joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14009e6bc
Capabilities:
Encode data using xor

Disassembly:
xchg r10, rax
mov r10, qword [rcx + 0xf8]
xchg r10, rax
xor r8d, r8d
mov dword [rsp - 0x14], 0x20169b22
xchg r9, rdx
mov rdx, r9
xchg rdx, r9
test rax, rax
mov dword [rsp - 0x28], 0x717eb52a
je 0x14009e73b
mov ecx, r8d
mov edx, 0x9555d6
xor edx, 0x483d990a
add edx, 0x16e8c776
add edx, 0x11c4d6d8
sub edx, 0x50ed03d5
rol edx, cl
mov dword [rsp - 0x28], edi
xor dl, byte [rax]
inc rax
mov byte [r8 + r9], dl
inc r8
mov dword [rsp - 0x10], 0x1297be02
cmp r8, 0x20
jb 0x14009e6ec
mov al, 0x74
xor al, 0
sub al, 0x72
xor al, 0x4c
xor al, 0x4f
ret
xchg r11, rax
mov r11, qword [rcx + 0x100]
xchg r11, rax
test rax, rax
xchg r8, r8
je 0x14009e775
xchg rdi, rax
movups xmm0, xmmword [rdi]
xchg rdi, rax
movups xmmword [rdx], xmm0
xchg r13, rax
movups xmm1, xmmword [r13 + 0x10]
xchg r13, rax
xchg rdx, r15
movups xmmword [r15 + 0x10], xmm1
xchg r15, rdx
jmp 0x14009e730
xorps xmm0, xmm0
xor al, al
xchg rdx, r12
movups xmmword [r12], xmm0
xchg r12, rdx
movups xmmword [rdx + 0x10], xmm0
mov dword [rsp - 0x44], 0x18a56057
ret
Function at 0x1400b5048
Capabilities:
Encode data using xor

Disassembly:
xchg r11, rsp
mov rsp, r11
xchg r11, rsp
xchg rcx, rbx
mov qword [r11 + 8], rcx
xchg rbx, rcx
xchg rsi, r13
mov qword [r11 + 0x18], r13
xchg r13, rsi
xchg rdi, r14
mov qword [r11 + 0x20], r14
xchg r14, rdi
push rdi
mov qword [rsp], r14
neg rsp
sub rsp, 0xffffffffffffffc0
neg rsp
mov r8, qword [0x1401414c8]
lea rdx, [r11 + 0x10]
mov rbx, rcx
mov r8, r8
mov dword [rsp + 0x58], 0x6d4dc57f
xor dword [rsp + 0x58], 0x72106502
xor dword [rsp + 0x58], 0x4f795ea9
sub dword [rsp + 0x58], 0x5024fec4
movabs rcx, 0x42ff1dab46f3c99a
sub rcx, 0x35e4e8a
add rcx, 0x1827b631
sub rcx, 0x59480aef
xor rcx, 0x776d438d
movabs rax, 0x4f4219b11e32ea66
add rax, 0x1384a320
sub rax, 0x2af16d7c
add rax, 0x6527f808
add rax, 0x3ff0d8a6
add r8, rcx
mov dword [rsp - 0x44], edi
lea rcx, [r11 - 0x28]
ror r8, 0x21
ror r8, 0x17
ror r8, 4
ror r8, 1
not r8
add r8, rax
mov dword [rsp - 0x44], edi
movabs rax, 0x584acad440262572
xor rax, 0x61036d1c
add rax, 0x344d83d2
add rax, 0x48a643fa
xor r8, rax
call r8
mov rbx, rbx
lea rdi, [rbx + 8]
xorps xmm0, xmm0
xchg rdi, r11
mov qword [rbx], r11
xchg rdi, r11
xor esi, esi
mov dword [rsp - 0x38], 0x3afdc4e9
xchg r9, rdi
movups xmmword [r9], xmm0
xchg r9, rdi
xchg rdi, r14
movups xmmword [r14 + 0x10], xmm0
xchg r14, rdi
movups xmmword [rdi + 0x20], xmm0
xchg rsp, rsp
test eax, eax
jne 0x1400b518a
mov qword [rbx + 0x38], rsi
mov r13, r13
jmp 0x1400b52bf
lea rax, [rsp + 0x20]
mov dword [rsp - 0x40], edi
or r14, 0xffffffffffffffff
inc r14
cmp word [rax + r14*2], si
mov r12, r12
jne 0x1400b5197
xchg r14, rcx
mov qword [rbx + 0x38], rcx
xchg r14, rcx
cmp qword [rbx], rdi
je 0x1400b51c6
xchg r12, r12
mov rcx, qword [rbx]
call fcn.140097d00
cmp r14, 0x18
mov r15, r15
jbe 0x1400b5201
lea rcx, [r14 + r14]
call fcn.140097fa0
mov dword [rsp - 0x44], ebp
xchg r13, rax
mov qword [rbx], r13
xchg r13, rax
test rax, rax
jne 0x1400b520b
xchg rdi, rdx
mov qword [rbx], rdx
xchg rdi, rdx
mov rcx, rsi
jmp 0x1400b5234
mov qword [rbx], rdi
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
xorps xmm0, xmm0
mov dword [rsp - 0x28], 0x29eabdef
movups xmmword [rax], xmm0
xchg rsi, rax
movups xmmword [rsi + 0x10], xmm0
xchg rsi, rax
xchg r12, rax
movups xmmword [r12 + 0x20], xmm0
xchg r12, rax
xchg rdx, rcx
mov rdx, qword [rbx]
xchg rdx, rcx
mov edx, 0x203401ea
add edx, 0x39db488a
add edx, 0x147636bb
xor edx, 0x3306b097
cmp qword [rbx + 0x38], rsi
mov dword [rsp - 0x1c], 0x52e4dc13
jbe 0x1400b52bf
lea r8, [rsp + 0x20]
sub r8, rcx
mov dword [rsp - 0x20], edx
movzx eax, dx
mov r9d, 0x766f5a91
sub r9d, 0x52a475f2
add r9d, 0xd8229d7
add r9d, 0x44ce4463
xor r9d, 0x761b5226
and ax, r9w
mov r15, r15
ror edx, 7
ror edx, 1
xor ax, word [r8 + rcx]
inc rsi
mov dword [rsp - 0x38], esp
mov word [rcx], ax
lea rcx, [rcx + 2]
cmp rsi, qword [rbx + 0x38]
jb 0x1400b5269
mov dword [rsp - 0x38], 0x2c0a36c8
xchg rsi, rcx
mov rcx, qword [rsp + 0x60]
xchg rsi, rcx
xchg rbx, rax
mov rbx, rax
xchg rbx, rax
xchg r15, rbx
mov r15, qword [rsp + 0x50]
xchg r15, rbx
xchg r11, rdi
mov r11, qword [rsp + 0x68]
xchg rdi, r11
nop
add rsp, 0x10ca4443
sub rsp, 0x10ca4403
pop r14
xchg r15, r15
ret
Function at 0x1400c6fb4
Capabilities:
Enumerate pe sections

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
xchg rsp, rsp
mov qword [rsp + 0x18], rsi
nop
push 0x1ad5459
mov qword [rsp], rdi
nop
mov qword [rsp - 8], r12
sub rsp, 8
nop
sub rsp, 8
mov qword [rsp], r13
nop
mov qword [rsp - 8], r14
sub rsp, 8
nop
mov qword [rsp - 8], r15
sub rsp, 8
sub rsp, 0x20
movzx esi, word [rdx + 0x14]
mov dword [rsp - 0x18], edx
lea rbx, [rdx + 0x18]
movzx eax, word [rdx + 6]
mov r13, rcx
mov dword [rsp - 0x28], ebx
add rbx, rsi
mov ecx, 0x72d15e88
sub ecx, 0x46e155d
sub ecx, 0x5ac18cf4
add ecx, 0x5a7cca4c
sub ecx, 0x6e1e8682
xchg r15, r10
mov r10, r9
xchg r10, r15
xchg r12, r10
mov r10, r8
xchg r10, r12
xchg rdi, rdx
mov rdx, rdi
xchg rdi, rdx
cmp cx, ax
mov rdi, rdi
jae 0x1400c70b0
lea rbp, [rdx + 0x40]
add rbp, rsi
mov dword [rsp - 0x2c], 0x6693dcd6
sub ax, cx
movzx r14d, ax
xchg rdx, rsi
mov rsi, rbp
xchg rsi, rdx
xchg rcx, r13
mov r13, rcx
xchg r13, rcx
call fcn.1400c7d4c
mov r11, r11
test al, al
xchg rcx, rbp
mov rbp, rcx
xchg rbp, rcx
cmove rcx, rbx
mov rsi, rsi
sub rbp, 0xffffffffffffffd8
mov rbx, rcx
sub r14, 1
mov dword [rsp - 0x34], edi
jne 0x1400c706f
mov eax, dword [rsi + rdi + 0x24]
xchg rdx, rbx
mov rbx, rdx
xchg rdx, rbx
xchg rdi, rcx
mov rdi, rcx
xchg rdi, rcx
mov dword [r12], eax
call fcn.140084630
mov r10, r10
add eax, dword [rbx + 0xc]
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rdx, rdx
xchg r12, rsi
mov r12, qword [rsp + 0x60]
xchg rsi, r12
mov dword [r15], eax
mov dword [rsp - 0x24], 0x2b478aa6
neg rsp
add rsp, 0xffffffffffffffe0
neg rsp
nop
mov r15, qword [rsp]
add rsp, 8
nop
add rsp, 8
mov r14, qword [rsp - 8]
pop r13
mov r11, r11
nop
mov r12, qword [rsp]
add rsp, 8
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret
Function at 0x1400d8014
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, rbp
mov qword [rsp + 0x10], rbp
xchg rbx, rbp
mov qword [rsp + 0x18], rsi
xchg rdi, rsi
mov qword [rsp + 0x20], rsi
xchg rsi, rdi
nop
sub rsp, 8
mov qword [rsp], rbp
mov rbp, rsp
neg rsp
sub rsp, 0xffffffffffffffb0
neg rsp
xor esi, esi
mov dword [rsp - 0x38], 0x8dc262b
mov dword [rbp - 0x30], 0x1809b20c
sub dword [rbp - 0x30], 0xbee7081
xor dword [rbp - 0x30], 0x10f9d2e6
sub dword [rbp - 0x30], 0x1ca0927e
mov dword [rbp - 0x2c], 0x4586ee6a
xor dword [rbp - 0x2c], 0x406fc1f0
add dword [rbp - 0x2c], 0x1fe02f8d
xor dword [rbp - 0x2c], 0xf010604
xor dword [rbp - 0x2c], 0x2aca5992
xchg rsp, rbx
mov rsp, rcx
xchg rbx, rsp
mov dword [rbp - 0x28], 0x73e270c4
xor dword [rbp - 0x28], 0x3afc1184
add dword [rbp - 0x28], 0x2f825af6
xor dword [rbp - 0x28], 0x78a3bcbd
mov edi, 0x559b8bc2
sub edi, 0x4afbc8a0
xor edi, 0x2a284d78
xor edi, 0x6a6885e7
sub edi, 0x4adf0bba
mov dword [rbp - 0x24], 0x7bd80d45
xor dword [rbp - 0x24], 0x234a196c
sub dword [rbp - 0x24], 0x22459f52
sub dword [rbp - 0x24], 0x3613742a
mov dword [rbp - 0x20], 0x6e390df9
sub dword [rbp - 0x20], 0x242628c3
sub dword [rbp - 0x20], 0x1f3450f0
sub dword [rbp - 0x20], 0x2a819372
mov qword [rbp + 0x10], rsi
mov rax, qword [rbp + 0x10]
mov dword [rsp - 0xc], 0x79431759
xchg r9, rcx
mov r9, qword [rbp + 0x10]
xchg rcx, r9
mov rax, qword [rbp + 0x10]
mov dword [rsp - 0x3c], 0x3cbe87d5
and cl, dil
shl cl, 2
shl cl, 1
movzx edx, word [rbp + rax*2 - 0x30]
mov eax, 0x9377f67
xor eax, 0x56de3202
xor eax, 0x2bf13533
xor eax, 0x299b49ee
shr eax, cl
mov dword [rsp - 0xc], ebp
movzx ecx, al
mov rax, qword [rbp + 0x10]
xor cx, dx
mov word [rbp + rax*2 - 0x1c], cx
mov dword [rsp - 0x3c], edi
xchg r14, rax
mov r14, qword [rbp + 0x10]
xchg r14, rax
inc rax
xchg rdi, rax
mov qword [rbp + 0x10], rdi
xchg rdi, rax
xchg r15, rax
mov r15, qword [rbp + 0x10]
xchg r15, rax
cmp rax, 0xa
xchg rdi, rdi
jb 0x1400d8118
xor edx, edx
mov word [rbp - 8], si
lea rcx, [rbp - 0x1c]
xchg r15, r15
call fcn.140089ff0
xchg r8, rax
mov rax, r8
xchg r8, rax
xchg r14, rax
mov qword [rbx + 0x200], r14
xchg r14, rax
xor eax, eax
mov dword [rsp - 0x24], 0x6ee4b8eb
lea rdi, [rbp - 0x1c]
lea ecx, [rax + 0xa]
rep stosb byte [rdi], al
xchg rsi, rsi
test r8, r8
je 0x1400d8229
lea rdx, [rbx + 0x208]
mov dword [rsp - 0x44], ecx
xchg r8, r9
mov rcx, r9
xchg r8, r9
call fcn.1400d88fc
mov dword [rsp - 0x3c], 0x677a2e10
test al, al
jne 0x1400d821f
xchg rcx, rdi
mov rdi, qword [rbx + 0x200]
xchg rdi, rcx
call fcn.14008c510
xor al, al
mov qword [rbx + 0x200], rsi
xchg r11, r11
jmp 0x1400d8229
mov al, 0x48
xor al, 0x5e
add al, 0x28
xor al, 0x21
sub al, 0x1e
xchg rcx, rbx
mov rcx, qword [rsp + 0x68]
xchg rbx, rcx
xchg rsi, rbp
mov rbp, qword [rsp + 0x70]
xchg rbp, rsi
mov rdi, qword [rsp + 0x78]
mov dword [rsp - 0x44], 0x4a6d1138
sub rsp, 0xffffffffffffffb0
pop rbp
ret
Function at 0x1400d86dc
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
add rsp, 0xfffffffffffffec0
mov rbx, r8
xchg rdi, r8
mov r8, rcx
xchg r8, rdi
mov r8d, 0x74692ea2
xor r8d, 0x7094ab6f
xor r8d, 0x6f4daf42
xor r8d, 0x6bb02b8f
lea rcx, [rsp + 0x40]
xor edx, edx
call fcn.140098320
mov dword [rsp - 0x14], 0xa637b57
xchg r13, rax
mov r13, qword [rdi + 0x238]
xchg r13, rax
lea r8, [rsp + 0x40]
mov dword [rsp - 0x20], edi
mov edx, dword [rbx + 0x10]
movabs rcx, 0x6ca67a211acf49c6
xor rcx, 0x2ee7893c
sub rcx, 0x1aa11915
add rcx, 0x519615c2
sub rcx, 0x6b192684
xor rax, rcx
mov rsp, rsp
mov dword [rsp + 0x30], 0xc87721c
add dword [rsp + 0x30], 0x20cea235
sub dword [rsp + 0x30], 0x2cfca0f0
xor dword [rsp + 0x30], 0x6b496cf
sub dword [rsp + 0x30], 0x6ede5ac
movabs rcx, 0x55708a004b0dc512
xor rcx, 0x1d5a0d90
add rcx, 0x35e7c4d
sub rcx, 0x1646412b
xor edi, edi
sub rax, rcx
mov dword [rsp - 0x2c], 0x55e57261
mov dword [rsp + 0x28], edi
ror rax, 2
ror rax, 0xe
movabs rcx, 0xeddf8e4559fc452a
xor rcx, 0x3265b526
xor rcx, 0x432e0b23
add rcx, 0xa531a2d
add rcx, 0x5281568d
add rax, rcx
mov dword [rsp - 0x30], 0x310fe70b
xchg rdx, rdi
mov qword [rsp + 0x20], rdx
xchg rdx, rdi
xchg rcx, r13
mov r13, qword [rbx + 0x20]
xchg r13, rcx
mov r9d, 0x4609c1a4
add r9d, 0x9bd8333
xor r9d, 0x27d28edb
sub r9d, 0x26fcc516
sub r9d, 0x411903f6
call rax
mov dword [rsp - 0x18], 0x9ee7ade
test eax, eax
jne 0x1400d88e4
or eax, 0xffffffff
mov dword [rsp - 0x1c], 0x4c7dd1d
lea rbx, [rsp + 0x40]
mov dword [rsp + 0x150], eax
cmp byte [rsp + 0x40], dil
je 0x1400d88b5
mov rdi, rdi
mov rdx, rbx
lea rcx, [rsp + 0x150]
mov r8d, 0x1a1de039
add r8d, 0x4f8125a
add r8d, 0x22a631b1
xor r8d, 0x41bc2445
inc rbx
call fcn.14008d1e0
mov dword [rsp - 0x40], 0x576f5f50
cmp byte [rbx], dil
jne 0x1400d886f
mov eax, dword [rsp + 0x150]
not eax
mov r9, r9
cmp eax, 0xa2ca6717
je 0x1400d88d5
cmp eax, 0xd7b7e7a8
mov r14, r14
sete al
jmp 0x1400d88e6
mov al, 0x37
xor al, 0x73
xor al, 0x5b
xor al, 0x45
sub al, 0x59
jmp 0x1400d88e6
xor al, al
mov rbx, qword [rsp + 0x158]
add rsp, 0x140
xchg rbx, rbx
pop rdi
ret
Function at 0x1400dd000
Capabilities:
Encrypt data using curve25519

Disassembly:
mov qword [rsp + 8], rbx
mov r12, r12
nop
push r14
mov qword [rsp], rdi
add rsp, 0x1d4198fc
sub rsp, 0x1d4199bc
mov rax, r8
mov rbx, rdx
xchg rsi, rsi
xchg r12, rdx
mov r8, r12
xchg rdx, r12
xchg r10, rcx
mov rdi, r10
xchg rcx, r10
mov edx, 0x468ac5e
xor edx, 0x26c10c0f
add edx, 0x3130c509
add edx, 0x1900aa25
sub edx, 0x6cdb0f5f
xchg rcx, r8
mov r8, rax
xchg rcx, r8
call fcn.1400dd860
movzx eax, byte [rbx + 0x1f]
xchg r13, r13
lea rcx, [rsp + 0x20]
and byte [rbx], 0xf8
and al, 0x3f
or al, 0x40
mov rcx, rcx
mov rdx, rbx
mov byte [rbx + 0x1f], al
call fcn.1400e0eb0
mov dword [rsp - 0x20], esi
lea rdx, [rsp + 0x20]
xchg rbx, rcx
mov rbx, rdi
xchg rcx, rbx
call fcn.1400e0dd0
xchg rsi, rbx
mov rsi, qword [rsp + 0xd0]
xchg rsi, rbx
add rsp, 0x5ec377a6
sub rsp, 0x5ec376e6
pop rdi
ret
Function at 0x1400ec728
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xb0
mov r14, rdx
movabs rdx, 0x2d264c3e6788fc56
xor rdx, 0x7d04f675
add rdx, 0x5ef0fa25
cmp qword [rcx + 0x538], rdx
jne 0x1400ec9f1
xorps xmm0, xmm0
mov rax, r14
xor rax, rdx
mov qword [rcx + 0x538], rax
lea rax, [rbp - 0x41]
mov rsi, qword [rcx + 0x578]
mov rbx, qword [rcx + 0x540]
lea rcx, [rbp - 0x49]
mov qword [rbp - 0x49], rax
movups xmmword [rbp - 0x41], xmm0
lea rdx, [rsi + 1]
movups xmmword [rbp - 0x31], xmm0
movups xmmword [rbp - 0x21], xmm0
call fcn.140017bec
xor r15d, r15d
mov edx, 0x2f02cef2
add edx, 0x1e902d32
add edx, 0xff03594
test rsi, rsi
je 0x1400ec80e
mov rdi, rax
sub rbx, rax
mov r8, rsi
movzx ecx, dx
mov r9d, 0x34b07ca1
xor r9d, 0x4c641d2a
sub r9d, 0xfbf536e
sub r9d, 0x69150d1e
and cx, r9w
ror edx, 8
xor cx, word [rbx + rdi]
mov word [rdi], cx
lea rdi, [rdi + 2]
sub r8, 1
jne 0x1400ec7d4
mov word [rax + rsi*2], r15w
movabs rcx, 0x7c31f6d57cee98ae
sub rcx, 0x30a00302
add rcx, 0x7fffffff
add rcx, 0x302fb6c6
lea rax, [0x1400eca24]
mov qword [rbp + 7], r15
mov qword [rbp - 1], rax
mov edx, 0x5e89cb48
xor edx, 0x372b36fe
sub edx, 0x51a7d952
sub edx, 0x17faa564
mov rax, qword [0x140141158]
xor rax, rcx
mov qword [rbp + 0x17], r15
not rax
mov qword [rbp + 0x2f], r15
movabs rcx, 0x7a89531935b7f655
sub rcx, 0x2fcadba3
add rcx, 0x7fffffff
add rcx, 0x1be6166f
mov qword [rbp + 0x3f], r15
add rax, rcx
mov dword [rbp - 9], 0x1fd4a988
add dword [rbp - 9], 0xceca74a
sub dword [rbp - 9], 0x2cc15082
ror rax, 0x3e
movabs rcx, 0x731ca68428e3603b
sub rcx, 0xd39c59a
add rcx, 0x29e449c1
add rcx, 0x7fffffff
sub rcx, 0x9b9062e
add rax, rcx
mov dword [rbp - 5], 0x11591d89
add dword [rbp - 5], 0x6d820cdf
sub dword [rbp - 5], 0x7edb2a65
xor ecx, ecx
mov qword [rbp + 0xf], r14
call rax
mov rdx, qword [0x140141730]
movabs rcx, 0xd410568f0892d1c5
add rcx, 0x16a927d1
sub rcx, 0xdfd986a
add rcx, 0x7fffffff
add rcx, 0x4da9693a
add rdx, rcx
mov qword [rbp + 0x1f], rax
rol rdx, 0x23
movabs rax, 0x8c719d715d22403
add rax, 0x497c25a5
add rax, 0x7fffffff
xor rax, 0x7eb75cc4
add rdx, rax
xor ecx, ecx
rol rdx, 0x3e
movabs rax, 0x9becf9822d5cafb8
add rax, 0x4ef4da0a
sub rax, 0x2e8b95fd
xor rdx, rax
movabs rax, 0x4b074abb2585b682
xor rax, 0x1f7f7e3e
xor rax, 0x36990005
sub rdx, rax
call rdx
mov qword [rbp + 0x27], rax
movabs rcx, 0xcf857dec23873473
add rcx, 0x30e0de94
add rcx, 0xa7e5a40
mov rax, qword [rbp - 0x49]
mov qword [rbp + 0x37], rax
mov rax, qword [0x140141020]
ror rax, 0x34
xor rax, rcx
lea rcx, [rbp - 9]
not rax
call rax
mov rcx, qword [rbp - 0x49]
test ax, ax
lea rax, [rbp - 0x41]
setne bl
cmp rcx, rax
jne 0x1400ec9e5
xor eax, eax
lea rdi, [rbp - 0x41]
lea ecx, [rax + 0x30]
rep stosb byte [rdi], al
jmp 0x1400ec9ea
call fcn.140097d00
mov al, bl
jmp 0x1400ec9f3
xor al, al
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
Function at 0x1400f1760
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
mov r10d, 0x55ad5914
add r10d, 0x20f6ca0
sub r10d, 0x511c7b7c
add r10d, 0x14251a12
mov r8d, dword [rcx + 0x2f4]
xor eax, r10d
xor r8d, r10d
xor r9d, r9d
add r8d, r8d
movd xmm2, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x4b952029
mov dword [rsp + 8], eax
movss xmm3, dword [rsp + 8]
mov al, byte [rdx]
cvtdq2ps xmm2, xmm2
test al, al
je 0x1400f17fd
mov r10, qword [rcx + 0x300]
movzx eax, al
inc rdx
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
xorps xmm0, xmmword [0x140146620]
mov al, byte [rdx]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm2
addss xmm1, xmm3
cvttss2si ecx, xmm1
sub ecx, r8d
add r9d, ecx
test al, al
jne 0x1400f17c1
mov eax, r9d
ret

Function at 0x1400f18fc
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
mov r10d, 0x158eedd8
add r10d, 0x2f29266a
xor r10d, 0x5e7d7008
mov r8d, dword [rcx + 0x2f4]
xor eax, r10d
xor r8d, r10d
xor r11d, r11d
add r8d, r8d
mov r9d, r11d
movd xmm2, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x4b952029
mov dword [rsp + 8], eax
movss xmm3, dword [rsp + 8]
movzx eax, word [rdx]
cvtdq2ps xmm2, xmm2
test ax, ax
je 0x1400f19a5
mov r10, qword [rcx + 0x300]
movzx eax, ax
nop
sub rdx, 0x753ca40a
add rdx, 0x753ca40c
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
xorps xmm0, xmmword [0x140146620]
movzx eax, word [rdx]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm2
addss xmm1, xmm3
cvttss2si ecx, xmm1
sub ecx, r8d
add r9d, ecx
test ax, ax
jne 0x1400f195b
mov eax, r9d
ret

Function at 0x1400f19ac
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
push rdi
neg rsp
sub rsp, 0xffffffffffffff60
neg rsp
xor ebx, ebx
mov rdi, rcx
mov qword [rax + 8], rbx
cmp qword [rcx + 0x2f8], rbx
je 0x1400f1a4b
mov edx, dword [rcx + 0x2ec]
mov ecx, 0x2180f45c
xor ecx, 0x5f022671
sub ecx, 0x105f4569
sub ecx, 0x535e287a
mov eax, dword [rdi + 0x2e8]
xor edx, ecx
xor eax, ecx
lea rcx, [rbx - 1]
imul edx, eax
lea eax, [rbx + 4]
movsxd rsi, edx
mul rsi
cmovo rax, rcx
mov rcx, rax
call fcn.140097bc0
test rsi, rsi
jle 0x1400f1a68
mov rcx, qword [rdi + 0x2f8]
mov edx, dword [rcx + rbx*4]
xor edx, 0x26f16147
mov dword [rax + rbx*4], edx
inc rbx
cmp rbx, rsi
jl 0x1400f1a27
jmp 0x1400f1a68
lea rdx, [rsp + 0xb0]
call fcn.1400f1bb4
test al, al
je 0x1400f1ab3
mov rax, qword [rsp + 0xb0]
lea rcx, [0x14000bb80]
mov qword [rsp + 0x98], 0x6630f9b0
xor qword [rsp + 0x98], 0x20a4ea9d
xor qword [rsp + 0x98], 0x46941335
mov qword [rsp + 0x20], rcx
lea rdx, [rsp + 0x20]
mov rcx, qword [rdi + 0x318]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x30], rax
call fcn.1400f0a74
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x1400f396c
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r14
push r15
mov rbp, rsp
nop
sub rsp, 0x1bb1aaff
add rsp, 0x1bb1aa9f
mov rbx, rdx
mov rdi, rcx
mov edx, r8d
lea rcx, [rbp - 0x20]
mov r12, r9
call fcn.14007d1e4
mov r8d, 0x5affa64d
xor r8d, 0x504a354
sub r8d, 0x5ffb0517
lea rcx, [rbp - 0x20]
mov rdx, rbx
call fcn.14007d270
test al, al
je 0x1400f3c04
mov eax, dword [rdi + 0x2e8]
lea rdx, [rbp - 0x40]
and dword [rbp - 0x28], 0
mov ecx, 0x24e213d5
add ecx, 0x3b8ff028
sub ecx, 0x45ac9fb3
and dword [rbp - 0x24], 0
xor eax, ecx
mov dword [rbp - 0x38], eax
mov r8d, 0x2cc60af9
xor r8d, 0x5b5e7540
xor r8d, 0x77987f99
mov eax, dword [rdi + 0x2ec]
xor eax, ecx
mov dword [rbp - 0x40], 0x643ea72d
xor dword [rbp - 0x40], 0xa6be0b9
xor dword [rbp - 0x40], 0x409eed09
add dword [rbp - 0x40], 0x37c98a9
mov dword [rbp - 0x34], eax
mov eax, dword [rdi + 0x2f4]
xor eax, ecx
mov dword [rbp - 0x3c], 0x546dca64
xor dword [rbp - 0x3c], 0x20bddc42
sub dword [rbp - 0x3c], 0x74d01606
mov dword [rbp - 0x30], eax
mov eax, dword [rdi + 0x30c]
xor eax, ecx
lea rcx, [rbp - 0x20]
mov dword [rbp - 0x2c], eax
call fcn.14007f290
test al, al
je 0x1400f3c04
mov r14d, dword [rdi + 0x2d8]
mov edx, 0x6ded996d
xor edx, 0x5cecf9eb
sub edx, 0x31016076
and r14d, 0x2000
mov eax, r14d
neg eax
sbb rbx, rbx
and rbx, 0xffffffffffff0100
add rbx, 0x3f99ea9e
sub rbx, 0x3f98ea9f
mov r15, rbx
shl r15, 4
mov rcx, r15
call fcn.140097c30
mov rsi, rax
test rax, rax
je 0x1400f3c04
mov rdx, qword [rdi + 0x300]
xor r8d, r8d
sub rdx, rax
lea edi, [r8 + 1]
movups xmm0, xmmword [rdx + rax]
add r8, rdi
xorps xmm0, xmmword [0x140146620]
movups xmmword [rax], xmm0
lea rax, [rax + 0x10]
cmp r8, rbx
jl 0x1400f3ada
mov rcx, r15
call fcn.140097bc0
neg r14d
mov rdx, rax
mov rcx, rsi
mov rbx, rax
sbb r8d, r8d
and r8d, 0xfff01000
neg r8d
add r8d, 0xfff00010
neg r8d
mov r9d, r8d
call fcn.140093a20
mov r8d, eax
mov dword [rbp - 0x28], eax
mov rdx, rbx
lea rcx, [rbp - 0x20]
call fcn.14007f290
mov rcx, rsi
test al, al
jne 0x1400f3b55
call fcn.140097be0
mov rcx, rbx
jmp 0x1400f3bb0
call fcn.140097be0
mov rcx, rbx
call fcn.140097bd0
mov eax, dword [rbp - 0x34]
imul eax, dword [rbp - 0x38]
movsxd rcx, eax
shl rcx, 2
call fcn.140097bc0
mov r8d, dword [rbp - 0x34]
mov rdx, rax
imul r8d, dword [rbp - 0x38]
mov rcx, r12
mov rbx, rax
shl r8d, 2
mov r9d, r8d
call fcn.140093a20
mov r8d, eax
mov dword [rbp - 0x24], eax
mov rdx, rbx
lea rcx, [rbp - 0x20]
call fcn.14007f290
mov rcx, rbx
test al, al
jne 0x1400f3bba
call fcn.140097bd0
jmp 0x1400f3c04
call fcn.140097bd0
lea rcx, [rbp - 0x20]
call fcn.14007f4dc
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.14007e8c0
test al, al
je 0x1400f3c04
mov r8d, 0x2163cb62
add r8d, 0x3ccb7820
sub r8d, 0x5e2f4362
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x20]
call fcn.14007f290
test al, al
jne 0x1400f3c07
xor dil, dil
lea rcx, [rbp - 0x20]
call fcn.14007d268
lea r11, [rsp + 0x60]
mov al, dil
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
Function at 0x1400f64c0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x60
mov rbp, qword [rcx + 0xaf0]
lea rax, [rsp + 0x28]
mov rbx, qword [rcx + 0xab8]
xorps xmm0, xmm0
mov r14, rdx
mov qword [rsp + 0x20], rax
mov rsi, rcx
lea rcx, [rsp + 0x20]
lea rdx, [rbp + 1]
movups xmmword [rsp + 0x28], xmm0
movups xmmword [rsp + 0x38], xmm0
movups xmmword [rsp + 0x48], xmm0
call fcn.140017bec
mov edi, 0xa4de6d1
add edi, 0x4f50e85c
xor edi, 0x1ad7af7d
xor edi, 0x1eca51e8
mov r9, rax
mov ecx, edi
mov r15d, 0x6a8e6f42
xor r15d, 0x296ab879
add r15d, 0x38f70387
sub r15d, 0x7cdbd9c3
test rbp, rbp
je 0x1400f658c
mov rdx, rax
sub rbx, rax
mov r8, rbp
nop dword [rax]
nop dword [rax + rax]
movzx eax, cx
lea rdx, [rdx + 2]
and ax, r15w
ror ecx, 8
xor ax, word [rbx + rdx - 2]
mov word [rdx - 2], ax
sub r8, 1
jne 0x1400f656b
xor ebx, ebx
mov word [r9 + rbp*2], bx
cmp word [rsi + 0xb40], bx
je 0x1400f65d7
mov edx, ebx
cmp qword [rsi + 0xaf0], rbx
jbe 0x1400f65d7
nop dword [rax + rax]
mov rax, qword [rsp + 0x20]
movzx ecx, word [rsi + 0xb40]
mov word [rax + rdx*2], cx
inc rdx
cmp rdx, qword [rsi + 0xaf0]
jb 0x1400f65b7
mov rsi, qword [rsp + 0x20]
lea rax, [r14 + 8]
xorps xmm0, xmm0
mov qword [r14], rax
movups xmmword [rax], xmm0
nop
movabs rdx, 0xffffffff35738efa
add rdx, 0x2b42209d
sub rdx, 0x46900b0b
add rdx, 0x7fffffff
xor rdx, 0x65da5b74
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
nop dword [rax]
inc rdx
cmp word [rsi + rdx*2], bx
jne 0x1400f661b
mov rcx, r14
mov qword [r14 + 0x38], rdx
call fcn.140017bec
cmp qword [r14 + 0x38], rbx
jbe 0x1400f6667
sub rsi, rax
nop
movzx ecx, di
lea rax, [rax + 2]
and cx, r15w
ror edi, 8
xor cx, word [rsi + rax - 2]
inc rbx
mov word [rax - 2], cx
cmp rbx, qword [r14 + 0x38]
jb 0x1400f6643
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x28]
cmp rcx, rax
jne 0x1400f669f
lea rdi, [rsp + 0x28]
xor eax, eax
mov ecx, 0x3b0bead
xor ecx, 0x1f6afe53
add ecx, 0x413fdb78
sub ecx, 0x5e1a1c46
rep stosb byte [rdi], al
jmp 0x1400f66a4
call fcn.140097d00
lea r11, [rsp + 0x60]
mov rax, r14
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rdi
ret