joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140053126
Capabilities:
Encode data using xor

Disassembly:
xchg rcx, rbx
mov qword [rsp + 0x10], rcx
xchg rcx, rbx
xchg rbp, r8
mov qword [rsp + 0x18], r8
xchg r8, rbp
push rsi
mov dword [rsp - 0x14], ebp
nop
mov qword [rsp - 8], rdi
sub rsp, 8
nop
sub rsp, 8
mov qword [rsp], r14
nop
add rsp, 0x49ce4958
sub rsp, 0x49ce4978
lea rsi, [rdx + 8]
xorps xmm0, xmm0
mov dword [rsp - 0x40], ebp
xchg rbx, rsi
mov qword [rdx], rbx
xchg rbx, rsi
xor edi, edi
xchg r9, r9
xchg r9, rsi
movups xmmword [r9], xmm0
xchg r9, rsi
xchg rbp, r9
mov r14, rbp
xchg r9, rbp
mov rbp, r8
mov r10, r10
xchg r10, rsi
movups xmmword [r10 + 0x10], xmm0
xchg rsi, r10
mov rbx, rdx
mov dword [rsp - 0x2c], 0x7e083c73
xchg rsi, r13
movups xmmword [r13 + 0x20], xmm0
xchg rsi, r13
mov qword [rdx + 0x38], rdi
xchg rdx, rdx
mov rax, qword [rcx + 0x38]
cmp r8, rax
jae 0x14005332b
mov r11, r11
sub rax, r8
xchg r15, r13
mov qword [rsp + 0x40], r13
xchg r15, r13
cmp rax, r9
cmovb r14, rax
xchg r12, r12
xchg r14, rsp
mov qword [rdx + 0x38], rsp
xchg r14, rsp
mov rax, qword [rcx]
xchg r13, r13
xchg rcx, r13
mov r13, qword [rdx]
xchg r13, rcx
lea r15, [rax + r8*2]
mov r10, r10
cmp rcx, rsi
je 0x1400531cd
call fcn.140095ef0
cmp r14, 0x18
mov dword [rsp - 0x40], ecx
jbe 0x14005320c
lea rcx, [r14 + r14]
call fcn.140096260
mov qword [rbx], rax
mov dword [rsp - 0x14], 0x56bc75c4
test rax, rax
jne 0x140053216
mov qword [rbx], rsi
mov rdi, rdi
xchg r9, rdi
mov rdi, r9
xchg rdi, r9
jmp 0x140053234
mov qword [rbx], rsi
xchg r9, rax
mov r9, rsi
xchg r9, rax
xorps xmm0, xmm0
mov dword [rsp - 0x3c], 0x1c437ee4
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
xchg r8, rax
movups xmmword [r8 + 0x20], xmm0
xchg r8, rax
mov r9, qword [rbx]
and ebp, 3
mov dword [rsp - 0x18], 0x5231b274
mov r8d, 0x7bc500bd
sub r8d, 0xc6eb0f4
sub r8d, 0x2c24d024
xor r8d, 0x6acf7fc4
xor r8d, 0x3f85790b
shl ebp, 1
shl ebp, 1
shl ebp, 1
mov edx, r8d
mov dword [rsp - 0x40], 0x35e78e05
movzx ecx, bpl
ror edx, cl
cmp qword [rbx + 0x38], rdi
mov rbx, rbx
jbe 0x1400532f7
sub r15, r9
mov ecx, 0xe05053f
add ecx, 0x52f0a3c9
sub ecx, 0x69ff4b1
sub ecx, 0x5a55b358
nop dword [rax]
mov dword [rsp - 0x38], esi
nop word [rax + rax]
movzx eax, dx
lea r9, [r9 + 2]
xor ax, r8w
mov dword [rsp - 0x38], 0x5523b7c8
ror edx, 4
ror edx, 1
ror edx, 2
ror edx, 1
and ax, cx
ror r8d, 8
mov dword [rsp - 0x38], 0x398cbac2
xor ax, word [r15 + r9 - 2]
inc rdi
mov word [r9 - 2], ax
cmp rdi, qword [rbx + 0x38]
mov rcx, rcx
jb 0x1400532b0
xchg r15, rsi
mov rsi, qword [rsp + 0x40]
xchg rsi, r15
xchg rbx, rax
mov rbx, rax
xchg rbx, rax
mov rbx, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x50]
mov r12, r12
add rsp, 0x20
pop r14
nop
add rsp, 8
mov rdi, qword [rsp - 8]
pop rsi
mov r9, r9
ret
xchg rbx, r12
mov rax, r12
xchg rbx, r12
jmp 0x140053309
Function at 0x140053720
Capabilities:
Encode data using xor

Disassembly:
xchg rsp, r13
mov r11, r13
xchg r13, rsp
mov qword [r11 + 8], rbx
xchg r14, r14
xchg rbp, rdi
mov qword [r11 + 0x10], rdi
xchg rdi, rbp
mov qword [r11 + 0x18], rsi
mov qword [r11 + 0x20], rdi
mov dword [rsp - 0x1c], ebp
nop
sub rsp, 8
mov qword [rsp], r12
nop
push 0x4dbe560b
mov qword [rsp], r14
push r15
nop
sub rsp, 0x64af33ba
add rsp, 0x64af335a
mov r15, qword [rcx + 0x38]
xchg r12, r12
lea rax, [r11 - 0x50]
xchg rsi, rsp
mov rsp, qword [rcx]
xchg rsp, rsi
xorps xmm0, xmm0
mov dword [rsp - 0x3c], ebx
mov qword [r11 - 0x58], rax
xchg r9, r14
mov r9, rcx
xchg r9, r14
lea rcx, [r11 - 0x58]
lea rdx, [r15 + 1]
mov r13, r13
xchg rsi, rsp
movups xmmword [rsi + 0x28], xmm0
xchg rsp, rsi
xchg rsp, rcx
movups xmmword [rcx + 0x38], xmm0
xchg rcx, rsp
xchg rcx, rsp
movups xmmword [rcx + 0x48], xmm0
xchg rsp, rcx
call fcn.14000ed40
mov ebx, 0x2ec3714
add ebx, 0xef0e4d6
add ebx, 0x22bad361
xor ebx, 0x51e6c31
xor ebx, 0x27f2fa10
xchg rsi, r8
mov rsi, rax
xchg rsi, r8
mov ecx, ebx
xchg r11, r11
mov r12d, 0x17bd3693
add r12d, 0x40e50382
sub r12d, 0x151cd0b4
sub r12d, 0xc3b6377
sub r12d, 0x374a04eb
test r15, r15
je 0x140053861
xchg r9, rax
mov rdx, r9
xchg r9, rax
sub rsi, rax
mov rdx, rdx
xchg r15, rdi
mov r15, rdi
xchg rdi, r15
nop dword [rax]
movzx eax, cx
mov rcx, rcx
lea rdx, [rdx + 2]
and ax, r12w
ror ecx, 3
ror ecx, 3
ror ecx, 1
ror ecx, 1
xor ax, word [rsi + rdx - 2]
xchg rdx, rdx
mov word [rdx - 2], ax
sub rdi, 1
jne 0x140053830
mov r9, r9
xor ebp, ebp
mov word [r8 + r15*2], bp
mov esi, ebp
mov rdi, qword [rsp + 0x20]
xchg rdi, rdi
cmp qword [r14 + 0x38], rbp
jbe 0x1400538aa
movzx ecx, word [rdi]
call fcn.140096d30
mov rbp, rbp
mov word [rdi], ax
lea rdi, [rdi + 2]
inc rsi
mov dword [rsp - 0x38], esi
cmp rsi, qword [r14 + 0x38]
jb 0x14005387c
xchg r8, rdi
mov r8, qword [rsp + 0x20]
xchg r8, rdi
nop
movabs rdx, 0xffffffff57baf876
sub rdx, 0x486f9ab7
xor rdx, 0x23c4186d
add rdx, 0x7fffffff
add rdx, 0x5370ba2e
inc rdx
mov dword [rsp - 0x28], 0x7167850e
cmp word [rdi + rdx*2], bp
jne 0x1400538d1
xchg rcx, r14
mov r14, rcx
xchg r14, rcx
mov qword [r14 + 0x38], rdx
mov dword [rsp - 0x2c], ebx
call fcn.14000ed40
cmp qword [r14 + 0x38], rbp
jbe 0x140053945
xchg r13, r13
sub rdi, rax
nop dword [rax]
nop word [rax + rax]
movzx ecx, bx
mov r8, r8
lea rax, [rax + 2]
and cx, r12w
ror ebx, 1
ror ebx, 7
xor cx, word [rdi + rax - 2]
inc rbp
mov word [rax - 2], cx
mov rdx, rdx
cmp rbp, qword [r14 + 0x38]
jb 0x140053919
mov rcx, qword [rsp + 0x20]
xchg rsi, rsi
lea rax, [rsp + 0x28]
cmp rcx, rax
jne 0x140053987
mov dword [rsp - 0x44], edx
lea rdi, [rsp + 0x28]
xor eax, eax
mov ecx, 0x2b9cc2ec
xor ecx, 0xd6681aa
xor ecx, 0x20e27c5f
sub ecx, 0x6183ee9
rep stosb byte [rdi], al
mov rbp, rbp
jmp 0x14005398c
call fcn.140095ef0
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x20]
mov dword [rsp - 0x44], 0x51dde0b2
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
xchg rdi, r10
mov r10, qword [r11 + 0x38]
xchg rdi, r10
xchg rsp, r11
mov r11, rsp
xchg r11, rsp
nop
mov r15, qword [rsp]
add rsp, 8
nop
add rsp, 8
mov r14, qword [rsp - 8]
pop r12
ret
Function at 0x1400539d0
Capabilities:
Execute syscall

Disassembly:
jmp 0x140087170
xchg r10, rdi
mov rdi, rcx
xchg r10, rdi
mov eax, dword [0x1404a0fb0]
mov dword [rsp - 0x44], 0x17114d7c
cmp qword [0x1404a1098], 0
jne 0x140086f00
syscall
ret

Function at 0x1400539f0
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x28]
mov rcx, rcx
mov byte [rsp + 0x28], al
jmp 0x1400877bf
mov r10, rcx
mov eax, dword [0x1404a1048]
xchg r13, r13
cmp qword [0x1404a1098], 0
jne 0x140086f00
syscall
ret

Function at 0x140053a10
Capabilities:
Execute syscall

Disassembly:
jmp 0x140086f6f
mov r10, rcx
mov eax, dword [0x1404a0f80]
cmp qword [0x1404a1098], 0
xchg rdi, rdi
jne 0x140086f00
syscall
ret

Function at 0x140053a20
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400873c3
xchg r12, rcx
mov r10, r12
xchg rcx, r12
mov eax, dword [0x1404a0fe8]
cmp qword [0x1404a1098], 0
xchg r15, r15
jne 0x140086f00
syscall
ret

Function at 0x140053a30
Capabilities:
Execute syscall

Disassembly:
jmp 0x140086fc4
xchg rcx, rsp
mov r10, rsp
xchg rcx, rsp
mov eax, dword [0x1404a0f88]
mov dword [rsp - 0x10], 0x4781fb8d
cmp qword [0x1404a1098], 0
jne 0x140086f00
syscall
xchg rdi, rdi
ret

Function at 0x140053a40
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400875cf
mov r10, rcx
mov eax, dword [0x1404a1018]
cmp qword [0x1404a1098], 0
xchg r11, r11
jne 0x140086f00
syscall
ret

Function at 0x140053a50
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008719e
xchg r10, r14
mov r14, rcx
xchg r14, r10
mov eax, dword [0x1404a0fb4]
mov dword [rsp - 0xc], 0x2cee8826
cmp qword [0x1404a1098], 0
jne 0x140086f00
syscall
mov rdi, rdi
ret

Function at 0x140053a70
Capabilities:
Execute syscall

Disassembly:
jmp 0x140086f96
xchg rdi, r10
mov rdi, rcx
xchg rdi, r10
mov eax, dword [0x1404a0f84]
cmp qword [0x1404a1098], 0
mov dword [rsp - 0x14], ecx
jne 0x140086f00
syscall
ret

Function at 0x140053a80
Capabilities:
Execute syscall

Disassembly:
jmp 0x140087549
xchg rcx, rsi
mov r10, rsi
xchg rcx, rsi
mov eax, dword [0x1404a100c]
xchg r11, r11
cmp qword [0x1404a1098], 0
jne 0x140086f00
syscall
xchg r13, r13
ret

Function at 0x140053a90
Capabilities:
Execute syscall

Disassembly:
jmp 0x140087370
xchg r13, r10
mov r13, rcx
xchg r13, r10
mov eax, dword [0x1404a0fe0]
cmp qword [0x1404a1098], 0
xchg r8, r8
jne 0x140086f00
syscall
ret

Function at 0x140053aa0
Capabilities:
Execute syscall

Disassembly:
jmp 0x140087399
xchg rdi, rcx
mov r10, rdi
xchg rdi, rcx
mov eax, dword [0x1404a0fe4]
mov dword [rsp - 0x30], ebp
cmp qword [0x1404a1098], 0
jne 0x140086f00
syscall
ret

Function at 0x140053ab0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008722a
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x1404a0fc0]
cmp qword [0x1404a1098], 0
jne 0x140086f00
xchg r9, r9
syscall
ret

Function at 0x140053ac0
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x58]
mov byte [rsp + 0x58], al
movzx eax, byte [rsp + 0x48]
mov dword [rsp - 0x20], edi
mov byte [rsp + 0x48], al
jmp 0x140087796
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x1404a1044]
cmp qword [0x1404a1098], 0
jne 0x140086f00
mov rcx, rcx
syscall
ret
Function at 0x140053ae0
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400870a1
xchg rsi, rcx
mov r10, rsi
xchg rsi, rcx
mov eax, dword [0x1404a0f9c]
mov dword [rsp - 0x38], ebp
cmp qword [0x1404a1098], 0
jne 0x140086f00
syscall
ret

Function at 0x140053af0
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400870cb
xchg rdi, r10
mov rdi, rcx
xchg r10, rdi
mov eax, dword [0x1404a0fa0]
mov r8, r8
cmp qword [0x1404a1098], 0
jne 0x140086f00
syscall
mov rcx, rcx
ret

Function at 0x140053b00
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400870f7
xchg rcx, rdi
mov r10, rdi
xchg rcx, rdi
mov eax, dword [0x1404a0fa4]
cmp qword [0x1404a1098], 0
jne 0x140086f00
mov dword [rsp - 0x10], edi
syscall
ret

Function at 0x140053b10
Capabilities:
Execute syscall

Disassembly:
jmp 0x140087121
mov r10, rcx
mov eax, dword [0x1404a0fa8]
cmp qword [0x1404a1098], 0
xchg r15, r15
jne 0x140086f00
syscall
ret

Function at 0x140053b20
Capabilities:
Execute syscall

Disassembly:
jmp 0x140087078
xchg rdx, r10
mov rdx, rcx
xchg r10, rdx
mov eax, dword [0x1404a0f98]
xchg r11, r11
cmp qword [0x1404a1098], 0
jne 0x140086f00
syscall
ret

Function at 0x140053b30
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400875f2
xchg r9, rcx
mov r10, r9
xchg rcx, r9
mov eax, dword [0x1404a101c]
xchg rcx, rcx
cmp qword [0x1404a1098], 0
jne 0x140086f00
syscall
xchg r10, r10
ret

Function at 0x140053b40
Capabilities:
Execute syscall

Disassembly:
jmp 0x140087144
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x1404a0fac]
xchg r8, r8
cmp qword [0x1404a1098], 0
jne 0x140086f00
syscall
xchg rcx, rcx
ret

Function at 0x140053b50
Capabilities:
Execute syscall

Disassembly:
jmp 0x140086ff5
xchg rsi, r10
mov rsi, rcx
xchg rsi, r10
mov eax, dword [0x1404a0f8c]
mov rsi, rsi
cmp qword [0x1404a1098], 0
jne 0x140086f00
syscall
ret

Function at 0x140053b60
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400871cf
xchg rcx, r11
mov r10, r11
xchg rcx, r11
mov eax, dword [0x1404a0fb8]
mov dword [rsp - 0x28], edx
cmp qword [0x1404a1098], 0
jne 0x140086f00
syscall
mov dword [rsp - 0x14], ebx
ret

Function at 0x140053b90
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400877e2
sub rsp, 0x120
lea rcx, [0x140086f62]
push rcx
xchg r14, r14
nop
sub rsp, 8
mov qword [rsp], rbp
nop
push 0x611c1a4f
mov qword [rsp], rsi
nop
push r11
mov qword [rsp], rdi
push qword [0x1404a10a0]
lea rsi, [rsp + 0x170]
xchg r12, r12
lea rdi, [rsp + 0x28]
mov ecx, 0x76788874
sub ecx, 0x714016c6
add ecx, 0x4fd65f83
sub ecx, 0x550ed121
rep movsq qword [rdi], qword [rsi]
jmp qword [0x1404a1098]
mov r10, rcx
mov eax, dword [0x1404a104c]
cmp qword [0x1404a1098], 0
mov rdi, rdi
jne 0x140086f00
syscall
ret

Function at 0x140053ba0
Capabilities:
Execute syscall

Disassembly:
jmp 0x140087047
xchg r15, r10
mov r15, rcx
xchg r10, r15
mov eax, dword [0x1404a0f94]
xchg rdi, rdi
cmp qword [0x1404a1098], 0
jne 0x140086f00
syscall
mov dword [rsp - 0x30], 0x63e753ae
ret

Function at 0x140053bb0
Capabilities:
Execute syscall

Disassembly:
jmp 0x140087768
xchg rsi, rcx
mov r10, rsi
xchg rsi, rcx
mov eax, dword [0x1404a1040]
mov dword [rsp - 0x34], 0x6bd9129
cmp qword [0x1404a1098], 0
jne 0x140086f00
syscall
ret
Function at 0x140053bc0
Capabilities:
Execute syscall

Disassembly:
jmp 0x140087716
xchg rcx, rsp
mov r10, rsp
xchg rcx, rsp
mov eax, dword [0x1404a1038]
cmp qword [0x1404a1098], 0
xchg rsp, rsp
jne 0x140086f00
syscall
ret

Function at 0x140053bd0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008773f
xchg r10, rsi
mov rsi, rcx
xchg rsi, r10
mov eax, dword [0x1404a103c]
cmp qword [0x1404a1098], 0
mov r15, r15
jne 0x140086f00
syscall
ret

Function at 0x140053be0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008701e
xchg rbp, rcx
mov r10, rbp
xchg rbp, rcx
mov eax, dword [0x1404a0f90]
cmp qword [0x1404a1098], 0
mov rsp, rsp
jne 0x140086f00
syscall
ret

Function at 0x140053bf0
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400871fd
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x1404a0fbc]
xchg r15, r15
cmp qword [0x1404a1098], 0
jne 0x140086f00
syscall
mov dword [rsp - 0x1c], ebx
ret
Function at 0x1400571e0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
xchg r10, rbx
mov qword [rax + 0x10], r10
xchg r10, rbx
push rdi
nop
add rsp, 0x28f38a22
sub rsp, 0x28f38a82
movabs rbx, 0x25f71030745ddff7
xor rbx, 0x2b76d1cf
sub rbx, 0x45dce1fb
xor rbx, 0x17e75897
xor rbx, 0x659d6f46
xchg rcx, rbp
mov rdi, rbp
xchg rcx, rbp
cmp qword [rcx + 0x30], rbx
mov dword [rsp - 0x14], ebx
jne 0x140057440
mov dword [rax - 0x48], 0xd479614
add dword [rax - 0x48], 0x1d7af254
add dword [rax - 0x48], 0x12a12678
add dword [rax - 0x48], 0x58e10b2
sub dword [rax - 0x48], 0x42d4bf67
xor r8d, r8d
mov r9, r9
mov dword [rax - 0x44], 0x1c052d84
add dword [rax - 0x44], 0x2fcd0fb8
add dword [rax - 0x44], 0x3156c2f
xor dword [rax - 0x44], 0x1e2c6e1
sub dword [rax - 0x44], 0x4e8e6f7d
mov dword [rax - 0x40], 0x34dd2d1e
add dword [rax - 0x40], 0x1834cd3b
add dword [rax - 0x40], 0x16812da0
sub dword [rax - 0x40], 0x638327df
mov dword [rax - 0x3c], 0x252916f4
xor dword [rax - 0x3c], 0x5e12915b
sub dword [rax - 0x3c], 0x7932ec40
xor dword [rax - 0x3c], 0x65e832db
sub dword [rax - 0x3c], 0x67bca96c
mov dword [rax - 0x38], 0x54b3bd1d
add dword [rax - 0x38], 0x18b42ea3
sub dword [rax - 0x38], 0xefa7767
add dword [rax - 0x38], 0x79456b5
xor dword [rax - 0x38], 0x661ccb4a
mov dword [rax - 0x34], 0x3bc4ba8e
xor dword [rax - 0x34], 0x76bf558e
sub dword [rax - 0x34], 0xdba23c2
sub dword [rax - 0x34], 0x38780896
xor dword [rax - 0x34], 0x733c2bf
xchg r13, r8
mov qword [rsp + 0x70], r13
xchg r8, r13
xchg r13, rax
mov r13, qword [rsp + 0x70]
xchg r13, rax
nop word [rax + rax]
mov rbx, rbx
xchg rcx, r9
mov r9, qword [rsp + 0x70]
xchg r9, rcx
mov rax, qword [rsp + 0x70]
mov r12, r12
and cl, 3
shl cl, 1
shl cl, 1
shl cl, 1
movzx edx, word [rsp + rax*2 + 0x20]
mov eax, 0x4edb620f
sub eax, 0x167c5d48
xor eax, 0x4fb2933a
sub eax, 0x61721e93
shr eax, cl
mov dword [rsp - 0x2c], 0x39c68b09
movzx ecx, al
xchg r14, rax
mov r14, qword [rsp + 0x70]
xchg r14, rax
xor cx, dx
mov word [rsp + rax*2 + 0x38], cx
xchg rdx, rax
mov rdx, qword [rsp + 0x70]
xchg rdx, rax
inc rax
mov qword [rsp + 0x70], rax
xchg r8, rax
mov r8, qword [rsp + 0x70]
xchg r8, rax
cmp rax, 0xc
jb 0x140057328
xor edx, edx
mov dword [rsp - 0x30], 0x15b23ee3
mov word [rsp + 0x50], r8w
lea rcx, [rsp + 0x38]
call fcn.14007a870
mov r8, r8
mov rdx, rax
xchg r8, rax
mov rax, r8
xchg r8, rax
xor rdx, rbx
mov r13, r13
xor eax, eax
xchg rdx, r8
mov qword [rdi + 0x30], r8
xchg rdx, r8
lea rdi, [rsp + 0x38]
xchg r13, r13
mov ecx, 0x2f47ca24
add ecx, 0x257d3542
sub ecx, 0xe5e9f8c
xor ecx, 0x46665fd6
rep stosb byte [rdi], al
mov dword [rsp - 0x10], esi
cmp rdx, rbx
je 0x140057448
lea rdx, [0x1404a03f0]
mov rcx, r8
mov dword [rsp - 0x30], ecx
call fcn.14005f300
test al, al
setne al
mov rbx, qword [rsp + 0x78]
mov dword [rsp - 0x40], esi
nop
add rsp, 0xeeab81e
sub rsp, 0xeeab7be
nop
mov rdi, qword [rsp]
add rsp, 8
ret
mov al, 0x6f
sub al, 0x22
sub al, 0x28
xor al, 0x24
mov rbx, qword [rsp + 0x78]
nop
sub rsp, 0xc29b742
add rsp, 0xc29b7a2
pop rdi
mov dword [rsp - 0x1c], esp
ret
Function at 0x140057470
Capabilities:
Encode data using xor

Disassembly:
xchg r13, rbx
mov qword [rsp + 0x10], r13
xchg rbx, r13
push rdi
mov dword [rsp - 0x34], esp
neg rsp
sub rsp, 0xffffffffffffffb0
neg rsp
movabs rbx, 0x25f7103033f8c98d
xor rbx, 0x150b981
add rbx, 0x23d9511a
add rbx, 0x14b25ac6
xchg rdi, rcx
mov rcx, rdi
xchg rcx, rdi
cmp qword [rcx + 0x28], rbx
mov r9, r9
jne 0x140057693
mov eax, 0x562ddbca
sub eax, 0x3ba2a606
sub eax, 0x1936198a
add eax, 0x53ccab1e
sub eax, 0x5521c752
mov dword [rsp + 0x20], 0x25f3e829
sub dword [rsp + 0x20], 0x18e8b5cb
add dword [rsp + 0x20], 0x4ff8ca7b
sub dword [rsp + 0x20], 0x5ceefcb4
mov word [rsp + 0x30], ax
xor r8d, r8d
xchg rdx, rdx
mov dword [rsp + 0x24], 0x5043c46e
add dword [rsp + 0x24], 0x14e71ed3
sub dword [rsp + 0x24], 0x1ac94ffc
xor dword [rsp + 0x24], 0x426e2250
sub dword [rsp + 0x24], 0x7eab0f7
mov dword [rsp + 0x28], 0x5f81030d
sub dword [rsp + 0x28], 0x2087e555
sub dword [rsp + 0x28], 0x1b121108
sub dword [rsp + 0x28], 0x7504fab
xor dword [rsp + 0x28], 0x1cc1bd5d
mov dword [rsp + 0x2c], 0x1f67ccee
xor dword [rsp + 0x2c], 0x50a91be5
xor dword [rsp + 0x2c], 0x35b91e5c
sub dword [rsp + 0x2c], 0x79fdc938
mov qword [rsp + 0x60], r8
xchg rdx, rdx
xchg r14, rax
mov r14, qword [rsp + 0x60]
xchg r14, rax
nop dword [rax + rax]
mov dword [rsp - 0x40], edx
mov rcx, qword [rsp + 0x60]
mov rax, qword [rsp + 0x60]
and cl, 3
mov dword [rsp - 0x14], edx
shl cl, 3
movzx edx, word [rsp + rax*2 + 0x20]
mov eax, 0x24d1f17f
sub eax, 0x12566cd0
xor eax, 0x2715184c
xor eax, 0x2315e589
shr eax, cl
movzx ecx, al
mov r14, r14
xchg r13, rax
mov r13, qword [rsp + 0x60]
xchg r13, rax
xor cx, dx
mov dword [rsp - 0x24], 0x6e859446
mov word [rsp + rax*2 + 0x32], cx
xchg rcx, rax
mov rcx, qword [rsp + 0x60]
xchg rcx, rax
inc rax
xchg rcx, rax
mov qword [rsp + 0x60], rcx
xchg rcx, rax
mov rax, qword [rsp + 0x60]
mov dword [rsp - 0x24], ebp
cmp rax, 9
jb 0x140057590
xor edx, edx
mov rsp, rsp
mov word [rsp + 0x44], r8w
lea rcx, [rsp + 0x32]
call fcn.14007a870
mov dword [rsp - 0x34], edi
xchg rbp, rdx
mov rbp, rax
xchg rbp, rdx
mov r8, rax
mov rsi, rsi
xor rdx, rbx
xor eax, eax
xchg rdx, rcx
mov qword [rdi + 0x28], rcx
xchg rdx, rcx
lea rdi, [rsp + 0x32]
mov ecx, 0x73c1b40a
sub ecx, 0x5c1a566f
add ecx, 0x48e7895e
sub ecx, 0x608ee6f0
rep stosb byte [rdi], al
cmp rdx, rbx
xchg rdx, rdx
je 0x14005769b
lea rdx, [0x1404a00e0]
xchg r14, r8
mov rcx, r14
xchg r14, r8
call fcn.14006acd0
test al, al
mov dword [rsp - 0x18], esi
setne al
mov rbx, qword [rsp + 0x68]
add rsp, 0x50
pop rdi
mov rbx, rbx
ret
mov al, 0x54
xor al, 0x77
add al, 0x3d
xor al, 0x61
mov rbx, qword [rsp + 0x68]
mov r12, r12
sub rsp, 0xffffffffffffffb0
nop
mov rdi, qword [rsp]
add rsp, 8
ret
Function at 0x1400576c0
Capabilities:
Encode data using xor

Disassembly:
xchg r15, rbx
mov qword [rsp + 0x10], r15
xchg r15, rbx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
add rsp, 0xffffffffffffffb0
movabs rbx, 0x25f7103069003466
sub rbx, 0x3a65f7b7
add rbx, 0x2e8ca7a5
sub rbx, 0x48f822d
add rbx, 0x129cb9c5
mov rdi, rcx
mov r10, r10
cmp qword [rcx + 0x38], rbx
jne 0x1400578fa
xor r8d, r8d
mov dword [rsp + 0x20], 0x45b389c
add dword [rsp + 0x20], 0x4a38a99c
add dword [rsp + 0x20], 0x1ce57c1a
xor dword [rsp + 0x20], 0x6b705e6a
mov dword [rsp + 0x24], 0x2a0433bc
xor dword [rsp + 0x24], 0x5a35d3f1
sub dword [rsp + 0x24], 0x3c3dc90f
add dword [rsp + 0x24], 0x35f9bb02
xor dword [rsp + 0x24], 0x6989d258
mov dword [rsp + 0x28], 0x33ffae8c
sub dword [rsp + 0x28], 0x9d56e19
sub dword [rsp + 0x28], 0xd3d61ec
sub dword [rsp + 0x28], 0x1c9fde69
mov dword [rsp + 0x2c], 0x1bc5035b
add dword [rsp + 0x2c], 0x1a5f2c32
sub dword [rsp + 0x2c], 0x28035f29
xor dword [rsp + 0x2c], 0xe52d031
mov dword [rsp + 0x30], 0x5635251c
add dword [rsp + 0x30], 0x1565144d
xor dword [rsp + 0x30], 0x38dc6840
sub dword [rsp + 0x30], 0x53315123
xchg r8, rdi
mov qword [rsp + 0x60], rdi
xchg rdi, r8
xchg r11, rax
mov r11, qword [rsp + 0x60]
xchg r11, rax
nop word [rax + rax]
mov rdx, rdx
xchg rcx, r11
mov r11, qword [rsp + 0x60]
xchg rcx, r11
mov rax, qword [rsp + 0x60]
and cl, 3
mov r11, r11
shl cl, 2
shl cl, 1
movzx edx, word [rsp + rax*2 + 0x20]
mov r14, r14
mov eax, 0x35552ec5
add eax, 0x7a2ba9a
sub eax, 0x2a0bad5b
add eax, 0x38f3d66
shr eax, cl
movzx ecx, al
mov dword [rsp - 0x10], ecx
mov rax, qword [rsp + 0x60]
xor cx, dx
mov word [rsp + rax*2 + 0x34], cx
mov rax, qword [rsp + 0x60]
xchg r8, r8
inc rax
xchg rcx, rax
mov qword [rsp + 0x60], rcx
xchg rcx, rax
xchg r13, rax
mov r13, qword [rsp + 0x60]
xchg r13, rax
cmp rax, 0xa
jb 0x1400577db
mov dword [rsp - 0xc], 0x412b515
xor edx, edx
mov word [rsp + 0x48], r8w
lea rcx, [rsp + 0x34]
call fcn.14007a870
mov rdx, rdx
mov rdx, rax
xchg rbp, rax
mov r8, rbp
xchg rbp, rax
xor rdx, rbx
xor eax, eax
xchg r11, r11
xchg r15, rdx
mov qword [rdi + 0x38], r15
xchg r15, rdx
lea rdi, [rsp + 0x34]
mov ecx, 0x3b181104
add ecx, 0x29c74483
add ecx, 0x64d53b3
add ecx, 0x1859619
sub ecx, 0x6cb23f49
rep stosb byte [rdi], al
mov dword [rsp - 0x1c], 0x1b009b2
cmp rdx, rbx
je 0x140057902
lea rdx, [0x1404a0108]
xchg rcx, r8
mov r8, rcx
xchg r8, rcx
call fcn.14006b180
test al, al
mov dword [rsp - 0x34], esp
setne al
xchg rbx, rbp
mov rbp, qword [rsp + 0x68]
xchg rbx, rbp
neg rsp
add rsp, 0xffffffffffffffb0
neg rsp
nop
mov rdi, qword [rsp]
add rsp, 8
ret
mov al, 0x70
sub al, 0x2b
xor al, 0x38
sub al, 0x7c
xchg r15, rbx
mov r15, qword [rsp + 0x68]
xchg rbx, r15
nop
sub rsp, 0x42bebb5
add rsp, 0x42bec05
pop rdi
xchg r8, r8
ret