joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400d6f8c
Capabilities:
Execute syscall

Disassembly:
push rbx
neg rsp
sub rsp, 0xffffffffffffffe0
neg rsp
mov rbx, rcx
mov rcx, qword [rcx + 0x1a8]
xchg r15, r15
cmp rcx, 0xffffffffffffffff
je 0x1400d704a
xchg r8, rax
mov r8, qword [rbx + 0x258]
xchg r8, rax
movabs rdx, 0x35121743184ae5d2
add rdx, 0x646dfd49
sub rdx, 0x40bf4dd3
add rdx, 0x169fedb0
xor rax, rdx
movabs rdx, 0xf619b5f43c342557
sub rdx, 0xbc95579
xor rdx, 0x68eacb1
add rdx, 0x1821427f
ror rax, 0xf
ror rax, 0x13
ror rax, 7
ror rax, 2
ror rax, 2
ror rax, 5
ror rax, 2
ror rax, 1
not rax
rol rax, 1
rol rax, 0xc
rol rax, 1
rol rax, 1
xor rax, rdx
mov dword [rsp - 0x30], ecx
ror rax, 2
ror rax, 1
ror rax, 1
ror rax, 1
ror rax, 1
ror rax, 1
call rax
mov dword [rsp - 0x20], ebp
mov rcx, qword [rbx + 0x198]
test rcx, rcx
je 0x1400d708c
xchg rbx, rbx
cmp qword [rbx + 0x1a0], 0
jne 0x1400d708c
mov rcx, qword [rcx + 0x20]
xchg rbp, rbp
call fcn.140098de0
xchg rcx, r9
mov r9, qword [rbx + 0x198]
xchg rcx, r9
call fcn.140098de0
xchg rcx, rcx
mov rcx, qword [rbx + 0x1a0]
test rcx, rcx
je 0x1400d7117
mov rax, qword [rbx + 0x248]
xchg r14, r14
movabs rdx, 0x692bc943692df825
sub rdx, 0x267dd372
xor rdx, 0x65238f09
add rdx, 0x2c663dc0
xor rax, rdx
movabs rdx, 0x23269dc3114d2888
xor rdx, 0x74958995
sub rdx, 0x4a91baa2
add rdx, 0x25198aeb
sub rdx, 0x25d23a3f
not rax
mov dword [rsp - 0x10], 0x39167a45
sub rax, rdx
ror rax, 0xb
ror rax, 1
ror rax, 3
ror rax, 2
ror rax, 0xa
ror rax, 1
ror rax, 1
call rax
cmp qword [rbx + 0x200], 0
xchg rcx, rcx
je 0x1400d71ee
xchg r9, rax
mov r9, qword [rbx + 0x210]
xchg r9, rax
movabs rcx, 0xf84dae8b264488cc
sub rcx, 0x1066e45f
add rcx, 0x27a7d38e
xor rcx, 0x6cc02375
sub rcx, 0x42b5ca8c
not rax
mov dword [rsp - 0x3c], esp
rol rax, 0xc
rol rax, 0xf
rol rax, 0x10
rol rax, 3
rol rax, 1
rol rax, 2
rol rax, 1
add rcx, rax
xchg rdi, rdi
movabs rax, 0xadee96c557b244d
add rax, 0x25594693
sub rax, 0x2764ebca
xor rax, 0xfb79596
add rax, 0x7fffffff
xor rax, 0x2885d97f
not rcx
mov dword [rsp - 0xc], 0x56d965b7
rol rcx, 1
rol rcx, 0x10
rol rcx, 4
rol rcx, 1
xor rcx, rax
not rcx
call rcx
mov rbp, rbp
xchg r13, rcx
mov r13, qword [rbx + 0x200]
xchg rcx, r13
call fcn.14008d870
mov dword [rsp - 0x34], 0xdef624e
and qword [rbx + 0x200], 0
xchg rdi, rcx
mov rdi, qword [rbx + 0x1f0]
xchg rcx, rdi
nop
sub rsp, 0xf789466
add rsp, 0xf789486
nop
mov rbx, qword [rsp]
add rsp, 8
jmp fcn.140055e10
Function at 0x1400d984c
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
xchg rsi, r9
mov qword [rsp + 0x18], r9
xchg rsi, r9
mov qword [rsp + 0x20], rdi
nop
sub rsp, 8
mov qword [rsp], rbp
mov rbp, rsp
add rsp, 0xffffffffffffffb0
mov rcx, rcx
xor esi, esi
mov dword [rbp - 0x30], 0xfe9e728
add dword [rbp - 0x30], 0x2b149a15
add dword [rbp - 0x30], 0x103ae48f
add dword [rbp - 0x30], 0xabce057
sub dword [rbp - 0x30], 0x55f1456c
mov dword [rbp - 0x2c], 0x2e4550a0
add dword [rbp - 0x2c], 0x6e2314b
sub dword [rbp - 0x2c], 0x2982966c
add dword [rbp - 0x2c], 0x37e90792
xor dword [rbp - 0x2c], 0x4386f3c4
mov rbx, rcx
mov r14, r14
mov dword [rbp - 0x28], 0x10a3601d
xor dword [rbp - 0x28], 0x358558f2
add dword [rbp - 0x28], 0x1c095ee6
sub dword [rbp - 0x28], 0x165e168d
sub dword [rbp - 0x28], 0x2a8d8075
mov dword [rbp - 0x24], 0x32ef4193
add dword [rbp - 0x24], 0x101f78e4
xor dword [rbp - 0x24], 0x35b42d02
xor dword [rbp - 0x24], 0x768a97bc
mov dword [rbp - 0x20], 0x693922c6
sub dword [rbp - 0x20], 0x102af54a
sub dword [rbp - 0x20], 0x2eb4816d
sub dword [rbp - 0x20], 0x2a3fab83
mov qword [rbp + 0x10], rsi
xchg r12, r12
mov rax, qword [rbp + 0x10]
mov rcx, qword [rbp + 0x10]
xchg r14, rax
mov r14, qword [rbp + 0x10]
xchg r14, rax
and cl, 3
shl cl, 2
shl cl, 1
movzx edx, word [rbp + rax*2 - 0x30]
mov eax, 0x740e759d
sub eax, 0x58decdd5
add eax, 0x31aebcaf
sub eax, 0x41a81bd3
xor eax, 0x5fd13e44
shr eax, cl
movzx ecx, al
xchg rsp, rax
mov rsp, qword [rbp + 0x10]
xchg rsp, rax
xor cx, dx
mov dword [rsp - 0x28], 0x6a21ca6a
mov word [rbp + rax*2 - 0x1c], cx
mov rax, qword [rbp + 0x10]
inc rax
mov dword [rsp - 0x28], 0x1439c40d
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
cmp rax, 0xa
jb 0x1400d9928
mov dword [rsp - 0x28], ebp
xor edx, edx
mov word [rbp - 8], si
lea rcx, [rbp - 0x1c]
call fcn.14008b3a0
mov r8, r8
mov r8, rax
mov qword [rbx + 0x200], rax
xor eax, eax
mov dword [rsp - 0x18], 0x6098999a
lea rdi, [rbp - 0x1c]
lea ecx, [rax + 0xa]
rep stosb byte [rdi], al
mov dword [rsp - 0x34], 0x26bf1e7a
test r8, r8
je 0x1400d9a22
lea rdx, [rbx + 0x208]
xchg rbx, rcx
mov rbx, r8
xchg rbx, rcx
call fcn.1400da130
mov dword [rsp - 0xc], edi
test al, al
jne 0x1400d9a1a
mov rcx, qword [rbx + 0x200]
xchg r13, r13
call fcn.14008d870
xor al, al
mov qword [rbx + 0x200], rsi
jmp 0x1400d9a22
mov al, 0x3d
xor al, 0xe
sub al, 0x30
xor al, 2
mov rbx, qword [rsp + 0x68]
xchg r10, r10
mov rsi, qword [rsp + 0x70]
xchg rdi, rbx
mov rbx, qword [rsp + 0x78]
xchg rbx, rdi
sub rsp, 0xffffffffffffffb0
mov dword [rsp - 0x34], 0x5227e73a
pop rbp
ret
Function at 0x1400d9eb0
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, rsi
mov qword [rsp + 0x10], rsi
xchg rbx, rsi
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x4274b78b
add rsp, 0x4274b64b
xchg r8, rbx
mov r8, rbx
xchg r8, rbx
xchg rbp, rdi
mov rbp, rcx
xchg rdi, rbp
mov r8d, 0x6e5c2eec
xor r8d, 0xf1403a
xor r8d, 0x35f5ee81
xor r8d, 0x5b1bf611
xor r8d, 0x437746
lea rcx, [rsp + 0x40]
mov r11, r11
xor edx, edx
call fcn.140099440
mov r10, qword [rdi + 0x238]
lea r8, [rsp + 0x40]
mov r11, r11
mov edx, dword [rbx + 0x10]
movabs rcx, 0x7744a2cb61d821c1
xor rcx, 0x33d504ec
xor rcx, 0x2b155b5f
sub rcx, 0x3be8b10c
add rcx, 0x5c2c503a
xor r10, rcx
mov dword [rsp + 0x30], 0x2a7940a0
add dword [rsp + 0x30], 0x184391f
add dword [rsp + 0x30], 0x40548b68
sub dword [rsp + 0x30], 0x39d0948a
sub dword [rsp + 0x30], 0x3281709b
movabs rcx, 0x64ff229957968557
xor rcx, 0x4ad6eac6
sub rcx, 0x17b02db9
add rcx, 0x318a0bfa
xor rcx, 0x30dcdc0a
movabs rax, 0x4dbe338501935266
add rax, 0x5aade306
sub rax, 0x4955f244
sub rax, 0x457bbc1
add rax, 0x5efd8ca7
sub r10, rcx
mov rcx, rcx
xor edi, edi
movabs rcx, 0x745110ce425f767d
xor rcx, 0x2b3b59f2
sub rcx, 0x2e4bfa78
sub rcx, 0x3a0ea6a2
add rcx, 0x1f60753f
mov dword [rsp + 0x28], edi
mov dword [rsp - 0x18], 0x3f5af9a1
xor r10, rcx
mov qword [rsp + 0x20], rdi
ror r10, 0xb
ror r10, 6
ror r10, 1
ror r10, 1
movabs rcx, 0xa09dfef35c47dfe9
sub rcx, 0x2d37fae7
xor rcx, 0xd3e786
add rcx, 0x49e42c18
add rcx, 0x7fffffff
sub rcx, 0x3b3a6296
add r10, rcx
xchg r10, r10
mov r9d, 0x182beb13
xor r9d, 0x66ebda
add r9d, 0x2696d62a
xor r9d, 0x69b1e4a4
xor r9d, 0x57523357
mov rcx, qword [rbx + 0x20]
xchg rdi, rdi
xor r10, rax
not r10
call r10
mov rbx, rbx
test eax, eax
jne 0x1400da10c
or eax, 0xffffffff
lea rbx, [rsp + 0x40]
mov dword [rsp - 0x44], esp
mov dword [rsp + 0x150], eax
cmp byte [rsp + 0x40], dil
je 0x1400da0e2
mov rdx, rbx
xchg r15, r15
lea rcx, [rsp + 0x150]
mov r8d, 0x733f2e59
sub r8d, 0xe3a4f94
xor r8d, 0x413f25bb
sub r8d, 0x243bfb7d
inc rbx
call fcn.14008e550
cmp byte [rbx], dil
mov r9, r9
jne 0x1400da09e
mov eax, dword [rsp + 0x150]
not eax
cmp eax, 0xa2ca6717
mov r14, r14
je 0x1400da0ff
cmp eax, 0xd7b7e7a8
sete al
jmp 0x1400da111
mov al, 0x14
xor al, 0x3c
add al, 0x10
sub al, 0x37
jmp 0x1400da111
xor al, al
xchg rbx, rbx
mov rbx, qword [rsp + 0x158]
neg rsp
add rsp, 0xfffffffffffffec0
neg rsp
nop
mov rdi, qword [rsp]
add rsp, 8
ret
Function at 0x1400de520
Capabilities:
Encrypt data using curve25519

Disassembly:
mov qword [rsp + 8], rbx
nop
push 0x79ce4fa8
mov qword [rsp], rdi
add rsp, 0x4e77185b
sub rsp, 0x4e77191b
xchg r8, rdx
mov rax, rdx
xchg rdx, r8
xchg rdx, rsi
mov rbx, rsi
xchg rdx, rsi
xchg r8, rdx
mov rdx, r8
xchg rdx, r8
xchg rcx, r10
mov rdi, r10
xchg r10, rcx
mov edx, 0x57f96934
sub edx, 0x5625b541
xor edx, 0x5b8ec3f4
sub edx, 0x19ae6f31
sub edx, 0x40af00b6
xchg rcx, r12
mov r12, rax
xchg rcx, r12
call fcn.1400dedb0
mov dword [rsp - 0x20], 0x7fdbe081
movzx eax, byte [rbx + 0x1f]
lea rcx, [rsp + 0x20]
and byte [rbx], 0xf8
mov dword [rsp - 0x38], ebp
and al, 0x3f
or al, 0x40
xchg rdx, rbx
mov rbx, rdx
xchg rdx, rbx
mov byte [rbx + 0x1f], al
call fcn.1400e23e0
mov dword [rsp - 0x44], ebp
lea rdx, [rsp + 0x20]
mov rcx, rdi
call fcn.1400e2310
xchg rbx, r8
mov r8, qword [rsp + 0xd0]
xchg r8, rbx
sub rsp, 0xffffffffffffff40
nop
mov rdi, qword [rsp]
add rsp, 8
ret
Function at 0x1400f0ce8
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r14
push r15
neg rsp
sub rsp, 0xffffffffffffffd0
neg rsp
mov dword [rcx + 8], 0x15fccaf6
add dword [rcx + 8], 0x2cdc8ed5
xor dword [rcx + 8], 0x42d959ca
lea r14, [rcx + 0x298]
xorps xmm0, xmm0
lea rax, [0x14000ba78]
mov qword [rcx], rax
mov rbp, rdx
lea rax, [r14 + 8]
mov rbx, rcx
mov qword [r14], rax
xor edi, edi
mov qword [rcx + 0x290], rdi
mov rsi, r8
movups xmmword [rax], xmm0
mov rcx, r14
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
mov rdx, qword [r8 + 0x38]
mov qword [r14 + 0x38], rdx
call fcn.140017814
mov r8d, edi
cmp qword [r14 + 0x38], rdi
jbe 0x1400f0d8a
mov rcx, qword [rsi]
movzx edx, word [rcx + r8*2]
mov word [rax + r8*2], dx
inc r8
cmp r8, qword [r14 + 0x38]
jb 0x1400f0d70
mov ecx, dword [rsi + 0x40]
mov edx, 0x2a4d8eb3
add edx, 0x725e1fc
add edx, 0x2d1dd4b2
mov qword [rbx + 0x2e0], rdi
bts ecx, 0xe
mov dword [rbx + 0x2d8], ecx
mov r15d, 0x6b055575
sub r15d, 0x2174af52
xor r15d, 0x6e4ee33d
mov eax, dword [rsi + 0x54]
and ecx, 0x2000
xor eax, edx
mov dword [rbx + 0x2e8], eax
mov eax, dword [rsi + 0x58]
xor eax, edx
mov dword [rbx + 0x2ec], eax
mov eax, dword [rsi + 0x44]
xor eax, edx
mov dword [rbx + 0x2f0], eax
mov eax, dword [rsi + 0x48]
xor eax, edx
mov dword [rbx + 0x2f4], eax
mov rax, qword [rsi + 0x60]
mov qword [rbx + 0x2f8], rax
mov eax, dword [rsi + 0x4c]
xor eax, r15d
mov dword [rbx + 0x308], eax
mov eax, dword [rsi + 0x50]
xor eax, edx
mov byte [rbx + 0x310], dil
neg ecx
mov dword [rbx + 0x30c], eax
pushf
mov edx, 0x6bb50902
xor edx, 0x3115f70f
sub edx, 0x54a03312
sub edx, 0x600caeb
popf
mov qword [rbx + 0x318], rbp
sbb r14, r14
and r14, 0xffffffffffff0100
sub r14, 0xffffffffffff0001
mov rcx, r14
shl rcx, 4
call fcn.140098d00
mov rcx, rax
mov rdx, r14
movaps xmm0, xmmword [0x140146620]
movups xmmword [rcx], xmm0
lea rcx, [rcx + 0x10]
sub rdx, 1
jne 0x1400f0e65
mov qword [rbx + 0x300], rax
mov rdx, rdi
mov rax, qword [rsi + 0x68]
inc rdi
mov ecx, dword [rax + rdx]
xor ecx, r15d
mov dword [rsp + 0x50], ecx
movss xmm0, dword [rsp + 0x50]
mov rax, qword [rsi + 0x68]
movss dword [rsp + 0x20], xmm0
mov ecx, dword [rax + rdx + 4]
xor ecx, r15d
mov dword [rsp + 0x50], ecx
movss xmm0, dword [rsp + 0x50]
mov rax, qword [rsi + 0x68]
movss dword [rsp + 0x24], xmm0
mov ecx, dword [rax + rdx + 8]
xor ecx, r15d
mov dword [rsp + 0x50], ecx
movss xmm0, dword [rsp + 0x50]
mov rax, qword [rsi + 0x68]
movss dword [rsp + 0x28], xmm0
mov ecx, dword [rax + rdx + 0xc]
xor ecx, r15d
mov dword [rsp + 0x50], ecx
movss xmm0, dword [rsp + 0x50]
mov rax, qword [rbx + 0x300]
movss dword [rsp + 0x2c], xmm0
movups xmm1, xmmword [rsp + 0x20]
xorps xmm1, xmmword [0x140146620]
movups xmmword [rdx + rax], xmm1
lea rdx, [rdx + 0x10]
cmp rdi, r14
jl 0x1400f0e87
lea rcx, [rbp + 0xa0]
mov qword [rsp + 0x50], rbx
lea rdx, [rsp + 0x50]
call fcn.1400f09b0
mov rbp, qword [rsp + 0x60]
mov rax, rbx
mov rbx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x68]
nop
add rsp, 0x51d88a78
sub rsp, 0x51d88a48
pop r15
pop r14
pop rdi
ret
Function at 0x1400f2854
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x79f18b1a
add rsp, 0x79f18a6a
mov rsi, rcx
lea rdx, [rcx + 0x298]
lea rcx, [rsp + 0x20]
call fcn.140074340
or ebx, 0xffffffff
mov dword [rsp + 0xc0], ebx
mov rdi, qword [rax]
cmp byte [rdi], 0
je 0x1400f28d5
mov rdx, rdi
lea rcx, [rsp + 0xc0]
mov r8d, 0x452c37eb
sub r8d, 0x2cc3075f
xor r8d, 0x2c97fd32
xor r8d, 0x34fecdbf
inc rdi
call fcn.14008e550
cmp byte [rdi], 0
jne 0x1400f2897
mov ebx, dword [rsp + 0xc0]
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x28]
not ebx
cmp rcx, rax
jne 0x1400f2909
lea rdi, [rsp + 0x28]
xor eax, eax
mov ecx, 0x6f9d1582
xor ecx, 0x675c4d7e
xor ecx, 0x8c1587c
rep stosb byte [rdi], al
jmp 0x1400f290e
call fcn.140098de0
mov eax, dword [rsi + 0x2f0]
lea r11, [rsp + 0xb0]
xor eax, 0x4561
shl eax, 0x10
or eax, dword [rsi + 0x2d8]
mov rsi, qword [r11 + 0x20]
xor eax, ebx
mov rbx, qword [r11 + 0x18]
xor eax, 2
mov rsp, r11
pop rdi
ret

Function at 0x1400f2a60
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
mov r10d, 0xde5d9fb
add r10d, 0x67db8c2
add r10d, 0x141ce34c
add r10d, 0x3610cf58
mov r8d, dword [rcx + 0x2f4]
xor eax, r10d
xor r8d, r10d
xor r9d, r9d
add r8d, r8d
movd xmm2, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x27de451e
mov dword [rsp + 8], eax
movss xmm3, dword [rsp + 8]
mov al, byte [rdx]
cvtdq2ps xmm2, xmm2
test al, al
je 0x1400f2afd
mov r10, qword [rcx + 0x300]
movzx eax, al
inc rdx
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
xorps xmm0, xmmword [0x140146620]
mov al, byte [rdx]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm2
addss xmm1, xmm3
cvttss2si ecx, xmm1
sub ecx, r8d
add r9d, ecx
test al, al
jne 0x1400f2ac1
mov eax, r9d
ret

Function at 0x1400f2bf4
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
mov r10d, 0x16e895b9
xor r10d, 0x2f617c87
xor r10d, 0x123dd5f
add r10d, 0x25e71100
mov r8d, dword [rcx + 0x2f4]
xor eax, r10d
xor r8d, r10d
xor r11d, r11d
add r8d, r8d
mov r9d, r11d
movd xmm2, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x27de451e
mov dword [rsp + 8], eax
movss xmm3, dword [rsp + 8]
movzx eax, word [rdx]
cvtdq2ps xmm2, xmm2
test ax, ax
je 0x1400f2ca4
mov r10, qword [rcx + 0x300]
movzx eax, ax
nop
sub rdx, 0x73c811c1
add rdx, 0x73c811c3
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
xorps xmm0, xmmword [0x140146620]
movzx eax, word [rdx]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm2
addss xmm1, xmm3
cvttss2si ecx, xmm1
sub ecx, r8d
add r9d, ecx
test ax, ax
jne 0x1400f2c5a
mov eax, r9d
ret
Function at 0x1400f2ca8
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
push rdi
neg rsp
sub rsp, 0xffffffffffffff60
neg rsp
xor ebx, ebx
mov rdi, rcx
mov qword [rax + 8], rbx
cmp qword [rcx + 0x2f8], rbx
je 0x1400f2d41
mov edx, dword [rcx + 0x2ec]
mov ecx, 0x3a267b5f
add ecx, 0x2093063f
add ecx, 0x3d7c3c3
mov eax, dword [rdi + 0x2e8]
xor edx, ecx
xor eax, ecx
lea rcx, [rbx - 1]
imul edx, eax
lea eax, [rbx + 4]
movsxd rsi, edx
mul rsi
cmovo rax, rcx
mov rcx, rax
call fcn.140098c90
test rsi, rsi
jle 0x1400f2d5e
mov rcx, qword [rdi + 0x2f8]
mov edx, dword [rcx + rbx*4]
xor edx, 0x24fd0ef4
mov dword [rax + rbx*4], edx
inc rbx
cmp rbx, rsi
jl 0x1400f2d1d
jmp 0x1400f2d5e
lea rdx, [rsp + 0xb0]
call fcn.1400f2eb0
test al, al
je 0x1400f2da9
mov rax, qword [rsp + 0xb0]
lea rcx, [0x14000bb80]
mov qword [rsp + 0x98], 0x56a53e0b
xor qword [rsp + 0x98], 0x6bf025ef
sub qword [rsp + 0x98], 0x3d551bcc
mov qword [rsp + 0x20], rcx
lea rdx, [rsp + 0x20]
mov rcx, qword [rdi + 0x318]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x30], rax
call fcn.1400f1dbc
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x1400f4bac
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r14
push r15
mov rbp, rsp
nop
add rsp, 0x3c69aeb
sub rsp, 0x3c69b4b
mov rbx, rdx
mov rdi, rcx
mov edx, r8d
lea rcx, [rbp - 0x20]
mov r12, r9
call fcn.14007e788
mov r8d, 0x151b1a2c
xor r8d, 0x32750696
sub r8d, 0x276e1cb8
lea rcx, [rbp - 0x20]
mov rdx, rbx
call fcn.14007e814
test al, al
je 0x1400f4e43
mov eax, dword [rdi + 0x2e8]
lea rdx, [rbp - 0x40]
and dword [rbp - 0x28], 0
mov ecx, 0x604c4683
sub ecx, 0x527248d9
add ecx, 0x50b747b7
and dword [rbp - 0x24], 0
xor eax, ecx
mov dword [rbp - 0x38], eax
mov r8d, 0x7c0cbbf9
sub r8d, 0x67813300
sub r8d, 0x148b88d9
mov eax, dword [rdi + 0x2ec]
xor eax, ecx
mov dword [rbp - 0x40], 0xbbe745f
add dword [rbp - 0x40], 0x447dbb98
sub dword [rbp - 0x40], 0x1df3ecb1
mov dword [rbp - 0x34], eax
mov eax, dword [rdi + 0x2f4]
xor eax, ecx
mov dword [rbp - 0x3c], 0x25c1ef87
xor dword [rbp - 0x3c], 0x7442c05f
xor dword [rbp - 0x3c], 0x24ecfef6
xor dword [rbp - 0x3c], 0x756fd10e
mov dword [rbp - 0x30], eax
mov eax, dword [rdi + 0x30c]
xor eax, ecx
lea rcx, [rbp - 0x20]
mov dword [rbp - 0x2c], eax
call fcn.14008070c
test al, al
je 0x1400f4e43
mov r14d, dword [rdi + 0x2d8]
mov edx, 0x37e8d76
xor edx, 0x4ef8bdda
add edx, 0x296ea556
xor edx, 0x76f4d612
and r14d, 0x2000
mov eax, r14d
neg eax
sbb rbx, rbx
and rbx, 0xffffffffffff0100
sub rbx, 0xffffffffffff0001
mov r15, rbx
shl r15, 4
mov rcx, r15
call fcn.140098d00
mov rsi, rax
test rax, rax
je 0x1400f4e43
mov rdx, qword [rdi + 0x300]
xor r8d, r8d
sub rdx, rax
lea edi, [r8 + 1]
movups xmm0, xmmword [rdx + rax]
add r8, rdi
xorps xmm0, xmmword [0x140146620]
movups xmmword [rax], xmm0
lea rax, [rax + 0x10]
cmp r8, rbx
jl 0x1400f4d19
mov rcx, r15
call fcn.140098c90
neg r14d
mov rdx, rax
mov rcx, rsi
mov rbx, rax
sbb r8d, r8d
and r8d, 0xfff01000
neg r8d
add r8d, 0xfff00010
neg r8d
mov r9d, r8d
call fcn.140094bf0
mov r8d, eax
mov dword [rbp - 0x28], eax
mov rdx, rbx
lea rcx, [rbp - 0x20]
call fcn.14008070c
mov rcx, rsi
test al, al
jne 0x1400f4d94
call fcn.140098cb0
mov rcx, rbx
jmp 0x1400f4def
call fcn.140098cb0
mov rcx, rbx
call fcn.140098ca0
mov eax, dword [rbp - 0x34]
imul eax, dword [rbp - 0x38]
movsxd rcx, eax
shl rcx, 2
call fcn.140098c90
mov r8d, dword [rbp - 0x34]
mov rdx, rax
imul r8d, dword [rbp - 0x38]
mov rcx, r12
mov rbx, rax
shl r8d, 2
mov r9d, r8d
call fcn.140094bf0
mov r8d, eax
mov dword [rbp - 0x24], eax
mov rdx, rbx
lea rcx, [rbp - 0x20]
call fcn.14008070c
mov rcx, rbx
test al, al
jne 0x1400f4df9
call fcn.140098ca0
jmp 0x1400f4e43
call fcn.140098ca0
lea rcx, [rbp - 0x20]
call fcn.140080990
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.14007fe9c
test al, al
je 0x1400f4e43
mov r8d, 0xc7009f2
add r8d, 0xa3d6de6
xor r8d, 0x16ad77f8
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x20]
call fcn.14008070c
test al, al
jne 0x1400f4e46
xor dil, dil
lea rcx, [rbp - 0x20]
call fcn.14007e80c
lea r11, [rsp + 0x60]
mov al, dil
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
Function at 0x1400f77c0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x60
mov rbp, qword [rcx + 0xaf0]
lea rax, [rsp + 0x28]
mov rbx, qword [rcx + 0xab8]
xorps xmm0, xmm0
mov r14, rdx
mov qword [rsp + 0x20], rax
mov rsi, rcx
lea rcx, [rsp + 0x20]
lea rdx, [rbp + 1]
movups xmmword [rsp + 0x28], xmm0
movups xmmword [rsp + 0x38], xmm0
movups xmmword [rsp + 0x48], xmm0
call fcn.140017814
mov edi, 0x7a8b73ec
sub edi, 0x13afc87
xor edi, 0x3b4b09fb
add edi, 0x12cbf842
mov r9, rax
mov ecx, edi
mov r15d, 0x3b735682
add r15d, 0xee1bcee
sub r15d, 0x4a551271
test rbp, rbp
je 0x1400f7885
mov rdx, rax
sub rbx, rax
mov r8, rbp
nop dword [rax]
nop dword [rax + rax]
movzx eax, cx
lea rdx, [rdx + 2]
and ax, r15w
ror ecx, 8
xor ax, word [rbx + rdx - 2]
mov word [rdx - 2], ax
sub r8, 1
jne 0x1400f7864
xor ebx, ebx
mov word [r9 + rbp*2], bx
cmp word [rsi + 0xb40], bx
je 0x1400f78d0
mov edx, ebx
cmp qword [rsi + 0xaf0], rbx
jbe 0x1400f78d0
nop dword [rax + rax]
mov rax, qword [rsp + 0x20]
movzx ecx, word [rsi + 0xb40]
mov word [rax + rdx*2], cx
inc rdx
cmp rdx, qword [rsi + 0xaf0]
jb 0x1400f78b0
mov rsi, qword [rsp + 0x20]
lea rax, [r14 + 8]
xorps xmm0, xmm0
mov qword [r14], rax
movups xmmword [rax], xmm0
nop
movabs rdx, 0xffffffff2b550161
add rdx, 0x193a19b6
add rdx, 0xdf65240
add rdx, 0x7fffffff
add rdx, 0x2d7a92a9
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
nop dword [rax]
inc rdx
cmp word [rsi + rdx*2], bx
jne 0x1400f7914
mov rcx, r14
mov qword [r14 + 0x38], rdx
call fcn.140017814
cmp qword [r14 + 0x38], rbx
jbe 0x1400f7960
sub rsi, rax
nop
movzx ecx, di
lea rax, [rax + 2]
and cx, r15w
ror edi, 8
xor cx, word [rsi + rax - 2]
inc rbx
mov word [rax - 2], cx
cmp rbx, qword [r14 + 0x38]
jb 0x1400f793c
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x28]
cmp rcx, rax
jne 0x1400f7998
lea rdi, [rsp + 0x28]
xor eax, eax
mov ecx, 0x53ecd74c
sub ecx, 0xcccd443
xor ecx, 0x3425b8d2
xor ecx, 0x7305bbeb
rep stosb byte [rdi], al
jmp 0x1400f799d
call fcn.140098de0
lea r11, [rsp + 0x60]
mov rax, r14
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rdi
ret
Function at 0x140104ee0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
nop
sub rsp, 0x3759711a
add rsp, 0x375970fa
mov r8, qword [rcx + 0x648]
xor esi, esi
mov rbx, rcx
test r8, r8
je 0x140104f1b
mov rdi, qword [rcx + 0x640]
jmp 0x140104f22
mov rdi, rsi
nop dword [rax]
test r8, r8
je 0x140104f3b
mov rax, qword [rbx + 0x640]
lea rcx, [rax + r8*8]
jmp 0x140104f3e
mov rcx, rsi
cmp rdi, rcx
je 0x140105161
mov rax, qword [rdi]
cmp qword [rax + 0x28], rdx
je 0x140104f63
neg rdi
add rdi, 0xfffffffffffffff8
neg rdi
jmp 0x140104f22
test r8, r8
je 0x14010502c
cmp rdi, qword [rbx + 0x640]
jb 0x14010502c
mov rax, qword [rbx + 0x640]
lea rcx, [rax + r8*8]
cmp rdi, rcx
jae 0x14010502c
mov rdx, rdi
nop word [rax + rax]
mov rcx, qword [rbx + 0x648]
test rcx, rcx
je 0x140104fba
mov rax, qword [rbx + 0x640]
lea rax, [rax + rcx*8]
jmp 0x140104fbd
mov rax, rsi
sub rax, 8
cmp rdx, rax
jae 0x140104fe5
mov rax, qword [rdx + 8]
mov qword [rdx], rax
nop
sub rdx, 0x640d2f51
add rdx, 0x640d2f59
jmp 0x140104f9a
test rcx, rcx
je 0x14010502c
lea rax, [rcx - 1]
mov qword [rbx + 0x648], rax
test rax, rax
jne 0x14010502c
mov rcx, qword [rbx + 0x640]
test rcx, rcx
je 0x14010501e
call fcn.140098de0
mov qword [rbx + 0x640], rsi
mov qword [rbx + 0x650], rsi
mov qword [rbx + 0x648], rsi
mov rcx, qword [rdi]
test rcx, rcx
je 0x14010504e
mov rax, qword [rcx]
mov edx, 0x403dfae
add edx, 0x718abbe0
xor edx, 0x758e9b8f
call qword [rax]
cmp qword [rbx + 0x648], rsi
je 0x140105161
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400ef960
mov rcx, qword [rsp + 0x30]
mov r10d, 0x4843aab4
xor r10d, 0x5df13ad0
sub r10d, 0x15b28fc4
mov r8d, dword [rsp + 0x34]
mov eax, ecx
mov r9, qword [rbx + 0x648]
sub eax, r8d
cdq
idiv dword [rbx + 0x648]
cmp eax, r10d
cmovl r10d, eax
test r9, r9
je 0x140105119
mov rdx, qword [rbx + 0x640]
lea r11, [rdx + r9*8]
cmp rdx, r11
je 0x140105119
mov r9d, r10d
xor r9d, 0x5e914561
xor r8d, 0x5e914561
nop dword [rax]
mov rcx, qword [rdx]
mov eax, esi
xor eax, 0x5e914561
add esi, r10d
sub rdx, 0xfffffffffffffff8
mov dword [rcx + 0x30], eax
mov dword [rcx + 0x34], 0x5ef6bc53
sub dword [rcx + 0x34], 0xbaa7aac
xor dword [rcx + 0x34], 0xddd04c6
mov dword [rcx + 0x38], r9d
mov dword [rcx + 0x3c], r8d
cmp rdx, r11
jne 0x1401050d5
mov rcx, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x34]
mov rax, qword [rbx + 0x660]
test rax, rax
je 0x140105159
sub ecx, r8d
mov dword [rax + 0x14], 0x6eba0fb5
xor dword [rax + 0x14], 0x7c8d156a
add dword [rax + 0x14], 0x4c5a2a82
xor ecx, 0x5e914561
xor r8d, 0x5e914561
mov dword [rax + 0x10], ecx
mov dword [rax + 0x18], r8d
mov dword [rax + 0x1c], r8d
mov rcx, rbx
call fcn.1400ef140
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
nop
sub rsp, 0x9e7f914
add rsp, 0x9e7f934
pop rdi
ret