joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140055640
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
xchg rsi, rsi
xchg rbp, rcx
mov qword [rsp + 0x18], rcx
xchg rbp, rcx
push rsi
push rdi
xchg r14, r14
push r14
neg rsp
sub rsp, 0xffffffffffffffe0
neg rsp
lea rsi, [rdx + 8]
xorps xmm0, xmm0
mov rcx, rcx
xchg rsi, rcx
mov qword [rdx], rcx
xchg rsi, rcx
xor edi, edi
mov dword [rsp - 0x14], 0x7fdaa4f
xchg rdi, rsi
movups xmmword [rdi], xmm0
xchg rsi, rdi
xchg r14, r11
mov r11, r9
xchg r11, r14
xchg r8, rdi
mov rbp, rdi
xchg r8, rdi
xchg rsi, rcx
movups xmmword [rcx + 0x10], xmm0
xchg rcx, rsi
xchg rdx, rbp
mov rbx, rbp
xchg rdx, rbp
xchg r14, rsi
movups xmmword [r14 + 0x20], xmm0
xchg r14, rsi
xchg r10, rdi
mov qword [rdx + 0x38], r10
xchg r10, rdi
mov rax, qword [rcx + 0x38]
mov r15, r15
cmp r8, rax
jae 0x140055873
sub rax, r8
mov r8, r8
xchg r15, rbp
mov qword [rsp + 0x40], rbp
xchg r15, rbp
cmp rax, r9
mov r11, r11
cmovb r14, rax
mov qword [rdx + 0x38], r14
mov rax, qword [rcx]
mov rcx, qword [rdx]
xchg r13, r13
lea r15, [rax + r8*2]
cmp rcx, rsi
je 0x140055711
call fcn.140098770
xchg r8, r8
cmp r14, 0x18
jbe 0x140055747
lea rcx, [r14 + r14]
call fcn.1400989f0
xchg rdi, rdi
mov qword [rbx], rax
test rax, rax
jne 0x140055757
xchg rdi, rdi
mov qword [rbx], rsi
xchg r8, r9
mov r8, rdi
xchg r9, r8
jmp 0x14005577d
xchg rsi, r11
mov qword [rbx], r11
xchg r11, rsi
xchg rcx, rax
mov rcx, rsi
xchg rcx, rax
xorps xmm0, xmm0
xchg r12, rax
movups xmmword [r12], xmm0
xchg r12, rax
xchg r11, rax
movups xmmword [r11 + 0x10], xmm0
xchg r11, rax
xchg rdi, rax
movups xmmword [rdi + 0x20], xmm0
xchg rdi, rax
xchg r9, r10
mov r10, qword [rbx]
xchg r10, r9
and ebp, 3
mov rbx, rbx
mov r8d, 0x1fcacaaf
add r8d, 0xe2bf48d
xor r8d, 0x55582099
xor r8d, 0x37cfc155
shl ebp, 3
mov edx, r8d
mov r13, r13
movzx ecx, bpl
ror edx, cl
cmp qword [rbx + 0x38], rdi
xchg r10, r10
jbe 0x14005582c
sub r15, r9
mov ecx, 0xa85b980
xor ecx, 0x64c3cfcb
sub ecx, 0x312e8d92
sub ecx, 0x3d17e7ba
nop dword [rax]
nop word [rax + rax]
mov dword [rsp - 0x40], ebx
movzx eax, dx
lea r9, [r9 + 2]
xor ax, r8w
ror edx, 6
ror edx, 1
ror edx, 1
and ax, cx
ror r8d, 2
ror r8d, 1
ror r8d, 2
ror r8d, 1
ror r8d, 2
xor ax, word [r15 + r9 - 2]
inc rdi
mov dword [rsp - 0x24], ebx
mov word [r9 - 2], ax
cmp rdi, qword [rbx + 0x38]
jb 0x1400557e5
mov dword [rsp - 0x34], ebp
xchg r15, r12
mov r12, qword [rsp + 0x40]
xchg r12, r15
mov rax, rbx
mov r10, r10
xchg rcx, rbx
mov rcx, qword [rsp + 0x48]
xchg rcx, rbx
xchg r15, rbp
mov r15, qword [rsp + 0x50]
xchg rbp, r15
neg rsp
add rsp, 0xffffffffffffffe0
neg rsp
nop
add rsp, 8
mov r14, qword [rsp - 8]
pop rdi
nop
add rsp, 8
mov rsi, qword [rsp - 8]
ret
xchg rbx, rax
mov rbx, rax
xchg rbx, rax
jmp 0x14005583d

Function at 0x140055c60
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d667
mov r10, rcx
mov eax, dword [0x140141f30]
mov rdx, rdx
cmp qword [0x140142018], 0
jne 0x14008d3e0
syscall
ret
Function at 0x140055c80
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x28]
mov byte [rsp + 0x28], al
jmp 0x14008dcc5
xchg rbp, rcx
mov r10, rbp
xchg rbp, rcx
mov eax, dword [0x140141fc8]
mov r15, r15
cmp qword [0x140142018], 0
jne 0x14008d3e0
syscall
xchg rsp, rsp
ret

Function at 0x140055c90
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d468
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140141f00]
mov dword [rsp - 0x38], ecx
cmp qword [0x140142018], 0
jne 0x14008d3e0
syscall
mov rdi, rdi
ret

Function at 0x140055ca0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d9ff
xchg r11, r10
mov r11, rcx
xchg r11, r10
mov eax, dword [0x140141f88]
mov dword [rsp - 0x18], 0x6ba49fce
cmp qword [0x140142018], 0
jne 0x14008d3e0
syscall
ret

Function at 0x140055cb0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d8b0
xchg r12, r10
mov r12, rcx
xchg r10, r12
mov eax, dword [0x140141f68]
xchg rsp, rsp
cmp qword [0x140142018], 0
jne 0x14008d3e0
syscall
ret

Function at 0x140055cc0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d4cb
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140141f08]
cmp qword [0x140142018], 0
jne 0x14008d3e0
mov dword [rsp - 0x18], edi
syscall
ret

Function at 0x140055cd0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008db37
xchg r8, r10
mov r8, rcx
xchg r10, r8
mov eax, dword [0x140141fa4]
cmp qword [0x140142018], 0
jne 0x14008d3e0
xchg rdx, rdx
syscall
ret

Function at 0x140055ce0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008db60
xchg rcx, r9
mov r10, r9
xchg rcx, r9
mov eax, dword [0x140141fa8]
mov dword [rsp - 0x1c], 0x546bbb36
cmp qword [0x140142018], 0
jne 0x14008d3e0
syscall
ret

Function at 0x140055cf0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008da87
xchg r8, rcx
mov r10, r8
xchg rcx, r8
mov eax, dword [0x140141f94]
mov dword [rsp - 0x38], 0x7e5b11d9
cmp qword [0x140142018], 0
jne 0x14008d3e0
syscall
mov dword [rsp - 0x40], 0x98eca72
ret

Function at 0x140055d00
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008dabd
mov r10, rcx
mov eax, dword [0x140141f98]
mov dword [rsp - 0x40], ebp
cmp qword [0x140142018], 0
jne 0x14008d3e0
syscall
xchg r12, r12
ret

Function at 0x140055d10
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d68a
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140141f34]
cmp qword [0x140142018], 0
mov dword [rsp - 0x44], ecx
jne 0x14008d3e0
syscall
ret

Function at 0x140055d20
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d954
mov r10, rcx
mov eax, dword [0x140141f78]
xchg r12, r12
cmp qword [0x140142018], 0
jne 0x14008d3e0
syscall
mov rcx, rcx
ret

Function at 0x140055d30
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d9a8
xchg rcx, r8
mov r10, r8
xchg r8, rcx
mov eax, dword [0x140141f80]
xchg r13, r13
cmp qword [0x140142018], 0
jne 0x14008d3e0
syscall
mov rsp, rsp
ret

Function at 0x140055d40
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d499
xchg rdi, rcx
mov r10, rdi
xchg rdi, rcx
mov eax, dword [0x140141f04]
cmp qword [0x140142018], 0
jne 0x14008d3e0
mov dword [rsp - 0x20], 0x570ba7f9
syscall
ret
Function at 0x140055d50
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008da2d
xchg rcx, rdx
mov r10, rdx
xchg rcx, rdx
mov eax, dword [0x140141f8c]
mov dword [rsp - 0x14], ecx
cmp qword [0x140142018], 0
jne 0x14008d3e0
syscall
xchg r13, r13
ret

Function at 0x140055d60
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d859
xchg rbp, r10
mov rbp, rcx
xchg rbp, r10
mov eax, dword [0x140141f60]
mov dword [rsp - 0xc], 0xb6e8228
cmp qword [0x140142018], 0
jne 0x14008d3e0
syscall
ret

Function at 0x140055d70
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d887
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140141f64]
xchg r13, r13
cmp qword [0x140142018], 0
jne 0x14008d3e0
syscall
ret

Function at 0x140055d80
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d70a
mov r10, rcx
mov r13, r13
mov eax, dword [0x140141f40]
cmp qword [0x140142018], 0
jne 0x14008d3e0
mov r10, r10
syscall
ret

Function at 0x140055d90
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x58]
mov byte [rsp + 0x58], al
mov dword [rsp - 0x34], ebp
movzx eax, byte [rsp + 0x48]
mov byte [rsp + 0x48], al
jmp 0x14008dc95
mov r10, rcx
mov eax, dword [0x140141fc4]
mov dword [rsp - 0x1c], 0x5666127f
cmp qword [0x140142018], 0
jne 0x14008d3e0
syscall
mov dword [rsp - 0x38], 0x25dffcaa
ret

Function at 0x140055db0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d59a
xchg r11, r10
mov r11, rcx
xchg r11, r10
mov eax, dword [0x140141f1c]
cmp qword [0x140142018], 0
jne 0x14008d3e0
xchg r14, r14
syscall
ret

Function at 0x140055dc0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d5c3
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140141f20]
mov dword [rsp - 0x34], 0x4533c1df
cmp qword [0x140142018], 0
jne 0x14008d3e0
syscall
ret

Function at 0x140055dd0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d5f1
xchg rcx, rbp
mov r10, rbp
xchg rbp, rcx
mov eax, dword [0x140141f24]
cmp qword [0x140142018], 0
jne 0x14008d3e0
xchg rbx, rbx
syscall
ret

Function at 0x140055de0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d61a
mov r10, rcx
mov eax, dword [0x140141f28]
xchg r9, r9
cmp qword [0x140142018], 0
jne 0x14008d3e0
syscall
ret

Function at 0x140055df0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d571
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140141f18]
cmp qword [0x140142018], 0
mov r10, r10
jne 0x14008d3e0
syscall
ret

Function at 0x140055e00
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008dae4
xchg rbp, rcx
mov r10, rbp
xchg rcx, rbp
mov eax, dword [0x140141f9c]
cmp qword [0x140142018], 0
mov dword [rsp - 0x2c], ecx
jne 0x14008d3e0
syscall
ret

Function at 0x140055e10
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d63d
xchg r10, rsi
mov rsi, rcx
xchg rsi, r10
mov eax, dword [0x140141f2c]
cmp qword [0x140142018], 0
jne 0x14008d3e0
mov dword [rsp - 0x14], esi
syscall
ret

Function at 0x140055e20
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d4f5
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140141f0c]
xchg r12, r12
cmp qword [0x140142018], 0
jne 0x14008d3e0
syscall
ret
Function at 0x140055e30
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d6b4
xchg r10, r11
mov r11, rcx
xchg r11, r10
mov eax, dword [0x140141f38]
mov r15, r15
cmp qword [0x140142018], 0
jne 0x14008d3e0
syscall
mov dword [rsp - 0x38], edx
ret

Function at 0x140055e40
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d902
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140141f70]
mov rsp, rsp
cmp qword [0x140142018], 0
jne 0x14008d3e0
syscall
ret

Function at 0x140055e50
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d97a
xchg r9, r10
mov r9, rcx
xchg r9, r10
mov eax, dword [0x140141f7c]
mov dword [rsp - 0x44], 0x50ffbef4
cmp qword [0x140142018], 0
jne 0x14008d3e0
syscall
ret

Function at 0x140055e70
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d548
xchg rsp, rcx
mov r10, rsp
xchg rsp, rcx
mov eax, dword [0x140141f14]
cmp qword [0x140142018], 0
jne 0x14008d3e0
xchg r15, r15
syscall
ret

Function at 0x140055e80
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008dc68
xchg r14, r10
mov r14, rcx
xchg r14, r10
mov eax, dword [0x140141fc0]
mov dword [rsp - 0x10], ebp
cmp qword [0x140142018], 0
jne 0x14008d3e0
syscall
mov rdi, rdi
ret

Function at 0x140055e90
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008db0e
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140141fa0]
cmp qword [0x140142018], 0
jne 0x14008d3e0
mov r13, r13
syscall
ret

Function at 0x140055ea0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008dc11
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140141fb8]
cmp qword [0x140142018], 0
jne 0x14008d3e0
mov dword [rsp - 0x44], 0x325ab74b
syscall
ret

Function at 0x140055eb0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d9d4
mov r10, rcx
mov eax, dword [0x140141f84]
mov rdi, rdi
cmp qword [0x140142018], 0
jne 0x14008d3e0
syscall
mov dword [rsp - 0x18], 0x5701c30e
ret

Function at 0x140055ec0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008dc3f
xchg rbp, r10
mov rbp, rcx
xchg r10, rbp
mov eax, dword [0x140141fbc]
xchg rbx, rbx
cmp qword [0x140142018], 0
jne 0x14008d3e0
syscall
ret

Function at 0x140055ed0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d51e
xchg r9, rcx
mov r10, r9
xchg r9, rcx
mov eax, dword [0x140141f10]
cmp qword [0x140142018], 0
mov dword [rsp - 0x1c], ecx
jne 0x14008d3e0
syscall
ret

Function at 0x140055ee0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d6e1
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140141f3c]
cmp qword [0x140142018], 0
xchg r13, r13
jne 0x14008d3e0
syscall
ret
Function at 0x140068e48
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r10
mov qword [rsp + 0x10], r10
xchg r10, rbx
xchg rsi, rbp
mov qword [rsp + 0x18], rbp
xchg rsi, rbp
xchg r10, rdi
mov qword [rsp + 0x20], r10
xchg r10, rdi
push rbp
mov dword [rsp - 0x44], 0x57c4614b
xchg rdx, rbp
mov rdx, rsp
xchg rbp, rdx
neg rsp
sub rsp, 0xffffffffffffffa0
neg rsp
movabs rbx, 0x618d41206a99f1fe
add rbx, 0x5584971
sub rbx, 0x3596b8fb
sub rbx, 0x2b212756
xchg rcx, rdi
mov rcx, rdi
xchg rdi, rcx
cmp qword [rcx + 0x30], rbx
mov dword [rsp - 0x24], 0x3aadd829
jne 0x14006907f
xor esi, esi
mov dword [rbp - 0x40], 0xbe8c440
add dword [rbp - 0x40], 0x51799ca8
sub dword [rbp - 0x40], 0x5295b9f
add dword [rbp - 0x40], 0x2627ab4c
sub dword [rbp - 0x40], 0x7e26afe4
mov dword [rbp - 0x3c], 0xdf0384
add dword [rbp - 0x3c], 0x1d26a53b
sub dword [rbp - 0x3c], 0x11d065ac
sub dword [rbp - 0x3c], 0xc0742fc
mov dword [rbp - 0x38], 0x2ceb45ba
xor dword [rbp - 0x38], 0x4dcc6f25
sub dword [rbp - 0x38], 0x6ce5598
sub dword [rbp - 0x38], 0x3769aa5e
sub dword [rbp - 0x38], 0x22b82a29
mov dword [rbp - 0x34], 0x3849af6d
add dword [rbp - 0x34], 0x3bb264c5
sub dword [rbp - 0x34], 0x306da4e
sub dword [rbp - 0x34], 0x70783992
mov dword [rbp - 0x30], 0x6e589bb6
xor dword [rbp - 0x30], 0x17b71dd3
add dword [rbp - 0x30], 0x3325abd
xor dword [rbp - 0x30], 0x6a56ae0
xor dword [rbp - 0x30], 0x7bbe8b1c
mov dword [rbp - 0x2c], 0x4ab496b0
sub dword [rbp - 0x2c], 0x31683576
add dword [rbp - 0x2c], 0x3347e805
xor dword [rbp - 0x2c], 0x96f760c
xor dword [rbp - 0x2c], 0x45d83f3e
mov qword [rbp + 0x10], rsi
mov rax, qword [rbp + 0x10]
mov r8, r8
xchg rcx, r13
mov r13, qword [rbp + 0x10]
xchg rcx, r13
mov rax, qword [rbp + 0x10]
mov rsi, rsi
and cl, 3
shl cl, 1
shl cl, 2
movzx edx, word [rbp + rax*2 - 0x40]
xchg rdx, rdx
mov eax, 0x5a4b730e
sub eax, 0x2824b26d
sub eax, 0x1fe103f4
add eax, 0x1d726bc7
add eax, 0x1fa9367c
shr eax, cl
xchg r14, r14
movzx ecx, al
xchg r14, rax
mov r14, qword [rbp + 0x10]
xchg r14, rax
xor cx, dx
mov word [rbp + rax*2 - 0x28], cx
mov dword [rsp - 0x18], 0x7d0e0484
mov rax, qword [rbp + 0x10]
inc rax
xchg rsi, rax
mov qword [rbp + 0x10], rsi
xchg rsi, rax
mov rax, qword [rbp + 0x10]
mov dword [rsp - 0x3c], 0x22851720
cmp rax, 0xc
jb 0x140068f90
xor edx, edx
xchg rbp, rbp
mov word [rbp - 0x10], si
lea rcx, [rbp - 0x28]
call fcn.14008add0
mov rsp, rsp
mov rdx, rax
xchg rcx, rax
mov r8, rcx
xchg rcx, rax
xor eax, eax
mov dword [rsp - 0x14], 0x53f70094
xor rdx, rbx
xchg rdx, r11
mov qword [rdi + 0x30], r11
xchg rdx, r11
lea rdi, [rbp - 0x28]
lea ecx, [rax + 0xc]
xchg r8, r8
rep stosb byte [rdi], al
cmp rdx, rbx
je 0x140069087
mov rbx, rbx
lea rdx, [0x1401412c0]
xchg rsp, r8
mov rcx, rsp
xchg r8, rsp
call fcn.14006d6a4
test al, al
xchg r9, r9
setne al
jmp 0x140069087
mov al, 0x19
add al, 0x30
add al, 0x31
sub al, 0x79
lea r11, [rsp + 0x60]
mov dword [rsp - 0x28], 0x6bf16dea
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
xchg rbx, rdi
mov rbx, qword [r11 + 0x28]
xchg rbx, rdi
xchg r13, rsp
mov r13, r11
xchg r13, rsp
pop rbp
mov r9, r9
ret
Function at 0x1400690b4
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, rcx
mov qword [rsp + 0x10], rcx
xchg rcx, rbx
xchg rsi, r10
mov qword [rsp + 0x18], r10
xchg rsi, r10
mov qword [rsp + 0x20], rdi
push rbp
mov rsp, rsp
mov rbp, rsp
neg rsp
sub rsp, 0xffffffffffffffb0
neg rsp
movabs rbx, 0x618d4120555d1fbb
add rbx, 0x1d812b75
sub rbx, 0x36f8ab70
add rbx, 0x22d119d4
xor rbx, 0x518ce28a
xchg rdi, rbp
mov rbp, rcx
xchg rbp, rdi
cmp qword [rcx + 0x28], rbx
jne 0x140069299
mov eax, 0x36c2c285
sub eax, 0x2f7d323e
add eax, 0x40ffa671
sub eax, 0x4845361c
mov dword [rbp - 0x30], 0x7bb688ba
xor dword [rbp - 0x30], 0x5a0a2087
add dword [rbp - 0x30], 0x4ea2c9d0
sub dword [rbp - 0x30], 0x702d714e
mov word [rbp - 0x20], ax
xor esi, esi
mov dword [rsp - 0x20], ebx
mov dword [rbp - 0x2c], 0x6c1ab957
xor dword [rbp - 0x2c], 0x54f9b340
xor dword [rbp - 0x2c], 0x502b7376
sub dword [rbp - 0x2c], 0x1cf41530
sub dword [rbp - 0x2c], 0x4b58642d
mov dword [rbp - 0x28], 0x692708bc
sub dword [rbp - 0x28], 0x2afc8b88
sub dword [rbp - 0x28], 0x2773de83
xor dword [rbp - 0x28], 0x66b8aa75
xor dword [rbp - 0x28], 0x707e3406
mov dword [rbp - 0x24], 0x2f453b21
add dword [rbp - 0x24], 0x3a1bd196
sub dword [rbp - 0x24], 0x437c6b1e
xor dword [rbp - 0x24], 0x3795bd4b
sub dword [rbp - 0x24], 0x124e1ccd
mov qword [rbp + 0x10], rsi
mov rax, qword [rbp + 0x10]
mov r10, r10
mov rcx, qword [rbp + 0x10]
xchg rdi, rax
mov rdi, qword [rbp + 0x10]
xchg rdi, rax
and cl, 3
shl cl, 2
shl cl, 1
movzx edx, word [rbp + rax*2 - 0x30]
mov eax, 0x55c228f9
add eax, 0x95c0502
sub eax, 0x2a6d4ea1
add eax, 0x1ab07f96
shr eax, cl
movzx ecx, al
mov rax, qword [rbp + 0x10]
mov dword [rsp - 0x20], 0x6be26b12
xor cx, dx
mov word [rbp + rax*2 - 0x1e], cx
mov rax, qword [rbp + 0x10]
mov dword [rsp - 0x38], esp
inc rax
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
xchg rsp, rsp
cmp rax, 9
jb 0x1400691c7
xor edx, edx
mov word [rbp - 0xc], si
xchg r9, r9
lea rcx, [rbp - 0x1e]
call fcn.14008add0
mov rdx, rax
xchg rdi, rdi
xchg rsi, rax
mov r8, rsi
xchg rsi, rax
xor eax, eax
mov r8, r8
xor rdx, rbx
xchg rcx, rdx
mov qword [rdi + 0x28], rcx
xchg rdx, rcx
lea rdi, [rbp - 0x1e]
lea ecx, [rax + 9]
xchg r8, r8
rep stosb byte [rdi], al
cmp rdx, rbx
je 0x1400692a3
lea rdx, [0x140141810]
mov dword [rsp - 0x28], ebp
xchg r8, rcx
mov r8, rcx
xchg r8, rcx
call fcn.1400719f8
mov r9, r9
test al, al
setne al
jmp 0x1400692a3
mov al, 0x58
add al, 0xd
sub al, 0x5e
add al, 9
sub al, 0xf
xchg rbx, rbp
mov rbp, qword [rsp + 0x68]
xchg rbp, rbx
mov rsi, qword [rsp + 0x70]
mov dword [rsp - 0x18], ebx
mov rdi, qword [rsp + 0x78]
neg rsp
add rsp, 0xffffffffffffffb0
neg rsp
nop
add rsp, 8
mov rbp, qword [rsp - 8]
ret
Function at 0x1400692d4
Capabilities:
Encode data using xor

Disassembly:
xchg r11, rbx
mov qword [rsp + 0x10], r11
xchg r11, rbx
mov qword [rsp + 0x18], rsi
mov dword [rsp - 0x2c], ebp
mov qword [rsp + 0x20], rdi
push rbp
xchg rsp, rcx
mov rbp, rcx
xchg rsp, rcx
add rsp, 0xffffffffffffffb0
mov r14, r14
movabs rbx, 0x618d412026d66ff2
add rbx, 0xb82f4f3
xor rbx, 0x57a94d16
xor rbx, 0x6aca72ed
xchg rcx, r15
mov rdi, r15
xchg r15, rcx
cmp qword [rcx + 0x38], rbx
jne 0x1400694e5
xor esi, esi
mov dword [rsp - 0x14], 0x7549632e
mov dword [rbp - 0x30], 0x6a5cb0cc
sub dword [rbp - 0x30], 0xf9809c7
add dword [rbp - 0x30], 0x101f2220
add dword [rbp - 0x30], 0x117609ce
sub dword [rbp - 0x30], 0x7c2bd251
mov dword [rbp - 0x2c], 0x2c143db7
sub dword [rbp - 0x2c], 0x16853d55
sub dword [rbp - 0x2c], 0x4f95f70
xor dword [rbp - 0x2c], 0x10a8a0f0
mov dword [rbp - 0x28], 0x316625cc
add dword [rbp - 0x28], 0x2541320f
sub dword [rbp - 0x28], 0x40a29e07
sub dword [rbp - 0x28], 0x159ab950
mov dword [rbp - 0x24], 0x7c4f2068
sub dword [rbp - 0x24], 0x3d5c550b
xor dword [rbp - 0x24], 0x59435b8b
sub dword [rbp - 0x24], 0x67869087
mov dword [rbp - 0x20], 0x4b027da7
xor dword [rbp - 0x20], 0x79dab386
xor dword [rbp - 0x20], 0x54e6ab08
xor dword [rbp - 0x20], 0x4eac9729
sub dword [rbp - 0x20], 0x2860f164
xchg r10, rsi
mov qword [rbp + 0x10], r10
xchg rsi, r10
xchg r12, rax
mov r12, qword [rbp + 0x10]
xchg r12, rax
xchg rcx, rbx
mov rbx, qword [rbp + 0x10]
xchg rcx, rbx
mov rax, qword [rbp + 0x10]
xchg r15, r15
and cl, 3
shl cl, 1
shl cl, 1
shl cl, 1
movzx edx, word [rbp + rax*2 - 0x30]
xchg rcx, rcx
mov eax, 0x14a8421d
add eax, 0x94f991f
xor eax, 0x3c5f82a5
add eax, 0x410dd8a7
sub eax, 0x1354d350
shr eax, cl
mov r15, r15
movzx ecx, al
xchg rcx, rax
mov rcx, qword [rbp + 0x10]
xchg rcx, rax
xor cx, dx
mov word [rbp + rax*2 - 0x1c], cx
mov dword [rsp - 0x44], ebp
xchg rbx, rax
mov rbx, qword [rbp + 0x10]
xchg rbx, rax
inc rax
mov dword [rsp - 0x2c], 0x35d59ccc
xchg r15, rax
mov qword [rbp + 0x10], r15
xchg r15, rax
xchg rsi, rax
mov rsi, qword [rbp + 0x10]
xchg rsi, rax
cmp rax, 0xa
mov dword [rsp - 0x3c], 0x738f3220
jb 0x1400693e6
xor edx, edx
mov word [rbp - 8], si
mov r14, r14
lea rcx, [rbp - 0x1c]
call fcn.14008add0
mov rdx, rax
xchg r8, rax
mov rax, r8
xchg r8, rax
xor eax, eax
mov dword [rsp - 0x3c], 0x13692c5f
xor rdx, rbx
xchg rdx, r8
mov qword [rdi + 0x38], r8
xchg rdx, r8
lea rdi, [rbp - 0x1c]
mov dword [rsp - 0xc], 0x19b7a42d
lea ecx, [rax + 0xa]
rep stosb byte [rdi], al
cmp rdx, rbx
mov dword [rsp - 0x34], ebx
je 0x1400694ef
lea rdx, [0x140141830]
xchg r11, rcx
mov r11, r8
xchg r11, rcx
call fcn.140071da8
test al, al
xchg r8, r8
setne al
jmp 0x1400694ef
mov al, 0x57
sub al, 0x43
xor al, 0x31
add al, 0xf
sub al, 0x33
mov rbx, qword [rsp + 0x68]
mov dword [rsp - 0xc], ecx
xchg rdx, rsi
mov rdx, qword [rsp + 0x70]
xchg rdx, rsi
mov rdi, qword [rsp + 0x78]
xchg rbp, rbp
neg rsp
add rsp, 0xffffffffffffffb0
neg rsp
nop
add rsp, 8
mov rbp, qword [rsp - 8]
ret
Function at 0x140069520
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, rsi
mov qword [rsp + 0x10], rsi
xchg rsi, rbx
xchg r10, rsi
mov qword [rsp + 0x18], r10
xchg r10, rsi
xchg rdi, r14
mov qword [rsp + 0x20], r14
xchg rdi, r14
nop
mov qword [rsp - 8], rbp
sub rsp, 8
xchg r11, rbp
mov r11, rsp
xchg r11, rbp
nop
add rsp, 0x37d54fe1
sub rsp, 0x37d55031
movabs rbx, 0x618d41202005e4a6
xor rbx, 0x860e04
add rbx, 0x521838f0
sub rbx, 0x6361c874
xchg rdi, rcx
mov rcx, rdi
xchg rdi, rcx
cmp qword [rcx + 0x20], rbx
mov rsp, rsp
jne 0x14006974c
mov eax, 0x6fc5363f
xor eax, 0x7ffa062f
sub eax, 0x9d8b5c5
add eax, 0x624d00fd
sub eax, 0x68b37b3b
mov dword [rbp - 0x30], 0x560d5bc9
xor dword [rbp - 0x30], 0x1cdaa836
sub dword [rbp - 0x30], 0x426c0a84
xor dword [rbp - 0x30], 0x85de9d8
mov word [rbp - 0x1c], ax
mov r14, r14
xor esi, esi
mov dword [rbp - 0x2c], 0x29741251
add dword [rbp - 0x2c], 0x24e3ebed
xor dword [rbp - 0x2c], 0x57d53e6a
sub dword [rbp - 0x2c], 0xdfcd402
sub dword [rbp - 0x2c], 0xb62ec4e
mov dword [rbp - 0x28], 0x4e6be6b3
add dword [rbp - 0x28], 0x1af6bb78
sub dword [rbp - 0x28], 0x3ba3c732
xor dword [rbp - 0x28], 0x7989e17a
sub dword [rbp - 0x28], 0x53ca3ae7
mov dword [rbp - 0x24], 0xfbe9fdd
add dword [rbp - 0x24], 0x62115fe7
xor dword [rbp - 0x24], 0x335d7ab1
sub dword [rbp - 0x24], 0x42318522
mov dword [rbp - 0x20], 0x279d34e0
add dword [rbp - 0x20], 0x102a4287
xor dword [rbp - 0x20], 0x4815ee3
xor dword [rbp - 0x20], 0x33742910
xchg rcx, rsi
mov qword [rbp + 0x10], rcx
xchg rsi, rcx
mov rax, qword [rbp + 0x10]
mov dword [rsp - 0x34], ecx
xchg r9, rcx
mov r9, qword [rbp + 0x10]
xchg rcx, r9
mov rax, qword [rbp + 0x10]
and cl, 3
mov r14, r14
shl cl, 1
shl cl, 1
shl cl, 1
movzx edx, word [rbp + rax*2 - 0x30]
mov eax, 0x65736e6e
add eax, 0xdd34432
sub eax, 0x439a9517
xor eax, 0x494d9152
sub eax, 0x17802deb
shr eax, cl
mov rcx, rcx
movzx ecx, al
mov rax, qword [rbp + 0x10]
xor cx, dx
mov dword [rsp - 0x44], 0x19177202
mov word [rbp + rax*2 - 0x1a], cx
xchg r12, rax
mov r12, qword [rbp + 0x10]
xchg r12, rax
inc rax
mov qword [rbp + 0x10], rax
xchg r8, r8
mov rax, qword [rbp + 0x10]
cmp rax, 0xb
jb 0x140069666
mov r8, r8
xor edx, edx
mov word [rbp - 4], si
lea rcx, [rbp - 0x1a]
call fcn.14008add0
mov dword [rsp - 0x44], ebp
xchg rdx, rax
mov rax, rdx
xchg rdx, rax
xchg r14, r8
mov r14, rax
xchg r14, r8
xor eax, eax
xor rdx, rbx
mov r9, r9
mov qword [rdi + 0x20], rdx
lea rdi, [rbp - 0x1a]
lea ecx, [rax + 0xb]
xchg rbp, rbp
rep stosb byte [rdi], al
cmp rdx, rbx
je 0x140069756
mov dword [rsp - 0x34], 0x38bee54c
lea rdx, [0x140141298]
xchg r8, rcx
mov r8, rcx
xchg r8, rcx
call fcn.1400721ac
mov dword [rsp - 0x24], esp
test al, al
setne al
jmp 0x140069756
mov al, 0x31
xor al, 0x7f
add al, 0x2f
xor al, 0x6a
sub al, 0x16
mov rbx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
xchg rdi, rbp
mov rbp, qword [rsp + 0x78]
xchg rbp, rdi
add rsp, 0x50
pop rbp
mov rsp, rsp
ret