joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400ee530
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x5f]
neg rsp
sub rsp, 0xffffffffffffff50
neg rsp
mov r14, rdx
movabs rdx, 0x703a3e7f67953f40
sub rdx, 0x3ab39fe6
sub rdx, 0x24bc6efc
cmp qword [rcx + 0x538], rdx
jne 0x1400ee817
xorps xmm0, xmm0
mov rax, r14
xor rax, rdx
mov qword [rcx + 0x538], rax
lea rax, [rbp - 0x41]
mov rsi, qword [rcx + 0x578]
mov rbx, qword [rcx + 0x540]
lea rcx, [rbp - 0x49]
mov qword [rbp - 0x49], rax
movups xmmword [rbp - 0x41], xmm0
lea rdx, [rsi + 1]
movups xmmword [rbp - 0x31], xmm0
movups xmmword [rbp - 0x21], xmm0
call fcn.140017954
xor r15d, r15d
mov edx, 0x4aa381cf
sub edx, 0x2368fd67
add edx, 0x3b76bfed
test rsi, rsi
je 0x1400ee61c
mov rdi, rax
sub rbx, rax
mov r8, rsi
movzx ecx, dx
mov r9d, 0x7982fac4
xor r9d, 0x675a19ee
add r9d, 0xa85b6a
sub r9d, 0x1f813d95
and cx, r9w
ror edx, 8
xor cx, word [rbx + rdi]
mov word [rdi], cx
lea rdi, [rdi + 2]
sub r8, 1
jne 0x1400ee5e2
mov word [rax + rsi*2], r15w
movabs rcx, 0xc29b13a70ad45411
add rcx, 0x50100a36
xor rcx, 0xa53f4f7
lea rax, [0x1400ee84c]
mov qword [rbp + 7], r15
mov qword [rbp - 1], rax
mov edx, 0x4f782c13
xor edx, 0x6a80e49f
add edx, 0x4c127c6
sub edx, 0x2ab97152
mov rax, qword [0x140142158]
xor rax, rcx
mov qword [rbp + 0x17], r15
movabs rcx, 0x7d41edb908c37a41
xor rcx, 0x2ab8b8f2
xor rcx, 0x3c428dd0
mov qword [rbp + 0x2f], r15
add rax, rcx
mov qword [rbp + 0x3f], r15
movabs rcx, 0xdec2d5f36e12447b
sub rcx, 0x6009884b
add rcx, 0x6a0030fd
sub rcx, 0x635fd517
mov dword [rbp - 9], 0x3e85bf3
xor dword [rbp - 9], 0x2df4bb67
add dword [rbp - 9], 0x437bde72
sub dword [rbp - 9], 0x7198beb6
xor rax, rcx
mov dword [rbp - 5], 0x284226c7
add dword [rbp - 5], 0x25a6b5b0
sub dword [rbp - 5], 0x2d9538bc
sub dword [rbp - 5], 0x2053a3b8
xor ecx, ecx
mov qword [rbp + 0xf], r14
call rax
mov qword [rbp + 0x1f], rax
movabs rcx, 0x1fd9ba6063b5dba4
sub rcx, 0x3e93ea4
sub rcx, 0x4296831f
sub rcx, 0x232204c
mov rax, qword [0x140142730]
xor rax, rcx
movabs rcx, 0x452ae464680ff785
xor rcx, 0x7c8ea15
sub rcx, 0xcda81d4
add rax, rcx
movabs rcx, 0x1a9614722ed2b436
xor rcx, 0x3afa5caa
sub rcx, 0xa1a3dbd
xor rcx, 0x356251cb
xor rax, rcx
movabs rcx, 0x27cd3115753917d1
sub rcx, 0x4ce87553
add rcx, 0x3d59d9cb
xor rcx, 0xe727cbe
sub rax, rcx
xor ecx, ecx
call rax
mov qword [rbp + 0x27], rax
movabs rcx, 0x88cab31b157e7930
xor rcx, 0x60535f56
sub rcx, 0x55e3ec5d
add rcx, 0xec59407
mov rax, qword [rbp - 0x49]
mov qword [rbp + 0x37], rax
mov rax, qword [0x140142020]
ror rax, 0xf
xor rax, rcx
movabs rcx, 0x6bdc60b0621ee237
xor rcx, 0x1b194685
sub rcx, 0x618ca947
ror rax, 0x1e
xor rax, rcx
lea rcx, [rbp - 9]
rol rax, 0x3a
call rax
mov rcx, qword [rbp - 0x49]
test ax, ax
lea rax, [rbp - 0x41]
setne bl
cmp rcx, rax
jne 0x1400ee80b
xor eax, eax
lea rdi, [rbp - 0x41]
lea ecx, [rax + 0x30]
rep stosb byte [rdi], al
jmp 0x1400ee810
call fcn.140099230
mov al, bl
jmp 0x1400ee819
xor al, al
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
Function at 0x1400f170c
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r14
push r15
nop
add rsp, 0x396e0662
sub rsp, 0x396e0692
mov dword [rcx + 8], 0x1323f090
xor dword [rcx + 8], 0x5923bec7
sub dword [rcx + 8], 0x4a004e56
lea r14, [rcx + 0x298]
xorps xmm0, xmm0
lea rax, [0x14000ba68]
mov qword [rcx], rax
mov rbp, rdx
lea rax, [r14 + 8]
mov rbx, rcx
mov qword [r14], rax
xor edi, edi
mov qword [rcx + 0x290], rdi
mov rsi, r8
movups xmmword [rax], xmm0
mov rcx, r14
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
mov rdx, qword [r8 + 0x38]
mov qword [r14 + 0x38], rdx
call fcn.140017954
mov r8d, edi
cmp qword [r14 + 0x38], rdi
jbe 0x1400f17b3
mov rcx, qword [rsi]
movzx edx, word [rcx + r8*2]
mov word [rax + r8*2], dx
inc r8
cmp r8, qword [r14 + 0x38]
jb 0x1400f1799
mov ecx, dword [rsi + 0x40]
mov edx, 0x75846668
xor edx, 0x470151e3
sub edx, 0x2ee81a1e
mov qword [rbx + 0x2e0], rdi
bts ecx, 0xe
mov dword [rbx + 0x2d8], ecx
mov r15d, 0x39ca4537
sub r15d, 0x141a1aa2
add r15d, 0x43353cb5
mov eax, dword [rsi + 0x54]
and ecx, 0x2000
xor eax, edx
mov dword [rbx + 0x2e8], eax
mov eax, dword [rsi + 0x58]
xor eax, edx
mov dword [rbx + 0x2ec], eax
mov eax, dword [rsi + 0x44]
xor eax, edx
mov dword [rbx + 0x2f0], eax
mov eax, dword [rsi + 0x48]
xor eax, edx
mov dword [rbx + 0x2f4], eax
mov rax, qword [rsi + 0x60]
mov qword [rbx + 0x2f8], rax
mov eax, dword [rsi + 0x4c]
xor eax, r15d
mov dword [rbx + 0x308], eax
mov eax, dword [rsi + 0x50]
xor eax, edx
mov byte [rbx + 0x310], dil
neg ecx
mov dword [rbx + 0x30c], eax
pushf
mov edx, 0x311c7ff
xor edx, 0x21c1da33
xor edx, 0x22d01ddc
popf
mov qword [rbx + 0x318], rbp
sbb r14, r14
and r14, 0xffffffffffff0100
sub r14, 0xffffffffffff0001
mov rcx, r14
shl rcx, 4
call fcn.1400990b0
mov rcx, rax
mov rdx, r14
movaps xmm0, xmmword [0x140147580]
movups xmmword [rcx], xmm0
lea rcx, [rcx + 0x10]
sub rdx, 1
jne 0x1400f1888
mov qword [rbx + 0x300], rax
mov rdx, rdi
mov rax, qword [rsi + 0x68]
inc rdi
mov ecx, dword [rax + rdx]
xor ecx, r15d
mov dword [rsp + 0x50], ecx
movss xmm0, dword [rsp + 0x50]
mov rax, qword [rsi + 0x68]
movss dword [rsp + 0x20], xmm0
mov ecx, dword [rax + rdx + 4]
xor ecx, r15d
mov dword [rsp + 0x50], ecx
movss xmm0, dword [rsp + 0x50]
mov rax, qword [rsi + 0x68]
movss dword [rsp + 0x24], xmm0
mov ecx, dword [rax + rdx + 8]
xor ecx, r15d
mov dword [rsp + 0x50], ecx
movss xmm0, dword [rsp + 0x50]
mov rax, qword [rsi + 0x68]
movss dword [rsp + 0x28], xmm0
mov ecx, dword [rax + rdx + 0xc]
xor ecx, r15d
mov dword [rsp + 0x50], ecx
movss xmm0, dword [rsp + 0x50]
mov rax, qword [rbx + 0x300]
movss dword [rsp + 0x2c], xmm0
movups xmm1, xmmword [rsp + 0x20]
xorps xmm1, xmmword [0x140147580]
movups xmmword [rdx + rax], xmm1
lea rdx, [rdx + 0x10]
cmp rdi, r14
jl 0x1400f18aa
lea rcx, [rbp + 0xa0]
mov qword [rsp + 0x50], rbx
lea rdx, [rsp + 0x50]
call fcn.1400f13a8
mov rbp, qword [rsp + 0x60]
mov rax, rbx
mov rbx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x68]
neg rsp
add rsp, 0xffffffffffffffd0
neg rsp
pop r15
pop r14
pop rdi
ret
Function at 0x1400f31c0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
neg rsp
sub rsp, 0xffffffffffffff50
neg rsp
mov rsi, rcx
lea rdx, [rcx + 0x298]
lea rcx, [rsp + 0x20]
call fcn.140074610
or ebx, 0xffffffff
mov dword [rsp + 0xc0], ebx
mov rdi, qword [rax]
cmp byte [rdi], 0
je 0x1400f3239
mov rdx, rdi
lea rcx, [rsp + 0xc0]
mov r8d, 0x707b8ddc
xor r8d, 0x7acb7430
sub r8d, 0xab0f9eb
inc rdi
call fcn.14008e8a0
cmp byte [rdi], 0
jne 0x1400f3202
mov ebx, dword [rsp + 0xc0]
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x28]
not ebx
cmp rcx, rax
jne 0x1400f3273
lea rdi, [rsp + 0x28]
xor eax, eax
mov ecx, 0xc1989de
add ecx, 0x2e8eb0e8
xor ecx, 0x6d3b8eed
sub ecx, 0x5793b3ab
rep stosb byte [rdi], al
jmp 0x1400f3278
call fcn.140099230
mov eax, dword [rsi + 0x2f0]
lea r11, [rsp + 0xb0]
xor eax, 0x1d6d
shl eax, 0x10
or eax, dword [rsi + 0x2d8]
mov rsi, qword [r11 + 0x20]
xor eax, ebx
mov rbx, qword [r11 + 0x18]
xor eax, 2
mov rsp, r11
pop rdi
ret

Function at 0x1400f3394
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
mov r10d, 0x373206a0
xor r10d, 0x340d1c0b
add r10d, 0x5e02c2
mov r8d, dword [rcx + 0x2f4]
xor eax, r10d
xor r8d, r10d
xor r9d, r9d
add r8d, r8d
movd xmm2, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x68e5674a
mov dword [rsp + 8], eax
movss xmm3, dword [rsp + 8]
mov al, byte [rdx]
cvtdq2ps xmm2, xmm2
test al, al
je 0x1400f342a
mov r10, qword [rcx + 0x300]
movzx eax, al
inc rdx
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
xorps xmm0, xmmword [0x140147580]
mov al, byte [rdx]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm2
addss xmm1, xmm3
cvttss2si ecx, xmm1
sub ecx, r8d
add r9d, ecx
test al, al
jne 0x1400f33ee
mov eax, r9d
ret

Function at 0x1400f3430
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
mov r10d, 0x94fbaa1
xor r10d, 0x1d0163d1
add r10d, 0x82650d2
xor r10d, 0x1fe8372f
mov r8d, dword [rcx + 0x2f4]
xor eax, r10d
xor r8d, r10d
xor r11d, r11d
add r8d, r8d
mov r9d, r11d
movd xmm2, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x68e5674a
mov dword [rsp + 8], eax
movss xmm3, dword [rsp + 8]
movzx eax, word [rdx]
cvtdq2ps xmm2, xmm2
test ax, ax
je 0x1400f34e0
mov r10, qword [rcx + 0x300]
movzx eax, ax
nop
sub rdx, 0x785c6c51
add rdx, 0x785c6c53
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
xorps xmm0, xmmword [0x140147580]
movzx eax, word [rdx]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm2
addss xmm1, xmm3
cvttss2si ecx, xmm1
sub ecx, r8d
add r9d, ecx
test ax, ax
jne 0x1400f3496
mov eax, r9d
ret
Function at 0x1400f34e4
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
push rdi
add rsp, 0xffffffffffffff60
xor ebx, ebx
mov rdi, rcx
mov qword [rax + 8], rbx
cmp qword [rcx + 0x2f8], rbx
je 0x1400f357d
mov edx, dword [rcx + 0x2ec]
mov ecx, 0x7309e663
add ecx, 0x2a5d7cb
sub ecx, 0x6e423ff7
xor ecx, 0x4f0635a
mov eax, dword [rdi + 0x2e8]
xor edx, ecx
xor eax, ecx
lea rcx, [rbx - 1]
imul edx, eax
lea eax, [rbx + 4]
movsxd rsi, edx
mul rsi
cmovo rax, rcx
mov rcx, rax
call fcn.140099030
test rsi, rsi
jle 0x1400f359a
mov rcx, qword [rdi + 0x2f8]
mov edx, dword [rcx + rbx*4]
xor edx, 0x24096600
mov dword [rax + rbx*4], edx
inc rbx
cmp rbx, rsi
jl 0x1400f3559
jmp 0x1400f359a
lea rdx, [rsp + 0xb0]
call fcn.1400f3708
test al, al
je 0x1400f35f1
mov rax, qword [rsp + 0xb0]
lea rcx, [0x14000bb68]
mov qword [rsp + 0x98], 0x4e49031e
xor qword [rsp + 0x98], 0x29a8567b
add qword [rsp + 0x98], 0x5d452b1
sub qword [rsp + 0x98], 0x6db5a7fe
mov qword [rsp + 0x20], rcx
lea rdx, [rsp + 0x20]
mov rcx, qword [rdi + 0x318]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x30], rax
call fcn.1400f2760
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x1400f556c
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r14
push r15
mov rbp, rsp
sub rsp, 0x60
mov rbx, rdx
mov rdi, rcx
mov edx, r8d
lea rcx, [rbp - 0x20]
mov r12, r9
call fcn.14007ea9c
mov r8d, 0x7bea3fef
sub r8d, 0x7a420cc8
xor r8d, 0x1a83325
lea rcx, [rbp - 0x20]
mov rdx, rbx
call fcn.14007eb34
test al, al
je 0x1400f57f3
mov eax, dword [rdi + 0x2e8]
lea rdx, [rbp - 0x40]
and dword [rbp - 0x28], 0
mov ecx, 0x4a9c5c0b
add ecx, 0x14b9bb43
xor ecx, 0x5ccb0a23
and dword [rbp - 0x24], 0
xor eax, ecx
mov dword [rbp - 0x38], eax
mov r8d, 0x6e4462d5
sub r8d, 0x48b245e6
sub r8d, 0x25921ccf
mov eax, dword [rdi + 0x2ec]
xor eax, ecx
mov dword [rbp - 0x40], 0x3439828
add dword [rbp - 0x40], 0x6301d27a
xor dword [rbp - 0x40], 0x540d29e4
mov dword [rbp - 0x34], eax
mov eax, dword [rdi + 0x2f4]
xor eax, ecx
mov dword [rbp - 0x3c], 0x11446783
xor dword [rbp - 0x3c], 0x49b6ed19
sub dword [rbp - 0x3c], 0x24ebaed0
xor dword [rbp - 0x3c], 0x3406dbea
mov dword [rbp - 0x30], eax
mov eax, dword [rdi + 0x30c]
xor eax, ecx
lea rcx, [rbp - 0x20]
mov dword [rbp - 0x2c], eax
call fcn.140080ae4
test al, al
je 0x1400f57f3
mov r14d, dword [rdi + 0x2d8]
mov edx, 0x19b7b75b
add edx, 0x21747ddf
sub edx, 0x3b2c352a
and r14d, 0x2000
mov eax, r14d
neg eax
sbb rbx, rbx
and rbx, 0xffffffffffff0100
add rbx, 0x582bda62
sub rbx, 0x582ada63
mov r15, rbx
shl r15, 4
mov rcx, r15
call fcn.1400990b0
mov rsi, rax
test rax, rax
je 0x1400f57f3
mov rdx, qword [rdi + 0x300]
xor r8d, r8d
sub rdx, rax
lea edi, [r8 + 1]
movups xmm0, xmmword [rdx + rax]
add r8, rdi
xorps xmm0, xmmword [0x140147580]
movups xmmword [rax], xmm0
lea rax, [rax + 0x10]
cmp r8, rbx
jl 0x1400f56cf
mov rcx, r15
call fcn.140099030
neg r14d
mov rdx, rax
mov rcx, rsi
mov rbx, rax
sbb r8d, r8d
and r8d, 0xfff01000
sub r8d, 0xfff00010
mov r9d, r8d
call fcn.140094ff0
mov r8d, eax
mov dword [rbp - 0x28], eax
mov rdx, rbx
lea rcx, [rbp - 0x20]
call fcn.140080ae4
mov rcx, rsi
test al, al
jne 0x1400f5744
call fcn.140099050
mov rcx, rbx
jmp 0x1400f579f
call fcn.140099050
mov rcx, rbx
call fcn.140099040
mov eax, dword [rbp - 0x34]
imul eax, dword [rbp - 0x38]
movsxd rcx, eax
shl rcx, 2
call fcn.140099030
mov r8d, dword [rbp - 0x34]
mov rdx, rax
imul r8d, dword [rbp - 0x38]
mov rcx, r12
mov rbx, rax
shl r8d, 2
mov r9d, r8d
call fcn.140094ff0
mov r8d, eax
mov dword [rbp - 0x24], eax
mov rdx, rbx
lea rcx, [rbp - 0x20]
call fcn.140080ae4
mov rcx, rbx
test al, al
jne 0x1400f57a9
call fcn.140099040
jmp 0x1400f57f3
call fcn.140099040
lea rcx, [rbp - 0x20]
call fcn.140080d54
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.1400800e8
test al, al
je 0x1400f57f3
mov r8d, 0x3a6c2d1b
sub r8d, 0x27263c18
sub r8d, 0x1345f0e3
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x20]
call fcn.140080ae4
test al, al
jne 0x1400f57f6
xor dil, dil
lea rcx, [rbp - 0x20]
call fcn.14007eb2c
lea r11, [rsp + 0x60]
mov al, dil
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
Function at 0x1400f8290
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
add rsp, 0xffffffffffffffa0
mov rbp, qword [rcx + 0xaf0]
lea rax, [rsp + 0x28]
mov rbx, qword [rcx + 0xab8]
xorps xmm0, xmm0
mov r14, rdx
mov qword [rsp + 0x20], rax
mov rsi, rcx
lea rcx, [rsp + 0x20]
lea rdx, [rbp + 1]
movups xmmword [rsp + 0x28], xmm0
movups xmmword [rsp + 0x38], xmm0
movups xmmword [rsp + 0x48], xmm0
call fcn.140017954
mov edi, 0x39b9233a
sub edi, 0x52203ab
add edi, 0x1c1d4a55
xor edi, 0x32052db1
mov r9, rax
mov ecx, edi
mov r15d, 0x6ec2246b
xor r15d, 0x299b016b
xor r15d, 0x7c7d8efc
xor r15d, 0x3b24ab03
test rbp, rbp
je 0x1400f835c
mov rdx, rax
sub rbx, rax
mov r8, rbp
nop dword [rax]
nop dword [rax + rax]
movzx eax, cx
lea rdx, [rdx + 2]
and ax, r15w
ror ecx, 8
xor ax, word [rbx + rdx - 2]
mov word [rdx - 2], ax
sub r8, 1
jne 0x1400f833b
xor ebx, ebx
mov word [r9 + rbp*2], bx
cmp word [rsi + 0xb40], bx
je 0x1400f83a7
mov edx, ebx
cmp qword [rsi + 0xaf0], rbx
jbe 0x1400f83a7
nop dword [rax + rax]
mov rax, qword [rsp + 0x20]
movzx ecx, word [rsi + 0xb40]
mov word [rax + rdx*2], cx
inc rdx
cmp rdx, qword [rsi + 0xaf0]
jb 0x1400f8387
mov rsi, qword [rsp + 0x20]
lea rax, [r14 + 8]
xorps xmm0, xmm0
mov qword [r14], rax
movups xmmword [rax], xmm0
nop
movabs rdx, 0xffffffff40061205
sub rdx, 0x3eccc983
add rdx, 0x7fffffff
add rdx, 0x7ec6b77e
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
nop dword [rax]
inc rdx
cmp word [rsi + rdx*2], bx
jne 0x1400f83e4
mov rcx, r14
mov qword [r14 + 0x38], rdx
call fcn.140017954
cmp qword [r14 + 0x38], rbx
jbe 0x1400f8430
sub rsi, rax
nop
movzx ecx, di
lea rax, [rax + 2]
and cx, r15w
ror edi, 8
xor cx, word [rsi + rax - 2]
inc rbx
mov word [rax - 2], cx
cmp rbx, qword [r14 + 0x38]
jb 0x1400f840c
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x28]
cmp rcx, rax
jne 0x1400f8468
lea rdi, [rsp + 0x28]
xor eax, eax
mov ecx, 0x41954a4e
add ecx, 0x1c70b65e
sub ecx, 0x542600a4
sub ecx, 0x9dfffd8
rep stosb byte [rdi], al
jmp 0x1400f846d
call fcn.140099230
lea r11, [rsp + 0x60]
mov rax, r14
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rdi
ret
Function at 0x140105a00
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
nop
add rsp, 0x40bc4056
sub rsp, 0x40bc4076
mov r8, qword [rcx + 0x648]
xor esi, esi
mov rbx, rcx
test r8, r8
je 0x140105a3b
mov rdi, qword [rcx + 0x640]
jmp 0x140105a42
mov rdi, rsi
nop dword [rax]
test r8, r8
je 0x140105a5b
mov rax, qword [rbx + 0x640]
lea rcx, [rax + r8*8]
jmp 0x140105a5e
mov rcx, rsi
cmp rdi, rcx
je 0x140105c9a
mov rax, qword [rdi]
cmp qword [rax + 0x28], rdx
je 0x140105a88
nop
sub rdi, 0x2d717ed8
add rdi, 0x2d717ee0
jmp 0x140105a42
test r8, r8
je 0x140105b51
cmp rdi, qword [rbx + 0x640]
jb 0x140105b51
mov rax, qword [rbx + 0x640]
lea rcx, [rax + r8*8]
cmp rdi, rcx
jae 0x140105b51
mov rdx, rdi
nop word [rax + rax]
mov rcx, qword [rbx + 0x648]
test rcx, rcx
je 0x140105adf
mov rax, qword [rbx + 0x640]
lea rax, [rax + rcx*8]
jmp 0x140105ae2
mov rax, rsi
sub rax, 8
cmp rdx, rax
jae 0x140105b0a
mov rax, qword [rdx + 8]
mov qword [rdx], rax
nop
add rdx, 0x7fe66f41
sub rdx, 0x7fe66f39
jmp 0x140105abf
test rcx, rcx
je 0x140105b51
lea rax, [rcx - 1]
mov qword [rbx + 0x648], rax
test rax, rax
jne 0x140105b51
mov rcx, qword [rbx + 0x640]
test rcx, rcx
je 0x140105b43
call fcn.140099230
mov qword [rbx + 0x640], rsi
mov qword [rbx + 0x650], rsi
mov qword [rbx + 0x648], rsi
mov rcx, qword [rdi]
test rcx, rcx
je 0x140105b73
mov rax, qword [rcx]
mov edx, 0x4b252b22
add edx, 0x1658020d
sub edx, 0x617d2d2e
call qword [rax]
cmp qword [rbx + 0x648], rsi
je 0x140105c9a
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400f0300
mov rcx, qword [rsp + 0x30]
mov r10d, 0x49f855d5
xor r10d, 0x2ce91336
sub r10d, 0x65114643
mov r8d, dword [rsp + 0x34]
mov eax, ecx
mov r9, qword [rbx + 0x648]
sub eax, r8d
cdq
idiv dword [rbx + 0x648]
cmp eax, r10d
cmovl r10d, eax
test r9, r9
je 0x140105c4b
mov rdx, qword [rbx + 0x640]
lea r11, [rdx + r9*8]
cmp rdx, r11
je 0x140105c4b
mov r9d, r10d
xor r9d, 0x39d1d6d
xor r8d, 0x39d1d6d
nop dword [rax]
mov rcx, qword [rdx]
mov eax, esi
xor eax, 0x39d1d6d
add esi, r10d
neg rdx
add rdx, 0xfffffffffffffff8
neg rdx
mov dword [rcx + 0x30], eax
mov dword [rcx + 0x34], 0x1cd8166
add dword [rcx + 0x34], 0x2738bd7b
add dword [rcx + 0x34], 0x99eb191
sub dword [rcx + 0x34], 0x2f07d305
mov dword [rcx + 0x38], r9d
mov dword [rcx + 0x3c], r8d
cmp rdx, r11
jne 0x140105bfa
mov rcx, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x34]
mov rax, qword [rbx + 0x660]
test rax, rax
je 0x140105c92
sub ecx, r8d
mov dword [rax + 0x14], 0xabc724b
xor dword [rax + 0x14], 0x452171ab
add dword [rax + 0x14], 0x2f0cd675
xor dword [rax + 0x14], 0x7d34c738
xor ecx, 0x39d1d6d
xor r8d, 0x39d1d6d
mov dword [rax + 0x10], ecx
mov dword [rax + 0x18], r8d
mov dword [rax + 0x1c], r8d
mov rcx, rbx
call fcn.1400efb10
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
ret
Function at 0x140105cb0
Capabilities:
Encode data using xor

Disassembly:
push rbx
nop
sub rsp, 0x140d29f2
add rsp, 0x140d29d2
mov rax, qword [rcx]
mov rbx, rcx
call qword [rax + 0x78]
mov rdx, qword [rbx + 0x648]
mov rcx, rax
mov qword [rsp + 0x30], rax
call fcn.1401020b0
lea rcx, [rbx + 0x640]
lea rdx, [rsp + 0x30]
call fcn.1400ff4b0
mov rcx, rbx
sub rsp, 0xffffffffffffffe0
pop rbx
jmp 0x140105cb0
push rbx
neg rsp
sub rsp, 0xffffffffffffffe0
neg rsp
cmp qword [rcx + 0x648], 0
mov rbx, rcx
je 0x140105dee
lea rdx, [rsp + 0x30]
call fcn.1400f0300
mov r8, qword [rsp + 0x30]
mov r11d, 0x2617d88
add r11d, 0x1f89e338
sub r11d, 0x21eb6020
mov r9d, dword [rsp + 0x34]
mov eax, r8d
sub eax, r9d
cdq
idiv dword [rbx + 0x648]
mov rdx, qword [rbx + 0x648]
cmp eax, r11d
cmovl r11d, eax
xor r10d, r10d
test rdx, rdx
je 0x140105da4
mov rax, qword [rbx + 0x640]
mov qword [rsp + 0x38], rdi
lea rdi, [rax + rdx*8]
cmp rax, rdi
je 0x140105d9f
mov r8d, r11d
xor r8d, 0x39d1d6d
xor r9d, 0x39d1d6d
nop word [rax + rax]
mov rdx, qword [rax]
mov ecx, r10d
xor ecx, 0x39d1d6d
add r10d, r11d
neg rax
add rax, 0xfffffffffffffff8
neg rax
mov dword [rdx + 0x30], ecx
mov dword [rdx + 0x34], 0x6b88c950
sub dword [rdx + 0x34], 0x17f57223
xor dword [rdx + 0x34], 0x444d6ec4
sub dword [rdx + 0x34], 0x14411c7c
mov dword [rdx + 0x38], r8d
mov dword [rdx + 0x3c], r9d
cmp rax, rdi
jne 0x140105d4c
mov r8, qword [rsp + 0x30]
mov r9d, dword [rsp + 0x34]
mov rdi, qword [rsp + 0x38]
mov rax, qword [rbx + 0x660]
test rax, rax
je 0x140105de6
sub r8d, r9d
mov dword [rax + 0x14], 0x7431caf4
sub dword [rax + 0x14], 0x27015c8
sub dword [rax + 0x14], 0x6e2497bf
xor r8d, 0x39d1d6d
xor r9d, 0x39d1d6d
mov dword [rax + 0x10], r8d
mov dword [rax + 0x18], r9d
mov dword [rax + 0x1c], r9d
mov rcx, rbx
call fcn.1400efb10
nop
sub rsp, 0x7b899b6b
add rsp, 0x7b899b8b
pop rbx
ret
Function at 0x14011982c
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
xchg r10, rsi
mov qword [rsp + 0x18], r10
xchg r10, rsi
mov qword [rsp + 0x20], rdi
nop
mov qword [rsp - 8], rbp
sub rsp, 8
xchg rbp, r11
mov r11, rsp
xchg rbp, r11
neg rsp
sub rsp, 0xffffffffffffff80
neg rsp
xor esi, esi
xchg r12, r12
mov dword [rbp - 0x50], 0x1784131c
xor dword [rbp - 0x50], 0x221f2d4b
add dword [rbp - 0x50], 0x82ee1d1
sub dword [rbp - 0x50], 0x148c71ac
xor dword [rbp - 0x50], 0x292bae79
mov dword [rbp - 0x4c], 0x458675fd
xor dword [rbp - 0x4c], 0x7ae3d5b7
add dword [rbp - 0x4c], 0x2241e97e
sub dword [rbp - 0x4c], 0xd9db54a
xor dword [rbp - 0x4c], 0x5428d480
mov dword [rbp - 0x48], 0x6a0a31c4
sub dword [rbp - 0x48], 0xcf734e3
add dword [rbp - 0x48], 0xb39e586
sub dword [rbp - 0x48], 0x6830e257
mov dword [rbp - 0x44], 0x58f652f6
xor dword [rbp - 0x44], 0x5678ce95
xor dword [rbp - 0x44], 0x1950ace4
add dword [rbp - 0x44], 0x418c2760
sub dword [rbp - 0x44], 0x593c5706
mov qword [rbp + 0x10], rsi
mov dword [rsp - 0x34], 0x2cbb632b
lea ebx, [rsi + 1]
mov rax, qword [rbp + 0x10]
xchg rcx, r9
mov r9, qword [rbp + 0x10]
xchg rcx, r9
xchg r14, rax
mov r14, qword [rbp + 0x10]
xchg r14, rax
and cl, 3
mov dword [rsp - 0x28], ebx
shl cl, 1
shl cl, 1
shl cl, 1
movzx edx, word [rbp + rax*2 - 0x50]
mov eax, 0x30f49d59
add eax, 0x129eda3a
sub eax, 0x145c46df
add eax, 0x337a13a1
shr eax, cl
mov r12, r12
movzx ecx, al
xchg rsi, rax
mov rsi, qword [rbp + 0x10]
xchg rsi, rax
xor cx, dx
mov word [rbp + rax*2 - 0x20], cx
xchg rdx, rdx
xchg rsp, rax
mov rsp, qword [rbp + 0x10]
xchg rsp, rax
add rax, rbx
xchg rsp, rax
mov qword [rbp + 0x10], rsp
xchg rsp, rax
mov rax, qword [rbp + 0x10]
cmp rax, 8
jb 0x1401198fb
xchg r9, r9
lea rax, [rbp - 0x20]
mov word [rbp - 0x10], si
xorps xmm0, xmm0
xchg rdi, rdi
mov qword [rbp - 0x38], rax
lea r9, [rbp - 0x30]
mov dword [rbp - 0x40], 0xe35be5f
add dword [rbp - 0x40], 0x561127a7
xor dword [rbp - 0x40], 0x37b9b1f7
add dword [rbp - 0x40], 0x1b0e298b
sub dword [rbp - 0x40], 0x6efb816c
lea r8, [rbp - 0x40]
mov dword [rsp + 0x20], esi
mov rsp, rsp
xor edx, edx
xor ecx, ecx
movups xmmword [rbp - 0x30], xmm0
mov dword [rsp - 0x34], ecx
call fcn.140134150
xchg r13, rax
mov rdi, r13
xchg r13, rax
test rax, rax
mov dword [rsp - 0x30], esp
je 0x140119a15
mov rcx, rax
call fcn.14010ff18
mov dword [rsp - 0xc], 0x65ce7d47
test al, al
je 0x140119a15
lea rdx, [rbp - 0x40]
xchg rcx, r10
mov r10, rdi
xchg r10, rcx
call fcn.14010ee3c
test al, al
mov dword [rsp - 0x1c], 0x62b7edba
jne 0x140119a18
mov bl, sil
xor eax, eax
mov dword [rsp - 0x18], 0x7dd01b25
lea r11, [rsp + 0x80]
xchg r15, rsi
mov r15, qword [r11 + 0x20]
xchg r15, rsi
lea rdi, [rbp - 0x20]
xchg rsi, rsi
lea ecx, [rax + 8]
rep stosb byte [rdi], al
mov rdi, qword [r11 + 0x28]
mov al, bl
xchg r14, r14
xchg rsi, rbx
mov rsi, qword [r11 + 0x18]
xchg rsi, rbx
xchg rsp, r11
mov r11, rsp
xchg rsp, r11
nop
add rsp, 8
mov rbp, qword [rsp - 8]
ret