joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140053af0
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r11
mov qword [rsp + 8], r11
xchg r11, rbx
xchg rbp, rdx
mov qword [rsp + 0x10], rdx
xchg rbp, rdx
xchg r15, rsi
mov qword [rsp + 0x20], r15
xchg r15, rsi
mov word [rsp + 0x18], r8w
nop
sub rsp, 8
mov qword [rsp], rdi
nop
sub rsp, 8
mov qword [rsp], r12
nop
mov qword [rsp - 8], r13
sub rsp, 8
nop
mov qword [rsp - 8], r14
sub rsp, 8
push r15
add rsp, 0xffffffffffffffa0
mov r12, qword [rdx + 0x38]
mov rcx, rcx
xchg rdx, rsp
mov rdi, rsp
xchg rsp, rdx
xchg r9, r15
mov r9, rcx
xchg r9, r15
neg r12
add r12, 0xfffffffffffffffe
neg r12
mov eax, 0x5e8d0bb4
sub eax, 0x27d8ece7
sub eax, 0x115ad7ec
xor eax, 0x255946e3
nop
movabs rsi, 0xffffffff74b6bb6d
xor rsi, 0x30cdf23e
sub rsi, 0x31369192
add rsi, 0x40b2affc
add rsi, 0x7fffffff
xor rsi, 0x2c089843
mul r12
cmovo rax, rsi
xchg r13, rax
mov rcx, r13
xchg r13, rax
call fcn.140098350
xchg r11, r13
mov r11, qword [rdi + 0x38]
xchg r13, r11
lea rcx, [rsp + 0x20]
xchg r12, rbp
mov r12, qword [rdi]
xchg rbp, r12
xorps xmm0, xmm0
mov dword [rsp - 0x28], esi
mov r14, rax
lea rax, [rsp + 0x28]
xchg rdx, rax
mov qword [rsp + 0x20], rdx
xchg rdx, rax
lea rdx, [r13 + 1]
xchg rsp, r13
movups xmmword [r13 + 0x28], xmm0
xchg r13, rsp
movups xmmword [rsp + 0x38], xmm0
xchg rsp, r13
movups xmmword [r13 + 0x48], xmm0
xchg r13, rsp
call fcn.140017a38
mov ebx, 0x1773b369
add ebx, 0x17e01ad1
xor ebx, 0x4696c7e4
sub ebx, 0x10e6be7c
xchg rcx, rax
mov r8, rcx
xchg rcx, rax
mov ecx, ebx
mov r9d, 0x30bb7e67
add r9d, 0x69c081a
sub r9d, 0xcae19bf
xor r9d, 0x1da9aea5
sub r9d, 0x3700c168
test r13, r13
xchg r11, r11
je 0x140053ca7
xchg rdx, rsi
mov rsi, rax
xchg rsi, rdx
sub rbp, rax
mov rdx, rdx
xchg rsp, rdi
mov rsp, r13
xchg rdi, rsp
nop dword [rax]
xchg rbx, rbx
movzx eax, cx
lea rdx, [rdx + 2]
and ax, r9w
ror ecx, 2
ror ecx, 6
xor ax, word [rdx + rbp - 2]
mov dword [rsp - 0x40], 0x757c207e
mov word [rdx - 2], ax
sub rdi, 1
jne 0x140053c7b
xor ebp, ebp
xchg r8, r8
xchg rdx, r12
mov r12, rdx
xchg r12, rdx
mov word [r8 + r13*2], bp
mov dword [rsp - 0x28], 0x732abdd1
mov rcx, r14
mov r8, qword [rsp + 0x20]
call fcn.140099560
xchg rcx, r12
mov r12, qword [rsp + 0x20]
xchg r12, rcx
lea rax, [rsp + 0x28]
cmp rcx, rax
jne 0x140053d11
mov dword [rsp - 0x3c], ebp
lea rdi, [rsp + 0x28]
xor eax, eax
mov ecx, 0x4f0810a3
xor ecx, 0x1340d
xor ecx, 0xd3c42b6
call fcn.1400984b0
Function at 0x140053e60
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov dword [rsp - 0x44], edx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
add rsp, 0xffffffffffffffe0
xchg r15, rsi
mov r15, qword [rcx + 0x38]
xchg rsi, r15
mov rbx, rdx
mov dword [rsp - 0x38], 0x2516bbd2
mov r8, qword [rdx + 0x38]
xchg rcx, r14
mov rdi, r14
xchg rcx, r14
add r8, rsi
xchg rdx, r10
mov r10, rsi
xchg r10, rdx
mov qword [rcx + 0x38], r8
xchg r11, r11
call fcn.140054b70
xchg r9, r8
mov r8, qword [rbx]
xchg r8, r9
mov ecx, esi
and ecx, 3
mov r8d, 0x7b776031
sub r8d, 0x36def021
add r8d, 0x13300e8c
xor r8d, 0x79fa921b
add r8d, 0x2aab5edb
shl ecx, 1
shl ecx, 1
shl ecx, 1
mov edx, r8d
mov rbx, rbx
ror edx, cl
xchg r14, rax
mov r10, r14
xchg r14, rax
xor ecx, ecx
xchg r14, r14
cmp qword [rbx + 0x38], rcx
jbe 0x140053f81
lea rax, [rsi + rsi]
xchg r8, r8
mov r11d, 0x31be3928
add r11d, 0x417cdd87
sub r11d, 0x1f89a23f
sub r11d, 0x53b17371
sub rax, r9
add r10, rax
nop dword [rax]
mov dword [rsp - 0x44], 0x57fedca5
movzx eax, dx
lea r9, [r9 + 2]
xor ax, r8w
mov r14, r14
ror edx, 1
ror edx, 1
ror edx, 4
ror edx, 2
and ax, r11w
mov r11, r11
ror r8d, 7
ror r8d, 1
xor ax, word [r9 - 2]
inc rcx
xchg r15, r15
mov word [r10 + r9 - 2], ax
cmp rcx, qword [rbx + 0x38]
jb 0x140053f3d
xchg rcx, rcx
mov rbx, qword [rsp + 0x30]
xchg rdx, rax
mov rdx, rdi
xchg rdx, rax
xchg rdx, rsi
mov rdx, qword [rsp + 0x38]
xchg rdx, rsi
nop
add rsp, 0x74528ef0
sub rsp, 0x74528ed0
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret
Function at 0x140053fc0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov rbp, rbp
xchg rcx, rsi
mov qword [rsp + 0x10], rcx
xchg rsi, rcx
mov qword [rsp + 0x18], rdi
mov dword [rsp - 0x1c], 0x3859491
nop
mov qword [rsp - 8], r14
sub rsp, 8
add rsp, 0xffffffffffffffe0
mov r14, qword [rcx + 0x38]
xchg r12, r12
xchg rdi, rdx
mov rdx, rdi
xchg rdi, rdx
xchg rsi, rcx
mov rcx, rsi
xchg rsi, rcx
nop
movabs rbx, 0xffffffff569d55ee
xor rbx, 0x2fa33adb
sub rbx, 0xd4d0f52
xor rbx, 0x10b8838e
add rbx, 0x7fffffff
xor rbx, 0x4b62393
inc rbx
mov r8, r8
cmp word [rdx + rbx*2], 0
jne 0x140054035
lea r8, [r14 + rbx]
mov rbp, rbp
xchg rdx, r14
mov r14, rdx
xchg rdx, r14
xchg r8, r12
mov qword [rcx + 0x38], r12
xchg r12, r8
call fcn.140054b70
mov rcx, rcx
mov ecx, r14d
mov edx, 0x6bbe6d0a
xor edx, 0x90bde72
add edx, 0x1448cd39
sub edx, 0x4c00a85f
xor edx, 0x72239330
and ecx, 3
mov dword [rsp - 0x10], 0x69d2b53c
shl ecx, 1
shl ecx, 2
ror edx, cl
test rbx, rbx
mov dword [rsp - 0x30], 0x6a3f0548
je 0x140054111
lea r8, [r14 + r14]
mov ecx, 0x304827f0
sub ecx, 0x2523d21b
xor ecx, 0x3b1eab37
sub ecx, 0x303afde3
sub r8, rdi
mov dword [rsp - 0x38], ebp
add r8, rax
nop dword [rax]
nop dword [rax + rax]
mov dword [rsp - 0x10], esp
movzx eax, dx
lea rdi, [rdi + 2]
and ax, cx
xchg r10, r10
ror edx, 4
ror edx, 3
ror edx, 1
xor ax, word [rdi - 2]
mov word [r8 + rdi - 2], ax
sub rbx, 1
mov dword [rsp - 0x3c], 0x778e6e92
jne 0x1400540e0
xchg rbx, rcx
mov rcx, qword [rsp + 0x30]
xchg rcx, rbx
mov rax, rsi
xchg r14, rsi
mov r14, qword [rsp + 0x38]
xchg r14, rsi
mov rdi, qword [rsp + 0x40]
mov dword [rsp - 0x10], 0x450b1537
nop
add rsp, 0x1b4c2829
sub rsp, 0x1b4c2809
nop
mov r14, qword [rsp]
add rsp, 8
ret
Function at 0x1400549c1
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov r13, r13
xchg rbp, rdi
mov qword [rsp + 0x18], rdi
xchg rbp, rdi
push rsi
mov dword [rsp - 0x30], edx
nop
sub rsp, 8
mov qword [rsp], rdi
nop
sub rsp, 8
mov qword [rsp], r14
add rsp, 0xffffffffffffffe0
lea rsi, [rdx + 8]
xchg rbx, rbx
xorps xmm0, xmm0
xchg rsi, rdi
mov qword [rdx], rdi
xchg rsi, rdi
xor edi, edi
movups xmmword [rsi], xmm0
xchg r10, r10
xchg r9, r11
mov r14, r11
xchg r9, r11
xchg r8, rbp
mov r8, rbp
xchg rbp, r8
xchg r8, rsi
movups xmmword [r8 + 0x10], xmm0
xchg rsi, r8
xchg rbx, r13
mov r13, rdx
xchg rbx, r13
xchg rsi, rbx
movups xmmword [rbx + 0x20], xmm0
xchg rbx, rsi
mov qword [rdx + 0x38], rdi
mov rax, qword [rcx + 0x38]
cmp r8, rax
mov r13, r13
jae 0x140054b04
sub rax, r8
mov qword [rsp + 0x40], r15
cmp rax, r9
mov dword [rsp - 0x30], esp
cmovb r14, rax
xchg rsi, r14
mov qword [rdx + 0x38], rsi
xchg rsi, r14
xchg rbp, rax
mov rbp, qword [rcx]
xchg rbp, rax
mov rcx, qword [rdx]
lea r15, [rax + r8*2]
mov dword [rsp - 0x44], 0x2010730c
cmp rcx, rsi
je 0x140054991
call fcn.1400984b0
xchg r14, r14
cmp r14, 0x18
jbe 0x1400549d2
lea rcx, [r14 + r14]
xchg rbx, rbx
call fcn.140098780
mov qword [rbx], rax
test rax, rax
mov dword [rsp - 0x3c], 0x422cc671
jne 0x1400549dc
xchg rcx, rsi
mov qword [rbx], rcx
xchg rcx, rsi
xchg r9, r14
mov r14, rdi
xchg r14, r9
jmp 0x140054a02
mov qword [rbx], rsi
xchg r8, rax
mov r8, rsi
xchg r8, rax
xorps xmm0, xmm0
mov dword [rsp - 0xc], ecx
xchg rcx, rax
movups xmmword [rcx], xmm0
xchg rcx, rax
movups xmmword [rax + 0x10], xmm0
mov r10, r10
xchg rcx, rax
movups xmmword [rcx + 0x20], xmm0
xchg rcx, rax
xchg r9, rsp
mov rsp, qword [rbx]
xchg r9, rsp
and ebp, 3
mov r8d, 0x12c57486
xor r8d, 0x4438185
add r8d, 0x348e1e86
sub r8d, 0x3f4e016d
add r8d, 0x4d173946
shl ebp, 3
mov edx, r8d
movzx ecx, bpl
mov r10, r10
ror edx, cl
cmp qword [rbx + 0x38], rdi
jbe 0x140054ab3
sub r15, r9
mov dword [rsp - 0x34], esp
mov ecx, 0x262fa5d4
sub ecx, 0x5a3664f
xor ecx, 0x2cb0f5f0
xor ecx, 0x4bde9d95
xor ecx, 0x47e2571f
nop dword [rax]
nop word [rax + rax]
mov dword [rsp - 0x18], ebp
movzx eax, dx
lea r9, [r9 + 2]
xor ax, r8w
ror edx, 1
ror edx, 7
and ax, cx
ror r8d, 3
ror r8d, 4
ror r8d, 1
xor ax, word [r15 + r9 - 2]
inc rdi
mov dword [rsp - 0x38], 0x358919e1
mov word [r9 - 2], ax
cmp rdi, qword [rbx + 0x38]
jb 0x140054a75
mov r15, qword [rsp + 0x40]
mov dword [rsp - 0x30], 0x41969e5e
xchg rbx, r8
mov rax, r8
xchg rbx, r8
xchg rbx, r9
mov r9, qword [rsp + 0x48]
xchg r9, rbx
mov rbp, qword [rsp + 0x50]
nop
sub rsp, 0x15e2f365
add rsp, 0x15e2f385
nop
mov r14, qword [rsp]
add rsp, 8
nop
mov rdi, qword [rsp]
add rsp, 8
nop
mov rsi, qword [rsp]
add rsp, 8
ret
xchg r14, rax
mov r14, rbx
xchg r14, rax
jmp 0x140054ac9

Function at 0x140054ec0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d28c
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140142f30]
cmp qword [0x140143018], 0
jne 0x14008d000
mov dword [rsp - 0x3c], esp
syscall
ret
Function at 0x140054ee0
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x28]
mov byte [rsp + 0x28], al
jmp 0x14008d8d9
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140142fc8]
mov dword [rsp - 0x40], 0x4107062
cmp qword [0x140143018], 0
jne 0x14008d000
syscall
ret

Function at 0x140054ef0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d07e
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140142f00]
cmp qword [0x140143018], 0
mov r8, r8
jne 0x14008d000
syscall
ret

Function at 0x140054f00
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d640
mov r10, rcx
mov dword [rsp - 0x44], ecx
mov eax, dword [0x140142f88]
cmp qword [0x140143018], 0
jne 0x14008d000
syscall
mov r15, r15
ret

Function at 0x140054f10
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d4e7
xchg rcx, r15
mov r10, r15
xchg r15, rcx
mov eax, dword [0x140142f68]
mov dword [rsp - 0x30], edx
cmp qword [0x140143018], 0
jne 0x14008d000
syscall
ret

Function at 0x140054f20
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d0db
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140142f08]
cmp qword [0x140143018], 0
mov dword [rsp - 0x20], 0x162b2ec
jne 0x14008d000
syscall
ret

Function at 0x140054f30
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d75b
mov r10, rcx
mov eax, dword [0x140142fa4]
cmp qword [0x140143018], 0
mov rbp, rbp
jne 0x14008d000
syscall
ret

Function at 0x140054f40
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d77e
xchg r9, rcx
mov r10, r9
xchg rcx, r9
mov eax, dword [0x140142fa8]
mov dword [rsp - 0xc], 0x155e504b
cmp qword [0x140143018], 0
jne 0x14008d000
syscall
mov dword [rsp - 0x1c], ecx
ret

Function at 0x140054f50
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d6b7
xchg r10, rsi
mov rsi, rcx
xchg r10, rsi
mov eax, dword [0x140142f94]
cmp qword [0x140143018], 0
mov dword [rsp - 0x34], 0x962192e
jne 0x14008d000
syscall
ret

Function at 0x140054f60
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d6e5
mov r10, rcx
mov eax, dword [0x140142f98]
xchg r14, r14
cmp qword [0x140143018], 0
jne 0x14008d000
syscall
ret

Function at 0x140054f70
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d2b6
xchg rsi, r10
mov rsi, rcx
xchg rsi, r10
mov eax, dword [0x140142f34]
cmp qword [0x140143018], 0
xchg r11, r11
jne 0x14008d000
syscall
ret

Function at 0x140054f80
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d58c
xchg rcx, rbp
mov r10, rbp
xchg rcx, rbp
mov eax, dword [0x140142f78]
mov dword [rsp - 0x14], 0x44f38a9c
cmp qword [0x140143018], 0
jne 0x14008d000
syscall
xchg rsp, rsp
ret

Function at 0x140054f90
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d5e6
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140142f80]
mov r13, r13
cmp qword [0x140143018], 0
jne 0x14008d000
syscall
mov dword [rsp - 0x10], esp
ret

Function at 0x140054fa0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d0ab
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140142f04]
mov rsp, rsp
cmp qword [0x140143018], 0
jne 0x14008d000
syscall
xchg rbp, rbp
ret
Function at 0x140054fb0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d667
mov r10, rcx
mov eax, dword [0x140142f8c]
mov dword [rsp - 0x14], edi
cmp qword [0x140143018], 0
jne 0x14008d000
syscall
mov r11, r11
ret

Function at 0x140054fc0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d494
xchg r10, r14
mov r14, rcx
xchg r10, r14
mov eax, dword [0x140142f60]
cmp qword [0x140143018], 0
jne 0x14008d000
mov dword [rsp - 0x30], ebp
syscall
ret

Function at 0x140054fd0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d4be
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140142f64]
mov r12, r12
cmp qword [0x140143018], 0
jne 0x14008d000
syscall
ret

Function at 0x140054fe0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d336
mov r10, rcx
mov rdi, rdi
mov eax, dword [0x140142f40]
cmp qword [0x140143018], 0
jne 0x14008d000
syscall
xchg rbp, rbp
ret

Function at 0x140054ff0
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x58]
mov byte [rsp + 0x58], al
movzx eax, byte [rsp + 0x48]
mov dword [rsp - 0x10], edi
mov byte [rsp + 0x48], al
jmp 0x14008d8ae
mov r10, rcx
mov rdx, rdx
mov eax, dword [0x140142fc4]
cmp qword [0x140143018], 0
jne 0x14008d000
mov dword [rsp - 0x34], 0x62d9834d
syscall
ret

Function at 0x140055010
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d1be
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140142f1c]
cmp qword [0x140143018], 0
jne 0x14008d000
xchg r8, r8
syscall
ret

Function at 0x140055020
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d1e7
xchg rcx, rsi
mov r10, rsi
xchg rcx, rsi
mov eax, dword [0x140142f20]
cmp qword [0x140143018], 0
xchg rsi, rsi
jne 0x14008d000
syscall
ret

Function at 0x140055030
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d210
mov r10, rcx
mov dword [rsp - 0x30], 0x4d1bf2b7
mov eax, dword [0x140142f24]
cmp qword [0x140143018], 0
jne 0x14008d000
xchg rbx, rbx
syscall
ret

Function at 0x140055040
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d23b
mov r10, rcx
mov eax, dword [0x140142f28]
cmp qword [0x140143018], 0
mov rdi, rdi
jne 0x14008d000
syscall
ret

Function at 0x140055050
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d18d
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140142f18]
mov rcx, rcx
cmp qword [0x140143018], 0
jne 0x14008d000
syscall
mov dword [rsp - 0x44], 0x2b78f1d3
ret

Function at 0x140055060
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d708
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140142f9c]
cmp qword [0x140143018], 0
mov dword [rsp - 0x28], esp
jne 0x14008d000
syscall
ret

Function at 0x140055070
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d25e
xchg r10, r13
mov r13, rcx
xchg r10, r13
mov eax, dword [0x140142f2c]
cmp qword [0x140143018], 0
mov dword [rsp - 0x38], 0x33a5be02
jne 0x14008d000
syscall
ret

Function at 0x140055080
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d109
xchg rcx, r15
mov r10, r15
xchg rcx, r15
mov eax, dword [0x140142f0c]
cmp qword [0x140143018], 0
mov dword [rsp - 0xc], 0x1af3f447
jne 0x14008d000
syscall
ret
Function at 0x140055090
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d2df
xchg rdx, r10
mov rdx, rcx
xchg rdx, r10
mov eax, dword [0x140142f38]
cmp qword [0x140143018], 0
jne 0x14008d000
mov dword [rsp - 0x30], 0x6b96a2aa
syscall
ret

Function at 0x1400550a0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d539
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140142f70]
mov rsp, rsp
cmp qword [0x140143018], 0
jne 0x14008d000
syscall
ret

Function at 0x1400550b0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d5bd
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140142f7c]
mov r12, r12
cmp qword [0x140143018], 0
jne 0x14008d000
syscall
ret

Function at 0x1400550d0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d164
xchg rbp, rcx
mov r10, rbp
xchg rbp, rcx
mov eax, dword [0x140142f14]
cmp qword [0x140143018], 0
mov rbx, rbx
jne 0x14008d000
syscall
ret

Function at 0x1400550e0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d881
xchg r10, rsp
mov rsp, rcx
xchg r10, rsp
mov eax, dword [0x140142fc0]
mov r8, r8
cmp qword [0x140143018], 0
jne 0x14008d000
syscall
mov dword [rsp - 0x18], ecx
ret

Function at 0x1400550f0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d732
xchg r15, rcx
mov r10, r15
xchg rcx, r15
mov eax, dword [0x140142fa0]
cmp qword [0x140143018], 0
mov rbp, rbp
jne 0x14008d000
syscall
ret

Function at 0x140055100
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d82c
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140142fb8]
mov rbp, rbp
cmp qword [0x140143018], 0
jne 0x14008d000
syscall
mov r8, r8
ret

Function at 0x140055110
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d613
xchg rcx, r11
mov r10, r11
xchg r11, rcx
mov eax, dword [0x140142f84]
mov r9, r9
cmp qword [0x140143018], 0
jne 0x14008d000
syscall
mov dword [rsp - 0x10], esi
ret

Function at 0x140055120
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d858
xchg r10, rbx
mov rbx, rcx
xchg r10, rbx
mov eax, dword [0x140142fbc]
cmp qword [0x140143018], 0
jne 0x14008d000
xchg rsi, rsi
syscall
ret

Function at 0x140055130
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d137
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140142f10]
xchg rbp, rbp
cmp qword [0x140143018], 0
jne 0x14008d000
syscall
mov dword [rsp - 0x34], ebx
ret

Function at 0x140055140
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d30d
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140142f3c]
cmp qword [0x140143018], 0
xchg r10, r10
jne 0x14008d000
syscall
ret
Function at 0x140068510
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
xchg r8, rsi
mov qword [rsp + 0x18], r8
xchg rsi, r8
mov qword [rsp + 0x20], rdi
mov dword [rsp - 0xc], esi
push rbp
xchg rcx, rsp
mov rbp, rcx
xchg rsp, rcx
nop
add rsp, 0x6b0a673b
sub rsp, 0x6b0a679b
movabs rbx, 0x42a81dbb513e1277
sub rbx, 0x4259ee39
add rbx, 0x4c53918
xor rbx, 0x6a145739
xchg rcx, r13
mov rdi, r13
xchg rcx, r13
cmp qword [rcx + 0x30], rbx
mov r8, r8
jne 0x140068731
xor esi, esi
mov dword [rbp - 0x40], 0xc57813f
xor dword [rbp - 0x40], 0x79d21868
xor dword [rbp - 0x40], 0x5cd39cc3
xor dword [rbp - 0x40], 0x5ffb8fb0
xor dword [rbp - 0x40], 0x76828a07
mov dword [rbp - 0x3c], 0x6c9c4c06
xor dword [rbp - 0x3c], 0x19cb0289
sub dword [rbp - 0x3c], 0x2fd0ab87
xor dword [rbp - 0x3c], 0x559d5e0c
sub dword [rbp - 0x3c], 0xfe2fc5c
mov dword [rbp - 0x38], 0x1cf61926
add dword [rbp - 0x38], 0x34e67462
sub dword [rbp - 0x38], 0x4f5681a7
add dword [rbp - 0x38], 0x6bdde0f0
sub dword [rbp - 0x38], 0x6e41ecbf
mov dword [rbp - 0x34], 0x48130466
xor dword [rbp - 0x34], 0xad88fd9
add dword [rbp - 0x34], 0x256f2516
sub dword [rbp - 0x34], 0x40a706f
sub dword [rbp - 0x34], 0x63c63f79
mov dword [rbp - 0x30], 0x34a40c38
sub dword [rbp - 0x30], 0xc3b6b45
xor dword [rbp - 0x30], 0x4acd9403
add dword [rbp - 0x30], 0x186749ca
xor dword [rbp - 0x30], 0x7b237ef6
mov dword [rbp - 0x2c], 0x56a6d81d
sub dword [rbp - 0x2c], 0x8841dd0
add dword [rbp - 0x2c], 0xff765ef
sub dword [rbp - 0x2c], 0x5de61f8a
xchg rsi, r12
mov qword [rbp + 0x10], r12
xchg rsi, r12
mov rax, qword [rbp + 0x10]
mov rcx, rcx
mov rcx, qword [rbp + 0x10]
xchg rsi, rax
mov rsi, qword [rbp + 0x10]
xchg rsi, rax
and cl, 3
shl cl, 3
xchg rbx, rbx
movzx edx, word [rbp + rax*2 - 0x40]
mov eax, 0x25752b4f
add eax, 0x23228150
add eax, 0x26db69d9
sub eax, 0x1694cb16
shr eax, cl
movzx ecx, al
mov rsp, rsp
xchg rsp, rax
mov rsp, qword [rbp + 0x10]
xchg rsp, rax
xor cx, dx
mov rsp, rsp
mov word [rbp + rax*2 - 0x28], cx
mov rax, qword [rbp + 0x10]
inc rax
xchg r11, r11
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
cmp rax, 0xc
jb 0x140068655
xchg r13, r13
xor edx, edx
mov word [rbp - 0x10], si
lea rcx, [rbp - 0x28]
call fcn.14008a9e0
mov dword [rsp - 0x38], 0x7c818d86
xchg rdx, rax
mov rax, rdx
xchg rdx, rax
xchg r10, r8
mov r10, rax
xchg r10, r8
xor eax, eax
mov rdi, rdi
xor rdx, rbx
mov qword [rdi + 0x30], rdx
lea rdi, [rbp - 0x28]
mov dword [rsp - 0x20], ebp
lea ecx, [rax + 0xc]
rep stosb byte [rdi], al
cmp rdx, rbx
mov dword [rsp - 0x44], 0x76c61881
je 0x14006873b
lea rdx, [0x1401422c0]
xchg rbp, rcx
mov rbp, r8
xchg rcx, rbp
call fcn.14006d0b0
mov dword [rsp - 0x20], edx
test al, al
setne al
jmp 0x14006873b
mov al, 0xd
add al, 0x4e
sub al, 0x18
sub al, 0x20
sub al, 0x22
lea r11, [rsp + 0x60]
xchg rbx, rcx
mov rcx, qword [r11 + 0x18]
xchg rbx, rcx
mov rsi, qword [r11 + 0x20]
xchg rdi, r14
mov r14, qword [r11 + 0x28]
xchg r14, rdi
xchg rsp, r12
mov r12, r11
xchg rsp, r12
pop rbp
mov dword [rsp - 0x40], 0x793eeee0
ret
Function at 0x14006876c
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov dword [rsp - 0x30], edx
xchg rsi, r8
mov qword [rsp + 0x18], r8
xchg r8, rsi
mov qword [rsp + 0x20], rdi
mov dword [rsp - 0x40], ecx
nop
mov qword [rsp - 8], rbp
sub rsp, 8
xchg r13, rsp
mov rbp, r13
xchg r13, rsp
nop
add rsp, 0x1df038c2
sub rsp, 0x1df03912
movabs rbx, 0x42a81dbb299879cc
sub rbx, 0x252630f
add rbx, 0x26113357
add rbx, 0x1b893d60
add rbx, 0x10dc82fb
xchg rbp, rcx
mov rdi, rbp
xchg rcx, rbp
cmp qword [rcx + 0x28], rbx
xchg rdx, rdx
jne 0x140068987
mov eax, 0x5a57efad
xor eax, 0xae833ac
sub eax, 0x200ade5
xor eax, 0x4ebf2e12
mov dword [rbp - 0x30], 0x75fdb060
xor dword [rbp - 0x30], 0x4073b0a0
add dword [rbp - 0x30], 0x21eb84ef
sub dword [rbp - 0x30], 0x33203674
sub dword [rbp - 0x30], 0x24324f0e
mov word [rbp - 0x20], ax
xor esi, esi
mov dword [rsp - 0x18], 0x348c377f
mov dword [rbp - 0x2c], 0x709c7d59
sub dword [rbp - 0x2c], 0x5f8ace51
add dword [rbp - 0x2c], 0x10445a9e
sub dword [rbp - 0x2c], 0x20eb08eb
mov dword [rbp - 0x28], 0x528c35b0
xor dword [rbp - 0x28], 0x536b8c2b
add dword [rbp - 0x28], 0x59ffabc7
add dword [rbp - 0x28], 0x1ea4e4b0
sub dword [rbp - 0x28], 0x7a2749c2
mov dword [rbp - 0x24], 0x7d58b51c
sub dword [rbp - 0x24], 0x6da01982
add dword [rbp - 0x24], 0x45dc5ba5
sub dword [rbp - 0x24], 0x5560f685
xchg r8, rsi
mov qword [rbp + 0x10], r8
xchg r8, rsi
mov rax, qword [rbp + 0x10]
mov dword [rsp - 0x18], 0x2e1352c9
xchg r14, rcx
mov r14, qword [rbp + 0x10]
xchg rcx, r14
mov rax, qword [rbp + 0x10]
and cl, 3
shl cl, 3
mov dword [rsp - 0x3c], 0x1798d037
movzx edx, word [rbp + rax*2 - 0x30]
mov eax, 0x1536fda4
xor eax, 0x6f07df8
xor eax, 0x17cdea18
add eax, 0x54d2e11e
shr eax, cl
movzx ecx, al
mov dword [rsp - 0x24], esi
xchg rsp, rax
mov rsp, qword [rbp + 0x10]
xchg rsp, rax
xor cx, dx
mov rbx, rbx
mov word [rbp + rax*2 - 0x1e], cx
mov rax, qword [rbp + 0x10]
inc rax
mov dword [rsp - 0x38], 0x17bf6e97
xchg r12, rax
mov qword [rbp + 0x10], r12
xchg r12, rax
mov rax, qword [rbp + 0x10]
cmp rax, 9
jb 0x14006889d
mov dword [rsp - 0x30], 0x68fa669b
xor edx, edx
mov word [rbp - 0xc], si
lea rcx, [rbp - 0x1e]
mov dword [rsp - 0x28], 0x1051d9fb
call fcn.14008a9e0
xchg r12, rax
mov rdx, r12
xchg r12, rax
xchg r8, rax
mov rax, r8
xchg r8, rax
xor eax, eax
mov dword [rsp - 0x40], esp
xor rdx, rbx
mov qword [rdi + 0x28], rdx
lea rdi, [rbp - 0x1e]
mov rbp, rbp
lea ecx, [rax + 9]
rep stosb byte [rdi], al
cmp rdx, rbx
je 0x14006898f
mov r13, r13
lea rdx, [0x140142810]
xchg rdi, rcx
mov rdi, r8
xchg rcx, rdi
call fcn.140071398
test al, al
setne al
xchg r15, r15
jmp 0x14006898f
mov al, 0xd
sub al, 9
add al, 0x35
sub al, 0x38
xchg rbx, r12
mov r12, qword [rsp + 0x68]
xchg r12, rbx
xchg r12, rsi
mov r12, qword [rsp + 0x70]
xchg rsi, r12
xchg rdx, rdi
mov rdx, qword [rsp + 0x78]
xchg rdx, rdi
add rsp, 0x50
nop
mov rbp, qword [rsp]
add rsp, 8
ret