joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400d7ef0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
nop
push 0x4d109e3b
mov qword [rsp], rdi
sub rsp, 0x674e42ec
add rsp, 0x674e41ac
xchg r8, rcx
mov rdi, rcx
xchg r8, rcx
xchg rbx, rcx
mov rcx, rbx
xchg rbx, rcx
mov r8d, 0x521dfaa4
sub r8d, 0x3122d1cf
sub r8d, 0x9031267
sub r8d, 0x17f8156e
lea rcx, [rsp + 0x40]
mov r10, r10
xor edx, edx
call fcn.140097d40
mov rax, qword [rbx + 0x238]
lea r8, [rsp + 0x40]
mov dword [rsp - 0x18], esp
mov edx, dword [rdi + 0x10]
movabs rcx, 0x3f736ec37350e4f9
sub rcx, 0x3fd7299d
xor rcx, 0x4c1eaf61
xor rcx, 0x264d161a
rol rax, 6
rol rax, 1
mov r9d, 0xe8684bf
add r9d, 0x553946c6
sub r9d, 0x1dd5dfbf
xor r9d, 0x1ba677ac
xor r9d, 0x5e4f9d6a
xor rax, rcx
xchg rsi, rsi
mov dword [rsp + 0x30], 0x5b0d509e
sub dword [rsp + 0x30], 0x2409aef7
add dword [rsp + 0x30], 0x45d602aa
xor dword [rsp + 0x30], 0x6927b9c4
xor dword [rsp + 0x30], 0x15fe1d97
and dword [rsp + 0x28], 0
mov dword [rsp - 0x1c], edi
movabs rcx, 0x6663e1d46dd378ae
sub rcx, 0x651b985c
add rcx, 0x55c232af
add rcx, 0x7fffffff
add rcx, 0x187c3b0f
and qword [rsp + 0x20], 0
add rax, rcx
xchg r10, r10
xchg rcx, rsp
mov rsp, qword [rdi + 0x20]
xchg rsp, rcx
ror rax, 0xb
ror rax, 0xc
ror rax, 5
ror rax, 4
ror rax, 1
ror rax, 1
call rax
mov r11, r11
test eax, eax
jne 0x1400d80d1
or eax, 0xffffffff
lea rbx, [rsp + 0x40]
mov dword [rsp - 0x2c], edx
cmp byte [rsp + 0x40], 0
mov dword [rsp + 0x150], eax
je 0x1400d80a5
mov rdx, rbx
xchg r8, r8
lea rcx, [rsp + 0x150]
mov r8d, 0x47127265
sub r8d, 0xac52f13
xor r8d, 0x348ca42
sub r8d, 0x3f05890f
inc rbx
mov dword [rsp - 0xc], edx
call fcn.14008d0c0
cmp byte [rbx], 0
jne 0x1400d8058
mov eax, dword [rsp + 0x150]
mov dword [rsp - 0x34], 0x35d043f5
not eax
cmp eax, 0xa2ca6717
je 0x1400d80c2
cmp eax, 0xd7b7e7a8
mov r10, r10
sete al
jmp 0x1400d80d3
mov al, 0x1e
add al, 0x51
sub al, 0x61
add al, 0x29
xor al, 0x36
jmp 0x1400d80d3
xor al, al
xchg rbx, rbp
mov rbp, qword [rsp + 0x158]
xchg rbp, rbx
add rsp, 0x140
pop rdi
mov r8, r8
ret

Function at 0x1400dc6b0
Capabilities:
Encrypt data using curve25519

Disassembly:
xchg rbx, r15
mov qword [rsp + 8], r15
xchg rbx, r15
push rdi
sub rsp, 0xc0
xchg r8, rax
mov r8, rax
xchg r8, rax
mov rbx, rdx
mov dword [rsp - 0x3c], edi
xchg rdx, r8
mov rdx, r8
xchg r8, rdx
xchg rbp, rcx
mov rdi, rbp
xchg rbp, rcx
mov edx, 0x27cc1321
add edx, 0x87432a1
add edx, 0x18bb251a
sub edx, 0x46a383f1
xor edx, 0x257e6cb
xchg rcx, r13
mov r13, rax
xchg rcx, r13
call fcn.1400dcf10
xchg rdx, rdx
movzx eax, byte [rbx + 0x1f]
lea rcx, [rsp + 0x20]
and byte [rbx], 0xf8
mov dword [rsp - 0x38], ecx
and al, 0x3f
or al, 0x40
xchg rbx, rdx
mov rbx, rdx
xchg rdx, rbx
mov byte [rbx + 0x1f], al
mov dword [rsp - 0x40], ecx
call fcn.1400e05b0
lea rdx, [rsp + 0x20]
mov rcx, rdi
call fcn.1400e0500
mov dword [rsp - 0x24], edx
xchg rbx, r8
mov r8, qword [rsp + 0xd0]
xchg rbx, r8
add rsp, 0x32597453
sub rsp, 0x32597393
pop rdi
ret
Function at 0x1400ef0d4
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r14
push r15
nop
add rsp, 0x23be1f44
sub rsp, 0x23be1f74
mov dword [rcx + 8], 0x733451fc
xor dword [rcx + 8], 0x6f7385f1
add dword [rcx + 8], 0x537ef947
xor dword [rcx + 8], 0x6fc6cd55
lea r14, [rcx + 0x298]
xorps xmm0, xmm0
lea rax, [0x14000ba68]
mov qword [rcx], rax
mov rbp, rdx
lea rax, [r14 + 8]
mov rbx, rcx
mov qword [r14], rax
xor edi, edi
mov qword [rcx + 0x290], rdi
mov rsi, r8
movups xmmword [rax], xmm0
mov rcx, r14
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
mov rdx, qword [r8 + 0x38]
mov qword [r14 + 0x38], rdx
call fcn.140017b44
mov r8d, edi
cmp qword [r14 + 0x38], rdi
jbe 0x1400ef182
mov rcx, qword [rsi]
movzx edx, word [rcx + r8*2]
mov word [rax + r8*2], dx
inc r8
cmp r8, qword [r14 + 0x38]
jb 0x1400ef168
mov ecx, dword [rsi + 0x40]
mov edx, 0x742f8130
sub edx, 0x2f3365c1
add edx, 0x197d4e88
mov qword [rbx + 0x2e0], rdi
bts ecx, 0xe
mov dword [rbx + 0x2d8], ecx
mov r15d, 0x502a8d17
sub r15d, 0x118b63c8
xor r15d, 0x42e7401b
mov eax, dword [rsi + 0x54]
and ecx, 0x2000
xor eax, edx
mov dword [rbx + 0x2e8], eax
mov eax, dword [rsi + 0x58]
xor eax, edx
mov dword [rbx + 0x2ec], eax
mov eax, dword [rsi + 0x44]
xor eax, edx
mov dword [rbx + 0x2f0], eax
mov eax, dword [rsi + 0x48]
xor eax, edx
mov dword [rbx + 0x2f4], eax
mov rax, qword [rsi + 0x60]
mov qword [rbx + 0x2f8], rax
mov eax, dword [rsi + 0x4c]
xor eax, r15d
mov dword [rbx + 0x308], eax
mov eax, dword [rsi + 0x50]
xor eax, edx
mov byte [rbx + 0x310], dil
neg ecx
mov dword [rbx + 0x30c], eax
pushf
mov edx, 0x7b0de740
sub edx, 0x64c61908
sub edx, 0x1647ce28
popf
mov qword [rbx + 0x318], rbp
sbb r14, r14
and r14, 0xffffffffffff0100
sub r14, 0xffffffffffff0001
mov rcx, r14
shl rcx, 4
call fcn.1400976a0
mov rcx, rax
mov rdx, r14
movaps xmm0, xmmword [0x140145580]
movups xmmword [rcx], xmm0
lea rcx, [rcx + 0x10]
sub rdx, 1
jne 0x1400ef257
mov qword [rbx + 0x300], rax
mov rdx, rdi
mov rax, qword [rsi + 0x68]
inc rdi
mov ecx, dword [rax + rdx]
xor ecx, r15d
mov dword [rsp + 0x50], ecx
movss xmm0, dword [rsp + 0x50]
mov rax, qword [rsi + 0x68]
movss dword [rsp + 0x20], xmm0
mov ecx, dword [rax + rdx + 4]
xor ecx, r15d
mov dword [rsp + 0x50], ecx
movss xmm0, dword [rsp + 0x50]
mov rax, qword [rsi + 0x68]
movss dword [rsp + 0x24], xmm0
mov ecx, dword [rax + rdx + 8]
xor ecx, r15d
mov dword [rsp + 0x50], ecx
movss xmm0, dword [rsp + 0x50]
mov rax, qword [rsi + 0x68]
movss dword [rsp + 0x28], xmm0
mov ecx, dword [rax + rdx + 0xc]
xor ecx, r15d
mov dword [rsp + 0x50], ecx
movss xmm0, dword [rsp + 0x50]
mov rax, qword [rbx + 0x300]
movss dword [rsp + 0x2c], xmm0
movups xmm1, xmmword [rsp + 0x20]
xorps xmm1, xmmword [0x140145580]
movups xmmword [rdx + rax], xmm1
lea rdx, [rdx + 0x10]
cmp rdi, r14
jl 0x1400ef279
lea rcx, [rbp + 0xa0]
mov qword [rsp + 0x50], rbx
lea rdx, [rsp + 0x50]
call fcn.1400e8dfc
mov rbp, qword [rsp + 0x60]
mov rax, rbx
mov rbx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x68]
nop
sub rsp, 0x56f4f889
add rsp, 0x56f4f8b9
pop r15
pop r14
pop rdi
ret
Function at 0x1400f0c60
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x53ce5c78
add rsp, 0x53ce5bc8
mov rsi, rcx
lea rdx, [rcx + 0x298]
lea rcx, [rsp + 0x20]
call fcn.140073200
or ebx, 0xffffffff
mov dword [rsp + 0xc0], ebx
mov rdi, qword [rax]
cmp byte [rdi], 0
je 0x1400f0ce1
mov rdx, rdi
lea rcx, [rsp + 0xc0]
mov r8d, 0x26c259b8
xor r8d, 0x79485185
sub r8d, 0x38ab4580
sub r8d, 0x26dec2bc
inc rdi
call fcn.14008d0c0
cmp byte [rdi], 0
jne 0x1400f0ca3
mov ebx, dword [rsp + 0xc0]
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x28]
not ebx
cmp rcx, rax
jne 0x1400f0d1b
lea rdi, [rsp + 0x28]
xor eax, eax
mov ecx, 0x56fa3c3c
xor ecx, 0x4e419707
add ecx, 0x4a6f4984
sub ecx, 0x632af43f
rep stosb byte [rdi], al
jmp 0x1400f0d20
call fcn.140097780
mov eax, dword [rsi + 0x2f0]
lea r11, [rsp + 0xb0]
xor eax, 0x69f7
shl eax, 0x10
or eax, dword [rsi + 0x2d8]
mov rsi, qword [r11 + 0x20]
xor eax, ebx
mov rbx, qword [r11 + 0x18]
xor eax, 2
mov rsp, r11
pop rdi
ret

Function at 0x1400f0e4c
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
mov r10d, 0x4aeb4d42
xor r10d, 0x43dc814c
xor r10d, 0x3f4662e7
add r10d, 0x2807bb0e
mov r8d, dword [rcx + 0x2f4]
xor eax, r10d
xor r8d, r10d
xor r9d, r9d
add r8d, r8d
movd xmm2, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x7c786954
mov dword [rsp + 8], eax
movss xmm3, dword [rsp + 8]
mov al, byte [rdx]
cvtdq2ps xmm2, xmm2
test al, al
je 0x1400f0ee9
mov r10, qword [rcx + 0x300]
movzx eax, al
inc rdx
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
xorps xmm0, xmmword [0x140145580]
mov al, byte [rdx]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm2
addss xmm1, xmm3
cvttss2si ecx, xmm1
sub ecx, r8d
add r9d, ecx
test al, al
jne 0x1400f0ead
mov eax, r9d
ret

Function at 0x1400f0fdc
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
mov r10d, 0x4e1eb4c8
sub r10d, 0x3a079b6f
add r10d, 0x4a62509e
mov r8d, dword [rcx + 0x2f4]
xor eax, r10d
xor r8d, r10d
xor r11d, r11d
add r8d, r8d
mov r9d, r11d
movd xmm2, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x7c786954
mov dword [rsp + 8], eax
movss xmm3, dword [rsp + 8]
movzx eax, word [rdx]
cvtdq2ps xmm2, xmm2
test ax, ax
je 0x1400f1085
mov r10, qword [rcx + 0x300]
movzx eax, ax
nop
sub rdx, 0xce09647
add rdx, 0xce09649
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
xorps xmm0, xmmword [0x140145580]
movzx eax, word [rdx]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm2
addss xmm1, xmm3
cvttss2si ecx, xmm1
sub ecx, r8d
add r9d, ecx
test ax, ax
jne 0x1400f103b
mov eax, r9d
ret
Function at 0x1400f108c
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
push rdi
add rsp, 0x4187a052
sub rsp, 0x4187a0f2
xor ebx, ebx
mov rdi, rcx
mov qword [rax + 8], rbx
cmp qword [rcx + 0x2f8], rbx
je 0x1400f1126
mov edx, dword [rcx + 0x2ec]
mov ecx, 0x4485a980
xor ecx, 0x2447c2a0
xor ecx, 0x3ebb02d7
mov eax, dword [rdi + 0x2e8]
xor edx, ecx
xor eax, ecx
lea rcx, [rbx - 1]
imul edx, eax
lea eax, [rbx + 4]
movsxd rsi, edx
mul rsi
cmovo rax, rcx
mov rcx, rax
call fcn.140097620
test rsi, rsi
jle 0x1400f1143
mov rcx, qword [rdi + 0x2f8]
mov edx, dword [rcx + rbx*4]
xor edx, 0x7a8c338e
mov dword [rax + rbx*4], edx
inc rbx
cmp rbx, rsi
jl 0x1400f1102
jmp 0x1400f1143
lea rdx, [rsp + 0xb0]
call fcn.1400f12a0
test al, al
je 0x1400f118e
mov rax, qword [rsp + 0xb0]
lea rcx, [0x14000bb68]
mov qword [rsp + 0x98], 0xe0c3113
add qword [rsp + 0x98], 0x48bd6648
sub qword [rsp + 0x98], 0x56c99743
mov qword [rsp + 0x20], rcx
lea rdx, [rsp + 0x20]
mov rcx, qword [rdi + 0x318]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x30], rax
call fcn.1400f01a4
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x1400f30dc
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r14
push r15
mov rbp, rsp
sub rsp, 0x60
mov rbx, rdx
mov rdi, rcx
mov edx, r8d
lea rcx, [rbp - 0x20]
mov r12, r9
call fcn.14007d678
mov r8d, 0x2055bf75
sub r8d, 0x45f4869
add r8d, 0x3c00bdb3
sub r8d, 0x57f734bd
lea rcx, [rbp - 0x20]
mov rdx, rbx
call fcn.14007d704
test al, al
je 0x1400f3377
mov eax, dword [rdi + 0x2e8]
lea rdx, [rbp - 0x40]
and dword [rbp - 0x28], 0
mov ecx, 0x1b27872c
xor ecx, 0x53ec9259
add ecx, 0x15ae5482
and dword [rbp - 0x24], 0
xor eax, ecx
mov dword [rbp - 0x38], eax
mov r8d, 0x6e42e088
add r8d, 0x4251eac
sub r8d, 0x53d9c56f
sub r8d, 0x1e8e39a5
mov eax, dword [rdi + 0x2ec]
xor eax, ecx
mov dword [rbp - 0x40], 0x54e3836a
sub dword [rbp - 0x40], 0x4d4c6b87
add dword [rbp - 0x40], 0x3013a433
sub dword [rbp - 0x40], 0x56278d0
mov dword [rbp - 0x34], eax
mov eax, dword [rdi + 0x2f4]
xor eax, ecx
mov dword [rbp - 0x3c], 0x11ab8fe0
add dword [rbp - 0x3c], 0x48b783d0
xor dword [rbp - 0x3c], 0x5a631390
mov dword [rbp - 0x30], eax
mov eax, dword [rdi + 0x30c]
xor eax, ecx
lea rcx, [rbp - 0x20]
mov dword [rbp - 0x2c], eax
call fcn.14007f458
test al, al
je 0x1400f3377
mov r14d, dword [rdi + 0x2d8]
mov edx, 0x7ec9d4b
xor edx, 0x13199364
sub edx, 0x14f50e1f
and r14d, 0x2000
mov eax, r14d
neg eax
sbb rbx, rbx
and rbx, 0xffffffffffff0100
add rbx, 0xffff
mov r15, rbx
shl r15, 4
mov rcx, r15
call fcn.1400976a0
mov rsi, rax
test rax, rax
je 0x1400f3377
mov rdx, qword [rdi + 0x300]
xor r8d, r8d
sub rdx, rax
lea edi, [r8 + 1]
movups xmm0, xmmword [rdx + rax]
add r8, rdi
xorps xmm0, xmmword [0x140145580]
movups xmmword [rax], xmm0
lea rax, [rax + 0x10]
cmp r8, rbx
jl 0x1400f3246
mov rcx, r15
call fcn.140097620
neg r14d
mov rdx, rax
mov rcx, rsi
mov rbx, rax
sbb r8d, r8d
and r8d, 0xfff01000
neg r8d
add r8d, 0xfff00010
neg r8d
mov r9d, r8d
call fcn.140093550
mov r8d, eax
mov dword [rbp - 0x28], eax
mov rdx, rbx
lea rcx, [rbp - 0x20]
call fcn.14007f458
mov rcx, rsi
test al, al
jne 0x1400f32c1
call fcn.140097640
mov rcx, rbx
jmp 0x1400f331c
call fcn.140097640
mov rcx, rbx
call fcn.140097630
mov eax, dword [rbp - 0x34]
imul eax, dword [rbp - 0x38]
movsxd rcx, eax
shl rcx, 2
call fcn.140097620
mov r8d, dword [rbp - 0x34]
mov rdx, rax
imul r8d, dword [rbp - 0x38]
mov rcx, r12
mov rbx, rax
shl r8d, 2
mov r9d, r8d
call fcn.140093550
mov r8d, eax
mov dword [rbp - 0x24], eax
mov rdx, rbx
lea rcx, [rbp - 0x20]
call fcn.14007f458
mov rcx, rbx
test al, al
jne 0x1400f3326
call fcn.140097630
jmp 0x1400f3377
call fcn.140097630
lea rcx, [rbp - 0x20]
call fcn.14007f6c8
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.14007ecd0
test al, al
je 0x1400f3377
mov r8d, 0x4cc448ba
sub r8d, 0x2667ffca
add r8d, 0x3c95d968
xor r8d, 0x62f22278
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x20]
call fcn.14007f458
test al, al
jne 0x1400f337a
xor dil, dil
lea rcx, [rbp - 0x20]
call fcn.14007d6fc
lea r11, [rsp + 0x60]
mov al, dil
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
Function at 0x1400f5d80
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
add rsp, 0xffffffffffffffa0
mov rbp, qword [rcx + 0xaf0]
lea rax, [rsp + 0x28]
mov rbx, qword [rcx + 0xab8]
xorps xmm0, xmm0
mov r14, rdx
mov qword [rsp + 0x20], rax
mov rsi, rcx
lea rcx, [rsp + 0x20]
lea rdx, [rbp + 1]
movups xmmword [rsp + 0x28], xmm0
movups xmmword [rsp + 0x38], xmm0
movups xmmword [rsp + 0x48], xmm0
call fcn.140017b44
mov edi, 0x47955073
sub edi, 0x458c7ca5
xor edi, 0x281f8ab5
mov r9, rax
mov ecx, edi
mov r15d, 0x202afefe
add r15d, 0x120657ba
xor r15d, 0x32315647
test rbp, rbp
je 0x1400f5e3f
mov rdx, rax
sub rbx, rax
mov r8, rbp
nop dword [rax]
nop dword [rax + rax]
movzx eax, cx
lea rdx, [rdx + 2]
and ax, r15w
ror ecx, 8
xor ax, word [rbx + rdx - 2]
mov word [rdx - 2], ax
sub r8, 1
jne 0x1400f5e1e
xor ebx, ebx
mov word [r9 + rbp*2], bx
cmp word [rsi + 0xb40], bx
je 0x1400f5e8a
mov edx, ebx
cmp qword [rsi + 0xaf0], rbx
jbe 0x1400f5e8a
nop dword [rax + rax]
mov rax, qword [rsp + 0x20]
movzx ecx, word [rsi + 0xb40]
mov word [rax + rdx*2], cx
inc rdx
cmp rdx, qword [rsi + 0xaf0]
jb 0x1400f5e6a
mov rsi, qword [rsp + 0x20]
lea rax, [r14 + 8]
xorps xmm0, xmm0
mov qword [r14], rax
movups xmmword [rax], xmm0
nop
movabs rdx, 0xffffffff0c345fac
add rdx, 0x6bffcf28
add rdx, 0x7fffffff
xor rdx, 0x7cbd12c
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
nop dword [rax]
inc rdx
cmp word [rsi + rdx*2], bx
jne 0x1400f5ec7
mov rcx, r14
mov qword [r14 + 0x38], rdx
call fcn.140017b44
cmp qword [r14 + 0x38], rbx
jbe 0x1400f5f13
sub rsi, rax
nop
movzx ecx, di
lea rax, [rax + 2]
and cx, r15w
ror edi, 8
xor cx, word [rsi + rax - 2]
inc rbx
mov word [rax - 2], cx
cmp rbx, qword [r14 + 0x38]
jb 0x1400f5eef
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x28]
cmp rcx, rax
jne 0x1400f5f4b
lea rdi, [rsp + 0x28]
xor eax, eax
mov ecx, 0x18c97c9c
add ecx, 0x5586d29a
xor ecx, 0xf0dcc36
sub ecx, 0x615d82d0
rep stosb byte [rdi], al
jmp 0x1400f5f50
call fcn.140097780
lea r11, [rsp + 0x60]
mov rax, r14
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rdi
ret
Function at 0x140103440
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
nop
sub rsp, 0x14212055
add rsp, 0x14212035
mov r8, qword [rcx + 0x648]
xor esi, esi
mov rbx, rcx
test r8, r8
je 0x14010347b
mov rdi, qword [rcx + 0x640]
jmp 0x140103482
mov rdi, rsi
nop dword [rax]
test r8, r8
je 0x14010349b
mov rax, qword [rbx + 0x640]
lea rcx, [rax + r8*8]
jmp 0x14010349e
mov rcx, rsi
cmp rdi, rcx
je 0x1401036e3
mov rax, qword [rdi]
cmp qword [rax + 0x28], rdx
je 0x1401034c8
nop
sub rdi, 0x30195095
add rdi, 0x3019509d
jmp 0x140103482
test r8, r8
je 0x14010359a
cmp rdi, qword [rbx + 0x640]
jb 0x14010359a
mov rax, qword [rbx + 0x640]
lea rcx, [rax + r8*8]
cmp rdi, rcx
jae 0x14010359a
mov rdx, rdi
nop word [rax + rax]
mov rcx, qword [rbx + 0x648]
test rcx, rcx
je 0x14010351f
mov rax, qword [rbx + 0x640]
lea rax, [rax + rcx*8]
jmp 0x140103522
mov rax, rsi
nop
sub rax, 0xffffffffefb55d45
add rax, 0xffffffffefb55d3d
cmp rdx, rax
jae 0x140103553
mov rax, qword [rdx + 8]
mov qword [rdx], rax
nop
sub rdx, 0x4642cf35
add rdx, 0x4642cf3d
jmp 0x1401034ff
test rcx, rcx
je 0x14010359a
lea rax, [rcx - 1]
mov qword [rbx + 0x648], rax
test rax, rax
jne 0x14010359a
mov rcx, qword [rbx + 0x640]
test rcx, rcx
je 0x14010358c
call fcn.140097780
mov qword [rbx + 0x640], rsi
mov qword [rbx + 0x650], rsi
mov qword [rbx + 0x648], rsi
mov rcx, qword [rdi]
test rcx, rcx
je 0x1401035bc
mov rax, qword [rcx]
mov edx, 0x126877a8
xor edx, 0x643da5d4
xor edx, 0x7655d27d
call qword [rax]
cmp qword [rbx + 0x648], rsi
je 0x1401036e3
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400edd90
mov rcx, qword [rsp + 0x30]
mov r10d, 0x292efd2f
add r10d, 0x3e7d230d
xor r10d, 0x47836c6c
sub r10d, 0x202f4bb0
mov r8d, dword [rsp + 0x34]
mov eax, ecx
mov r9, qword [rbx + 0x648]
sub eax, r8d
cdq
idiv dword [rbx + 0x648]
cmp eax, r10d
cmovl r10d, eax
test r9, r9
je 0x140103694
mov rdx, qword [rbx + 0x640]
lea r11, [rdx + r9*8]
cmp rdx, r11
je 0x140103694
mov r9d, r10d
xor r9d, 0x5e7969f7
xor r8d, 0x5e7969f7
nop dword [rax]
mov rcx, qword [rdx]
mov eax, esi
xor eax, 0x5e7969f7
add esi, r10d
neg rdx
add rdx, 0xfffffffffffffff8
neg rdx
mov dword [rcx + 0x30], eax
mov dword [rcx + 0x34], 0x5486495e
sub dword [rcx + 0x34], 0x9e3b01f
add dword [rcx + 0x34], 0x13d6d0b8
mov dword [rcx + 0x38], r9d
mov dword [rcx + 0x3c], r8d
cmp rdx, r11
jne 0x14010364a
mov rcx, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x34]
mov rax, qword [rbx + 0x660]
test rax, rax
je 0x1401036db
sub ecx, r8d
mov dword [rax + 0x14], 0x42873c10
add dword [rax + 0x14], 0x21c6e2
xor dword [rax + 0x14], 0x428e6f29
add dword [rax + 0x14], 0x5e51fc1c
xor ecx, 0x5e7969f7
xor r8d, 0x5e7969f7
mov dword [rax + 0x10], ecx
mov dword [rax + 0x18], r8d
mov dword [rax + 0x1c], r8d
mov rcx, rbx
call fcn.1400ed490
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
sub rsp, 0xffffffffffffffe0
pop rdi
ret
Function at 0x1401037b9
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x20
mov rax, qword [rcx]
mov rbx, rcx
call qword [rax + 0x78]
mov rdx, qword [rbx + 0x648]
mov rcx, rax
mov qword [rsp + 0x30], rax
call fcn.1400ffa20
lea rcx, [rbx + 0x640]
lea rdx, [rsp + 0x30]
call fcn.140103300
mov rcx, rbx
nop
add rsp, 0x44d36604
sub rsp, 0x44d365e4
pop rbx
jmp 0x140103700
push rbx
neg rsp
sub rsp, 0xffffffffffffffe0
neg rsp
cmp qword [rcx + 0x648], 0
mov rbx, rcx
je 0x140103838
lea rdx, [rsp + 0x30]
call fcn.1400edd90
mov r8, qword [rsp + 0x30]
mov r11d, 0x131777f7
add r11d, 0x3b853f43
sub r11d, 0x4e9cb69a
mov r9d, dword [rsp + 0x34]
mov eax, r8d
sub eax, r9d
cdq
idiv dword [rbx + 0x648]
mov rdx, qword [rbx + 0x648]
cmp eax, r11d
cmovl r11d, eax
xor r10d, r10d
test rdx, rdx
je 0x1401037ee
mov rax, qword [rbx + 0x640]
mov qword [rsp + 0x38], rdi
lea rdi, [rax + rdx*8]
cmp rax, rdi
je 0x1401037e9
mov r8d, r11d
xor r8d, 0x5e7969f7
xor r9d, 0x5e7969f7
nop word [rax + rax]
mov rdx, qword [rax]
mov ecx, r10d
xor ecx, 0x5e7969f7
add r10d, r11d
sub rax, 0xfffffffffffffff8
mov dword [rdx + 0x30], ecx
mov dword [rdx + 0x34], 0x4bc235c6
xor dword [rdx + 0x34], 0x7f752f78
sub dword [rdx + 0x34], 0x1e86678
xor dword [rdx + 0x34], 0x6cb7ddb1
mov dword [rdx + 0x38], r8d
mov dword [rdx + 0x3c], r9d
cmp rax, rdi
jne 0x14010379c
mov r8, qword [rsp + 0x30]
mov r9d, dword [rsp + 0x34]
mov rdi, qword [rsp + 0x38]
mov rax, qword [rbx + 0x660]
test rax, rax
je 0x140103830
sub r8d, r9d
mov dword [rax + 0x14], 0x51e0fbdc
xor dword [rax + 0x14], 0x72d4e28f
add dword [rax + 0x14], 0x3b4550a4
xor r8d, 0x5e7969f7
xor r9d, 0x5e7969f7
mov dword [rax + 0x10], r8d
mov dword [rax + 0x18], r9d
mov dword [rax + 0x1c], r9d
mov rcx, rbx
call fcn.1400ed490
nop
add rsp, 0x3ea0ede
sub rsp, 0x3ea0ebe
pop rbx
ret
Function at 0x140117100
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov dword [rsp - 0x40], 0xeb11ab1
xchg rdi, rbp
mov qword [rsp + 0x20], rbp
xchg rbp, rdi
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
mov dword [rsp - 0x28], 0x2494d323
xor esi, esi
mov dword [rbp - 0x50], 0x52025e6e
xor dword [rbp - 0x50], 0x526f7050
xor dword [rbp - 0x50], 0x19a42338
sub dword [rbp - 0x50], 0x19be0cdb
mov dword [rbp - 0x4c], 0x29159194
xor dword [rbp - 0x4c], 0x2d7627d0
add dword [rbp - 0x4c], 0x386da9de
add dword [rbp - 0x4c], 0x13e4ab6
sub dword [rbp - 0x4c], 0x3da6aa80
mov ebx, 0x5a891da1
sub ebx, 0x55bec6c5
xor ebx, 0x7130de13
sub ebx, 0x75fa88ce
mov dword [rbp - 0x48], 0x6f2f94e
add dword [rbp - 0x48], 0x3bdc6ba5
sub dword [rbp - 0x48], 0x1f4ff238
sub dword [rbp - 0x48], 0x237e727d
mov dword [rbp - 0x44], 0x4857cdb1
sub dword [rbp - 0x44], 0x308e9ea7
add dword [rbp - 0x44], 0x65b271cc
sub dword [rbp - 0x44], 0x53b183e5
sub dword [rbp - 0x44], 0x29641caa
mov qword [rbp + 0x10], rsi
xchg rdx, rdx
mov rax, qword [rbp + 0x10]
xchg rcx, r12
mov r12, qword [rbp + 0x10]
xchg r12, rcx
xchg rsp, rax
mov rsp, qword [rbp + 0x10]
xchg rsp, rax
and cl, 3
shl cl, 3
mov dword [rsp - 0x38], edi
movzx edx, word [rbp + rax*2 - 0x50]
mov eax, 0x3e1d33c9
xor eax, 0x628d1b98
sub eax, 0x596803f
sub eax, 0x2ce24e97
shr eax, cl
movzx ecx, al
xchg rcx, rcx
xchg rdi, rax
mov rdi, qword [rbp + 0x10]
xchg rdi, rax
xor cx, dx
mov word [rbp + rax*2 - 0x20], cx
mov r13, r13
mov rax, qword [rbp + 0x10]
add rax, rbx
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov dword [rsp - 0x28], 0x223629d8
cmp rax, 8
jb 0x1401171cf
lea rax, [rbp - 0x20]
mov dword [rsp - 0x20], edi
mov word [rbp - 0x10], si
xorps xmm0, xmm0
mov qword [rbp - 0x38], rax
lea r9, [rbp - 0x30]
xchg rsp, rsp
mov dword [rbp - 0x40], 0x27983103
add dword [rbp - 0x40], 0x34d2b33
add dword [rbp - 0x40], 0x208d51c
sub dword [rbp - 0x40], 0x2cdc3142
lea r8, [rbp - 0x40]
mov dword [rsp + 0x20], esi
mov r8, r8
xor edx, edx
xor ecx, ecx
xchg r14, rbp
movups xmmword [r14 - 0x30], xmm0
xchg r14, rbp
call fcn.140131cf0
mov dword [rsp - 0x24], 0x281b90b2
mov rdi, rax
test rax, rax
je 0x1401172eb
xchg r15, r15
xchg r11, rcx
mov r11, rax
xchg rcx, r11
call fcn.14010d9a0
mov dword [rsp - 0x10], ebx
test al, al
je 0x1401172eb
lea rdx, [rbp - 0x40]
mov dword [rsp - 0x18], 0x2d32c972
xchg rdi, r9
mov rcx, r9
xchg r9, rdi
call fcn.14010c828
mov r14, r14
test al, al
jne 0x1401172f1
mov bl, sil
mov r14, r14
xor eax, eax
lea r11, [rsp + 0x80]
xchg rdx, rsi
mov rdx, qword [r11 + 0x20]
xchg rsi, rdx
lea rdi, [rbp - 0x20]
mov dword [rsp - 0x2c], 0x56a72d07
lea ecx, [rax + 8]
rep stosb byte [rdi], al
mov rdi, qword [r11 + 0x28]
mov al, bl
mov dword [rsp - 0xc], edx
xchg rbx, rdi
mov rdi, qword [r11 + 0x18]
xchg rdi, rbx
mov rsp, r11
xchg r15, r15
nop
add rsp, 8
mov rbp, qword [rsp - 8]
ret