joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140053470
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
nop
mov qword [rsp - 8], rsi
sub rsp, 8
push rdi
mov r14, r14
push r14
neg rsp
sub rsp, 0xffffffffffffffe0
neg rsp
lea rsi, [rdx + 8]
xorps xmm0, xmm0
mov dword [rsp - 0x38], 0x308f3b5d
xchg rsi, rdi
mov qword [rdx], rdi
xchg rsi, rdi
xor edi, edi
xchg rbp, rbp
movups xmmword [rsi], xmm0
xchg r9, rdx
mov r14, rdx
xchg r9, rdx
xchg r9, r8
mov rbp, r9
xchg r8, r9
xchg rsi, r9
movups xmmword [r9 + 0x10], xmm0
xchg r9, rsi
xchg r15, rdx
mov rbx, r15
xchg r15, rdx
xchg rbx, rsi
movups xmmword [rbx + 0x20], xmm0
xchg rbx, rsi
xchg rdi, rbx
mov qword [rdx + 0x38], rbx
xchg rbx, rdi
xchg r14, rax
mov r14, qword [rcx + 0x38]
xchg r14, rax
cmp r8, rax
jae 0x1400536c1
sub rax, r8
mov dword [rsp - 0x18], 0x1fde4e0b
mov qword [rsp + 0x40], r15
cmp rax, r9
cmovb r14, rax
mov qword [rdx + 0x38], r14
mov dword [rsp - 0x1c], 0x3f92fc0
xchg rdx, rax
mov rdx, qword [rcx]
xchg rdx, rax
xchg rdi, rcx
mov rdi, qword [rdx]
xchg rdi, rcx
lea r15, [rax + r8*2]
mov rdi, rdi
cmp rcx, rsi
je 0x140053547
call fcn.1400966a0
cmp r14, 0x18
xchg rsp, rsp
jbe 0x14005358c
lea rcx, [r14 + r14]
call fcn.140096970
xchg rcx, rax
mov qword [rbx], rcx
xchg rcx, rax
test rax, rax
jne 0x140053599
mov dword [rsp - 0x40], 0x67ce626c
xchg rsi, r10
mov qword [rbx], r10
xchg r10, rsi
xchg rcx, rdi
mov r9, rcx
xchg rdi, rcx
jmp 0x1400535c2
mov qword [rbx], rsi
xchg r11, r11
xchg r8, rax
mov r8, rsi
xchg r8, rax
xorps xmm0, xmm0
mov dword [rsp - 0x34], ecx
xchg r8, rax
movups xmmword [r8], xmm0
xchg r8, rax
xchg rbx, rax
movups xmmword [rbx + 0x10], xmm0
xchg rbx, rax
xchg r10, rax
movups xmmword [r10 + 0x20], xmm0
xchg r10, rax
xchg r10, r9
mov r10, qword [rbx]
xchg r9, r10
and ebp, 3
mov r8d, 0x7810347a
add r8d, 0x43cb482
sub r8d, 0x29d703a4
xor r8d, 0x23cdba35
shl ebp, 1
shl ebp, 2
mov edx, r8d
movzx ecx, bpl
xchg rcx, rcx
ror edx, cl
cmp qword [rbx + 0x38], rdi
jbe 0x14005366d
sub r15, r9
mov rdx, rdx
mov ecx, 0x6a49a0b6
sub ecx, 0x469b21a4
xor ecx, 0x4d85dd95
xor ecx, 0x6e2ba278
nop dword [rax]
xchg rsi, rsi
nop word [rax + rax]
movzx eax, dx
lea r9, [r9 + 2]
xor ax, r8w
mov r13, r13
ror edx, 3
ror edx, 1
ror edx, 3
ror edx, 1
and ax, cx
ror r8d, 1
ror r8d, 6
ror r8d, 1
xor ax, word [r15 + r9 - 2]
inc rdi
mov dword [rsp - 0x28], 0x41d54f35
mov word [r9 - 2], ax
cmp rdi, qword [rbx + 0x38]
jb 0x140053628
mov r15, qword [rsp + 0x40]
xchg r10, r10
xchg rbx, rbp
mov rax, rbp
xchg rbp, rbx
xchg rcx, rbx
mov rcx, qword [rsp + 0x48]
xchg rbx, rcx
xchg rbp, rbx
mov rbx, qword [rsp + 0x50]
xchg rbp, rbx
nop
add rsp, 0x45d449b9
sub rsp, 0x45d44999
pop r14
mov dword [rsp - 0xc], 0x6f2218fb
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
mov rsi, qword [rsp - 8]
ret
xchg rbx, rbp
mov rax, rbp
xchg rbp, rbx
jmp 0x14005367e
Function at 0x140053ad0
Capabilities:
Encode data using xor

Disassembly:
xchg r11, rsp
mov rsp, r11
xchg rsp, r11
mov qword [r11 + 8], rbx
xchg r10, rbp
mov qword [r11 + 0x10], r10
xchg r10, rbp
mov qword [r11 + 0x18], rsi
mov qword [r11 + 0x20], rdi
mov dword [rsp - 0x30], 0x25c1f6e4
push r12
push r14
push r11
mov qword [rsp], r15
neg rsp
sub rsp, 0xffffffffffffffa0
neg rsp
mov r15, qword [rcx + 0x38]
mov r9, r9
lea rax, [r11 - 0x50]
mov rsi, qword [rcx]
xorps xmm0, xmm0
xchg r13, rax
mov qword [r11 - 0x58], r13
xchg r13, rax
xchg rcx, r12
mov r14, r12
xchg r12, rcx
lea rcx, [r11 - 0x58]
lea rdx, [r15 + 1]
xchg rbp, rbp
xchg rsp, rbx
movups xmmword [rbx + 0x28], xmm0
xchg rbx, rsp
xchg r12, rsp
movups xmmword [r12 + 0x38], xmm0
xchg rsp, r12
movups xmmword [rsp + 0x48], xmm0
call fcn.14000ed40
mov ebx, 0x59a784ad
sub ebx, 0x12ca035c
add ebx, 0x5c6b94
xor ebx, 0x3681b388
xchg rsi, rax
mov r8, rsi
xchg rsi, rax
mov ecx, ebx
mov dword [rsp - 0x18], edi
mov r12d, 0x161fd9dd
add r12d, 0x254210e3
xor r12d, 0x409959a6
xor r12d, 0x75471d28
sub r12d, 0xebfad4f
test r15, r15
je 0x140053bfb
mov dword [rsp - 0x3c], ebp
xchg rbx, rax
mov rdx, rbx
xchg rbx, rax
sub rsi, rax
mov dword [rsp - 0x14], ecx
xchg rbx, rdi
mov rbx, r15
xchg rbx, rdi
nop dword [rax]
mov dword [rsp - 0x28], 0x3ab7c3a9
movzx eax, cx
lea rdx, [rdx + 2]
and ax, r12w
ror ecx, 8
mov dword [rsp - 0x2c], edx
xor ax, word [rsi + rdx - 2]
mov word [rdx - 2], ax
sub rdi, 1
jne 0x140053bce
mov dword [rsp - 0x2c], 0x4c2b5114
xor ebp, ebp
mov word [r8 + r15*2], bp
mov esi, ebp
mov rdi, qword [rsp + 0x20]
mov dword [rsp - 0x20], edi
cmp qword [r14 + 0x38], rbp
jbe 0x140053c44
movzx ecx, word [rdi]
call fcn.1400973f0
mov rcx, rcx
mov word [rdi], ax
lea rdi, [rdi + 2]
inc rsi
cmp rsi, qword [r14 + 0x38]
mov r14, r14
jb 0x140053c17
xchg rdi, r8
mov r8, qword [rsp + 0x20]
xchg rdi, r8
nop
movabs rdx, 0xffffffff432c0be0
sub rdx, 0x2b6cb579
add rdx, 0x2e945a77
add rdx, 0x7fffffff
add rdx, 0x39ac4f22
inc rdx
cmp word [rdi + rdx*2], bp
jne 0x140053c6b
mov dword [rsp - 0x38], ecx
xchg rdi, rcx
mov rdi, r14
xchg rcx, rdi
mov qword [r14 + 0x38], rdx
call fcn.14000ed40
mov rbp, rbp
cmp qword [r14 + 0x38], rbp
jbe 0x140053ce3
sub rdi, rax
mov rcx, rcx
nop dword [rax]
nop word [rax + rax]
movzx ecx, bx
lea rax, [rax + 2]
mov dword [rsp - 0x40], 0x7814f20a
and cx, r12w
ror ebx, 6
ror ebx, 2
xor cx, word [rdi + rax - 2]
mov rdx, rdx
inc rbp
mov word [rax - 2], cx
cmp rbp, qword [r14 + 0x38]
xchg r8, r8
jb 0x140053cae
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x28]
cmp rcx, rax
mov dword [rsp - 0xc], edx
jne 0x140053d22
lea rdi, [rsp + 0x28]
xor eax, eax
mov rsi, rsi
mov ecx, 0x783bb445
xor ecx, 0x31327560
add ecx, 0x250bac7f
sub ecx, 0x6e156d74
rep stosb byte [rdi], al
jmp 0x140053d2a
call fcn.1400966a0
xchg r14, r14
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x20]
xchg rbp, rsi
mov rsi, qword [r11 + 0x28]
xchg rbp, rsi
mov rsi, qword [r11 + 0x30]
mov dword [rsp - 0x10], 0x56469445
mov rdi, qword [r11 + 0x38]
xchg r11, rsp
mov r11, rsp
xchg r11, rsp
nop
add rsp, 8
mov r15, qword [rsp - 8]
pop r14
nop
mov r12, qword [rsp]
add rsp, 8
ret
Function at 0x140053d70
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400879df
xchg r10, r14
mov r14, rcx
xchg r14, r10
mov eax, dword [0x1404a0fb0]
cmp qword [0x1404a1098], 0
xchg rdi, rdi
jne 0x140087740
syscall
ret

Function at 0x140053d90
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x28]
mov byte [rsp + 0x28], al
jmp 0x140088031
mov r10, rcx
mov eax, dword [0x1404a1048]
cmp qword [0x1404a1098], 0
mov dword [rsp - 0x18], 0x455c113f
jne 0x140087740
syscall
ret

Function at 0x140053da0
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400877d0
xchg rcx, r15
mov r10, r15
xchg r15, rcx
mov eax, dword [0x1404a0f80]
mov r10, r10
cmp qword [0x1404a1098], 0
jne 0x140087740
syscall
mov dword [rsp - 0x14], ebx
ret

Function at 0x140053db0
Capabilities:
Execute syscall

Disassembly:
jmp 0x140087c33
mov r10, rcx
mov eax, dword [0x1404a0fe8]
mov dword [rsp - 0x10], ebx
cmp qword [0x1404a1098], 0
jne 0x140087740
syscall
ret

Function at 0x140053dc0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008782e
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x1404a0f88]
mov dword [rsp - 0x44], 0x6b9fba0e
cmp qword [0x1404a1098], 0
jne 0x140087740
syscall
ret

Function at 0x140053dd0
Capabilities:
Execute syscall

Disassembly:
jmp 0x140087e39
xchg rcx, rbx
mov r10, rbx
xchg rbx, rcx
mov eax, dword [0x1404a1018]
cmp qword [0x1404a1098], 0
jne 0x140087740
mov dword [rsp - 0x1c], ebp
syscall
ret

Function at 0x140053de0
Capabilities:
Execute syscall

Disassembly:
jmp 0x140087a08
mov r10, rcx
mov eax, dword [0x1404a0fb4]
xchg r8, r8
cmp qword [0x1404a1098], 0
jne 0x140087740
syscall
mov dword [rsp - 0x18], ecx
ret

Function at 0x140053e00
Capabilities:
Execute syscall

Disassembly:
jmp 0x140087801
xchg r13, rcx
mov r10, r13
xchg r13, rcx
mov eax, dword [0x1404a0f84]
mov rdi, rdi
cmp qword [0x1404a1098], 0
jne 0x140087740
syscall
ret

Function at 0x140053e10
Capabilities:
Execute syscall

Disassembly:
jmp 0x140087db5
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x1404a100c]
xchg rbx, rbx
cmp qword [0x1404a1098], 0
jne 0x140087740
syscall
mov dword [rsp - 0x38], 0x78887d41
ret

Function at 0x140053e20
Capabilities:
Execute syscall

Disassembly:
jmp 0x140087be8
mov r10, rcx
mov eax, dword [0x1404a0fe0]
cmp qword [0x1404a1098], 0
mov dword [rsp - 0x2c], 0x470ba8f9
jne 0x140087740
syscall
ret

Function at 0x140053e30
Capabilities:
Execute syscall

Disassembly:
jmp 0x140087c10
mov r10, rcx
mov eax, dword [0x1404a0fe4]
cmp qword [0x1404a1098], 0
mov r10, r10
jne 0x140087740
syscall
ret

Function at 0x140053e40
Capabilities:
Execute syscall

Disassembly:
jmp 0x140087a86
xchg rcx, rsp
mov r10, rsp
xchg rsp, rcx
mov eax, dword [0x1404a0fc0]
mov dword [rsp - 0x34], esp
cmp qword [0x1404a1098], 0
jne 0x140087740
syscall
mov dword [rsp - 0xc], edx
ret

Function at 0x140053e50
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x58]
mov byte [rsp + 0x58], al
movzx eax, byte [rsp + 0x48]
xchg rsi, rsi
mov byte [rsp + 0x48], al
jmp 0x140088000
xchg r10, r8
mov r8, rcx
xchg r10, r8
mov eax, dword [0x1404a1044]
mov dword [rsp - 0x18], 0x2fba7c8e
cmp qword [0x1404a1098], 0
jne 0x140087740
syscall
mov r15, r15
ret
Function at 0x140053e70
Capabilities:
Execute syscall

Disassembly:
jmp 0x140087908
xchg r14, r10
mov r14, rcx
xchg r14, r10
mov eax, dword [0x1404a0f9c]
mov dword [rsp - 0x18], 0x192c9d0c
cmp qword [0x1404a1098], 0
jne 0x140087740
syscall
ret

Function at 0x140053e80
Capabilities:
Execute syscall

Disassembly:
jmp 0x140087936
mov r10, rcx
mov eax, dword [0x1404a0fa0]
cmp qword [0x1404a1098], 0
mov dword [rsp - 0x2c], edx
jne 0x140087740
syscall
ret

Function at 0x140053e90
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008795a
mov r10, rcx
mov dword [rsp - 0x30], 0x14cd97a5
mov eax, dword [0x1404a0fa4]
cmp qword [0x1404a1098], 0
jne 0x140087740
syscall
mov r15, r15
ret

Function at 0x140053ea0
Capabilities:
Execute syscall

Disassembly:
jmp 0x140087985
xchg rdx, rcx
mov r10, rdx
xchg rdx, rcx
mov eax, dword [0x1404a0fa8]
cmp qword [0x1404a1098], 0
jne 0x140087740
mov dword [rsp - 0x14], 0x162044d9
syscall
ret

Function at 0x140053eb0
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400878e4
mov r10, rcx
mov eax, dword [0x1404a0f98]
mov dword [rsp - 0x38], edi
cmp qword [0x1404a1098], 0
jne 0x140087740
syscall
ret

Function at 0x140053ec0
Capabilities:
Execute syscall

Disassembly:
jmp 0x140087e63
mov r10, rcx
mov dword [rsp - 0x34], edi
mov eax, dword [0x1404a101c]
cmp qword [0x1404a1098], 0
jne 0x140087740
syscall
xchg r8, r8
ret

Function at 0x140053ed0
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400879b3
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x1404a0fac]
mov rbp, rbp
cmp qword [0x1404a1098], 0
jne 0x140087740
syscall
xchg r14, r14
ret

Function at 0x140053ee0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008785c
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x1404a0f8c]
mov r11, r11
cmp qword [0x1404a1098], 0
jne 0x140087740
syscall
ret

Function at 0x140053ef0
Capabilities:
Execute syscall

Disassembly:
jmp 0x140087a2f
xchg r14, rcx
mov r10, r14
xchg r14, rcx
mov eax, dword [0x1404a0fb8]
cmp qword [0x1404a1098], 0
jne 0x140087740
mov dword [rsp - 0xc], 0x1bc17901
syscall
ret

Function at 0x140053f20
Capabilities:
Execute syscall

Disassembly:
jmp 0x140088059
add rsp, 0x6f001b27
sub rsp, 0x6f001c47
lea rcx, [0x1400877c3]
mov dword [rsp - 0x28], esi
nop
mov qword [rsp - 8], rcx
sub rsp, 8
nop
sub rsp, 8
mov qword [rsp], rbp
nop
mov qword [rsp - 8], rsi
sub rsp, 8
nop
sub rsp, 8
mov qword [rsp], rdi
push qword [0x1404a10a0]
lea rsi, [rsp + 0x170]
mov r8, r8
lea rdi, [rsp + 0x28]
mov ecx, 0x37f075f5
sub ecx, 0xa040c60
add ecx, 0x9907bf7
add ecx, 0x1c50a790
sub ecx, 0x53cd8d0c
rep movsq qword [rdi], qword [rsi]
mov dword [rsp - 0x40], 0x3b30d261
jmp qword [0x1404a1098]
xchg rbx, rcx
mov r10, rbx
xchg rcx, rbx
mov eax, dword [0x1404a104c]
mov dword [rsp - 0x40], esi
cmp qword [0x1404a1098], 0
jne 0x140087740
syscall
mov r10, r10
ret

Function at 0x140053f30
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400878b3
xchg rcx, r14
mov r10, r14
xchg rcx, r14
mov eax, dword [0x1404a0f94]
mov dword [rsp - 0x38], 0x59a2d45b
cmp qword [0x1404a1098], 0
jne 0x140087740
syscall
xchg rbx, rbx
ret
Function at 0x140053f40
Capabilities:
Execute syscall

Disassembly:
jmp 0x140087fd7
xchg rsp, rcx
mov r10, rsp
xchg rcx, rsp
mov eax, dword [0x1404a1040]
xchg r8, r8
cmp qword [0x1404a1098], 0
jne 0x140087740
syscall
ret

Function at 0x140053f50
Capabilities:
Execute syscall

Disassembly:
jmp 0x140087f84
xchg r10, rbp
mov rbp, rcx
xchg rbp, r10
mov eax, dword [0x1404a1038]
cmp qword [0x1404a1098], 0
mov dword [rsp - 0x24], edi
jne 0x140087740
syscall
ret

Function at 0x140053f60
Capabilities:
Execute syscall

Disassembly:
jmp 0x140087fae
xchg rcx, r12
mov r10, r12
xchg r12, rcx
mov eax, dword [0x1404a103c]
cmp qword [0x1404a1098], 0
xchg r9, r9
jne 0x140087740
syscall
ret

Function at 0x140053f70
Capabilities:
Execute syscall

Disassembly:
jmp 0x140087885
xchg r11, rcx
mov r10, r11
xchg rcx, r11
mov eax, dword [0x1404a0f90]
cmp qword [0x1404a1098], 0
mov dword [rsp - 0x38], 0x52731d02
jne 0x140087740
syscall
ret

Function at 0x140053f80
Capabilities:
Execute syscall

Disassembly:
jmp 0x140087a5d
xchg r15, r10
mov r15, rcx
xchg r10, r15
mov eax, dword [0x1404a0fbc]
cmp qword [0x1404a1098], 0
xchg r13, r13
jne 0x140087740
syscall
ret
Function at 0x140057510
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
xchg r10, rbx
mov qword [rax + 0x10], r10
xchg rbx, r10
nop
sub rsp, 8
mov qword [rsp], rdi
nop
sub rsp, 0x5ad1ec61
add rsp, 0x5ad1ec01
movabs rbx, 0x41c44f3076be0b6e
sub rbx, 0x77874c6
xor rbx, 0x2ff6fb96
add rbx, 0x1d480cc0
xchg rcx, rsp
mov rdi, rsp
xchg rcx, rsp
cmp qword [rcx + 0x30], rbx
xchg r12, r12
jne 0x140057764
mov dword [rax - 0x48], 0x4d01f6ec
sub dword [rax - 0x48], 0x188c38c6
add dword [rax - 0x48], 0x21bb3bc2
xor dword [rax - 0x48], 0x560bf9c4
xor r8d, r8d
mov dword [rsp - 0x10], edx
mov dword [rax - 0x44], 0x69ab177e
xor dword [rax - 0x44], 0x2d4fd65f
add dword [rax - 0x44], 0x26a54ac8
xor dword [rax - 0x44], 0x42919f1d
sub dword [rax - 0x44], 0x290b9426
mov dword [rax - 0x40], 0x7caf5cc0
xor dword [rax - 0x40], 0x398859d1
add dword [rax - 0x40], 0x2dca756e
sub dword [rax - 0x40], 0x22df6dde
xor dword [rax - 0x40], 0x50240cbc
mov dword [rax - 0x3c], 0x7cf6f434
sub dword [rax - 0x3c], 0x6abd196d
add dword [rax - 0x3c], 0x412012f5
add dword [rax - 0x3c], 0x20174db4
sub dword [rax - 0x3c], 0x732e3ae5
mov dword [rax - 0x38], 0x5e59b43c
sub dword [rax - 0x38], 0x303dca90
xor dword [rax - 0x38], 0x51831c66
xor dword [rax - 0x38], 0x7fa3f589
mov dword [rax - 0x34], 0x7126d4c7
sub dword [rax - 0x34], 0x110842d8
xor dword [rax - 0x34], 0x63a51b50
xor dword [rax - 0x34], 0x142c52f5
xor dword [rax - 0x34], 0x178ad89e
xchg r8, r13
mov qword [rsp + 0x70], r13
xchg r8, r13
mov rax, qword [rsp + 0x70]
mov rdx, rdx
nop word [rax + rax]
xchg rbx, rcx
mov rbx, qword [rsp + 0x70]
xchg rbx, rcx
xchg r15, rax
mov r15, qword [rsp + 0x70]
xchg r15, rax
and cl, 3
shl cl, 1
shl cl, 1
shl cl, 1
movzx edx, word [rsp + rax*2 + 0x20]
mov dword [rsp - 0x34], edx
mov eax, 0x7d1666f5
xor eax, 0x1a95d327
sub eax, 0x58a1d043
xor eax, 0x7f59bae2
shr eax, cl
mov dword [rsp - 0x1c], 0x37db98c4
movzx ecx, al
mov rax, qword [rsp + 0x70]
xor cx, dx
mov word [rsp + rax*2 + 0x38], cx
xchg r14, r14
xchg rdx, rax
mov rdx, qword [rsp + 0x70]
xchg rdx, rax
inc rax
mov dword [rsp - 0x18], 0x7094c5e6
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x70]
cmp rax, 0xc
jb 0x14005764e
mov dword [rsp - 0x20], esp
xor edx, edx
mov word [rsp + 0x50], r8w
lea rcx, [rsp + 0x38]
mov rdi, rdi
call fcn.14007ae80
mov rdx, rax
xchg r8, rax
mov rax, r8
xchg r8, rax
xor rdx, rbx
mov r9, r9
xor eax, eax
xchg rbp, rdx
mov qword [rdi + 0x30], rbp
xchg rdx, rbp
lea rdi, [rsp + 0x38]
mov ecx, 0x640a3be6
sub ecx, 0x538ae575
add ecx, 0x6bed06f7
sub ecx, 0x52446ce8
sub ecx, 0x2a27f074
rep stosb byte [rdi], al
cmp rdx, rbx
mov dword [rsp - 0x20], ebx
je 0x14005776e
lea rdx, [0x1404a03f0]
xchg rbp, rcx
mov rbp, r8
xchg rbp, rcx
call fcn.14005f4c0
test al, al
mov rdx, rdx
setne al
mov rbx, qword [rsp + 0x78]
add rsp, 0x60
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret
mov al, 0x42
add al, 0x14
xor al, 0x6b
xor al, 0x75
xor al, 0x49
xchg rbx, rbp
mov rbp, qword [rsp + 0x78]
xchg rbp, rbx
neg rsp
add rsp, 0xffffffffffffffa0
neg rsp
pop rdi
xchg r12, r12
ret
Function at 0x140057790
Capabilities:
Encode data using xor

Disassembly:
xchg rbp, rbx
mov qword [rsp + 0x10], rbp
xchg rbx, rbp
push rdi
mov dword [rsp - 0x30], 0x6ea93169
sub rsp, 0x50
movabs rbx, 0x41c44f3059dad8cb
xor rbx, 0x19dbe835
sub rbx, 0x372cecf0
xor rbx, 0x552f3df0
mov rdi, rcx
cmp qword [rcx + 0x28], rbx
mov dword [rsp - 0x24], esp
jne 0x1400579cb
mov eax, 0x50e6e1c0
sub eax, 0x2c653fa1
sub eax, 0x1445868d
add eax, 0x6917d8b1
xor eax, 0x7953f442
mov dword [rsp + 0x20], 0x7146e037
sub dword [rsp + 0x20], 0x472c69cc
xor dword [rsp + 0x20], 0x51fa1675
sub dword [rsp + 0x20], 0x7bad5ffc
mov word [rsp + 0x30], ax
xor r8d, r8d
mov dword [rsp + 0x24], 0x26b8a24b
sub dword [rsp + 0x24], 0x11a657
add dword [rsp + 0x24], 0x489d96f6
sub dword [rsp + 0x24], 0x6f02920d
mov dword [rsp + 0x28], 0x7201c68c
sub dword [rsp + 0x28], 0xed05bc8
sub dword [rsp + 0x28], 0x2931b95b
xor dword [rsp + 0x28], 0x398eb136
mov dword [rsp + 0x2c], 0x425062ee
xor dword [rsp + 0x2c], 0x1f0b7e2c
xor dword [rsp + 0x2c], 0x6ecb5346
sub dword [rsp + 0x2c], 0x33734ea8
mov qword [rsp + 0x60], r8
mov rdi, rdi
xchg rdx, rax
mov rdx, qword [rsp + 0x60]
xchg rdx, rax
nop dword [rax + rax]
xchg r12, rcx
mov r12, qword [rsp + 0x60]
xchg rcx, r12
xchg r9, rax
mov r9, qword [rsp + 0x60]
xchg r9, rax
and cl, 3
mov dword [rsp - 0x34], ebx
shl cl, 3
movzx edx, word [rsp + rax*2 + 0x20]
mov eax, 0x15187ec1
xor eax, 0xb222bc4
xor eax, 0x507f09d9
xor eax, 0xa596020
xor eax, 0x35a46391
shr eax, cl
movzx ecx, al
xchg r10, r10
xchg rbp, rax
mov rbp, qword [rsp + 0x60]
xchg rbp, rax
xor cx, dx
mov word [rsp + rax*2 + 0x32], cx
mov dword [rsp - 0x10], 0x12ecae5d
xchg rbx, rax
mov rbx, qword [rsp + 0x60]
xchg rbx, rax
inc rax
mov qword [rsp + 0x60], rax
xchg r10, r10
xchg r11, rax
mov r11, qword [rsp + 0x60]
xchg r11, rax
cmp rax, 9
mov dword [rsp - 0x40], 0x7f3284ea
jb 0x140057892
xor edx, edx
mov word [rsp + 0x44], r8w
lea rcx, [rsp + 0x32]
mov r12, r12
call fcn.14007ae80
xchg rdx, rcx
mov rcx, rax
xchg rdx, rcx
xchg r11, rax
mov r8, r11
xchg r11, rax
xor rdx, rbx
mov dword [rsp - 0x30], 0x11e2c440
xor eax, eax
mov qword [rdi + 0x28], rdx
lea rdi, [rsp + 0x32]
mov ecx, 0xbe5399a
add ecx, 0x4fb7b45b
sub ecx, 0x83a8e14
add ecx, 0xcf1ab54
sub ecx, 0x60540b2c
rep stosb byte [rdi], al
xchg r11, r11
cmp rdx, rbx
je 0x1400579d5
lea rdx, [0x1404a00e0]
mov dword [rsp - 0x44], edi
xchg r8, r11
mov rcx, r11
xchg r11, r8
call fcn.14006aef0
mov dword [rsp - 0x14], esp
test al, al
setne al
xchg r8, rbx
mov r8, qword [rsp + 0x68]
xchg r8, rbx
nop
add rsp, 0x2cf5079e
sub rsp, 0x2cf5074e
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret
mov al, 0x69
xor al, 0x6b
add al, 0x44
sub al, 0x12
sub al, 0x33
xchg rbx, rsi
mov rsi, qword [rsp + 0x68]
xchg rbx, rsi
add rsp, 0x50
xchg r8, r8
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret
Function at 0x140057a00
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, rdi
mov qword [rsp + 0x10], rdi
xchg rdi, rbx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
add rsp, 0xffffffffffffffb0
movabs rbx, 0x41c44f3059f94346
add rbx, 0x25243b69
xor rbx, 0x264bde53
xor rbx, 0x42cc2bff
xor rbx, 0x4661f2fd
xchg rdi, r13
mov r13, rcx
xchg rdi, r13
cmp qword [rcx + 0x38], rbx
jne 0x140057c63
mov dword [rsp - 0x1c], 0x994c4ff
xor r8d, r8d
mov dword [rsp + 0x20], 0x48c80403
sub dword [rsp + 0x20], 0x2ff370ec
xor dword [rsp + 0x20], 0x7264d98a
xor dword [rsp + 0x20], 0x34bd2d2d
sub dword [rsp + 0x20], 0x5dde6771
mov dword [rsp + 0x24], 0x481137d1
xor dword [rsp + 0x24], 0x2b3f6703
xor dword [rsp + 0x24], 0x375174d0
sub dword [rsp + 0x24], 0x547c2327
mov dword [rsp + 0x28], 0x39263030
xor dword [rsp + 0x28], 0x703212e9
xor dword [rsp + 0x28], 0x43cf9869
add dword [rsp + 0x28], 0xa55c50f
sub dword [rsp + 0x28], 0x14c67fa6
mov dword [rsp + 0x2c], 0x123c5eda
add dword [rsp + 0x2c], 0x538103a9
sub dword [rsp + 0x2c], 0x112e5c69
sub dword [rsp + 0x2c], 0x547a0584
mov dword [rsp + 0x30], 0x6dc1c405
xor dword [rsp + 0x30], 0x377cba60
xor dword [rsp + 0x30], 0x27b30ef9
sub dword [rsp + 0x30], 0x601ae21
sub dword [rsp + 0x30], 0x76d9c27a
xchg r14, r8
mov qword [rsp + 0x60], r14
xchg r14, r8
mov rax, qword [rsp + 0x60]
xchg r10, r10
nop word [rax + rax]
xchg rcx, r11
mov r11, qword [rsp + 0x60]
xchg rcx, r11
xchg rbx, rax
mov rbx, qword [rsp + 0x60]
xchg rbx, rax
and cl, 3
mov rdx, rdx
shl cl, 2
shl cl, 1
movzx edx, word [rsp + rax*2 + 0x20]
mov dword [rsp - 0x28], esp
mov eax, 0x65d7b007
add eax, 0x15bb942d
sub eax, 0x8315ecc
xor eax, 0xaa040f4
sub eax, 0x809462f
shr eax, cl
xchg rsp, rsp
movzx ecx, al
xchg r8, rax
mov r8, qword [rsp + 0x60]
xchg r8, rax
xor cx, dx
mov word [rsp + rax*2 + 0x34], cx
mov r15, r15
xchg rsi, rax
mov rsi, qword [rsp + 0x60]
xchg rsi, rax
inc rax
xchg r14, rax
mov qword [rsp + 0x60], r14
xchg r14, rax
mov rax, qword [rsp + 0x60]
cmp rax, 0xa
mov dword [rsp - 0x28], 0x49111918
jb 0x140057b32
xor edx, edx
mov word [rsp + 0x48], r8w
lea rcx, [rsp + 0x34]
mov dword [rsp - 0x1c], 0xd361e71
call fcn.14007ae80
xchg rdx, rdi
mov rdi, rax
xchg rdx, rdi
xchg r15, rax
mov r8, r15
xchg r15, rax
xor rdx, rbx
xor eax, eax
mov dword [rsp - 0x30], 0x1cffaffb
mov qword [rdi + 0x38], rdx
lea rdi, [rsp + 0x34]
mov ecx, 0x5000fb7a
xor ecx, 0x87f375b
xor ecx, 0x30a5c64a
xor ecx, 0x68da0a61
rep stosb byte [rdi], al
cmp rdx, rbx
mov dword [rsp - 0x28], ebp
je 0x140057c6d
lea rdx, [0x1404a0108]
xchg rcx, r8
mov r8, rcx
xchg r8, rcx
call fcn.14006b4b0
test al, al
xchg rbp, rbp
setne al
xchg r8, rbx
mov r8, qword [rsp + 0x68]
xchg r8, rbx
nop
sub rsp, 0x41e326cb
add rsp, 0x41e3271b
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret
mov al, 0x30
add al, 0x22
sub al, 0x33
xor al, 0x74
xor al, 0x6a
xchg rbx, r8
mov r8, qword [rsp + 0x68]
xchg r8, rbx
nop
sub rsp, 0x4c574808
add rsp, 0x4c574858
nop
mov rdi, qword [rsp]
add rsp, 8
ret