joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140031950
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
neg rsp
sub rsp, 0xffffffffffffffd0
neg rsp
mov dword [rcx + 8], 0x3859853
xor dword [rcx + 8], 0x3b5cbf2b
sub dword [rcx + 8], 0x38d92777
lea rsi, [rcx + 0x298]
xorps xmm0, xmm0
lea rax, [0x140001a98]
mov qword [rcx], rax
mov r14, rdx
lea rax, [rsi + 8]
mov rdi, rcx
mov qword [rsi], rax
xor ebp, ebp
mov qword [rcx + 0x290], rbp
mov rbx, r8
movups xmmword [rax], xmm0
mov rcx, rsi
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
mov rdx, qword [r8 + 0x38]
mov qword [rsi + 0x38], rdx
call fcn.14000ed40
mov r8d, ebp
cmp qword [rsi + 0x38], rbp
jbe 0x1400319f2
nop word [rax + rax]
mov rcx, qword [rbx]
movzx edx, word [rcx + r8*2]
mov word [rax + r8*2], dx
inc r8
cmp r8, qword [rsi + 0x38]
jb 0x1400319d8
mov ecx, dword [rbx + 0x40]
mov esi, 0x2f237038
xor esi, 0x153c585
add esi, 0x47f52544
sub esi, 0x7664db02
mov qword [rdi + 0x2e0], rbp
bts ecx, 0xe
mov dword [rdi + 0x2d8], ecx
mov edx, 0xc892620
add edx, 0x2f95a313
sub edx, 0x3c1ec923
mov eax, dword [rbx + 0x54]
xor eax, 0x7954299c
mov dword [rdi + 0x2e8], eax
mov eax, dword [rbx + 0x58]
xor eax, 0x7954299c
mov dword [rdi + 0x2ec], eax
mov eax, dword [rbx + 0x44]
xor eax, 0x7954299c
mov dword [rdi + 0x2f0], eax
mov eax, dword [rbx + 0x48]
xor eax, 0x7954299c
mov dword [rdi + 0x2f4], eax
mov rax, qword [rbx + 0x60]
mov qword [rdi + 0x2f8], rax
mov eax, dword [rbx + 0x4c]
xor eax, 0x37ce32ec
mov dword [rdi + 0x308], eax
mov eax, dword [rbx + 0x50]
xor eax, 0x7954299c
mov byte [rdi + 0x310], bpl
bt ecx, 0xd
mov dword [rdi + 0x30c], eax
pushf
mov eax, 0x5dd8f267
xor eax, 0x6ca32c8c
xor eax, 0x78abf13e
sub eax, 0x49d02ed6
popf
mov qword [rdi + 0x318], r14
cmovb esi, eax
mov ecx, esi
shl rcx, 4
call fcn.140095e10
mov rcx, rax
mov edx, esi
nop dword [rax]
movaps xmm0, xmmword [0x1404a1540]
movups xmmword [rcx], xmm0
lea rcx, [rcx + 0x10]
sub rdx, 1
jne 0x140031acd
mov qword [rdi + 0x300], rax
mov rdx, rbp
nop
mov rax, qword [rbx + 0x68]
lea rdx, [rdx + 0x10]
inc rbp
mov ecx, dword [rax + rdx - 0x10]
xor ecx, 0x37ce32ec
mov dword [rsp + 0x50], ecx
movss xmm3, dword [rsp + 0x50]
mov rax, qword [rbx + 0x68]
shufps xmm3, xmm3, 0xe1
mov ecx, dword [rax + rdx - 0xc]
xor ecx, 0x37ce32ec
mov dword [rsp + 0x50], ecx
movss xmm0, dword [rsp + 0x50]
mov rax, qword [rbx + 0x68]
movss xmm3, xmm0
shufps xmm3, xmm3, 0xc6
mov ecx, dword [rax + rdx - 8]
xor ecx, 0x37ce32ec
mov dword [rsp + 0x50], ecx
movss xmm1, dword [rsp + 0x50]
mov rax, qword [rbx + 0x68]
movss xmm3, xmm1
shufps xmm3, xmm3, 0x27
mov ecx, dword [rax + rdx - 4]
xor ecx, 0x37ce32ec
mov dword [rsp + 0x50], ecx
movss xmm2, dword [rsp + 0x50]
mov rax, qword [rdi + 0x300]
movss xmm3, xmm2
shufps xmm3, xmm3, 0x39
xorps xmm3, xmmword [0x1404a1540]
movups xmmword [rdx + rax - 0x10], xmm3
cmp rbp, rsi
jl 0x140031af1
lea rcx, [r14 + 0xa0]
mov qword [rsp + 0x50], rdi
lea rdx, [rsp + 0x50]
call fcn.140011f50
mov rbx, qword [rsp + 0x58]
mov rax, rdi
mov rbp, qword [rsp + 0x60]
add rsp, 0x30
pop r14
pop rdi
pop rsi
ret
Function at 0x140033aa0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x69651b00
add rsp, 0x69651a50
mov rsi, rcx
lea rdx, [rcx + 0x298]
lea rcx, [rsp + 0x20]
call fcn.1400196e0
mov ebx, 0xabca59d
xor ebx, 0xa49ca25
xor ebx, 0x63eccd72
add ebx, 0x9ce65d35
mov dword [rsp + 0xc0], ebx
mov rdi, qword [rax]
cmp byte [rdi], 0
je 0x140033b3b
nop word [rax + rax]
mov rdx, rdi
lea rcx, [rsp + 0xc0]
mov r8d, 0x7adbcaef
xor r8d, 0x65f94abb
add r8d, 0x24808f56
sub r8d, 0x43a30fa9
inc rdi
call fcn.140081670
cmp byte [rdi], 0
jne 0x140033afd
mov ebx, dword [rsp + 0xc0]
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x28]
not ebx
cmp rcx, rax
jne 0x140033b75
lea rdi, [rsp + 0x28]
xor eax, eax
mov ecx, 0x196b341c
add ecx, 0x3d6488b5
sub ecx, 0x1fb55e35
sub ecx, 0x371a5e1c
rep stosb byte [rdi], al
jmp 0x140033b7a
call fcn.140095ef0
mov eax, dword [rsi + 0x2f0]
lea r11, [rsp + 0xb0]
xor eax, 0x299c
shl eax, 0x10
or eax, dword [rsi + 0x2d8]
mov rsi, qword [r11 + 0x20]
xor eax, ebx
mov rbx, qword [r11 + 0x18]
xor eax, 2
mov rsp, r11
pop rdi
ret

Function at 0x140033bd0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
sub rsp, 0x40
mov eax, dword [rcx + 0x2e8]
mov r14, rdx
mov edi, dword [rcx + 0x2f4]
xor eax, 0x7954299c
movaps xmmword [rsp + 0x30], xmm6
mov rbp, rcx
movaps xmmword [rsp + 0x20], xmm7
xor ebx, ebx
xor edi, 0x7954299c
xor edx, edx
movd xmm6, eax
add edi, edi
mov eax, dword [rcx + 0x308]
mov esi, ebx
xor eax, 0x37ce32ec
mov rcx, r14
mov dword [rsp + 0x60], eax
movss xmm7, dword [rsp + 0x60]
cvtdq2ps xmm6, xmm6
call fcn.140053340
test ax, ax
je 0x140033c8e
nop word [rax + rax]
movzx ecx, ax
inc rsi
mov rax, qword [rbp + 0x300]
add rcx, rcx
mov rdx, rsi
movups xmm0, xmmword [rax + rcx*8]
xorps xmm0, xmmword [0x1404a1540]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm6
addss xmm1, xmm7
cvttss2si ecx, xmm1
sub ecx, edi
add ebx, ecx
mov rcx, r14
call fcn.140053340
test ax, ax
jne 0x140033c44
mov rbp, qword [rsp + 0x70]
mov eax, ebx
mov rbx, qword [rsp + 0x68]
movaps xmm6, xmmword [rsp + 0x30]
movaps xmm7, xmmword [rsp + 0x20]
nop
sub rsp, 0x32fa0317
add rsp, 0x32fa0357
pop r14
pop rdi
pop rsi
ret

Function at 0x140033cc0
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
xor r8d, r8d
mov r9d, dword [rcx + 0x2f4]
xor eax, 0x7954299c
xor r9d, 0x7954299c
add r9d, r9d
movd xmm3, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x37ce32ec
mov dword [rsp + 8], eax
movss xmm4, dword [rsp + 8]
movzx eax, byte [rdx]
cvtdq2ps xmm3, xmm3
test al, al
je 0x140033d4d
mov r10, qword [rcx + 0x300]
movaps xmm2, xmmword [0x1404a1540]
movzx eax, al
inc rdx
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
movzx eax, byte [rdx]
xorps xmm0, xmm2
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm3
addss xmm1, xmm4
cvttss2si ecx, xmm1
sub ecx, r9d
add r8d, ecx
test al, al
jne 0x140033d14
mov eax, r8d
ret
Function at 0x140033d60
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
nop
sub rsp, 0x2c3ba908
add rsp, 0x2c3ba8c8
mov eax, dword [rcx + 0x2e8]
mov r14, rdx
mov edi, dword [rcx + 0x2f4]
xor eax, 0x7954299c
movaps xmmword [rsp + 0x30], xmm6
mov rbp, rcx
movaps xmmword [rsp + 0x20], xmm7
xor ebx, ebx
xor edi, 0x7954299c
xor edx, edx
movd xmm6, eax
add edi, edi
mov eax, dword [rcx + 0x308]
mov esi, ebx
xor eax, 0x37ce32ec
mov rcx, r14
mov dword [rsp + 0x60], eax
movss xmm7, dword [rsp + 0x60]
cvtdq2ps xmm6, xmm6
call fcn.140053340
test ax, ax
je 0x140033e29
nop word [rax + rax]
movzx ecx, ax
inc rsi
mov rax, qword [rbp + 0x300]
add rcx, rcx
mov rdx, rsi
movups xmm0, xmmword [rax + rcx*8]
xorps xmm0, xmmword [0x1404a1540]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm6
addss xmm1, xmm7
cvttss2si ecx, xmm1
sub ecx, edi
add ebx, ecx
mov rcx, r14
call fcn.140053340
test ax, ax
jne 0x140033ddf
mov rbp, qword [rsp + 0x70]
mov eax, ebx
mov rbx, qword [rsp + 0x68]
movaps xmm6, xmmword [rsp + 0x30]
movaps xmm7, xmmword [rsp + 0x20]
sub rsp, 0xffffffffffffffc0
pop r14
pop rdi
pop rsi
ret

Function at 0x140033e50
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
xor r8d, r8d
mov r9d, dword [rcx + 0x2f4]
xor eax, 0x7954299c
xor r9d, 0x7954299c
add r9d, r9d
movd xmm3, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x37ce32ec
mov dword [rsp + 8], eax
movss xmm4, dword [rsp + 8]
movzx eax, word [rdx]
cvtdq2ps xmm3, xmm3
test ax, ax
je 0x140033eeb
mov r10, qword [rcx + 0x300]
movaps xmm2, xmmword [0x1404a1540]
movzx eax, ax
nop
sub rdx, 0x5ca6f817
add rdx, 0x5ca6f819
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
movzx eax, word [rdx]
xorps xmm0, xmm2
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm3
addss xmm1, xmm4
cvttss2si ecx, xmm1
sub ecx, r9d
add r8d, ecx
test ax, ax
jne 0x140033ea5
mov eax, r8d
ret
Function at 0x140033ef0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
add rsp, 0xffffffffffffff60
cmp qword [rcx + 0x2f8], 0
mov rdi, rcx
pushf
mov qword [rsp + 0xb2], 0xb0f8bae
add qword [rsp + 0xb2], 0x35ea16cf
xor qword [rsp + 0xb2], 0x40f9a27d
popf
pushf
movabs rsi, 0xffffffff2f5452b4
add rsi, 0x2b12835d
sub rsi, 0x207ffed4
add rsi, 0x7fffffff
xor rsi, 0x461928c3
popf
je 0x1400340a5
mov edx, dword [rcx + 0x2ec]
mov eax, dword [rcx + 0x2e8]
xor edx, 0x7954299c
xor eax, 0x7954299c
imul edx, eax
mov eax, 0x10b4ad2b
add eax, 0x20a8d090
sub eax, 0x6257dd0
sub eax, 0x2b37ffe7
movsxd rbx, edx
mul rbx
cmovo rax, rsi
mov rcx, rax
call fcn.140095da0
mov qword [rsp + 0xb0], rax
test rbx, rbx
jle 0x140033fdf
xor edx, edx
mov rax, qword [rdi + 0x2f8]
mov ecx, dword [rax + rdx*4]
mov rax, qword [rsp + 0xb0]
xor ecx, 0x7d1d1101
mov dword [rax + rdx*4], ecx
inc rdx
cmp rdx, rbx
jl 0x140033fb8
mov rbx, qword [rdi + 0x318]
lea rax, [0x140001bb8]
mov qword [rsp + 0x20], rax
movabs rdx, 0x25f71030693785d7
sub rdx, 0x59409cf6
add rdx, 0x19657d6f
add rdx, 0x41d7b59c
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x98], 0x60b12b5c
add qword [rsp + 0x98], 0x1d37c0cf
sub qword [rsp + 0x98], 0x50250ea9
xor qword [rsp + 0x98], 0x2dc3dd9a
mov qword [rsp + 0x28], rdi
mov rcx, qword gs:[0x30]
mov rax, qword [rbx + 0x98]
xor rax, rdx
cmp rax, qword [rcx + 0x48]
jne 0x1400340bf
lea rcx, [rsp + 0x20]
call fcn.140032af0
movzx edi, al
mov rax, qword [rsp + 0x98]
cmp rax, 0x78
ja 0x1400341c1
test rax, rax
je 0x140034207
mov rax, qword [rsp + 0x20]
mov r8, qword [rax]
jmp 0x1400341ed
lea rdx, [rsp + 0xb0]
call fcn.140034220
test al, al
jne 0x140033fdf
jmp 0x14003420b
mov rax, qword gs:[0x30]
mov rdi, qword [rax + 0x48]
lock inc dword [rbx + 0xf0]
je 0x1400340f7
cmp rdi, qword [rbx + 0xe0]
je 0x14003419d
mov rcx, qword [rbx + 0xe8]
xor r8d, r8d
xor edx, edx
call fcn.140053bd0
mov qword [rbx + 0xe0], rdi
mov dword [rbx + 0xf4], 0x61dab3a4
sub dword [rbx + 0xf4], 0x2530f11a
xor dword [rbx + 0xf4], 0x8cf301e
sub dword [rbx + 0xf4], 0x3466f293
lea rcx, [rbx + 0xc0]
lea rdx, [rsp + 0x20]
call fcn.140031650
test rax, rax
setne dil
sub dword [rbx + 0xf4], 1
jne 0x1400341a8
mov qword [rbx + 0xe0], 0x2e4a38d3
sub qword [rbx + 0xe0], 0x10017e71
sub qword [rbx + 0xe0], 0x13a08865
sub qword [rbx + 0xe0], 0xaa831fd
lock xadd dword [rbx + 0xf0], esi
dec esi
cmp esi, 0xffffffff
je 0x1400341af
mov rcx, qword [rbx + 0xe8]
xor edx, edx
call fcn.140053b90
jmp 0x1400341af
inc dword [rbx + 0xf4]
jmp 0x140034126
lock dec dword [rbx + 0xf0]
mov rax, qword [rsp + 0x98]
cmp rax, 0x78
jbe 0x1400341dc
mov rcx, qword [rsp + 0x20]
xor edx, edx
mov rax, qword [rcx]
call qword [rax]
mov rcx, qword [rsp + 0x20]
call fcn.140095ef0
jmp 0x140034207
test rax, rax
je 0x140034207
mov rcx, qword [rsp + 0x20]
mov r8, qword [rcx]
lea rax, [0x140032b50]
cmp r8, rax
je 0x140034207
xor edx, edx
lea rcx, [rsp + 0x20]
call r8
movzx eax, dil
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x14003f430
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
add rsp, 0xffffffffffffffa0
mov rbp, qword [rcx + 0xaf0]
lea rax, [rsp + 0x28]
mov rbx, qword [rcx + 0xab8]
xorps xmm0, xmm0
mov r14, rdx
mov qword [rsp + 0x20], rax
mov rsi, rcx
lea rcx, [rsp + 0x20]
lea rdx, [rbp + 1]
movups xmmword [rsp + 0x28], xmm0
movups xmmword [rsp + 0x38], xmm0
movups xmmword [rsp + 0x48], xmm0
call fcn.14000ed40
mov edi, 0x461fe0a3
sub edi, 0x357272ff
add edi, 0x5ce0bc6
mov r9, rax
mov ecx, edi
mov r15d, 0x53f98107
add r15d, 0x1b4e29a8
sub r15d, 0x6f47a9b0
test rbp, rbp
je 0x14003f4ef
mov rdx, rax
sub rbx, rax
mov r8, rbp
nop dword [rax]
nop dword [rax + rax]
movzx eax, cx
lea rdx, [rdx + 2]
and ax, r15w
ror ecx, 8
xor ax, word [rbx + rdx - 2]
mov word [rdx - 2], ax
sub r8, 1
jne 0x14003f4ce
xor ebx, ebx
mov word [r9 + rbp*2], bx
cmp word [rsi + 0xb40], bx
je 0x14003f53a
mov edx, ebx
cmp qword [rsi + 0xaf0], rbx
jbe 0x14003f53a
nop dword [rax + rax]
mov rax, qword [rsp + 0x20]
movzx ecx, word [rsi + 0xb40]
mov word [rax + rdx*2], cx
inc rdx
cmp rdx, qword [rsi + 0xaf0]
jb 0x14003f51a
mov rsi, qword [rsp + 0x20]
lea rax, [r14 + 8]
xorps xmm0, xmm0
mov qword [r14], rax
movups xmmword [rax], xmm0
nop
movabs rdx, 0xffffffff3bc28236
xor rdx, 0x79b7bc5f
add rdx, 0x7fffffff
add rdx, 0x3d8ac197
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
nop dword [rax]
inc rdx
cmp word [rsi + rdx*2], bx
jne 0x14003f577
mov rcx, r14
mov qword [r14 + 0x38], rdx
call fcn.14000ed40
cmp qword [r14 + 0x38], rbx
jbe 0x14003f5c3
sub rsi, rax
nop
movzx ecx, di
lea rax, [rax + 2]
and cx, r15w
ror edi, 8
xor cx, word [rsi + rax - 2]
inc rbx
mov word [rax - 2], cx
cmp rbx, qword [r14 + 0x38]
jb 0x14003f59f
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x28]
cmp rcx, rax
jne 0x14003f5f5
lea rdi, [rsp + 0x28]
xor eax, eax
mov ecx, 0x7fd8a698
xor ecx, 0x1e892bd6
sub ecx, 0x61518d1e
rep stosb byte [rdi], al
jmp 0x14003f5fa
call fcn.140095ef0
lea r11, [rsp + 0x60]
mov rax, r14
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rdi
ret
Function at 0x140047c30
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
nop
add rsp, 0x52cbd816
sub rsp, 0x52cbd836
mov r8, qword [rcx + 0x648]
xor esi, esi
mov rbx, rcx
test r8, r8
je 0x140047c6b
mov rdi, qword [rcx + 0x640]
jmp 0x140047c72
mov rdi, rsi
nop dword [rax]
test r8, r8
je 0x140047c8b
mov rax, qword [rbx + 0x640]
lea rcx, [rax + r8*8]
jmp 0x140047c8e
mov rcx, rsi
cmp rdi, rcx
je 0x140047ec6
mov rax, qword [rdi]
cmp qword [rax + 0x28], rdx
je 0x140047cb8
nop
add rdi, 0x43d0f4cb
sub rdi, 0x43d0f4c3
jmp 0x140047c72
test r8, r8
je 0x140047d8a
cmp rdi, qword [rbx + 0x640]
jb 0x140047d8a
mov rax, qword [rbx + 0x640]
lea rcx, [rax + r8*8]
cmp rdi, rcx
jae 0x140047d8a
mov rdx, rdi
nop word [rax + rax]
mov rcx, qword [rbx + 0x648]
test rcx, rcx
je 0x140047d0f
mov rax, qword [rbx + 0x640]
lea rax, [rax + rcx*8]
jmp 0x140047d12
mov rax, rsi
nop
add rax, 0xffffffffbcb12e96
sub rax, 0xffffffffbcb12e9e
cmp rdx, rax
jae 0x140047d43
mov rax, qword [rdx + 8]
mov qword [rdx], rax
nop
sub rdx, 0x4bf915e
add rdx, 0x4bf9166
jmp 0x140047cef
test rcx, rcx
je 0x140047d8a
lea rax, [rcx - 1]
mov qword [rbx + 0x648], rax
test rax, rax
jne 0x140047d8a
mov rcx, qword [rbx + 0x640]
test rcx, rcx
je 0x140047d7c
call fcn.140095ef0
mov qword [rbx + 0x640], rsi
mov qword [rbx + 0x650], rsi
mov qword [rbx + 0x648], rsi
mov rcx, qword [rdi]
test rcx, rcx
je 0x140047dac
mov rax, qword [rcx]
mov edx, 0x5fc93771
xor edx, 0x1dbd2ec8
sub edx, 0x427419b8
call qword [rax]
cmp qword [rbx + 0x648], rsi
je 0x140047ec6
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.140038af0
mov rcx, qword [rsp + 0x30]
mov r10d, 0x16f85b55
xor r10d, 0x25117bc5
sub r10d, 0x33e91ff0
mov r8d, dword [rsp + 0x34]
mov eax, ecx
mov r9, qword [rbx + 0x648]
sub eax, r8d
cdq
idiv dword [rbx + 0x648]
cmp eax, r10d
cmovl r10d, eax
test r9, r9
je 0x140047e7e
mov rdx, qword [rbx + 0x640]
lea r11, [rdx + r9*8]
cmp rdx, r11
je 0x140047e7e
mov r9d, r10d
xor r9d, 0x7954299c
xor r8d, 0x7954299c
nop dword [rax]
mov rcx, qword [rdx]
mov eax, esi
xor eax, 0x7954299c
add esi, r10d
add rdx, 8
mov dword [rcx + 0x30], eax
mov dword [rcx + 0x34], 0x6ce13ce7
xor dword [rcx + 0x34], 0x4f2c2190
add dword [rcx + 0x34], 0x2b9f8774
xor dword [rcx + 0x34], 0x36388d77
mov dword [rcx + 0x38], r9d
mov dword [rcx + 0x3c], r8d
cmp rdx, r11
jne 0x140047e33
mov rcx, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x34]
mov rax, qword [rbx + 0x660]
test rax, rax
je 0x140047ebe
sub ecx, r8d
mov dword [rax + 0x14], 0x546b5f01
xor dword [rax + 0x14], 0x736aa0ba
add dword [rax + 0x14], 0x525229e1
xor ecx, 0x7954299c
xor r8d, 0x7954299c
mov dword [rax + 0x10], ecx
mov dword [rax + 0x18], r8d
mov dword [rax + 0x1c], r8d
mov rcx, rbx
call fcn.140037ac0
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
nop
add rsp, 0x2842a1f1
sub rsp, 0x2842a1d1
pop rdi
ret
Function at 0x140047ef0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x20
mov rax, qword [rcx]
mov rbx, rcx
call qword [rax + 0x78]
mov rdx, qword [rbx + 0x648]
mov rcx, rax
mov qword [rsp + 0x30], rax
call fcn.1400383e0
lea rcx, [rbx + 0x640]
lea rdx, [rsp + 0x30]
call fcn.14002ce70
mov rcx, rbx
sub rsp, 0xffffffffffffffe0
pop rbx
jmp 0x140047ef0
push rbx
nop
sub rsp, 0x38020cdf
add rsp, 0x38020cbf
cmp qword [rcx + 0x648], 0
mov rbx, rcx
je 0x140048036
lea rdx, [rsp + 0x30]
call fcn.140038af0
mov r8, qword [rsp + 0x30]
mov r11d, 0x76a44ef0
xor r11d, 0x4cd3cac6
xor r11d, 0x12e89e2e
sub r11d, 0x289f1978
mov r9d, dword [rsp + 0x34]
mov eax, r8d
sub eax, r9d
cdq
idiv dword [rbx + 0x648]
mov rdx, qword [rbx + 0x648]
cmp eax, r11d
cmovl r11d, eax
xor r10d, r10d
test rdx, rdx
je 0x140047fec
mov rax, qword [rbx + 0x640]
mov qword [rsp + 0x38], rdi
lea rdi, [rax + rdx*8]
cmp rax, rdi
je 0x140047fe7
mov r8d, r11d
xor r8d, 0x7954299c
xor r9d, 0x7954299c
nop word [rax + rax]
mov rdx, qword [rax]
mov ecx, r10d
xor ecx, 0x7954299c
add r10d, r11d
nop
add rax, 0x75121b25
sub rax, 0x75121b1d
mov dword [rdx + 0x30], ecx
mov dword [rdx + 0x34], 0x716f4f7b
xor dword [rdx + 0x34], 0x423de32
add dword [rdx + 0x34], 0x4079853
mov dword [rdx + 0x38], r8d
mov dword [rdx + 0x3c], r9d
cmp rax, rdi
jne 0x140047f98
mov r8, qword [rsp + 0x30]
mov r9d, dword [rsp + 0x34]
mov rdi, qword [rsp + 0x38]
mov rax, qword [rbx + 0x660]
test rax, rax
je 0x14004802e
sub r8d, r9d
mov dword [rax + 0x14], 0x2cae0738
add dword [rax + 0x14], 0x298497ee
add dword [rax + 0x14], 0x23218a76
xor r8d, 0x7954299c
xor r9d, 0x7954299c
mov dword [rax + 0x10], r8d
mov dword [rax + 0x18], r9d
mov dword [rax + 0x1c], r9d
mov rcx, rbx
call fcn.140037ac0
nop
sub rsp, 0x4f6793a8
add rsp, 0x4f6793c8
pop rbx
ret

Function at 0x140051bc0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov dword [rsp - 0x14], 0x7e8376d0
xchg rdx, rbx
mov rdx, rbx
xchg rdx, rbx
xchg rdi, r12
mov r12, rcx
xchg rdi, r12
nop
movabs rdx, 0xffffffff7274b700
sub rdx, 0x624bd6ce
add rdx, 0x5446da85
sub rdx, 0xb6518c1
add rdx, 0x7fffffff
add rdx, 0x26f55e0a
nop word [rax + rax]
xchg r12, r12
inc rdx
cmp word [rbx + rdx*2], 0
jne 0x140051c1e
mov rdi, rdi
mov qword [rcx + 0x38], rdx
call fcn.14000ed40
xor r8d, r8d
xchg rbx, rbx
mov edx, 0xa880333
add edx, 0x751a47dd
xor edx, 0x221e94d9
xor edx, 0x4bc7a6a3
cmp qword [rdi + 0x38], r8
mov dword [rsp - 0x34], 0x69700f4e
jbe 0x140051cc7
sub rbx, rax
mov r9d, 0x4a52d3f6
xor r9d, 0x493cc590
add r9d, 0x36d06a98
sub r9d, 0x3a3e7fff
nop word [rax + rax]
xchg rsp, rsp
movzx ecx, dx
lea rax, [rax + 2]
and cx, r9w
ror edx, 2
ror edx, 2
ror edx, 2
ror edx, 1
ror edx, 1
xor cx, word [rbx + rax - 2]
mov rcx, rcx
inc r8
mov word [rax - 2], cx
cmp r8, qword [rdi + 0x38]
jb 0x140051c8e
mov dword [rsp - 0x38], 0x596ea6bf
xchg rbx, r13
mov r13, qword [rsp + 0x30]
xchg r13, rbx
xchg rdi, r14
mov rax, r14
xchg rdi, r14
neg rsp
add rsp, 0xffffffffffffffe0
neg rsp
nop
mov rdi, qword [rsp]
add rsp, 8
ret
Function at 0x140052690
Capabilities:
Encode data using xor

Disassembly:
xchg r15, rbx
mov qword [rsp + 8], r15
xchg rbx, r15
mov qword [rsp + 0x10], rsi
nop
mov qword [rsp - 8], rdi
sub rsp, 8
neg rsp
sub rsp, 0xffffffffffffffe0
neg rsp
mov rsi, qword [rcx + 0x38]
xchg rdx, rbx
mov rdx, rbx
xchg rbx, rdx
xchg r8, r10
mov r10, qword [rdx + 0x38]
xchg r8, r10
xchg rcx, rdi
mov rcx, rdi
xchg rdi, rcx
add r8, rsi
mov dword [rsp - 0x10], esi
xchg rsi, rsp
mov rdx, rsp
xchg rsi, rsp
xchg r8, r14
mov qword [rcx + 0x38], r14
xchg r8, r14
call fcn.1400533a0
xchg r13, r9
mov r13, qword [rbx]
xchg r9, r13
mov ecx, esi
and ecx, 3
mov rsi, rsi
mov r8d, 0x5f6187c2
add r8d, 0x149fac42
sub r8d, 0x5915058d
sub r8d, 0x470b50d
shl ecx, 2
shl ecx, 1
mov edx, r8d
ror edx, cl
xchg r10, rax
mov rax, r10
xchg r10, rax
xor ecx, ecx
mov dword [rsp - 0x20], 0x393b862d
cmp qword [rbx + 0x38], rcx
jbe 0x1400527cd
lea rax, [rsi + rsi]
mov r11d, 0x59b8d80e
add r11d, 0x194f0b84
xor r11d, 0x6594ab80
sub r11d, 0x11a63711
xor r11d, 0x4ed11fe
sub rax, r9
mov dword [rsp - 0xc], 0x43682eeb
add r10, rax
nop dword [rax]
movzx eax, dx
lea r9, [r9 + 2]
mov dword [rsp - 0x1c], 0x54bc5ab9
xor ax, r8w
ror edx, 3
ror edx, 3
ror edx, 1
ror edx, 1
and ax, r11w
xchg r8, r8
ror r8d, 3
ror r8d, 3
ror r8d, 1
ror r8d, 1
xor ax, word [r9 - 2]
inc rcx
mov word [r10 + r9 - 2], ax
mov dword [rsp - 0x40], 0xa7c6c43
cmp rcx, qword [rbx + 0x38]
jb 0x14005277b
mov rbx, qword [rsp + 0x30]
mov rdx, rdx
xchg r12, rax
mov r12, rdi
xchg r12, rax
xchg r14, rsi
mov r14, qword [rsp + 0x38]
xchg r14, rsi
nop
sub rsp, 0x2628573e
add rsp, 0x2628575e
nop
mov rdi, qword [rsp]
add rsp, 8
ret
Function at 0x140052800
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg rcx, rsi
mov qword [rsp + 0x10], rcx
xchg rsi, rcx
xchg rbx, rdi
mov qword [rsp + 0x18], rbx
xchg rdi, rbx
push r14
nop
add rsp, 0x1e677c07
sub rsp, 0x1e677c27
mov r14, qword [rcx + 0x38]
mov dword [rsp - 0x3c], 0x2d8f53e2
xchg rdx, r13
mov rdi, r13
xchg rdx, r13
xchg rcx, rsi
mov rcx, rsi
xchg rsi, rcx
nop
movabs rbx, 0xffffffff55562a0b
add rbx, 0x16d9640d
xor rbx, 0x5ca7bf5f
add rbx, 0x7fffffff
add rbx, 0x4f77ceb9
inc rbx
cmp word [rdx + rbx*2], 0
jne 0x140052871
xchg r11, r11
lea r8, [r14 + rbx]
xchg rdx, r14
mov r14, rdx
xchg rdx, r14
mov qword [rcx + 0x38], r8
mov dword [rsp - 0xc], ebx
call fcn.1400533a0
mov ecx, r14d
mov edx, 0x7df8a592
sub edx, 0x197680c7
xor edx, 0x7c6bae44
xor edx, 0xe92f3e5
and ecx, 3
mov dword [rsp - 0x20], esp
shl ecx, 3
ror edx, cl
test rbx, rbx
je 0x140052932
mov dword [rsp - 0x1c], 0x18c47f8f
lea r8, [r14 + r14]
mov ecx, 0x3af739b7
add ecx, 0x18649def
sub ecx, 0xc0c1201
xor ecx, 0x3e9c100e
sub ecx, 0x79d3d4ac
sub r8, rdi
xchg r13, r13
add r8, rax
nop dword [rax]
nop dword [rax + rax]
xchg r15, r15
movzx eax, dx
lea rdi, [rdi + 2]
and ax, cx
ror edx, 7
ror edx, 1
xor ax, word [rdi - 2]
mov word [r8 + rdi - 2], ax
mov r9, r9
sub rbx, 1
jne 0x14005290c
xchg r11, rbx
mov r11, qword [rsp + 0x30]
xchg rbx, r11
xchg rsi, rax
mov rsi, rax
xchg rsi, rax
mov rsi, qword [rsp + 0x38]
xchg r13, r13
xchg rdi, r11
mov r11, qword [rsp + 0x40]
xchg r11, rdi
nop
add rsp, 0x2e9d254f
sub rsp, 0x2e9d252f
nop
mov r14, qword [rsp]
add rsp, 8
ret