joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400db584
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov dword [rsp - 0x14], edi
nop
sub rsp, 8
mov qword [rsp], rdi
neg rsp
sub rsp, 0xfffffffffffffec0
neg rsp
mov rbx, r8
xchg r11, r11
xchg rcx, rdi
mov rcx, rdi
xchg rdi, rcx
mov r8d, 0x29498232
xor r8d, 0x2a7f68b1
add r8d, 0x353214da
sub r8d, 0x3868fe5d
lea rcx, [rsp + 0x40]
mov dword [rsp - 0x28], edi
xor edx, edx
call fcn.140099ec0
mov rax, qword [rdi + 0x238]
lea r8, [rsp + 0x40]
xchg r10, r10
mov edx, dword [rbx + 0x10]
movabs rcx, 0x71bd5fc2295573d5
add rcx, 0x2da4e2dc
add rcx, 0x6692bf2
xor rcx, 0x5e5e9bd5
add rcx, 0x5642cea8
xor rax, rcx
mov r9, r9
mov dword [rsp + 0x30], 0x22e5516f
sub dword [rsp + 0x30], 0x1efd61fb
xor dword [rsp + 0x30], 0x57cfb6f3
sub dword [rsp + 0x30], 0x3b949b93
sub dword [rsp + 0x30], 0x1893bdf2
rol rax, 0x14
rol rax, 2
rol rax, 1
movabs rcx, 0x454243b84706d5e4
add rcx, 0x3770c026
sub rcx, 0xe93ec47
add rcx, 0x42d762ce
xor rax, rcx
xor edi, edi
mov dword [rsp - 0x40], esp
ror rax, 0x35
ror rax, 7
movabs rcx, 0x51dce209532fac0b
xor rcx, 0x72b8f7f5
add rcx, 0x180689af
xor rcx, 0x5314c3f8
add rcx, 0x7fffffff
sub rcx, 0x508e1d39
add rax, rcx
mov dword [rsp + 0x28], edi
mov rbp, rbp
mov rcx, qword [rbx + 0x20]
mov r9d, 0x4d543d
add r9d, 0x1f87ed2c
xor r9d, 0x622e16e1
sub r9d, 0x7dfb5688
xchg rbp, rdi
mov qword [rsp + 0x20], rbp
xchg rbp, rdi
call rax
mov dword [rsp - 0x2c], 0x14f4142b
test eax, eax
jne 0x1400db78a
or eax, 0xffffffff
mov r9, r9
lea rbx, [rsp + 0x40]
mov dword [rsp + 0x150], eax
cmp byte [rsp + 0x40], dil
xchg r14, r14
je 0x1400db75d
xchg rdx, rbx
mov rbx, rdx
xchg rdx, rbx
lea rcx, [rsp + 0x150]
mov r8d, 0x2075c223
xor r8d, 0x321daaad
sub r8d, 0x116fbb12
sub r8d, 0xf8ad7b
inc rbx
mov dword [rsp - 0x20], edi
call fcn.14008efe0
cmp byte [rbx], dil
jne 0x1400db711
mov dword [rsp - 0x30], edx
mov eax, dword [rsp + 0x150]
not eax
cmp eax, 0xa2ca6717
je 0x1400db77b
mov dword [rsp - 0x2c], edi
cmp eax, 0xd7b7e7a8
sete al
jmp 0x1400db78c
mov al, 0x29
add al, 1
add al, 0x1a
add al, 0x2e
sub al, 0x71
jmp 0x1400db78c
xor al, al
xchg r9, rbx
mov r9, qword [rsp + 0x158]
xchg rbx, r9
neg rsp
add rsp, 0xfffffffffffffec0
neg rsp
nop
mov rdi, qword [rsp]
add rsp, 8
ret
Function at 0x1400dfd90
Capabilities:
Encrypt data using curve25519

Disassembly:
xchg rcx, rbx
mov qword [rsp + 8], rcx
xchg rbx, rcx
nop
sub rsp, 8
mov qword [rsp], rdi
neg rsp
sub rsp, 0xffffffffffffff40
neg rsp
xchg rsp, rax
mov rsp, r8
xchg rsp, rax
xchg rdx, rbx
mov rdx, rbx
xchg rdx, rbx
xchg rdx, rcx
mov r8, rcx
xchg rcx, rdx
xchg rdi, rcx
mov rcx, rdi
xchg rdi, rcx
mov edx, 0x292aff9c
xor edx, 0xecbae89
xor edx, 0x7cd12923
add edx, 0x24280686
sub edx, 0x7f587e9c
xchg rbx, rcx
mov rbx, rax
xchg rcx, rbx
call fcn.1400e05d0
movzx eax, byte [rbx + 0x1f]
lea rcx, [rsp + 0x20]
mov dword [rsp - 0x24], 0x517b4c9f
and byte [rbx], 0xf8
and al, 0x3f
or al, 0x40
xchg r11, rdx
mov r11, rbx
xchg r11, rdx
mov byte [rbx + 0x1f], al
mov dword [rsp - 0x20], 0x39124403
call fcn.1400e3bc0
lea rdx, [rsp + 0x20]
xchg rsi, rdi
mov rcx, rsi
xchg rdi, rsi
call fcn.1400e3af0
xchg r14, rbx
mov r14, qword [rsp + 0xd0]
xchg r14, rbx
neg rsp
add rsp, 0xffffffffffffff40
neg rsp
nop
mov rdi, qword [rsp]
add rsp, 8
ret
Function at 0x1400ef3b4
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xb0
mov r14, rdx
movabs rdx, 0x55056d9c1587cc03
xor rdx, 0x37274e14
add rdx, 0x1b22825b
cmp qword [rcx + 0x538], rdx
jne 0x1400ef6a3
xorps xmm0, xmm0
mov rax, r14
xor rax, rdx
mov qword [rcx + 0x538], rax
lea rax, [rbp - 0x41]
mov rsi, qword [rcx + 0x578]
mov rbx, qword [rcx + 0x540]
lea rcx, [rbp - 0x49]
mov qword [rbp - 0x49], rax
movups xmmword [rbp - 0x41], xmm0
lea rdx, [rsi + 1]
movups xmmword [rbp - 0x31], xmm0
movups xmmword [rbp - 0x21], xmm0
call fcn.140017bbc
xor r15d, r15d
mov edx, 0x2922a3c7
add edx, 0x378c26c4
sub edx, 0x24faafe7
test rsi, rsi
je 0x1400ef49a
mov rdi, rax
sub rbx, rax
mov r8, rsi
movzx ecx, dx
mov r9d, 0x574dfc37
sub r9d, 0x15d0dd2a
xor r9d, 0x605d4f45
sub r9d, 0x21204f49
and cx, r9w
ror edx, 8
xor cx, word [rbx + rdi]
mov word [rdi], cx
lea rdi, [rdi + 2]
sub r8, 1
jne 0x1400ef460
mov word [rax + rsi*2], r15w
movabs rcx, 0xdd19e601568fa5f1
sub rcx, 0x4680be5b
add rcx, 0x7fffffff
add rcx, 0x5e3385d7
lea rax, [0x1400ef6d8]
mov qword [rbp + 7], r15
mov qword [rbp - 1], rax
mov edx, 0x7ec82ff6
sub edx, 0x735edeba
sub edx, 0xb68d23c
mov rax, qword [str._bY1i]
ror rax, 0x3c
add rax, rcx
mov qword [rbp + 0x17], r15
movabs rcx, 0x6d647ba4ce9c2d4
xor rcx, 0x45e64f3d
xor rcx, 0x77eb0c22
sub rcx, 0x717ddea9
mov qword [rbp + 0x2f], r15
xor rax, rcx
mov qword [rbp + 0x3f], r15
movabs rcx, 0x26a10c624cab9de2
add rcx, 0x2eee2459
sub rcx, 0x6bbe720c
add rcx, 0x7fffffff
add rcx, 0x51d89820
mov dword [rbp - 9], 0x529a176a
add dword [rbp - 9], 0xd2dd844
add dword [rbp - 9], 0x199284fb
sub dword [rbp - 9], 0x795a7459
sub rax, rcx
mov dword [rbp - 5], 0x5c871062
sub dword [rbp - 5], 0x39ae5ed9
sub dword [rbp - 5], 0x22d8b186
movabs rcx, 0xd109560f3fc65420
xor rcx, 0x295a1dd9
xor rcx, 0x43a3028d
add rcx, 0x7fffffff
sub rcx, 0x2ac1d4ea
mov qword [rbp + 0xf], r14
xor rax, rcx
xor ecx, ecx
call rax
mov qword [rbp + 0x1f], rax
movabs rcx, 0xe71490493653560e
xor rcx, 0x47dd095f
add rcx, 0x6f07e771
mov rax, qword [0x140143730]
rol rax, 0x31
not rax
rol rax, 1
add rax, rcx
xor ecx, ecx
call rax
mov qword [rbp + 0x27], rax
movabs rcx, 0xbece7733328d285
add rcx, 0x3392a0a3
xor rcx, 0x4c076588
add rcx, 0x1ab0a868
mov rax, qword [rbp - 0x49]
mov qword [rbp + 0x37], rax
mov rax, qword [0x140143020]
xor rax, rcx
movabs rcx, 0xf0fc79327d52c56a
sub rcx, 0x69b89935
add rcx, 0x18fbcc0c
ror rax, 0x2e
xor rax, rcx
movabs rcx, 0x642edcac0ce549c2
add rcx, 0x58182e80
sub rcx, 0x2a617388
add rcx, 0x27b51256
add rax, rcx
movabs rcx, 0x455fa7170c8a8087
xor rcx, 0x56137cef
add rcx, 0x4562d071
xor rax, rcx
lea rcx, [rbp - 9]
call rax
mov rcx, qword [rbp - 0x49]
test ax, ax
lea rax, [rbp - 0x41]
setne bl
cmp rcx, rax
jne 0x1400ef697
xor eax, eax
lea rdi, [rbp - 0x41]
lea ecx, [rax + 0x30]
rep stosb byte [rdi], al
jmp 0x1400ef69c
call fcn.1400999a0
mov al, bl
jmp 0x1400ef6a5
xor al, al
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
Function at 0x1400f276c
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r14
push r15
nop
add rsp, 0x5d002d28
sub rsp, 0x5d002d58
mov dword [rcx + 8], 0x52156793
xor dword [rcx + 8], 0x4507574a
sub dword [rcx + 8], 0x171230d8
lea r14, [rcx + 0x298]
xorps xmm0, xmm0
lea rax, [0x14000ba78]
mov qword [rcx], rax
mov rbp, rdx
lea rax, [r14 + 8]
mov rbx, rcx
mov qword [r14], rax
xor edi, edi
mov qword [rcx + 0x290], rdi
mov rsi, r8
movups xmmword [rax], xmm0
mov rcx, r14
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
mov rdx, qword [r8 + 0x38]
mov qword [r14 + 0x38], rdx
call fcn.140017bbc
mov r8d, edi
cmp qword [r14 + 0x38], rdi
jbe 0x1400f2813
mov rcx, qword [rsi]
movzx edx, word [rcx + r8*2]
mov word [rax + r8*2], dx
inc r8
cmp r8, qword [r14 + 0x38]
jb 0x1400f27f9
mov ecx, dword [rsi + 0x40]
mov edx, 0x78292c9c
sub edx, 0x43e783b5
xor edx, 0x5cd58abd
mov qword [rbx + 0x2e0], rdi
bts ecx, 0xe
mov dword [rbx + 0x2d8], ecx
mov r15d, 0xc0f7c68
xor r15d, 0x83f59ae
add r15d, 0x4c414b62
mov eax, dword [rsi + 0x54]
and ecx, 0x2000
xor eax, edx
mov dword [rbx + 0x2e8], eax
mov eax, dword [rsi + 0x58]
xor eax, edx
mov dword [rbx + 0x2ec], eax
mov eax, dword [rsi + 0x44]
xor eax, edx
mov dword [rbx + 0x2f0], eax
mov eax, dword [rsi + 0x48]
xor eax, edx
mov dword [rbx + 0x2f4], eax
mov rax, qword [rsi + 0x60]
mov qword [rbx + 0x2f8], rax
mov eax, dword [rsi + 0x4c]
xor eax, r15d
mov dword [rbx + 0x308], eax
mov eax, dword [rsi + 0x50]
xor eax, edx
mov byte [rbx + 0x310], dil
neg ecx
mov dword [rbx + 0x30c], eax
pushf
mov edx, 0x400f742b
xor edx, 0x71150e54
xor edx, 0x399e157a
xor edx, 0x8846f15
popf
mov qword [rbx + 0x318], rbp
sbb r14, r14
and r14, 0xffffffffffff0100
sub r14, 0x63322af3
add r14, 0x63332af2
mov rcx, r14
shl rcx, 4
call fcn.140099850
mov rcx, rax
mov rdx, r14
movaps xmm0, xmmword [0x140148620]
movups xmmword [rcx], xmm0
lea rcx, [rcx + 0x10]
sub rdx, 1
jne 0x1400f28f5
mov qword [rbx + 0x300], rax
mov rdx, rdi
mov rax, qword [rsi + 0x68]
inc rdi
mov ecx, dword [rax + rdx]
xor ecx, r15d
mov dword [rsp + 0x50], ecx
movss xmm0, dword [rsp + 0x50]
mov rax, qword [rsi + 0x68]
movss dword [rsp + 0x20], xmm0
mov ecx, dword [rax + rdx + 4]
xor ecx, r15d
mov dword [rsp + 0x50], ecx
movss xmm0, dword [rsp + 0x50]
mov rax, qword [rsi + 0x68]
movss dword [rsp + 0x24], xmm0
mov ecx, dword [rax + rdx + 8]
xor ecx, r15d
mov dword [rsp + 0x50], ecx
movss xmm0, dword [rsp + 0x50]
mov rax, qword [rsi + 0x68]
movss dword [rsp + 0x28], xmm0
mov ecx, dword [rax + rdx + 0xc]
xor ecx, r15d
mov dword [rsp + 0x50], ecx
movss xmm0, dword [rsp + 0x50]
mov rax, qword [rbx + 0x300]
movss dword [rsp + 0x2c], xmm0
movups xmm1, xmmword [rsp + 0x20]
xorps xmm1, xmmword [0x140148620]
movups xmmword [rdx + rax], xmm1
lea rdx, [rdx + 0x10]
cmp rdi, r14
jl 0x1400f2917
lea rcx, [rbp + 0xa0]
mov qword [rsp + 0x50], rbx
lea rdx, [rsp + 0x50]
call fcn.1400ec3d4
mov rbp, qword [rsp + 0x60]
mov rax, rbx
mov rbx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x68]
sub rsp, 0xffffffffffffffd0
pop r15
pop r14
pop rdi
ret
Function at 0x1400f4234
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x3db1bf92
add rsp, 0x3db1bee2
mov rsi, rcx
lea rdx, [rcx + 0x298]
lea rcx, [rsp + 0x20]
call fcn.140074780
or ebx, 0xffffffff
mov dword [rsp + 0xc0], ebx
mov rdi, qword [rax]
cmp byte [rdi], 0
je 0x1400f42b5
mov rdx, rdi
lea rcx, [rsp + 0xc0]
mov r8d, 0x121a32c1
add r8d, 0x26d8cec9
xor r8d, 0xb415c9a
sub r8d, 0x33b25d0f
inc rdi
call fcn.14008efe0
cmp byte [rdi], 0
jne 0x1400f4277
mov ebx, dword [rsp + 0xc0]
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x28]
not ebx
cmp rcx, rax
jne 0x1400f42ef
lea rdi, [rsp + 0x28]
xor eax, eax
mov ecx, 0xcbbdd9d
add ecx, 0x604d5bbc
xor ecx, 0x7e5cb077
sub ecx, 0x135588ae
rep stosb byte [rdi], al
jmp 0x1400f42f4
call fcn.1400999a0
mov eax, dword [rsi + 0x2f0]
lea r11, [rsp + 0xb0]
xor eax, 0x225a
shl eax, 0x10
or eax, dword [rsi + 0x2d8]
mov rsi, qword [r11 + 0x20]
xor eax, ebx
mov rbx, qword [r11 + 0x18]
xor eax, 2
mov rsp, r11
pop rdi
ret

Function at 0x1400f444c
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
mov r10d, 0x46d90594
sub r10d, 0xd79cd9a
xor r10d, 0x7134524e
add r10d, 0x2028bca6
mov r8d, dword [rcx + 0x2f4]
xor eax, r10d
xor r8d, r10d
xor r9d, r9d
add r8d, r8d
movd xmm2, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x50717128
mov dword [rsp + 8], eax
movss xmm3, dword [rsp + 8]
mov al, byte [rdx]
cvtdq2ps xmm2, xmm2
test al, al
je 0x1400f44e9
mov r10, qword [rcx + 0x300]
movzx eax, al
inc rdx
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
xorps xmm0, xmmword [0x140148620]
mov al, byte [rdx]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm2
addss xmm1, xmm3
cvttss2si ecx, xmm1
sub ecx, r8d
add r9d, ecx
test al, al
jne 0x1400f44ad
mov eax, r9d
ret

Function at 0x1400f45e0
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
mov r10d, 0x236511fd
add r10d, 0x51d181ed
sub r10d, 0x16db96ed
add r10d, 0xa39255d
mov r8d, dword [rcx + 0x2f4]
xor eax, r10d
xor r8d, r10d
xor r11d, r11d
add r8d, r8d
mov r9d, r11d
movd xmm2, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x50717128
mov dword [rsp + 8], eax
movss xmm3, dword [rsp + 8]
movzx eax, word [rdx]
cvtdq2ps xmm2, xmm2
test ax, ax
je 0x1400f4685
mov r10, qword [rcx + 0x300]
movzx eax, ax
sub rdx, 0xfffffffffffffffe
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
xorps xmm0, xmmword [0x140148620]
movzx eax, word [rdx]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm2
addss xmm1, xmm3
cvttss2si ecx, xmm1
sub ecx, r8d
add r9d, ecx
test ax, ax
jne 0x1400f4646
mov eax, r9d
ret
Function at 0x1400f468c
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
push rdi
add rsp, 0xffffffffffffff60
xor ebx, ebx
mov rdi, rcx
mov qword [rax + 8], rbx
cmp qword [rcx + 0x2f8], rbx
je 0x1400f4725
mov edx, dword [rcx + 0x2ec]
mov ecx, 0x318a6eff
sub ecx, 0x29142936
xor ecx, 0x4db741db
add ecx, 0x22d31e48
mov eax, dword [rdi + 0x2e8]
xor edx, ecx
xor eax, ecx
lea rcx, [rbx - 1]
imul edx, eax
lea eax, [rbx + 4]
movsxd rsi, edx
mul rsi
cmovo rax, rcx
mov rcx, rax
call fcn.1400997e0
test rsi, rsi
jle 0x1400f4742
mov rcx, qword [rdi + 0x2f8]
mov edx, dword [rcx + rbx*4]
xor edx, 0x2d12297d
mov dword [rax + rbx*4], edx
inc rbx
cmp rbx, rsi
jl 0x1400f4701
jmp 0x1400f4742
lea rdx, [rsp + 0xb0]
call fcn.1400f4898
test al, al
je 0x1400f478d
mov rax, qword [rsp + 0xb0]
lea rcx, [0x14000bb80]
mov qword [rsp + 0x98], 0x57347023
xor qword [rsp + 0x98], 0x66bbbf81
sub qword [rsp + 0x98], 0x318fcf8a
mov qword [rsp + 0x20], rcx
lea rdx, [rsp + 0x20]
mov rcx, qword [rdi + 0x318]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x30], rax
call fcn.1400f3834
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x1400f9370
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
add rsp, 0xffffffffffffffa0
mov rbp, qword [rcx + 0xaf0]
lea rax, [rsp + 0x28]
mov rbx, qword [rcx + 0xab8]
xorps xmm0, xmm0
mov r14, rdx
mov qword [rsp + 0x20], rax
mov rsi, rcx
lea rcx, [rsp + 0x20]
lea rdx, [rbp + 1]
movups xmmword [rsp + 0x28], xmm0
movups xmmword [rsp + 0x38], xmm0
movups xmmword [rsp + 0x48], xmm0
call fcn.140017bbc
mov edi, 0x64d7d2d3
sub edi, 0x403fc114
add edi, 0x171c08e5
mov r9, rax
mov ecx, edi
mov r15d, 0x1e545229
sub r15d, 0x13cb9525
xor r15d, 0xa88bdfb
test rbp, rbp
je 0x1400f942f
mov rdx, rax
sub rbx, rax
mov r8, rbp
nop dword [rax]
nop dword [rax + rax]
movzx eax, cx
lea rdx, [rdx + 2]
and ax, r15w
ror ecx, 8
xor ax, word [rbx + rdx - 2]
mov word [rdx - 2], ax
sub r8, 1
jne 0x1400f940e
xor ebx, ebx
mov word [r9 + rbp*2], bx
cmp word [rsi + 0xb40], bx
je 0x1400f947a
mov edx, ebx
cmp qword [rsi + 0xaf0], rbx
jbe 0x1400f947a
nop dword [rax + rax]
mov rax, qword [rsp + 0x20]
movzx ecx, word [rsi + 0xb40]
mov word [rax + rdx*2], cx
inc rdx
cmp rdx, qword [rsi + 0xaf0]
jb 0x1400f945a
mov rsi, qword [rsp + 0x20]
lea rax, [r14 + 8]
xorps xmm0, xmm0
mov qword [r14], rax
movups xmmword [rax], xmm0
nop
movabs rdx, 0xffffffff226dc028
add rdx, 0x2a4848f1
add rdx, 0x60d72ca
add rdx, 0x7fffffff
add rdx, 0x2d3c841d
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
nop dword [rax]
inc rdx
cmp word [rsi + rdx*2], bx
jne 0x1400f94be
mov rcx, r14
mov qword [r14 + 0x38], rdx
call fcn.140017bbc
cmp qword [r14 + 0x38], rbx
jbe 0x1400f950a
sub rsi, rax
nop
movzx ecx, di
lea rax, [rax + 2]
and cx, r15w
ror edi, 8
xor cx, word [rsi + rax - 2]
inc rbx
mov word [rax - 2], cx
cmp rbx, qword [r14 + 0x38]
jb 0x1400f94e6
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x28]
cmp rcx, rax
jne 0x1400f953c
lea rdi, [rsp + 0x28]
xor eax, eax
mov ecx, 0x20abbe8f
xor ecx, 0x785c906a
xor ecx, 0x58f72ed5
rep stosb byte [rdi], al
jmp 0x1400f9541
call fcn.1400999a0
lea r11, [rsp + 0x60]
mov rax, r14
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rdi
ret
Function at 0x140106c50
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
neg rsp
sub rsp, 0xffffffffffffffe0
neg rsp
mov r8, qword [rcx + 0x648]
xor esi, esi
mov rbx, rcx
test r8, r8
je 0x140106c86
mov rdi, qword [rcx + 0x640]
jmp 0x140106c8d
mov rdi, rsi
nop dword [rax]
test r8, r8
je 0x140106ca6
mov rax, qword [rbx + 0x640]
lea rcx, [rax + r8*8]
jmp 0x140106ca9
mov rcx, rsi
cmp rdi, rcx
je 0x140106ed1
mov rax, qword [rdi]
cmp qword [rax + 0x28], rdx
je 0x140106cce
neg rdi
add rdi, 0xfffffffffffffff8
neg rdi
jmp 0x140106c8d
test r8, r8
je 0x140106d95
cmp rdi, qword [rbx + 0x640]
jb 0x140106d95
mov rax, qword [rbx + 0x640]
lea rcx, [rax + r8*8]
cmp rdi, rcx
jae 0x140106d95
mov rdx, rdi
nop word [rax + rax]
mov rcx, qword [rbx + 0x648]
test rcx, rcx
je 0x140106d25
mov rax, qword [rbx + 0x640]
lea rax, [rax + rcx*8]
jmp 0x140106d28
mov rax, rsi
nop
add rax, 0xffffffffcada9ac1
sub rax, 0xffffffffcada9ac9
cmp rdx, rax
jae 0x140106d4e
mov rax, qword [rdx + 8]
mov qword [rdx], rax
sub rdx, 0xfffffffffffffff8
jmp 0x140106d05
test rcx, rcx
je 0x140106d95
lea rax, [rcx - 1]
mov qword [rbx + 0x648], rax
test rax, rax
jne 0x140106d95
mov rcx, qword [rbx + 0x640]
test rcx, rcx
je 0x140106d87
call fcn.1400999a0
mov qword [rbx + 0x640], rsi
mov qword [rbx + 0x650], rsi
mov qword [rbx + 0x648], rsi
mov rcx, qword [rdi]
test rcx, rcx
je 0x140106db7
mov rax, qword [rcx]
mov edx, 0x21776638
xor edx, 0x402a66d9
sub edx, 0x615d00e0
call qword [rax]
cmp qword [rbx + 0x648], rsi
je 0x140106ed1
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400f1350
mov rcx, qword [rsp + 0x30]
mov r10d, 0x86fb1dd
xor r10d, 0x28bce654
sub r10d, 0x20d356e9
mov r8d, dword [rsp + 0x34]
mov eax, ecx
mov r9, qword [rbx + 0x648]
sub eax, r8d
cdq
idiv dword [rbx + 0x648]
cmp eax, r10d
cmovl r10d, eax
test r9, r9
je 0x140106e89
mov rdx, qword [rbx + 0x640]
lea r11, [rdx + r9*8]
cmp rdx, r11
je 0x140106e89
mov r9d, r10d
xor r9d, 0x6894225a
xor r8d, 0x6894225a
nop dword [rax]
mov rcx, qword [rdx]
mov eax, esi
xor eax, 0x6894225a
add esi, r10d
sub rdx, 0xfffffffffffffff8
mov dword [rcx + 0x30], eax
mov dword [rcx + 0x34], 0x2eebbe77
sub dword [rcx + 0x34], 0xa7b50b8
sub dword [rcx + 0x34], 0xe39e6ec
add dword [rcx + 0x34], 0x525d9b87
mov dword [rcx + 0x38], r9d
mov dword [rcx + 0x3c], r8d
cmp rdx, r11
jne 0x140106e3e
mov rcx, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x34]
mov rax, qword [rbx + 0x660]
test rax, rax
je 0x140106ec9
sub ecx, r8d
mov dword [rax + 0x14], 0x5d58b132
xor dword [rax + 0x14], 0x26beaa79
xor dword [rax + 0x14], 0x13723911
xor ecx, 0x6894225a
xor r8d, 0x6894225a
mov dword [rax + 0x10], ecx
mov dword [rax + 0x18], r8d
mov dword [rax + 0x1c], r8d
mov rcx, rbx
call fcn.1400f0a10
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
nop
sub rsp, 0x43dfcd04
add rsp, 0x43dfcd24
pop rdi
ret
Function at 0x140106fa9
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x20
mov rax, qword [rcx]
mov rbx, rcx
call qword [rax + 0x78]
mov rdx, qword [rbx + 0x648]
mov rcx, rax
mov qword [rsp + 0x30], rax
call fcn.140103290
lea rcx, [rbx + 0x640]
lea rdx, [rsp + 0x30]
call fcn.140106b20
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp 0x140106ef0
push rbx
neg rsp
sub rsp, 0xffffffffffffffe0
neg rsp
cmp qword [rcx + 0x648], 0
mov rbx, rcx
je 0x140107036
lea rdx, [rsp + 0x30]
call fcn.1400f1350
mov r8, qword [rsp + 0x30]
mov r11d, 0x71da3349
sub r11d, 0x1e75124d
sub r11d, 0x2d27de93
sub r11d, 0x263d41c9
mov r9d, dword [rsp + 0x34]
mov eax, r8d
sub eax, r9d
cdq
idiv dword [rbx + 0x648]
mov rdx, qword [rbx + 0x648]
cmp eax, r11d
cmovl r11d, eax
xor r10d, r10d
test rdx, rdx
je 0x140106fe5
mov rax, qword [rbx + 0x640]
mov qword [rsp + 0x38], rdi
lea rdi, [rax + rdx*8]
cmp rax, rdi
je 0x140106fe0
mov r8d, r11d
xor r8d, 0x6894225a
xor r9d, 0x6894225a
nop word [rax + rax]
mov rdx, qword [rax]
mov ecx, r10d
xor ecx, 0x6894225a
add r10d, r11d
sub rax, 0xfffffffffffffff8
mov dword [rdx + 0x30], ecx
mov dword [rdx + 0x34], 0x67147046
sub dword [rdx + 0x34], 0x2257f725
xor dword [rdx + 0x34], 0x172eac58
add dword [rdx + 0x34], 0x15014ce1
mov dword [rdx + 0x38], r8d
mov dword [rdx + 0x3c], r9d
cmp rax, rdi
jne 0x140106f93
mov r8, qword [rsp + 0x30]
mov r9d, dword [rsp + 0x34]
mov rdi, qword [rsp + 0x38]
mov rax, qword [rbx + 0x660]
test rax, rax
je 0x14010702e
sub r8d, r9d
mov dword [rax + 0x14], 0x1901bc
add dword [rax + 0x14], 0x1256f922
add dword [rax + 0x14], 0x6b71949a
sub dword [rax + 0x14], 0x154d6d1e
xor r8d, 0x6894225a
xor r9d, 0x6894225a
mov dword [rax + 0x10], r8d
mov dword [rax + 0x18], r9d
mov dword [rax + 0x1c], r9d
mov rcx, rbx
call fcn.1400f0a10
neg rsp
add rsp, 0xffffffffffffffe0
neg rsp
pop rbx
ret
Function at 0x14011ad5c
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov dword [rsp - 0x34], 0x1993aac1
xchg rdi, rdx
mov qword [rsp + 0x20], rdx
xchg rdx, rdi
push rbp
mov rdi, rdi
xchg rsp, r9
mov rbp, r9
xchg rsp, r9
neg rsp
sub rsp, 0xffffffffffffff80
neg rsp
xor esi, esi
mov dword [rbp - 0x50], 0x336ea60f
sub dword [rbp - 0x50], 0x2f4e4683
add dword [rbp - 0x50], 0x567c3c4c
sub dword [rbp - 0x50], 0x5a549ae4
mov dword [rbp - 0x4c], 0x7bf3376f
sub dword [rbp - 0x4c], 0x577bdfd8
add dword [rbp - 0x4c], 0x17c6c03
sub dword [rbp - 0x4c], 0x257bc29f
mov dword [rbp - 0x48], 0xde803fb
add dword [rbp - 0x48], 0x1293b851
add dword [rbp - 0x48], 0x3a39efb5
sub dword [rbp - 0x48], 0x509f93fe
sub dword [rbp - 0x48], 0x9d41722
mov dword [rbp - 0x44], 0x6f88732
add dword [rbp - 0x44], 0x3256c310
add dword [rbp - 0x44], 0x38487730
xor dword [rbp - 0x44], 0x71e0c196
mov qword [rbp + 0x10], rsi
lea ebx, [rsi + 1]
xchg r13, rax
mov r13, qword [rbp + 0x10]
xchg r13, rax
xchg r12, rcx
mov r12, qword [rbp + 0x10]
xchg rcx, r12
mov rax, qword [rbp + 0x10]
and cl, 3
mov r10, r10
shl cl, 3
movzx edx, word [rbp + rax*2 - 0x50]
mov eax, 0x6a088217
sub eax, 0x5d76cb79
add eax, 0x169f291e
xor eax, 0x732bf503
sub eax, 0x1467101b
shr eax, cl
mov rdi, rdi
movzx ecx, al
mov rax, qword [rbp + 0x10]
xor cx, dx
mov word [rbp + rax*2 - 0x20], cx
mov dword [rsp - 0x34], 0xcb464a3
xchg r12, rax
mov r12, qword [rbp + 0x10]
xchg r12, rax
add rax, rbx
mov rdi, rdi
mov qword [rbp + 0x10], rax
xchg rdx, rax
mov rdx, qword [rbp + 0x10]
xchg rdx, rax
cmp rax, 8
mov r14, r14
jb 0x14011ae18
lea rax, [rbp - 0x20]
mov word [rbp - 0x10], si
xorps xmm0, xmm0
mov r13, r13
xchg r10, rax
mov qword [rbp - 0x38], r10
xchg r10, rax
lea r9, [rbp - 0x30]
mov dword [rbp - 0x40], 0x63e7968a
add dword [rbp - 0x40], 0x10a41391
xor dword [rbp - 0x40], 0x118da0cf
sub dword [rbp - 0x40], 0x17198461
sub dword [rbp - 0x40], 0x4dda8663
lea r8, [rbp - 0x40]
mov dword [rsp + 0x20], esi
mov dword [rsp - 0x40], edx
xor edx, edx
xor ecx, ecx
movups xmmword [rbp - 0x30], xmm0
call fcn.140135bf0
mov dword [rsp - 0x18], edx
xchg rbp, rax
mov rdi, rbp
xchg rbp, rax
test rax, rax
mov dword [rsp - 0x2c], ebx
je 0x14011af40
xchg rdi, rax
mov rcx, rdi
xchg rdi, rax
call fcn.140111190
mov dword [rsp - 0x38], 0x68076b77
test al, al
je 0x14011af40
lea rdx, [rbp - 0x40]
mov dword [rsp - 0x18], 0x4df4f837
xchg r9, rcx
mov r9, rdi
xchg rcx, r9
call fcn.14011007c
mov dword [rsp - 0x34], ecx
test al, al
jne 0x14011af43
mov bl, sil
xor eax, eax
xchg r14, r14
lea r11, [rsp + 0x80]
mov rsi, qword [r11 + 0x20]
lea rdi, [rbp - 0x20]
mov dword [rsp - 0x14], ebp
lea ecx, [rax + 8]
rep stosb byte [rdi], al
mov rdi, qword [r11 + 0x28]
mov dword [rsp - 0x34], 0x1e848225
mov al, bl
mov rbx, qword [r11 + 0x18]
xchg r8, r11
mov rsp, r8
xchg r11, r8
nop
mov rbp, qword [rsp]
add rsp, 8
ret
Function at 0x140135bf0
Capabilities:
Execute syscall

Disassembly:
xchg rcx, rbx
mov r10, rbx
xchg rcx, rbx
mov eax, dword [0x140144004]
cmp qword [0x140144018], 0
xchg r9, r9
jne 0x14008e3f0
syscall
ret
jmp 0x14008ef3b