joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14002e5e0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
nop
sub rsp, 0x50db7f68
add rsp, 0x50db7f28
mov eax, dword [rcx + 0x2e8]
mov r14, rdx
mov edi, dword [rcx + 0x2f4]
xor eax, 0x69c128d
movaps xmmword [rsp + 0x30], xmm6
mov rbp, rcx
movaps xmmword [rsp + 0x20], xmm7
xor ebx, ebx
xor edi, 0x69c128d
xor edx, edx
movd xmm6, eax
add edi, edi
mov eax, dword [rcx + 0x308]
mov esi, ebx
xor eax, 0x1faf3915
mov rcx, r14
mov dword [rsp + 0x60], eax
movss xmm7, dword [rsp + 0x60]
cvtdq2ps xmm6, xmm6
call fcn.140067600
test ax, ax
je 0x14002e6a9
nop word [rax + rax]
movzx ecx, ax
inc rsi
mov rax, qword [rbp + 0x300]
add rcx, rcx
mov rdx, rsi
movups xmm0, xmmword [rax + rcx*8]
xorps xmm0, xmmword [0x1404dc560]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm6
addss xmm1, xmm7
cvttss2si ecx, xmm1
sub ecx, edi
add ebx, ecx
mov rcx, r14
call fcn.140067600
test ax, ax
jne 0x14002e65f
mov rbp, qword [rsp + 0x70]
mov eax, ebx
mov rbx, qword [rsp + 0x68]
movaps xmm6, xmmword [rsp + 0x30]
movaps xmm7, xmmword [rsp + 0x20]
nop
sub rsp, 0x22a6cff5
add rsp, 0x22a6d035
pop r14
pop rdi
pop rsi
ret

Function at 0x14002e6e0
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
xor r8d, r8d
mov r9d, dword [rcx + 0x2f4]
xor eax, 0x69c128d
xor r9d, 0x69c128d
add r9d, r9d
movd xmm3, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x1faf3915
mov dword [rsp + 8], eax
movss xmm4, dword [rsp + 8]
movzx eax, byte [rdx]
cvtdq2ps xmm3, xmm3
test al, al
je 0x14002e76d
mov r10, qword [rcx + 0x300]
movaps xmm2, xmmword [0x1404dc560]
movzx eax, al
inc rdx
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
movzx eax, byte [rdx]
xorps xmm0, xmm2
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm3
addss xmm1, xmm4
cvttss2si ecx, xmm1
sub ecx, r9d
add r8d, ecx
test al, al
jne 0x14002e734
mov eax, r8d
ret

Function at 0x14002e780
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
add rsp, 0xffffffffffffffc0
mov eax, dword [rcx + 0x2e8]
mov r14, rdx
mov edi, dword [rcx + 0x2f4]
xor eax, 0x69c128d
movaps xmmword [rsp + 0x30], xmm6
mov rbp, rcx
movaps xmmword [rsp + 0x20], xmm7
xor ebx, ebx
xor edi, 0x69c128d
xor edx, edx
movd xmm6, eax
add edi, edi
mov eax, dword [rcx + 0x308]
mov esi, ebx
xor eax, 0x1faf3915
mov rcx, r14
mov dword [rsp + 0x60], eax
movss xmm7, dword [rsp + 0x60]
cvtdq2ps xmm6, xmm6
call fcn.140067600
test ax, ax
je 0x14002e83e
nop word [rax + rax]
movzx ecx, ax
inc rsi
mov rax, qword [rbp + 0x300]
add rcx, rcx
mov rdx, rsi
movups xmm0, xmmword [rax + rcx*8]
xorps xmm0, xmmword [0x1404dc560]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm6
addss xmm1, xmm7
cvttss2si ecx, xmm1
sub ecx, edi
add ebx, ecx
mov rcx, r14
call fcn.140067600
test ax, ax
jne 0x14002e7f4
mov rbp, qword [rsp + 0x70]
mov eax, ebx
mov rbx, qword [rsp + 0x68]
movaps xmm6, xmmword [rsp + 0x30]
movaps xmm7, xmmword [rsp + 0x20]
neg rsp
add rsp, 0xffffffffffffffc0
neg rsp
pop r14
pop rdi
pop rsi
ret
Function at 0x14002e870
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
xor r8d, r8d
mov r9d, dword [rcx + 0x2f4]
xor eax, 0x69c128d
xor r9d, 0x69c128d
add r9d, r9d
movd xmm3, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x1faf3915
mov dword [rsp + 8], eax
movss xmm4, dword [rsp + 8]
movzx eax, word [rdx]
cvtdq2ps xmm3, xmm3
test ax, ax
je 0x14002e906
mov r10, qword [rcx + 0x300]
movaps xmm2, xmmword [0x1404dc560]
movzx eax, ax
neg rdx
add rdx, 0xfffffffffffffffe
neg rdx
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
movzx eax, word [rdx]
xorps xmm0, xmm2
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm3
addss xmm1, xmm4
cvttss2si ecx, xmm1
sub ecx, r9d
add r8d, ecx
test ax, ax
jne 0x14002e8c5
mov eax, r8d
ret
Function at 0x14002e950
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0xa0
cmp qword [rcx + 0x2f8], 0
mov rdi, rcx
pushf
mov qword [rsp + 0xb2], 0x7946c2a4
sub qword [rsp + 0xb2], 0x32e5afa4
sub qword [rsp + 0xb2], 0x46611300
popf
pushf
movabs rsi, 0xffffffff7827a9ba
xor rsi, 0x1034b386
add rsi, 0x7fffffff
add rsi, 0x17ece5c4
popf
je 0x14002eaed
mov edx, dword [rcx + 0x2ec]
mov eax, dword [rcx + 0x2e8]
xor edx, 0x69c128d
xor eax, 0x69c128d
imul edx, eax
mov eax, 0x641cf937
xor eax, 0x670efaea
xor eax, 0x31203d9
movsxd rbx, edx
mul rbx
cmovo rax, rsi
mov rcx, rax
call fcn.1400b6e40
mov qword [rsp + 0xb0], rax
test rbx, rbx
jle 0x14002ea33
xor edx, edx
mov rax, qword [rdi + 0x2f8]
mov ecx, dword [rax + rdx*4]
mov rax, qword [rsp + 0xb0]
xor ecx, 0x643e38cc
mov dword [rax + rdx*4], ecx
inc rdx
cmp rdx, rbx
jl 0x14002ea0c
mov rbx, qword [rdi + 0x318]
lea rax, [0x140001c28]
mov qword [rsp + 0x20], rax
movabs rdx, 0x330f47136d150638
sub rdx, 0xb4d1e80
sub rdx, 0x5e35cb32
add rdx, 0x568f584d
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x98], 0x60400c1f
xor qword [rsp + 0x98], 0x447b802f
xor qword [rsp + 0x98], 0x243b8c28
mov qword [rsp + 0x28], rdi
mov rcx, qword gs:[0x30]
mov rax, qword [rbx + 0x98]
xor rax, rdx
cmp rax, qword [rcx + 0x48]
jne 0x14002eb07
lea rcx, [rsp + 0x20]
call fcn.14002d070
movzx edi, al
mov rax, qword [rsp + 0x98]
cmp rax, 0x78
ja 0x14002ebff
test rax, rax
je 0x14002ec45
mov rax, qword [rsp + 0x20]
mov r8, qword [rax]
jmp 0x14002ec2b
lea rdx, [rsp + 0xb0]
call fcn.14002ecd0
test al, al
jne 0x14002ea33
jmp 0x14002ec49
mov rax, qword gs:[0x30]
mov rdi, qword [rax + 0x48]
lock inc dword [rbx + 0xf0]
je 0x14002eb3f
cmp rdi, qword [rbx + 0xe0]
je 0x14002ebdb
mov rcx, qword [rbx + 0xe8]
xor r8d, r8d
xor edx, edx
call fcn.140092640
mov qword [rbx + 0xe0], rdi
mov dword [rbx + 0xf4], 0x415ad9d8
sub dword [rbx + 0xf4], 0x25a3e194
sub dword [rbx + 0xf4], 0x1bb6f843
lea rcx, [rbx + 0xc0]
lea rdx, [rsp + 0x20]
call fcn.14002ba50
test rax, rax
setne dil
sub dword [rbx + 0xf4], 1
jne 0x14002ebe6
mov qword [rbx + 0xe0], 0x65bc365
add qword [rbx + 0xe0], 0x49bdfc25
sub qword [rbx + 0xe0], 0x2db9b51d
sub qword [rbx + 0xe0], 0x22600a6d
lock xadd dword [rbx + 0xf0], esi
dec esi
cmp esi, 0xffffffff
je 0x14002ebed
mov rcx, qword [rbx + 0xe8]
xor edx, edx
call fcn.1400925e0
jmp 0x14002ebed
inc dword [rbx + 0xf4]
jmp 0x14002eb64
lock dec dword [rbx + 0xf0]
mov rax, qword [rsp + 0x98]
cmp rax, 0x78
jbe 0x14002ec1a
mov rcx, qword [rsp + 0x20]
xor edx, edx
mov rax, qword [rcx]
call qword [rax]
mov rcx, qword [rsp + 0x20]
call fcn.1400b6f90
jmp 0x14002ec45
test rax, rax
je 0x14002ec45
mov rcx, qword [rsp + 0x20]
mov r8, qword [rcx]
lea rax, [0x14002d0c0]
cmp r8, rax
je 0x14002ec45
xor edx, edx
lea rcx, [rsp + 0x20]
call r8
movzx eax, dil
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x140031120
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
add rsp, 0xffffffffffffffa0
mov rbx, rdx
mov rsi, rcx
mov edx, r8d
lea rcx, [rbp - 0x20]
mov r13, r9
call fcn.1400a16c0
mov r8d, 0x4461232b
add r8d, 0x14e18513
sub r8d, 0x5942a83c
lea rcx, [rbp - 0x20]
mov rdx, rbx
call fcn.1400a1e70
test al, al
je 0x1400312f9
mov eax, dword [rsi + 0x2e8]
lea rdx, [rbp - 0x40]
xor eax, 0x69c128d
mov dword [rbp - 0x40], 0x2b0e87a4
xor dword [rbp - 0x40], 0x21415027
add dword [rbp - 0x40], 0x3958b4f4
sub dword [rbp - 0x40], 0x11604931
mov dword [rbp - 0x38], eax
lea rcx, [rbp - 0x20]
mov eax, dword [rsi + 0x2ec]
xor ebx, ebx
xor eax, 0x69c128d
mov dword [rbp - 0x3c], 0x349051a5
add dword [rbp - 0x3c], 0x3fbf4654
sub dword [rbp - 0x3c], 0x744f97d9
mov dword [rbp - 0x34], eax
mov eax, dword [rsi + 0x2f4]
xor eax, 0x69c128d
mov qword [rbp - 0x28], rbx
mov dword [rbp - 0x30], eax
lea r8d, [rbx + 0x20]
mov eax, dword [rsi + 0x30c]
xor eax, 0x69c128d
mov dword [rbp - 0x2c], eax
call fcn.1400a4780
test al, al
je 0x1400312f9
mov r12d, dword [rsi + 0x2d8]
lea edx, [rbx + 0x10]
mov eax, 0x4d8132b3
sub eax, 0x3dfa4d45
sub eax, 0xf86e46f
and r12d, 0x2000
pushf
mov edi, 0x61ad5ed2
sub edi, 0x5a80b286
xor edi, 0x72c53b3
popf
cmovne edi, eax
mov r15d, edi
shl r15, 4
mov rcx, r15
call fcn.1400b6eb0
mov r14, rax
test rax, rax
je 0x1400312f9
mov r8, qword [rsi + 0x300]
mov rdx, rax
movaps xmm1, xmmword [0x1404dc560]
sub r8, rax
movups xmm0, xmmword [r8 + rdx]
lea rdx, [rdx + 0x10]
xorps xmm0, xmm1
inc rbx
movups xmmword [rdx - 0x10], xmm0
cmp rbx, rdi
jl 0x14003126b
mov rcx, r15
call fcn.1400b6e40
mov rbx, rax
mov r8d, 0x513daafb
sub r8d, 0x46b2a645
xor r8d, 0xa84fb46
mov eax, 0x2073e1c6
xor eax, 0x200e269a
add eax, 0x6e336481
xor eax, 0x6eb1242d
test r12d, r12d
mov rdx, rbx
mov rcx, r14
cmovne r8d, eax
mov r9d, r8d
call fcn.14008f2c0
mov r8d, eax
mov dword [rbp - 0x28], eax
mov rdx, rbx
lea rcx, [rbp - 0x20]
call fcn.1400a4780
mov rcx, r14
test al, al
jne 0x140031325
call fcn.1400b6e60
mov rcx, rbx
call fcn.1400b6e50
xor bl, bl
lea rcx, [rbp - 0x20]
call fcn.1400a1720
lea r11, [rsp + 0x60]
movzx eax, bl
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400b6e60
mov rcx, rbx
call fcn.1400b6e50
mov eax, dword [rbp - 0x34]
imul eax, dword [rbp - 0x38]
movsxd rcx, eax
shl rcx, 2
call fcn.1400b6e40
mov r8d, dword [rbp - 0x34]
mov rdx, rax
imul r8d, dword [rbp - 0x38]
mov rcx, r13
mov rbx, rax
shl r8d, 2
mov r9d, r8d
call fcn.14008f2c0
mov r8d, eax
mov dword [rbp - 0x24], eax
mov rdx, rbx
lea rcx, [rbp - 0x20]
call fcn.1400a4780
mov rcx, rbx
test al, al
je 0x1400312f4
call fcn.1400b6e50
lea rcx, [rbp - 0x20]
call fcn.1400a4a20
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.1400a4770
test al, al
je 0x1400312f9
mov r8d, 0x78a88a3b
xor r8d, 0x736f3ab1
xor r8d, 0xbc7b0aa
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x20]
call fcn.1400a4780
test al, al
je 0x1400312f9
mov bl, 0x67
add bl, 0xe
sub bl, 0x18
sub bl, 0x5c
jmp 0x1400312fb
Function at 0x14003dae0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
neg rsp
sub rsp, 0xffffffffffffffa0
neg rsp
mov rbp, qword [rcx + 0xaf0]
lea rax, [rsp + 0x28]
mov rbx, qword [rcx + 0xab8]
xorps xmm0, xmm0
mov r14, rdx
mov qword [rsp + 0x20], rax
mov rsi, rcx
lea rcx, [rsp + 0x20]
lea rdx, [rbp + 1]
movups xmmword [rsp + 0x28], xmm0
movups xmmword [rsp + 0x38], xmm0
movups xmmword [rsp + 0x48], xmm0
call fcn.140010f10
mov edi, 0x3e8dd449
sub edi, 0x1f22a310
add edi, 0x118a0e4b
xor edi, 0x1c51203
mov r9, rax
mov ecx, edi
mov r15d, 0x694620d3
xor r15d, 0x7e8c805c
xor r15d, 0x19e7cab5
sub r15d, 0xe2d693b
test rbp, rbp
je 0x14003dbb2
mov rdx, rax
sub rbx, rax
mov r8, rbp
nop dword [rax]
nop dword [rax + rax]
movzx eax, cx
lea rdx, [rdx + 2]
and ax, r15w
ror ecx, 8
xor ax, word [rbx + rdx - 2]
mov word [rdx - 2], ax
sub r8, 1
jne 0x14003db91
xor ebx, ebx
mov word [r9 + rbp*2], bx
cmp word [rsi + 0xb40], bx
je 0x14003dbfd
mov edx, ebx
cmp qword [rsi + 0xaf0], rbx
jbe 0x14003dbfd
nop dword [rax + rax]
mov rax, qword [rsp + 0x20]
movzx ecx, word [rsi + 0xb40]
mov word [rax + rdx*2], cx
inc rdx
cmp rdx, qword [rsi + 0xaf0]
jb 0x14003dbdd
mov rsi, qword [rsp + 0x20]
lea rax, [r14 + 8]
xorps xmm0, xmm0
mov qword [r14], rax
movups xmmword [rax], xmm0
nop
movabs rdx, 0xffffffff3e03a11b
sub rdx, 0x3b50ab45
add rdx, 0x7fffffff
add rdx, 0x7d4d0a2a
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
nop dword [rax]
inc rdx
cmp word [rsi + rdx*2], bx
jne 0x14003dc3a
mov rcx, r14
mov qword [r14 + 0x38], rdx
call fcn.140010f10
cmp qword [r14 + 0x38], rbx
jbe 0x14003dc86
sub rsi, rax
nop
movzx ecx, di
lea rax, [rax + 2]
and cx, r15w
ror edi, 8
xor cx, word [rsi + rax - 2]
inc rbx
mov word [rax - 2], cx
cmp rbx, qword [r14 + 0x38]
jb 0x14003dc62
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x28]
cmp rcx, rax
jne 0x14003dcb8
lea rdi, [rsp + 0x28]
xor eax, eax
mov ecx, 0x16754913
add ecx, 0x1032fdb3
sub ecx, 0x26a84696
rep stosb byte [rdi], al
jmp 0x14003dcbd
call fcn.1400b6f90
lea r11, [rsp + 0x60]
mov rax, r14
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rdi
ret
Function at 0x1400416d0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x20
mov r8, qword [rcx + 0x648]
xor esi, esi
mov rbx, rcx
test r8, r8
je 0x140041700
mov rdi, qword [rcx + 0x640]
jmp 0x140041707
mov rdi, rsi
nop dword [rax]
test r8, r8
je 0x140041720
mov rax, qword [rbx + 0x640]
lea rcx, [rax + r8*8]
jmp 0x140041723
mov rcx, rsi
cmp rdi, rcx
je 0x14004195a
mov rax, qword [rdi]
cmp qword [rax + 0x28], rdx
je 0x14004174d
nop
add rdi, 0x70d9768e
sub rdi, 0x70d97686
jmp 0x140041707
test r8, r8
je 0x140041811
cmp rdi, qword [rbx + 0x640]
jb 0x140041811
mov rax, qword [rbx + 0x640]
lea rcx, [rax + r8*8]
cmp rdi, rcx
jae 0x140041811
mov rdx, rdi
nop word [rax + rax]
mov rcx, qword [rbx + 0x648]
test rcx, rcx
je 0x1400417a4
mov rax, qword [rbx + 0x640]
lea rax, [rax + rcx*8]
jmp 0x1400417a7
mov rax, rsi
add rax, 0xfffffffffffffff8
cmp rdx, rax
jae 0x1400417ca
mov rax, qword [rdx + 8]
mov qword [rdx], rax
neg rdx
add rdx, 0xfffffffffffffff8
neg rdx
jmp 0x140041784
test rcx, rcx
je 0x140041811
lea rax, [rcx - 1]
mov qword [rbx + 0x648], rax
test rax, rax
jne 0x140041811
mov rcx, qword [rbx + 0x640]
test rcx, rcx
je 0x140041803
call fcn.1400b6f90
mov qword [rbx + 0x640], rsi
mov qword [rbx + 0x650], rsi
mov qword [rbx + 0x648], rsi
mov rcx, qword [rdi]
test rcx, rcx
je 0x140041833
mov rax, qword [rcx]
mov edx, 0x27cff406
add edx, 0x30589169
xor edx, 0x5828856e
call qword [rax]
cmp qword [rbx + 0x648], rsi
je 0x14004195a
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400413b0
mov rcx, qword [rsp + 0x30]
mov r10d, 0x10a23fd2
xor r10d, 0x407e8d08
sub r10d, 0x94ed0a0
sub r10d, 0x478de19a
mov r8d, dword [rsp + 0x34]
mov eax, ecx
mov r9, qword [rbx + 0x648]
sub eax, r8d
cdq
idiv dword [rbx + 0x648]
cmp eax, r10d
cmovl r10d, eax
test r9, r9
je 0x140041912
mov rdx, qword [rbx + 0x640]
lea r11, [rdx + r9*8]
cmp rdx, r11
je 0x140041912
mov r9d, r10d
xor r9d, 0x69c128d
xor r8d, 0x69c128d
nop dword [rax]
mov rcx, qword [rdx]
mov eax, esi
xor eax, 0x69c128d
add esi, r10d
neg rdx
add rdx, 0xfffffffffffffff8
neg rdx
mov dword [rcx + 0x30], eax
mov dword [rcx + 0x34], 0x2a527817
add dword [rcx + 0x34], 0x372fc9cd
add dword [rcx + 0x34], 0x73f29a8
sub dword [rcx + 0x34], 0x622558ff
mov dword [rcx + 0x38], r9d
mov dword [rcx + 0x3c], r8d
cmp rdx, r11
jne 0x1400418c1
mov rcx, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x34]
mov rax, qword [rbx + 0x660]
test rax, rax
je 0x140041952
sub ecx, r8d
mov dword [rax + 0x14], 0x3c7fa211
sub dword [rax + 0x14], 0x9cf64cf
sub dword [rax + 0x14], 0x2c142ab5
xor ecx, 0x69c128d
xor r8d, 0x69c128d
mov dword [rax + 0x10], ecx
mov dword [rax + 0x18], r8d
mov dword [rax + 0x1c], r8d
mov rcx, rbx
call fcn.14003c3b0
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
neg rsp
add rsp, 0xffffffffffffffe0
neg rsp
pop rdi
ret
Function at 0x140041a29
Capabilities:
Encode data using xor

Disassembly:
push rbx
neg rsp
sub rsp, 0xffffffffffffffe0
neg rsp
mov rax, qword [rcx]
mov rbx, rcx
call qword [rax + 0x78]
mov rdx, qword [rbx + 0x648]
mov rcx, rax
mov qword [rsp + 0x30], rax
call fcn.1400220f0
lea rcx, [rbx + 0x640]
lea rdx, [rsp + 0x30]
call fcn.14002b960
mov rcx, rbx
nop
add rsp, 0x586bdd9f
sub rsp, 0x586bdd7f
pop rbx
jmp 0x140041970
push rbx
neg rsp
sub rsp, 0xffffffffffffffe0
neg rsp
cmp qword [rcx + 0x648], 0
mov rbx, rcx
je 0x140041abc
lea rdx, [rsp + 0x30]
call fcn.1400413b0
mov r8, qword [rsp + 0x30]
mov r11d, 0x4c5cbbc1
xor r11d, 0x2bbb97ae
sub r11d, 0x48cf5116
sub r11d, 0x1f17dab9
mov r9d, dword [rsp + 0x34]
mov eax, r8d
sub eax, r9d
cdq
idiv dword [rbx + 0x648]
mov rdx, qword [rbx + 0x648]
cmp eax, r11d
cmovl r11d, eax
xor r10d, r10d
test rdx, rdx
je 0x140041a6b
mov rax, qword [rbx + 0x640]
mov qword [rsp + 0x38], rdi
lea rdi, [rax + rdx*8]
cmp rax, rdi
je 0x140041a66
mov r8d, r11d
xor r8d, 0x69c128d
xor r9d, 0x69c128d
nop word [rax + rax]
mov rdx, qword [rax]
mov ecx, r10d
xor ecx, 0x69c128d
add r10d, r11d
neg rax
add rax, 0xfffffffffffffff8
neg rax
mov dword [rdx + 0x30], ecx
mov dword [rdx + 0x34], 0x5400bb1d
sub dword [rdx + 0x34], 0x3a1c1ea4
xor dword [rdx + 0x34], 0x38693409
sub dword [rdx + 0x34], 0x1af195e3
mov dword [rdx + 0x38], r8d
mov dword [rdx + 0x3c], r9d
cmp rax, rdi
jne 0x140041a13
mov r8, qword [rsp + 0x30]
mov r9d, dword [rsp + 0x34]
mov rdi, qword [rsp + 0x38]
mov rax, qword [rbx + 0x660]
test rax, rax
je 0x140041ab4
sub r8d, r9d
mov dword [rax + 0x14], 0x7497fabc
add dword [rax + 0x14], 0x18d909e
sub dword [rax + 0x14], 0x2d74d4d
sub dword [rax + 0x14], 0x6cb22b80
xor r8d, 0x69c128d
xor r9d, 0x69c128d
mov dword [rax + 0x10], r8d
mov dword [rax + 0x18], r9d
mov dword [rax + 0x1c], r9d
mov rcx, rbx
call fcn.14003c3b0
sub rsp, 0xffffffffffffffe0
pop rbx
ret
Function at 0x14004bfa0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov dword [rsp - 0x14], edi
mov qword [rax + 0x10], rbx
nop
push r12
mov qword [rsp], rdi
add rsp, 0xffffffffffffffa0
movabs rbx, 0x330f471327222688
xor rbx, 0x40b36cf7
add rbx, 0x11b0493c
sub rbx, 0x759c4771
add rbx, 0x567c2889
xchg rdi, rcx
mov rcx, rdi
xchg rdi, rcx
cmp qword [rcx + 0x30], rbx
xchg r12, r12
jne 0x14004c1e8
mov dword [rax - 0x48], 0x3b7e3409
add dword [rax - 0x48], 0x24b381bc
sub dword [rax - 0x48], 0x182f0596
sub dword [rax - 0x48], 0x47b9af69
xor r8d, r8d
mov rdi, rdi
mov dword [rax - 0x44], 0x6d93cda8
sub dword [rax - 0x44], 0x44164d94
add dword [rax - 0x44], 0x23cbab96
sub dword [rax - 0x44], 0x4cf92b64
mov dword [rax - 0x40], 0xea150cd
add dword [rax - 0x40], 0x8596fbb
xor dword [rax - 0x40], 0x2f5c541e
xor dword [rax - 0x40], 0x55cdd798
sub dword [rax - 0x40], 0x6c274217
mov dword [rax - 0x3c], 0x414ca215
xor dword [rax - 0x3c], 0x29e2d5c4
add dword [rax - 0x3c], 0x112ecbb2
sub dword [rax - 0x3c], 0x79da4380
mov dword [rax - 0x38], 0x33ae87e8
add dword [rax - 0x38], 0x1e7a86fb
add dword [rax - 0x38], 0x19fd392
xor dword [rax - 0x38], 0x2df6afe
xor dword [rax - 0x38], 0x515e8822
mov dword [rax - 0x34], 0x4543ad7f
add dword [rax - 0x34], 0xdd32d4b
add dword [rax - 0x34], 0x2a8dcba9
sub dword [rax - 0x34], 0x7d47a617
xchg r8, rsi
mov qword [rsp + 0x70], rsi
xchg r8, rsi
mov rax, qword [rsp + 0x70]
mov dword [rsp - 0x28], 0x37333a6f
nop word [rax + rax]
xchg rcx, r8
mov r8, qword [rsp + 0x70]
xchg rcx, r8
mov rax, qword [rsp + 0x70]
mov rbp, rbp
and cl, 3
shl cl, 3
movzx edx, word [rsp + rax*2 + 0x20]
mov eax, 0x1d0f77e2
add eax, 0x1c20479d
add eax, 0x41f05d47
sub eax, 0x49efef3f
shr eax, cl
mov dword [rsp - 0x18], 0x577eb655
movzx ecx, al
xchg r10, rax
mov r10, qword [rsp + 0x70]
xchg r10, rax
xor cx, dx
mov word [rsp + rax*2 + 0x38], cx
xchg rdi, rax
mov rdi, qword [rsp + 0x70]
xchg rdi, rax
inc rax
mov dword [rsp - 0x2c], 0x261c4849
mov qword [rsp + 0x70], rax
xchg r8, rax
mov r8, qword [rsp + 0x70]
xchg r8, rax
cmp rax, 0xc
mov dword [rsp - 0x20], 0x31832d7d
jb 0x14004c0cc
xor edx, edx
mov word [rsp + 0x50], r8w
lea rcx, [rsp + 0x38]
mov rbp, rbp
call fcn.14009a880
xchg rbp, rax
mov rdx, rbp
xchg rbp, rax
xchg r8, rax
mov rax, r8
xchg r8, rax
xor rdx, rbx
mov dword [rsp - 0x38], 0x49a392e1
xor eax, eax
mov qword [rdi + 0x30], rdx
lea rdi, [rsp + 0x38]
xchg r13, r13
mov ecx, 0x1f649f54
add ecx, 0x2b8553c8
add ecx, 0x2893fd97
xor ecx, 0x737df0bf
rep stosb byte [rdi], al
cmp rdx, rbx
xchg rcx, rcx
je 0x14004c1f0
lea rdx, [0x1404db3f0]
mov rcx, r8
xchg r14, r14
call fcn.140053790
test al, al
setne al
mov dword [rsp - 0x1c], esi
xchg rbx, r12
mov r12, qword [rsp + 0x78]
xchg rbx, r12
add rsp, 0x60
mov rbp, rbp
nop
mov rdi, qword [rsp]
add rsp, 8
ret
mov al, 0x54
add al, 0x1d
xor al, 0x65
xor al, 0x15
xchg rbx, rdx
mov rdx, qword [rsp + 0x78]
xchg rbx, rdx
add rsp, 0x60
nop
mov rdi, qword [rsp]
add rsp, 8
ret
Function at 0x14004c210
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
neg rsp
sub rsp, 0xffffffffffffffb0
neg rsp
movabs rbx, 0x330f47133bc6950e
add rbx, 0x35a6f7ce
sub rbx, 0x3468cbfe
add rbx, 0x272737a
add rbx, 0x1aaa407b
xchg rdi, rbx
mov rbx, rcx
xchg rbx, rdi
cmp qword [rcx + 0x28], rbx
mov dword [rsp - 0x10], 0xc5faafa
jne 0x14004c444
mov eax, 0x5af5d778
add eax, 0x202bcbe3
sub eax, 0x4bd92e19
xor eax, 0x12d7a392
sub eax, 0x3d9fd5e5
mov dword [rsp + 0x20], 0x3718e72e
sub dword [rsp + 0x20], 0x775aed4
sub dword [rsp + 0x20], 0x1292588f
sub dword [rsp + 0x20], 0x1ccfdf03
mov word [rsp + 0x30], ax
xor r8d, r8d
xchg r10, r10
mov dword [rsp + 0x24], 0x152e6d39
add dword [rsp + 0x24], 0xa3b7f51
add dword [rsp + 0x24], 0x41315be4
xor dword [rsp + 0x24], 0x4d836722
sub dword [rsp + 0x24], 0x2d162ef7
mov dword [rsp + 0x28], 0x3ca7e2de
add dword [rsp + 0x28], 0x34e86662
sub dword [rsp + 0x28], 0x23400ed2
sub dword [rsp + 0x28], 0x4e4d39b9
mov dword [rsp + 0x2c], 0x1c4b32da
xor dword [rsp + 0x2c], 0x78ad8286
add dword [rsp + 0x2c], 0x120b3bc3
xor dword [rsp + 0x2c], 0x43fa1f8c
xor dword [rsp + 0x2c], 0x3556f3c7
mov qword [rsp + 0x60], r8
xchg r10, rax
mov r10, qword [rsp + 0x60]
xchg r10, rax
nop dword [rax + rax]
xchg r14, rcx
mov r14, qword [rsp + 0x60]
xchg r14, rcx
mov rax, qword [rsp + 0x60]
mov rbx, rbx
and cl, 3
shl cl, 1
shl cl, 2
movzx edx, word [rsp + rax*2 + 0x20]
mov dword [rsp - 0x44], 0x5a9b2179
mov eax, 0x61f575d0
sub eax, 0x60fd81de
add eax, 0x1084a8e3
xor eax, 0x59b20b5
add eax, 0x1c487127
shr eax, cl
mov dword [rsp - 0x14], 0x6638defd
movzx ecx, al
mov rax, qword [rsp + 0x60]
xor cx, dx
xchg r8, r8
mov word [rsp + rax*2 + 0x32], cx
mov rax, qword [rsp + 0x60]
inc rax
xchg r12, rax
mov qword [rsp + 0x60], r12
xchg r12, rax
mov rax, qword [rsp + 0x60]
xchg rbx, rbx
cmp rax, 9
jb 0x14004c32b
xor edx, edx
mov word [rsp + 0x44], r8w
mov rdi, rdi
lea rcx, [rsp + 0x32]
call fcn.14009a880
xchg rdx, rax
mov rax, rdx
xchg rdx, rax
xchg r8, rdi
mov rdi, rax
xchg rdi, r8
xor rdx, rbx
xchg rcx, rcx
xor eax, eax
mov qword [rdi + 0x28], rdx
lea rdi, [rsp + 0x32]
mov ecx, 0x53167dc2
xor ecx, 0x354b9119
add ecx, 0x4ab2fc9
add ecx, 0xee5132f
sub ecx, 0x79ee2fca
rep stosb byte [rdi], al
cmp rdx, rbx
je 0x14004c44c
xchg r11, r11
lea rdx, [0x1404db0e0]
xchg rcx, r8
mov r8, rcx
xchg r8, rcx
call fcn.14005f2f0
xchg r13, r13
test al, al
setne al
xchg rbx, r10
mov r10, qword [rsp + 0x68]
xchg rbx, r10
neg rsp
add rsp, 0xffffffffffffffb0
neg rsp
pop rdi
mov rbx, rbx
ret
mov al, 0x30
xor al, 0x53
sub al, 0xd
sub al, 0x55
xchg r12, rbx
mov r12, qword [rsp + 0x68]
xchg rbx, r12
neg rsp
add rsp, 0xffffffffffffffb0
neg rsp
pop rdi
ret