joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140053e10
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x28]
mov byte [rsp + 0x28], al
mov dword [rsp - 0x38], 0x49ddcbdf
jmp 0x14008cea1
mov r10, rcx
mov eax, dword [0x140141fc8]
mov dword [rsp - 0x10], 0x6ec54876
cmp qword [0x140142018], 0
jne 0x14008c5b0
syscall
mov dword [rsp - 0x30], 0x377a02fb
ret

Function at 0x140053e30
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c631
xchg r10, rbx
mov rbx, rcx
xchg r10, rbx
mov eax, dword [0x140141f00]
cmp qword [0x140142018], 0
mov dword [rsp - 0x24], 0xb64d99d
jne 0x14008c5b0
syscall
ret

Function at 0x140053e40
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008cbf1
mov r10, rcx
mov dword [rsp - 0x28], 0x6b9d4e94
mov eax, dword [0x140141f88]
cmp qword [0x140142018], 0
jne 0x14008c5b0
syscall
mov dword [rsp - 0x1c], 0x83f554d
ret

Function at 0x140053e50
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ca9e
xchg r10, rbx
mov rbx, rcx
xchg rbx, r10
mov eax, dword [0x140141f68]
mov dword [rsp - 0x18], esi
cmp qword [0x140142018], 0
jne 0x14008c5b0
syscall
mov dword [rsp - 0x20], esi
ret

Function at 0x140053e60
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c691
xchg rbp, rcx
mov r10, rbp
xchg rbp, rcx
mov eax, dword [0x140141f08]
mov r14, r14
cmp qword [0x140142018], 0
jne 0x14008c5b0
syscall
mov dword [rsp - 0x1c], ecx
ret

Function at 0x140053e70
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008cd18
xchg r10, r14
mov r14, rcx
xchg r14, r10
mov eax, dword [0x140141fa4]
cmp qword [0x140142018], 0
mov dword [rsp - 0x30], 0x2c86a26
jne 0x14008c5b0
syscall
ret

Function at 0x140053e80
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008cd46
xchg rdi, rcx
mov r10, rdi
xchg rcx, rdi
mov eax, dword [0x140141fa8]
mov dword [rsp - 0x24], 0x7ab12928
cmp qword [0x140142018], 0
jne 0x14008c5b0
syscall
ret

Function at 0x140053e90
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008cc73
xchg rdx, rcx
mov r10, rdx
xchg rcx, rdx
mov eax, dword [0x140141f94]
cmp qword [0x140142018], 0
mov dword [rsp - 0x44], esp
jne 0x14008c5b0
syscall
ret

Function at 0x140053ea0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008cc9d
xchg rbp, rcx
mov r10, rbp
xchg rbp, rcx
mov eax, dword [0x140141f98]
mov dword [rsp - 0x14], edx
cmp qword [0x140142018], 0
jne 0x14008c5b0
syscall
mov dword [rsp - 0x34], ecx
ret

Function at 0x140053eb0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c874
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140141f34]
mov rdx, rdx
cmp qword [0x140142018], 0
jne 0x14008c5b0
syscall
mov dword [rsp - 0x20], 0x2ce2a3c8
ret

Function at 0x140053ec0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008cb53
mov r10, rcx
mov eax, dword [0x140141f78]
mov r9, r9
cmp qword [0x140142018], 0
jne 0x14008c5b0
syscall
ret

Function at 0x140053ed0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008cba1
mov r10, rcx
mov dword [rsp - 0x38], ebx
mov eax, dword [0x140141f80]
cmp qword [0x140142018], 0
jne 0x14008c5b0
syscall
mov r11, r11
ret
Function at 0x140053ee0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c663
xchg rbp, r10
mov rbp, rcx
xchg r10, rbp
mov eax, dword [0x140141f04]
cmp qword [0x140142018], 0
jne 0x14008c5b0
mov dword [rsp - 0x38], edx
syscall
ret

Function at 0x140053ef0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008cc21
xchg r10, r12
mov r12, rcx
xchg r10, r12
mov eax, dword [0x140141f8c]
cmp qword [0x140142018], 0
mov rsp, rsp
jne 0x14008c5b0
syscall
ret

Function at 0x140053f00
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ca47
xchg r10, rdx
mov rdx, rcx
xchg rdx, r10
mov eax, dword [0x140141f60]
cmp qword [0x140142018], 0
mov dword [rsp - 0x3c], 0x182da692
jne 0x14008c5b0
syscall
ret

Function at 0x140053f10
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ca75
xchg rsp, r10
mov rsp, rcx
xchg r10, rsp
mov eax, dword [0x140141f64]
mov rbx, rbx
cmp qword [0x140142018], 0
jne 0x14008c5b0
syscall
ret

Function at 0x140053f20
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c8f8
mov r10, rcx
mov eax, dword [0x140141f40]
mov dword [rsp - 0x30], 0x6dee17a
cmp qword [0x140142018], 0
jne 0x14008c5b0
syscall
xchg r13, r13
ret

Function at 0x140053f30
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x58]
mov byte [rsp + 0x58], al
movzx eax, byte [rsp + 0x48]
mov dword [rsp - 0x10], 0x26cadf75
mov byte [rsp + 0x48], al
jmp 0x14008ce76
mov r10, rcx
mov eax, dword [0x140141fc4]
mov dword [rsp - 0x20], 0x5acf243
cmp qword [0x140142018], 0
jne 0x14008c5b0
syscall
xchg rcx, rcx
ret

Function at 0x140053f50
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c76d
mov r10, rcx
mov eax, dword [0x140141f1c]
xchg rbx, rbx
cmp qword [0x140142018], 0
jne 0x14008c5b0
syscall
mov dword [rsp - 0x20], ebx
ret

Function at 0x140053f60
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c794
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140141f20]
cmp qword [0x140142018], 0
mov dword [rsp - 0x20], 0x7f75d74f
jne 0x14008c5b0
syscall
ret

Function at 0x140053f70
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c7c2
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140141f24]
cmp qword [0x140142018], 0
mov dword [rsp - 0x2c], esp
jne 0x14008c5b0
syscall
ret

Function at 0x140053f80
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c7ec
xchg rcx, r14
mov r10, r14
xchg rcx, r14
mov eax, dword [0x140141f28]
mov dword [rsp - 0x2c], 0x26bbe91
cmp qword [0x140142018], 0
jne 0x14008c5b0
syscall
ret

Function at 0x140053f90
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c741
xchg rdi, rcx
mov r10, rdi
xchg rcx, rdi
mov eax, dword [0x140141f18]
mov rdx, rdx
cmp qword [0x140142018], 0
jne 0x14008c5b0
syscall
mov r14, r14
ret

Function at 0x140053fa0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008cccb
xchg r10, rsi
mov rsi, rcx
xchg rsi, r10
mov eax, dword [0x140141f9c]
cmp qword [0x140142018], 0
xchg rsi, rsi
jne 0x14008c5b0
syscall
ret

Function at 0x140053fb0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c81a
xchg r10, rbx
mov rbx, rcx
xchg r10, rbx
mov eax, dword [0x140141f2c]
xchg r14, r14
cmp qword [0x140142018], 0
jne 0x14008c5b0
syscall
xchg r13, r13
ret
Function at 0x140053fc0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c6be
xchg rcx, rbp
mov r10, rbp
xchg rbp, rcx
mov eax, dword [0x140141f0c]
mov dword [rsp - 0x30], esp
cmp qword [0x140142018], 0
jne 0x14008c5b0
syscall
mov rsp, rsp
ret

Function at 0x140053fd0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c8a5
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140141f38]
cmp qword [0x140142018], 0
mov dword [rsp - 0x24], ebx
jne 0x14008c5b0
syscall
ret

Function at 0x140053fe0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008cafd
xchg rdi, rcx
mov r10, rdi
xchg rdi, rcx
mov eax, dword [0x140141f70]
mov dword [rsp - 0x3c], ebx
cmp qword [0x140142018], 0
jne 0x14008c5b0
syscall
mov r15, r15
ret

Function at 0x140053ff0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008cb76
mov r10, rcx
mov eax, dword [0x140141f7c]
xchg rbp, rbp
cmp qword [0x140142018], 0
jne 0x14008c5b0
syscall
mov dword [rsp - 0x30], 0x38590d9a
ret

Function at 0x140054010
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c714
xchg r12, r10
mov r12, rcx
xchg r12, r10
mov eax, dword [0x140141f14]
mov dword [rsp - 0x2c], esp
cmp qword [0x140142018], 0
jne 0x14008c5b0
syscall
mov r13, r13
ret

Function at 0x140054020
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ce4c
xchg rcx, rbp
mov r10, rbp
xchg rcx, rbp
mov eax, dword [0x140141fc0]
mov dword [rsp - 0x30], esi
cmp qword [0x140142018], 0
jne 0x14008c5b0
syscall
ret

Function at 0x140054030
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ccf4
mov r10, rcx
mov eax, dword [0x140141fa0]
cmp qword [0x140142018], 0
mov dword [rsp - 0x24], esp
jne 0x14008c5b0
syscall
ret

Function at 0x140054040
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008cdee
xchg rcx, rsp
mov r10, rsp
xchg rsp, rcx
mov eax, dword [0x140141fb8]
mov dword [rsp - 0x18], 0x7d7c759e
cmp qword [0x140142018], 0
jne 0x14008c5b0
syscall
xchg r13, r13
ret

Function at 0x140054050
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008cbc8
xchg rbx, rcx
mov r10, rbx
xchg rcx, rbx
mov eax, dword [0x140141f84]
xchg r9, r9
cmp qword [0x140142018], 0
jne 0x14008c5b0
syscall
ret

Function at 0x140054060
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ce1f
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140141fbc]
mov rdi, rdi
cmp qword [0x140142018], 0
jne 0x14008c5b0
syscall
mov dword [rsp - 0x44], ebp
ret

Function at 0x140054070
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c6eb
xchg rcx, rsi
mov r10, rsi
xchg rcx, rsi
mov eax, dword [0x140141f10]
cmp qword [0x140142018], 0
jne 0x14008c5b0
mov r12, r12
syscall
ret

Function at 0x140054080
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c8cf
xchg rcx, r11
mov r10, r11
xchg r11, rcx
mov eax, dword [0x140141f3c]
xchg rsp, rsp
cmp qword [0x140142018], 0
jne 0x14008c5b0
syscall
ret
Function at 0x14006720c
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r11
mov qword [rsp + 0x10], r11
xchg rbx, r11
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
mov rdx, rdx
nop
sub rsp, 8
mov qword [rsp], rbp
xchg rsp, rbp
mov rsp, rbp
xchg rbp, rsp
nop
add rsp, 0x277f2e6b
sub rsp, 0x277f2ecb
movabs rbx, 0x2d264c3e0d30b08a
xor rbx, 0x2b5b187e
add rbx, 0x39fba1d7
add rbx, 0x1915b97d
xchg r8, rcx
mov rdi, r8
xchg r8, rcx
cmp qword [rcx + 0x30], rbx
mov dword [rsp - 0x10], 0x70cfb003
jne 0x140067428
xor esi, esi
mov dword [rbp - 0x40], 0x389a5691
sub dword [rbp - 0x40], 0x97aa49b
xor dword [rbp - 0x40], 0x661b3387
sub dword [rbp - 0x40], 0x2bbf3179
sub dword [rbp - 0x40], 0x1cf04fff
mov dword [rbp - 0x3c], 0x30e959eb
add dword [rbp - 0x3c], 0x2705152c
add dword [rbp - 0x3c], 0x250cebc6
sub dword [rbp - 0x3c], 0x7cbf59e8
mov dword [rbp - 0x38], 0x64013f42
sub dword [rbp - 0x38], 0x36857e08
xor dword [rbp - 0x38], 0x3eb9c0f1
xor dword [rbp - 0x38], 0x139a0103
mov dword [rbp - 0x34], 0x55ccc3b
add dword [rbp - 0x34], 0x5b3cc122
xor dword [rbp - 0x34], 0x157085ad
xor dword [rbp - 0x34], 0x75860840
mov dword [rbp - 0x30], 0x3d0fccc7
sub dword [rbp - 0x30], 0x2c27c1a1
xor dword [rbp - 0x30], 0x658db5be
xor dword [rbp - 0x30], 0x7530be0e
mov dword [rbp - 0x2c], 0x2ed6c9ef
add dword [rbp - 0x2c], 0x2fe08f23
sub dword [rbp - 0x2c], 0x145257e7
xor dword [rbp - 0x2c], 0x47de7582
sub dword [rbp - 0x2c], 0xd8a73ba
mov qword [rbp + 0x10], rsi
xchg r15, r15
mov rax, qword [rbp + 0x10]
mov rcx, qword [rbp + 0x10]
xchg r9, rax
mov r9, qword [rbp + 0x10]
xchg r9, rax
and cl, 3
mov dword [rsp - 0x10], 0x673675a5
shl cl, 2
shl cl, 1
movzx edx, word [rbp + rax*2 - 0x40]
mov eax, 0x275c4807
add eax, 0x40d2a14
xor eax, 0x248f3c3b
add eax, 0x4d9ce398
shr eax, cl
movzx ecx, al
mov r14, r14
mov rax, qword [rbp + 0x10]
xor cx, dx
mov word [rbp + rax*2 - 0x28], cx
mov dword [rsp - 0x34], esp
xchg r10, rax
mov r10, qword [rbp + 0x10]
xchg r10, rax
inc rax
mov dword [rsp - 0x14], 0x639cc48e
mov qword [rbp + 0x10], rax
xchg r15, rax
mov r15, qword [rbp + 0x10]
xchg r15, rax
cmp rax, 0xc
xchg rsp, rsp
jb 0x140067342
xor edx, edx
mov word [rbp - 0x10], si
mov dword [rsp - 0x18], edx
lea rcx, [rbp - 0x28]
call fcn.140089ff0
xchg rsp, rax
mov rdx, rsp
xchg rsp, rax
xchg r8, rax
mov rax, r8
xchg r8, rax
xor eax, eax
xchg r12, r12
xor rdx, rbx
xchg rdx, rsi
mov qword [rdi + 0x30], rsi
xchg rsi, rdx
lea rdi, [rbp - 0x28]
lea ecx, [rax + 0xc]
mov dword [rsp - 0x30], 0x5e1ecf35
rep stosb byte [rdi], al
cmp rdx, rbx
je 0x140067430
mov r15, r15
lea rdx, [0x1401412c0]
mov rcx, r8
call fcn.14006bce0
mov dword [rsp - 0x3c], ecx
test al, al
setne al
jmp 0x140067430
mov al, 0x17
add al, 0x27
xor al, 0x3c
sub al, 1
lea r11, [rsp + 0x60]
xchg rsi, rsi
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov dword [rsp - 0xc], ebx
mov rsp, r11
nop
add rsp, 8
mov rbp, qword [rsp - 8]
ret
Function at 0x140067458
Capabilities:
Encode data using xor

Disassembly:
xchg r11, rbx
mov qword [rsp + 0x10], r11
xchg rbx, r11
xchg rbx, rsi
mov qword [rsp + 0x18], rbx
xchg rbx, rsi
xchg rdi, rcx
mov qword [rsp + 0x20], rcx
xchg rcx, rdi
push rbp
mov r13, r13
xchg rbp, rsp
mov rsp, rbp
xchg rbp, rsp
sub rsp, 0x50
mov r9, r9
movabs rbx, 0x2d264c3e280913a8
add rbx, 0x31f40bdd
sub rbx, 0x35889442
add rbx, 0x55087905
xchg rdi, r13
mov r13, rcx
xchg r13, rdi
cmp qword [rcx + 0x28], rbx
jne 0x140067650
mov dword [rsp - 0x2c], ecx
mov eax, 0x52fff393
sub eax, 0x216eee8
xor eax, 0x6bd5ba86
sub eax, 0x3b3cbd59
mov dword [rbp - 0x30], 0x52292d37
add dword [rbp - 0x30], 0x19c47947
xor dword [rbp - 0x30], 0x568c5cea
sub dword [rbp - 0x30], 0x3d04f99d
mov word [rbp - 0x20], ax
xchg r13, r13
xor esi, esi
mov dword [rbp - 0x2c], 0xa5b25d0
add dword [rbp - 0x2c], 0x31450e52
sub dword [rbp - 0x2c], 0x32c7349c
sub dword [rbp - 0x2c], 0x86afea0
mov dword [rbp - 0x28], 0x56c25964
sub dword [rbp - 0x28], 0x22aecc95
add dword [rbp - 0x28], 0x34564504
sub dword [rbp - 0x28], 0x23d33f03
xor dword [rbp - 0x28], 0x4489925a
mov dword [rbp - 0x24], 0x670f88d2
add dword [rbp - 0x24], 0xb911df2
add dword [rbp - 0x24], 0xa60cb84
xor dword [rbp - 0x24], 0x7d3072af
mov qword [rbp + 0x10], rsi
xchg rsi, rax
mov rsi, qword [rbp + 0x10]
xchg rsi, rax
xchg r12, rcx
mov r12, qword [rbp + 0x10]
xchg rcx, r12
xchg r10, rax
mov r10, qword [rbp + 0x10]
xchg r10, rax
and cl, 3
mov dword [rsp - 0x2c], 0x39a204d9
shl cl, 3
movzx edx, word [rbp + rax*2 - 0x30]
mov eax, 0x69722ba0
xor eax, 0x5be7aa7e
sub eax, 0x2cb47a61
xor eax, 0x3f47f8d2
add eax, 0x22dc3209
shr eax, cl
mov dword [rsp - 0x1c], esi
movzx ecx, al
xchg r13, rax
mov r13, qword [rbp + 0x10]
xchg r13, rax
xor cx, dx
mov word [rbp + rax*2 - 0x1e], cx
xchg r13, rax
mov r13, qword [rbp + 0x10]
xchg r13, rax
inc rax
mov dword [rsp - 0x1c], ecx
xchg r13, rax
mov qword [rbp + 0x10], r13
xchg r13, rax
mov rax, qword [rbp + 0x10]
cmp rax, 9
mov dword [rsp - 0x3c], esi
jb 0x140067563
xor edx, edx
mov word [rbp - 0xc], si
lea rcx, [rbp - 0x1e]
xchg rsp, rsp
call fcn.140089ff0
xchg rdx, rbp
mov rbp, rax
xchg rbp, rdx
mov r8, rax
xchg r15, r15
xor eax, eax
xor rdx, rbx
mov qword [rdi + 0x28], rdx
mov dword [rsp - 0x14], 0x55b8bbdf
lea rdi, [rbp - 0x1e]
lea ecx, [rax + 9]
rep stosb byte [rdi], al
mov r11, r11
cmp rdx, rbx
je 0x140067658
lea rdx, [0x140141810]
mov dword [rsp - 0x38], esp
xchg rcx, r14
mov r14, r8
xchg r14, rcx
call fcn.1400705cc
mov rdx, rdx
test al, al
setne al
jmp 0x140067658
mov al, 0xc
add al, 0x67
sub al, 0x1d
sub al, 0x55
mov rbx, qword [rsp + 0x68]
xchg r13, r13
xchg rdi, rsi
mov rdi, qword [rsp + 0x70]
xchg rsi, rdi
xchg r10, rdi
mov r10, qword [rsp + 0x78]
xchg rdi, r10
neg rsp
add rsp, 0xffffffffffffffb0
neg rsp
pop rbp
mov dword [rsp - 0x10], 0x62c0b43b
ret
Function at 0x14006768c
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, rsi
mov qword [rsp + 0x10], rsi
xchg rbx, rsi
xchg r13, rsi
mov qword [rsp + 0x18], r13
xchg r13, rsi
mov qword [rsp + 0x20], rdi
xchg rbx, rbx
push rbp
xchg rsp, rbp
mov rsp, rbp
xchg rsp, rbp
add rsp, 0xffffffffffffffb0
movabs rbx, 0x2d264c3e629ba85e
sub rbx, 0x20e47b01
sub rbx, 0x84aca11
add rbx, 0x4010a0fc
xchg rcx, rdi
mov rcx, rdi
xchg rdi, rcx
cmp qword [rcx + 0x38], rbx
jne 0x140067883
xor esi, esi
mov dword [rsp - 0x18], edx
mov dword [rbp - 0x30], 0x7b6af46d
xor dword [rbp - 0x30], 0x72881f15
add dword [rbp - 0x30], 0x33c52c33
sub dword [rbp - 0x30], 0x15c941d0
sub dword [rbp - 0x30], 0x279dd4f1
mov dword [rbp - 0x2c], 0x5836943
add dword [rbp - 0x2c], 0x4e1df1dc
xor dword [rbp - 0x2c], 0xeab2be1
sub dword [rbp - 0x2c], 0x1d55ffaf
xor dword [rbp - 0x2c], 0x3f9b71af
mov dword [rbp - 0x28], 0x5a44199a
sub dword [rbp - 0x28], 0x3c1fe53c
xor dword [rbp - 0x28], 0x3ac235a8
sub dword [rbp - 0x28], 0x24e1012a
mov dword [rbp - 0x24], 0x6fe914a4
add dword [rbp - 0x24], 0x6ea250c
add dword [rbp - 0x24], 0x1e72e09
sub dword [rbp - 0x24], 0x1358569a
xor dword [rbp - 0x24], 0x655b11b2
mov dword [rbp - 0x20], 0x5be03dfb
sub dword [rbp - 0x20], 0x2042b29d
xor dword [rbp - 0x20], 0x5bf02a18
sub dword [rbp - 0x20], 0x6010a072
mov qword [rbp + 0x10], rsi
xchg rcx, rax
mov rcx, qword [rbp + 0x10]
xchg rcx, rax
xchg rcx, r13
mov r13, qword [rbp + 0x10]
xchg r13, rcx
mov rax, qword [rbp + 0x10]
mov r11, r11
and cl, 3
shl cl, 1
shl cl, 1
shl cl, 1
movzx edx, word [rbp + rax*2 - 0x30]
mov dword [rsp - 0x10], ecx
mov eax, 0x42a3029b
xor eax, 0x73a89eb1
sub eax, 0x1abf584d
add eax, 0x9d51446
add eax, 0x3d61d995
shr eax, cl
movzx ecx, al
mov r15, r15
xchg rsi, rax
mov rsi, qword [rbp + 0x10]
xchg rsi, rax
xor cx, dx
mov word [rbp + rax*2 - 0x1c], cx
mov rax, qword [rbp + 0x10]
mov r10, r10
inc rax
mov qword [rbp + 0x10], rax
xchg rdi, rax
mov rdi, qword [rbp + 0x10]
xchg rdi, rax
cmp rax, 0xa
mov dword [rsp - 0x2c], ebx
jb 0x14006779d
xor edx, edx
mov word [rbp - 8], si
lea rcx, [rbp - 0x1c]
mov rbp, rbp
call fcn.140089ff0
xchg rdx, rax
mov rax, rdx
xchg rdx, rax
xchg r8, rax
mov rax, r8
xchg r8, rax
xor eax, eax
mov dword [rsp - 0x40], edi
xor rdx, rbx
xchg rbp, rdx
mov qword [rdi + 0x38], rbp
xchg rdx, rbp
lea rdi, [rbp - 0x1c]
lea ecx, [rax + 0xa]
rep stosb byte [rdi], al
xchg r13, r13
cmp rdx, rbx
je 0x14006788d
lea rdx, [0x140141830]
xchg rbx, rbx
xchg r8, rcx
mov r8, rcx
xchg r8, rcx
call fcn.1400709bc
mov dword [rsp - 0x34], esp
test al, al
setne al
jmp 0x14006788d
mov al, 0x4c
add al, 0x15
sub al, 2
xor al, 0x15
xor al, 0x4b
mov rbx, qword [rsp + 0x68]
mov dword [rsp - 0x40], edi
xchg rbx, rsi
mov rbx, qword [rsp + 0x70]
xchg rsi, rbx
xchg rdi, r11
mov r11, qword [rsp + 0x78]
xchg r11, rdi
nop
sub rsp, 0x1ee2d128
add rsp, 0x1ee2d178
pop rbp
mov dword [rsp - 0x2c], 0x26921dda
ret
Function at 0x1400678c8
Capabilities:
Encode data using xor

Disassembly:
xchg r10, rbx
mov qword [rsp + 0x10], r10
xchg rbx, r10
xchg r15, rsi
mov qword [rsp + 0x18], r15
xchg rsi, r15
xchg rdi, rdx
mov qword [rsp + 0x20], rdx
xchg rdx, rdi
push rbp
xchg rbp, rsp
mov rsp, rbp
xchg rsp, rbp
sub rsp, 0x50
mov dword [rsp - 0x24], ecx
movabs rbx, 0x2d264c3e1fb0a103
add rbx, 0x85ee4b9
sub rbx, 0x2521b277
add rbx, 0x368ea14a
xor rbx, 0x400170c7
xchg rcx, r13
mov rdi, r13
xchg r13, rcx
cmp qword [rcx + 0x20], rbx
mov rsp, rsp
jne 0x140067af5
mov eax, 0x67d1927
xor eax, 0x41dbfc9c
xor eax, 0x1afe4be9
xor eax, 0x6cf7986e
sub eax, 0x31af354d
mov dword [rbp - 0x30], 0x7ddb2b01
xor dword [rbp - 0x30], 0x5369c79e
add dword [rbp - 0x30], 0x3674f45e
sub dword [rbp - 0x30], 0x64cee012
mov word [rbp - 0x1c], ax
mov r11, r11
xor esi, esi
mov dword [rbp - 0x2c], 0x7edf8400
sub dword [rbp - 0x2c], 0x44824b58
xor dword [rbp - 0x2c], 0x78d7230c
add dword [rbp - 0x2c], 0x8d3241
xor dword [rbp - 0x2c], 0x43264d03
mov dword [rbp - 0x28], 0x12ef3f4
xor dword [rbp - 0x28], 0x4febf2a7
add dword [rbp - 0x28], 0x1824fe4d
xor dword [rbp - 0x28], 0x4438c7a8
sub dword [rbp - 0x28], 0x22cf3734
mov dword [rbp - 0x24], 0x4cbe7837
add dword [rbp - 0x24], 0x13d20c3
sub dword [rbp - 0x24], 0x3b4a2c15
sub dword [rbp - 0x24], 0x123e6c34
mov dword [rbp - 0x20], 0x7287e014
sub dword [rbp - 0x20], 0x2fc9f092
add dword [rbp - 0x20], 0x512bf4b
sub dword [rbp - 0x20], 0x44f080d0
xor dword [rbp - 0x20], 0x2bd2d21
mov qword [rbp + 0x10], rsi
xchg rbx, rax
mov rbx, qword [rbp + 0x10]
xchg rbx, rax
mov rcx, qword [rbp + 0x10]
mov dword [rsp - 0x34], 0x43f8a6ee
xchg rcx, rax
mov rcx, qword [rbp + 0x10]
xchg rcx, rax
and cl, 3
shl cl, 3
movzx edx, word [rbp + rax*2 - 0x30]
mov dword [rsp - 0xc], 0x390e7ef3
mov eax, 0x52c46da9
sub eax, 0x470a6a51
add eax, 0x30428a0
xor eax, 0x62903ce3
sub eax, 0xeaae563
shr eax, cl
movzx ecx, al
mov dword [rsp - 0x24], 0x446fce68
xchg r9, rax
mov r9, qword [rbp + 0x10]
xchg r9, rax
xor cx, dx
mov dword [rsp - 0x28], edx
mov word [rbp + rax*2 - 0x1a], cx
xchg rdx, rax
mov rdx, qword [rbp + 0x10]
xchg rdx, rax
inc rax
xchg r14, rax
mov qword [rbp + 0x10], r14
xchg r14, rax
mov rax, qword [rbp + 0x10]
mov r14, r14
cmp rax, 0xb
jb 0x140067a06
xor edx, edx
mov rbp, rbp
mov word [rbp - 4], si
lea rcx, [rbp - 0x1a]
call fcn.140089ff0
xchg rsi, rax
mov rdx, rsi
xchg rsi, rax
xchg r8, rax
mov rax, r8
xchg r8, rax
xor eax, eax
mov dword [rsp - 0x40], 0x35702692
xor rdx, rbx
mov qword [rdi + 0x20], rdx
lea rdi, [rbp - 0x1a]
lea ecx, [rax + 0xb]
mov rdx, rdx
rep stosb byte [rdi], al
cmp rdx, rbx
je 0x140067afd
lea rdx, [0x140141298]
mov r13, r13
mov rcx, r8
call fcn.140070da4
test al, al
mov dword [rsp - 0x1c], 0x3687d2ff
setne al
jmp 0x140067afd
mov al, 0x60
sub al, 0x36
xor al, 0x6c
sub al, 0x45
xchg rbx, rcx
mov rcx, qword [rsp + 0x68]
xchg rbx, rcx
xchg r12, rsi
mov r12, qword [rsp + 0x70]
xchg r12, rsi
mov rdi, qword [rsp + 0x78]
nop
sub rsp, 0x706e93f4
add rsp, 0x706e9444
pop rbp
xchg r8, r8
ret
Function at 0x140072afc
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rsi
mov r10, r10
nop
sub rsp, 8
mov qword [rsp], rdi
nop
add rsp, 0x1e1e42ca
sub rsp, 0x1e1e432a
lea rax, [rcx + 8]
mov qword [rsp + 0x70], rbx
mov qword [rcx], rax
xchg r11, r11
xorps xmm0, xmm0
xchg r12, rax
movups xmmword [r12], xmm0
xchg r12, rax
xchg rsi, rsp
mov rsp, rcx
xchg rsi, rsp
xchg rbp, r12
mov qword [rsp + 0x78], r12
xchg r12, rbp
xchg rdi, rax
movups xmmword [rdi + 0x10], xmm0
xchg rdi, rax
lea rcx, [rsp + 0x20]
xchg r13, rax
movups xmmword [r13 + 0x20], xmm0
xchg r13, rax
xchg rdx, rax
movups xmmword [rdx + 0x30], xmm0
xchg rdx, rax
xchg r9, rax
movups xmmword [r9 + 0x40], xmm0
xchg r9, rax
movups xmmword [rax + 0x50], xmm0
mov dword [rsp - 0x24], 0x2babc22b
xchg r8, rax
movups xmmword [r8 + 0x60], xmm0
xchg r8, rax
xchg rcx, rax
movups xmmword [rcx + 0x70], xmm0
xchg rcx, rax
xchg rbp, r11
mov r11, qword [rdx + 0x38]
xchg rbp, r11
lea rax, [rsp + 0x28]
mov rbx, qword [rdx]
mov qword [rsp + 0x20], rax
mov dword [rsp - 0x18], edx
xchg r11, rsp
movups xmmword [r11 + 0x28], xmm0
xchg rsp, r11
lea rdx, [rbp + 1]
mov dword [rsp - 0x2c], 0x58519f7b
xchg rcx, rsp
movups xmmword [rcx + 0x38], xmm0
xchg rsp, rcx
xchg rdi, rsp
movups xmmword [rdi + 0x48], xmm0
xchg rdi, rsp
call fcn.140017bec
mov edx, 0x770ccc7c
sub edx, 0x63e9fbe4
add edx, 0x67282276
xor edx, 0x4e0c399b
xor edx, 0x69c5fb2d
test rbp, rbp
je 0x140072b93
xchg r13, rax
mov rdi, r13
xchg r13, rax
sub rbx, rax
mov dword [rsp - 0xc], esp
xchg r9, rbx
mov rbx, rbp
xchg r9, rbx
mov r8d, 0x506120e6
sub r8d, 0xc55190d
sub r8d, 0x3cd52630
sub r8d, 0x736e0aa
nop word [rax + rax]
mov dword [rsp - 0x20], 0x3ea7828e
movzx ecx, dx
lea rdi, [rdi + 2]
and cx, r8w
ror edx, 8
mov dword [rsp - 0x2c], 0x774a3402
xor cx, word [rbx + rdi - 2]
mov word [rdi - 2], cx
sub r9, 1
mov r13, r13
jne 0x140072b67
xor ecx, ecx
mov r8, rbp
mov word [rax + rbp*2], cx
mov r9, r9
xchg rcx, r13
mov r13, rsi
xchg r13, rcx
mov rdx, qword [rsp + 0x20]
mov dword [rsp - 0x1c], 0x43a780a4
call fcn.14008fff0
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x28]
mov dword [rsp - 0x10], ebx
xchg r12, rbp
mov r12, qword [rsp + 0x78]
xchg rbp, r12
xchg rsi, rbx
mov rsi, qword [rsp + 0x70]
xchg rsi, rbx
cmp rcx, rax
mov dword [rsp - 0x18], edi
jne 0x140072c34
xor eax, eax
lea rdi, [rsp + 0x28]
mov ecx, 0x59dd70ff
add ecx, 0x18e386b7
sub ecx, 0x659ae88f
sub ecx, 0xd260ef7
rep stosb byte [rdi], al
mov dword [rsp - 0x28], 0x257d0206
xchg r12, rax
mov r12, rsi
xchg r12, rax
mov rsi, qword [rsp + 0x80]
xchg r15, r15
add rsp, 0x60
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret
call fcn.140097d00
xchg rsi, rax
mov rsi, rax
xchg rsi, rax
xchg rsi, r9
mov r9, qword [rsp + 0x80]
xchg rsi, r9
neg rsp
add rsp, 0xffffffffffffffa0
neg rsp
pop rdi
mov rsi, rsi
ret
Function at 0x14007d734
Capabilities:
Encode data using xor

Disassembly:
xor r9d, r9d
lea r10, [0x140001910]
mov dword [rsp - 0x20], 0x48c0920e
sub r10, rcx
xchg rcx, r10
mov r8, r10
xchg r10, rcx
lea rax, [r9 + r8]
mov r10, r10
mov ecx, r9d
mov edx, 0x5532420
xor edx, 0x2bab4bd1
xor edx, 0x164c5da5
xor edx, 0x38dc2ccc
xor edx, 0x200179cd
inc r9
xchg rcx, rcx
rol edx, cl
xor dl, byte [r10 + rax]
mov byte [rax], dl
mov dword [rsp - 0x30], 0x1224041a
cmp r9, 0x10
jb 0x14007d752
xchg r10, rax
mov r10, r8
xchg r10, rax
ret