joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140055d30
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov dword [rsp - 0x40], ecx
push rsi
push rdi
nop
mov qword [rsp - 8], r14
sub rsp, 8
add rsp, 0xffffffffffffffe0
lea rsi, [rdx + 8]
mov dword [rsp - 0x34], ebp
xorps xmm0, xmm0
mov qword [rdx], rsi
xor edi, edi
mov dword [rsp - 0x10], 0x11a88e59
movups xmmword [rsi], xmm0
xchg r9, rcx
mov r14, rcx
xchg rcx, r9
xchg r8, rbp
mov r8, rbp
xchg r8, rbp
xchg rsi, r8
movups xmmword [r8 + 0x10], xmm0
xchg rsi, r8
xchg r9, rbx
mov r9, rdx
xchg r9, rbx
xchg r12, rsi
movups xmmword [r12 + 0x20], xmm0
xchg r12, rsi
mov qword [rdx + 0x38], rdi
mov rax, qword [rcx + 0x38]
mov r10, r10
cmp r8, rax
jae 0x140055f56
sub rax, r8
mov dword [rsp - 0x3c], edx
mov qword [rsp + 0x40], r15
cmp rax, r9
cmovb r14, rax
xchg rcx, rcx
xchg r14, r13
mov qword [rdx + 0x38], r13
xchg r14, r13
xchg rdx, rax
mov rdx, qword [rcx]
xchg rdx, rax
xchg rcx, rbx
mov rbx, qword [rdx]
xchg rbx, rcx
lea r15, [rax + r8*2]
mov dword [rsp - 0x44], ecx
cmp rcx, rsi
je 0x140055dfd
call fcn.1400999d0
mov dword [rsp - 0x28], 0x24e8f859
cmp r14, 0x18
jbe 0x140055e38
lea rcx, [r14 + r14]
xchg r14, r14
call fcn.140099d10
mov qword [rbx], rax
test rax, rax
mov dword [rsp - 0x14], 0x73980f59
jne 0x140055e46
mov qword [rbx], rsi
xchg rdi, rdx
mov r9, rdx
xchg rdi, rdx
jmp 0x140055e69
mov qword [rbx], rsi
mov rax, rsi
mov dword [rsp - 0x28], 0x5338d6eb
xorps xmm0, xmm0
xchg r10, rax
movups xmmword [r10], xmm0
xchg r10, rax
xchg rdx, rax
movups xmmword [rdx + 0x10], xmm0
xchg rdx, rax
movups xmmword [rax + 0x20], xmm0
xchg r14, r14
xchg r13, r9
mov r13, qword [rbx]
xchg r13, r9
and ebp, 3
mov rbp, rbp
mov r8d, 0x773adfb8
sub r8d, 0x51269662
xor r8d, 0x10709c61
add r8d, 0x443cb104
sub r8d, 0x4bf23388
shl ebp, 3
mov edx, r8d
mov rbx, rbx
movzx ecx, bpl
ror edx, cl
cmp qword [rbx + 0x38], rdi
jbe 0x140055f1b
xchg rdi, rdi
sub r15, r9
mov ecx, 0x5aadabfb
add ecx, 0x3a94b8e
xor ecx, 0x6f8bb8f3
sub ecx, 0x2bab4e6c
sub ecx, 0x632000f
nop dword [rax]
nop word [rax + rax]
movzx eax, dx
mov rbx, rbx
lea r9, [r9 + 2]
xor ax, r8w
ror edx, 8
and ax, cx
xchg rsp, rsp
ror r8d, 1
ror r8d, 4
ror r8d, 3
xor ax, word [r15 + r9 - 2]
mov rdi, rdi
inc rdi
mov word [r9 - 2], ax
cmp rdi, qword [rbx + 0x38]
mov dword [rsp - 0x28], ebx
jb 0x140055eda
mov r15, qword [rsp + 0x40]
mov rax, rbx
xchg r11, rbx
mov r11, qword [rsp + 0x48]
xchg rbx, r11
mov rbp, qword [rsp + 0x50]
nop
sub rsp, 0x28b02921
add rsp, 0x28b02941
nop
mov r14, qword [rsp]
add rsp, 8
pop rdi
nop
mov rsi, qword [rsp]
add rsp, 8
ret
xchg rbx, r8
mov rax, r8
xchg r8, rbx
jmp 0x140055f23

Function at 0x140056350
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e67c
mov r10, rcx
mov eax, dword [0x140143ad0]
mov dword [rsp - 0x34], 0x51c53692
cmp qword [0x140143bb8], 0
jne 0x14008e400
syscall
mov dword [rsp - 0x2c], edi
ret

Function at 0x140056370
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x28]
mov byte [rsp + 0x28], al
jmp 0x14008ecbf
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140143b68]
xchg r11, r11
cmp qword [0x140143bb8], 0
jne 0x14008e400
syscall
ret
Function at 0x140056380
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e470
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140143aa0]
cmp qword [0x140143bb8], 0
mov r13, r13
jne 0x14008e400
syscall
ret

Function at 0x140056390
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ea19
xchg rcx, r14
mov r10, r14
xchg r14, rcx
mov eax, dword [0x140143b28]
cmp qword [0x140143bb8], 0
mov r15, r15
jne 0x14008e400
syscall
ret

Function at 0x1400563a0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e8ba
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140143b08]
cmp qword [0x140143bb8], 0
jne 0x14008e400
mov dword [rsp - 0x44], 0x44f9a33e
syscall
ret

Function at 0x1400563b0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e4cb
xchg r9, r10
mov r9, rcx
xchg r9, r10
mov eax, dword [0x140143aa8]
cmp qword [0x140143bb8], 0
jne 0x14008e400
mov dword [rsp - 0x20], 0x1bfcafcc
syscall
ret

Function at 0x1400563c0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008eb3d
xchg rcx, r11
mov r10, r11
xchg r11, rcx
mov eax, dword [0x140143b44]
mov dword [rsp - 0x14], ebp
cmp qword [0x140143bb8], 0
jne 0x14008e400
syscall
ret

Function at 0x1400563d0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008eb67
mov r10, rcx
mov eax, dword [0x140143b48]
xchg r9, r9
cmp qword [0x140143bb8], 0
jne 0x14008e400
syscall
mov dword [rsp - 0x10], 0x2b2aaeb3
ret

Function at 0x1400563e0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ea99
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140143b34]
xchg rdx, rdx
cmp qword [0x140143bb8], 0
jne 0x14008e400
syscall
ret

Function at 0x1400563f0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008eac2
xchg r11, rcx
mov r10, r11
xchg r11, rcx
mov eax, dword [0x140143b38]
cmp qword [0x140143bb8], 0
mov dword [rsp - 0x3c], 0x6ddf093e
jne 0x14008e400
syscall
ret

Function at 0x140056400
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e6a8
xchg r10, rdi
mov rdi, rcx
xchg rdi, r10
mov eax, dword [0x140143ad4]
cmp qword [0x140143bb8], 0
jne 0x14008e400
mov dword [rsp - 0x3c], 0x6afe70d9
syscall
ret

Function at 0x140056410
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e96c
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140143b18]
cmp qword [0x140143bb8], 0
jne 0x14008e400
xchg r10, r10
syscall
ret

Function at 0x140056420
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e9c3
xchg rsp, rcx
mov r10, rsp
xchg rsp, rcx
mov eax, dword [0x140143b20]
cmp qword [0x140143bb8], 0
jne 0x14008e400
mov dword [rsp - 0x3c], ebx
syscall
ret

Function at 0x140056430
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e49d
xchg rcx, rbp
mov r10, rbp
xchg rcx, rbp
mov eax, dword [0x140143aa4]
cmp qword [0x140143bb8], 0
mov dword [rsp - 0x14], ebx
jne 0x14008e400
syscall
ret

Function at 0x140056440
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ea42
xchg rdx, rcx
mov r10, rdx
xchg rdx, rcx
mov eax, dword [0x140143b2c]
cmp qword [0x140143bb8], 0
jne 0x14008e400
xchg r15, r15
syscall
ret
Function at 0x140056450
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e867
xchg r10, r9
mov r9, rcx
xchg r10, r9
mov eax, dword [0x140143b00]
mov r11, r11
cmp qword [0x140143bb8], 0
jne 0x14008e400
syscall
mov rdx, rdx
ret

Function at 0x140056460
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e893
mov r10, rcx
mov dword [rsp - 0x34], esi
mov eax, dword [0x140143b04]
cmp qword [0x140143bb8], 0
jne 0x14008e400
syscall
mov r14, r14
ret

Function at 0x140056470
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e72e
mov r10, rcx
mov eax, dword [0x140143ae0]
cmp qword [0x140143bb8], 0
mov dword [rsp - 0x38], esp
jne 0x14008e400
syscall
ret

Function at 0x140056480
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x58]
mov rbx, rbx
mov byte [rsp + 0x58], al
movzx eax, byte [rsp + 0x48]
mov byte [rsp + 0x48], al
xchg rcx, rcx
jmp 0x14008ec96
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140143b64]
cmp qword [0x140143bb8], 0
jne 0x14008e400
mov rdx, rdx
syscall
ret

Function at 0x1400564a0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e5a1
mov r10, rcx
mov dword [rsp - 0x2c], 0x4ceec5e4
mov eax, dword [0x140143abc]
cmp qword [0x140143bb8], 0
jne 0x14008e400
mov dword [rsp - 0x30], ebp
syscall
ret

Function at 0x1400564b0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e5cd
mov r10, rcx
mov eax, dword [0x140143ac0]
mov dword [rsp - 0x44], 0x2a0f9920
cmp qword [0x140143bb8], 0
jne 0x14008e400
syscall
mov rcx, rcx
ret

Function at 0x1400564c0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e5f8
xchg rcx, r8
mov r10, r8
xchg r8, rcx
mov eax, dword [0x140143ac4]
cmp qword [0x140143bb8], 0
jne 0x14008e400
mov rdx, rdx
syscall
ret

Function at 0x1400564d0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e621
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140143ac8]
cmp qword [0x140143bb8], 0
jne 0x14008e400
mov dword [rsp - 0x14], esi
syscall
ret

Function at 0x1400564e0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e577
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140143ab8]
mov dword [rsp - 0x14], ebx
cmp qword [0x140143bb8], 0
jne 0x14008e400
syscall
ret

Function at 0x1400564f0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008eaf0
xchg r13, r10
mov r13, rcx
xchg r10, r13
mov eax, dword [0x140143b3c]
cmp qword [0x140143bb8], 0
jne 0x14008e400
mov r14, r14
syscall
ret

Function at 0x140056500
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e64b
xchg rcx, r14
mov r10, r14
xchg r14, rcx
mov eax, dword [0x140143acc]
mov dword [rsp - 0x28], 0x624ccec
cmp qword [0x140143bb8], 0
jne 0x14008e400
syscall
mov rbx, rbx
ret

Function at 0x140056510
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e4f9
mov r10, rcx
mov eax, dword [0x140143aac]
cmp qword [0x140143bb8], 0
mov dword [rsp - 0x18], 0x2b7df2b2
jne 0x14008e400
syscall
ret

Function at 0x140056520
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e6d6
xchg rcx, r8
mov r10, r8
xchg rcx, r8
mov eax, dword [0x140143ad8]
cmp qword [0x140143bb8], 0
mov dword [rsp - 0x3c], 0x56c25f26
jne 0x14008e400
syscall
ret
Function at 0x140056530
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e916
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140143b10]
mov rbx, rbx
cmp qword [0x140143bb8], 0
jne 0x14008e400
syscall
mov dword [rsp - 0x2c], ebx
ret

Function at 0x140056540
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e995
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140143b1c]
mov dword [rsp - 0x38], edi
cmp qword [0x140143bb8], 0
jne 0x14008e400
syscall
mov dword [rsp - 0x34], esp
ret

Function at 0x140056560
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e54e
xchg rcx, rdx
mov r10, rdx
xchg rcx, rdx
mov eax, dword [0x140143ab4]
mov rdi, rdi
cmp qword [0x140143bb8], 0
jne 0x14008e400
syscall
ret

Function at 0x140056570
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ec6c
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140143b60]
cmp qword [0x140143bb8], 0
jne 0x14008e400
mov dword [rsp - 0xc], ebx
syscall
ret

Function at 0x140056580
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008eb19
mov r10, rcx
mov eax, dword [0x140143b40]
mov dword [rsp - 0x24], edi
cmp qword [0x140143bb8], 0
jne 0x14008e400
syscall
ret

Function at 0x140056590
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ec13
xchg rbx, rcx
mov r10, rbx
xchg rbx, rcx
mov eax, dword [0x140143b58]
cmp qword [0x140143bb8], 0
mov dword [rsp - 0x2c], 0x302b3b8
jne 0x14008e400
syscall
ret

Function at 0x1400565a0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e9ed
mov r10, rcx
mov dword [rsp - 0x38], 0x59e1e6a4
mov eax, dword [0x140143b24]
cmp qword [0x140143bb8], 0
jne 0x14008e400
syscall
mov dword [rsp - 0x38], ebx
ret

Function at 0x1400565b0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ec41
mov r10, rcx
mov dword [rsp - 0x14], 0x5740d440
mov eax, dword [0x140143b5c]
cmp qword [0x140143bb8], 0
jne 0x14008e400
syscall
xchg r15, r15
ret

Function at 0x1400565c0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e521
xchg rcx, r8
mov r10, r8
xchg r8, rcx
mov eax, dword [0x140143ab0]
mov dword [rsp - 0x28], ebx
cmp qword [0x140143bb8], 0
jne 0x14008e400
syscall
mov r11, r11
ret

Function at 0x1400565d0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e704
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140143adc]
cmp qword [0x140143bb8], 0
mov dword [rsp - 0x20], ebp
jne 0x14008e400
syscall
ret
Function at 0x140069908
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
xchg rsi, r14
mov qword [rsp + 0x18], r14
xchg rsi, r14
mov qword [rsp + 0x20], rdi
mov dword [rsp - 0x18], 0x4b11180
nop
mov qword [rsp - 8], rbp
sub rsp, 8
xchg rsp, rbp
mov rsp, rbp
xchg rbp, rsp
sub rsp, 0x60
mov dword [rsp - 0x28], ebp
movabs rbx, 0x6dfa0d903b23538b
add rbx, 0x18b578b1
sub rbx, 0xf948f72
xor rbx, 0x75c0c23f
xor rbx, 0x2f1afef6
mov rdi, rcx
cmp qword [rcx + 0x30], rbx
xchg r12, r12
jne 0x140069b22
xor esi, esi
mov dword [rbp - 0x40], 0x74b5b6cd
xor dword [rbp - 0x40], 0x50ba8fe2
sub dword [rbp - 0x40], 0xb40fd01
sub dword [rbp - 0x40], 0x18983b3c
mov dword [rbp - 0x3c], 0x5fa019ae
sub dword [rbp - 0x3c], 0x4fb09b2b
xor dword [rbp - 0x3c], 0x7d19a9ec
sub dword [rbp - 0x3c], 0x72a7d696
mov dword [rbp - 0x38], 0x7a33b871
xor dword [rbp - 0x38], 0x360e89a6
sub dword [rbp - 0x38], 0x367a75ac
add dword [rbp - 0x38], 0x64e2b087
sub dword [rbp - 0x38], 0x7a6a6bef
mov dword [rbp - 0x34], 0x23ec3afe
add dword [rbp - 0x34], 0x2d107183
xor dword [rbp - 0x34], 0x3c27c6a0
sub dword [rbp - 0x34], 0x2cd2ea54
sub dword [rbp - 0x34], 0x3fec7f31
mov dword [rbp - 0x30], 0x1d58b024
add dword [rbp - 0x30], 0x4f86ef89
sub dword [rbp - 0x30], 0x16cd7cf5
sub dword [rbp - 0x30], 0x1af8b1d2
sub dword [rbp - 0x30], 0x3ae37049
mov dword [rbp - 0x2c], 0x2eca92cf
xor dword [rbp - 0x2c], 0x7606504f
xor dword [rbp - 0x2c], 0x10e0be9b
sub dword [rbp - 0x2c], 0x47ea7b58
xchg rsi, r13
mov qword [rbp + 0x10], r13
xchg r13, rsi
mov rax, qword [rbp + 0x10]
xchg r10, rcx
mov r10, qword [rbp + 0x10]
xchg r10, rcx
mov rax, qword [rbp + 0x10]
and cl, 3
mov dword [rsp - 0x10], edi
shl cl, 3
movzx edx, word [rbp + rax*2 - 0x40]
mov eax, 0x5ebfae98
add eax, 0x1f69e125
sub eax, 0x2fb4b804
sub eax, 0x2a534200
add eax, 0xa8dbcfa
shr eax, cl
xchg r9, r9
movzx ecx, al
mov rax, qword [rbp + 0x10]
xor cx, dx
mov r14, r14
mov word [rbp + rax*2 - 0x28], cx
xchg r12, rax
mov r12, qword [rbp + 0x10]
xchg r12, rax
inc rax
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov dword [rsp - 0x40], 0x25c99abc
cmp rax, 0xc
jb 0x140069a43
xor edx, edx
mov word [rbp - 0x10], si
mov dword [rsp - 0xc], 0x6d370c8b
lea rcx, [rbp - 0x28]
call fcn.14008be30
xchg rbx, rax
mov rdx, rbx
xchg rbx, rax
mov r8, rax
xchg r12, r12
xor eax, eax
xor rdx, rbx
mov qword [rdi + 0x30], rdx
mov dword [rsp - 0x1c], ebx
lea rdi, [rbp - 0x28]
lea ecx, [rax + 0xc]
rep stosb byte [rdi], al
cmp rdx, rbx
xchg rbx, rbx
je 0x140069b2c
lea rdx, [0x1401432c0]
xchg r8, rcx
mov r8, rcx
xchg r8, rcx
call fcn.14006e430
mov dword [rsp - 0x38], 0x27b47aa8
test al, al
setne al
jmp 0x140069b2c
mov al, 0x1b
add al, 0x4c
sub al, 0x3e
sub al, 6
xor al, 0x22
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x18]
mov dword [rsp - 0x44], ebp
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
xchg rsp, r11
mov r11, rsp
xchg r11, rsp
nop
mov rbp, qword [rsp]
add rsp, 8
ret
Function at 0x140069b54
Capabilities:
Encode data using xor

Disassembly:
xchg rbp, rbx
mov qword [rsp + 0x10], rbp
xchg rbp, rbx
xchg rsi, rdi
mov qword [rsp + 0x18], rdi
xchg rdi, rsi
mov qword [rsp + 0x20], rdi
push rbp
xchg rbp, r11
mov r11, rsp
xchg r11, rbp
neg rsp
sub rsp, 0xffffffffffffffb0
neg rsp
movabs rbx, 0x6dfa0d90034b5f75
xor rbx, 0x2b87e2ce
xor rbx, 0x50930b55
xor rbx, 0x483c2ed4
sub rbx, 0x11c59837
xchg rcx, rbx
mov rdi, rbx
xchg rcx, rbx
cmp qword [rcx + 0x28], rbx
mov r15, r15
jne 0x140069d44
mov eax, 0x7d39424e
sub eax, 0x6ef900e6
add eax, 0x3529e0f5
sub eax, 0x436a217e
mov dword [rbp - 0x30], 0x5e9a8fa0
add dword [rbp - 0x30], 0x1112e2c4
sub dword [rbp - 0x30], 0x47c8a7ab
sub dword [rbp - 0x30], 0x27a6c9bd
mov word [rbp - 0x20], ax
xor esi, esi
mov dword [rbp - 0x2c], 0x14559815
add dword [rbp - 0x2c], 0x4ee3f6fe
sub dword [rbp - 0x2c], 0x1718a410
sub dword [rbp - 0x2c], 0x4c03ea39
mov dword [rbp - 0x28], 0x725dbe46
xor dword [rbp - 0x28], 0x412fa33
sub dword [rbp - 0x28], 0xaaa8e2f
xor dword [rbp - 0x28], 0x9d39c8a
sub dword [rbp - 0x28], 0x61fb2a4b
mov dword [rbp - 0x24], 0x168383c3
xor dword [rbp - 0x24], 0x3b96707c
add dword [rbp - 0x24], 0x2cb81de4
add dword [rbp - 0x24], 0x567a932
sub dword [rbp - 0x24], 0x5ef3ba0a
mov qword [rbp + 0x10], rsi
xchg rsi, rax
mov rsi, qword [rbp + 0x10]
xchg rsi, rax
xchg rdi, rcx
mov rdi, qword [rbp + 0x10]
xchg rdi, rcx
mov rax, qword [rbp + 0x10]
and cl, 3
shl cl, 2
shl cl, 1
movzx edx, word [rbp + rax*2 - 0x30]
mov dword [rsp - 0x2c], 0x5d46402b
mov eax, 0x588b0116
xor eax, 0x1b22cd41
xor eax, 0x6664bef5
add eax, 0x10688a53
sub eax, 0x786aa42
shr eax, cl
movzx ecx, al
mov dword [rsp - 0x30], 0x66bab300
mov rax, qword [rbp + 0x10]
xor cx, dx
mov word [rbp + rax*2 - 0x1e], cx
mov rax, qword [rbp + 0x10]
mov dword [rsp - 0x2c], esp
inc rax
mov qword [rbp + 0x10], rax
xchg r9, rax
mov r9, qword [rbp + 0x10]
xchg r9, rax
cmp rax, 9
jb 0x140069c63
mov dword [rsp - 0x18], edx
xor edx, edx
mov word [rbp - 0xc], si
lea rcx, [rbp - 0x1e]
mov dword [rsp - 0x38], ebp
call fcn.14008be30
xchg rdx, rax
mov rax, rdx
xchg rdx, rax
xchg r8, rax
mov rax, r8
xchg r8, rax
xor eax, eax
xor rdx, rbx
mov rsi, rsi
mov qword [rdi + 0x28], rdx
lea rdi, [rbp - 0x1e]
lea ecx, [rax + 9]
rep stosb byte [rdi], al
xchg r9, r9
cmp rdx, rbx
je 0x140069d4c
lea rdx, [0x140143810]
xchg rdi, rdi
xchg r8, rcx
mov r8, rcx
xchg r8, rcx
call fcn.1400725b8
test al, al
setne al
xchg r14, r14
jmp 0x140069d4c
mov al, 0x3e
xor al, 0x29
add al, 0x17
xor al, 0x2f
mov rbx, qword [rsp + 0x68]
mov dword [rsp - 0x24], 0x399fa44c
mov rsi, qword [rsp + 0x70]
xchg rcx, rdi
mov rcx, qword [rsp + 0x78]
xchg rdi, rcx
neg rsp
add rsp, 0xffffffffffffffb0
neg rsp
nop
mov rbp, qword [rsp]
add rsp, 8
ret
Function at 0x140069d80
Capabilities:
Encode data using xor

Disassembly:
xchg rsi, rbx
mov qword [rsp + 0x10], rsi
xchg rsi, rbx
xchg rbx, rsi
mov qword [rsp + 0x18], rbx
xchg rsi, rbx
mov qword [rsp + 0x20], rdi
nop
sub rsp, 8
mov qword [rsp], rbp
xchg rbp, r12
mov r12, rsp
xchg rbp, r12
add rsp, 0xffffffffffffffb0
xchg rbp, rbp
movabs rbx, 0x6dfa0d904b835a78
xor rbx, 0x32d110e8
sub rbx, 0x42b570dc
xor rbx, 0x21ac2b84
add rbx, 0x76d0dd3
xchg rcx, r14
mov rdi, r14
xchg rcx, r14
cmp qword [rcx + 0x38], rbx
jne 0x140069f90
xor esi, esi
xchg r8, r8
mov dword [rbp - 0x30], 0x1694d6dd
xor dword [rbp - 0x30], 0xcbe7351
sub dword [rbp - 0x30], 0x10102802
xor dword [rbp - 0x30], 0xa387d6b
mov dword [rbp - 0x2c], 0x10952f26
xor dword [rbp - 0x2c], 0x6fccc9ce
sub dword [rbp - 0x2c], 0x2c604237
sub dword [rbp - 0x2c], 0x41679936
xor dword [rbp - 0x2c], 0x11ce0bb7
mov dword [rbp - 0x28], 0x61d72479
add dword [rbp - 0x28], 0xd351150
sub dword [rbp - 0x28], 0x379da0c7
sub dword [rbp - 0x28], 0x376436bd
add dword [rbp - 0x28], 0x5ba282
mov dword [rbp - 0x24], 0x579a81da
xor dword [rbp - 0x24], 0x1ffeb55a
xor dword [rbp - 0x24], 0x4510910d
xor dword [rbp - 0x24], 0x5bc401d6
sub dword [rbp - 0x24], 0x5666a3da
mov dword [rbp - 0x20], 0x42a8091e
add dword [rbp - 0x20], 0x56260a0
sub dword [rbp - 0x20], 0x15cfe805
sub dword [rbp - 0x20], 0x31fc80da
xchg r15, rsi
mov qword [rbp + 0x10], r15
xchg r15, rsi
xchg rdi, rax
mov rdi, qword [rbp + 0x10]
xchg rdi, rax
xchg rsi, rcx
mov rsi, qword [rbp + 0x10]
xchg rsi, rcx
mov rax, qword [rbp + 0x10]
xchg rbp, rbp
and cl, 3
shl cl, 1
shl cl, 2
movzx edx, word [rbp + rax*2 - 0x30]
mov dword [rsp - 0x3c], esp
mov eax, 0x59cd73cb
sub eax, 0x56acea32
xor eax, 0x200b523c
add eax, 0xb83770e
shr eax, cl
xchg rdi, rdi
movzx ecx, al
xchg r9, rax
mov r9, qword [rbp + 0x10]
xchg r9, rax
xor cx, dx
mov word [rbp + rax*2 - 0x1c], cx
mov dword [rsp - 0xc], esi
mov rax, qword [rbp + 0x10]
inc rax
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
xchg r15, r15
cmp rax, 0xa
jb 0x140069ea5
xor edx, edx
mov dword [rsp - 0x14], 0x6a593333
mov word [rbp - 8], si
lea rcx, [rbp - 0x1c]
call fcn.14008be30
mov dword [rsp - 0x3c], 0x6f2a8424
xchg rdx, rax
mov rax, rdx
xchg rdx, rax
xchg r8, r12
mov r12, rax
xchg r8, r12
xor eax, eax
xor rdx, rbx
xchg rdx, rbx
mov qword [rdi + 0x38], rbx
xchg rbx, rdx
lea rdi, [rbp - 0x1c]
lea ecx, [rax + 0xa]
xchg rdx, rdx
rep stosb byte [rdi], al
cmp rdx, rbx
je 0x140069f98
mov dword [rsp - 0xc], 0x6ab1b038
lea rdx, [0x140143830]
xchg r14, r8
mov rcx, r14
xchg r14, r8
call fcn.1400729c8
test al, al
setne al
mov r10, r10
jmp 0x140069f98
mov al, 0x58
xor al, 6
xor al, 0x58
xor al, 7
xchg rdx, rbx
mov rdx, qword [rsp + 0x68]
xchg rbx, rdx
mov rsi, qword [rsp + 0x70]
mov dword [rsp - 0x10], edi
mov rdi, qword [rsp + 0x78]
neg rsp
add rsp, 0xffffffffffffffb0
neg rsp
nop
mov rbp, qword [rsp]
add rsp, 8
ret
Function at 0x140069fc8
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
xchg rsi, rcx
mov qword [rsp + 0x18], rcx
xchg rsi, rcx
mov qword [rsp + 0x20], rdi
mov dword [rsp - 0x30], edi
nop
sub rsp, 8
mov qword [rsp], rbp
mov rbp, rsp
mov rbp, rbp
add rsp, 0xffffffffffffffb0
movabs rbx, 0x6dfa0d90199c7829
xor rbx, 0x412e0819
xor rbx, 0x5ad13314
add rbx, 0x38a14f2d
sub rbx, 0x1c66924e
xchg rcx, rdi
mov rcx, rdi
xchg rdi, rcx
cmp qword [rcx + 0x20], rbx
mov dword [rsp - 0x3c], 0x7e37bfc4
jne 0x14006a1e2
mov eax, 0x4704a0f7
xor eax, 0x4a83eab7
add eax, 0x27dc0006
xor eax, 0x35634a85
mov dword [rbp - 0x30], 0x72007880
xor dword [rbp - 0x30], 0x2d81a0e
sub dword [rbp - 0x30], 0x46e64cc2
xor dword [rbp - 0x30], 0xe736f52
sub dword [rbp - 0x30], 0x274779be
mov word [rbp - 0x1c], ax
xor esi, esi
mov r11, r11
mov dword [rbp - 0x2c], 0x6adb1f74
sub dword [rbp - 0x2c], 0x1d1f7ca9
xor dword [rbp - 0x2c], 0x39e89851
xor dword [rbp - 0x2c], 0x74113a50
mov dword [rbp - 0x28], 0x5d35e4e
add dword [rbp - 0x28], 0x6a9f9fb1
xor dword [rbp - 0x28], 0x5985e331
sub dword [rbp - 0x28], 0x29961def
mov dword [rbp - 0x24], 0x6c75de1e
sub dword [rbp - 0x24], 0x3390d63d
add dword [rbp - 0x24], 0x40c4d090
sub dword [rbp - 0x24], 0x79a9d7d4
mov dword [rbp - 0x20], 0x11737fb6
add dword [rbp - 0x20], 0x103c6256
add dword [rbp - 0x20], 0x45c8ba82
add dword [rbp - 0x20], 0x1309e189
sub dword [rbp - 0x20], 0x7a447d40
mov qword [rbp + 0x10], rsi
xchg r14, rax
mov r14, qword [rbp + 0x10]
xchg r14, rax
xchg rcx, r13
mov r13, qword [rbp + 0x10]
xchg r13, rcx
mov rax, qword [rbp + 0x10]
xchg rbx, rbx
and cl, 3
shl cl, 1
shl cl, 2
movzx edx, word [rbp + rax*2 - 0x30]
mov eax, 0x59b6622d
sub eax, 0x1c3a2a80
xor eax, 0x2e254a4c
xor eax, 0x548335f4
sub eax, 0x192af562
shr eax, cl
xchg rbp, rbp
movzx ecx, al
mov rax, qword [rbp + 0x10]
xor cx, dx
mov word [rbp + rax*2 - 0x1a], cx
mov dword [rsp - 0x44], 0x645e85f3
mov rax, qword [rbp + 0x10]
inc rax
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
xchg r13, r13
cmp rax, 0xb
jb 0x14006a0f8
xor edx, edx
xchg r8, r8
mov word [rbp - 4], si
lea rcx, [rbp - 0x1a]
call fcn.14008be30
xchg rdx, rdx
xchg rdx, rax
mov rax, rdx
xchg rdx, rax
xchg r8, rcx
mov rcx, rax
xchg r8, rcx
xor eax, eax
mov dword [rsp - 0x44], 0x39a80f10
xor rdx, rbx
xchg rdx, r11
mov qword [rdi + 0x20], r11
xchg r11, rdx
lea rdi, [rbp - 0x1a]
xchg rbx, rbx
lea ecx, [rax + 0xb]
rep stosb byte [rdi], al
cmp rdx, rbx
mov dword [rsp - 0x28], 0x6b390bd2
je 0x14006a1ea
lea rdx, [0x140143298]
xchg r8, r14
mov rcx, r14
xchg r8, r14
call fcn.140072e1c
test al, al
setne al
mov r11, r11
jmp 0x14006a1ea
mov al, 0x71
sub al, 0x26
sub al, 0x2a
xor al, 0x20
mov rbx, qword [rsp + 0x68]
mov dword [rsp - 0x10], 0x6247a532
xchg rbx, rsi
mov rbx, qword [rsp + 0x70]
xchg rsi, rbx
xchg rsi, rdi
mov rsi, qword [rsp + 0x78]
xchg rdi, rsi
nop
add rsp, 0x514c1fd0
sub rsp, 0x514c1f80
nop
mov rbp, qword [rsp]
add rsp, 8
ret