joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14000e6dc
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x98
movaps xmmword [rsp + 0x80], xmm6
mov r13, rcx
xorps xmm0, xmm0
movaps xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x30], rdx
mov rax, qword [rsp + 0x30]
mov rax, qword [rax]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
and eax, 4
mov qword [rsp + 0x68], rax
xor eax, eax
lea rbx, [0x1400e7408]
movsxd rcx, dword [rax + rbx]
xor dword [rsp + rcx*4 + 0x40], 0x78c104ba
add rax, 4
cmp rax, 0xc
jne 0x14000e72a
mov eax, 0x59f86fa6
mov r11b, 1
mov r8d, 0xc77b0d8
xorps xmm6, xmm6
lea rbp, [0x1400e7400]
mov r9d, 0x765675a7
mov r10d, 0x5b7261a0
mov r15d, dword [rsp + 0x48]
xor r15d, r8d
cmp eax, 0xe97711d
je 0x14000e8cb
cmp eax, 0x23b3651a
je 0x14000e78a
cmp eax, 0x59f86fa6
jne 0x14000e76c
jmp 0x14000e890
mov rax, qword [rsp + 0x38]
or rax, 4
mov rcx, qword [rsp + 0x30]
mov qword [rcx], rax
movaps xmmword [rsp + 0x50], xmm6
mov rax, qword [r13 + 8]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x28], r13
mov rax, qword [rsp + 0x28]
mov rax, qword [rax]
mov qword [rsp + 0x78], rax
xor eax, eax
movsxd rcx, dword [rax + rbx]
xor dword [rsp + rcx*4 + 0x50], 0x78c104ba
add rax, 4
cmp rax, 0xc
jne 0x14000e7bd
mov eax, 0x59f86fa6
mov r12b, 1
mov r14d, dword [rsp + 0x58]
xor r14d, r8d
cmp eax, 0xe97711d
je 0x14000e865
cmp eax, 0x23b3651a
je 0x14000e7fa
cmp eax, 0x59f86fa6
jne 0x14000e7e3
jmp 0x14000e825
mov rcx, r13
mov rsi, rdx
mov edi, r11d
call fcn.14000e664
mov r11d, edi
mov r10d, 0x5b7261a0
mov r9d, 0x765675a7
mov r8d, 0xc77b0d8
mov rdx, rsi
mov eax, r14d
jmp 0x14000e7e3
mov rax, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
test r12b, 1
je 0x14000e84d
xor edi, edi
movsxd rsi, dword [rdi + rbp]
xor dword [rsp + rsi*4 + 0x50], 0x7a21c57f
add rdi, 4
cmp rdi, 8
jne 0x14000e837
cmp rax, rcx
mov eax, 0x5b7261a0
cmovg eax, r9d
xor eax, dword [rsp + 0x50]
xor r12d, r12d
jmp 0x14000e7db
mov rax, qword [r13 + 0x10]
mov rcx, qword [rsp + 0x28]
mov rcx, qword [rcx]
mov qword [rax + rcx*8], rdx
mov rax, qword [rsp + 0x28]
mov rax, qword [rax]
inc rax
mov rcx, qword [rsp + 0x28]
mov qword [rcx], rax
mov eax, r15d
jmp 0x14000e76c
mov rax, qword [rsp + 0x68]
test r11b, 1
je 0x14000e8b3
xor ecx, ecx
movsxd rdi, dword [rcx + rbp]
xor dword [rsp + rdi*4 + 0x40], 0x7a21c57f
add rcx, 4
cmp rcx, 8
jne 0x14000e89d
test rax, rax
mov eax, 0x765675a7
cmove eax, r10d
xor eax, dword [rsp + 0x40]
xor r11d, r11d
jmp 0x14000e764
movaps xmm6, xmmword [rsp + 0x80]
add rsp, 0x98
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x14000e8e7
Capabilities:
Encode data using xor

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x40
xorps xmm0, xmm0
movaps xmmword [rsp], xmm0
mov dword [rsp + 0x10], 0
mov rax, qword [r8 + 8]
mov qword [rsp + 0x30], rax
add rcx, 8
mov qword [rsp + 0x20], rcx
mov rax, qword [rsp + 0x20]
mov rax, qword [rax]
mov qword [rsp + 0x38], rax
xor eax, eax
lea rcx, [0x1400e74fc]
movsxd rbp, dword [rax + rcx]
xor dword [rsp + rbp*4], 0x78c104ba
add rax, 4
cmp rax, 0x10
jne 0x14000e928
mov ebp, 0x28a16966
mov r14b, 1
xor ebx, ebx
mov r10d, 0x5f9e96fe
lea rcx, [0x1400e79d0]
mov r9d, 0x3f77d4dc
lea rax, [0x1400e74f0]
mov r11d, 0x765675a7
mov edi, dword [rsp + 0xc]
xor edi, r10d
cmp ebp, 0x3d971518
jg 0x14000e988
cmp ebp, 0xe97711d
je 0x14000e9b0
cmp ebp, 0x28a16966
jne 0x14000e96e
jmp 0x14000e9f1
cmp ebp, 0x3d971519
je 0x14000ea26
cmp ebp, 0x4ae4c48a
jne 0x14000e96e
mov rbp, qword [rsp + 0x20]
lea rsi, [rsi + rsi*4]
inc rsi
and rsi, qword [rbp]
mov ebp, edi
jmp 0x14000e96e
lea rdi, [rdx + rsi*8]
mov qword [rsp + 0x28], rdi
mov rdi, qword [rsp + 0x28]
test bl, bl
jne 0x14000e9d9
xor ebx, ebx
movsxd rbp, dword [rbx + rcx]
xor dword [rsp + rbp*4], 0x53e92626
add rbx, 4
cmp rbx, 8
jne 0x14000e9c4
cmp qword [rdi], 0
mov ebp, 0x4804054f
cmove ebp, r9d
xor ebp, dword [rsp + 8]
mov bl, 1
jmp 0x14000e967
mov rsi, qword [rsp + 0x30]
and rsi, qword [rsp + 0x38]
test r14b, 1
je 0x14000ea18
xor edi, edi
movsxd rbp, dword [rdi + rax]
xor dword [rsp + rbp*4], 0x7a21c57f
add rdi, 4
cmp rdi, 0xc
jne 0x14000ea03
mov ebp, dword [rsp]
xor ebp, r11d
xor r14d, r14d
jmp 0x14000e967
mov rax, qword [rsp + 0x28]
mov qword [rax], r8
add rsp, 0x40
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
Function at 0x14000ea39
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x78
xorps xmm0, xmm0
movups xmmword [rsp + 0x3c], xmm0
movaps xmmword [rsp + 0x30], xmm0
mov rax, qword [rcx + 8]
mov qword [rsp + 0x58], rax
mov rdx, qword [rsp + 0x58]
lea rax, [rdx + rdx]
inc rax
mov qword [rsp + 0x20], rcx
mov qword [rcx + 8], rax
shl rdx, 4
lea rdi, [rdx + 0x10]
add rdx, 0x20
lea rcx, [0x1401b30c8]
call fcn.14000b2bc
mov rbx, rax
mov qword [rax + 8], 1
add rbx, 0x10
xor ebp, ebp
mov rcx, rbx
xor edx, edx
mov r8, rdi
call sub.msvcrt.dll_memset
mov qword [rsp + 0x70], rbx
lea rax, [0x1400e74d0]
movsxd rcx, dword [rbp + rax]
xor dword [rsp + rcx*4 + 0x30], 0x78c104ba
add rbp, 4
cmp rbp, 0x18
jne 0x14000eab6
mov eax, 0xe97711d
mov sil, 1
xor r8d, r8d
lea rbp, [0x1400e74b0]
lea rbx, [0x1400e74e8]
lea rdi, [0x1400e4ed8]
xor r15d, r15d
xor r13d, r13d
mov r12d, dword [rsp + 0x40]
mov ecx, 0x173f4aa2
xor r12d, ecx
mov r14d, dword [rsp + 0x44]
mov ecx, 0x5df34e43
xor r14d, ecx
cmp eax, 0x47c49477
jg 0x14000eb32
cmp eax, 0xe97711d
je 0x14000ec08
cmp eax, 0x2f7d4ef2
je 0x14000eb7a
cmp eax, 0x3d971519
jne 0x14000eb0d
jmp 0x14000ebca
cmp eax, 0x47c49478
je 0x14000eb53
cmp eax, 0x634c96ff
je 0x14000ec42
cmp eax, 0x775b11f8
jne 0x14000eb0d
inc r13
mov eax, r14d
jmp 0x14000eb0d
mov rdx, qword [rsp + 0x60]
mov dword [rsp + 0x2c], esi
mov rsi, r8
mov r8, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x20]
call fcn.14000e8e7
mov r8, rsi
mov esi, dword [rsp + 0x2c]
mov eax, r12d
jmp 0x14000eb0d
mov rax, qword [rsp + 0x20]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + r13*8]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x68]
test r15b, r15b
jne 0x14000ebae
xor ecx, ecx
movsxd rdx, dword [rcx + rbx]
xor dword [rsp + rdx*4 + 0x30], 0x316dbcb9
add rcx, 4
cmp rcx, 8
jne 0x14000eb98
test rax, rax
mov eax, 0x16cd739b
mov ecx, 0x2652f61b
cmove eax, ecx
xor eax, dword [rsp + 0x3c]
mov r15b, 1
jmp 0x14000eaf3
mov rax, qword [rsp + 0x58]
test r8b, r8b
jne 0x14000ebec
xor ecx, ecx
movsxd rdx, dword [rcx + rdi]
xor dword [rsp + rdx*4 + 0x30], 0x53e92626
add rcx, 4
cmp rcx, 0x10
jne 0x14000ebd6
cmp r13, rax
mov eax, 0x2d9d8f37
mov ecx, 0x61ac573a
cmovg eax, ecx
xor eax, dword [rsp + 0x38]
mov r8b, 1
jmp 0x14000eaf3
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x60], rax
test sil, 1
je 0x14000ec30
xor eax, eax
movsxd rcx, dword [rax + rbp]
xor dword [rsp + rcx*4 + 0x30], 0x7a21c57f
add rax, 4
cmp rax, 0x14
jne 0x14000ec1a
mov eax, dword [rsp + 0x30]
mov ecx, 0x455611a3
xor eax, ecx
xor esi, esi
jmp 0x14000eaf0
mov rsi, qword [rsp + 0x20]
mov rdx, qword [rsi + 0x18]
add rdx, 0xfffffffffffffff0
lea rcx, [0x1401b30c8]
call fcn.14000e060
mov rax, qword [rsp + 0x60]
mov qword [rsi + 0x18], rax
add rsp, 0x78
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x14000f943
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x58
mov r15, rdx
xorps xmm0, xmm0
movaps xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], 0
call fcn.14000f5ef
mov qword [rsp + 0x48], rax
mov rax, qword [r15 + 0x20]
mov qword [rsp + 0x28], rax
xor eax, eax
lea rcx, [0x1400e66d0]
movsxd rdx, dword [rax + rcx]
xor dword [rsp + rdx*4 + 0x30], 0x78c104ba
add rax, 4
cmp rax, 0x14
jne 0x14000f97f
mov edi, 0x23b3651a
mov r14b, 1
xor r11d, r11d
mov r10d, 0x452455bd
lea rdx, [0x1400e66b4]
mov r8d, 0x3225c030
mov r9d, 0x3f77d4dc
mov ebx, dword [rsp + 0x40]
xor ebx, r10d
mov ecx, dword [rsp + 0x38]
mov esi, dword [rsp + 0x3c]
mov ebp, esi
xor ebp, 0x16cd739b
cmp edi, 0x3d971518
jle 0x14000f9f6
cmp edi, 0x3d971519
je 0x14000fa17
cmp edi, 0x47c49478
je 0x14000faab
cmp edi, 0x4ae4c48a
jne 0x14000f9d0
jmp 0x14000fa2c
cmp edi, 0x23b3651a
je 0x14000fa67
cmp edi, 0x2f7d4ef2
jne 0x14000f9d0
mov rax, qword [r15 + 0x28]
mov rdi, qword [rsp + 0x28]
lea rax, [rax + rdi*8]
mov edi, ebx
jmp 0x14000fa27
mov rax, qword [rsp + 0x28]
shl rax, 3
add rax, qword [rsp + 0x50]
mov edi, ebp
mov rax, qword [rax]
jmp 0x14000f9d0
mov rax, qword [r15 + 0x28]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x50]
mov rax, qword [rdi + rax*8]
mov edi, esi
xor edi, 0x53e92626
test r11b, r11b
cmove esi, edi
test rax, rax
mov edi, 0x452455bd
cmove edi, r9d
xor edi, ecx
mov r11b, 1
jmp 0x14000f9c8
mov dword [rsp + 0x3c], esi
mov rcx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x28]
test r14b, 1
je 0x14000fa93
xor edi, edi
movsxd rbx, dword [rdi + rdx]
xor dword [rsp + rbx*4 + 0x30], 0x7a21c57f
add rdi, 4
cmp rdi, 0x10
jne 0x14000fa7d
cmp rcx, rsi
mov edi, 0x57bc4a48
cmovb edi, r8d
xor edi, dword [rsp + 0x30]
xor r14d, r14d
jmp 0x14000f9b9
mov dword [rsp + 0x3c], esi
add rsp, 0x58
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
pop r15
ret
Function at 0x140010fcf
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x78
xorps xmm0, xmm0
movups xmmword [rsp + 0x5c], xmm0
movaps xmmword [rsp + 0x50], xmm0
movaps xmmword [rsp + 0x40], xmm0
xor eax, eax
lea rbx, [0x1400e7450]
movsxd rbp, dword [rax + rbx]
xor dword [rsp + rbp*4 + 0x40], 0x78c104ba
add rax, 4
cmp rax, 0x28
jne 0x140010ffa
mov r8, rdx
dec r8
seto sil
test rdx, rdx
mov eax, 0x1b8d9245
mov r11d, 0x6b0c795f
cmove r11d, eax
mov r9d, 0x47c49478
mov al, 1
mov dword [rsp + 0x2c], eax
xor eax, eax
mov qword [rsp + 0x30], rax
lea r13, [0x1400e7480]
lea r14, [0x1400e74a8]
lea rdi, [0x1400e7420]
lea rbp, [0x1400e7498]
xor r15d, r15d
xor r12d, r12d
mov r10d, dword [rsp + 0x64]
mov edx, 0x30929a51
xor r10d, edx
mov edx, dword [rsp + 0x48]
mov ebx, 0x27c93e93
xor edx, ebx
cmp r9d, 0x5c59b6c2
jg 0x1400110a6
cmp r9d, 0x2529ff55
jg 0x1400110cf
cmp r9d, 0x13cd7de5
je 0x140011136
cmp r9d, 0x1b98f6ac
jne 0x140011079
jmp 0x140011184
cmp r9d, 0x69603051
jg 0x1400110ea
cmp r9d, 0x5fcc2877
je 0x140011116
cmp r9d, 0x634c96ff
je 0x14001112b
cmp r9d, 0x5c59b6c3
jne 0x140011079
jmp 0x14001125e
cmp r9d, 0x2529ff56
je 0x14001124d
cmp r9d, 0x47c49478
jne 0x140011079
jmp 0x1400111c2
cmp r9d, 0x69603052
je 0x1400111f6
cmp r9d, 0x771e161b
je 0x14001125e
cmp r9d, 0x7cbfe930
jne 0x140011079
jmp 0x14001125e
mov rax, qword [rsp + 0x38]
not rax
and rax, qword [rsp + 0x70]
mov r9d, r10d
jmp 0x140011079
mov rax, rcx
mov r9d, edx
jmp 0x140011079
mov byte [rsp + 0x2b], sil
mov qword [rsp + 0x38], r8
cmp byte [rsp + 0x30], 0
jne 0x14001115f
xor ebx, ebx
movsxd rdx, dword [rbx + r13]
xor dword [rsp + rdx*4 + 0x40], 0x316dbcb9
add rbx, 4
cmp rbx, 0x18
jne 0x140011149
cmp byte [rsp + 0x2b], 0
mov r9d, 0x6b80f197
mov edx, 0x7e5f28f5
cmovne r9d, edx
xor r9d, dword [rsp + 0x4c]
mov dl, 1
mov qword [rsp + 0x30], rdx
jmp 0x140011061
test r12b, r12b
jne 0x1400111a1
xor ebx, ebx
movsxd rdx, dword [rbx + r14]
xor dword [rsp + rdx*4 + 0x40], 0xe97711d
add rbx, 4
cmp rbx, 8
jne 0x14001118b
cmp byte [rsp + 0x2b], 0
mov r9d, 0x44e03c6d
mov edx, 0x6c320201
cmovne r9d, edx
xor r9d, dword [rsp + 0x5c]
mov r12b, 1
jmp 0x140011061
test byte [rsp + 0x2c], 1
je 0x1400111e1
xor ebx, ebx
movsxd rdx, dword [rbx + rdi]
xor dword [rsp + rdx*4 + 0x40], 0x7a21c57f
add rbx, 4
cmp rbx, 0x24
jne 0x1400111cb
mov r9d, dword [rsp + 0x40]
xor r9d, r11d
mov dword [rsp + 0x2c], 0
jmp 0x140011061
mov r10d, esi
mov rdx, qword [rsp + 0x38]
mov rbx, rcx
add rdx, rcx
seto cl
mov qword [rsp + 0x70], rdx
test r15b, r15b
jne 0x140011229
xor edx, edx
movsxd rsi, dword [rdx + rbp]
xor dword [rsp + rsi*4 + 0x40], 0x28a16966
add rdx, 4
cmp rdx, 0x10
jne 0x140011213
test cl, cl
mov r9d, 0x28158bd0
mov ecx, 0x6fd4cbbf
cmovne r9d, ecx
xor r9d, dword [rsp + 0x54]
mov r15b, 1
mov rcx, rbx
mov esi, r10d
jmp 0x140011061
add rsp, 0x78
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call fcn.140011264
int3
Function at 0x140011883
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x58
mov qword [rsp + 0x38], rdx
xorps xmm0, xmm0
movaps xmmword [rsp + 0x20], xmm0
movaps xmmword [rsp + 0x10], xmm0
mov qword [rsp + 0x48], rcx
lea rax, [rcx + 8]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov rax, qword [rax]
mov qword [rsp + 0x50], rax
xor eax, eax
lea rbp, [0x1400e7730]
movsxd rdx, dword [rax + rbp]
xor dword [rsp + rdx*4 + 0x10], 0x78c104ba
add rax, 4
cmp rax, 0x1c
jne 0x1400118c9
mov r15d, 0x4ae4c48a
mov cl, 1
xor r10d, r10d
mov esi, 0x4f1915a8
lea r11, [0x1400e46b0]
lea rdi, [0x1400e74e8]
lea r13, [0x1400e7710]
xor r14d, r14d
mov r12d, dword [rsp + 0x24]
xor r12d, esi
mov r8d, dword [rsp + 0x28]
mov edx, 0x2db60ed3
xor r8d, edx
mov r9d, dword [rsp + 0x20]
mov edx, 0x1cdbb26a
xor r9d, edx
cmp r15d, 0x4ae4c489
jle 0x140011961
cmp r15d, 0x775b11f7
jg 0x140011981
cmp r15d, 0x4ae4c48a
je 0x1400119a9
cmp r15d, 0x634c96ff
jne 0x140011929
mov rdx, qword [rsp + 0x40]
lea rbx, [rbx + rbx*4]
inc rbx
and rbx, qword [rdx]
mov r15d, r12d
jmp 0x140011929
cmp r15d, 0x13cd7de5
je 0x140011998
cmp r15d, 0x2f7d4ef2
je 0x1400119eb
cmp r15d, 0x47c49478
jne 0x140011929
jmp 0x140011a44
cmp r15d, 0x775b11f8
je 0x14001199f
cmp r15d, 0x7cbfe930
jne 0x140011929
jmp 0x140011a8a
xor eax, eax
mov r15d, r8d
jmp 0x140011929
mov rax, qword [rsp + 8]
mov r15d, r9d
jmp 0x140011929
mov rbx, qword [rsp + 0x50]
and rbx, qword [rsp + 0x38]
test r14b, r14b
jne 0x1400119d1
xor ebp, ebp
movsxd rsi, dword [rbp + r13]
xor dword [rsp + rsi*4 + 0x10], 0x7a21c57f
add rbp, 4
cmp rbp, 0x18
jne 0x1400119ba
mov r15d, dword [rsp + 0x10]
mov edx, 0x57bc4a48
xor r15d, edx
mov r14b, 1
mov esi, 0x4f1915a8
jmp 0x140011907
mov rdx, qword [rsp + 0x48]
mov rbp, qword [rdx + 0x18]
mov rbp, qword [rbp + rbx*8]
mov qword [rsp + 8], rbp
mov rbp, qword [rsp + 8]
test r10b, r10b
jne 0x140011a20
xor esi, esi
movsxd rdx, dword [rsi + r11]
xor dword [rsp + rdx*4 + 0x10], 0x53e92626
add rsi, 4
cmp rsi, 0x14
jne 0x140011a0a
test rbp, rbp
mov r15d, 0x452455bd
mov edx, 0x112dbc20
cmove r15d, edx
xor r15d, dword [rsp + 0x18]
mov r10b, 1
mov esi, 0x4f1915a8
jmp 0x140011907
mov rbp, qword [rsp + 8]
test cl, 1
je 0x140011a66
xor edx, edx
movsxd rcx, dword [rdx + rdi]
xor dword [rsp + rcx*4 + 0x10], 0x316dbcb9
add rdx, 4
cmp rdx, 8
jne 0x140011a50
mov rcx, qword [rsp + 0x38]
cmp qword [rbp + 8], rcx
mov r15d, 0x3245711c
mov ecx, 0x2652f61b
cmove r15d, ecx
xor r15d, dword [rsp + 0x1c]
xor ecx, ecx
jmp 0x140011907
add rsp, 0x58
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x140011a9b
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x88
mov rsi, rdx
mov rdi, rcx
xorps xmm0, xmm0
movaps xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x50], rdx
mov rdx, qword [rsp + 0x50]
shr rdx, 0xc
call fcn.140011883
mov qword [rsp + 0x58], rax
xor eax, eax
lea rcx, [0x1400e66d0]
movsxd rdx, dword [rax + rcx]
xor dword [rsp + rdx*4 + 0x30], 0x78c104ba
add rax, 4
cmp rax, 0x14
jne 0x140011ae6
mov r8, rsi
shr r8, 0xc
mov rcx, rsi
shr rcx, 4
mov eax, 1
shl rax, cl
mov qword [rsp + 0x80], rax
shr esi, 0xa
and esi, 3
mov ecx, 0x23b3651a
mov bl, 1
xor r13d, r13d
mov r9d, 0x452455bd
lea rbp, [0x1400e66b4]
mov edx, dword [rsp + 0x40]
xor edx, r9d
mov dword [rsp + 0x2c], edx
mov r15d, dword [rsp + 0x38]
mov r12d, dword [rsp + 0x3c]
mov r14d, r12d
xor r14d, 0x16cd739b
cmp ecx, 0x3d971518
jle 0x140011b7c
cmp ecx, 0x3d971519
je 0x140011bcc
cmp ecx, 0x47c49478
je 0x140011ca4
cmp ecx, 0x4ae4c48a
jne 0x140011b56
jmp 0x140011bea
cmp ecx, 0x23b3651a
je 0x140011c62
cmp ecx, 0x2f7d4ef2
jne 0x140011b56
mov rcx, rdi
mov rdx, r8
mov qword [rsp + 0x78], rdi
mov rdi, rsi
mov rsi, r8
call fcn.14000ec75
mov r8, rsi
mov rsi, rdi
mov rdi, qword [rsp + 0x78]
mov r9d, 0x452455bd
mov rcx, qword [rsp + 0x80]
or qword [rax + rsi*8 + 0x10], rcx
xor eax, eax
mov ecx, dword [rsp + 0x2c]
jmp 0x140011b56
mov rax, qword [rsp + 0x68]
or rax, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x60]
mov qword [rcx], rax
mov al, byte [rsp + 0x2b]
mov ecx, r14d
jmp 0x140011b56
mov rax, qword [rsp + 0x50]
mov rcx, rax
shr rcx, 4
mov rdx, qword [rsp + 0x58]
shr rax, 7
and eax, 0x18
add rax, rdx
add rax, 0x10
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
mov rax, qword [rax]
mov qword [rsp + 0x68], rax
mov eax, 1
shl rax, cl
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x68]
and rax, qword [rsp + 0x70]
mov ecx, r12d
xor ecx, 0x53e92626
test r13b, r13b
cmove r12d, ecx
test rax, rax
setne byte [rsp + 0x2b]
mov ecx, 0x3f77d4dc
cmovne ecx, r9d
xor ecx, r15d
mov r13b, 1
mov al, byte [rsp + 0x2b]
jmp 0x140011b4c
mov dword [rsp + 0x3c], r12d
mov rcx, qword [rsp + 0x58]
test bl, 1
je 0x140011c89
xor edx, edx
movsxd rbx, dword [rdx + rbp]
xor dword [rsp + rbx*4 + 0x30], 0x7a21c57f
add rdx, 4
cmp rdx, 0x10
jne 0x140011c73
test rcx, rcx
mov ecx, 0x3225c030
mov edx, 0x57bc4a48
cmove ecx, edx
xor ecx, dword [rsp + 0x30]
xor ebx, ebx
jmp 0x140011b37
mov dword [rsp + 0x3c], r12d
and al, 1
add rsp, 0x88
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x14001216e
Capabilities:
Encode data using xor

Disassembly:
push rsi
sub rsp, 0x40
xorps xmm0, xmm0
movaps xmmword [rsp + 0x10], xmm0
mov dword [rsp + 0x20], 0
lea rax, [rsp + 0x30]
mov qword [rsp + 8], rax
mov rdx, qword [rsp + 8]
mov rdx, qword [rsp + 8]
mov qword [rax], rdx
mov rax, qword [rax]
mov qword [rsp + 0x38], rax
xor eax, eax
lea rdx, [0x1400e74fc]
movsxd rsi, dword [rax + rdx]
xor dword [rsp + rsi*4 + 0x10], 0x78c104ba
add rax, 4
cmp rax, 0x10
jne 0x1400120b1
mov edx, 0x28a16966
mov r9b, 1
lea r10, [0x1400e74f0]
mov r8d, 0x3225c030
mov r11d, dword [rsp + 0x18]
mov esi, dword [rsp + 0x1c]
cmp edx, 0x3d971518
jg 0x1400120ff
cmp edx, 0xe97711d
je 0x140012115
cmp edx, 0x28a16966
jne 0x1400120e5
jmp 0x140012128
cmp edx, 0x3d971519
je 0x140012163
cmp edx, 0x4ae4c48a
jne 0x1400120e5
xor eax, eax
mov edx, esi
jmp 0x140012120
mov rax, qword [rcx]
sub rax, qword [rsp + 0x30]
mov edx, r11d
xor edx, 0x3f77d4dc
jmp 0x1400120e5
mov r11, qword [rsp + 0x38]
test r9b, 1
je 0x14001214b
xor esi, esi
movsxd rdx, dword [rsi + r10]
xor dword [rsp + rdx*4 + 0x10], 0x7a21c57f
add rsi, 4
cmp rsi, 0xc
jne 0x140012135
test r11, r11
mov edx, 0x765675a7
cmove edx, r8d
xor edx, dword [rsp + 0x10]
xor r9d, r9d
jmp 0x1400120dc
mov rcx, qword [rsp + 8]
add rsp, 0x40
pop rsi
ret
lea rcx, [0x1401b3060]
jmp 0x140012074

Function at 0x14001217a
Capabilities:
Encode data using xor

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
xorps xmm0, xmm0
movaps xmmword [rsp], xmm0
mov dword [rsp + 0x10], 0
xor eax, eax
lea rdx, [0x1400e74fc]
movsxd rbp, dword [rax + rdx]
xor dword [rsp + rbp*4], 0x78c104ba
add rax, 4
cmp rax, 0x10
jne 0x14001219c
mov ebx, 0x28a16966
mov r14b, 1
xor edi, edi
mov r8d, 0x5f9e96fe
lea r10, [0x1400e79d0]
mov r9d, 0x3f77d4dc
lea rdx, [0x1400e74f0]
mov r11d, 0x765675a7
mov rsi, rcx
xor eax, eax
mov ebp, dword [rsp + 0xc]
xor ebp, r8d
cmp ebx, 0x3d971518
jg 0x140012201
cmp ebx, 0xe97711d
je 0x14001221e
cmp ebx, 0x28a16966
jne 0x1400121e7
jmp 0x14001225c
cmp ebx, 0x3d971519
je 0x140012287
cmp ebx, 0x4ae4c48a
jne 0x1400121e7
mov rax, qword [rsi + 0x10]
mov rsi, qword [rsp + 0x18]
mov ebx, ebp
jmp 0x1400121e7
mov rbx, qword [rsi]
mov qword [rsp + 0x18], rbx
mov rbx, qword [rsp + 0x18]
test dil, dil
jne 0x140012247
xor edi, edi
movsxd rbp, dword [rdi + r10]
xor dword [rsp + rbp*4], 0x53e92626
add rdi, 4
cmp rdi, 8
jne 0x140012232
cmp rbx, rsi
mov ebx, 0x4804054f
cmove ebx, r9d
xor ebx, dword [rsp + 8]
mov dil, 1
jmp 0x1400121e0
test r14b, 1
je 0x140012279
xor eax, eax
movsxd rsi, dword [rax + rdx]
xor dword [rsp + rsi*4], 0x7a21c57f
add rax, 4
cmp rax, 0xc
jne 0x140012264
mov ebx, dword [rsp]
xor ebx, r11d
xor r14d, r14d
jmp 0x1400121db
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
Function at 0x140012292
Capabilities:
Encode data using xor

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
xorps xmm0, xmm0
movaps xmmword [rsp], xmm0
mov dword [rsp + 0x10], 0
xor eax, eax
lea rdx, [0x1400e74fc]
movsxd rbp, dword [rax + rdx]
xor dword [rsp + rbp*4], 0x78c104ba
add rax, 4
cmp rax, 0x10
jne 0x1400122b4
mov ebx, 0x28a16966
mov r14b, 1
xor edi, edi
mov r8d, 0x5f9e96fe
lea r10, [0x1400e79d0]
mov r9d, 0x3f77d4dc
lea rdx, [0x1400e74f0]
mov r11d, 0x765675a7
mov rax, 0xffffffffffffffff
mov rsi, rcx
mov ebp, dword [rsp + 0xc]
xor ebp, r8d
cmp ebx, 0x3d971518
jg 0x14001231e
cmp ebx, 0xe97711d
je 0x14001233f
cmp ebx, 0x28a16966
jne 0x140012304
jmp 0x14001237a
cmp ebx, 0x3d971519
je 0x1400123a5
cmp ebx, 0x4ae4c48a
jne 0x140012304
mov rax, qword [rsi + 0x18]
mov rsi, qword [rsp + 0x18]
mov rsi, qword [rsi + 8]
mov ebx, ebp
jmp 0x140012304
mov qword [rsp + 0x18], rsi
mov rbx, qword [rsp + 0x18]
test dil, dil
jne 0x140012365
xor edi, edi
movsxd rbp, dword [rdi + r10]
xor dword [rsp + rbp*4], 0x53e92626
add rdi, 4
cmp rdi, 8
jne 0x140012350
cmp qword [rbx], rsi
mov ebx, 0x4804054f
cmove ebx, r9d
xor ebx, dword [rsp + 8]
mov dil, 1
jmp 0x1400122fd
test r14b, 1
je 0x140012397
xor eax, eax
movsxd rsi, dword [rax + rdx]
xor dword [rsp + rsi*4], 0x7a21c57f
add rax, 4
cmp rax, 0xc
jne 0x140012382
mov ebx, dword [rsp]
xor ebx, r11d
xor r14d, r14d
jmp 0x1400122f3
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
Function at 0x1400159f2
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x58
mov rsi, rcx
xorps xmm0, xmm0
movaps xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0
mov rax, qword [rcx + 8]
add rax, 0x28
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
mov rax, qword [rax]
mov qword [rsp + 0x50], rax
xor eax, eax
lea rcx, [0x1400e74fc]
movsxd rdx, dword [rax + rcx]
xor dword [rsp + rdx*4 + 0x30], 0x78c104ba
add rax, 4
cmp rax, 0x10
jne 0x140015a34
add rsi, 0x10
mov eax, 0x28a16966
mov r15b, 1
lea rdi, [0x1400e74f0]
mov r14d, 0x765675a7
mov ebx, dword [rsp + 0x38]
mov ebp, dword [rsp + 0x3c]
cmp eax, 0x3d971518
jg 0x140015a82
cmp eax, 0xe97711d
je 0x140015aac
cmp eax, 0x28a16966
jne 0x140015a6b
jmp 0x140015ab5
cmp eax, 0x3d971519
je 0x140015af0
cmp eax, 0x4ae4c48a
jne 0x140015a6b
inc qword [0x1401b30c0]
mov rax, qword [rsp + 0x28]
mov rcx, rsi
call qword [rax]
dec qword [0x1401b30c0]
mov eax, ebp
jmp 0x140015aae
mov eax, ebx
xor eax, 0x3f77d4dc
jmp 0x140015a6b
mov rax, qword [rsp + 0x50]
test r15b, 1
je 0x140015ad8
xor ecx, ecx
movsxd rdx, dword [rcx + rdi]
xor dword [rsp + rdx*4 + 0x30], 0x7a21c57f
add rcx, 4
cmp rcx, 0xc
jne 0x140015ac2
test rax, rax
mov eax, 0x3225c030
cmove eax, r14d
xor eax, dword [rsp + 0x30]
xor r15d, r15d
jmp 0x140015a63
add rsp, 0x58
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
pop r15
ret