joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400554e0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d795
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140142f38]
xchg r12, r12
cmp qword [0x140143018], 0
jne 0x14008d4c0
syscall
ret

Function at 0x1400554f0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d9df
xchg r10, r14
mov r14, rcx
xchg r10, r14
mov eax, dword [0x140142f70]
mov dword [rsp - 0x10], edi
cmp qword [0x140143018], 0
jne 0x14008d4c0
syscall
ret

Function at 0x140055500
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008da60
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140142f7c]
mov rbp, rbp
cmp qword [0x140143018], 0
jne 0x14008d4c0
syscall
ret

Function at 0x140055520
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d610
xchg r10, rdi
mov rdi, rcx
xchg r10, rdi
mov eax, dword [0x140142f14]
cmp qword [0x140143018], 0
mov dword [rsp - 0xc], 0x5181b3e4
jne 0x14008d4c0
syscall
ret

Function at 0x140055530
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008dd21
xchg r10, r14
mov r14, rcx
xchg r14, r10
mov eax, dword [0x140142fc0]
xchg rsp, rsp
cmp qword [0x140143018], 0
jne 0x14008d4c0
syscall
mov dword [rsp - 0x40], edi
ret

Function at 0x140055540
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008dbd6
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140142fa0]
mov rbx, rbx
cmp qword [0x140143018], 0
jne 0x14008d4c0
syscall
ret

Function at 0x140055550
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008dcd3
mov r10, rcx
mov eax, dword [0x140142fb8]
cmp qword [0x140143018], 0
mov dword [rsp - 0x30], ecx
jne 0x14008d4c0
syscall
ret

Function at 0x140055560
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008dab2
xchg rcx, r8
mov r10, r8
xchg r8, rcx
mov eax, dword [0x140142f84]
cmp qword [0x140143018], 0
mov dword [rsp - 0x24], 0x45e2ebf2
jne 0x14008d4c0
syscall
ret

Function at 0x140055570
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008dcf7
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140142fbc]
cmp qword [0x140143018], 0
jne 0x14008d4c0
mov dword [rsp - 0x14], edi
syscall
ret

Function at 0x140055580
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d5e7
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140142f10]
cmp qword [0x140143018], 0
xchg r14, r14
jne 0x14008d4c0
syscall
ret

Function at 0x140055590
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d7be
mov r10, rcx
mov eax, dword [0x140142f3c]
cmp qword [0x140143018], 0
mov r10, r10
jne 0x14008d4c0
syscall
ret
Function at 0x140068de0
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r8
mov qword [rsp + 0x10], r8
xchg rbx, r8
xchg r14, rsi
mov qword [rsp + 0x18], r14
xchg rsi, r14
xchg rdi, rdx
mov qword [rsp + 0x20], rdx
xchg rdx, rdi
nop
mov qword [rsp - 8], rbp
sub rsp, 8
xchg rbp, rsp
mov rsp, rbp
xchg rbp, rsp
sub rsp, 0x60
movabs rbx, 0x654f3f3c73f89ac6
sub rbx, 0x30619669
add rbx, 0xf57c8d7
add rbx, 0xa0cd3d2
sub rbx, 0x3dd441af
xchg rcx, rbp
mov rdi, rbp
xchg rcx, rbp
cmp qword [rcx + 0x30], rbx
jne 0x140068ffd
mov dword [rsp - 0x30], ebp
xor esi, esi
mov dword [rbp - 0x40], 0x4a2e4e56
add dword [rbp - 0x40], 0x11fef971
xor dword [rbp - 0x40], 0x3cd0a329
sub dword [rbp - 0x40], 0x60c2e3fc
mov dword [rbp - 0x3c], 0x6cf98302
sub dword [rbp - 0x3c], 0x38e70f13
xor dword [rbp - 0x3c], 0x616b930e
sub dword [rbp - 0x3c], 0x5501e02e
mov dword [rbp - 0x38], 0x7083c152
sub dword [rbp - 0x38], 0x635d71fb
add dword [rbp - 0x38], 0x5b718571
sub dword [rbp - 0x38], 0x18f828e1
xor dword [rbp - 0x38], 0x4fa9ab24
mov dword [rbp - 0x34], 0x24cc760c
xor dword [rbp - 0x34], 0x3066c353
add dword [rbp - 0x34], 0x45c53e5f
sub dword [rbp - 0x34], 0x5a44f2c8
mov dword [rbp - 0x30], 0x52ffd057
sub dword [rbp - 0x30], 0x2c28f053
add dword [rbp - 0x30], 0x361a3fcb
sub dword [rbp - 0x30], 0x5cb61f32
mov dword [rbp - 0x2c], 0x258644ca
xor dword [rbp - 0x2c], 0x4bf5abd8
sub dword [rbp - 0x2c], 0x2a8d8f9f
sub dword [rbp - 0x2c], 0x43715eca
mov qword [rbp + 0x10], rsi
mov dword [rsp - 0x38], 0x419afcdc
xchg r11, rax
mov r11, qword [rbp + 0x10]
xchg r11, rax
xchg r12, rcx
mov r12, qword [rbp + 0x10]
xchg rcx, r12
xchg r12, rax
mov r12, qword [rbp + 0x10]
xchg r12, rax
and cl, 3
shl cl, 3
xchg r12, r12
movzx edx, word [rbp + rax*2 - 0x40]
mov eax, 0x76fd23df
sub eax, 0x184b4df2
xor eax, 0x240b68ca
sub eax, 0x60f55d74
shr eax, cl
xchg rdx, rdx
movzx ecx, al
mov rax, qword [rbp + 0x10]
xor cx, dx
mov r11, r11
mov word [rbp + rax*2 - 0x28], cx
xchg rcx, rax
mov rcx, qword [rbp + 0x10]
xchg rcx, rax
inc rax
xchg r12, rax
mov qword [rbp + 0x10], r12
xchg r12, rax
xchg rdx, rax
mov rdx, qword [rbp + 0x10]
xchg rdx, rax
cmp rax, 0xc
mov r10, r10
jb 0x140068f1a
xor edx, edx
mov word [rbp - 0x10], si
lea rcx, [rbp - 0x28]
mov r14, r14
call fcn.14008aed0
mov rdx, rax
xchg rbx, r8
mov rbx, rax
xchg r8, rbx
xor eax, eax
xor rdx, rbx
mov dword [rsp - 0x2c], esi
xchg r9, rdx
mov qword [rdi + 0x30], r9
xchg rdx, r9
lea rdi, [rbp - 0x28]
xchg r15, r15
lea ecx, [rax + 0xc]
rep stosb byte [rdi], al
cmp rdx, rbx
mov dword [rsp - 0x10], 0x3532175f
je 0x140069005
lea rdx, [0x1401422c0]
xchg r11, r8
mov rcx, r11
xchg r8, r11
call fcn.14006d6ec
test al, al
mov r12, r12
setne al
jmp 0x140069005
mov al, 0x3a
add al, 0x38
sub al, 0x39
sub al, 0x38
lea r11, [rsp + 0x60]
xchg rbx, rdi
mov rdi, qword [r11 + 0x18]
xchg rdi, rbx
xchg rsi, rsp
mov rsp, qword [r11 + 0x20]
xchg rsp, rsi
mov rdi, qword [r11 + 0x28]
mov dword [rsp - 0x2c], edx
xchg r11, r8
mov rsp, r8
xchg r11, r8
nop
mov rbp, qword [rsp]
add rsp, 8
ret
Function at 0x14006903c
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
xchg r11, rdi
mov qword [rsp + 0x20], r11
xchg r11, rdi
nop
sub rsp, 8
mov qword [rsp], rbp
xchg rcx, rsp
mov rbp, rcx
xchg rsp, rcx
nop
add rsp, 0x53fd2c8a
sub rsp, 0x53fd2cda
movabs rbx, 0x654f3f3c7acbe24b
sub rbx, 0x32e63e8a
add rbx, 0x2f2c3594
sub rbx, 0x6c9de0db
add rbx, 0x14b366dd
xchg rcx, rdi
mov rcx, rdi
xchg rdi, rcx
cmp qword [rcx + 0x28], rbx
mov dword [rsp - 0x1c], edx
jne 0x14006922e
mov eax, 0x352f7596
add eax, 0x48ea0023
xor eax, 0x3b9453eb
xor eax, 0x5a853fd3
sub eax, 0x1f0818a2
mov dword [rbp - 0x30], 0x7e84b7d5
sub dword [rbp - 0x30], 0x7a30bad7
xor dword [rbp - 0x30], 0x11cf857b
sub dword [rbp - 0x30], 0x15697889
mov word [rbp - 0x20], ax
mov dword [rsp - 0x40], ecx
xor esi, esi
mov dword [rbp - 0x2c], 0x261e2f4
xor dword [rbp - 0x2c], 0x4341004b
sub dword [rbp - 0x2c], 0x3d6cf86e
sub dword [rbp - 0x2c], 0x389e9b1
mov dword [rbp - 0x28], 0x21433df4
add dword [rbp - 0x28], 0x3f351d84
sub dword [rbp - 0x28], 0xca48aa4
sub dword [rbp - 0x28], 0x5362d053
mov dword [rbp - 0x24], 0x10086c5d
add dword [rbp - 0x24], 0x5d1c3f89
add dword [rbp - 0x24], 0x75a1483
xor dword [rbp - 0x24], 0x740bc0c8
mov qword [rbp + 0x10], rsi
mov dword [rsp - 0xc], 0x234667cb
mov rax, qword [rbp + 0x10]
mov rcx, qword [rbp + 0x10]
mov rax, qword [rbp + 0x10]
and cl, 3
xchg r14, r14
shl cl, 3
movzx edx, word [rbp + rax*2 - 0x30]
mov eax, 0x6676a9da
add eax, 0x5556a62
sub eax, 0x57b44450
add eax, 0x5ad8fc7
shr eax, cl
xchg r9, r9
movzx ecx, al
mov rax, qword [rbp + 0x10]
xor cx, dx
mov dword [rsp - 0x30], esp
mov word [rbp + rax*2 - 0x1e], cx
xchg r11, rax
mov r11, qword [rbp + 0x10]
xchg r11, rax
inc rax
mov qword [rbp + 0x10], rax
xchg rcx, rcx
xchg r14, rax
mov r14, qword [rbp + 0x10]
xchg r14, rax
cmp rax, 9
mov dword [rsp - 0x40], ecx
jb 0x140069152
xor edx, edx
mov word [rbp - 0xc], si
lea rcx, [rbp - 0x1e]
mov dword [rsp - 0x40], 0x41ba2b11
call fcn.14008aed0
xchg rcx, rax
mov rdx, rcx
xchg rcx, rax
mov r8, rax
xor eax, eax
xchg r12, r12
xor rdx, rbx
xchg rdx, r8
mov qword [rdi + 0x28], r8
xchg r8, rdx
lea rdi, [rbp - 0x1e]
mov r10, r10
lea ecx, [rax + 9]
rep stosb byte [rdi], al
cmp rdx, rbx
mov dword [rsp - 0x2c], 0x67450cc8
je 0x140069236
lea rdx, [0x140142810]
xchg rsi, rcx
mov rsi, r8
xchg rsi, rcx
call fcn.140071868
test al, al
mov r11, r11
setne al
jmp 0x140069236
mov al, 0x7d
xor al, 0x71
add al, 0x53
sub al, 0x5e
mov rbx, qword [rsp + 0x68]
mov dword [rsp - 0xc], 0x2a9c8d51
xchg r12, rsi
mov r12, qword [rsp + 0x70]
xchg r12, rsi
xchg r14, rdi
mov r14, qword [rsp + 0x78]
xchg rdi, r14
nop
sub rsp, 0x5680e154
add rsp, 0x5680e1a4
nop
mov rbp, qword [rsp]
add rsp, 8
ret
Function at 0x140069274
Capabilities:
Encode data using xor

Disassembly:
xchg r11, rbx
mov qword [rsp + 0x10], r11
xchg rbx, r11
xchg r15, rsi
mov qword [rsp + 0x18], r15
xchg r15, rsi
mov qword [rsp + 0x20], rdi
push rbp
mov rsi, rsi
xchg rsi, rbp
mov rsi, rsp
xchg rsi, rbp
nop
add rsp, 0x2a3b421e
sub rsp, 0x2a3b426e
movabs rbx, 0x654f3f3c725695bf
xor rbx, 0x24985e09
sub rbx, 0x298ea20f
xor rbx, 0x498e5234
sub rbx, 0x45a71c3c
xchg rdi, rcx
mov rcx, rdi
xchg rdi, rcx
cmp qword [rcx + 0x38], rbx
jne 0x140069468
mov r12, r12
xor esi, esi
mov dword [rbp - 0x30], 0x71447421
sub dword [rbp - 0x30], 0x3620a7ef
add dword [rbp - 0x30], 0x2b5509fc
sub dword [rbp - 0x30], 0x1e19ca81
sub dword [rbp - 0x30], 0x48300acc
mov dword [rbp - 0x2c], 0x5a6d23a3
xor dword [rbp - 0x2c], 0x6fc03e3a
xor dword [rbp - 0x2c], 0x100cf21a
sub dword [rbp - 0x2c], 0x2536eedd
mov dword [rbp - 0x28], 0x45853f5e
xor dword [rbp - 0x28], 0x6e37a00c
xor dword [rbp - 0x28], 0x2f5bd581
xor dword [rbp - 0x28], 0x4824a14
mov dword [rbp - 0x24], 0x2d7d4ed2
add dword [rbp - 0x24], 0x1a6fb9a0
xor dword [rbp - 0x24], 0x550fb6c6
sub dword [rbp - 0x24], 0x1265bdc9
mov dword [rbp - 0x20], 0x5054e3c4
sub dword [rbp - 0x20], 0x8026f7
xor dword [rbp - 0x20], 0x7373c24b
xor dword [rbp - 0x20], 0x3c947e59
mov qword [rbp + 0x10], rsi
xchg rbx, rax
mov rbx, qword [rbp + 0x10]
xchg rbx, rax
xchg rcx, r9
mov r9, qword [rbp + 0x10]
xchg r9, rcx
xchg r13, rax
mov r13, qword [rbp + 0x10]
xchg r13, rax
and cl, 3
mov dword [rsp - 0x40], edx
shl cl, 3
movzx edx, word [rbp + rax*2 - 0x30]
mov eax, 0x3a3b1b79
add eax, 0x2b44249c
sub eax, 0x64a929d0
add eax, 0x18ef496e
shr eax, cl
movzx ecx, al
xchg r13, rax
mov r13, qword [rbp + 0x10]
xchg r13, rax
xor cx, dx
xchg r15, r15
mov word [rbp + rax*2 - 0x1c], cx
mov rax, qword [rbp + 0x10]
inc rax
mov rsp, rsp
xchg r11, rax
mov qword [rbp + 0x10], r11
xchg r11, rax
xchg r15, rax
mov r15, qword [rbp + 0x10]
xchg r15, rax
cmp rax, 0xa
jb 0x140069388
mov dword [rsp - 0xc], 0x5cb490c5
xor edx, edx
mov word [rbp - 8], si
lea rcx, [rbp - 0x1c]
mov r15, r15
call fcn.14008aed0
xchg rsi, rax
mov rdx, rsi
xchg rsi, rax
xchg r9, rax
mov r8, r9
xchg r9, rax
xor eax, eax
xor rdx, rbx
mov dword [rsp - 0x1c], ebx
xchg rdx, r11
mov qword [rdi + 0x38], r11
xchg rdx, r11
lea rdi, [rbp - 0x1c]
xchg rbx, rbx
lea ecx, [rax + 0xa]
rep stosb byte [rdi], al
cmp rdx, rbx
je 0x140069472
mov r11, r11
lea rdx, [0x140142830]
mov rcx, r8
call fcn.140071c54
test al, al
mov r11, r11
setne al
jmp 0x140069472
mov al, 0x47
sub al, 0x20
add al, 0x16
sub al, 0x1e
sub al, 0x1e
mov rbx, qword [rsp + 0x68]
mov dword [rsp - 0x28], ecx
mov rsi, qword [rsp + 0x70]
xchg rdi, rcx
mov rcx, qword [rsp + 0x78]
xchg rdi, rcx
neg rsp
add rsp, 0xffffffffffffffb0
neg rsp
nop
add rsp, 8
mov rbp, qword [rsp - 8]
ret
Function at 0x1400694a0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
xchg rcx, rdi
mov qword [rsp + 0x20], rcx
xchg rcx, rdi
nop
mov qword [rsp - 8], rbp
sub rsp, 8
mov rbp, rsp
sub rsp, 0x50
mov dword [rsp - 0x34], 0x7798a6e6
movabs rbx, 0x654f3f3c2a575b41
add rbx, 0x30453d96
xor rbx, 0x51d1c2a5
add rbx, 0x56e3d380
sub rbx, 0x4309ce9b
xchg rdx, rdi
mov rdx, rcx
xchg rdi, rdx
cmp qword [rcx + 0x20], rbx
jne 0x1400696c5
mov r12, r12
mov eax, 0xeaea61e
add eax, 0x3e77c6b3
add eax, 0x279c643b
sub eax, 0x74c2d063
mov dword [rbp - 0x30], 0x5838dc27
xor dword [rbp - 0x30], 0x408da73a
add dword [rbp - 0x30], 0x1bde5f8b
sub dword [rbp - 0x30], 0x345cd9c8
mov word [rbp - 0x1c], ax
xor esi, esi
mov dword [rbp - 0x2c], 0x7a695bf9
sub dword [rbp - 0x2c], 0x636114db
xor dword [rbp - 0x2c], 0x6afac77
add dword [rbp - 0x2c], 0x1207873b
sub dword [rbp - 0x2c], 0x233a7204
mov dword [rbp - 0x28], 0x7791097
add dword [rbp - 0x28], 0x3b985723
xor dword [rbp - 0x28], 0x3a59646c
xor dword [rbp - 0x28], 0x4f193aff
sub dword [rbp - 0x28], 0x35e5384a
mov dword [rbp - 0x24], 0x21d09e35
add dword [rbp - 0x24], 0x49d04c92
xor dword [rbp - 0x24], 0x79ebc7b9
add dword [rbp - 0x24], 0x67cf111
sub dword [rbp - 0x24], 0x18911d98
mov dword [rbp - 0x20], 0x41e71dba
xor dword [rbp - 0x20], 0x5ff85a49
add dword [rbp - 0x20], 0x1f542df1
sub dword [rbp - 0x20], 0x457e454
sub dword [rbp - 0x20], 0x38e890b9
xchg rsi, r8
mov qword [rbp + 0x10], r8
xchg rsi, r8
xchg rdi, rax
mov rdi, qword [rbp + 0x10]
xchg rdi, rax
xchg r13, rcx
mov r13, qword [rbp + 0x10]
xchg rcx, r13
xchg rbx, rax
mov rbx, qword [rbp + 0x10]
xchg rbx, rax
and cl, 3
mov dword [rsp - 0x20], 0x3e97ad0d
shl cl, 3
movzx edx, word [rbp + rax*2 - 0x30]
mov eax, 0x420798ca
sub eax, 0xbd28d53
add eax, 0x2b938a7d
sub eax, 0x43b68af1
sub eax, 0x44cab50
shr eax, cl
movzx ecx, al
mov dword [rsp - 0x24], 0xcf1d619
mov rax, qword [rbp + 0x10]
xor cx, dx
mov word [rbp + rax*2 - 0x1a], cx
mov rax, qword [rbp + 0x10]
xchg r11, r11
inc rax
xchg rbx, rax
mov qword [rbp + 0x10], rbx
xchg rbx, rax
xchg r10, rax
mov r10, qword [rbp + 0x10]
xchg r10, rax
cmp rax, 0xb
jb 0x1400695de
xor edx, edx
mov rbx, rbx
mov word [rbp - 4], si
lea rcx, [rbp - 0x1a]
call fcn.14008aed0
xchg rbx, rax
mov rdx, rbx
xchg rbx, rax
xchg r8, rdi
mov rdi, rax
xchg rdi, r8
xor eax, eax
mov rbp, rbp
xor rdx, rbx
xchg rdx, rbx
mov qword [rdi + 0x20], rbx
xchg rdx, rbx
lea rdi, [rbp - 0x1a]
lea ecx, [rax + 0xb]
rep stosb byte [rdi], al
mov rsi, rsi
cmp rdx, rbx
je 0x1400696cd
lea rdx, [0x140142298]
xchg rdx, rcx
mov rdx, r8
xchg rcx, rdx
call fcn.1400720bc
mov dword [rsp - 0x24], edi
test al, al
setne al
jmp 0x1400696cd
mov al, 0x14
xor al, 0x23
add al, 5
xor al, 0x3d
xchg r11, rbx
mov r11, qword [rsp + 0x68]
xchg r11, rbx
mov rsi, qword [rsp + 0x70]
xchg rdx, rdx
mov rdi, qword [rsp + 0x78]
sub rsp, 0xffffffffffffffb0
pop rbp
mov dword [rsp - 0x14], edi
ret
Function at 0x140073f70
Capabilities:
Encode data using xor

Disassembly:
xchg rsi, r14
mov qword [rsp + 0x18], r14
xchg rsi, r14
push rdi
sub rsp, 0x60
lea rax, [rcx + 8]
mov dword [rsp - 0xc], ebp
xchg rbx, r9
mov qword [rsp + 0x70], r9
xchg r9, rbx
mov qword [rcx], rax
xorps xmm0, xmm0
xchg rsi, rax
movups xmmword [rsi], xmm0
xchg rsi, rax
xchg rcx, r15
mov rsi, r15
xchg r15, rcx
xchg rdx, rbp
mov qword [rsp + 0x78], rdx
xchg rbp, rdx
xchg rsp, rax
movups xmmword [rsp + 0x10], xmm0
xchg rsp, rax
lea rcx, [rsp + 0x20]
xchg r15, rax
movups xmmword [r15 + 0x20], xmm0
xchg r15, rax
xchg r8, rax
movups xmmword [r8 + 0x30], xmm0
xchg r8, rax
xchg r11, rax
movups xmmword [r11 + 0x40], xmm0
xchg r11, rax
xchg rbx, rax
movups xmmword [rbx + 0x50], xmm0
xchg rbx, rax
xchg rcx, rax
movups xmmword [rcx + 0x60], xmm0
xchg rcx, rax
movups xmmword [rax + 0x70], xmm0
mov rbp, qword [rdx + 0x38]
xchg r14, r14
lea rax, [rsp + 0x28]
mov rbx, qword [rdx]
xchg r10, rax
mov qword [rsp + 0x20], r10
xchg r10, rax
xchg rbp, rsp
movups xmmword [rbp + 0x28], xmm0
xchg rsp, rbp
lea rdx, [rbp + 1]
mov dword [rsp - 0x44], 0x548368d5
xchg r13, rsp
movups xmmword [r13 + 0x38], xmm0
xchg r13, rsp
xchg rsp, r14
movups xmmword [r14 + 0x48], xmm0
xchg r14, rsp
call fcn.1400177dc
mov dword [rsp - 0x3c], edi
mov edx, 0x45b8776c
sub edx, 0x10f27234
xor edx, 0x66b3ea2f
sub edx, 0x3223ca96
sub edx, 0x68cc4ce
test rbp, rbp
je 0x1400740d7
mov dword [rsp - 0x40], 0x7b76844f
xchg r10, rax
mov rdi, r10
xchg r10, rax
sub rbx, rax
xchg r9, rbp
mov rbp, r9
xchg r9, rbp
mov r8d, 0xc3a0135
add r8d, 0x499ecbd5
xor r8d, 0x11a4c51a
sub r8d, 0x447c0711
nop word [rax + rax]
xchg r10, r10
movzx ecx, dx
lea rdi, [rdi + 2]
and cx, r8w
mov dword [rsp - 0xc], ebx
ror edx, 5
ror edx, 1
ror edx, 1
ror edx, 1
xor cx, word [rbx + rdi - 2]
xchg rsp, rsp
mov word [rdi - 2], cx
sub r9, 1
jne 0x1400740a6
xchg rcx, rcx
xor ecx, ecx
xchg rbp, r8
mov rbp, r8
xchg rbp, r8
mov word [rax + rbp*2], cx
xchg rdx, rcx
mov rdx, rsi
xchg rdx, rcx
xchg rdx, rbp
mov rbp, qword [rsp + 0x20]
xchg rbp, rdx
call fcn.140090e20
xchg rbp, rbp
xchg rdx, rcx
mov rdx, qword [rsp + 0x20]
xchg rdx, rcx
lea rax, [rsp + 0x28]
xchg r10, r10
mov rbp, qword [rsp + 0x78]
mov rbx, qword [rsp + 0x70]
cmp rcx, rax
jne 0x140074171
mov rcx, rcx
xor eax, eax
lea rdi, [rsp + 0x28]
mov ecx, 0x3cc52418
add ecx, 0xa5762a1
add ecx, 0xe006e16
sub ecx, 0x551cf49f
rep stosb byte [rdi], al
mov dword [rsp - 0x14], ebx
mov rax, rsi
xchg rsi, rcx
mov rcx, qword [rsp + 0x80]
xchg rcx, rsi
nop
sub rsp, 0x6d47192f
add rsp, 0x6d47198f
pop rdi
ret
call fcn.140098be0
xchg rsi, rax
mov rsi, rax
xchg rsi, rax
mov rsi, qword [rsp + 0x80]
xchg r11, r11
neg rsp
add rsp, 0xffffffffffffffa0
neg rsp
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret
Function at 0x14007423d
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
xchg r12, r12
push rsi
nop
push r10
mov qword [rsp], rdi
nop
sub rsp, 8
mov qword [rsp], r15
nop
add rsp, 0x464e58ed
sub rsp, 0x464e594d
lea rdi, [rcx + 8]
xchg r13, r15
mov r13, rdx
xchg r13, r15
mov qword [rcx], rdi
xchg rdi, rcx
mov rbx, rdi
xchg rcx, rdi
xchg r14, rdi
mov rcx, r14
xchg r14, rdi
xor edx, edx
mov dword [rsp - 0x18], 0x7bf59802
mov r8d, 0x627904b3
xor r8d, 0x5d9ea71b
xor r8d, 0x1fe122f9
sub r8d, 0x20068051
call fcn.1400991f0
mov rax, qword [r15 + 0x38]
mov r12, r12
xchg r11, rax
mov qword [rbx + 0x108], r11
xchg r11, rax
xchg rcx, r11
mov r11, qword [rbx]
xchg rcx, r11
lea rsi, [rax + 1]
mov dword [rsp - 0x24], ecx
cmp rcx, rdi
je 0x140074248
call fcn.140098be0
xchg rcx, rcx
cmp rsi, 0x80
jbe 0x140074280
lea rcx, [rsi + rsi]
call fcn.140098eb0
mov dword [rsp - 0x10], 0x7fa26724
mov qword [rbx], rax
test rax, rax
jne 0x140074289
xchg rbp, rdi
mov qword [rbx], rbp
xchg rbp, rdi
jmp 0x140074443
mov qword [rbx], rdi
mov rax, rdi
mov r10, r10
xor edx, edx
mov qword [rsp + 0x88], r14
mov r8d, 0x6a950c5c
xor r8d, 0x5dbb48bd
sub r8d, 0x9de84f8
sub r8d, 0x2d4fbee9
xchg rcx, rax
mov rax, rcx
xchg rcx, rax
call fcn.1400991f0
mov r14, qword [rbx]
xchg rbx, rbx
test r14, r14
je 0x140074435
mov rsi, qword [r15]
xchg rcx, rcx
lea rax, [rsp + 0x28]
xorps xmm0, xmm0
mov qword [rsp + 0x80], rbp
xchg rcx, rcx
mov rbp, qword [r15 + 0x38]
lea rcx, [rsp + 0x20]
mov qword [rsp + 0x20], rax
xchg r14, r14
xchg rcx, rsp
movups xmmword [rcx + 0x28], xmm0
xchg rsp, rcx
lea rdx, [rbp + 1]
mov r8, r8
movups xmmword [rsp + 0x38], xmm0
movups xmmword [rsp + 0x48], xmm0
call fcn.1400177dc
mov edx, 0x1e684911
add edx, 0x9907287
xor edx, 0x6c16e66
xor edx, 0x4b218d6d
sub edx, 0x5052f8e0
test rbp, rbp
mov rdx, rdx
je 0x1400743a4
xchg r13, rdi
mov r13, rax
xchg rdi, r13
sub rsi, rax
xchg r8, rbx
mov rbx, rbp
xchg rbx, r8
mov r9d, 0x51ea7360
add r9d, 0x24e2c37c
sub r9d, 0x64e5d098
sub r9d, 0x11e76545
nop dword [rax]
mov rsp, rsp
nop dword [rax + rax]
movzx ecx, dx
lea rdi, [rdi + 2]
and cx, r9w
mov dword [rsp - 0x38], edi
ror edx, 8
xor cx, word [rsi + rdi - 2]
mov word [rdi - 2], cx
sub r8, 1
mov dword [rsp - 0x38], edi
jne 0x14007437b
xor ecx, ecx
mov word [rax + rbp*2], cx
mov dword [rsp - 0x18], 0x9c9e8b
mov rcx, r14
xchg rdx, rdi
mov rdi, qword [rbx + 0x108]
xchg rdx, rdi
mov r8, qword [rsp + 0x20]
inc rdx
call fcn.140099c00
mov dword [rsp - 0x24], ebx
xchg r13, rcx
mov r13, qword [rsp + 0x20]
xchg r13, rcx
lea rax, [rsp + 0x28]
xchg rbp, r12
mov r12, qword [rsp + 0x80]
xchg r12, rbp
cmp rcx, rax
mov r15, r15
jne 0x140074430
lea rdi, [rsp + 0x28]
xor eax, eax
mov dword [rsp - 0x2c], edx
mov ecx, 0x6aaae55f
xor ecx, 0x39ae3bd5
sub ecx, 0x4b145378
add ecx, 0x5a5f7341
sub ecx, 0x624ffe23
rep stosb byte [rdi], al
mov dword [rsp - 0xc], esp
jmp 0x140074435
call fcn.140098be0
xchg r10, r14
mov r10, qword [rsp + 0x88]
xchg r10, r14
xchg rdi, rax
mov rdi, rbx
xchg rdi, rax
xchg rsi, rbx
mov rsi, qword [rsp + 0x90]
xchg rsi, rbx
nop
add rsp, 0xcf6c442
sub rsp, 0xcf6c3e2
pop r15
pop rdi
mov dword [rsp - 0x20], 0x179e8ecf
nop
add rsp, 8
mov rsi, qword [rsp - 8]
ret
Function at 0x14007e8f0
Capabilities:
Encode data using xor

Disassembly:
xor r9d, r9d
lea r10, [0x140001910]
sub r10, rcx
xchg rbx, rbx
xchg r8, rcx
mov rcx, r8
xchg rcx, r8
lea rax, [r9 + r8]
mov dword [rsp - 0x3c], edi
mov ecx, r9d
mov edx, 0x75fe0f53
sub edx, 0x2225fa51
xor edx, 0x1c269b75
xor edx, 0x6846ff5c
inc r9
mov rcx, rcx
rol edx, cl
xor dl, byte [r10 + rax]
mov byte [rax], dl
mov r13, r13
cmp r9, 0x10
jb 0x14007e909
mov rax, r8
xchg rsi, rsi
ret
Function at 0x14007f7d4
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 8], rcx
mov r15, r15
nop
mov qword [rsp - 8], rbp
sub rsp, 8
nop
push 0x36f42b35
mov qword [rsp], rsi
nop
sub rsp, 8
mov qword [rsp], rdi
nop
sub rsp, 8
mov qword [rsp], r12
push r13
xchg r8, r8
nop
mov qword [rsp - 8], r14
sub rsp, 8
push r15
mov dword [rsp - 0x34], 0x4252db73
nop
add rsp, 0x29fe6a10
sub rsp, 0x29fe6a30
mov rbx, rcx
xchg r11, r11
mov r13d, r8d
mov r9d, 0x2ce1553e
add r9d, 0x443b019c
sub r9d, 0x587cb1a2
xor r9d, 0x189ba538
xchg r14, r12
mov r14, rdx
xchg r12, r14
cmp r8d, r9d
xchg rbx, rbx
pushf
movabs rcx, 0xffffffff41d7d670
sub rcx, 0x84a8000
sub rcx, 0x30ffc277
add rcx, 0x61b6b278
add rcx, 0x7fffffff
xor rcx, 0x15bbb98f
popf
pushf
mov eax, 0x48aa12eb
add eax, 0x224b9300
xor eax, 0x423feeb3
sub eax, 0x28ca4b54
popf
cmovb r9d, r13d
mov r12, r12
mul r9
cmovo rax, rcx
xchg rbp, rcx
mov rbp, rax
xchg rbp, rcx
call fcn.140098a70
mov dword [rsp - 0x10], 0x4a093c4f
lea r15d, [r13 + 0xfffff]
xor esi, esi
shr r15d, 9
shr r15d, 5
shr r15d, 2
shr r15d, 1
shr r15d, 1
shr r15d, 1
shr r15d, 1
xchg rcx, rax
mov rbp, rcx
xchg rcx, rax
mov eax, dword [rbx + 0x18]
mov ebx, 0x50c0578d
xor ebx, 0x647ae63
sub ebx, 0x40246352
sub ebx, 0x1663969b
mov dword [rsp + 0x70], eax
mov dword [rsp + 0x78], r15d
mov rdi, rdi
test r15d, r15d
je 0x14007fa0c
mov eax, 0x7be1abff
sub eax, 0xaef877c
xor eax, 0x48fefb11
sub eax, 0x37fcdf92
mov rcx, qword [rsp + 0x60]
xchg r13, r13
mov r14d, esi
shl r14d, 0x13
shl r14d, 1
mov edi, r13d
mov dword [rsp - 0x14], ebp
sub edi, r14d
xchg r9, rdx
mov r9, rbp
xchg rdx, r9
cmp edi, eax
cmova edi, eax
mov dword [rsp - 0x20], 0x46df55f2
mov r8d, edi
call fcn.140092de0
test al, al
mov dword [rsp - 0x44], 0x147990ac
je 0x14007fa07
shr edi, 2
xor r8d, r8d
shr r14d, 1
shr r14d, 1
test edi, edi
je 0x14007f9dd
mov dword [rsp - 0x30], edi
mov r15d, dword [rsp + 0x70]
xchg rbp, rsp
mov r9, rsp
xchg rbp, rsp
lea eax, [r14 + r8]
xchg r12, r12
mov edx, r15d
xor edx, dword [r9]
add r8d, ebx
mov rbx, rbx
xor edx, 0x39a0640c
lea r9, [r9 + 4]
mov dword [r12 + rax*4], edx
mov dword [rsp - 0x18], edi
cmp r8d, edi
jb 0x14007f9aa
mov r15d, dword [rsp + 0x78]
add esi, ebx
xchg r10, r10
mov eax, 0x4613aad3
xor eax, 0x73820a25
xor eax, 0x5bcc40a
sub eax, 0x301d64fc
cmp esi, r15d
xchg r9, r9
jb 0x14007f93a
jmp 0x14007fa0c
xor bl, bl
mov rbx, rbx
mov rcx, rbp
call fcn.140098a80
mov al, bl
mov dword [rsp - 0x38], 0x659aee7f
xchg rbx, rsi
mov rsi, qword [rsp + 0x68]
xchg rsi, rbx
nop
sub rsp, 0x1f4e2e46
add rsp, 0x1f4e2e66
nop
add rsp, 8
mov r15, qword [rsp - 8]
nop
mov r14, qword [rsp]
add rsp, 8
nop
mov r13, qword [rsp]
add rsp, 8
pop r12
pop rdi
pop rsi
mov dword [rsp - 0x40], 0x52a4aa4e
nop
add rsp, 8
mov rbp, qword [rsp - 8]
ret