joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400d9630
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
xchg rdi, rsi
mov qword [rsp + 0x18], rdi
xchg rdi, rsi
xchg r14, rdi
mov qword [rsp + 0x20], r14
xchg rdi, r14
nop
sub rsp, 8
mov qword [rsp], rbp
mov rbp, rsp
mov dword [rsp - 0xc], 0x46bcb0f8
nop
add rsp, 0x61233537
sub rsp, 0x61233587
xor esi, esi
mov dword [rsp - 0x28], 0xbb7cc1d
mov dword [rbp - 0x30], 0x2d45616c
add dword [rbp - 0x30], 0x19d684e9
add dword [rbp - 0x30], 0x274c8c2b
sub dword [rbp - 0x30], 0x1c64e6a8
sub dword [rbp - 0x30], 0x51cb8ba3
mov dword [rbp - 0x2c], 0x7adbf6d3
sub dword [rbp - 0x2c], 0x3ecadbaf
xor dword [rbp - 0x2c], 0x64aefec8
sub dword [rbp - 0x2c], 0x58b8e500
xchg rbx, rsi
mov rsi, rcx
xchg rsi, rbx
mov dword [rbp - 0x28], 0x1a70fbab
sub dword [rbp - 0x28], 0x412c5a2
xor dword [rbp - 0x28], 0x4b74d802
xor dword [rbp - 0x28], 0x7f553cb3
sub dword [rbp - 0x28], 0x2206d267
mov dword [rbp - 0x24], 0x503fdb3c
xor dword [rbp - 0x24], 0x7bdd6707
sub dword [rbp - 0x24], 0x2b4d2eb6
xor dword [rbp - 0x24], 0x7853cc24
sub dword [rbp - 0x24], 0x788a40b1
mov dword [rbp - 0x20], 0xa9a0329
add dword [rbp - 0x20], 0x52cb7f57
sub dword [rbp - 0x20], 0x2ef97dc3
sub dword [rbp - 0x20], 0x2e4504af
mov qword [rbp + 0x10], rsi
mov rax, qword [rbp + 0x10]
mov dword [rsp - 0x1c], 0x66cf2611
xchg r12, rcx
mov r12, qword [rbp + 0x10]
xchg rcx, r12
xchg rsp, rax
mov rsp, qword [rbp + 0x10]
xchg rsp, rax
and cl, 3
mov rsp, rsp
shl cl, 2
shl cl, 1
movzx edx, word [rbp + rax*2 - 0x30]
mov dword [rsp - 0x34], 0x386b3a3d
mov eax, 0x721ef14f
sub eax, 0x4782d5b8
xor eax, 0x7dd26690
add eax, 0x1d4347a
sub eax, 0x44661f
shr eax, cl
mov r12, r12
movzx ecx, al
mov rax, qword [rbp + 0x10]
xor cx, dx
mov word [rbp + rax*2 - 0x1c], cx
mov dword [rsp - 0x34], ebp
mov rax, qword [rbp + 0x10]
inc rax
mov qword [rbp + 0x10], rax
xchg rdi, rax
mov rdi, qword [rbp + 0x10]
xchg rdi, rax
cmp rax, 0xa
xchg r13, r13
jb 0x1400d9732
xor edx, edx
mov word [rbp - 8], si
mov dword [rsp - 0x34], ebx
lea rcx, [rbp - 0x1c]
call fcn.14008a9e0
mov r8, rax
mov qword [rbx + 0x200], rax
mov rsi, rsi
xor eax, eax
lea rdi, [rbp - 0x1c]
lea ecx, [rax + 0xa]
xchg rbx, rbx
rep stosb byte [rdi], al
test r8, r8
je 0x1400d9833
lea rdx, [rbx + 0x208]
mov dword [rsp - 0x40], edx
xchg rcx, r15
mov r15, r8
xchg r15, rcx
call fcn.1400d9ed8
test al, al
xchg r10, r10
jne 0x1400d982b
mov rcx, qword [rbx + 0x200]
call fcn.14008cf50
xchg rsi, rsi
xor al, al
xchg rsi, rsp
mov qword [rbx + 0x200], rsp
xchg rsi, rsp
jmp 0x1400d9833
mov al, 0xc
xor al, 0x56
sub al, 0x33
sub al, 0x26
mov rbx, qword [rsp + 0x68]
xchg rsi, r14
mov r14, qword [rsp + 0x70]
xchg r14, rsi
mov rdi, qword [rsp + 0x78]
mov rbp, rbp
nop
add rsp, 0x64b220e5
sub rsp, 0x64b22095
nop
add rsp, 8
mov rbp, qword [rsp - 8]
ret
Function at 0x1400d9ccc
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
xchg rsi, rsi
push rdi
sub rsp, 0x140
mov rbx, r8
mov rdi, rcx
mov dword [rsp - 0x1c], ebx
mov r8d, 0x4dadd13a
xor r8d, 0x29e5ec85
sub r8d, 0x39b60d72
sub r8d, 0x2a922f4d
lea rcx, [rsp + 0x40]
mov dword [rsp - 0x14], 0x4aa19024
xor edx, edx
call fcn.140098ae0
mov rax, qword [rdi + 0x238]
mov dword [rsp - 0x28], esp
lea r8, [rsp + 0x40]
mov edx, dword [rbx + 0x10]
movabs rcx, 0xd1b34dac7620ccd2
xor rcx, 0x55b8db50
sub rcx, 0x943fdc6
xor rcx, 0x718ce40f
xor rax, rcx
mov dword [rsp + 0x30], 0x19d45661
sub dword [rsp + 0x30], 0x13886393
add dword [rsp + 0x30], 0x47ab7ebd
xor dword [rsp + 0x30], 0x4df77189
rol rax, 0x26
mov rsi, rsi
movabs rcx, 0x61a76954251de5bb
sub rcx, 0x39ed205
xor rcx, 0x7bd12546
add rcx, 0x7c507b52
not rax
xor edi, edi
mov dword [rsp - 0x2c], edi
rol rax, 0x38
rol rax, 1
mov r9d, 0x66f29e40
sub r9d, 0x643cf49
sub r9d, 0x11a5a6a7
sub r9d, 0x4f092750
xor rax, rcx
mov dword [rsp - 0x14], 0x58012e9e
mov dword [rsp + 0x28], edi
movabs rcx, 0x2450ea6c37830db9
sub rcx, 0x134cd997
xor rcx, 0x366df7f6
xor rcx, 0x6dadb8ec
xchg r12, rdi
mov qword [rsp + 0x20], r12
xchg r12, rdi
sub rax, rcx
xchg rbp, rcx
mov rbp, qword [rbx + 0x20]
xchg rcx, rbp
call rax
mov dword [rsp - 0x2c], 0x3187e727
test eax, eax
jne 0x1400d9eaf
or eax, 0xffffffff
xchg r9, r9
lea rbx, [rsp + 0x40]
mov dword [rsp + 0x150], eax
cmp byte [rsp + 0x40], dil
je 0x1400d9e83
mov dword [rsp - 0x18], esp
xchg r13, rbx
mov rdx, r13
xchg r13, rbx
lea rcx, [rsp + 0x150]
mov r8d, 0x518dedc3
sub r8d, 0xcfaa032
xor r8d, 0x7db6caf8
sub r8d, 0x39258768
inc rbx
mov rbp, rbp
call fcn.14008dc00
cmp byte [rbx], dil
jne 0x1400d9e34
mov eax, dword [rsp + 0x150]
mov dword [rsp - 0x40], 0xe26f519
not eax
cmp eax, 0xa2ca6717
je 0x1400d9ea0
cmp eax, 0xd7b7e7a8
mov r8, r8
sete al
jmp 0x1400d9eb5
mov al, 0x60
xor al, 0x63
xor al, 0x48
sub al, 3
sub al, 0x47
jmp 0x1400d9eb5
xor al, al
mov dword [rsp - 0x40], ebx
mov rbx, qword [rsp + 0x158]
sub rsp, 0x31e96aca
add rsp, 0x31e96c0a
nop
mov rdi, qword [rsp]
add rsp, 8
ret

Function at 0x1400de520
Capabilities:
Encrypt data using curve25519

Disassembly:
xchg rbx, r11
mov qword [rsp + 8], r11
xchg rbx, r11
push rdi
add rsp, 0x7e7b2077
sub rsp, 0x7e7b2137
xchg rdi, rax
mov rdi, r8
xchg rdi, rax
xchg rdx, r11
mov rbx, r11
xchg rdx, r11
xchg rdx, r12
mov r8, r12
xchg r12, rdx
xchg rdi, rcx
mov rcx, rdi
xchg rcx, rdi
mov edx, 0x6ceed970
sub edx, 0x5765656b
add edx, 0x36fabf7e
sub edx, 0x4c843363
xchg rcx, rax
mov rax, rcx
xchg rcx, rax
call fcn.1400ded70
movzx eax, byte [rbx + 0x1f]
lea rcx, [rsp + 0x20]
xchg r14, r14
and byte [rbx], 0xf8
and al, 0x3f
or al, 0x40
xchg rbx, rdx
mov rbx, rdx
xchg rdx, rbx
mov byte [rbx + 0x1f], al
mov dword [rsp - 0x44], 0x5008dc04
call fcn.1400e23b0
lea rdx, [rsp + 0x20]
xchg rcx, rdi
mov rdi, rcx
xchg rcx, rdi
call fcn.1400e22e0
xchg rdi, rbx
mov rdi, qword [rsp + 0xd0]
xchg rdi, rbx
add rsp, 0x2a3a8b4d
sub rsp, 0x2a3a8a8d
pop rdi
ret
Function at 0x1400edb5c
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xb0
mov r14, rdx
movabs rdx, 0x42a81dbb294474c1
add rdx, 0x54b191d5
sub rdx, 0x438fc27
cmp qword [rcx + 0x538], rdx
jne 0x1400eddd2
xorps xmm0, xmm0
mov rax, r14
xor rax, rdx
mov qword [rcx + 0x538], rax
lea rax, [rbp - 0x41]
mov rsi, qword [rcx + 0x578]
mov rbx, qword [rcx + 0x540]
lea rcx, [rbp - 0x49]
mov qword [rbp - 0x49], rax
movups xmmword [rbp - 0x41], xmm0
lea rdx, [rsi + 1]
movups xmmword [rbp - 0x31], xmm0
movups xmmword [rbp - 0x21], xmm0
call fcn.140017a38
xor r15d, r15d
mov edx, 0x33be3a4f
add edx, 0x1a426719
add edx, 0xadda9fa
test rsi, rsi
je 0x1400edc42
mov rdi, rax
sub rbx, rax
mov r8, rsi
movzx ecx, dx
mov r9d, 0x312e1abb
add r9d, 0x195dad10
xor r9d, 0x52f9929b
xor r9d, 0x187255af
and cx, r9w
ror edx, 8
xor cx, word [rbx + rdi]
mov word [rdi], cx
lea rdi, [rdi + 2]
sub r8, 1
jne 0x1400edc08
mov word [rax + rsi*2], r15w
movabs rcx, 0x626532e8602fa3cf
xor rcx, 0x1c06df42
add rcx, 0x2c9f322
lea rax, [0x1400ede08]
mov qword [rbp + 7], r15
mov qword [rbp - 1], rax
mov edx, 0x3c514309
add edx, 0x3c3e3da9
xor edx, 0x788fffb2
mov rax, qword [0x140142158]
xor rax, rcx
mov qword [rbp + 0x17], r15
not rax
mov qword [rbp + 0x2f], r15
rol rax, 0x28
movabs rcx, 0x71058a3e39679bb1
xor rcx, 0x5cff3eba
add rcx, 0x7fffffff
sub rcx, 0x1974c322
sub rax, rcx
mov qword [rbp + 0x3f], r15
rol rax, 0x37
xor ecx, ecx
mov dword [rbp - 9], 0x336a3ecb
add dword [rbp - 9], 0x1d036632
add dword [rbp - 9], 0x22e8a6eb
sub dword [rbp - 9], 0x73564b98
mov dword [rbp - 5], 0x17a23faf
xor dword [rbp - 5], 0x450a8ab8
sub dword [rbp - 5], 0x3ae715d1
sub dword [rbp - 5], 0x17c19f43
mov qword [rbp + 0xf], r14
call rax
mov qword [rbp + 0x1f], rax
movabs rcx, 0x6de3b2a76ccf60bf
sub rcx, 0x355e68d8
xor rcx, 0x1cef82cb
mov rax, qword [0x140142730]
xor rax, rcx
movabs rcx, 0x6d50114c320f21c3
sub rcx, 0xa56dd14
add rcx, 0x347195ea
rol rax, 0x33
xor rax, rcx
xor ecx, ecx
ror rax, 2
call rax
mov qword [rbp + 0x27], rax
movabs rcx, 0x7256082e6bbc47f2
xor rcx, 0x48ae47db
xor rcx, 0x7143f5b5
add rcx, 0x7fffffff
xor rcx, 0x4e7c0bb3
mov rax, qword [rbp - 0x49]
mov qword [rbp + 0x37], rax
mov rax, qword [0x140142020]
not rax
sub rax, rcx
lea rcx, [rbp - 9]
ror rax, 0x36
not rax
rol rax, 0x28
call rax
mov rcx, qword [rbp - 0x49]
test ax, ax
lea rax, [rbp - 0x41]
setne bl
cmp rcx, rax
jne 0x1400eddc6
xor eax, eax
lea rdi, [rbp - 0x41]
lea ecx, [rax + 0x30]
rep stosb byte [rdi], al
jmp 0x1400eddcb
call fcn.1400984b0
mov al, bl
jmp 0x1400eddd4
xor al, al
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
Function at 0x1400f0dec
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r14
push r15
add rsp, 0xffffffffffffffd0
mov dword [rcx + 8], 0x37772832
xor dword [rcx + 8], 0x6898982
add dword [rcx + 8], 0x41307161
sub dword [rcx + 8], 0x732f1310
lea r14, [rcx + 0x298]
xorps xmm0, xmm0
lea rax, [0x14000ba78]
mov qword [rcx], rax
mov rbp, rdx
lea rax, [r14 + 8]
mov rbx, rcx
mov qword [r14], rax
xor edi, edi
mov qword [rcx + 0x290], rdi
mov rsi, r8
movups xmmword [rax], xmm0
mov rcx, r14
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
mov rdx, qword [r8 + 0x38]
mov qword [r14 + 0x38], rdx
call fcn.140017a38
mov r8d, edi
cmp qword [r14 + 0x38], rdi
jbe 0x1400f0e8f
mov rcx, qword [rsi]
movzx edx, word [rcx + r8*2]
mov word [rax + r8*2], dx
inc r8
cmp r8, qword [r14 + 0x38]
jb 0x1400f0e75
mov ecx, dword [rsi + 0x40]
mov edx, 0x460bd1f1
xor edx, 0x5d64d46d
add edx, 0x621c5086
mov qword [rbx + 0x2e0], rdi
bts ecx, 0xe
mov dword [rbx + 0x2d8], ecx
mov r15d, 0x4328b03f
xor r15d, 0x22e28271
sub r15d, 0x52b16058
add r15d, 0x2b1559f0
mov eax, dword [rsi + 0x54]
and ecx, 0x2000
xor eax, edx
mov dword [rbx + 0x2e8], eax
mov eax, dword [rsi + 0x58]
xor eax, edx
mov dword [rbx + 0x2ec], eax
mov eax, dword [rsi + 0x44]
xor eax, edx
mov dword [rbx + 0x2f0], eax
mov eax, dword [rsi + 0x48]
xor eax, edx
mov dword [rbx + 0x2f4], eax
mov rax, qword [rsi + 0x60]
mov qword [rbx + 0x2f8], rax
mov eax, dword [rsi + 0x4c]
xor eax, r15d
mov dword [rbx + 0x308], eax
mov eax, dword [rsi + 0x50]
xor eax, edx
mov byte [rbx + 0x310], dil
neg ecx
mov dword [rbx + 0x30c], eax
pushf
mov edx, 0x1e571b47
add edx, 0x2a3464d8
sub edx, 0x488b800f
popf
mov qword [rbx + 0x318], rbp
sbb r14, r14
and r14, 0xffffffffffff0100
sub r14, 0x4e33dbe4
add r14, 0x4e34dbe3
mov rcx, r14
shl rcx, 4
call fcn.1400983c0
mov rcx, rax
mov rdx, r14
movaps xmm0, xmmword [0x140147620]
movups xmmword [rcx], xmm0
lea rcx, [rcx + 0x10]
sub rdx, 1
jne 0x1400f0f72
mov qword [rbx + 0x300], rax
mov rdx, rdi
mov rax, qword [rsi + 0x68]
inc rdi
mov ecx, dword [rax + rdx]
xor ecx, r15d
mov dword [rsp + 0x50], ecx
movss xmm0, dword [rsp + 0x50]
mov rax, qword [rsi + 0x68]
movss dword [rsp + 0x20], xmm0
mov ecx, dword [rax + rdx + 4]
xor ecx, r15d
mov dword [rsp + 0x50], ecx
movss xmm0, dword [rsp + 0x50]
mov rax, qword [rsi + 0x68]
movss dword [rsp + 0x24], xmm0
mov ecx, dword [rax + rdx + 8]
xor ecx, r15d
mov dword [rsp + 0x50], ecx
movss xmm0, dword [rsp + 0x50]
mov rax, qword [rsi + 0x68]
movss dword [rsp + 0x28], xmm0
mov ecx, dword [rax + rdx + 0xc]
xor ecx, r15d
mov dword [rsp + 0x50], ecx
movss xmm0, dword [rsp + 0x50]
mov rax, qword [rbx + 0x300]
movss dword [rsp + 0x2c], xmm0
movups xmm1, xmmword [rsp + 0x20]
xorps xmm1, xmmword [0x140147620]
movups xmmword [rdx + rax], xmm1
lea rdx, [rdx + 0x10]
cmp rdi, r14
jl 0x1400f0f94
lea rcx, [rbp + 0xa0]
mov qword [rsp + 0x50], rbx
lea rdx, [rsp + 0x50]
call fcn.1400eaa14
mov rbp, qword [rsp + 0x60]
mov rax, rbx
mov rbx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x68]
nop
add rsp, 0x42f7e999
sub rsp, 0x42f7e969
pop r15
pop r14
pop rdi
ret
Function at 0x1400f2994
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
neg rsp
sub rsp, 0xffffffffffffff50
neg rsp
mov rsi, rcx
lea rdx, [rcx + 0x298]
lea rcx, [rsp + 0x20]
call fcn.140073a40
or ebx, 0xffffffff
mov dword [rsp + 0xc0], ebx
mov rdi, qword [rax]
cmp byte [rdi], 0
je 0x1400f2a0d
mov rdx, rdi
lea rcx, [rsp + 0xc0]
mov r8d, 0x6e0c7714
sub r8d, 0x199a67e3
xor r8d, 0x54720f30
inc rdi
call fcn.14008dc00
cmp byte [rdi], 0
jne 0x1400f29d6
mov ebx, dword [rsp + 0xc0]
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x28]
not ebx
cmp rcx, rax
jne 0x1400f2a47
lea rdi, [rsp + 0x28]
xor eax, eax
mov ecx, 0x47eceeb9
xor ecx, 0x75c77d7
sub ecx, 0x1d34543b
xor ecx, 0x237c45b3
rep stosb byte [rdi], al
jmp 0x1400f2a4c
call fcn.1400984b0
mov eax, dword [rsi + 0x2f0]
lea r11, [rsp + 0xb0]
xor eax, 0x5622
shl eax, 0x10
or eax, dword [rsi + 0x2d8]
mov rsi, qword [r11 + 0x20]
xor eax, ebx
mov rbx, qword [r11 + 0x18]
xor eax, 2
mov rsp, r11
pop rdi
ret

Function at 0x1400f2b98
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
mov r10d, 0x3d445334
xor r10d, 0x2a241611
add r10d, 0x3fcf8f6f
add r10d, 0x265b818e
mov r8d, dword [rcx + 0x2f4]
xor eax, r10d
xor r8d, r10d
xor r9d, r9d
add r8d, r8d
movd xmm2, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x3a2e2be6
mov dword [rsp + 8], eax
movss xmm3, dword [rsp + 8]
mov al, byte [rdx]
cvtdq2ps xmm2, xmm2
test al, al
je 0x1400f2c35
mov r10, qword [rcx + 0x300]
movzx eax, al
inc rdx
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
xorps xmm0, xmmword [0x140147620]
mov al, byte [rdx]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm2
addss xmm1, xmm3
cvttss2si ecx, xmm1
sub ecx, r8d
add r9d, ecx
test al, al
jne 0x1400f2bf9
mov eax, r9d
ret

Function at 0x1400f2d28
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
mov r10d, 0x2be2c4d9
add r10d, 0x3a25b7e4
add r10d, 0x1782d965
mov r8d, dword [rcx + 0x2f4]
xor eax, r10d
xor r8d, r10d
xor r11d, r11d
add r8d, r8d
mov r9d, r11d
movd xmm2, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x3a2e2be6
mov dword [rsp + 8], eax
movss xmm3, dword [rsp + 8]
movzx eax, word [rdx]
cvtdq2ps xmm2, xmm2
test ax, ax
je 0x1400f2dcc
mov r10, qword [rcx + 0x300]
movzx eax, ax
neg rdx
add rdx, 0xfffffffffffffffe
neg rdx
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
xorps xmm0, xmmword [0x140147620]
movzx eax, word [rdx]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm2
addss xmm1, xmm3
cvttss2si ecx, xmm1
sub ecx, r8d
add r9d, ecx
test ax, ax
jne 0x1400f2d87
mov eax, r9d
ret
Function at 0x1400f2dd0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
push rdi
add rsp, 0x464e58b9
sub rsp, 0x464e5959
xor ebx, ebx
mov rdi, rcx
mov qword [rax + 8], rbx
cmp qword [rcx + 0x2f8], rbx
je 0x1400f2e6a
mov edx, dword [rcx + 0x2ec]
mov ecx, 0x43021bf9
add ecx, 0x2098e343
add ecx, 0x19f056e6
mov eax, dword [rdi + 0x2e8]
xor edx, ecx
xor eax, ecx
lea rcx, [rbx - 1]
imul edx, eax
lea eax, [rbx + 4]
movsxd rsi, edx
mul rsi
cmovo rax, rcx
mov rcx, rax
call fcn.140098350
test rsi, rsi
jle 0x1400f2e87
mov rcx, qword [rdi + 0x2f8]
mov edx, dword [rcx + rbx*4]
xor edx, 0x38171a3c
mov dword [rax + rbx*4], edx
inc rbx
cmp rbx, rsi
jl 0x1400f2e46
jmp 0x1400f2e87
lea rdx, [rsp + 0xb0]
call fcn.1400f2fdc
test al, al
je 0x1400f2ed2
mov rax, qword [rsp + 0xb0]
lea rcx, [0x14000bb80]
mov qword [rsp + 0x98], 0x387b9ed9
sub qword [rsp + 0x98], 0x35170240
sub qword [rsp + 0x98], 0x3649c81
mov qword [rsp + 0x20], rcx
lea rdx, [rsp + 0x20]
mov rcx, qword [rdi + 0x318]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x30], rax
call fcn.1400f1ef4
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x1400f78b0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x60
mov rbp, qword [rcx + 0xaf0]
lea rax, [rsp + 0x28]
mov rbx, qword [rcx + 0xab8]
xorps xmm0, xmm0
mov r14, rdx
mov qword [rsp + 0x20], rax
mov rsi, rcx
lea rcx, [rsp + 0x20]
lea rdx, [rbp + 1]
movups xmmword [rsp + 0x28], xmm0
movups xmmword [rsp + 0x38], xmm0
movups xmmword [rsp + 0x48], xmm0
call fcn.140017a38
mov edi, 0xf0417c6
add edi, 0x38249dd8
add edi, 0x11b595c4
mov r9, rax
mov ecx, edi
mov r15d, 0x3307707
add r15d, 0x79702645
sub r15d, 0x7ca09c4d
test rbp, rbp
je 0x1400f796f
mov rdx, rax
sub rbx, rax
mov r8, rbp
nop dword [rax]
nop dword [rax + rax]
movzx eax, cx
lea rdx, [rdx + 2]
and ax, r15w
ror ecx, 8
xor ax, word [rbx + rdx - 2]
mov word [rdx - 2], ax
sub r8, 1
jne 0x1400f794e
xor ebx, ebx
mov word [r9 + rbp*2], bx
cmp word [rsi + 0xb40], bx
je 0x1400f79ba
mov edx, ebx
cmp qword [rsi + 0xaf0], rbx
jbe 0x1400f79ba
nop dword [rax + rax]
mov rax, qword [rsp + 0x20]
movzx ecx, word [rsi + 0xb40]
mov word [rax + rdx*2], cx
inc rdx
cmp rdx, qword [rsi + 0xaf0]
jb 0x1400f799a
mov rsi, qword [rsp + 0x20]
lea rax, [r14 + 8]
xorps xmm0, xmm0
mov qword [r14], rax
movups xmmword [rax], xmm0
nop
movabs rdx, 0xffffffff0f17eff0
xor rdx, 0x516edc5b
sub rdx, 0x49e38341
add rdx, 0x7fffffff
add rdx, 0x6b6a4f96
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
nop dword [rax]
inc rdx
cmp word [rsi + rdx*2], bx
jne 0x1400f79fe
mov rcx, r14
mov qword [r14 + 0x38], rdx
call fcn.140017a38
cmp qword [r14 + 0x38], rbx
jbe 0x1400f7a4a
sub rsi, rax
nop
movzx ecx, di
lea rax, [rax + 2]
and cx, r15w
ror edi, 8
xor cx, word [rsi + rax - 2]
inc rbx
mov word [rax - 2], cx
cmp rbx, qword [r14 + 0x38]
jb 0x1400f7a26
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x28]
cmp rcx, rax
jne 0x1400f7a7c
lea rdi, [rsp + 0x28]
xor eax, eax
mov ecx, 0x5fff65e6
sub ecx, 0x2d560471
sub ecx, 0x32a96145
rep stosb byte [rdi], al
jmp 0x1400f7a81
call fcn.1400984b0
lea r11, [rsp + 0x60]
mov rax, r14
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rdi
ret
Function at 0x1401051f0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x20
mov r8, qword [rcx + 0x648]
xor esi, esi
mov rbx, rcx
test r8, r8
je 0x140105220
mov rdi, qword [rcx + 0x640]
jmp 0x140105227
mov rdi, rsi
nop dword [rax]
test r8, r8
je 0x140105240
mov rax, qword [rbx + 0x640]
lea rcx, [rax + r8*8]
jmp 0x140105243
mov rcx, rsi
cmp rdi, rcx
je 0x140105467
mov rax, qword [rdi]
cmp qword [rax + 0x28], rdx
je 0x140105262
add rdi, 8
jmp 0x140105227
test r8, r8
je 0x14010532b
cmp rdi, qword [rbx + 0x640]
jb 0x14010532b
mov rax, qword [rbx + 0x640]
lea rcx, [rax + r8*8]
cmp rdi, rcx
jae 0x14010532b
mov rdx, rdi
nop word [rax + rax]
mov rcx, qword [rbx + 0x648]
test rcx, rcx
je 0x1401052b9
mov rax, qword [rbx + 0x640]
lea rax, [rax + rcx*8]
jmp 0x1401052bc
mov rax, rsi
add rax, 0xfffffffffffffff8
cmp rdx, rax
jae 0x1401052e4
mov rax, qword [rdx + 8]
mov qword [rdx], rax
nop
add rdx, 0x435189db
sub rdx, 0x435189d3
jmp 0x140105299
test rcx, rcx
je 0x14010532b
lea rax, [rcx - 1]
mov qword [rbx + 0x648], rax
test rax, rax
jne 0x14010532b
mov rcx, qword [rbx + 0x640]
test rcx, rcx
je 0x14010531d
call fcn.1400984b0
mov qword [rbx + 0x640], rsi
mov qword [rbx + 0x650], rsi
mov qword [rbx + 0x648], rsi
mov rcx, qword [rdi]
test rcx, rcx
je 0x14010534d
mov rax, qword [rcx]
mov edx, 0x4f5b39f1
xor edx, 0x4629d004
sub edx, 0x972e9f4
call qword [rax]
cmp qword [rbx + 0x648], rsi
je 0x140105467
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400ef9d0
mov rcx, qword [rsp + 0x30]
mov r10d, 0x4b3fe1d9
sub r10d, 0x41b30a34
add r10d, 0x7016f111
xor r10d, 0x79a3c816
mov r8d, dword [rsp + 0x34]
mov eax, ecx
mov r9, qword [rbx + 0x648]
sub eax, r8d
cdq
idiv dword [rbx + 0x648]
cmp eax, r10d
cmovl r10d, eax
test r9, r9
je 0x14010541f
mov rdx, qword [rbx + 0x640]
lea r11, [rdx + r9*8]
cmp rdx, r11
je 0x14010541f
mov r9d, r10d
xor r9d, 0x7d8b5622
xor r8d, 0x7d8b5622
nop dword [rax]
mov rcx, qword [rdx]
mov eax, esi
xor eax, 0x7d8b5622
add esi, r10d
sub rdx, 0xfffffffffffffff8
mov dword [rcx + 0x30], eax
mov dword [rcx + 0x34], 0x5647fb43
xor dword [rcx + 0x34], 0x86a994
xor dword [rcx + 0x34], 0x2b4a04f5
mov dword [rcx + 0x38], r9d
mov dword [rcx + 0x3c], r8d
cmp rdx, r11
jne 0x1401053db
mov rcx, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x34]
mov rax, qword [rbx + 0x660]
test rax, rax
je 0x14010545f
sub ecx, r8d
mov dword [rax + 0x14], 0x566a9e3c
add dword [rax + 0x14], 0x1da2a7b4
xor dword [rax + 0x14], 0x98613d2
xor ecx, 0x7d8b5622
xor r8d, 0x7d8b5622
mov dword [rax + 0x10], ecx
mov dword [rax + 0x18], r8d
mov dword [rax + 0x1c], r8d
mov rcx, rbx
call fcn.1400ef110
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
sub rsp, 0xffffffffffffffe0
pop rdi
ret
Function at 0x140105480
Capabilities:
Encode data using xor

Disassembly:
push rbx
neg rsp
sub rsp, 0xffffffffffffffe0
neg rsp
mov rax, qword [rcx]
mov rbx, rcx
call qword [rax + 0x78]
mov rdx, qword [rbx + 0x648]
mov rcx, rax
mov qword [rsp + 0x30], rax
call fcn.1401017f0
lea rcx, [rbx + 0x640]
lea rdx, [rsp + 0x30]
call fcn.1401050b0
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp 0x140105480
push rbx
nop
sub rsp, 0x762ab5e9
add rsp, 0x762ab5c9
cmp qword [rcx + 0x648], 0
mov rbx, rcx
je 0x1401055cb
lea rdx, [rsp + 0x30]
call fcn.1400ef9d0
mov r8, qword [rsp + 0x30]
mov r11d, 0xa5e5bb3
xor r11d, 0x720371f5
add r11d, 0x2ede16f
xor r11d, 0x7b4b0b15
mov r9d, dword [rsp + 0x34]
mov eax, r8d
sub eax, r9d
cdq
idiv dword [rbx + 0x648]
mov rdx, qword [rbx + 0x648]
cmp eax, r11d
cmovl r11d, eax
xor r10d, r10d
test rdx, rdx
je 0x14010557a
mov rax, qword [rbx + 0x640]
mov qword [rsp + 0x38], rdi
lea rdi, [rax + rdx*8]
cmp rax, rdi
je 0x140105575
mov r8d, r11d
xor r8d, 0x7d8b5622
xor r9d, 0x7d8b5622
nop word [rax + rax]
mov rdx, qword [rax]
mov ecx, r10d
xor ecx, 0x7d8b5622
add r10d, r11d
add rax, 8
mov dword [rdx + 0x30], ecx
mov dword [rdx + 0x34], 0x386421f7
xor dword [rdx + 0x34], 0x4b514907
xor dword [rdx + 0x34], 0x77c6be23
xor dword [rdx + 0x34], 0x797880f1
mov dword [rdx + 0x38], r8d
mov dword [rdx + 0x3c], r9d
cmp rax, rdi
jne 0x140105528
mov r8, qword [rsp + 0x30]
mov r9d, dword [rsp + 0x34]
mov rdi, qword [rsp + 0x38]
mov rax, qword [rbx + 0x660]
test rax, rax
je 0x1401055c3
sub r8d, r9d
mov dword [rax + 0x14], 0x5b2bfb9c
sub dword [rax + 0x14], 0x37f4418
xor dword [rax + 0x14], 0x4702363
add dword [rax + 0x14], 0x29aec13b
xor r8d, 0x7d8b5622
xor r9d, 0x7d8b5622
mov dword [rax + 0x10], r8d
mov dword [rax + 0x18], r9d
mov dword [rax + 0x1c], r9d
mov rcx, rbx
call fcn.1400ef110
nop
add rsp, 0x24fc5b66
sub rsp, 0x24fc5b46
pop rbx
ret