joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400d70bc
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rbp
mov dword [rsp - 0x18], edx
nop
sub rsp, 8
mov qword [rsp], rdi
nop
mov qword [rsp - 8], r14
sub rsp, 8
lea rbp, [rsp - 0x47]
mov r15, r15
neg rsp
sub rsp, 0xffffffffffffff20
neg rsp
xor ebx, ebx
mov dword [rbp - 0x79], 0x24c9155c
sub dword [rbp - 0x79], 0xb5cbf86
add dword [rbp - 0x79], 0x24e21b58
sub dword [rbp - 0x79], 0x3df1709f
mov dword [rbp - 0x75], 0x1ff901b6
add dword [rbp - 0x75], 0x3e62a62a
xor dword [rbp - 0x75], 0x653ec226
add dword [rbp - 0x75], 0x3628076
xor dword [rbp - 0x75], 0x3ebce690
xchg r14, r9
mov r9, rdx
xchg r14, r9
mov dword [rbp - 0x71], 0x432d37d4
xor dword [rbp - 0x71], 0x3a04f7c8
sub dword [rbp - 0x71], 0x56e49d3f
sub dword [rbp - 0x71], 0x21eb2242
mov dword [rbp - 0x6d], 0x65fa9605
sub dword [rbp - 0x6d], 0x2b41a07c
sub dword [rbp - 0x6d], 0x1f6c3a17
add dword [rbp - 0x6d], 0x62fd8066
xor dword [rbp - 0x6d], 0x7e343b29
mov dword [rbp - 0x69], 0x689a23e3
add dword [rbp - 0x69], 0x10fe7fd5
sub dword [rbp - 0x69], 0x38277a39
sub dword [rbp - 0x69], 0x411228f8
mov qword [rbp + 0x77], rbx
mov dword [rsp - 0x20], ecx
mov rax, qword [rbp + 0x77]
xchg r12, rcx
mov r12, qword [rbp + 0x77]
xchg rcx, r12
mov rax, qword [rbp + 0x77]
mov dword [rsp - 0x18], esi
and cl, 3
shl cl, 1
shl cl, 1
shl cl, 1
movzx edx, word [rbp + rax*2 - 0x79]
mov dword [rsp - 0xc], 0x75d37d28
mov eax, 0x26efd126
xor eax, 0x7ae79c00
sub eax, 0x2209e176
sub eax, 0x1f1f37c5
shr eax, cl
mov dword [rsp - 0x18], esi
movzx ecx, al
mov rax, qword [rbp + 0x77]
xor cx, dx
mov word [rbp + rax*2 - 0x65], cx
mov r9, r9
mov rax, qword [rbp + 0x77]
inc rax
mov qword [rbp + 0x77], rax
mov rax, qword [rbp + 0x77]
mov r15, r15
cmp rax, 0xa
jb 0x1400d71a4
xor edx, edx
mov rbp, rbp
mov word [rbp - 0x51], bx
lea rcx, [rbp - 0x65]
call fcn.14008b800
xchg rdx, rsi
mov rdx, rax
xchg rdx, rsi
lea rdi, [rbp - 0x65]
xor eax, eax
lea ecx, [rax + 0xa]
mov dword [rsp - 0x44], ebp
rep stosb byte [rdi], al
test rsi, rsi
je 0x1400d730b
mov edx, 0x5db5c092
sub edx, 0x59ddad19
add edx, 0xb96065c
sub edx, 0x1a30517
add edx, 0x7dce20e3
xchg rsi, rcx
mov rsi, rcx
xchg rsi, rcx
call fcn.140083c50
xchg rdi, rcx
mov rcx, rax
xchg rdi, rcx
test rax, rax
je 0x1400d72f9
mov rdx, rdx
xchg rdx, rsi
mov rsi, r14
xchg rdx, rsi
lea rcx, [rbp - 0x49]
mov dword [rsp - 0x30], 0x6136833d
call fcn.140074ac0
xchg r9, rcx
mov r9, qword [rbp - 0x49]
xchg rcx, r9
call rdi
mov rcx, qword [rbp - 0x49]
mov r14, r14
cmp eax, 1
lea rax, [rbp - 0x41]
sete bl
cmp rcx, rax
mov rdi, rdi
jne 0x1400d72f4
lea rdi, [rbp - 0x41]
xor eax, eax
mov ecx, 0x2e1140c
xor ecx, 0x22633faf
sub ecx, 0x8d8e544
xor ecx, 0x218f1e68
xor ecx, 0x362658b7
rep stosb byte [rdi], al
jmp 0x1400d72f9
call fcn.1400992c0
xchg rcx, r10
mov r10, rsi
xchg r10, rcx
call fcn.14008dcb0
mov dword [rsp - 0x24], ebx
lea r11, [rsp + 0xe0]
mov al, bl
mov rbx, qword [r11 + 0x20]
mov dword [rsp - 0x18], esp
mov rsi, qword [r11 + 0x28]
xchg r14, r11
mov rsp, r14
xchg r11, r14
nop
add rsp, 8
mov r14, qword [rsp - 8]
nop
mov rdi, qword [rsp]
add rsp, 8
pop rbp
xchg r15, r15
ret
Function at 0x1400d93cc
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov r11, r11
xchg r12, rsi
mov qword [rsp + 0x18], r12
xchg rsi, r12
push rbp
nop
sub rsp, 8
mov qword [rsp], rdi
push r14
xchg rsp, rbp
mov rsp, rbp
xchg rbp, rsp
add rsp, 0xffffffffffffffb0
xor esi, esi
mov dword [rbp - 0x30], 0x4c93a43d
sub dword [rbp - 0x30], 0x24d9ac41
xor dword [rbp - 0x30], 0x294c36fa
sub dword [rbp - 0x30], 0xeb5c04a
mov dword [rbp - 0x2c], 0x68b5a8a1
xor dword [rbp - 0x2c], 0x53d7cf7c
xor dword [rbp - 0x2c], 0x36b91888
xor dword [rbp - 0x2c], 0x6bd9525b
xor dword [rbp - 0x2c], 0x66472de3
mov rbx, rcx
mov rdx, rdx
mov dword [rbp - 0x28], 0x6bf23345
sub dword [rbp - 0x28], 0x5d37505e
xor dword [rbp - 0x28], 0x40fe8d24
xor dword [rbp - 0x28], 0x4e456f1b
mov r14d, 0x617c1491
sub r14d, 0x5308d135
add r14d, 0x2e9b78d0
xor r14d, 0x3d0ebc2d
mov dword [rbp - 0x24], 0x3253fd54
xor dword [rbp - 0x24], 0x11b068f
add dword [rbp - 0x24], 0x8414438
add dword [rbp - 0x24], 0xeebcb84
sub dword [rbp - 0x24], 0x49f80aa6
mov dword [rbp - 0x20], 0x78fa080e
add dword [rbp - 0x20], 0x4a88ada
sub dword [rbp - 0x20], 0x38a60cbf
xor dword [rbp - 0x20], 0x44a386ae
mov qword [rbp + 0x20], rsi
mov dword [rsp - 0x24], ebp
mov rax, qword [rbp + 0x20]
xchg rbx, rcx
mov rbx, qword [rbp + 0x20]
xchg rbx, rcx
mov rax, qword [rbp + 0x20]
mov r12, r12
and cl, 3
shl cl, 3
movzx edx, word [rbp + rax*2 - 0x30]
mov eax, 0x107de822
add eax, 0x1b290453
sub eax, 0x162b372a
add eax, 0x5637ea0
shr eax, cl
movzx ecx, al
mov rbx, rbx
xchg r9, rax
mov r9, qword [rbp + 0x20]
xchg r9, rax
xor cx, dx
xchg rbp, rbp
mov word [rbp + rax*2 - 0x1c], cx
mov rax, qword [rbp + 0x20]
add rax, r14
xchg r14, rax
mov qword [rbp + 0x20], r14
xchg r14, rax
xchg r10, rax
mov r10, qword [rbp + 0x20]
xchg r10, rax
cmp rax, 0xa
mov dword [rsp - 0x24], ebp
jb 0x1400d94c1
xor edx, edx
mov word [rbp - 8], si
lea rcx, [rbp - 0x1c]
mov rbx, rbx
call fcn.14008b800
mov r8, rax
mov qword [rbx + 0x200], rax
mov dword [rsp - 0x14], 0x56adcbde
xor eax, eax
lea rdi, [rbp - 0x1c]
lea ecx, [rax + 0xa]
rep stosb byte [rdi], al
mov dword [rsp - 0x44], esp
test r8, r8
je 0x1400d95b4
lea rdx, [rbx + 0x208]
mov rcx, r8
mov r9, r9
call fcn.1400d9ce0
test al, al
jne 0x1400d95b1
mov rcx, qword [rbx + 0x200]
mov dword [rsp - 0x40], 0x5b431224
call fcn.14008dcb0
xor al, al
mov qword [rbx + 0x200], rsi
mov dword [rsp - 0x34], 0x2ac954c4
jmp 0x1400d95b4
mov al, r14b
lea r11, [rsp + 0x50]
mov dword [rsp - 0x40], 0x7f8f66be
xchg rbx, r14
mov r14, qword [r11 + 0x28]
xchg rbx, r14
xchg rsi, r12
mov r12, qword [r11 + 0x30]
xchg rsi, r12
xchg r12, rsp
mov r12, r11
xchg r12, rsp
nop
mov r14, qword [rsp]
add rsp, 8
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
mov rbp, qword [rsp - 8]
ret
Function at 0x1400d9a68
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
mov dword [rsp - 0x24], esp
sub rsp, 0x7438fb62
add rsp, 0x7438fa22
xchg r9, rbx
mov r9, r8
xchg r9, rbx
xchg rcx, rdi
mov rcx, rdi
xchg rdi, rcx
mov r8d, 0x7b2bbe83
sub r8d, 0x2473fcd5
xor r8d, 0x11555204
sub r8d, 0x27618b1f
xor r8d, 0x2081098b
lea rcx, [rsp + 0x40]
mov dword [rsp - 0x28], edx
xor edx, edx
call fcn.140099900
xchg r9, rax
mov r9, qword [rdi + 0x238]
xchg r9, rax
lea r8, [rsp + 0x40]
mov edx, dword [rbx + 0x10]
xchg r9, r9
movabs rcx, 0x6aab540e46ef68c9
sub rcx, 0x3977cc92
add rcx, 0x2da0fb65
xor rcx, 0x38cce8f7
xor rcx, 0x67d22cc8
xor rax, rcx
mov dword [rsp + 0x30], 0x1e4a19b
xor dword [rsp + 0x30], 0x38f99c0a
add dword [rsp + 0x30], 0x2fae985b
sub dword [rsp + 0x30], 0x68cbd5ea
movabs rcx, 0x2f72036664b555d1
xor rcx, 0x3b5430ce
xor rcx, 0x3e0b3d44
add rcx, 0x7fffffff
add rcx, 0xdc497db
xor edi, edi
mov dword [rsp - 0x14], edx
sub rax, rcx
mov dword [rsp + 0x28], edi
not rax
mov dword [rsp - 0x1c], 0x49f23f15
xchg rdi, rdx
mov qword [rsp + 0x20], rdx
xchg rdi, rdx
movabs rcx, 0x731b2c98750f490c
xor rcx, 0x39b92295
sub rcx, 0x1fbc059a
add rcx, 0x32dbc098
xor rcx, 0x7a7d975c
mov r9d, 0x9300bc9
add r9d, 0x6bc8ab0a
sub r9d, 0x2efac4c4
sub r9d, 0x1352a94c
sub r9d, 0x32ab47c3
add rax, rcx
movabs rcx, 0xfb6c530a620e6b6b
add rcx, 0x143d10d0
sub rcx, 0x639fefbc
add rcx, 0x7fffffff
xor rcx, 0x72cc90f6
rol rax, 7
rol rax, 0x11
rol rax, 3
rol rax, 2
add rax, rcx
xchg rcx, r9
mov r9, qword [rbx + 0x20]
xchg rcx, r9
not rax
mov rdi, rdi
call rax
test eax, eax
jne 0x1400d9cb5
or eax, 0xffffffff
mov dword [rsp - 0x3c], 0x69697464
lea rbx, [rsp + 0x40]
mov dword [rsp + 0x150], eax
cmp byte [rsp + 0x40], dil
mov dword [rsp - 0x2c], edx
je 0x1400d9c89
xchg r12, rbx
mov rdx, r12
xchg rbx, r12
lea rcx, [rsp + 0x150]
xchg rsi, rsi
mov r8d, 0x6154b71a
sub r8d, 0x285e10af
xor r8d, 0x7bd36630
sub r8d, 0xd2c7b22
sub r8d, 0x35f94538
inc rbx
call fcn.14008e8f0
mov dword [rsp - 0x14], 0x733666bb
cmp byte [rbx], dil
jne 0x1400d9c30
mov eax, dword [rsp + 0x150]
mov r10, r10
not eax
cmp eax, 0xa2ca6717
je 0x1400d9ca6
xchg rdi, rdi
cmp eax, 0xd7b7e7a8
sete al
jmp 0x1400d9cbf
mov al, 0x25
sub al, 0x25
add al, 0x13
xor al, 5
sub al, 0x15
jmp 0x1400d9cbf
xor al, al
mov dword [rsp - 0x20], 0x1a90ae69
mov rbx, qword [rsp + 0x158]
add rsp, 0x66fad623
sub rsp, 0x66fad4e3
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret
Function at 0x1400de450
Capabilities:
Encrypt data using curve25519

Disassembly:
mov qword [rsp + 8], rbx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0xc0
mov dword [rsp - 0x20], ebp
mov rax, r8
xchg rbx, rdx
mov rdx, rbx
xchg rdx, rbx
xchg rbx, rdx
mov r8, rbx
xchg rdx, rbx
xchg rdi, rdx
mov rdx, rcx
xchg rdi, rdx
mov edx, 0x74aef28c
sub edx, 0x206d6c5e
sub edx, 0x4f22df8b
xor edx, 0x51ea683
xchg rdi, rcx
mov rdi, rax
xchg rdi, rcx
call fcn.1400dec90
mov dword [rsp - 0x44], ecx
movzx eax, byte [rbx + 0x1f]
lea rcx, [rsp + 0x20]
and byte [rbx], 0xf8
mov dword [rsp - 0x34], ecx
and al, 0x3f
or al, 0x40
xchg rdx, rbx
mov rbx, rdx
xchg rdx, rbx
mov byte [rbx + 0x1f], al
mov dword [rsp - 0x28], 0x4edb4197
call fcn.1400e2280
lea rdx, [rsp + 0x20]
xchg rcx, r15
mov r15, rdi
xchg r15, rcx
call fcn.1400e21c0
xchg r15, r15
xchg rsi, rbx
mov rsi, qword [rsp + 0xd0]
xchg rbx, rsi
add rsp, 0xc0
mov rsi, rsi
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret
Function at 0x1400edb64
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xb0
mov r14, rdx
movabs rdx, 0x1f3d0b5f5413c7b9
xor rdx, 0xaa17353
sub rdx, 0x5af804a0
add rdx, 0x50f25c49
cmp qword [rcx + 0x538], rdx
jne 0x1400ede29
xorps xmm0, xmm0
mov rax, r14
xor rax, rdx
mov qword [rcx + 0x538], rax
lea rax, [rbp - 0x41]
mov rsi, qword [rcx + 0x578]
mov rbx, qword [rcx + 0x540]
lea rcx, [rbp - 0x49]
mov qword [rbp - 0x49], rax
movups xmmword [rbp - 0x41], xmm0
lea rdx, [rsi + 1]
movups xmmword [rbp - 0x31], xmm0
movups xmmword [rbp - 0x21], xmm0
call fcn.140017b4c
xor r15d, r15d
mov edx, 0x9229cc6
add edx, 0x4364ef36
add edx, 0x2d39d90e
sub edx, 0x5ee2311f
test rsi, rsi
je 0x1400edc57
mov rdi, rax
sub rbx, rax
mov r8, rsi
movzx ecx, dx
mov r9d, 0x8f50aaf
xor r9d, 0x7b2fe66
add r9d, 0x370222d6
sub r9d, 0x464a16a0
and cx, r9w
ror edx, 8
xor cx, word [rbx + rdi]
mov word [rdi], cx
lea rdi, [rdi + 2]
sub r8, 1
jne 0x1400edc1d
mov word [rax + rsi*2], r15w
movabs rcx, 0x44dadf4b0791d3fb
add rcx, 0x291d6880
add rcx, 0x4e238d82
lea rax, [0x1400ede5c]
mov qword [rbp + 7], r15
mov qword [rbp - 1], rax
mov edx, 0x3fa620f5
add edx, 0x3bc325b0
sub edx, 0x7192ddfd
xor edx, 0x9d617a8
mov rax, qword [0x140141158]
not rax
mov qword [rbp + 0x17], r15
sub rax, rcx
mov qword [rbp + 0x2f], r15
ror rax, 1
movabs rcx, 0x1f1521a25d0451cf
sub rcx, 0x551d655c
add rcx, 0x2c29d578
sub rax, rcx
mov qword [rbp + 0x3f], r15
rol rax, 0x13
xor ecx, ecx
mov dword [rbp - 9], 0x14cc66d3
xor dword [rbp - 9], 0x77534f3d
sub dword [rbp - 9], 0x9d70e9b
xor dword [rbp - 9], 0x59c81b03
mov dword [rbp - 5], 0x3383a0e5
sub dword [rbp - 5], 0x31f2d81a
xor dword [rbp - 5], 0x13779e11
sub dword [rbp - 5], 0x12e756d7
mov qword [rbp + 0xf], r14
call rax
mov qword [rbp + 0x1f], rax
movabs rcx, 0x4dee956138ad033b
xor rcx, 0x1dfbac05
add rcx, 0x1768de15
add rcx, 0x7fffffff
add rcx, 0x19fcc051
mov rax, qword [0x140141730]
xor rax, rcx
movabs rcx, 0x36337d33306b6f3e
xor rcx, 0x18a00b0c
xor rcx, 0xa25e31c
add rcx, 0x7db0a362
rol rax, 4
add rax, rcx
movabs rcx, 0x64233ae14ef94852
xor rcx, 0x5e6742dc
add rcx, 0x22b42a5c
xor rax, rcx
xor ecx, ecx
call rax
mov qword [rbp + 0x27], rax
movabs rcx, 0x57bfc1282e4aa919
add rcx, 0x4426894e
xor rcx, 0x3379ce45
sub rcx, 0x3bad992
mov rax, qword [rbp - 0x49]
mov qword [rbp + 0x37], rax
mov rax, qword [0x140141020]
xor rax, rcx
movabs rcx, 0x42daffc50f122f0b
add rcx, 0x3c6ca58e
add rcx, 0x2d83ff87
sub rcx, 0x8cd7df
ror rax, 0x32
not rax
ror rax, 0x2e
xor rax, rcx
lea rcx, [rbp - 9]
call rax
mov rcx, qword [rbp - 0x49]
test ax, ax
lea rax, [rbp - 0x41]
setne bl
cmp rcx, rax
jne 0x1400ede1d
xor eax, eax
lea rdi, [rbp - 0x41]
lea ecx, [rax + 0x30]
rep stosb byte [rdi], al
jmp 0x1400ede22
call fcn.1400992c0
mov al, bl
jmp 0x1400ede2b
xor al, al
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
Function at 0x1400f2aa0
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
mov r10d, 0x7cd351c
add r10d, 0x4d4e037e
xor r10d, 0x4d4431af
mov r8d, dword [rcx + 0x2f4]
xor eax, r10d
xor r8d, r10d
xor r9d, r9d
add r8d, r8d
movd xmm2, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x16eb76b4
mov dword [rsp + 8], eax
movss xmm3, dword [rsp + 8]
mov al, byte [rdx]
cvtdq2ps xmm2, xmm2
test al, al
je 0x1400f2b36
mov r10, qword [rcx + 0x300]
movzx eax, al
inc rdx
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
xorps xmm0, xmmword [0x140146620]
mov al, byte [rdx]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm2
addss xmm1, xmm3
cvttss2si ecx, xmm1
sub ecx, r8d
add r9d, ecx
test al, al
jne 0x1400f2afa
mov eax, r9d
ret

Function at 0x1400f2c28
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
mov r10d, 0x3db6a685
add r10d, 0x786ccbf
sub r10d, 0x2cde6a0f
mov r8d, dword [rcx + 0x2f4]
xor eax, r10d
xor r8d, r10d
xor r11d, r11d
add r8d, r8d
mov r9d, r11d
movd xmm2, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x16eb76b4
mov dword [rsp + 8], eax
movss xmm3, dword [rsp + 8]
movzx eax, word [rdx]
cvtdq2ps xmm2, xmm2
test ax, ax
je 0x1400f2cd1
mov r10, qword [rcx + 0x300]
movzx eax, ax
nop
add rdx, 0x14191809
sub rdx, 0x14191807
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
xorps xmm0, xmmword [0x140146620]
movzx eax, word [rdx]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm2
addss xmm1, xmm3
cvttss2si ecx, xmm1
sub ecx, r8d
add r9d, ecx
test ax, ax
jne 0x1400f2c87
mov eax, r9d
ret

Function at 0x1400f2cd8
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
push rdi
add rsp, 0xffffffffffffff60
xor ebx, ebx
mov rdi, rcx
mov qword [rax + 8], rbx
cmp qword [rcx + 0x2f8], rbx
je 0x1400f2d6b
mov edx, dword [rcx + 0x2ec]
mov ecx, 0x34c64093
add ecx, 0x4049cb4c
sub ecx, 0x5cb102aa
mov eax, dword [rdi + 0x2e8]
xor edx, ecx
xor eax, ecx
lea rcx, [rbx - 1]
imul edx, eax
lea eax, [rbx + 4]
movsxd rsi, edx
mul rsi
cmovo rax, rcx
mov rcx, rax
call fcn.140099140
test rsi, rsi
jle 0x1400f2d88
mov rcx, qword [rdi + 0x2f8]
mov edx, dword [rcx + rbx*4]
xor edx, 0x1d1855eb
mov dword [rax + rbx*4], edx
inc rbx
cmp rbx, rsi
jl 0x1400f2d47
jmp 0x1400f2d88
lea rdx, [rsp + 0xb0]
call fcn.1400f2eec
test al, al
je 0x1400f2ddf
mov rax, qword [rsp + 0xb0]
lea rcx, [0x14000bb80]
mov qword [rsp + 0x98], 0x19e7f6dd
add qword [rsp + 0x98], 0x41927076
add qword [rsp + 0x98], 0x2e56199
sub qword [rsp + 0x98], 0x5e5fc8d4
mov qword [rsp + 0x20], rcx
lea rdx, [rsp + 0x20]
mov rcx, qword [rdi + 0x318]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x30], rax
call fcn.1400f1e10
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x1400f7920
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
add rsp, 0xffffffffffffffa0
mov rbp, qword [rcx + 0xaf0]
lea rax, [rsp + 0x28]
mov rbx, qword [rcx + 0xab8]
xorps xmm0, xmm0
mov r14, rdx
mov qword [rsp + 0x20], rax
mov rsi, rcx
lea rcx, [rsp + 0x20]
lea rdx, [rbp + 1]
movups xmmword [rsp + 0x28], xmm0
movups xmmword [rsp + 0x38], xmm0
movups xmmword [rsp + 0x48], xmm0
call fcn.140017b4c
mov edi, 0x112050b2
add edi, 0x55ba50c2
sub edi, 0x4bfb6d89
mov r9, rax
mov ecx, edi
mov r15d, 0x7c74f26
add r15d, 0x2f942eb3
xor r15d, 0x5557e9d5
sub r15d, 0x620c930d
test rbp, rbp
je 0x1400f79e6
mov rdx, rax
sub rbx, rax
mov r8, rbp
nop dword [rax]
nop dword [rax + rax]
movzx eax, cx
lea rdx, [rdx + 2]
and ax, r15w
ror ecx, 8
xor ax, word [rbx + rdx - 2]
mov word [rdx - 2], ax
sub r8, 1
jne 0x1400f79c5
xor ebx, ebx
mov word [r9 + rbp*2], bx
cmp word [rsi + 0xb40], bx
je 0x1400f7a31
mov edx, ebx
cmp qword [rsi + 0xaf0], rbx
jbe 0x1400f7a31
nop dword [rax + rax]
mov rax, qword [rsp + 0x20]
movzx ecx, word [rsi + 0xb40]
mov word [rax + rdx*2], cx
inc rdx
cmp rdx, qword [rsi + 0xaf0]
jb 0x1400f7a11
mov rsi, qword [rsp + 0x20]
lea rax, [r14 + 8]
xorps xmm0, xmm0
mov qword [r14], rax
movups xmmword [rax], xmm0
nop
movabs rdx, 0xffffffff363eb9a3
xor rdx, 0x6d64218b
add rdx, 0x7fffffff
add rdx, 0x24a567d8
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
nop dword [rax]
inc rdx
cmp word [rsi + rdx*2], bx
jne 0x1400f7a6e
mov rcx, r14
mov qword [r14 + 0x38], rdx
call fcn.140017b4c
cmp qword [r14 + 0x38], rbx
jbe 0x1400f7aba
sub rsi, rax
nop
movzx ecx, di
lea rax, [rax + 2]
and cx, r15w
ror edi, 8
xor cx, word [rsi + rax - 2]
inc rbx
mov word [rax - 2], cx
cmp rbx, qword [r14 + 0x38]
jb 0x1400f7a96
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x28]
cmp rcx, rax
jne 0x1400f7aec
lea rdi, [rsp + 0x28]
xor eax, eax
mov ecx, 0x38ee237e
xor ecx, 0x16180e59
xor ecx, 0x2ef62d17
rep stosb byte [rdi], al
jmp 0x1400f7af1
call fcn.1400992c0
lea r11, [rsp + 0x60]
mov rax, r14
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rdi
ret
Function at 0x140104ff0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
nop
sub rsp, 0x6be6d4bc
add rsp, 0x6be6d49c
mov r8, qword [rcx + 0x648]
xor esi, esi
mov rbx, rcx
test r8, r8
je 0x14010502b
mov rdi, qword [rcx + 0x640]
jmp 0x140105032
mov rdi, rsi
nop dword [rax]
test r8, r8
je 0x14010504b
mov rax, qword [rbx + 0x640]
lea rcx, [rax + r8*8]
jmp 0x14010504e
mov rcx, rsi
cmp rdi, rcx
je 0x14010528d
mov rax, qword [rdi]
cmp qword [rax + 0x28], rdx
je 0x140105078
nop
sub rdi, 0x39a68c
add rdi, 0x39a694
jmp 0x140105032
test r8, r8
je 0x14010514a
cmp rdi, qword [rbx + 0x640]
jb 0x14010514a
mov rax, qword [rbx + 0x640]
lea rcx, [rax + r8*8]
cmp rdi, rcx
jae 0x14010514a
mov rdx, rdi
nop word [rax + rax]
mov rcx, qword [rbx + 0x648]
test rcx, rcx
je 0x1401050cf
mov rax, qword [rbx + 0x640]
lea rax, [rax + rcx*8]
jmp 0x1401050d2
mov rax, rsi
nop
add rax, 0xffffffffdbd78f81
sub rax, 0xffffffffdbd78f89
cmp rdx, rax
jae 0x140105103
mov rax, qword [rdx + 8]
mov qword [rdx], rax
nop
add rdx, 0x45cb68e6
sub rdx, 0x45cb68de
jmp 0x1401050af
test rcx, rcx
je 0x14010514a
lea rax, [rcx - 1]
mov qword [rbx + 0x648], rax
test rax, rax
jne 0x14010514a
mov rcx, qword [rbx + 0x640]
test rcx, rcx
je 0x14010513c
call fcn.1400992c0
mov qword [rbx + 0x640], rsi
mov qword [rbx + 0x650], rsi
mov qword [rbx + 0x648], rsi
mov rcx, qword [rdi]
test rcx, rcx
je 0x14010516c
mov rax, qword [rcx]
mov edx, 0x65771757
xor edx, 0x78a112cb
sub edx, 0x1dd6059b
call qword [rax]
cmp qword [rbx + 0x648], rsi
je 0x14010528d
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400efa20
mov rcx, qword [rsp + 0x30]
mov r10d, 0x16e85d9d
sub r10d, 0x1668be07
xor r10d, 0x7f9f36
mov r8d, dword [rsp + 0x34]
mov eax, ecx
mov r9, qword [rbx + 0x648]
sub eax, r8d
cdq
idiv dword [rbx + 0x648]
cmp eax, r10d
cmovl r10d, eax
test r9, r9
je 0x14010523e
mov rdx, qword [rbx + 0x640]
lea r11, [rdx + r9*8]
cmp rdx, r11
je 0x14010523e
mov r9d, r10d
xor r9d, 0x185f0935
xor r8d, 0x185f0935
nop dword [rax]
mov rcx, qword [rdx]
mov eax, esi
xor eax, 0x185f0935
add esi, r10d
sub rdx, 0xfffffffffffffff8
mov dword [rcx + 0x30], eax
mov dword [rcx + 0x34], 0x69d5b4ab
xor dword [rcx + 0x34], 0x53a409f
sub dword [rcx + 0x34], 0x3e245063
sub dword [rcx + 0x34], 0x166c9a9c
mov dword [rcx + 0x38], r9d
mov dword [rcx + 0x3c], r8d
cmp rdx, r11
jne 0x1401051f3
mov rcx, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x34]
mov rax, qword [rbx + 0x660]
test rax, rax
je 0x140105285
sub ecx, r8d
mov dword [rax + 0x14], 0x3c6d554b
add dword [rax + 0x14], 0x20cb7c0c
sub dword [rax + 0x14], 0x2811ae55
xor dword [rax + 0x14], 0x2d782a37
xor ecx, 0x185f0935
xor r8d, 0x185f0935
mov dword [rax + 0x10], ecx
mov dword [rax + 0x18], r8d
mov dword [rax + 0x1c], r8d
mov rcx, rbx
call fcn.1400ef130
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
ret
Function at 0x140105359
Capabilities:
Encode data using xor

Disassembly:
push rbx
nop
add rsp, 0x546492e4
sub rsp, 0x54649304
mov rax, qword [rcx]
mov rbx, rcx
call qword [rax + 0x78]
mov rdx, qword [rbx + 0x648]
mov rcx, rax
mov qword [rsp + 0x30], rax
call fcn.1401016a0
lea rcx, [rbx + 0x640]
lea rdx, [rsp + 0x30]
call fcn.1400fa5c0
mov rcx, rbx
neg rsp
add rsp, 0xffffffffffffffe0
neg rsp
pop rbx
jmp 0x1401052a0
push rbx
neg rsp
sub rsp, 0xffffffffffffffe0
neg rsp
cmp qword [rcx + 0x648], 0
mov rbx, rcx
je 0x1401053e8
lea rdx, [rsp + 0x30]
call fcn.1400efa20
mov r8, qword [rsp + 0x30]
mov r11d, 0x7fa06a01
xor r11d, 0x55a98b10
sub r11d, 0x28876a76
xor r11d, 0x182763b
mov r9d, dword [rsp + 0x34]
mov eax, r8d
sub eax, r9d
cdq
idiv dword [rbx + 0x648]
mov rdx, qword [rbx + 0x648]
cmp eax, r11d
cmovl r11d, eax
xor r10d, r10d
test rdx, rdx
je 0x140105397
mov rax, qword [rbx + 0x640]
mov qword [rsp + 0x38], rdi
lea rdi, [rax + rdx*8]
cmp rax, rdi
je 0x140105392
mov r8d, r11d
xor r8d, 0x185f0935
xor r9d, 0x185f0935
nop word [rax + rax]
mov rdx, qword [rax]
mov ecx, r10d
xor ecx, 0x185f0935
add r10d, r11d
nop
add rax, 0x7ad3698e
sub rax, 0x7ad36986
mov dword [rdx + 0x30], ecx
mov dword [rdx + 0x34], 0x1d91b326
sub dword [rdx + 0x34], 0x98863f2
add dword [rdx + 0x34], 0x455ba01
mov dword [rdx + 0x38], r8d
mov dword [rdx + 0x3c], r9d
cmp rax, rdi
jne 0x140105343
mov r8, qword [rsp + 0x30]
mov r9d, dword [rsp + 0x34]
mov rdi, qword [rsp + 0x38]
mov rax, qword [rbx + 0x660]
test rax, rax
je 0x1401053e0
sub r8d, r9d
mov dword [rax + 0x14], 0x1c7b1c7b
xor dword [rax + 0x14], 0x26d91e32
xor dword [rax + 0x14], 0x555eaf4b
xor dword [rax + 0x14], 0x77a3a437
xor r8d, 0x185f0935
xor r9d, 0x185f0935
mov dword [rax + 0x10], r8d
mov dword [rax + 0x18], r9d
mov dword [rax + 0x1c], r9d
mov rcx, rbx
call fcn.1400ef130
nop
add rsp, 0x52f07d6a
sub rsp, 0x52f07d4a
pop rbx
ret