joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140032b00
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
nop
sub rsp, 0x4fd122e4
add rsp, 0x4fd122a4
mov eax, dword [rcx + 0x2e8]
mov r14, rdx
mov edi, dword [rcx + 0x2f4]
xor eax, 0x270d2d02
movaps xmmword [rsp + 0x30], xmm6
mov rbp, rcx
movaps xmmword [rsp + 0x20], xmm7
xor ebx, ebx
xor edi, 0x270d2d02
xor edx, edx
movd xmm6, eax
add edi, edi
mov eax, dword [rcx + 0x308]
mov esi, ebx
xor eax, 0x5cf647fe
mov rcx, r14
mov dword [rsp + 0x60], eax
movss xmm7, dword [rsp + 0x60]
cvtdq2ps xmm6, xmm6
call fcn.14006c510
test ax, ax
je 0x140032bc9
nop word [rax + rax]
movzx ecx, ax
inc rsi
mov rax, qword [rbp + 0x300]
add rcx, rcx
mov rdx, rsi
movups xmm0, xmmword [rax + rcx*8]
xorps xmm0, xmmword [0x1404e3570]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm6
addss xmm1, xmm7
cvttss2si ecx, xmm1
sub ecx, edi
add ebx, ecx
mov rcx, r14
call fcn.14006c510
test ax, ax
jne 0x140032b7f
mov rbp, qword [rsp + 0x70]
mov eax, ebx
mov rbx, qword [rsp + 0x68]
movaps xmm6, xmmword [rsp + 0x30]
movaps xmm7, xmmword [rsp + 0x20]
neg rsp
add rsp, 0xffffffffffffffc0
neg rsp
pop r14
pop rdi
pop rsi
ret

Function at 0x140032bf0
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
xor r8d, r8d
mov r9d, dword [rcx + 0x2f4]
xor eax, 0x270d2d02
xor r9d, 0x270d2d02
add r9d, r9d
movd xmm3, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x5cf647fe
mov dword [rsp + 8], eax
movss xmm4, dword [rsp + 8]
movzx eax, byte [rdx]
cvtdq2ps xmm3, xmm3
test al, al
je 0x140032c7d
mov r10, qword [rcx + 0x300]
movaps xmm2, xmmword [0x1404e3570]
movzx eax, al
inc rdx
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
movzx eax, byte [rdx]
xorps xmm0, xmm2
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm3
addss xmm1, xmm4
cvttss2si ecx, xmm1
sub ecx, r9d
add r8d, ecx
test al, al
jne 0x140032c44
mov eax, r8d
ret

Function at 0x140032c90
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
nop
sub rsp, 0x785a2865
add rsp, 0x785a2825
mov eax, dword [rcx + 0x2e8]
mov r14, rdx
mov edi, dword [rcx + 0x2f4]
xor eax, 0x270d2d02
movaps xmmword [rsp + 0x30], xmm6
mov rbp, rcx
movaps xmmword [rsp + 0x20], xmm7
xor ebx, ebx
xor edi, 0x270d2d02
xor edx, edx
movd xmm6, eax
add edi, edi
mov eax, dword [rcx + 0x308]
mov esi, ebx
xor eax, 0x5cf647fe
mov rcx, r14
mov dword [rsp + 0x60], eax
movss xmm7, dword [rsp + 0x60]
cvtdq2ps xmm6, xmm6
call fcn.14006c510
test ax, ax
je 0x140032d59
nop word [rax + rax]
movzx ecx, ax
inc rsi
mov rax, qword [rbp + 0x300]
add rcx, rcx
mov rdx, rsi
movups xmm0, xmmword [rax + rcx*8]
xorps xmm0, xmmword [0x1404e3570]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm6
addss xmm1, xmm7
cvttss2si ecx, xmm1
sub ecx, edi
add ebx, ecx
mov rcx, r14
call fcn.14006c510
test ax, ax
jne 0x140032d0f
mov rbp, qword [rsp + 0x70]
mov eax, ebx
mov rbx, qword [rsp + 0x68]
movaps xmm6, xmmword [rsp + 0x30]
movaps xmm7, xmmword [rsp + 0x20]
nop
add rsp, 0x42236356
sub rsp, 0x42236316
pop r14
pop rdi
pop rsi
ret
Function at 0x140032d90
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
xor r8d, r8d
mov r9d, dword [rcx + 0x2f4]
xor eax, 0x270d2d02
xor r9d, 0x270d2d02
add r9d, r9d
movd xmm3, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x5cf647fe
mov dword [rsp + 8], eax
movss xmm4, dword [rsp + 8]
movzx eax, word [rdx]
cvtdq2ps xmm3, xmm3
test ax, ax
je 0x140032e20
mov r10, qword [rcx + 0x300]
movaps xmm2, xmmword [0x1404e3570]
movzx eax, ax
add rdx, 2
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
movzx eax, word [rdx]
xorps xmm0, xmm2
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm3
addss xmm1, xmm4
cvttss2si ecx, xmm1
sub ecx, r9d
add r8d, ecx
test ax, ax
jne 0x140032de5
mov eax, r8d
ret

Function at 0x140032e9b
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rdi
sub rsp, 0xa0
xor ebx, ebx
mov rdi, rcx
mov qword [rax + 8], rbx
cmp qword [rcx + 0x2f8], rbx
je 0x140032fa6
mov edx, dword [rcx + 0x2ec]
mov qword [rax + 0x10], rsi
xor edx, 0x270d2d02
mov eax, dword [rcx + 0x2e8]
nop
movabs rcx, 0xffffffff3e296c29
sub rcx, 0x144c17b2
add rcx, 0x7fffffff
add rcx, 0x5622ab89
xor eax, 0x270d2d02
imul edx, eax
mov eax, 0x7c1c4332
xor eax, 0x22f94061
sub eax, 0x5ee5034f
movsxd rsi, edx
mul rsi
cmovo rax, rcx
mov rcx, rax
call fcn.1400bb700
mov qword [rsp + 0xb0], rax
test rsi, rsi
jle 0x140032f2e
nop
mov rax, qword [rdi + 0x2f8]
mov ecx, dword [rax + rbx*4]
mov rax, qword [rsp + 0xb0]
xor ecx, 0x58fa27f9
mov dword [rax + rbx*4], ecx
inc rbx
cmp rbx, rsi
jl 0x140032f07
mov rsi, qword [rsp + 0xb8]
mov rcx, qword [rdi + 0x318]
lea rax, [0x140001c60]
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x20]
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x98], 0x2d3e5a39
xor qword [rsp + 0x98], 0x22cd283d
add qword [rsp + 0x98], 0x5a8276c7
sub qword [rsp + 0x98], 0x6a75e8b3
mov qword [rsp + 0x28], rdi
call fcn.140031a10
mov rbx, qword [rsp + 0xc0]
sub rsp, 0xffffffffffffff60
pop rdi
ret
lea rdx, [rsp + 0xb0]
call fcn.140033060
test al, al
jne 0x140032f36
mov rbx, qword [rsp + 0xc0]
neg rsp
add rsp, 0xffffffffffffff60
neg rsp
pop rdi
ret
Function at 0x140042c80
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
nop
add rsp, 0x57945052
sub rsp, 0x579450b2
mov rbp, qword [rcx + 0xaf8]
lea rax, [rsp + 0x28]
mov rbx, qword [rcx + 0xac0]
xorps xmm0, xmm0
mov r14, rdx
mov qword [rsp + 0x20], rax
mov rsi, rcx
lea rcx, [rsp + 0x20]
lea rdx, [rbp + 1]
movups xmmword [rsp + 0x28], xmm0
movups xmmword [rsp + 0x38], xmm0
movups xmmword [rsp + 0x48], xmm0
call fcn.1400110e0
mov edi, 0x10218d9a
xor edi, 0x3fe23302
add edi, 0x3860403a
xor edi, 0x6127ef06
mov r9, rax
mov ecx, edi
mov r15d, 0x7b60ff60
sub r15d, 0xe29d1e9
sub r15d, 0x6d372c78
test rbp, rbp
je 0x140042d50
mov rdx, rax
sub rbx, rax
mov r8, rbp
nop dword [rax]
nop dword [rax + rax]
movzx eax, cx
lea rdx, [rdx + 2]
and ax, r15w
ror ecx, 8
xor ax, word [rdx + rbx - 2]
mov word [rdx - 2], ax
sub r8, 1
jne 0x140042d2f
xor ebx, ebx
mov word [r9 + rbp*2], bx
cmp word [rsi + 0xb48], bx
je 0x140042d9b
mov edx, ebx
cmp qword [rsi + 0xaf8], rbx
jbe 0x140042d9b
nop dword [rax + rax]
mov rax, qword [rsp + 0x20]
movzx ecx, word [rsi + 0xb48]
mov word [rax + rdx*2], cx
inc rdx
cmp rdx, qword [rsi + 0xaf8]
jb 0x140042d7b
mov rsi, qword [rsp + 0x20]
lea rax, [r14 + 8]
xorps xmm0, xmm0
mov qword [r14], rax
movups xmmword [rax], xmm0
nop
movabs rdx, 0xffffffff59b9c56e
sub rdx, 0x3c33b437
xor rdx, 0x94bd7a
add rdx, 0x7fffffff
xor rdx, 0x62ed53b3
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
nop dword [rax]
inc rdx
cmp word [rsi + rdx*2], bx
jne 0x140042ddf
mov rcx, r14
mov qword [r14 + 0x38], rdx
call fcn.1400110e0
cmp qword [r14 + 0x38], rbx
jbe 0x140042e2b
sub rsi, rax
nop
movzx ecx, di
lea rax, [rax + 2]
and cx, r15w
ror edi, 8
xor cx, word [rax + rsi - 2]
inc rbx
mov word [rax - 2], cx
cmp rbx, qword [r14 + 0x38]
jb 0x140042e07
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x28]
cmp rcx, rax
jne 0x140042e5d
lea rdi, [rsp + 0x28]
xor eax, eax
mov ecx, 0xfb32393
add ecx, 0x51d59841
sub ecx, 0x6188bba4
rep stosb byte [rdi], al
jmp 0x140042e62
call fcn.1400bb8f0
lea r11, [rsp + 0x60]
mov rax, r14
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rdi
ret
Function at 0x1400461f0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
add rsp, 0xffffffffffffffe0
mov r8, qword [rcx + 0x650]
xor esi, esi
mov rbx, rcx
test r8, r8
je 0x140046220
mov rdi, qword [rcx + 0x648]
jmp 0x140046227
mov rdi, rsi
nop dword [rax]
test r8, r8
je 0x140046240
mov rax, qword [rbx + 0x648]
lea rcx, [rax + r8*8]
jmp 0x140046243
mov rcx, rsi
cmp rdi, rcx
je 0x140046472
mov rax, qword [rdi]
cmp qword [rax + 0x30], rdx
je 0x140046262
sub rdi, 0xfffffffffffffff8
jmp 0x140046227
test r8, r8
je 0x14004632f
cmp rdi, qword [rbx + 0x648]
jb 0x14004632f
mov rax, qword [rbx + 0x648]
lea rcx, [rax + r8*8]
cmp rdi, rcx
jae 0x14004632f
mov rdx, rdi
nop word [rax + rax]
mov rcx, qword [rbx + 0x650]
test rcx, rcx
je 0x1400462b9
mov rax, qword [rbx + 0x648]
lea rax, [rax + rcx*8]
jmp 0x1400462bc
mov rax, rsi
nop
sub rax, 0xffffffff9d773100
add rax, 0xffffffff9d7730f8
cmp rdx, rax
jae 0x1400462e8
mov rax, qword [rdx + 8]
mov qword [rdx], rax
neg rdx
add rdx, 0xfffffffffffffff8
neg rdx
jmp 0x140046299
test rcx, rcx
je 0x14004632f
lea rax, [rcx - 1]
mov qword [rbx + 0x650], rax
test rax, rax
jne 0x14004632f
mov rcx, qword [rbx + 0x648]
test rcx, rcx
je 0x140046321
call fcn.1400bb8f0
mov qword [rbx + 0x648], rsi
mov qword [rbx + 0x658], rsi
mov qword [rbx + 0x650], rsi
mov rcx, qword [rdi]
test rcx, rcx
je 0x140046351
mov rax, qword [rcx]
mov edx, 0x56304f8d
sub edx, 0x50570eef
sub edx, 0x5d9409d
call qword [rax]
cmp qword [rbx + 0x650], rsi
je 0x140046472
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.140045e70
mov rcx, qword [rsp + 0x30]
mov r10d, 0x24329563
sub r10d, 0x4b8d694
xor r10d, 0xd9733f4
sub r10d, 0x12ee8c9b
mov r8d, dword [rsp + 0x34]
mov eax, ecx
mov r9, qword [rbx + 0x650]
sub eax, r8d
cdq
idiv dword [rbx + 0x650]
cmp eax, r10d
cmovl r10d, eax
test r9, r9
je 0x14004642a
mov rdx, qword [rbx + 0x648]
lea r11, [rdx + r9*8]
cmp rdx, r11
je 0x14004642a
mov r9d, r10d
xor r9d, 0x270d2d02
xor r8d, 0x270d2d02
nop dword [rax]
mov rcx, qword [rdx]
mov eax, esi
xor eax, 0x270d2d02
add esi, r10d
add rdx, 8
mov dword [rcx + 0x38], eax
mov dword [rcx + 0x3c], 0x149c4ac4
sub dword [rcx + 0x3c], 0xee0cb5e
add dword [rcx + 0x3c], 0x602e1842
sub dword [rcx + 0x3c], 0x3edc6aa6
mov dword [rcx + 0x40], r9d
mov dword [rcx + 0x44], r8d
cmp rdx, r11
jne 0x1400463df
mov rcx, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x34]
mov rax, qword [rbx + 0x668]
test rax, rax
je 0x14004646a
sub ecx, r8d
mov dword [rax + 0x1c], 0x6e23c6dc
sub dword [rax + 0x1c], 0x10df4eac
sub dword [rax + 0x1c], 0x36374b2e
xor ecx, 0x270d2d02
xor r8d, 0x270d2d02
mov dword [rax + 0x18], ecx
mov dword [rax + 0x20], r8d
mov dword [rax + 0x24], r8d
mov rcx, rbx
call fcn.140041200
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
neg rsp
add rsp, 0xffffffffffffffe0
neg rsp
pop rdi
ret
Function at 0x140046549
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
nop
add rsp, 0x41fd2b6d
sub rsp, 0x41fd2b8d
mov rax, qword [rcx]
mov rdi, rcx
call qword [rax + 0x78]
mov rdx, qword [rdi + 0x650]
mov rcx, rax
mov rbx, rax
mov qword [rsp + 0x30], rax
call fcn.140025c80
mov rcx, rdi
call fcn.140039ff0
mov rcx, qword [0x1404e2bb8]
mov rdx, qword [rax + 0x98]
call fcn.14002dbc0
mov rcx, rax
call fcn.140039e30
lea rcx, [rdi + 0x648]
mov qword [rbx + 0x20], rax
lea rdx, [rsp + 0x30]
call fcn.140026fc0
mov rcx, rdi
mov rbx, qword [rsp + 0x38]
sub rsp, 0xffffffffffffffe0
pop rdi
jmp 0x140046490
push rbx
neg rsp
sub rsp, 0xffffffffffffffe0
neg rsp
cmp qword [rcx + 0x650], 0
mov rbx, rcx
je 0x1400465d8
lea rdx, [rsp + 0x30]
call fcn.140045e70
mov r8, qword [rsp + 0x30]
mov r11d, 0x5c967269
xor r11d, 0x5f481678
add r11d, 0x48dcf147
xor r11d, 0x4cbb55f8
mov r9d, dword [rsp + 0x34]
mov eax, r8d
sub eax, r9d
cdq
idiv dword [rbx + 0x650]
mov rdx, qword [rbx + 0x650]
cmp eax, r11d
cmovl r11d, eax
xor r10d, r10d
test rdx, rdx
je 0x14004658e
mov rax, qword [rbx + 0x648]
mov qword [rsp + 0x38], rdi
lea rdi, [rax + rdx*8]
cmp rax, rdi
je 0x140046589
mov r8d, r11d
xor r8d, 0x270d2d02
xor r9d, 0x270d2d02
nop word [rax + rax]
mov rdx, qword [rax]
mov ecx, r10d
xor ecx, 0x270d2d02
add r10d, r11d
nop
add rax, 0x7a666602
sub rax, 0x7a6665fa
mov dword [rdx + 0x38], ecx
mov dword [rdx + 0x3c], 0x7b505076
xor dword [rdx + 0x3c], 0x4e1ea60
xor dword [rdx + 0x3c], 0x38b5a98e
xor dword [rdx + 0x3c], 0x60093e9a
mov dword [rdx + 0x40], r8d
mov dword [rdx + 0x44], r9d
cmp rax, rdi
jne 0x140046533
mov r8, qword [rsp + 0x30]
mov r9d, dword [rsp + 0x34]
mov rdi, qword [rsp + 0x38]
mov rax, qword [rbx + 0x668]
test rax, rax
je 0x1400465d0
sub r8d, r9d
mov dword [rax + 0x1c], 0x369fe3ff
add dword [rax + 0x1c], 0x3b910305
sub dword [rax + 0x1c], 0x4b23ba02
xor r8d, 0x270d2d02
xor r9d, 0x270d2d02
mov dword [rax + 0x18], r8d
mov dword [rax + 0x20], r9d
mov dword [rax + 0x24], r9d
mov rcx, rbx
call fcn.140041200
add rsp, 0x20
pop rbx
ret
Function at 0x140050a90
Capabilities:
Encode data using xor

Disassembly:
xchg r13, rax
mov r13, rsp
xchg r13, rax
mov qword [rax + 0x10], rbx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
nop
sub rsp, 0x6c132487
add rsp, 0x6c132427
movabs rbx, 0x2c9e3f0c36309dfb
xor rbx, 0x760a6e98
sub rbx, 0x309c6edd
add rbx, 0x1ceb0230
add rbx, 0x474fe76f
mov rdi, rcx
cmp qword [rcx + 0x30], rbx
xchg r9, r9
jne 0x140050cd7
mov dword [rax - 0x48], 0x456902e0
sub dword [rax - 0x48], 0x115012de
add dword [rax - 0x48], 0x449a54b5
xor dword [rax - 0x48], 0x575a460d
xor dword [rax - 0x48], 0x2f9c022f
xor r8d, r8d
mov dword [rax - 0x44], 0x383ae40
add dword [rax - 0x44], 0x2fd430
add dword [rax - 0x44], 0x25e99758
sub dword [rax - 0x44], 0x29351956
mov dword [rax - 0x40], 0x31168f2b
add dword [rax - 0x40], 0x3ec390da
sub dword [rax - 0x40], 0x2bcf65d2
sub dword [rax - 0x40], 0x4392b98f
mov dword [rax - 0x3c], 0x251540e
add dword [rax - 0x3c], 0x488fe68
add dword [rax - 0x3c], 0x17aa72ad
add dword [rax - 0x3c], 0xf5d697e
sub dword [rax - 0x3c], 0x2da72e6a
mov dword [rax - 0x38], 0x75f5bff6
sub dword [rax - 0x38], 0x3f02feb5
sub dword [rax - 0x38], 0xe353d31
add dword [rax - 0x38], 0xa0fe22
sub dword [rax - 0x38], 0x28e98138
mov dword [rax - 0x34], 0x52962303
xor dword [rax - 0x34], 0x3992f109
sub dword [rax - 0x34], 0x3887b67f
sub dword [rax - 0x34], 0x1163cf0
sub dword [rax - 0x34], 0x3101de33
xchg rsi, r8
mov qword [rsp + 0x70], rsi
xchg r8, rsi
mov rax, qword [rsp + 0x70]
mov rbx, rbx
nop word [rax + rax]
mov rcx, qword [rsp + 0x70]
mov rax, qword [rsp + 0x70]
and cl, 3
mov dword [rsp - 0x24], 0x1ebd31d7
shl cl, 3
movzx edx, word [rsp + rax*2 + 0x20]
mov eax, 0x7ce52c43
sub eax, 0x1d2116c9
xor eax, 0x4ae21c6a
add eax, 0x39fa6c2e
sub eax, 0x461c636a
shr eax, cl
mov dword [rsp - 0x20], 0x33307a28
movzx ecx, al
mov rax, qword [rsp + 0x70]
xor cx, dx
mov word [rsp + rax*2 + 0x38], cx
mov dword [rsp - 0x14], ecx
mov rax, qword [rsp + 0x70]
inc rax
mov qword [rsp + 0x70], rax
xchg r11, r11
xchg r12, rax
mov r12, qword [rsp + 0x70]
xchg r12, rax
cmp rax, 0xc
mov dword [rsp - 0x18], ebp
jb 0x140050bca
xor edx, edx
mov word [rsp + 0x50], r8w
lea rcx, [rsp + 0x38]
mov r8, r8
call fcn.14009f140
xchg r11, rax
mov rdx, r11
xchg r11, rax
xchg rsp, rax
mov r8, rsp
xchg rsp, rax
xor rdx, rbx
mov rdi, rdi
xor eax, eax
xchg rdx, r14
mov qword [rdi + 0x30], r14
xchg rdx, r14
lea rdi, [rsp + 0x38]
mov ecx, 0x3ebc8614
add ecx, 0x31b60153
xor ecx, 0x75a213fc
sub ecx, 0x5d0948f
rep stosb byte [rdi], al
cmp rdx, rbx
je 0x140050cdf
mov dword [rsp - 0x2c], esp
lea rdx, [0x1404e2400]
xchg r8, r12
mov rcx, r12
xchg r12, r8
call fcn.140058730
test al, al
setne al
mov dword [rsp - 0x38], esp
xchg rbx, r11
mov r11, qword [rsp + 0x78]
xchg rbx, r11
add rsp, 0x60
mov r9, r9
pop rdi
ret
mov al, 0x1b
add al, 0x21
xor al, 1
sub al, 0x3c
xchg rsi, rbx
mov rsi, qword [rsp + 0x78]
xchg rsi, rbx
add rsp, 0x60
xchg r15, r15
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret
Function at 0x140050d00
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
nop
sub rsp, 0x3b3cb6d9
add rsp, 0x3b3cb689
movabs rbx, 0x2c9e3f0c6b3d55ed
xor rbx, 0x75073e58
add rbx, 0x54644932
xor rbx, 0x147dac2
xchg rdi, rcx
mov rcx, rdi
xchg rdi, rcx
cmp qword [rcx + 0x28], rbx
xchg r12, r12
jne 0x140050f52
mov eax, 0x63971f22
sub eax, 0x4151065
xor eax, 0x526ae129
sub eax, 0xde8eedc
mov dword [rsp + 0x20], 0x7d6f081c
sub dword [rsp + 0x20], 0x5ec36ae8
add dword [rsp + 0x20], 0x4dcb2cc8
sub dword [rsp + 0x20], 0xa4353a7
sub dword [rsp + 0x20], 0x61b675ba
mov word [rsp + 0x30], ax
xor r8d, r8d
mov rdi, rdi
mov dword [rsp + 0x24], 0x1a9da1da
sub dword [rsp + 0x24], 0x4acafc5
xor dword [rsp + 0x24], 0x524e495c
xor dword [rsp + 0x24], 0x2419a1ca
sub dword [rsp + 0x24], 0x636d1a22
mov dword [rsp + 0x28], 0x53987439
sub dword [rsp + 0x28], 0xd1c2f0
xor dword [rsp + 0x28], 0x4843acf1
xor dword [rsp + 0x28], 0x1aba1d5e
mov dword [rsp + 0x2c], 0x5b0ef7b8
xor dword [rsp + 0x2c], 0x67329ec7
add dword [rsp + 0x2c], 0x16e40354
sub dword [rsp + 0x2c], 0x3ef17b9f
xor dword [rsp + 0x2c], 0x144bf154
xchg r11, r8
mov qword [rsp + 0x60], r11
xchg r11, r8
xchg r11, rax
mov r11, qword [rsp + 0x60]
xchg r11, rax
nop dword [rax + rax]
xchg rbx, rcx
mov rbx, qword [rsp + 0x60]
xchg rbx, rcx
mov rax, qword [rsp + 0x60]
xchg r10, r10
and cl, 3
shl cl, 2
shl cl, 1
movzx edx, word [rsp + rax*2 + 0x20]
mov r13, r13
mov eax, 0x394ed356
sub eax, 0x352853da
xor eax, 0x7f104cd4
xor eax, 0x7c124d35
xor eax, 0xe206f49
shr eax, cl
movzx ecx, al
mov dword [rsp - 0x24], 0x6a4f3523
xchg r15, rax
mov r15, qword [rsp + 0x60]
xchg r15, rax
xor cx, dx
mov word [rsp + rax*2 + 0x32], cx
mov rax, qword [rsp + 0x60]
xchg rcx, rcx
inc rax
xchg rdx, rax
mov qword [rsp + 0x60], rdx
xchg rdx, rax
mov rax, qword [rsp + 0x60]
cmp rax, 9
jb 0x140050e26
mov dword [rsp - 0x30], 0x2a1f62a3
xor edx, edx
mov word [rsp + 0x44], r8w
lea rcx, [rsp + 0x32]
xchg r8, r8
call fcn.14009f140
xchg rdx, rax
mov rax, rdx
xchg rdx, rax
xchg r8, r13
mov r13, rax
xchg r13, r8
xor rdx, rbx
mov dword [rsp - 0x3c], esi
xor eax, eax
xchg rdx, rbx
mov qword [rdi + 0x28], rbx
xchg rbx, rdx
lea rdi, [rsp + 0x32]
mov ecx, 0x42364708
add ecx, 0x27fe1eef
xor ecx, 0x5979c33
sub ecx, 0x6fa3f9bb
rep stosb byte [rdi], al
mov rsp, rsp
cmp rdx, rbx
je 0x140050f5c
lea rdx, [0x1404e20e0]
mov rsi, rsi
xchg rbx, rcx
mov rbx, r8
xchg rbx, rcx
call fcn.140063ff0
xchg rdx, rdx
test al, al
setne al
xchg r10, rbx
mov r10, qword [rsp + 0x68]
xchg r10, rbx
nop
sub rsp, 0x2ec426eb
add rsp, 0x2ec4273b
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret
mov al, 0x5d
sub al, 0x19
sub al, 9
xor al, 0x54
sub al, 0x6e
xchg r15, rbx
mov r15, qword [rsp + 0x68]
xchg r15, rbx
sub rsp, 0xffffffffffffffb0
nop
mov rdi, qword [rsp]
add rsp, 8
ret
Function at 0x140050f80
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r12
mov qword [rsp + 0x10], r12
xchg rbx, r12
push rdi
mov dword [rsp - 0x30], 0x33acd25b
add rsp, 0xffffffffffffffb0
movabs rbx, 0x2c9e3f0c6f411674
sub rbx, 0x26201182
sub rbx, 0x39ee73bd
add rbx, 0x64a6dcf0
xchg r14, rdi
mov r14, rcx
xchg r14, rdi
cmp qword [rcx + 0x38], rbx
xchg rsp, rsp
jne 0x1400511c2
xor r8d, r8d
mov dword [rsp + 0x20], 0x3a4f1129
xor dword [rsp + 0x20], 0x7125f459
add dword [rsp + 0x20], 0x28731bbf
sub dword [rsp + 0x20], 0x360cf47d
sub dword [rsp + 0x20], 0x3d700c2c
mov dword [rsp + 0x24], 0x3e39e47c
sub dword [rsp + 0x24], 0x1713e64c
add dword [rsp + 0x24], 0x2461bd21
sub dword [rsp + 0x24], 0x4b0cbaea
mov dword [rsp + 0x28], 0x1ef98fa
xor dword [rsp + 0x28], 0x447125dd
xor dword [rsp + 0x28], 0x1b248a5c
sub dword [rsp + 0x28], 0x1a195109
sub dword [rsp + 0x28], 0x447be5d2
mov dword [rsp + 0x2c], 0x128c2825
xor dword [rsp + 0x2c], 0x2f4167fa
add dword [rsp + 0x2c], 0x37c36923
sub dword [rsp + 0x2c], 0x6aa086a7
xor dword [rsp + 0x2c], 0xa9d3271
mov dword [rsp + 0x30], 0x5482f4c0
sub dword [rsp + 0x30], 0x4538601d
xor dword [rsp + 0x30], 0x26852709
sub dword [rsp + 0x30], 0x4d68ef1
sub dword [rsp + 0x30], 0x247c2401
xchg r8, rdi
mov qword [rsp + 0x60], rdi
xchg rdi, r8
mov rax, qword [rsp + 0x60]
nop word [rax + rax]
mov rcx, rcx
mov rcx, qword [rsp + 0x60]
mov rax, qword [rsp + 0x60]
and cl, 3
mov dword [rsp - 0x38], esi
shl cl, 2
shl cl, 1
movzx edx, word [rsp + rax*2 + 0x20]
mov eax, 0x7da1be12
sub eax, 0x66abe3b0
add eax, 0xf5e43be
xor eax, 0x2f500ff4
shr eax, cl
movzx ecx, al
xchg rbx, rax
mov rbx, qword [rsp + 0x60]
xchg rbx, rax
xor cx, dx
mov r15, r15
mov word [rsp + rax*2 + 0x34], cx
mov rax, qword [rsp + 0x60]
inc rax
mov dword [rsp - 0x34], ecx
xchg r12, rax
mov qword [rsp + 0x60], r12
xchg r12, rax
mov rax, qword [rsp + 0x60]
cmp rax, 0xa
jb 0x1400510ad
mov rdi, rdi
xor edx, edx
mov word [rsp + 0x48], r8w
lea rcx, [rsp + 0x34]
mov dword [rsp - 0x24], esp
call fcn.14009f140
mov rdx, rax
xchg r8, r12
mov r12, rax
xchg r8, r12
xor rdx, rbx
mov dword [rsp - 0x30], 0x4472f4e9
xor eax, eax
mov qword [rdi + 0x38], rdx
lea rdi, [rsp + 0x34]
mov ecx, 0x4488b7f1
sub ecx, 0x185ac25a
sub ecx, 0x7388db1
xor ecx, 0x439c0753
xor ecx, 0x676960bf
rep stosb byte [rdi], al
cmp rdx, rbx
mov dword [rsp - 0x14], 0x30dffccb
je 0x1400511cc
lea rdx, [0x1404e2108]
xchg r8, rcx
mov r8, rcx
xchg r8, rcx
call fcn.1400644e0
mov dword [rsp - 0x34], 0x53240c49
test al, al
setne al
xchg rcx, rbx
mov rcx, qword [rsp + 0x68]
xchg rbx, rcx
sub rsp, 0xffffffffffffffb0
xchg r13, r13
nop
mov rdi, qword [rsp]
add rsp, 8
ret
mov al, 0x25
sub al, 0x13
add al, 0x20
sub al, 0x1f
sub al, 0x12
xchg rbx, rdi
mov rdi, qword [rsp + 0x68]
xchg rdi, rbx
neg rsp
add rsp, 0xffffffffffffffb0
neg rsp
nop
mov rdi, qword [rsp]
add rsp, 8
ret
Function at 0x1400511f0
Capabilities:
Encode data using xor

Disassembly:
xchg rdi, rbx
mov qword [rsp + 0x10], rdi
xchg rdi, rbx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
nop
sub rsp, 0x4112e0f9
add rsp, 0x4112e0a9
movabs rbx, 0x2c9e3f0c122bba67
xor rbx, 0x1b37d446
xor rbx, 0x548223f
add rbx, 0x67852207
xchg rdi, rsi
mov rsi, rcx
xchg rdi, rsi
cmp qword [rcx + 0x20], rbx
mov dword [rsp - 0x18], 0x539028ad
jne 0x14005145e
mov eax, 0x45a90e20
sub eax, 0xaf40c20
xor eax, 0x65ad0ead
sub eax, 0x5f180c45
mov dword [rsp + 0x20], 0x770653bb
sub dword [rsp + 0x20], 0x1290a818
xor dword [rsp + 0x20], 0x161f83c
sub dword [rsp + 0x20], 0x2d2caaad
sub dword [rsp + 0x20], 0x376ea86b
mov word [rsp + 0x34], ax
xor r8d, r8d
mov dword [rsp - 0x40], ebx
mov dword [rsp + 0x24], 0x670e39d7
xor dword [rsp + 0x24], 0x5d0e52f0
add dword [rsp + 0x24], 0x22b30425
sub dword [rsp + 0x24], 0x1b9e682c
sub dword [rsp + 0x24], 0x40b006bf
mov dword [rsp + 0x28], 0x337af566
add dword [rsp + 0x28], 0x478d24c6
sub dword [rsp + 0x28], 0x730bad92
xor dword [rsp + 0x28], 0x7b4fbd04
sub dword [rsp + 0x28], 0x7c91d0e6
mov dword [rsp + 0x2c], 0x236c3b4
add dword [rsp + 0x2c], 0x2be5a1c6
xor dword [rsp + 0x2c], 0x46114f9d
xor dword [rsp + 0x2c], 0x682a2ad1
mov dword [rsp + 0x30], 0x55a47e7d
add dword [rsp + 0x30], 0x136ff4fa
sub dword [rsp + 0x30], 0x5cc4b45e
xor dword [rsp + 0x30], 0x3ea8c16e
xor dword [rsp + 0x30], 0x329a7ec7
xchg r8, r12
mov qword [rsp + 0x60], r12
xchg r8, r12
mov rax, qword [rsp + 0x60]
xchg rbx, rcx
mov rbx, qword [rsp + 0x60]
xchg rbx, rcx
mov rax, qword [rsp + 0x60]
and cl, 3
mov rbp, rbp
shl cl, 1
shl cl, 1
shl cl, 1
movzx edx, word [rsp + rax*2 + 0x20]
mov dword [rsp - 0x14], 0x6f55ba77
mov eax, 0x424be5ed
add eax, 0xcdb58bf
add eax, 0x2fd9d043
sub eax, 0x75fcfd1b
shr eax, cl
movzx ecx, al
xchg rbx, rbx
mov rax, qword [rsp + 0x60]
xor cx, dx
mov word [rsp + rax*2 + 0x36], cx
mov dword [rsp - 0x1c], 0x45a27b37
xchg rbx, rax
mov rbx, qword [rsp + 0x60]
xchg rbx, rax
inc rax
mov r12, r12
xchg rdi, rax
mov qword [rsp + 0x60], rdi
xchg rdi, rax
xchg r8, rax
mov r8, qword [rsp + 0x60]
xchg r8, rax
cmp rax, 0xb
jb 0x14005133e
xor edx, edx
mov dword [rsp - 0x24], esi
mov word [rsp + 0x4c], r8w
lea rcx, [rsp + 0x36]
call fcn.14009f140
mov rsp, rsp
mov rdx, rax
mov r8, rax
xor rdx, rbx
mov dword [rsp - 0x34], 0x543b8b97
xor eax, eax
xchg rdx, r10
mov qword [rdi + 0x20], r10
xchg rdx, r10
lea rdi, [rsp + 0x36]
xchg rbx, rbx
mov ecx, 0xe437336
add ecx, 0x205069c4
add ecx, 0x6feddf9
xor ecx, 0x3592baf8
rep stosb byte [rdi], al
cmp rdx, rbx
mov rbp, rbp
je 0x140051468
lea rdx, [0x1404e23d0]
mov rcx, r8
mov r9, r9
call fcn.140064930
test al, al
setne al
mov dword [rsp - 0x38], 0x840e708
xchg r14, rbx
mov r14, qword [rsp + 0x68]
xchg r14, rbx
add rsp, 0x50
mov dword [rsp - 0x28], 0x3f385edc
pop rdi
ret
mov al, 0x18
xor al, 0x21
add al, 0x1c
sub al, 0x26
sub al, 0x2e
xchg rbx, r15
mov r15, qword [rsp + 0x68]
xchg rbx, r15
nop
sub rsp, 0x1c982f07
add rsp, 0x1c982f57
pop rdi
ret