joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140055af0
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x28]
mov byte [rsp + 0x28], al
jmp 0x14008da04
xchg r14, r10
mov r14, rcx
xchg r10, r14
mov eax, dword [0x140142fc8]
cmp qword [0x140143018], 0
mov rbx, rbx
jne 0x14008d140
syscall
ret

Function at 0x140055b00
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d1b8
xchg rdi, rcx
mov r10, rdi
xchg rdi, rcx
mov eax, dword [0x140142f00]
cmp qword [0x140143018], 0
jne 0x14008d140
mov dword [rsp - 0x14], ecx
syscall
ret

Function at 0x140055b10
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d75d
xchg r8, r10
mov r8, rcx
xchg r8, r10
mov eax, dword [0x140142f88]
mov rsp, rsp
cmp qword [0x140143018], 0
jne 0x14008d140
syscall
ret

Function at 0x140055b20
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d60d
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140142f68]
mov dword [rsp - 0x34], ecx
cmp qword [0x140143018], 0
jne 0x14008d140
syscall
ret

Function at 0x140055b30
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d213
xchg rcx, r9
mov r10, r9
xchg rcx, r9
mov eax, dword [0x140142f08]
mov dword [rsp - 0x28], 0x36f867b0
cmp qword [0x140143018], 0
jne 0x14008d140
syscall
ret

Function at 0x140055b40
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d87c
xchg rcx, r12
mov r10, r12
xchg rcx, r12
mov eax, dword [0x140142fa4]
mov dword [rsp - 0x20], ebp
cmp qword [0x140143018], 0
jne 0x14008d140
syscall
xchg rbp, rbp
ret

Function at 0x140055b50
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d8a9
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140142fa8]
mov dword [rsp - 0x38], 0x8a1d4c3
cmp qword [0x140143018], 0
jne 0x14008d140
syscall
mov dword [rsp - 0x28], ebp
ret

Function at 0x140055b60
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d7d3
xchg rbx, rcx
mov r10, rbx
xchg rcx, rbx
mov eax, dword [0x140142f94]
mov dword [rsp - 0x2c], edi
cmp qword [0x140143018], 0
jne 0x14008d140
syscall
ret

Function at 0x140055b70
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d7fd
mov r10, rcx
mov dword [rsp - 0x28], edi
mov eax, dword [0x140142f98]
cmp qword [0x140143018], 0
jne 0x14008d140
syscall
mov rcx, rcx
ret

Function at 0x140055b80
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d3e0
mov r10, rcx
mov eax, dword [0x140142f34]
mov dword [rsp - 0x38], 0x4ec394db
cmp qword [0x140143018], 0
jne 0x14008d140
syscall
mov dword [rsp - 0x28], 0x287814fc
ret

Function at 0x140055b90
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d6af
xchg rcx, r15
mov r10, r15
xchg r15, rcx
mov eax, dword [0x140142f78]
cmp qword [0x140143018], 0
mov dword [rsp - 0x24], ebx
jne 0x14008d140
syscall
ret

Function at 0x140055ba0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d703
xchg rdx, rcx
mov r10, rdx
xchg rdx, rcx
mov eax, dword [0x140142f80]
xchg r14, r14
cmp qword [0x140143018], 0
jne 0x14008d140
syscall
mov dword [rsp - 0x10], 0x666e43d6
ret

Function at 0x140055bb0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d1e6
xchg r10, r9
mov r9, rcx
xchg r10, r9
mov eax, dword [0x140142f04]
xchg rsi, rsi
cmp qword [0x140143018], 0
jne 0x14008d140
syscall
ret
Function at 0x140055bc0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d786
xchg r10, rbx
mov rbx, rcx
xchg r10, rbx
mov eax, dword [0x140142f8c]
cmp qword [0x140143018], 0
xchg rcx, rcx
jne 0x14008d140
syscall
ret

Function at 0x140055bd0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d5ba
xchg rsi, r10
mov rsi, rcx
xchg r10, rsi
mov eax, dword [0x140142f60]
mov dword [rsp - 0x38], ebp
cmp qword [0x140143018], 0
jne 0x14008d140
syscall
ret

Function at 0x140055be0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d5e4
xchg rsi, r10
mov rsi, rcx
xchg rsi, r10
mov eax, dword [0x140142f64]
mov r9, r9
cmp qword [0x140143018], 0
jne 0x14008d140
syscall
ret

Function at 0x140055bf0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d46d
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140142f40]
xchg rbx, rbx
cmp qword [0x140143018], 0
jne 0x14008d140
syscall
ret

Function at 0x140055c00
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x58]
mov byte [rsp + 0x58], al
movzx eax, byte [rsp + 0x48]
mov dword [rsp - 0x28], ebx
mov byte [rsp + 0x48], al
jmp 0x14008d9db
xchg r10, rsi
mov rsi, rcx
xchg rsi, r10
mov eax, dword [0x140142fc4]
cmp qword [0x140143018], 0
mov r9, r9
jne 0x14008d140
syscall
ret

Function at 0x140055c20
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d2f0
xchg r10, r12
mov r12, rcx
xchg r12, r10
mov eax, dword [0x140142f1c]
mov dword [rsp - 0xc], esi
cmp qword [0x140143018], 0
jne 0x14008d140
syscall
xchg rbx, rbx
ret

Function at 0x140055c30
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d31d
mov r10, rcx
mov eax, dword [0x140142f20]
xchg rbx, rbx
cmp qword [0x140143018], 0
jne 0x14008d140
syscall
ret

Function at 0x140055c40
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d340
mov r10, rcx
mov eax, dword [0x140142f24]
cmp qword [0x140143018], 0
xchg rcx, rcx
jne 0x14008d140
syscall
ret

Function at 0x140055c50
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d363
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140142f28]
cmp qword [0x140143018], 0
xchg r9, r9
jne 0x14008d140
syscall
ret

Function at 0x140055c60
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d2c4
xchg rdi, r10
mov rdi, rcx
xchg r10, rdi
mov eax, dword [0x140142f18]
mov r15, r15
cmp qword [0x140143018], 0
jne 0x14008d140
syscall
mov rsp, rsp
ret

Function at 0x140055c70
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d824
xchg rcx, r13
mov r10, r13
xchg r13, rcx
mov eax, dword [0x140142f9c]
cmp qword [0x140143018], 0
mov dword [rsp - 0x1c], ebx
jne 0x14008d140
syscall
ret

Function at 0x140055c80
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d38c
mov r10, rcx
mov eax, dword [0x140142f2c]
mov dword [rsp - 0x40], 0x79e6c42a
cmp qword [0x140143018], 0
jne 0x14008d140
syscall
ret

Function at 0x140055c90
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d241
xchg r10, r13
mov r13, rcx
xchg r13, r10
mov eax, dword [0x140142f0c]
cmp qword [0x140143018], 0
jne 0x14008d140
mov dword [rsp - 0x34], edi
syscall
ret
Function at 0x140055ca0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d410
mov r10, rcx
mov dword [rsp - 0xc], 0x7af62070
mov eax, dword [0x140142f38]
cmp qword [0x140143018], 0
jne 0x14008d140
mov dword [rsp - 0xc], edx
syscall
ret

Function at 0x140055cb0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d65a
xchg r13, rcx
mov r10, r13
xchg rcx, r13
mov eax, dword [0x140142f70]
mov r9, r9
cmp qword [0x140143018], 0
jne 0x14008d140
syscall
xchg r8, r8
ret

Function at 0x140055cc0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d6d9
xchg rcx, rbp
mov r10, rbp
xchg rcx, rbp
mov eax, dword [0x140142f7c]
cmp qword [0x140143018], 0
mov dword [rsp - 0x3c], ecx
jne 0x14008d140
syscall
ret

Function at 0x140055ce0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d29b
xchg rbp, rcx
mov r10, rbp
xchg rbp, rcx
mov eax, dword [0x140142f14]
cmp qword [0x140143018], 0
jne 0x14008d140
xchg r13, r13
syscall
ret

Function at 0x140055cf0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d9b8
mov r10, rcx
mov eax, dword [0x140142fc0]
mov rsi, rsi
cmp qword [0x140143018], 0
jne 0x14008d140
syscall
ret

Function at 0x140055d00
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d84e
xchg rsp, rcx
mov r10, rsp
xchg rsp, rcx
mov eax, dword [0x140142fa0]
cmp qword [0x140143018], 0
mov dword [rsp - 0x24], 0x71c6e17
jne 0x14008d140
syscall
ret

Function at 0x140055d10
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d95e
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140142fb8]
xchg rdx, rdx
cmp qword [0x140143018], 0
jne 0x14008d140
syscall
mov dword [rsp - 0x44], edi
ret

Function at 0x140055d20
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d734
xchg rcx, r13
mov r10, r13
xchg rcx, r13
mov eax, dword [0x140142f84]
cmp qword [0x140143018], 0
xchg r13, r13
jne 0x14008d140
syscall
ret

Function at 0x140055d30
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d98b
xchg rcx, rsp
mov r10, rsp
xchg rcx, rsp
mov eax, dword [0x140142fbc]
mov dword [rsp - 0x38], ebx
cmp qword [0x140143018], 0
jne 0x14008d140
syscall
mov r11, r11
ret

Function at 0x140055d40
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d26b
mov r10, rcx
mov dword [rsp - 0x18], 0x53f0cfcf
mov eax, dword [0x140142f10]
cmp qword [0x140143018], 0
jne 0x14008d140
mov dword [rsp - 0x30], 0x4ea4cfd1
syscall
ret

Function at 0x140055d50
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d43c
xchg rbp, r10
mov rbp, rcx
xchg rbp, r10
mov eax, dword [0x140142f3c]
mov r8, r8
cmp qword [0x140143018], 0
jne 0x14008d140
syscall
mov dword [rsp - 0x44], 0x74c1daa5
ret
Function at 0x140068ba4
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r11
mov qword [rsp + 0x10], r11
xchg rbx, r11
xchg rdx, rsi
mov qword [rsp + 0x18], rdx
xchg rdx, rsi
xchg r13, rdi
mov qword [rsp + 0x20], r13
xchg rdi, r13
nop
mov qword [rsp - 8], rbp
sub rsp, 8
xchg r12, rbp
mov r12, rsp
xchg rbp, r12
neg rsp
sub rsp, 0xffffffffffffffa0
neg rsp
movabs rbx, 0x165b5c4576896625
sub rbx, 0x4b3c88be
add rbx, 0x2353343e
sub rbx, 0x5527c5a
add rbx, 0x245eaa1b
xchg rdi, r14
mov r14, rcx
xchg r14, rdi
cmp qword [rcx + 0x30], rbx
jne 0x140068dcd
mov dword [rsp - 0x28], ebx
xor esi, esi
mov dword [rbp - 0x40], 0x6e6ad548
xor dword [rbp - 0x40], 0x652e6880
xor dword [rbp - 0x40], 0x6c4e3b01
sub dword [rbp - 0x40], 0x470ff435
sub dword [rbp - 0x40], 0x1f8791ee
mov dword [rbp - 0x3c], 0x6cdb1d17
sub dword [rbp - 0x3c], 0xf68dc30
sub dword [rbp - 0x3c], 0x4c74b376
sub dword [rbp - 0x3c], 0x10cc8d44
mov dword [rbp - 0x38], 0x1b1925b0
sub dword [rbp - 0x38], 0x1a4cec1a
add dword [rbp - 0x38], 0x35a41e4
add dword [rbp - 0x38], 0x68dac60c
sub dword [rbp - 0x38], 0x6c8340ef
mov dword [rbp - 0x34], 0x68644e43
sub dword [rbp - 0x34], 0x53e2ecef
xor dword [rbp - 0x34], 0x3a4ec209
sub dword [rbp - 0x34], 0x2e6da2f5
mov dword [rbp - 0x30], 0x20859e87
xor dword [rbp - 0x30], 0x1989f969
xor dword [rbp - 0x30], 0x69a6b13e
sub dword [rbp - 0x30], 0x5037d607
mov dword [rbp - 0x2c], 0x7a101ed9
sub dword [rbp - 0x2c], 0x3d8bbc9
sub dword [rbp - 0x2c], 0x745e0d72
xor dword [rbp - 0x2c], 0x1e555a9
xchg rsi, rcx
mov qword [rbp + 0x10], rcx
xchg rsi, rcx
mov rax, qword [rbp + 0x10]
mov rbp, rbp
mov rcx, qword [rbp + 0x10]
xchg r11, rax
mov r11, qword [rbp + 0x10]
xchg r11, rax
and cl, 3
shl cl, 3
mov dword [rsp - 0x1c], ebx
movzx edx, word [rbp + rax*2 - 0x40]
mov eax, 0x1f1a4b1e
xor eax, 0x56629f95
sub eax, 0x12b3a655
xor eax, 0x669e39d1
shr eax, cl
mov rsi, rsi
movzx ecx, al
mov rax, qword [rbp + 0x10]
xor cx, dx
mov word [rbp + rax*2 - 0x28], cx
mov rbx, rbx
xchg rcx, rax
mov rcx, qword [rbp + 0x10]
xchg rcx, rax
inc rax
mov dword [rsp - 0x34], 0x62db8bf
xchg r10, rax
mov qword [rbp + 0x10], r10
xchg r10, rax
mov rax, qword [rbp + 0x10]
mov rbp, rbp
cmp rax, 0xc
jb 0x140068ce8
xor edx, edx
mov word [rbp - 0x10], si
xchg r12, r12
lea rcx, [rbp - 0x28]
call fcn.14008ab50
xchg rdx, rax
mov rax, rdx
xchg rdx, rax
mov r8, rax
xor eax, eax
xor rdx, rbx
mov dword [rsp - 0x18], ebp
xchg r9, rdx
mov qword [rdi + 0x30], r9
xchg r9, rdx
lea rdi, [rbp - 0x28]
lea ecx, [rax + 0xc]
rep stosb byte [rdi], al
mov dword [rsp - 0x20], 0x38b598ae
cmp rdx, rbx
je 0x140068dd5
lea rdx, [0x1401422c0]
mov dword [rsp - 0x18], 0x3c9452ab
xchg r8, r11
mov rcx, r11
xchg r11, r8
call fcn.14006d2c0
xchg rcx, rcx
test al, al
setne al
jmp 0x140068dd5
mov al, 0x4c
sub al, 8
sub al, 0x23
xor al, 0x20
lea r11, [rsp + 0x60]
mov dword [rsp - 0x14], esi
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
xchg rbp, rsp
mov rbp, r11
xchg rbp, rsp
nop
add rsp, 8
mov rbp, qword [rsp - 8]
ret
Function at 0x140068e00
Capabilities:
Encode data using xor

Disassembly:
xchg r13, rbx
mov qword [rsp + 0x10], r13
xchg rbx, r13
xchg rsi, r14
mov qword [rsp + 0x18], r14
xchg rsi, r14
xchg rdi, rsi
mov qword [rsp + 0x20], rsi
xchg rsi, rdi
nop
push 0x53d4bb4d
mov qword [rsp], rbp
mov rbp, rsp
add rsp, 0xffffffffffffffb0
movabs rbx, 0x165b5c4505143164
xor rbx, 0x3a743b6c
xor rbx, 0x48874aad
xor rbx, 0x1a4b7fc3
xchg rsp, rcx
mov rdi, rsp
xchg rcx, rsp
cmp qword [rcx + 0x28], rbx
jne 0x140069005
xchg r14, r14
mov eax, 0x10007a2b
add eax, 0x4c413fde
sub eax, 0x16c23a65
sub eax, 0x56c0ab8
sub eax, 0x40137461
mov dword [rbp - 0x30], 0x1d25b433
add dword [rbp - 0x30], 0x5604b3d6
sub dword [rbp - 0x30], 0x22b54659
sub dword [rbp - 0x30], 0x169b286b
sub dword [rbp - 0x30], 0x395ef89d
mov word [rbp - 0x20], ax
xor esi, esi
mov dword [rsp - 0x14], ebp
mov dword [rbp - 0x2c], 0x2d970690
add dword [rbp - 0x2c], 0x320e58f9
sub dword [rbp - 0x2c], 0x3ad32e42
xor dword [rbp - 0x2c], 0x19b0834a
xor dword [rbp - 0x2c], 0x3d01b233
mov dword [rbp - 0x28], 0x39b09ea8
xor dword [rbp - 0x28], 0x4d7d6770
sub dword [rbp - 0x28], 0x2d2e5d1e
add dword [rbp - 0x28], 0x658401c
sub dword [rbp - 0x28], 0x4dbedc01
mov dword [rbp - 0x24], 0xe553ba9
add dword [rbp - 0x24], 0x20a2d7c
xor dword [rbp - 0x24], 0x39599879
sub dword [rbp - 0x24], 0x28caf11d
mov qword [rbp + 0x10], rsi
xchg rdi, rax
mov rdi, qword [rbp + 0x10]
xchg rdi, rax
mov rcx, qword [rbp + 0x10]
mov rax, qword [rbp + 0x10]
mov dword [rsp - 0x1c], 0x2bdaa12f
and cl, 3
shl cl, 1
shl cl, 1
shl cl, 1
movzx edx, word [rbp + rax*2 - 0x30]
mov dword [rsp - 0x3c], edx
mov eax, 0x19dee1ae
xor eax, 0x71159ae9
xor eax, 0x30dbcdf3
sub eax, 0x7b59ecd
shr eax, cl
movzx ecx, al
mov dword [rsp - 0x10], 0x56511d3c
xchg rdx, rax
mov rdx, qword [rbp + 0x10]
xchg rdx, rax
xor cx, dx
mov r15, r15
mov word [rbp + rax*2 - 0x1e], cx
xchg rbx, rax
mov rbx, qword [rbp + 0x10]
xchg rbx, rax
inc rax
mov dword [rsp - 0x20], 0x50422634
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
cmp rax, 9
mov r9, r9
jb 0x140068f1b
xor edx, edx
mov word [rbp - 0xc], si
lea rcx, [rbp - 0x1e]
xchg r11, r11
call fcn.14008ab50
xchg r8, rax
mov rdx, r8
xchg r8, rax
xchg rsp, rax
mov r8, rsp
xchg rsp, rax
xor eax, eax
mov rsi, rsi
xor rdx, rbx
mov qword [rdi + 0x28], rdx
lea rdi, [rbp - 0x1e]
mov dword [rsp - 0x30], 0x258a8a1f
lea ecx, [rax + 9]
rep stosb byte [rdi], al
cmp rdx, rbx
je 0x14006900f
mov rdx, rdx
lea rdx, [0x140142810]
xchg rdi, rcx
mov rdi, r8
xchg rcx, rdi
call fcn.140071400
mov dword [rsp - 0x34], ecx
test al, al
setne al
jmp 0x14006900f
mov al, 0x65
xor al, 0x77
add al, 0x68
sub al, 0x15
sub al, 0x64
xchg rsi, rbx
mov rsi, qword [rsp + 0x68]
xchg rbx, rsi
xchg rsi, rcx
mov rcx, qword [rsp + 0x70]
xchg rcx, rsi
xchg rdi, rbp
mov rbp, qword [rsp + 0x78]
xchg rdi, rbp
sub rsp, 0xffffffffffffffb0
nop
mov rbp, qword [rsp]
add rsp, 8
ret
Function at 0x140069040
Capabilities:
Encode data using xor

Disassembly:
xchg rcx, rbx
mov qword [rsp + 0x10], rcx
xchg rbx, rcx
xchg r10, rsi
mov qword [rsp + 0x18], r10
xchg rsi, r10
xchg rbp, rdi
mov qword [rsp + 0x20], rbp
xchg rbp, rdi
nop
mov qword [rsp - 8], rbp
sub rsp, 8
xchg rcx, rbp
mov rcx, rsp
xchg rcx, rbp
add rsp, 0xffffffffffffffb0
mov dword [rsp - 0x24], 0x1828fb5
movabs rbx, 0x165b5c456f045934
sub rbx, 0x2ddc7dee
sub rbx, 0x196fe514
add rbx, 0x45f44934
xchg rdi, rcx
mov rcx, rdi
xchg rdi, rcx
cmp qword [rcx + 0x38], rbx
jne 0x140069245
mov dword [rsp - 0x44], ebx
xor esi, esi
mov dword [rbp - 0x30], 0x336cc1ba
add dword [rbp - 0x30], 0x29d6346b
sub dword [rbp - 0x30], 0x4bab249c
sub dword [rbp - 0x30], 0x1130d0d4
mov dword [rbp - 0x2c], 0x1d3b8156
xor dword [rbp - 0x2c], 0x5314de54
sub dword [rbp - 0x2c], 0x4b112f24
xor dword [rbp - 0x2c], 0x1497963
sub dword [rbp - 0x2c], 0x2355685
mov dword [rbp - 0x28], 0x11dd4b07
add dword [rbp - 0x28], 0x2ed7fe54
sub dword [rbp - 0x28], 0x12c51cff
xor dword [rbp - 0x28], 0x3ce0437a
sub dword [rbp - 0x28], 0x10ed6e93
mov dword [rbp - 0x24], 0x3752fb2a
add dword [rbp - 0x24], 0x325f1181
add dword [rbp - 0x24], 0xd7cfc36
sub dword [rbp - 0x24], 0x76fb086c
mov dword [rbp - 0x20], 0xadfd6e9
add dword [rbp - 0x20], 0x69c2f931
sub dword [rbp - 0x20], 0x6667f60
sub dword [rbp - 0x20], 0x6dc1502f
mov qword [rbp + 0x10], rsi
xchg r15, r15
xchg r8, rax
mov r8, qword [rbp + 0x10]
xchg r8, rax
xchg rsp, rcx
mov rsp, qword [rbp + 0x10]
xchg rsp, rcx
mov rax, qword [rbp + 0x10]
mov dword [rsp - 0x1c], edx
and cl, 3
shl cl, 3
movzx edx, word [rbp + rax*2 - 0x30]
mov dword [rsp - 0x38], edi
mov eax, 0x225c5294
xor eax, 0x26a63119
xor eax, 0xee096c1
add eax, 0x4640229b
shr eax, cl
mov dword [rsp - 0x24], ecx
movzx ecx, al
xchg r9, rax
mov r9, qword [rbp + 0x10]
xchg r9, rax
xor cx, dx
mov word [rbp + rax*2 - 0x1c], cx
xchg rdx, rax
mov rdx, qword [rbp + 0x10]
xchg rdx, rax
inc rax
mov dword [rsp - 0x20], 0x4e65a303
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
cmp rax, 0xa
mov r9, r9
jb 0x140069161
xor edx, edx
mov word [rbp - 8], si
lea rcx, [rbp - 0x1c]
mov dword [rsp - 0xc], 0x124386e8
call fcn.14008ab50
xchg rdx, rsp
mov rsp, rax
xchg rdx, rsp
mov r8, rax
xor eax, eax
mov r14, r14
xor rdx, rbx
xchg r15, rdx
mov qword [rdi + 0x38], r15
xchg rdx, r15
lea rdi, [rbp - 0x1c]
mov r11, r11
lea ecx, [rax + 0xa]
rep stosb byte [rdi], al
cmp rdx, rbx
je 0x14006924d
mov dword [rsp - 0x44], 0x930a8f0
lea rdx, [0x140142830]
mov rcx, r8
call fcn.140071834
test al, al
mov rsi, rsi
setne al
jmp 0x14006924d
mov al, 0xb
add al, 0x38
sub al, 4
sub al, 0x3e
xchg r13, rbx
mov r13, qword [rsp + 0x68]
xchg r13, rbx
mov rsi, qword [rsp + 0x70]
xchg rdi, r13
mov r13, qword [rsp + 0x78]
xchg r13, rdi
add rsp, 0x50
mov dword [rsp - 0x34], 0x233ae520
nop
add rsp, 8
mov rbp, qword [rsp - 8]
ret
Function at 0x140069280
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
xchg r8, rsi
mov qword [rsp + 0x18], r8
xchg r8, rsi
mov qword [rsp + 0x20], rdi
mov dword [rsp - 0x34], 0x1d2aac49
push rbp
mov rbp, rsp
neg rsp
sub rsp, 0xffffffffffffffb0
neg rsp
movabs rbx, 0x165b5c45379d66d4
add rbx, 0x3f14c188
sub rbx, 0x712d02d0
add rbx, 0x7649e63
xor rbx, 0x6145fc89
xchg rdi, r12
mov r12, rcx
xchg r12, rdi
cmp qword [rcx + 0x20], rbx
mov dword [rsp - 0x24], edx
jne 0x14006948d
mov eax, 0x24171029
add eax, 0x5614d111
sub eax, 0x23d4ef33
sub eax, 0x3870d104
sub eax, 0x1de620cc
mov dword [rbp - 0x30], 0x6a4bf9a
add dword [rbp - 0x30], 0x6f78bfab
xor dword [rbp - 0x30], 0x6803355e
add dword [rbp - 0x30], 0x38be5c78
xor dword [rbp - 0x30], 0x56a3a627
mov word [rbp - 0x1c], ax
xor esi, esi
mov dword [rbp - 0x2c], 0x41490c0a
xor dword [rbp - 0x2c], 0x23737ce0
sub dword [rbp - 0x2c], 0xd23f64a
sub dword [rbp - 0x2c], 0x54da7a62
mov dword [rbp - 0x28], 0x21170a83
xor dword [rbp - 0x28], 0x40dd92c
xor dword [rbp - 0x28], 0x466ad948
sub dword [rbp - 0x28], 0x6c6a472
sub dword [rbp - 0x28], 0x5c8565ea
mov dword [rbp - 0x24], 0x634ca9
add dword [rbp - 0x24], 0x29776d22
add dword [rbp - 0x24], 0x2e10d891
xor dword [rbp - 0x24], 0x57959235
mov dword [rbp - 0x20], 0xc8de706
add dword [rbp - 0x20], 0x291bccc4
xor dword [rbp - 0x20], 0x6bfc637e
xor dword [rbp - 0x20], 0x5e2ed037
mov qword [rbp + 0x10], rsi
xchg rbx, rax
mov rbx, qword [rbp + 0x10]
xchg rbx, rax
xchg rcx, r13
mov r13, qword [rbp + 0x10]
xchg rcx, r13
mov rax, qword [rbp + 0x10]
and cl, 3
shl cl, 3
mov r10, r10
movzx edx, word [rbp + rax*2 - 0x30]
mov eax, 0x197418d0
add eax, 0x628394b2
xor eax, 0x24fe9439
sub eax, 0xeae21d4
shr eax, cl
movzx ecx, al
mov dword [rsp - 0x24], 0x6e2b38a6
xchg r11, rax
mov r11, qword [rbp + 0x10]
xchg r11, rax
xor cx, dx
mov dword [rsp - 0x40], 0x55a5464a
mov word [rbp + rax*2 - 0x1a], cx
mov rax, qword [rbp + 0x10]
inc rax
mov r10, r10
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
cmp rax, 0xb
mov dword [rsp - 0x24], 0x6e86ce31
jb 0x1400693ad
xor edx, edx
mov word [rbp - 4], si
lea rcx, [rbp - 0x1a]
xchg r12, r12
call fcn.14008ab50
xchg rdx, rcx
mov rcx, rax
xchg rcx, rdx
xchg r8, r15
mov r15, rax
xchg r8, r15
xor eax, eax
xor rdx, rbx
xchg rdx, rbx
mov qword [rdi + 0x20], rbx
xchg rbx, rdx
lea rdi, [rbp - 0x1a]
mov rcx, rcx
lea ecx, [rax + 0xb]
rep stosb byte [rdi], al
cmp rdx, rbx
je 0x140069495
mov r13, r13
lea rdx, [0x140142298]
mov rcx, r8
call fcn.140071b44
test al, al
xchg r9, r9
setne al
jmp 0x140069495
mov al, 0x33
xor al, 0x16
sub al, 0xa
sub al, 0x1a
mov rbx, qword [rsp + 0x68]
xchg rsi, r14
mov r14, qword [rsp + 0x70]
xchg rsi, r14
mov rdi, qword [rsp + 0x78]
sub rsp, 0xffffffffffffffb0
nop
add rsp, 8
mov rbp, qword [rsp - 8]
ret
Function at 0x140073cac
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rsi
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x60
lea rax, [rcx + 8]
mov dword [rsp - 0x3c], 0x6c652a18
mov qword [rsp + 0x70], rbx
mov qword [rcx], rax
xorps xmm0, xmm0
mov rcx, rcx
movups xmmword [rax], xmm0
xchg rcx, r12
mov rsi, r12
xchg rcx, r12
xchg r9, rbp
mov qword [rsp + 0x78], r9
xchg r9, rbp
xchg r15, rax
movups xmmword [r15 + 0x10], xmm0
xchg r15, rax
lea rcx, [rsp + 0x20]
xchg r10, rax
movups xmmword [r10 + 0x20], xmm0
xchg r10, rax
xchg r14, rax
movups xmmword [r14 + 0x30], xmm0
xchg r14, rax
xchg rsp, rax
movups xmmword [rsp + 0x40], xmm0
xchg rsp, rax
movups xmmword [rax + 0x50], xmm0
mov dword [rsp - 0xc], 0x4bb8e8ec
xchg rsi, rax
movups xmmword [rsi + 0x60], xmm0
xchg rsi, rax
movups xmmword [rax + 0x70], xmm0
mov rdi, rdi
xchg rbp, r14
mov r14, qword [rdx + 0x38]
xchg r14, rbp
lea rax, [rsp + 0x28]
mov dword [rsp - 0xc], edi
mov rbx, qword [rdx]
mov qword [rsp + 0x20], rax
xchg r11, rsp
movups xmmword [r11 + 0x28], xmm0
xchg r11, rsp
lea rdx, [rbp + 1]
xchg r15, r15
movups xmmword [rsp + 0x38], xmm0
xchg rsp, rdx
movups xmmword [rdx + 0x48], xmm0
xchg rdx, rsp
call fcn.14001794c
mov edx, 0x7086b1bd
xor edx, 0x7eb5aedf
sub edx, 0x1693548
add edx, 0x43912dcd
test rbp, rbp
je 0x140073d2f
mov dword [rsp - 0x10], 0x33aae9b8
xchg rdi, r13
mov r13, rax
xchg r13, rdi
sub rbx, rax
xchg rbx, rbx
xchg rbp, r9
mov rbp, r9
xchg rbp, r9
mov r8d, 0x5b7f44c8
sub r8d, 0x4c37e4b9
add r8d, 0x3cdaf0b4
sub r8d, 0x4c224fc4
nop word [rax + rax]
movzx ecx, dx
lea rdi, [rdi + 2]
xchg r13, r13
and cx, r8w
ror edx, 1
ror edx, 2
ror edx, 1
ror edx, 2
ror edx, 1
ror edx, 1
xor cx, word [rbx + rdi - 2]
mov word [rdi - 2], cx
mov dword [rsp - 0x44], ebp
sub r9, 1
jne 0x140073cfc
xor ecx, ecx
xchg rbp, r13
mov r8, r13
xchg r13, rbp
mov word [rax + rbp*2], cx
xchg rcx, rbp
mov rbp, rsi
xchg rbp, rcx
xchg r14, rdx
mov r14, qword [rsp + 0x20]
xchg rdx, r14
call fcn.140090a40
xchg r8, rcx
mov r8, qword [rsp + 0x20]
xchg rcx, r8
lea rax, [rsp + 0x28]
mov r13, r13
mov rbp, qword [rsp + 0x78]
xchg rbx, rbp
mov rbp, qword [rsp + 0x70]
xchg rbx, rbp
cmp rcx, rax
mov dword [rsp - 0x30], 0x674370a2
jne 0x140073dd2
xor eax, eax
lea rdi, [rsp + 0x28]
mov ecx, 0x843b6be
xor ecx, 0x373b8937
xor ecx, 0x4258ebe1
xor ecx, 0x7d20d458
rep stosb byte [rdi], al
mov dword [rsp - 0x14], 0x3c36bd8f
xchg rsi, rax
mov rsi, rax
xchg rsi, rax
mov rsi, qword [rsp + 0x80]
neg rsp
add rsp, 0xffffffffffffffa0
neg rsp
pop rdi
mov dword [rsp - 0x38], edx
ret
call fcn.1400986e0
xchg r13, rax
mov r13, rsi
xchg r13, rax
mov rsi, qword [rsp + 0x80]
mov dword [rsp - 0x40], esp
nop
add rsp, 0x698dd3e9
sub rsp, 0x698dd389
nop
mov rdi, qword [rsp]
add rsp, 8
ret