joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140055c80
Capabilities:
Encode data using xor

Disassembly:
xchg rdi, rbx
mov qword [rsp + 0x10], rdi
xchg rbx, rdi
mov qword [rsp + 0x18], rbp
nop
mov qword [rsp - 8], rsi
sub rsp, 8
nop
mov qword [rsp - 8], rdi
sub rsp, 8
nop
mov qword [rsp - 8], r14
sub rsp, 8
nop
sub rsp, 0x53b9fa96
add rsp, 0x53b9fa76
lea rsi, [rdx + 8]
mov dword [rsp - 0x34], edi
xorps xmm0, xmm0
xchg r12, rsi
mov qword [rdx], r12
xchg rsi, r12
xor edi, edi
mov r11, r11
movups xmmword [rsi], xmm0
xchg r14, r9
mov r9, r14
xchg r9, r14
mov rbp, r8
xchg r10, rsi
movups xmmword [r10 + 0x10], xmm0
xchg rsi, r10
mov rbx, rdx
mov dword [rsp - 0x1c], ebp
xchg rsp, rsi
movups xmmword [rsp + 0x20], xmm0
xchg rsp, rsi
mov qword [rdx + 0x38], rdi
mov rax, qword [rcx + 0x38]
mov dword [rsp - 0x14], 0x5b0948d7
cmp r8, rax
jae 0x140055eb9
sub rax, r8
xchg rdi, rdi
xchg r15, r14
mov qword [rsp + 0x40], r14
xchg r14, r15
cmp rax, r9
cmovb r14, rax
mov qword [rdx + 0x38], r14
mov dword [rsp - 0x2c], edi
xchg r10, rax
mov r10, qword [rcx]
xchg r10, rax
xchg rsi, rcx
mov rsi, qword [rdx]
xchg rcx, rsi
lea r15, [rax + r8*2]
cmp rcx, rsi
mov rdi, rdi
je 0x140055d60
call fcn.140099810
cmp r14, 0x18
jbe 0x140055d9f
mov dword [rsp - 0x40], 0x428c03f7
lea rcx, [r14 + r14]
call fcn.140099aa0
xchg r10, rax
mov qword [rbx], r10
xchg r10, rax
test rax, rax
jne 0x140055da9
mov rsi, rsi
mov qword [rbx], rsi
xchg r15, r9
mov r15, rdi
xchg r9, r15
jmp 0x140055dc7
mov qword [rbx], rsi
xchg rsi, rax
mov rsi, rax
xchg rsi, rax
xorps xmm0, xmm0
xchg r9, r9
movups xmmword [rax], xmm0
xchg r12, rax
movups xmmword [r12 + 0x10], xmm0
xchg r12, rax
xchg rdx, rax
movups xmmword [rdx + 0x20], xmm0
xchg rdx, rax
mov r9, qword [rbx]
and ebp, 3
mov r8d, 0x4a6b076b
sub r8d, 0x23ea21b7
add r8d, 0x174a7622
xor r8d, 0xd95799e
shl ebp, 1
shl ebp, 2
mov edx, r8d
movzx ecx, bpl
ror edx, cl
mov rbx, rbx
cmp qword [rbx + 0x38], rdi
jbe 0x140055e73
sub r15, r9
mov dword [rsp - 0x34], esp
mov ecx, 0x5a97261
add ecx, 0x4764770e
xor ecx, 0x5a39ef76
add ecx, 0x27a0160e
sub ecx, 0x3ed41b28
nop dword [rax]
nop word [rax + rax]
xchg rdx, rdx
movzx eax, dx
lea r9, [r9 + 2]
xor ax, r8w
ror edx, 7
ror edx, 1
and ax, cx
ror r8d, 6
ror r8d, 2
xor ax, word [r15 + r9 - 2]
mov dword [rsp - 0x10], ecx
inc rdi
mov word [r9 - 2], ax
cmp rdi, qword [rbx + 0x38]
jb 0x140055e34
mov dword [rsp - 0x18], 0x620975ed
xchg r15, rdx
mov rdx, qword [rsp + 0x40]
xchg rdx, r15
xchg rcx, rax
mov rcx, rbx
xchg rcx, rax
mov rbx, qword [rsp + 0x48]
mov rcx, rcx
xchg rbp, r8
mov r8, qword [rsp + 0x50]
xchg r8, rbp
nop
sub rsp, 0x2ea94acd
add rsp, 0x2ea94aed
pop r14
nop
add rsp, 8
mov rdi, qword [rsp - 8]
pop rsi
mov dword [rsp - 0x34], edi
ret
xchg rdi, rbx
mov rax, rdi
xchg rdi, rbx
jmp 0x140055e85

Function at 0x1400562a0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e43c
xchg rcx, rdx
mov r10, rdx
xchg rdx, rcx
mov eax, dword [0x140142ad0]
mov dword [rsp - 0x10], 0xf5fc446
cmp qword [0x140142bb8], 0
jne 0x14008e1c0
syscall
mov dword [rsp - 0x38], 0x6863d51a
ret
Function at 0x1400562c0
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x28]
mov dword [rsp - 0x24], 0x771bc11b
mov byte [rsp + 0x28], al
jmp 0x14008ea87
mov r10, rcx
mov dword [rsp - 0x20], ecx
mov eax, dword [0x140142b68]
cmp qword [0x140142bb8], 0
jne 0x14008e1c0
syscall
mov rdi, rdi
ret

Function at 0x1400562e0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e239
mov r10, rcx
mov dword [rsp - 0xc], 0x66443ed0
mov eax, dword [0x140142aa0]
cmp qword [0x140142bb8], 0
jne 0x14008e1c0
mov r8, r8
syscall
ret

Function at 0x1400562f0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e7e0
mov r10, rcx
mov eax, dword [0x140142b28]
cmp qword [0x140142bb8], 0
xchg rsp, rsp
jne 0x14008e1c0
syscall
ret

Function at 0x140056300
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e69c
mov r10, rcx
mov eax, dword [0x140142b08]
cmp qword [0x140142bb8], 0
mov dword [rsp - 0x20], edx
jne 0x14008e1c0
syscall
ret

Function at 0x140056310
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e296
mov r10, rcx
mov eax, dword [0x140142aa8]
mov dword [rsp - 0x18], 0x1744df5d
cmp qword [0x140142bb8], 0
jne 0x14008e1c0
syscall
ret

Function at 0x140056320
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e901
xchg rcx, r15
mov r10, r15
xchg rcx, r15
mov eax, dword [0x140142b44]
cmp qword [0x140142bb8], 0
mov rbx, rbx
jne 0x14008e1c0
syscall
ret

Function at 0x140056330
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e92a
xchg rbx, r10
mov rbx, rcx
xchg rbx, r10
mov eax, dword [0x140142b48]
cmp qword [0x140142bb8], 0
mov dword [rsp - 0x38], 0x1c1a7a8d
jne 0x14008e1c0
syscall
ret

Function at 0x140056340
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e857
xchg rcx, rsp
mov r10, rsp
xchg rcx, rsp
mov eax, dword [0x140142b34]
cmp qword [0x140142bb8], 0
mov dword [rsp - 0x40], 0x3f97f208
jne 0x14008e1c0
syscall
ret

Function at 0x140056350
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e885
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140142b38]
xchg r12, r12
cmp qword [0x140142bb8], 0
jne 0x14008e1c0
syscall
xchg r14, r14
ret

Function at 0x140056360
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e472
mov r10, rcx
mov eax, dword [0x140142ad4]
mov dword [rsp - 0x20], 0x5494c275
cmp qword [0x140142bb8], 0
jne 0x14008e1c0
syscall
mov rdx, rdx
ret

Function at 0x140056370
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e740
xchg rdx, r10
mov rdx, rcx
xchg rdx, r10
mov eax, dword [0x140142b18]
mov dword [rsp - 0x28], ebx
cmp qword [0x140142bb8], 0
jne 0x14008e1c0
syscall
ret

Function at 0x140056380
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e793
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140142b20]
cmp qword [0x140142bb8], 0
jne 0x14008e1c0
mov dword [rsp - 0xc], edx
syscall
ret

Function at 0x140056390
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e268
xchg rcx, r14
mov r10, r14
xchg rcx, r14
mov eax, dword [0x140142aa4]
mov dword [rsp - 0x1c], ecx
cmp qword [0x140142bb8], 0
jne 0x14008e1c0
syscall
ret
Function at 0x1400563a0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e803
xchg r10, r11
mov r11, rcx
xchg r11, r10
mov eax, dword [0x140142b2c]
cmp qword [0x140142bb8], 0
mov dword [rsp - 0x38], ebp
jne 0x14008e1c0
syscall
ret

Function at 0x1400563b0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e648
mov r10, rcx
mov eax, dword [0x140142b00]
mov dword [rsp - 0x20], 0x3bf889ff
cmp qword [0x140142bb8], 0
jne 0x14008e1c0
syscall
mov r11, r11
ret

Function at 0x1400563c0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e673
xchg r10, r14
mov r14, rcx
xchg r10, r14
mov eax, dword [0x140142b04]
mov r14, r14
cmp qword [0x140142bb8], 0
jne 0x14008e1c0
syscall
ret

Function at 0x1400563d0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e4f0
xchg rsi, r10
mov rsi, rcx
xchg r10, rsi
mov eax, dword [0x140142ae0]
mov r14, r14
cmp qword [0x140142bb8], 0
jne 0x14008e1c0
syscall
xchg rbp, rbp
ret

Function at 0x1400563e0
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x58]
mov byte [rsp + 0x58], al
movzx eax, byte [rsp + 0x48]
mov rdi, rdi
mov byte [rsp + 0x48], al
jmp 0x14008ea59
xchg rsi, r10
mov rsi, rcx
xchg r10, rsi
mov eax, dword [0x140142b64]
mov dword [rsp - 0x2c], 0xe1d4c9b
cmp qword [0x140142bb8], 0
jne 0x14008e1c0
syscall
ret

Function at 0x140056400
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e368
xchg r10, rsi
mov rsi, rcx
xchg rsi, r10
mov eax, dword [0x140142abc]
cmp qword [0x140142bb8], 0
mov dword [rsp - 0x20], 0xbabacf1
jne 0x14008e1c0
syscall
ret

Function at 0x140056410
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e396
xchg rcx, r9
mov r10, r9
xchg r9, rcx
mov eax, dword [0x140142ac0]
cmp qword [0x140142bb8], 0
mov dword [rsp - 0x34], 0x695f6809
jne 0x14008e1c0
syscall
ret

Function at 0x140056420
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e3c4
xchg rcx, r14
mov r10, r14
xchg rcx, r14
mov eax, dword [0x140142ac4]
cmp qword [0x140142bb8], 0
jne 0x14008e1c0
mov r14, r14
syscall
ret

Function at 0x140056430
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e3ed
mov r10, rcx
xchg r13, r13
mov eax, dword [0x140142ac8]
cmp qword [0x140142bb8], 0
jne 0x14008e1c0
xchg rbx, rbx
syscall
ret

Function at 0x140056440
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e33a
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140142ab8]
cmp qword [0x140142bb8], 0
mov dword [rsp - 0x30], 0x352e98d1
jne 0x14008e1c0
syscall
ret

Function at 0x140056450
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e8b1
xchg r15, r10
mov r15, rcx
xchg r15, r10
mov eax, dword [0x140142b3c]
cmp qword [0x140142bb8], 0
xchg r15, r15
jne 0x14008e1c0
syscall
ret

Function at 0x140056460
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e413
xchg r10, rdx
mov rdx, rcx
xchg rdx, r10
mov eax, dword [0x140142acc]
xchg r13, r13
cmp qword [0x140142bb8], 0
jne 0x14008e1c0
syscall
ret

Function at 0x140056470
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e2be
mov r10, rcx
mov dword [rsp - 0x2c], ebp
mov eax, dword [0x140142aac]
cmp qword [0x140142bb8], 0
jne 0x14008e1c0
syscall
mov rbp, rbp
ret
Function at 0x140056480
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e49d
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140142ad8]
cmp qword [0x140142bb8], 0
mov r10, r10
jne 0x14008e1c0
syscall
ret

Function at 0x140056490
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e6e9
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140142b10]
cmp qword [0x140142bb8], 0
mov dword [rsp - 0x28], 0x71210342
jne 0x14008e1c0
syscall
ret

Function at 0x1400564a0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e76a
xchg r13, r10
mov r13, rcx
xchg r10, r13
mov eax, dword [0x140142b1c]
mov r8, r8
cmp qword [0x140142bb8], 0
jne 0x14008e1c0
syscall
ret

Function at 0x1400564c0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e311
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140142ab4]
cmp qword [0x140142bb8], 0
jne 0x14008e1c0
mov rsi, rsi
syscall
ret

Function at 0x1400564d0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ea2b
xchg rcx, rsi
mov r10, rsi
xchg rcx, rsi
mov eax, dword [0x140142b60]
cmp qword [0x140142bb8], 0
mov dword [rsp - 0x1c], 0x54310530
jne 0x14008e1c0
syscall
ret

Function at 0x1400564e0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e8da
mov r10, rcx
mov r13, r13
mov eax, dword [0x140142b40]
cmp qword [0x140142bb8], 0
jne 0x14008e1c0
syscall
mov dword [rsp - 0xc], esi
ret

Function at 0x1400564f0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e9df
mov r10, rcx
mov eax, dword [0x140142b58]
cmp qword [0x140142bb8], 0
xchg r14, r14
jne 0x14008e1c0
syscall
ret

Function at 0x140056500
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e7bd
mov r10, rcx
mov eax, dword [0x140142b24]
xchg r13, r13
cmp qword [0x140142bb8], 0
jne 0x14008e1c0
syscall
ret

Function at 0x140056510
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ea02
xchg rcx, r9
mov r10, r9
xchg r9, rcx
mov eax, dword [0x140142b5c]
cmp qword [0x140142bb8], 0
mov rdi, rdi
jne 0x14008e1c0
syscall
ret

Function at 0x140056520
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e2e5
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140142ab0]
xchg rdx, rdx
cmp qword [0x140142bb8], 0
jne 0x14008e1c0
syscall
xchg r9, r9
ret

Function at 0x140056530
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e4c6
xchg r10, r11
mov r11, rcx
xchg r10, r11
mov eax, dword [0x140142adc]
mov dword [rsp - 0x28], edx
cmp qword [0x140142bb8], 0
jne 0x14008e1c0
syscall
ret
Function at 0x1400603a4
Capabilities:
Hash data using murmur3

Disassembly:
push rbx
mov r15, r15
neg rsp
sub rsp, 0xffffffffffffffe0
neg rsp
xchg rbx, r13
mov r13, rdx
xchg r13, rbx
mov edx, 0x428e21f5
add edx, 0x298649d4
xor edx, 0x6ef0060c
add edx, 0x2b2bbd7f
call fcn.140083ec0
mov dword [rsp - 0x1c], edx
xor ecx, ecx
test rax, rax
je 0x140060487
rol rax, 0x13
rol rax, 1
rol rax, 0x10
rol rax, 0xf
rol rax, 1
rol rax, 3
rol rax, 1
movabs rcx, 0x2d7fdf6f53554ce3
xor rcx, 0x248dca7c
xor rcx, 0x2dab2e7d
sub rcx, 0x3f4ede5d
add rcx, 0x7fffffff
xor rcx, 0x275131cd
add rax, rcx
movabs rcx, 0xce671b83f2330c3
xor rcx, 0x1e6ec8ea
xor rcx, 0x237b9cc8
add rcx, 0x7fffffff
add rcx, 0xc31edad
rol rax, 0xd
rol rax, 0x20
rol rax, 1
xor rax, rcx
xchg r9, r9
mov cl, 0x39
add cl, 0x2d
xor cl, 0x48
sub cl, 0x2c
xor cl, 3
not rax
mov qword [rbx + 0x1e0], rax
mov dword [rsp - 0x14], 0xc410f40
mov al, cl
nop
add rsp, 0x3883c82
sub rsp, 0x3883c62
nop
mov rbx, qword [rsp]
add rsp, 8
ret
Function at 0x140069d00
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
xchg rsi, r12
mov qword [rsp + 0x18], r12
xchg r12, rsi
xchg rdx, rdi
mov qword [rsp + 0x20], rdx
xchg rdx, rdi
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffffa0
mov r11, r11
movabs rbx, 0x272443bc375a2e49
xor rbx, 0x527e35b6
sub rbx, 0x22f5d35
sub rbx, 0x459778a3
sub rbx, 0x1ad343de
xchg rcx, rdi
mov rcx, rdi
xchg rdi, rcx
cmp qword [rcx + 0x30], rbx
jne 0x140069f14
xor esi, esi
xchg rbp, rbp
mov dword [rbp - 0x40], 0x771d2c13
sub dword [rbp - 0x40], 0x699007dc
sub dword [rbp - 0x40], 0x61b50a6
sub dword [rbp - 0x40], 0x72bd388
mov dword [rbp - 0x3c], 0xa5b8475
add dword [rbp - 0x3c], 0x6ebd3406
xor dword [rbp - 0x3c], 0x1746367b
add dword [rbp - 0x3c], 0xc4b4a47
xor dword [rbp - 0x3c], 0x7af8d86f
mov dword [rbp - 0x38], 0xb31a8eb
add dword [rbp - 0x38], 0x50f8d622
xor dword [rbp - 0x38], 0x26b6c18d
sub dword [rbp - 0x38], 0x3b336dbe
sub dword [rbp - 0x38], 0x3f1e508a
mov dword [rbp - 0x34], 0x1ad1475c
sub dword [rbp - 0x34], 0x12e91535
add dword [rbp - 0x34], 0x1924741
sub dword [rbp - 0x34], 0x97878fb
mov dword [rbp - 0x30], 0x7ab46155
sub dword [rbp - 0x30], 0x3e235673
sub dword [rbp - 0x30], 0x314ae1d
xor dword [rbp - 0x30], 0x393a5ca3
mov dword [rbp - 0x2c], 0x561fed87
sub dword [rbp - 0x2c], 0x245c877e
add dword [rbp - 0x2c], 0xc7e0fc4
xor dword [rbp - 0x2c], 0x3e1d75ff
xchg rsi, rbx
mov qword [rbp + 0x10], rbx
xchg rsi, rbx
xchg rsi, rax
mov rsi, qword [rbp + 0x10]
xchg rsi, rax
mov rcx, qword [rbp + 0x10]
mov rax, qword [rbp + 0x10]
and cl, 3
mov dword [rsp - 0x34], 0x359782c9
shl cl, 1
shl cl, 2
movzx edx, word [rbp + rax*2 - 0x40]
mov dword [rsp - 0x1c], ecx
mov eax, 0x55453d06
add eax, 0x996371e
add eax, 0x75c1dad
sub eax, 0x35d96f89
shr eax, cl
mov dword [rsp - 0x44], edx
movzx ecx, al
xchg r9, rax
mov r9, qword [rbp + 0x10]
xchg r9, rax
xor cx, dx
mov dword [rsp - 0x18], 0x42b1ce9d
mov word [rbp + rax*2 - 0x28], cx
mov rax, qword [rbp + 0x10]
inc rax
mov r10, r10
xchg rcx, rax
mov qword [rbp + 0x10], rcx
xchg rcx, rax
xchg rcx, rax
mov rcx, qword [rbp + 0x10]
xchg rcx, rax
cmp rax, 0xc
jb 0x140069e2c
mov dword [rsp - 0xc], edx
xor edx, edx
mov word [rbp - 0x10], si
lea rcx, [rbp - 0x28]
call fcn.14008bbd0
mov rsi, rsi
mov rdx, rax
mov r8, rax
xor eax, eax
mov dword [rsp - 0x44], 0x67d43402
xor rdx, rbx
xchg rdx, rsp
mov qword [rdi + 0x30], rsp
xchg rsp, rdx
lea rdi, [rbp - 0x28]
lea ecx, [rax + 0xc]
mov dword [rsp - 0x1c], edx
rep stosb byte [rdi], al
cmp rdx, rbx
je 0x140069f1e
xchg rbp, rbp
lea rdx, [0x1401422c0]
xchg rdi, r8
mov rcx, rdi
xchg r8, rdi
call fcn.14006e3e8
xchg rbp, rbp
test al, al
setne al
jmp 0x140069f1e
mov al, 0x7b
sub al, 0x11
sub al, 5
xor al, 7
xor al, 0x63
lea r11, [rsp + 0x60]
xchg r14, r14
xchg r10, rbx
mov r10, qword [r11 + 0x18]
xchg r10, rbx
mov rsi, qword [r11 + 0x20]
xchg rdi, rsp
mov rsp, qword [r11 + 0x28]
xchg rdi, rsp
mov rsp, r11
xchg r10, r10
nop
add rsp, 8
mov rbp, qword [rsp - 8]
ret
Function at 0x140069f50
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
xchg r9, rsi
mov qword [rsp + 0x18], r9
xchg r9, rsi
xchg r15, rdi
mov qword [rsp + 0x20], r15
xchg rdi, r15
push rbp
mov dword [rsp - 0x18], 0x3d4f939e
xchg rsp, r11
mov rbp, r11
xchg r11, rsp
add rsp, 0xffffffffffffffb0
movabs rbx, 0x272443bc36d2612f
xor rbx, 0x3905dd17
add rbx, 0x5eb23ad6
sub rbx, 0x6bfff4c5
mov rdi, rcx
mov dword [rsp - 0x24], ebp
cmp qword [rcx + 0x28], rbx
jne 0x14006a15a
mov r8d, 0x2447a367
xor r8d, 0x4dbdd708
sub r8d, 0x5a620aca
xor r8d, 0x510db8bb
sub r8d, 0x5e95d11b
mov dword [rbp - 0x30], 0x6679b23d
add dword [rbp - 0x30], 0x197bd96f
xor dword [rbp - 0x30], 0x6642424e
xor dword [rbp - 0x30], 0x19f9c9e5
xor esi, esi
xchg rdx, rdx
mov dword [rbp - 0x2c], 0x4c326620
xor dword [rbp - 0x2c], 0x5c6bf902
add dword [rbp - 0x2c], 0x45d468ff
sub dword [rbp - 0x2c], 0x562b07e6
mov dword [rbp - 0x28], 0x50228370
sub dword [rbp - 0x28], 0x142de560
add dword [rbp - 0x28], 0x36e0f35e
sub dword [rbp - 0x28], 0x20d795c3
xor dword [rbp - 0x28], 0x51f1fbd1
mov dword [rbp - 0x24], 0x252dbfa9
sub dword [rbp - 0x24], 0xd8e0cb5
add dword [rbp - 0x24], 0x348b9781
xor dword [rbp - 0x24], 0x4c774a4f
lea eax, [r8 + 0x21]
mov dword [rsp - 0x18], esp
mov word [rbp - 0x20], ax
mov qword [rbp + 0x10], rsi
xchg r15, rax
mov r15, qword [rbp + 0x10]
xchg r15, rax
xchg rdi, rcx
mov rdi, qword [rbp + 0x10]
xchg rdi, rcx
mov rax, qword [rbp + 0x10]
xchg rbx, rbx
and cl, r8b
shl cl, 3
movzx edx, word [rbp + rax*2 - 0x30]
mov dword [rsp - 0x1c], 0x3e33095
mov eax, 0x1834e92c
sub eax, 0x5da16e1
xor eax, 0x54642255
sub eax, 0x15e0cdd6
shr eax, cl
movzx ecx, al
mov dword [rsp - 0x40], ecx
xchg r11, rax
mov r11, qword [rbp + 0x10]
xchg r11, rax
xor cx, dx
mov dword [rsp - 0x34], 0x2ac4908
mov word [rbp + rax*2 - 0x1e], cx
mov rax, qword [rbp + 0x10]
inc rax
xchg r12, r12
xchg rcx, rax
mov qword [rbp + 0x10], rcx
xchg rcx, rax
mov rax, qword [rbp + 0x10]
cmp rax, 9
mov rsp, rsp
jb 0x14006a067
xor edx, edx
mov word [rbp - 0xc], si
lea rcx, [rbp - 0x1e]
xchg r10, r10
call fcn.14008bbd0
xchg r10, rax
mov rdx, r10
xchg r10, rax
mov r8, rax
xor eax, eax
mov dword [rsp - 0x30], 0x69125eb5
xor rdx, rbx
xchg rdx, r14
mov qword [rdi + 0x28], r14
xchg rdx, r14
lea rdi, [rbp - 0x1e]
xchg rbx, rbx
lea ecx, [rax + 9]
rep stosb byte [rdi], al
cmp rdx, rbx
mov dword [rsp - 0xc], 0x32f93069
je 0x14006a164
lea rdx, [0x140142810]
xchg rcx, r8
mov r8, rcx
xchg r8, rcx
call fcn.140072794
test al, al
mov dword [rsp - 0x44], 0x69b50850
setne al
jmp 0x14006a164
mov al, 0x7a
xor al, 0x4d
add al, 0x21
add al, 0x21
xor al, 0x78
mov rbx, qword [rsp + 0x68]
mov dword [rsp - 0x2c], edx
xchg r8, rsi
mov r8, qword [rsp + 0x70]
xchg rsi, r8
mov rdi, qword [rsp + 0x78]
mov dword [rsp - 0xc], ebp
nop
sub rsp, 0x371f858a
add rsp, 0x371f85da
nop
mov rbp, qword [rsp]
add rsp, 8
ret
Function at 0x14006a19c
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
mov dword [rsp - 0x3c], 0x4cf08a59
nop
sub rsp, 8
mov qword [rsp], rbp
xchg rsp, rbp
mov rsp, rbp
xchg rsp, rbp
add rsp, 0xffffffffffffffb0
movabs rbx, 0x272443bc7520083f
xor rbx, 0x110acd4c
sub rbx, 0x49dc090c
sub rbx, 0x17c4ba1e
mov rdi, rcx
cmp qword [rcx + 0x38], rbx
mov r10, r10
jne 0x14006a375
xor esi, esi
mov dword [rbp - 0x30], 0x4adf39e1
add dword [rbp - 0x30], 0x2af64475
sub dword [rbp - 0x30], 0x5a29b310
add dword [rbp - 0x30], 0xba7ab07
sub dword [rbp - 0x30], 0x27017633
mov dword [rbp - 0x2c], 0x3c2b3ff5
add dword [rbp - 0x2c], 0x2a579e69
xor dword [rbp - 0x2c], 0x83d4ec5
sub dword [rbp - 0x2c], 0x6e7d905e
mov dword [rbp - 0x28], 0x6980a2da
sub dword [rbp - 0x28], 0x5b5dd299
xor dword [rbp - 0x28], 0x529a9ef5
sub dword [rbp - 0x28], 0x5ca24e78
mov dword [rbp - 0x24], 0x48afb4c7
xor dword [rbp - 0x24], 0x46beb5ba
add dword [rbp - 0x24], 0x6aec4718
sub dword [rbp - 0x24], 0x78a94825
mov dword [rbp - 0x20], 0xefab0df
add dword [rbp - 0x20], 0x632da44e
sub dword [rbp - 0x20], 0x3952f1f5
sub dword [rbp - 0x20], 0x38876314
xchg rsi, rbx
mov qword [rbp + 0x10], rbx
xchg rbx, rsi
xchg rdx, rax
mov rdx, qword [rbp + 0x10]
xchg rdx, rax
mov rcx, qword [rbp + 0x10]
mov dword [rsp - 0x18], esi
mov rax, qword [rbp + 0x10]
and cl, 3
shl cl, 1
shl cl, 2
movzx edx, word [rbp + rax*2 - 0x30]
mov eax, 0x7712c2ca
xor eax, 0x65543753
add eax, 0x332dcce8
sub eax, 0x1516a039
shr eax, cl
xchg r15, r15
movzx ecx, al
mov rax, qword [rbp + 0x10]
xor cx, dx
mov dword [rsp - 0x40], esp
mov word [rbp + rax*2 - 0x1c], cx
mov rax, qword [rbp + 0x10]
inc rax
xchg r12, rax
mov qword [rbp + 0x10], r12
xchg r12, rax
xchg rsp, rax
mov rsp, qword [rbp + 0x10]
xchg rsp, rax
cmp rax, 0xa
xchg rbx, rbx
jb 0x14006a29f
xor edx, edx
mov word [rbp - 8], si
mov dword [rsp - 0x24], 0x2c1fb073
lea rcx, [rbp - 0x1c]
call fcn.14008bbd0
xchg rsi, rax
mov rdx, rsi
xchg rsi, rax
mov r8, rax
xor eax, eax
mov dword [rsp - 0x2c], 0x68928329
xor rdx, rbx
mov qword [rdi + 0x38], rdx
lea rdi, [rbp - 0x1c]
lea ecx, [rax + 0xa]
mov r13, r13
rep stosb byte [rdi], al
cmp rdx, rbx
je 0x14006a37d
mov r14, r14
lea rdx, [0x140142830]
xchg r9, r8
mov rcx, r9
xchg r9, r8
call fcn.140072a5c
mov dword [rsp - 0x2c], edx
test al, al
setne al
jmp 0x14006a37d
mov al, 0x6f
sub al, 0x4e
add al, 0x37
sub al, 0x57
mov rbx, qword [rsp + 0x68]
xchg r13, r13
mov rsi, qword [rsp + 0x70]
xchg rdi, rdx
mov rdx, qword [rsp + 0x78]
xchg rdi, rdx
sub rsp, 0xffffffffffffffb0
pop rbp
ret
Function at 0x14006a39c
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
xchg rsi, r9
mov qword [rsp + 0x18], r9
xchg r9, rsi
xchg r11, rdi
mov qword [rsp + 0x20], r11
xchg rdi, r11
nop
push r14
mov qword [rsp], rbp
xchg rdx, rsp
mov rbp, rdx
xchg rsp, rdx
nop
add rsp, 0x7f40d14b
sub rsp, 0x7f40d19b
movabs rbx, 0x272443bc2c08d904
add rbx, 0x3519c739
add rbx, 0x137145ed
sub rbx, 0x7209e3e1
xchg rcx, rdi
mov rcx, rdi
xchg rdi, rcx
cmp qword [rcx + 0x20], rbx
mov dword [rsp - 0x44], 0x32e12e90
jne 0x14006a5ba
mov eax, 0xad7fe13
sub eax, 0xab9cd41
add eax, 0x6301188e
sub eax, 0x631f492e
mov dword [rbp - 0x30], 0x3c7cefcc
xor dword [rbp - 0x30], 0x48a24a94
xor dword [rbp - 0x30], 0x3ac0b33c
sub dword [rbp - 0x30], 0x4dd41649
mov word [rbp - 0x1c], ax
xor esi, esi
mov dword [rsp - 0x14], 0x5c747692
mov dword [rbp - 0x2c], 0x49c5d861
xor dword [rbp - 0x2c], 0x4a9917c1
add dword [rbp - 0x2c], 0x635004c7
xor dword [rbp - 0x2c], 0x66f0d45c
mov dword [rbp - 0x28], 0x38f63907
xor dword [rbp - 0x28], 0x6c4a4e6a
add dword [rbp - 0x28], 0x27fcba1b
sub dword [rbp - 0x28], 0x7ca83164
mov dword [rbp - 0x24], 0x5d59facb
xor dword [rbp - 0x24], 0x7166015b
add dword [rbp - 0x24], 0x4bdebd24
sub dword [rbp - 0x24], 0xcf991ff
xor dword [rbp - 0x24], 0x6b3b26d9
mov dword [rbp - 0x20], 0x3bbee8
xor dword [rbp - 0x20], 0x6684a2ce
sub dword [rbp - 0x20], 0x4baac7b0
sub dword [rbp - 0x20], 0x1ac6544a
mov qword [rbp + 0x10], rsi
mov rax, qword [rbp + 0x10]
mov rbp, rbp
mov rcx, qword [rbp + 0x10]
xchg r14, rax
mov r14, qword [rbp + 0x10]
xchg r14, rax
and cl, 3
shl cl, 2
shl cl, 1
movzx edx, word [rbp + rax*2 - 0x30]
mov eax, 0x4b2a9e05
xor eax, 0x5c73e6b8
add eax, 0x519a4fed
xor eax, 0x5ec3bd2e
sub eax, 0x5d2533c
shr eax, cl
movzx ecx, al
xchg r13, rax
mov r13, qword [rbp + 0x10]
xchg r13, rax
xor cx, dx
mov word [rbp + rax*2 - 0x1a], cx
mov dword [rsp - 0xc], 0x4fb01976
mov rax, qword [rbp + 0x10]
inc rax
xchg r14, rax
mov qword [rbp + 0x10], r14
xchg r14, rax
xchg rbx, rax
mov rbx, qword [rbp + 0x10]
xchg rbx, rax
cmp rax, 0xb
mov dword [rsp - 0x28], 0x604e2cf0
jb 0x14006a4d0
xor edx, edx
mov word [rbp - 4], si
lea rcx, [rbp - 0x1a]
xchg r11, r11
call fcn.14008bbd0
xchg rdx, rax
mov rax, rdx
xchg rdx, rax
xchg rbp, r8
mov rbp, rax
xchg r8, rbp
xor eax, eax
xor rdx, rbx
mov qword [rdi + 0x20], rdx
mov dword [rsp - 0x34], 0x5531ff7f
lea rdi, [rbp - 0x1a]
lea ecx, [rax + 0xb]
rep stosb byte [rdi], al
cmp rdx, rbx
mov dword [rsp - 0x34], 0x207ee3fc
je 0x14006a5c2
lea rdx, str.jX_
mov rcx, r8
mov dword [rsp - 0x18], 0x2ee22f54
call fcn.140072e18
test al, al
setne al
mov dword [rsp - 0x44], esi
jmp 0x14006a5c2
mov al, 3
add al, 9
add al, 0x54
sub al, 0x5f
mov rbx, qword [rsp + 0x68]
xchg rbp, rbp
mov rsi, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x78]
nop
add rsp, 0x9874243
sub rsp, 0x98741f3
nop
add rsp, 8
mov rbp, qword [rsp - 8]
ret