rsp + 0xd0]
sub rsp, 0xffffffffffffff50
pop rdi
ret
lea rdx, [rsp + 0xc0]
call fcn.1400342f0
test al, al
jne 0x140034252
mov rbx, qword [rsp + 0xd0]
neg rsp
add rsp, 0xffffffffffffff50
neg rsp
pop rdi
ret
Function at 0x14003f8d0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
nop
add rsp, 0x509e4241
sub rsp, 0x509e42a1
mov rbp, qword [rcx + 0xaf8]
lea rax, [rsp + 0x28]
mov rbx, qword [rcx + 0xac0]
xorps xmm0, xmm0
mov r14, rdx
mov qword [rsp + 0x20], rax
mov rsi, rcx
lea rcx, [rsp + 0x20]
lea rdx, [rbp + 1]
movups xmmword [rsp + 0x28], xmm0
movups xmmword [rsp + 0x38], xmm0
movups xmmword [rsp + 0x48], xmm0
call fcn.14000ee60
mov edi, 0x55de5e2a
sub edi, 0x4608c384
add edi, 0x41b1c183
mov r9, rax
mov ecx, edi
mov r15d, 0x3824ffb6
sub r15d, 0x5f3fad9
sub r15d, 0x323103de
test rbp, rbp
je 0x14003f99a
mov rdx, rax
sub rbx, rax
mov r8, rbp
nop dword [rax]
nop dword [rax + rax]
movzx eax, cx
lea rdx, [rdx + 2]
and ax, r15w
ror ecx, 8
xor ax, word [rdx + rbx - 2]
mov word [rdx - 2], ax
sub r8, 1
jne 0x14003f979
xor ebx, ebx
mov word [r9 + rbp*2], bx
cmp word [rsi + 0xb48], bx
je 0x14003f9ea
mov r8d, ebx
cmp qword [rsi + 0xaf8], rbx
jbe 0x14003f9ea
mov edx, ebx
nop dword [rax + rax]
mov rax, qword [rsp + 0x20]
lea rdx, [rdx + 2]
movzx ecx, word [rsi + 0xb48]
inc r8
mov word [rdx + rax - 2], cx
cmp r8, qword [rsi + 0xaf8]
jb 0x14003f9c5
mov rsi, qword [rsp + 0x20]
lea rax, [r14 + 8]
xorps xmm0, xmm0
mov qword [r14], rax
movups xmmword [rax], xmm0
nop
movabs rdx, 0xffffffff6c42876c
sub rdx, 0x36c86ee5
add rdx, 0x7fffffff
add rdx, 0x4a85e779
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
inc rdx
cmp word [rsi + rdx*2], bx
jne 0x14003fa24
mov rcx, r14
mov qword [r14 + 0x38], rdx
call fcn.14000ee60
cmp qword [r14 + 0x38], rbx
jbe 0x14003fa6e
sub rsi, rax
movzx ecx, di
lea rax, [rax + 2]
and cx, r15w
ror edi, 8
xor cx, word [rax + rsi - 2]
inc rbx
mov word [rax - 2], cx
cmp rbx, qword [r14 + 0x38]
jb 0x14003fa4a
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x28]
cmp rcx, rax
jne 0x14003faa6
lea rdi, [rsp + 0x28]
xor eax, eax
mov ecx, 0x2385d417
xor ecx, 0x2b134704
add ecx, 0x10cfd066
xor ecx, 0x19666349
rep stosb byte [rdi], al
jmp 0x14003faab
call fcn.140098730
lea r11, [rsp + 0x60]
mov rax, r14
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rdi
ret
Function at 0x14004891a
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
push rdi
sub rsp, 0x20
mov r8, qword [rcx + 0x650]
xor edi, edi
mov r9, rdx
mov rbx, rcx
test r8, r8
je 0x14004883e
mov rax, qword [rcx + 0x648]
jmp 0x140048847
mov rax, rdi
nop word [rax + rax]
test r8, r8
je 0x140048860
mov rcx, qword [rbx + 0x648]
lea rdx, [rcx + r8*8]
jmp 0x140048863
mov rdx, rdi
cmp rax, rdx
je 0x140048a96
mov rcx, qword [rax]
cmp qword [rcx + 0x30], r9
je 0x140048882
add rax, 8
jmp 0x140048847
mov qword [rsp + 0x38], rsi
mov rsi, rax
test r8, r8
je 0x140048954
cmp rax, qword [rbx + 0x648]
jb 0x140048954
mov rcx, qword [rbx + 0x648]
lea rdx, [rcx + r8*8]
cmp rax, rdx
jae 0x140048954
nop dword [rax + rax]
mov rdx, qword [rbx + 0x650]
test rdx, rdx
je 0x1400488d9
mov rcx, qword [rbx + 0x648]
lea rcx, [rcx + rdx*8]
jmp 0x1400488dc
mov rcx, rdi
nop
sub rcx, 0xffffffff8797b7ba
add rcx, 0xffffffff8797b7b2
cmp rax, rcx
jae 0x14004890d
mov rcx, qword [rax + 8]
mov qword [rax], rcx
nop
add rax, 0x20252b46
sub rax, 0x20252b3e
jmp 0x1400488b9
test rdx, rdx
je 0x140048954
lea rax, [rdx - 1]
mov qword [rbx + 0x650], rax
test rax, rax
jne 0x140048954
mov rcx, qword [rbx + 0x648]
test rcx, rcx
je 0x140048946
call fcn.140098730
mov qword [rbx + 0x648], rdi
mov qword [rbx + 0x658], rdi
mov qword [rbx + 0x650], rdi
mov rcx, qword [rsi]
mov rsi, qword [rsp + 0x38]
test rcx, rcx
je 0x140048981
mov rax, qword [rcx]
mov edx, 0x6743cb0e
sub edx, 0xd695e63
add edx, 0x1cf5c5c6
sub edx, 0x76d03270
call qword [rax]
cmp qword [rbx + 0x650], rdi
je 0x140048a96
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.140038dd0
mov rcx, qword [rsp + 0x30]
mov r10d, 0x70d7751f
xor r10d, 0x1b3e112a
sub r10d, 0x6be96395
mov r8d, dword [rsp + 0x34]
mov eax, ecx
mov r9, qword [rbx + 0x650]
sub eax, r8d
cdq
idiv dword [rbx + 0x650]
cmp eax, r10d
cmovl r10d, eax
test r9, r9
je 0x140048a47
mov rdx, qword [rbx + 0x648]
lea r11, [rdx + r9*8]
cmp rdx, r11
je 0x140048a47
mov r9d, r10d
xor r9d, 0x63c4968
xor r8d, 0x63c4968
nop
mov rcx, qword [rdx]
mov eax, edi
xor eax, 0x63c4968
add edi, r10d
sub rdx, 0xfffffffffffffff8
mov dword [rcx + 0x38], eax
mov dword [rcx + 0x3c], 0x612ac144
sub dword [rcx + 0x3c], 0x1b230c66
sub dword [rcx + 0x3c], 0x3fcb6b76
mov dword [rcx + 0x40], r9d
mov dword [rcx + 0x44], r8d
cmp rdx, r11
jne 0x140048a03
mov rcx, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x34]
mov rax, qword [rbx + 0x668]
test rax, rax
je 0x140048a8e
sub ecx, r8d
mov dword [rax + 0x1c], 0x1a09771
add dword [rax + 0x1c], 0x4eca5ea2
add dword [rax + 0x1c], 0x27a56037
sub dword [rax + 0x1c], 0x71d40ce2
xor ecx, 0x63c4968
xor r8d, 0x63c4968
mov dword [rax + 0x18], ecx
mov dword [rax + 0x20], r8d
mov dword [rax + 0x24], r8d
mov rcx, rbx
call fcn.140037e30
mov rbx, qword [rsp + 0x40]
nop
sub rsp, 0x145adfd
add rsp, 0x145ae1d
pop rdi
ret
Function at 0x140048ab0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
nop
add rsp, 0xc09f3de
sub rsp, 0xc09f3fe
mov rax, qword [rcx]
mov rdi, rcx
call qword [rax + 0x78]
mov rdx, qword [rdi + 0x650]
mov rcx, rax
mov rbx, rax
mov qword [rsp + 0x30], rax
call fcn.1400386c0
mov rcx, rdi
call fcn.140037d90
mov rcx, qword [0x1404a7bd8]
mov rdx, qword [rax + 0x98]
call fcn.14002f8b0
mov rcx, rax
call fcn.14003bcd0
lea rcx, [rdi + 0x648]
mov qword [rbx + 0x20], rax
lea rdx, [rsp + 0x30]
call fcn.14002cf40
mov rcx, rdi
mov rbx, qword [rsp + 0x38]
sub rsp, 0xffffffffffffffe0
pop rdi
jmp 0x140048ab0
push rbx
nop
add rsp, 0x43c9e333
sub rsp, 0x43c9e353
cmp qword [rcx + 0x650], 0
mov rbx, rcx
je 0x140048bfa
lea rdx, [rsp + 0x30]
call fcn.140038dd0
mov r8, qword [rsp + 0x30]
mov r11d, 0x42a2e7e2
sub r11d, 0x21cc8253
xor r11d, 0xfc774e
sub r11d, 0x202a1221
mov r9d, dword [rsp + 0x34]
mov eax, r8d
sub eax, r9d
cdq
idiv dword [rbx + 0x650]
mov rdx, qword [rbx + 0x650]
cmp eax, r11d
cmovl r11d, eax
xor r10d, r10d
test rdx, rdx
je 0x140048ba9
mov rax, qword [rbx + 0x648]
mov qword [rsp + 0x38], rdi
lea rdi, [rax + rdx*8]
cmp rax, rdi
je 0x140048ba4
mov r8d, r11d
xor r8d, 0x63c4968
xor r9d, 0x63c4968
nop word [rax + rax]
mov rdx, qword [rax]
mov ecx, r10d
xor ecx, 0x63c4968
add r10d, r11d
neg rax
add rax, 0xfffffffffffffff8
neg rax
mov dword [rdx + 0x38], ecx
mov dword [rdx + 0x3c], 0x72fff02f
sub dword [rdx + 0x3c], 0x1f96f1a1
sub dword [rdx + 0x3c], 0x4d2cb526
mov dword [rdx + 0x40], r8d
mov dword [rdx + 0x44], r9d
cmp rax, rdi
jne 0x140048b58
mov r8, qword [rsp + 0x30]
mov r9d, dword [rsp + 0x34]
mov rdi, qword [rsp + 0x38]
mov rax, qword [rbx + 0x668]
test rax, rax
je 0x140048bf2
sub r8d, r9d
mov dword [rax + 0x1c], 0xdd2cefe
xor dword [rax + 0x1c], 0x2b8d617e
sub dword [rax + 0x1c], 0x1b535feb
sub dword [rax + 0x1c], 0x4d0062d
xor r8d, 0x63c4968
xor r9d, 0x63c4968
mov dword [rax + 0x18], r8d
mov dword [rax + 0x20], r9d
mov dword [rax + 0x24], r9d
mov rcx, rbx
call fcn.140037e30
nop
add rsp, 0x2b251e20
sub rsp, 0x2b251e00
pop rbx
ret
Function at 0x140052f20
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
nop
add rsp, 0x43bca829
sub rsp, 0x43bca849
xchg rdx, rbx
mov rdx, rbx
xchg rdx, rbx
xchg rdi, r9
mov r9, rcx
xchg rdi, r9
nop
movabs rdx, 0xffffffff1a108534
sub rdx, 0x23cfaef
xor rdx, 0x6228e9bf
add rdx, 0x7fffffff
add rdx, 0xa049c06
nop word [rax + rax]
inc rdx
cmp word [rbx + rdx*2], 0
mov dword [rsp - 0x18], 0x33380931
jne 0x140052f80
mov qword [rcx + 0x38], rdx
call fcn.14000ee60
xchg r14, r14
xor r8d, r8d
mov edx, 0x291e5a37
add edx, 0x50955e20
xor edx, 0x2a4f9a7c
add edx, 0x22fc8c50
sub edx, 0x25715252
cmp qword [rdi + 0x38], r8
jbe 0x140053033
sub rbx, rax
mov dword [rsp - 0x24], 0xc0c0e49
mov r9d, 0x27e36b05
add r9d, 0x1ed1801
xor r9d, 0x293007e4
xor r9d, 0x3bb85111
xor r9d, 0x3b58d50c
nop word [rax + rax]
movzx ecx, dx
xchg r14, r14
lea rax, [rax + 2]
and cx, r9w
ror edx, 3
ror edx, 1
ror edx, 3
ror edx, 1
xor cx, word [rax + rbx - 2]
xchg r13, r13
inc r8
mov word [rax - 2], cx
cmp r8, qword [rdi + 0x38]
jb 0x140052fff
mov r9, r9
mov rbx, qword [rsp + 0x30]
xchg rdi, rcx
mov rax, rcx
xchg rdi, rcx
neg rsp
add rsp, 0xffffffffffffffe0
neg rsp
nop
mov rdi, qword [rsp]
add rsp, 8
ret
Function at 0x1400539f0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg r14, rsi
mov qword [rsp + 0x10], r14
xchg r14, rsi
nop
sub rsp, 8
mov qword [rsp], rdi
add rsp, 0xffffffffffffffe0
xchg rsp, rsp
mov rsi, qword [rcx + 0x38]
xchg r12, rbx
mov r12, rdx
xchg rbx, r12
mov r8, qword [rdx + 0x38]
xchg r15, rdi
mov r15, rcx
xchg rdi, r15
add r8, rsi
mov dword [rsp - 0x28], 0x151a4ad6
xchg rsi, rbx
mov rdx, rbx
xchg rbx, rsi
xchg r8, rdx
mov qword [rcx + 0x38], rdx
xchg r8, rdx
call fcn.1400546e0
mov dword [rsp - 0x18], 0x4f98b80a
xchg rcx, r9
mov rcx, qword [rbx]
xchg r9, rcx
mov ecx, esi
and ecx, 3
mov r8d, 0x4ae98f34
xor r8d, 0xe7f1888
add r8d, 0xe5055bd
sub r8d, 0x44b290a5
xor r8d, 0x5fb300fd
shl ecx, 2
shl ecx, 1
mov edx, r8d
ror edx, cl
mov dword [rsp - 0xc], 0xbab069e
xor ecx, ecx
cmp qword [rbx + 0x38], rcx
jbe 0x140053b25
mov rsi, rsi
lea r10, [rsi + rsi]
mov r11d, 0x7d6682b5
sub r11d, 0x2b343787
add r11d, 0x25428e67
sub r11d, 0x7774d896
sub r10, r9
mov rdi, rdi
add r10, rax
nop word [rax + rax]
movzx eax, r8w
lea r9, [r9 + 2]
mov dword [rsp - 0x3c], esi
xor ax, dx
ror r8d, 4
ror r8d, 3
ror r8d, 1
and ax, r11w
mov dword [rsp - 0x3c], ecx
ror edx, 2
ror edx, 1
ror edx, 3
ror edx, 1
ror edx, 1
xor ax, word [r9 - 2]
xchg rdi, rdi
inc rcx
mov word [r9 + r10 - 2], ax
cmp rcx, qword [rbx + 0x38]
mov dword [rsp - 0x1c], 0x1713246f
jb 0x140053ad4
xchg rbx, r14
mov r14, qword [rsp + 0x30]
xchg rbx, r14
xchg rsp, rax
mov rsp, rdi
xchg rsp, rax
mov rsi, qword [rsp + 0x38]
neg rsp
add rsp, 0xffffffffffffffe0
neg rsp
pop rdi
mov dword [rsp - 0x18], 0x784ec07f
ret
Function at 0x140053b50
Capabilities:
Encode data using xor

Disassembly:
xchg rbp, rbx
mov qword [rsp + 8], rbp
xchg rbx, rbp
mov qword [rsp + 0x10], rsi
xchg r15, r15
xchg rdi, r15
mov qword [rsp + 0x18], r15
xchg r15, rdi
push r14
mov dword [rsp - 0x20], 0x66327782
add rsp, 0xffffffffffffffe0
xchg r11, r14
mov r11, qword [rcx + 0x38]
xchg r14, r11
mov rdi, rdx
xchg r12, rcx
mov rsi, r12
xchg rcx, r12
nop
movabs rbx, 0xffffffff3be2d59d
add rbx, 0x3897547e
xor rbx, 0x62272c06
add rbx, 0x7fffffff
add rbx, 0x69a2f9e3
inc rbx
cmp word [rdx + rbx*2], 0
mov dword [rsp - 0x10], esi
jne 0x140053bb9
lea r8, [r14 + rbx]
xchg rcx, rdx
mov rcx, r14
xchg rcx, rdx
xchg rdi, r8
mov qword [rcx + 0x38], rdi
xchg r8, rdi
call fcn.1400546e0
mov r10, r10
mov ecx, r14d
mov edx, 0x54797629
sub edx, 0x198db084
add edx, 0x2e0e5167
sub edx, 0x20ce981b
add edx, 0x95bdd38
and ecx, 3
shl ecx, 3
mov dword [rsp - 0x38], ecx
ror edx, cl
test rbx, rbx
je 0x140053c87
lea rcx, [r14 + r14]
mov dword [rsp - 0x30], edi
mov r8d, 0x7303ae10
sub r8d, 0x49a87e37
sub r8d, 0x277219b7
xor r8d, 0x1e916dd
sub rcx, rdi
mov r12, r12
add rcx, rax
nop word [rax + rax]
movzx eax, dx
mov r13, r13
lea rdi, [rdi + 2]
and ax, r8w
ror edx, 4
ror edx, 3
ror edx, 1
xor ax, word [rdi - 2]
mov word [rdi + rcx - 2], ax
sub rbx, 1
mov dword [rsp - 0x44], 0x5b3d28
jne 0x140053c56
xchg rbx, r13
mov r13, qword [rsp + 0x30]
xchg rbx, r13
xchg rsi, rax
mov rsi, rax
xchg rsi, rax
xchg rdi, rsi
mov rdi, qword [rsp + 0x38]
xchg rsi, rdi
xchg r10, rdi
mov r10, qword [rsp + 0x40]
xchg r10, rdi
nop
sub rsp, 0x3ef335a6
add rsp, 0x3ef335c6
nop
mov r14, qword [rsp]
add rsp, 8
ret
Function at 0x140054531
Capabilities:
Encode data using xor

Disassembly:
xchg rcx, rbx
mov qword [rsp + 0x10], rcx
xchg rcx, rbx
mov qword [rsp + 0x18], rbp
xchg rbx, rbx
nop
push r12
mov qword [rsp], rsi
push rdi
mov r14, r14
push r14
add rsp, 0xffffffffffffffe0
lea rsi, [rdx + 8]
xorps xmm0, xmm0
mov dword [rsp - 0x28], ebp
mov qword [rdx], rsi
xor edi, edi
xchg rsi, r15
movups xmmword [r15], xmm0
xchg r15, rsi
xchg rsp, r9
mov r14, rsp
xchg r9, rsp
xchg rbp, rsi
mov rsi, r8
xchg rsi, rbp
xchg rbx, rsi
movups xmmword [rbx + 0x10], xmm0
xchg rsi, rbx
mov rbx, rdx
mov dword [rsp - 0x38], 0x20f08738
xchg rsi, r14
movups xmmword [r14 + 0x20], xmm0
xchg r14, rsi
mov qword [rdx + 0x38], rdi
xchg r8, rax
mov r8, qword [rcx + 0x38]
xchg r8, rax
cmp r8, rax
jae 0x14005465e
sub rax, r8
mov r11, r11
xchg r15, r10
mov qword [rsp + 0x40], r10
xchg r10, r15
cmp rax, r9
mov dword [rsp - 0x44], edx
cmovb r14, rax
xchg r14, rbx
mov qword [rdx + 0x38], rbx
xchg r14, rbx
xchg r8, rax
mov r8, qword [rcx]
xchg r8, rax
xchg rcx, rsi
mov rsi, qword [rdx]
xchg rcx, rsi
lea r15, [rax + r8*2]
cmp rcx, rsi
xchg r14, r14
je 0x140054500
call fcn.140098730
cmp r14, 0x18
xchg rdx, rdx
jbe 0x140054536
lea rcx, [r14 + r14]
call fcn.1400989e0
mov qword [rbx], rax
mov r14, r14
test rax, rax
jne 0x140054540
mov qword [rbx], rsi
xchg rbx, rdi
mov r8, rbx
xchg rbx, rdi
jmp 0x14005455e
mov qword [rbx], rsi
xchg rdi, rax
mov rdi, rsi
xchg rdi, rax
xorps xmm0, xmm0
xchg rcx, rax
movups xmmword [rcx], xmm0
xchg rcx, rax
xchg rbp, rax
movups xmmword [rbp + 0x10], xmm0
xchg rbp, rax
xchg r8, rax
movups xmmword [r8 + 0x20], xmm0
xchg r8, rax
mov r8, qword [rbx]
and ebp, 3
mov r11, r11
mov r9d, 0x223ad5f2
sub r9d, 0xa82900a
add r9d, 0xc72d2de
add r9d, 0x2d5c4363
shl ebp, 2
shl ebp, 1
mov edx, r9d
mov dword [rsp - 0x1c], 0xebd61cc
movzx ecx, bpl
ror edx, cl
cmp qword [rbx + 0x38], rdi
jbe 0x14005461c
mov dword [rsp - 0x34], 0x7baf91c1
sub r15, r8
mov ecx, 0x62b8bb13
sub ecx, 0x27f72cc2
add ecx, 0x3b7b02c8
xor ecx, 0x3c0664a0
sub ecx, 0x4a3af4ba
nop dword [rax]
nop word [rax + rax]
movzx eax, r9w
mov dword [rsp - 0x28], ebx
lea r8, [r8 + 2]
xor ax, dx
ror r9d, 5
ror r9d, 2
ror r9d, 1
and ax, cx
mov r15, r15
ror edx, 1
ror edx, 4
ror edx, 2
ror edx, 1
xor ax, word [r8 + r15 - 2]
inc rdi
xchg rcx, rcx
mov word [r8 - 2], ax
cmp rdi, qword [rbx + 0x38]
jb 0x1400545d4
xchg r12, r12
mov r15, qword [rsp + 0x40]
xchg r15, rax
mov r15, rbx
xchg r15, rax
mov rbx, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x50]
nop
sub rsp, 0x2061e142
add rsp, 0x2061e162
nop
add rsp, 8
mov r14, qword [rsp - 8]
nop
mov rdi, qword [rsp]
add rsp, 8
nop
mov rsi, qword [rsp]
add rsp, 8
ret
xchg r9, rbx
mov rax, r9
xchg rbx, r9
jmp 0x140054628
Function at 0x140054d20
Capabilities:
Execute syscall

Disassembly:
jmp 0x140089527
xchg rcx, rdi
mov r10, rdi
xchg rcx, rdi
mov eax, dword [0x1404a7ff0]
mov rcx, rcx
cmp qword [0x1404a80e0], 0
jne 0x1400892a0
syscall
mov dword [rsp - 0x34], edx
ret

Function at 0x140054d40
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x28]
mov byte [rsp + 0x28], al
mov rsi, rsi
jmp 0x140089b77
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x1404a8088]
cmp qword [0x1404a80e0], 0
mov dword [rsp - 0xc], 0x1f98a94d
jne 0x1400892a0
syscall
ret

Function at 0x140054d60
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008931e
mov r10, rcx
mov eax, dword [0x1404a7fc0]
mov dword [rsp - 0x44], ecx
cmp qword [0x1404a80e0], 0
jne 0x1400892a0
syscall
ret

Function at 0x140054d70
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008977a
xchg rdi, rcx
mov r10, rdi
xchg rcx, rdi
mov eax, dword [0x1404a8028]
mov dword [rsp - 0x44], 0x39511769
cmp qword [0x1404a80e0], 0
jne 0x1400892a0
syscall
ret

Function at 0x140054d90
Capabilities:
Execute syscall

Disassembly:
jmp 0x140089373
xchg r10, r15
mov r15, rcx
xchg r15, r10
mov eax, dword [0x1404a7fc8]
cmp qword [0x1404a80e0], 0
mov dword [rsp - 0x20], 0x44ed6d9b
jne 0x1400892a0
syscall
ret

Function at 0x140054da0
Capabilities:
Execute syscall

Disassembly:
jmp 0x140089981
xchg r10, r13
mov r13, rcx
xchg r10, r13
mov eax, dword [0x1404a8058]
cmp qword [0x1404a80e0], 0
mov rbx, rbx
jne 0x1400892a0
syscall
ret

Function at 0x140054db0
Capabilities:
Execute syscall

Disassembly:
jmp 0x140089554
xchg rsi, r10
mov rsi, rcx
xchg r10, rsi
mov eax, dword [0x1404a7ff4]
cmp qword [0x1404a80e0], 0
xchg rsi, rsi
jne 0x1400892a0
syscall
ret

Function at 0x140054dd0
Capabilities:
Execute syscall

Disassembly:
jmp 0x140089346
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x1404a7fc4]
xchg r8, r8
cmp qword [0x1404a80e0], 0
jne 0x1400892a0
syscall
ret

Function at 0x140054de0
Capabilities:
Execute syscall

Disassembly:
jmp 0x140089905
xchg rcx, rdx
mov r10, rdx
xchg rdx, rcx
mov eax, dword [0x1404a804c]
cmp qword [0x1404a80e0], 0
jne 0x1400892a0
mov dword [rsp - 0x24], esi
syscall
ret

Function at 0x140054df0
Capabilities:
Execute syscall

Disassembly:
jmp 0x140089727
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x1404a8020]
cmp qword [0x1404a80e0], 0
jne 0x1400892a0
mov dword [rsp - 0x30], esi
syscall
ret

Function at 0x140054e00
Capabilities:
Execute syscall

Disassembly:
jmp 0x140089751
xchg rbp, r10
mov rbp, rcx
xchg rbp, r10
mov eax, dword [0x1404a8024]
xchg r8, r8
cmp qword [0x1404a80e0], 0
jne 0x1400892a0
syscall
ret

Function at 0x140054e10
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400895d9
mov r10, rcx
mov dword [rsp - 0xc], 0x4310c451
mov eax, dword [0x1404a8000]
cmp qword [0x1404a80e0], 0
jne 0x1400892a0
syscall
xchg r14, r14
ret
Function at 0x140054e20
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x58]
mov byte [rsp + 0x58], al
movzx eax, byte [rsp + 0x48]
mov dword [rsp - 0x40], esi
mov byte [rsp + 0x48], al
jmp 0x140089b4d
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x1404a8084]
cmp qword [0x1404a80e0], 0
mov dword [rsp - 0x18], edx
jne 0x1400892a0
syscall
ret

Function at 0x140054e40
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008944a
mov r10, rcx
mov dword [rsp - 0x24], 0x5fef5bdc
mov eax, dword [0x1404a7fdc]
cmp qword [0x1404a80e0], 0
jne 0x1400892a0
syscall
xchg rbp, rbp
ret

Function at 0x140054e50
Capabilities:
Execute syscall

Disassembly:
jmp 0x140089475
xchg r10, rdx
mov rdx, rcx
xchg rdx, r10
mov eax, dword [0x1404a7fe0]
xchg r15, r15
cmp qword [0x1404a80e0], 0
jne 0x1400892a0
syscall
mov dword [rsp - 0x10], 0x3d4d9801
ret

Function at 0x140054e60
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400894a6
mov r10, rcx
xchg r13, r13
mov eax, dword [0x1404a7fe4]
cmp qword [0x1404a80e0], 0
jne 0x1400892a0
mov dword [rsp - 0x18], 0x191bad85
syscall
ret

Function at 0x140054e70
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400894d1
xchg rbp, r10
mov rbp, rcx
xchg rbp, r10
mov eax, dword [0x1404a7fe8]
mov dword [rsp - 0x18], ebp
cmp qword [0x1404a80e0], 0
jne 0x1400892a0
syscall
xchg rdi, rdi
ret

Function at 0x140054e80
Capabilities:
Execute syscall

Disassembly:
jmp 0x140089420
xchg rdi, r10
mov rdi, rcx
xchg rdi, r10
mov eax, dword [0x1404a7fd8]
cmp qword [0x1404a80e0], 0
mov dword [rsp - 0x10], edx
jne 0x1400892a0
syscall
ret

Function at 0x140054e90
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400899aa
xchg r13, rcx
mov r10, r13
xchg rcx, r13
mov eax, dword [0x1404a805c]
cmp qword [0x1404a80e0], 0
jne 0x1400892a0
mov dword [rsp - 0x10], edx
syscall
ret

Function at 0x140054ea0
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400894fe
xchg r10, r14
mov r14, rcx
xchg r10, r14
mov eax, dword [0x1404a7fec]
cmp qword [0x1404a80e0], 0
jne 0x1400892a0
mov rdx, rdx
syscall
ret

Function at 0x140054eb0
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400893a1
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x1404a7fcc]
mov dword [rsp - 0x30], edx
cmp qword [0x1404a80e0], 0
jne 0x1400892a0
syscall
ret

Function at 0x140054ec0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008957d
xchg r10, rdi
mov rdi, rcx
xchg rdi, r10
mov eax, dword [0x1404a7ff8]
mov dword [rsp - 0x28], 0x30362963
cmp qword [0x1404a80e0], 0
jne 0x1400892a0
syscall
mov dword [rsp - 0xc], esi
ret