joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14003e1e0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
nop
add rsp, 0x7b54c5f1
sub rsp, 0x7b54c621
lea rsi, [rcx + 0x298]
xorps xmm0, xmm0
lea rax, [0x1400025a8]
mov r14, rdx
mov qword [rcx], rax
mov rdi, rcx
mov dword [rcx + 8], 0x401a326d
sub dword [rcx + 8], 0x18ba038a
add dword [rcx + 8], 0x34b64465
xor dword [rcx + 8], 0x5c167349
lea rax, [rsi + 8]
mov qword [rsi], rax
xor ebp, ebp
mov qword [rcx + 0x290], rbp
mov rbx, r8
movups xmmword [rax], xmm0
mov rcx, rsi
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
mov rdx, qword [r8 + 0x38]
mov qword [rsi + 0x38], rdx
call fcn.140011430
mov r8d, ebp
cmp qword [rsi + 0x38], rbp
jbe 0x14003e28e
nop word [rax + rax]
mov rcx, qword [rbx]
movzx edx, word [rcx + r8*2]
mov word [rax + r8*2], dx
inc r8
cmp r8, qword [rsi + 0x38]
jb 0x14003e274
mov ecx, dword [rbx + 0x40]
mov esi, 0x475b83e
add esi, 0x3b952ad1
xor esi, 0x5371628c
sub esi, 0x137a8184
mov qword [rdi + 0x2e0], rbp
bts ecx, 0xe
mov dword [rdi + 0x2d8], ecx
mov edx, 0x508ef92b
xor edx, 0x276f8943
sub edx, 0x7237b171
sub edx, 0x5a9bee7
mov eax, dword [rbx + 0x54]
xor eax, 0x5d9f74cd
mov dword [rdi + 0x2e8], eax
mov eax, dword [rbx + 0x58]
xor eax, 0x5d9f74cd
mov dword [rdi + 0x2ec], eax
mov eax, dword [rbx + 0x44]
xor eax, 0x5d9f74cd
mov dword [rdi + 0x2f0], eax
mov eax, dword [rbx + 0x48]
xor eax, 0x5d9f74cd
mov dword [rdi + 0x2f4], eax
mov rax, qword [rbx + 0x60]
mov qword [rdi + 0x2f8], rax
mov eax, dword [rbx + 0x4c]
xor eax, 0x1d335d88
mov dword [rdi + 0x308], eax
mov eax, dword [rbx + 0x50]
xor eax, 0x5d9f74cd
mov word [rdi + 0x310], bp
bt ecx, 0xd
mov dword [rdi + 0x30c], eax
pushf
mov eax, 0x736e35b0
sub eax, 0x616bbe8c
xor eax, 0x120277db
popf
mov qword [rdi + 0x318], r14
cmovb esi, eax
mov ecx, esi
shl rcx, 4
call fcn.1400c19f0
mov rcx, rax
mov edx, esi
nop dword [rax]
movaps xmm0, xmmword [0x1404ed590]
movups xmmword [rcx], xmm0
lea rcx, [rcx + 0x10]
sub rdx, 1
jne 0x14003e36a
mov qword [rdi + 0x300], rax
mov rdx, rbp
nop
mov rax, qword [rbx + 0x68]
lea rdx, [rdx + 0x10]
inc rbp
mov ecx, dword [rdx + rax - 0x10]
xor ecx, 0x1d335d88
mov dword [rsp + 0x50], ecx
movss xmm3, dword [rsp + 0x50]
mov rax, qword [rbx + 0x68]
shufps xmm3, xmm3, 0xe1
mov ecx, dword [rdx + rax - 0xc]
xor ecx, 0x1d335d88
mov dword [rsp + 0x50], ecx
movss xmm0, dword [rsp + 0x50]
mov rax, qword [rbx + 0x68]
movss xmm3, xmm0
shufps xmm3, xmm3, 0xc6
mov ecx, dword [rdx + rax - 8]
xor ecx, 0x1d335d88
mov dword [rsp + 0x50], ecx
movss xmm1, dword [rsp + 0x50]
mov rax, qword [rbx + 0x68]
movss xmm3, xmm1
shufps xmm3, xmm3, 0x27
mov ecx, dword [rdx + rax - 4]
xor ecx, 0x1d335d88
mov dword [rsp + 0x50], ecx
movss xmm2, dword [rsp + 0x50]
mov rax, qword [rdi + 0x300]
movss xmm3, xmm2
shufps xmm3, xmm3, 0x39
xorps xmm3, xmmword [0x1404ed590]
movups xmmword [rdx + rax - 0x10], xmm3
cmp rbp, rsi
jl 0x14003e38e
lea rcx, [r14 + 0xa8]
mov qword [rsp + 0x50], rdi
lea rdx, [rsp + 0x50]
call fcn.140028760
mov rbx, qword [rsp + 0x58]
mov rax, rdi
mov rbp, qword [rsp + 0x60]
nop
add rsp, 0x3ed858c8
sub rsp, 0x3ed85898
pop r14
pop rdi
pop rsi
ret
Function at 0x14003e99e
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rsi
push rdi
nop
add rsp, 0xf094b22
sub rsp, 0xf094b82
lea rax, [rcx + 8]
mov qword [rsp + 0x70], rbx
mov qword [rcx], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov rsi, rcx
mov qword [rsp + 0x78], rbp
movups xmmword [rax + 0x10], xmm0
lea rcx, [rsp + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
movups xmmword [rax + 0x70], xmm0
mov rbp, qword [rdx + 0x38]
lea rax, [rsp + 0x28]
mov rbx, qword [rdx]
mov qword [rsp + 0x20], rax
movups xmmword [rsp + 0x28], xmm0
lea rdx, [rbp + 1]
movups xmmword [rsp + 0x38], xmm0
movups xmmword [rsp + 0x48], xmm0
call fcn.140011430
mov edx, 0x6519c355
sub edx, 0x10637fe8
sub edx, 0x1d543062
test rbp, rbp
je 0x14003ea6a
mov rdi, rax
sub rbx, rax
mov r9, rbp
mov r8d, 0x683e6cf4
sub r8d, 0x209d04ba
xor r8d, 0x47a168c5
nop word [rax + rax]
movzx ecx, dx
lea rdi, [rdi + 2]
and cx, r8w
ror edx, 8
xor cx, word [rdi + rbx - 2]
mov word [rdi - 2], cx
sub r9, 1
jne 0x14003ea49
xor ecx, ecx
mov r8, rbp
mov word [rax + rbp*2], cx
mov rcx, rsi
mov rdx, qword [rsp + 0x20]
call fcn.1400a8660
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x28]
mov rbp, qword [rsp + 0x78]
mov rbx, qword [rsp + 0x70]
cmp rcx, rax
jne 0x14003ead9
xor eax, eax
lea rdi, [rsp + 0x28]
mov ecx, 0x3b7d2ed4
add ecx, 0x93d0146
sub ecx, 0x30a5792a
xor ecx, 0x1414b6c0
rep stosb byte [rdi], al
mov rax, rsi
mov rsi, qword [rsp + 0x80]
nop
add rsp, 0x6de053c8
sub rsp, 0x6de05368
pop rdi
ret
call fcn.1400c1b60
mov rax, rsi
mov rsi, qword [rsp + 0x80]
nop
sub rsp, 0x427ac6d9
add rsp, 0x427ac739
pop rdi
ret
Function at 0x140040bc0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
nop
add rsp, 0x3e685f5f
sub rsp, 0x3e685f9f
mov eax, dword [rcx + 0x2e8]
mov r14, rdx
mov edi, dword [rcx + 0x2f4]
xor eax, 0x5d9f74cd
movaps xmmword [rsp + 0x30], xmm6
mov rbp, rcx
movaps xmmword [rsp + 0x20], xmm7
xor ebx, ebx
xor edi, 0x5d9f74cd
xor edx, edx
movd xmm6, eax
add edi, edi
mov eax, dword [rcx + 0x308]
mov esi, ebx
xor eax, 0x1d335d88
mov rcx, r14
mov dword [rsp + 0x60], eax
movss xmm7, dword [rsp + 0x60]
cvtdq2ps xmm6, xmm6
call fcn.14006e8d0
test ax, ax
je 0x140040c89
nop word [rax + rax]
movzx ecx, ax
inc rsi
mov rax, qword [rbp + 0x300]
add rcx, rcx
mov rdx, rsi
movups xmm0, xmmword [rax + rcx*8]
xorps xmm0, xmmword [0x1404ed590]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm6
addss xmm1, xmm7
cvttss2si ecx, xmm1
sub ecx, edi
add ebx, ecx
mov rcx, r14
call fcn.14006e8d0
test ax, ax
jne 0x140040c3f
mov rbp, qword [rsp + 0x70]
mov eax, ebx
mov rbx, qword [rsp + 0x68]
movaps xmm6, xmmword [rsp + 0x30]
movaps xmm7, xmmword [rsp + 0x20]
nop
add rsp, 0x4eb0911f
sub rsp, 0x4eb090df
pop r14
pop rdi
pop rsi
ret

Function at 0x140040cc0
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
xor r8d, r8d
mov r9d, dword [rcx + 0x2f4]
xor eax, 0x5d9f74cd
xor r9d, 0x5d9f74cd
add r9d, r9d
movd xmm3, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x1d335d88
mov dword [rsp + 8], eax
movss xmm4, dword [rsp + 8]
movzx eax, byte [rdx]
cvtdq2ps xmm3, xmm3
test al, al
je 0x140040d4d
mov r10, qword [rcx + 0x300]
movaps xmm2, xmmword [0x1404ed590]
movzx eax, al
inc rdx
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
movzx eax, byte [rdx]
xorps xmm0, xmm2
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm3
addss xmm1, xmm4
cvttss2si ecx, xmm1
sub ecx, r9d
add r8d, ecx
test al, al
jne 0x140040d14
mov eax, r8d
ret

Function at 0x140040d60
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
sub rsp, 0x40
mov eax, dword [rcx + 0x2e8]
mov r14, rdx
mov edi, dword [rcx + 0x2f4]
xor eax, 0x5d9f74cd
movaps xmmword [rsp + 0x30], xmm6
mov rbp, rcx
movaps xmmword [rsp + 0x20], xmm7
xor ebx, ebx
xor edi, 0x5d9f74cd
xor edx, edx
movd xmm6, eax
add edi, edi
mov eax, dword [rcx + 0x308]
mov esi, ebx
xor eax, 0x1d335d88
mov rcx, r14
mov dword [rsp + 0x60], eax
movss xmm7, dword [rsp + 0x60]
cvtdq2ps xmm6, xmm6
call fcn.14006e8d0
test ax, ax
je 0x140040e1e
nop word [rax + rax]
movzx ecx, ax
inc rsi
mov rax, qword [rbp + 0x300]
add rcx, rcx
mov rdx, rsi
movups xmm0, xmmword [rax + rcx*8]
xorps xmm0, xmmword [0x1404ed590]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm6
addss xmm1, xmm7
cvttss2si ecx, xmm1
sub ecx, edi
add ebx, ecx
mov rcx, r14
call fcn.14006e8d0
test ax, ax
jne 0x140040dd4
mov rbp, qword [rsp + 0x70]
mov eax, ebx
mov rbx, qword [rsp + 0x68]
movaps xmm6, xmmword [rsp + 0x30]
movaps xmm7, xmmword [rsp + 0x20]
nop
add rsp, 0x30a3d7b6
sub rsp, 0x30a3d776
pop r14
pop rdi
pop rsi
ret
Function at 0x140040e50
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
xor r8d, r8d
mov r9d, dword [rcx + 0x2f4]
xor eax, 0x5d9f74cd
xor r9d, 0x5d9f74cd
add r9d, r9d
movd xmm3, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x1d335d88
mov dword [rsp + 8], eax
movss xmm4, dword [rsp + 8]
movzx eax, word [rdx]
cvtdq2ps xmm3, xmm3
test ax, ax
je 0x140040eeb
mov r10, qword [rcx + 0x300]
movaps xmm2, xmmword [0x1404ed590]
movzx eax, ax
nop
sub rdx, 0xcfdcecc
add rdx, 0xcfdcece
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
movzx eax, word [rdx]
xorps xmm0, xmm2
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm3
addss xmm1, xmm4
cvttss2si ecx, xmm1
sub ecx, r9d
add r8d, ecx
test ax, ax
jne 0x140040ea5
mov eax, r8d
ret

Function at 0x140040fcb
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rdi
sub rsp, 0xb0
xor ebx, ebx
mov rdi, rcx
mov qword [rax + 8], rbx
cmp qword [rcx + 0x2f8], rbx
je 0x14004107e
mov edx, dword [rcx + 0x2ec]
mov qword [rax + 0x10], rsi
xor edx, 0x5d9f74cd
mov eax, dword [rcx + 0x2e8]
nop
movabs rcx, 0xffffffff27aacc9d
xor rcx, 0x3c57341d
xor rcx, 0x1dfc6c77
add rcx, 0x7fffffff
xor rcx, 0x79fe6b09
xor eax, 0x5d9f74cd
imul edx, eax
mov eax, 0x70da4216
sub eax, 0x2c406992
sub eax, 0x4499d880
movsxd rsi, edx
mul rsi
cmovb rax, rcx
mov rcx, rax
call fcn.1400c1980
mov qword [rsp + 0xc0], rax
test rsi, rsi
jle 0x140040ff5
nop
mov rax, qword [rdi + 0x2f8]
mov ecx, dword [rax + rbx*4]
mov rax, qword [rsp + 0xc0]
xor ecx, 0x1ac04423
mov dword [rax + rbx*4], ecx
inc rbx
cmp rbx, rsi
jl 0x140040fce
mov rsi, qword [rsp + 0xc8]
mov rax, qword [rsp + 0xc0]
lea rdx, [rsp + 0x30]
mov rcx, qword [rdi + 0x318]
mov qword [rsp + 0x28], rax
lea rax, [0x140002750]
mov qword [rsp + 0x20], rdi
movups xmm0, xmmword [rsp + 0x20]
mov qword [rsp + 0xa8], 0x213712ce
add qword [rsp + 0xa8], 0x3be47d7a
sub qword [rsp + 0xa8], 0x56b1cd53
xor qword [rsp + 0xa8], 0x669c2ed
mov qword [rsp + 0x30], rax
movups xmmword [rsp + 0x38], xmm0
call fcn.14003fad0
mov rbx, qword [rsp + 0xd0]
add rsp, 0x4000e28c
sub rsp, 0x4000e1dc
pop rdi
ret
lea rdx, [rsp + 0xc0]
call fcn.1400410c0
test al, al
jne 0x140040ffd
mov rbx, qword [rsp + 0xd0]
add rsp, 0x2105dc2b
sub rsp, 0x2105db7b
pop rdi
ret
Function at 0x140043500
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
nop
sub rsp, 0x34338d8
add rsp, 0x34338b8
cmp qword [rcx + 0x2f8], 0
mov rdi, rcx
jne 0x14004361f
xor ebx, ebx
lea rdx, [rsp + 0x30]
mov qword [rsp + 0x30], rbx
call fcn.1400410c0
test al, al
je 0x140043595
mov ecx, dword [rdi + 0x2ec]
mov edx, 0x248f57fe
xor edx, 0x5c8a7bfc
sub edx, 0x78052bf2
mov eax, dword [rdi + 0x2e8]
xor ecx, 0x5d9f74cd
xor eax, 0x5d9f74cd
imul ecx, eax
movsxd rsi, ecx
lea rcx, [rsi*4]
call fcn.1400c19f0
mov rcx, qword [rsp + 0x30]
mov r9, rax
test rax, rax
jne 0x1400435a7
call fcn.1400c1990
xor al, al
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
sub rsp, 0xffffffffffffffe0
pop rdi
ret
movdqa xmm1, xmmword [0x1400027b0]
mov r8, r9
test rsi, rsi
jle 0x1400435fe
mov edx, 0x23352
add edx, 0x4e7f6c50
sub edx, 0x4e819f9e
nop dword [rax]
movsxd rax, edx
prefetcht0 byte [rcx + rax*4]
movdqa xmm0, xmm1
lea r8, [r8 + 0x10]
xorps xmm0, xmmword [rcx + rbx*4]
sub edx, 0xfffffffc
neg rbx
add rbx, 0xfffffffffffffffc
neg rbx
movdqu xmmword [r8 - 0x10], xmm0
cmp rbx, rsi
jl 0x1400435cf
mov qword [rdi + 0x2f8], r9
mov byte [rdi + 0x311], 0x45
add byte [rdi + 0x311], 0x19
sub byte [rdi + 0x311], 0x5d
call fcn.1400c1990
mov rbx, qword [rsp + 0x38]
mov al, 0x43
xor al, 0x28
sub al, 0x49
sub al, 0x21
mov rsi, qword [rsp + 0x40]
nop
sub rsp, 0x240cfaec
add rsp, 0x240cfb0c
pop rdi
ret
Function at 0x140045410
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
push rdi
nop
sub rsp, 0x590adafc
add rsp, 0x590adadc
mov r8, qword [rcx + 0x650]
xor edi, edi
mov r9, rdx
mov rbx, rcx
test r8, r8
je 0x140045449
mov rax, qword [rcx + 0x648]
jmp 0x140045452
mov rax, rdi
nop word [rax + rax]
test r8, r8
je 0x14004546b
mov rcx, qword [rbx + 0x648]
lea rdx, [rcx + r8*8]
jmp 0x14004546e
mov rdx, rdi
cmp rax, rdx
je 0x1400456a1
mov rcx, qword [rax]
cmp qword [rcx + 0x30], r9
je 0x14004548d
sub rax, 0xfffffffffffffff8
jmp 0x140045452
mov qword [rsp + 0x38], rsi
mov rsi, rax
test r8, r8
je 0x14004555f
cmp rax, qword [rbx + 0x648]
jb 0x14004555f
mov rcx, qword [rbx + 0x648]
lea rdx, [rcx + r8*8]
cmp rax, rdx
jae 0x14004555f
nop dword [rax + rax]
mov rdx, qword [rbx + 0x650]
test rdx, rdx
je 0x1400454e4
mov rcx, qword [rbx + 0x648]
lea rcx, [rcx + rdx*8]
jmp 0x1400454e7
mov rcx, rdi
nop
sub rcx, 0xffffffffc299e5c3
add rcx, 0xffffffffc299e5bb
cmp rax, rcx
jae 0x140045518
mov rcx, qword [rax + 8]
mov qword [rax], rcx
nop
add rax, 0x1a69a789
sub rax, 0x1a69a781
jmp 0x1400454c4
test rdx, rdx
je 0x14004555f
lea rax, [rdx - 1]
mov qword [rbx + 0x650], rax
test rax, rax
jne 0x14004555f
mov rcx, qword [rbx + 0x648]
test rcx, rcx
je 0x140045551
call fcn.1400c1b60
mov qword [rbx + 0x648], rdi
mov qword [rbx + 0x658], rdi
mov qword [rbx + 0x650], rdi
mov rcx, qword [rsi]
mov rsi, qword [rsp + 0x38]
test rcx, rcx
je 0x14004558c
mov rax, qword [rcx]
mov edx, 0x47f6d0f6
xor edx, 0x3360ad8d
sub edx, 0x3fdde297
sub edx, 0x34b89ae3
call qword [rax]
cmp qword [rbx + 0x650], rdi
je 0x1400456a1
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.140044a10
mov rcx, qword [rsp + 0x30]
mov r10d, 0x40801405
add r10d, 0x1144dcc
add r10d, 0x35188929
xor r10d, 0x76acea5a
mov r8d, dword [rsp + 0x34]
mov eax, ecx
mov r9, qword [rbx + 0x650]
sub eax, r8d
cdq
idiv dword [rbx + 0x650]
cmp eax, r10d
cmovl r10d, eax
test r9, r9
je 0x140045659
mov rdx, qword [rbx + 0x648]
lea r11, [rdx + r9*8]
cmp rdx, r11
je 0x140045659
mov r9d, r10d
xor r9d, 0x5d9f74cd
xor r8d, 0x5d9f74cd
nop
mov rcx, qword [rdx]
mov eax, edi
xor eax, 0x5d9f74cd
add edi, r10d
sub rdx, 0xfffffffffffffff8
mov dword [rcx + 0x38], eax
mov dword [rcx + 0x3c], 0x566f6b84
sub dword [rcx + 0x3c], 0x452268a9
add dword [rcx + 0x3c], 0x4c5271f2
mov dword [rcx + 0x40], r9d
mov dword [rcx + 0x44], r8d
cmp rdx, r11
jne 0x140045615
mov rcx, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x34]
mov rax, qword [rbx + 0x668]
test rax, rax
je 0x140045699
sub ecx, r8d
mov dword [rax + 0x1c], 0x2a00ee37
add dword [rax + 0x1c], 0x19a7c69a
add dword [rax + 0x1c], 0x19f6bffc
xor ecx, 0x5d9f74cd
xor r8d, 0x5d9f74cd
mov dword [rax + 0x18], ecx
mov dword [rax + 0x20], r8d
mov dword [rax + 0x24], r8d
mov rcx, rbx
call fcn.14002f530
mov rbx, qword [rsp + 0x40]
nop
add rsp, 0x7a465fc6
sub rsp, 0x7a465fa6
pop rdi
ret
Function at 0x140045779
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
neg rsp
sub rsp, 0xffffffffffffffe0
neg rsp
mov rax, qword [rcx]
mov rdi, rcx
call qword [rax + 0x78]
mov rdx, qword [rdi + 0x650]
mov rcx, rax
mov rbx, rax
mov qword [rsp + 0x30], rax
call fcn.140024180
mov rcx, rdi
call fcn.14002f4b0
mov rcx, qword [0x1404ecbd8]
mov rdx, qword [rax + 0x98]
call fcn.14002c640
mov rcx, rax
call fcn.140032e80
lea rcx, [rdi + 0x648]
mov qword [rbx + 0x20], rax
lea rdx, [rsp + 0x30]
call fcn.140045290
mov rcx, rdi
mov rbx, qword [rsp + 0x38]
nop
add rsp, 0x5bbcc0c5
sub rsp, 0x5bbcc0a5
pop rdi
jmp 0x1400456c0
push rbx
neg rsp
sub rsp, 0xffffffffffffffe0
neg rsp
cmp qword [rcx + 0x650], 0
mov rbx, rcx
je 0x1400457f8
lea rdx, [rsp + 0x30]
call fcn.140044a10
mov r8, qword [rsp + 0x30]
mov r11d, 0x75f41973
xor r11d, 0x709e7f28
sub r11d, 0x56a65bb
mov r9d, dword [rsp + 0x34]
mov eax, r8d
sub eax, r9d
cdq
idiv dword [rbx + 0x650]
mov rdx, qword [rbx + 0x650]
cmp eax, r11d
cmovl r11d, eax
xor r10d, r10d
test rdx, rdx
je 0x1400457ae
mov rax, qword [rbx + 0x648]
mov qword [rsp + 0x38], rdi
lea rdi, [rax + rdx*8]
cmp rax, rdi
je 0x1400457a9
mov r8d, r11d
xor r8d, 0x5d9f74cd
xor r9d, 0x5d9f74cd
nop word [rax + rax]
mov rdx, qword [rax]
mov ecx, r10d
xor ecx, 0x5d9f74cd
add r10d, r11d
add rax, 8
mov dword [rdx + 0x38], ecx
mov dword [rdx + 0x3c], 0x3dc6bffc
add dword [rdx + 0x3c], 0xd59f1d7
xor dword [rdx + 0x3c], 0x3946ed07
sub dword [rdx + 0x3c], 0x14c6e807
mov dword [rdx + 0x40], r8d
mov dword [rdx + 0x44], r9d
cmp rax, rdi
jne 0x14004575c
mov r8, qword [rsp + 0x30]
mov r9d, dword [rsp + 0x34]
mov rdi, qword [rsp + 0x38]
mov rax, qword [rbx + 0x668]
test rax, rax
je 0x1400457f0
sub r8d, r9d
mov dword [rax + 0x1c], 0x1b994c8
add dword [rax + 0x1c], 0x1516dfa5
add dword [rax + 0x1c], 0x46cf0060
xor r8d, 0x5d9f74cd
xor r9d, 0x5d9f74cd
mov dword [rax + 0x18], r8d
mov dword [rax + 0x20], r9d
mov dword [rax + 0x24], r9d
mov rcx, rbx
call fcn.14002f530
nop
add rsp, 0x7f953c4c
sub rsp, 0x7f953c2c
pop rbx
ret
Function at 0x1400504d0
Capabilities:
Encode data using xor

Disassembly:
xchg rdi, rax
mov rdi, rsp
xchg rdi, rax
mov qword [rax + 0x10], rbx
nop
push r13
mov qword [rsp], rdi
neg rsp
sub rsp, 0xffffffffffffffa0
neg rsp
movabs rbx, 0x695a723873d64648
sub rbx, 0x328e78b2
add rbx, 0x3b727ba9
sub rbx, 0x17385b7b
sub rbx, 0xb5c1f9
xchg rdi, r14
mov r14, rcx
xchg r14, rdi
cmp qword [rcx + 0x30], rbx
jne 0x140050708
mov rbx, rbx
mov dword [rax - 0x48], 0x244c6616
add dword [rax - 0x48], 0x530fd14a
sub dword [rax - 0x48], 0x41ada1b3
sub dword [rax - 0x48], 0x35379563
xor r8d, r8d
mov dword [rax - 0x44], 0x57b2db07
sub dword [rax - 0x44], 0x2b06a2c9
xor dword [rax - 0x44], 0x6fcfc30
xor dword [rax - 0x44], 0x2a06c41a
mov dword [rax - 0x40], 0x75bcdbcb
xor dword [rax - 0x40], 0x1333c70c
xor dword [rax - 0x40], 0x42b98a5d
sub dword [rax - 0x40], 0x23bc961f
mov dword [rax - 0x3c], 0x298ead5b
xor dword [rax - 0x3c], 0xde62c16
xor dword [rax - 0x3c], 0x26e81ea6
add dword [rax - 0x3c], 0x45098bfd
xor dword [rax - 0x3c], 0x478f2bb9
mov dword [rax - 0x38], 0x6d1bb7ef
xor dword [rax - 0x38], 0xc1c8ae3
xor dword [rax - 0x38], 0x76f4cc9a
sub dword [rax - 0x38], 0x177cf171
mov dword [rax - 0x34], 0x3690e94a
xor dword [rax - 0x34], 0xc36ecd9
add dword [rax - 0x34], 0x7781597
sub dword [rax - 0x34], 0x41c31b1c
mov qword [rsp + 0x70], r8
mov rsp, rsp
xchg r15, rax
mov r15, qword [rsp + 0x70]
xchg r15, rax
nop word [rax + rax]
mov rcx, qword [rsp + 0x70]
mov rax, qword [rsp + 0x70]
mov rdi, rdi
and cl, 3
shl cl, 2
shl cl, 1
movzx edx, word [rsp + rax*2 + 0x20]
mov r15, r15
mov eax, 0x57071b8c
sub eax, 0x36165db
add eax, 0x6bd1531
sub eax, 0x2300b7d7
shr eax, cl
mov rbx, rbx
movzx ecx, al
mov rax, qword [rsp + 0x70]
xor cx, dx
mov word [rsp + rax*2 + 0x38], cx
xchg r10, r10
xchg r9, rax
mov r9, qword [rsp + 0x70]
xchg r9, rax
inc rax
mov dword [rsp - 0x10], ebp
mov qword [rsp + 0x70], rax
xchg rsi, rax
mov rsi, qword [rsp + 0x70]
xchg rsi, rax
cmp rax, 0xc
jb 0x1400505f1
mov dword [rsp - 0xc], ebp
xor edx, edx
mov word [rsp + 0x50], r8w
lea rcx, [rsp + 0x38]
mov dword [rsp - 0x40], 0xd7c4a48
call fcn.1400a3160
xchg r9, rax
mov rdx, r9
xchg r9, rax
mov r8, rax
xor rdx, rbx
mov dword [rsp - 0x2c], 0x3934b30f
xor eax, eax
mov qword [rdi + 0x30], rdx
lea rdi, [rsp + 0x38]
mov dword [rsp - 0x28], 0x2a721c6b
mov ecx, 0x362f388
add ecx, 0x603bf67e
sub ecx, 0x2c7af2d5
xor ecx, 0x3723f73d
rep stosb byte [rdi], al
cmp rdx, rbx
je 0x140050712
mov dword [rsp - 0x2c], ebp
lea rdx, [0x1404ec420]
xchg rcx, r8
mov r8, rcx
xchg rcx, r8
call fcn.14005a080
mov dword [rsp - 0x28], ebx
test al, al
setne al
mov rbx, qword [rsp + 0x78]
mov dword [rsp - 0x28], 0x5ed63080
sub rsp, 0xffffffffffffffa0
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret
mov al, 0x47
sub al, 0x32
add al, 0x3c
sub al, 0x45
sub al, 0xb
xchg rbx, r14
mov r14, qword [rsp + 0x78]
xchg r14, rbx
nop
add rsp, 0xa252f6a
sub rsp, 0xa252f0a
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret
Function at 0x140050740
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov rbp, rbp
nop
push 0x49844282
mov qword [rsp], rdi
sub rsp, 0x50
movabs rbx, 0x695a723848df93a8
sub rbx, 0x1c1a4f70
add rbx, 0xc0849af
xor rbx, 0x6abba67d
add rbx, 0x12560031
mov rdi, rcx
cmp qword [rcx + 0x28], rbx
xchg rbx, rbx
jne 0x14005097e
mov eax, 0x29863170
sub eax, 0x11e674b1
add eax, 0x1f372e31
sub eax, 0x36d6ea89
mov dword [rsp + 0x20], 0x57d1c5e4
xor dword [rsp + 0x20], 0x2e4866e1
sub dword [rsp + 0x20], 0x47086ade
sub dword [rsp + 0x20], 0x2f7b6f0a
sub dword [rsp + 0x20], 0x296c8d9
mov word [rsp + 0x30], ax
xchg rcx, rcx
xor r8d, r8d
mov dword [rsp + 0x24], 0x34d05312
add dword [rsp + 0x24], 0x333e8c22
xor dword [rsp + 0x24], 0x1920046b
sub dword [rsp + 0x24], 0x2e4920dd
xor dword [rsp + 0x24], 0x42e1ba85
mov dword [rsp + 0x28], 0x6104b287
xor dword [rsp + 0x28], 0x4fbf69c9
add dword [rsp + 0x28], 0x3aad11ef
sub dword [rsp + 0x28], 0x1706be46
sub dword [rsp + 0x28], 0x52252ebe
mov dword [rsp + 0x2c], 0x48186df1
sub dword [rsp + 0x2c], 0x1be83737
xor dword [rsp + 0x2c], 0x3dd0c399
add dword [rsp + 0x2c], 0x54a7a85d
xor dword [rsp + 0x2c], 0x66d39d86
xchg r8, rdi
mov qword [rsp + 0x60], rdi
xchg r8, rdi
xchg rbx, rax
mov rbx, qword [rsp + 0x60]
xchg rbx, rax
nop dword [rax + rax]
xchg r9, rcx
mov r9, qword [rsp + 0x60]
xchg r9, rcx
xchg r9, rax
mov r9, qword [rsp + 0x60]
xchg r9, rax
and cl, 3
mov dword [rsp - 0x3c], edx
shl cl, 2
shl cl, 1
movzx edx, word [rsp + rax*2 + 0x20]
mov rdi, rdi
mov eax, 0x226f471d
add eax, 0x32696715
sub eax, 0x2f0368be
xor eax, 0x12b7567f
shr eax, cl
mov r15, r15
movzx ecx, al
mov rax, qword [rsp + 0x60]
xor cx, dx
mov word [rsp + rax*2 + 0x32], cx
mov dword [rsp - 0x34], 0x4a1c3fe5
mov rax, qword [rsp + 0x60]
inc rax
xchg rbx, rax
mov qword [rsp + 0x60], rbx
xchg rbx, rax
mov rax, qword [rsp + 0x60]
mov dword [rsp - 0x1c], edi
cmp rax, 9
jb 0x140050867
xor edx, edx
mov dword [rsp - 0xc], edi
mov word [rsp + 0x44], r8w
lea rcx, [rsp + 0x32]
call fcn.1400a3160
xchg rsi, rsi
xchg rdx, rax
mov rax, rdx
xchg rdx, rax
xchg r8, rax
mov rax, r8
xchg r8, rax
xor rdx, rbx
xor eax, eax
mov r13, r13
mov qword [rdi + 0x28], rdx
lea rdi, [rsp + 0x32]
mov ecx, 0x361f5251
add ecx, 0xb7e592b
xor ecx, 0x53a6d47d
xor ecx, 0x123b7f08
rep stosb byte [rdi], al
cmp rdx, rbx
mov dword [rsp - 0x34], 0x6f81e344
je 0x140050986
lea rdx, [0x1404ec5a0]
mov rcx, r8
call fcn.140066bf0
xchg rbx, rbx
test al, al
setne al
mov rbx, qword [rsp + 0x68]
mov r15, r15
nop
sub rsp, 0x7b4b6863
add rsp, 0x7b4b68b3
pop rdi
mov dword [rsp - 0x10], 0x59d40351
ret
mov al, 0x72
sub al, 0x4a
xor al, 0x53
sub al, 0x7a
xchg r10, rbx
mov r10, qword [rsp + 0x68]
xchg r10, rbx
nop
sub rsp, 0x6aacfffe
add rsp, 0x6aad004e
nop
mov rdi, qword [rsp]
add rsp, 8
ret