joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400d545c
Capabilities:
Execute syscall

Disassembly:
push rbx
sub rsp, 0x20
mov dword [rsp - 0x30], 0x5b407c74
xchg r12, rcx
mov rbx, r12
xchg rcx, r12
mov rcx, qword [rcx + 0x1a8]
cmp rcx, 0xffffffffffffffff
je 0x1400d552f
mov dword [rsp - 0x14], 0x60f237ba
xchg r13, rax
mov r13, qword [rbx + 0x258]
xchg r13, rax
movabs rdx, 0x517e0fce5db508d1
xor rdx, 0x33890be
xor rdx, 0x138f4462
add rdx, 0xa61eb04
add rdx, 0x7fffffff
xor rdx, 0x2abb6655
rol rax, 0x1f
rol rax, 0x15
rol rax, 2
rol rax, 6
rol rax, 1
not rax
mov dword [rsp - 0x20], 0x592de6fe
add rax, rdx
movabs rdx, 0xe64163800d9ee6f8
add rdx, 0x247b9a18
add rdx, 0x472cab5d
xor rdx, 0x263f8e3
add rdx, 0xf18a94
xor rax, rdx
mov rbx, rbx
not rax
rol rax, 0x19
rol rax, 7
rol rax, 0xb
rol rax, 9
rol rax, 1
rol rax, 1
call rax
xchg r8, r8
mov rcx, qword [rbx + 0x198]
test rcx, rcx
je 0x1400d556e
xchg rbp, rbp
cmp qword [rbx + 0x1a0], 0
jne 0x1400d556e
mov rcx, qword [rcx + 0x20]
mov rdx, rdx
call fcn.140097490
xchg r10, rcx
mov r10, qword [rbx + 0x198]
xchg rcx, r10
call fcn.140097490
xchg rcx, r8
mov r8, qword [rbx + 0x1a0]
xchg r8, rcx
test rcx, rcx
xchg rdi, rdi
je 0x1400d561c
mov rax, qword [rbx + 0x248]
movabs rdx, 0x7b18a5ef60f755d1
sub rdx, 0x5e8a1805
add rdx, 0x3becaf66
add rdx, 0x2613ef31
add rdx, 0x7fffffff
xor rdx, 0x7bcbdf70
xor rax, rdx
xchg rcx, rcx
movabs rdx, 0x339daa1c660f0b63
sub rdx, 0x11b10178
xor rdx, 0xe6a5d3f
add rdx, 0x21b51b2c
add rdx, 0x7fffffff
sub rdx, 0x2f9604c3
sub rax, rdx
movabs rdx, 0x11a9abaa2493f0ff
add rdx, 0x37d77ead
sub rdx, 0xc6c3889
xor rdx, 0x39151132
xor rax, rdx
mov dword [rsp - 0x30], edx
not rax
call rax
cmp qword [rbx + 0x200], 0
je 0x1400d570a
mov dword [rsp - 0x10], 0x35655cb9
mov rax, qword [rbx + 0x210]
movabs rcx, 0x5821279a168a05ea
xor rcx, 0x4843ddb6
add rcx, 0x16a0da56
sub rcx, 0x37174ca8
sub rcx, 0x25ca501b
rol rax, 0xe
rol rax, 6
rol rax, 1
xor rax, rcx
movabs rcx, 0x7d79321e68709b50
sub rcx, 0x5ab35b4f
add rcx, 0x142bed91
xor rcx, 0x17aa7541
add rcx, 0x1e9e896c
add rax, rcx
xchg r9, r9
movabs rcx, 0x2a87d99d4441bbbe
sub rcx, 0x7de56ec
xor rcx, 0x38591fd1
xor rcx, 0x5967f50a
xor rcx, 0x71d8c293
xor rax, rcx
movabs rcx, 0x79ab47557fa7f922
sub rcx, 0x4afde062
add rcx, 0x3b6a6087
sub rcx, 0x5a17f5d5
sub rax, rcx
mov dword [rsp - 0x14], 0x4b185ad5
call rax
mov rcx, qword [rbx + 0x200]
call fcn.14008c060
mov dword [rsp - 0xc], 0x38089967
and qword [rbx + 0x200], 0
mov rcx, qword [rbx + 0x1f0]
sub rsp, 0xffffffffffffffe0
xchg r13, r13
nop
mov rbx, qword [rsp]
add rsp, 8
jmp fcn.140054690
Function at 0x1400d7d20
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r13
mov qword [rsp + 0x10], r13
xchg r13, rbx
xchg r8, rsi
mov qword [rsp + 0x18], r8
xchg rsi, r8
mov qword [rsp + 0x20], rdi
nop
mov qword [rsp - 8], rbp
sub rsp, 8
xchg rsp, r10
mov rbp, r10
xchg r10, rsp
add rsp, 0xffffffffffffffb0
xor esi, esi
mov dword [rbp - 0x30], 0x21579f0c
add dword [rbp - 0x30], 0x3608d4a5
sub dword [rbp - 0x30], 0x7bc1126
sub dword [rbp - 0x30], 0x4f396252
mov dword [rbp - 0x2c], 0x7ad0e618
sub dword [rbp - 0x2c], 0x4a0ca780
sub dword [rbp - 0x2c], 0x2c7bb62b
add dword [rbp - 0x2c], 0x61f638d8
sub dword [rbp - 0x2c], 0x65f7c0de
xchg r10, rbx
mov r10, rcx
xchg rbx, r10
mov dword [rbp - 0x28], 0x6b87f0a5
xor dword [rbp - 0x28], 0x68dd83b6
xor dword [rbp - 0x28], 0x19af16fe
sub dword [rbp - 0x28], 0x1acb6590
mov dword [rbp - 0x24], 0x51d9dcc4
xor dword [rbp - 0x24], 0x44113af8
add dword [rbp - 0x24], 0x2c27fcc
xor dword [rbp - 0x24], 0x18f76673
mov dword [rbp - 0x20], 0x7d7fc5c0
sub dword [rbp - 0x20], 0x2fb4d6f5
add dword [rbp - 0x20], 0x2aa101c2
sub dword [rbp - 0x20], 0x4bf6f2a3
sub dword [rbp - 0x20], 0x2c00fde8
xchg r12, rsi
mov qword [rbp + 0x10], r12
xchg rsi, r12
xchg r9, rax
mov r9, qword [rbp + 0x10]
xchg r9, rax
mov rcx, qword [rbp + 0x10]
mov dword [rsp - 0x3c], 0x216f4a45
mov rax, qword [rbp + 0x10]
and cl, 3
shl cl, 2
shl cl, 1
movzx edx, word [rbp + rax*2 - 0x30]
mov eax, 0x52632c51
sub eax, 0x296c22fd
xor eax, 0x74e158eb
sub eax, 0x43c13951
shr eax, cl
mov dword [rsp - 0x24], 0x1c9da760
movzx ecx, al
xchg r12, rax
mov r12, qword [rbp + 0x10]
xchg r12, rax
xor cx, dx
xchg rsi, rsi
mov word [rbp + rax*2 - 0x1c], cx
xchg rdi, rax
mov rdi, qword [rbp + 0x10]
xchg rdi, rax
inc rax
mov r14, r14
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
cmp rax, 0xa
jb 0x1400d7e09
mov r9, r9
xor edx, edx
mov word [rbp - 8], si
lea rcx, [rbp - 0x1c]
call fcn.140089b70
mov dword [rsp - 0x44], edi
xchg r8, r14
mov r14, rax
xchg r14, r8
xchg rbp, rax
mov qword [rbx + 0x200], rbp
xchg rbp, rax
xor eax, eax
mov r12, r12
lea rdi, [rbp - 0x1c]
lea ecx, [rax + 0xa]
rep stosb byte [rdi], al
xchg rdx, rdx
test r8, r8
je 0x1400d7f10
lea rdx, [rbx + 0x208]
mov dword [rsp - 0x40], ecx
xchg rcx, r14
mov r14, r8
xchg rcx, r14
call fcn.1400d85e8
test al, al
xchg r12, r12
jne 0x1400d7f08
xchg r14, rcx
mov r14, qword [rbx + 0x200]
xchg rcx, r14
call fcn.14008c060
xor al, al
xchg rsi, rsp
mov qword [rbx + 0x200], rsp
xchg rsp, rsi
jmp 0x1400d7f10
mov al, 0x54
sub al, 0x2e
sub al, 0x26
add al, 1
xchg r10, rbx
mov r10, qword [rsp + 0x68]
xchg rbx, r10
mov rsi, qword [rsp + 0x70]
mov dword [rsp - 0x24], edi
mov rdi, qword [rsp + 0x78]
add rsp, 0x50
nop
add rsp, 8
mov rbp, qword [rsp - 8]
ret
Function at 0x1400d83b0
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, rcx
mov qword [rsp + 0x10], rcx
xchg rbx, rcx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
add rsp, 0x4fdd7111
sub rsp, 0x4fdd7251
xchg rcx, rdi
mov rcx, r8
xchg rdi, rcx
xchg rdi, rcx
mov rbx, rdi
xchg rdi, rcx
mov r8d, 0x130dd9b9
add r8d, 0x2aa815f6
xor r8d, 0x25c0d9be
sub r8d, 0x18753511
lea rcx, [rsp + 0x40]
xor edx, edx
xchg r8, r8
call fcn.140097a60
xchg r10, r15
mov r15, qword [rbx + 0x238]
xchg r10, r15
lea r8, [rsp + 0x40]
mov dword [rsp - 0x3c], ebx
mov edx, dword [rdi + 0x10]
movabs rcx, 0x548faf3c735d4b84
xor rcx, 0x5e58ec54
add rcx, 0x11b7e643
add rcx, 0x27c7aa53
sub rcx, 0x918b1a5
rol r10, 5
rol r10, 2
rol r10, 1
rol r10, 1
movabs rax, 0x54a9a39f160c37dc
sub rax, 0x1548cfed
add rax, 0x866fdf7
xor rax, 0x1a604975
sub r10, rcx
mov dword [rsp - 0xc], 0x2ef8fca0
mov dword [rsp + 0x30], 0x5c43252f
sub dword [rsp + 0x30], 0x108404dd
add dword [rsp + 0x30], 0xb95955c
xor dword [rsp + 0x30], 0x6f5ae0d5
xor dword [rsp + 0x30], 0x380e5579
and dword [rsp + 0x28], 0
mov dword [rsp - 0x3c], edx
movabs rcx, 0xc7496ada67fe1113
sub rcx, 0xcc3e8fd
add rcx, 0x86ee836
xor rcx, 0x7ebaa18d
and qword [rsp + 0x20], 0
mov r9d, 0x70435efc
sub r9d, 0x7b7903
sub r9d, 0x47266ebb
sub r9d, 0x1b216789
xor r9d, 0xd800eb5
rol r10, 0x35
rol r10, 1
rol r10, 1
add r10, rcx
xchg rbx, rbx
xchg rbp, rcx
mov rbp, qword [rdi + 0x20]
xchg rbp, rcx
xor r10, rax
call r10
test eax, eax
mov dword [rsp - 0x3c], 0x17f2059a
jne 0x1400d85c2
or eax, 0xffffffff
lea rbx, [rsp + 0x40]
cmp byte [rsp + 0x40], 0
mov r9, r9
mov dword [rsp + 0x150], eax
je 0x1400d8597
xchg r8, rdx
mov r8, rbx
xchg rdx, r8
lea rcx, [rsp + 0x150]
mov dword [rsp - 0x38], edx
mov r8d, 0xbbad6e2
xor r8d, 0x6a179168
sub r8d, 0x2d8afd68
sub r8d, 0x34224a21
inc rbx
mov dword [rsp - 0x14], edx
call fcn.14008cc90
cmp byte [rbx], 0
jne 0x1400d8548
mov eax, dword [rsp + 0x150]
mov r15, r15
not eax
cmp eax, 0xa2ca6717
je 0x1400d85b5
mov dword [rsp - 0x20], edx
cmp eax, 0xd7b7e7a8
sete al
jmp 0x1400d85c4
mov al, 0x77
sub al, 0x6d
add al, 0x2b
xor al, 0x34
jmp 0x1400d85c4
xor al, al
mov rbx, qword [rsp + 0x158]
sub rsp, 0x5a6c66c4
add rsp, 0x5a6c6804
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret

Function at 0x1400dcee0
Capabilities:
Encrypt data using curve25519

Disassembly:
xchg rbx, r10
mov qword [rsp + 8], r10
xchg rbx, r10
push rdi
sub rsp, 0x23547bb7
add rsp, 0x23547af7
xchg r8, rax
mov r8, rax
xchg r8, rax
xchg rbx, r10
mov r10, rdx
xchg r10, rbx
xchg rdx, rcx
mov r8, rcx
xchg rdx, rcx
xchg rdi, r8
mov r8, rcx
xchg rdi, r8
mov edx, 0x496ef944
sub edx, 0xb082f6
xor edx, 0x3a2a926c
xor edx, 0x6e7413a4
sub edx, 0x1ce0f766
xchg r13, rax
mov rcx, r13
xchg r13, rax
call fcn.1400dd740
movzx eax, byte [rbx + 0x1f]
mov dword [rsp - 0x20], ebp
lea rcx, [rsp + 0x20]
and byte [rbx], 0xf8
and al, 0x3f
or al, 0x40
mov dword [rsp - 0x28], esi
xchg rbx, rdx
mov rbx, rdx
xchg rbx, rdx
mov byte [rbx + 0x1f], al
mov dword [rsp - 0x40], 0x1d773654
call fcn.1400e0d60
lea rdx, [rsp + 0x20]
mov rcx, rdi
call fcn.1400e0c90
mov rbx, rbx
mov rbx, qword [rsp + 0xd0]
neg rsp
add rsp, 0xffffffffffffff40
neg rsp
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret
Function at 0x1400ec40c
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x5f]
neg rsp
sub rsp, 0xffffffffffffff50
neg rsp
mov r14, rdx
movabs rdx, 0x407043dc60324eec
xor rdx, 0x46bc533
xor rdx, 0x75c8f0b5
cmp qword [rcx + 0x538], rdx
jne 0x1400ec6c8
xorps xmm0, xmm0
mov rax, r14
xor rax, rdx
mov qword [rcx + 0x538], rax
lea rax, [rbp - 0x41]
mov rsi, qword [rcx + 0x578]
mov rbx, qword [rcx + 0x540]
lea rcx, [rbp - 0x49]
mov qword [rbp - 0x49], rax
movups xmmword [rbp - 0x41], xmm0
lea rdx, [rsi + 1]
movups xmmword [rbp - 0x31], xmm0
movups xmmword [rbp - 0x21], xmm0
call fcn.140017c38
xor r15d, r15d
mov edx, 0xe052f5b
add edx, 0x1538fb5c
xor edx, 0x3b6b32d9
test rsi, rsi
je 0x1400ec4f1
mov rdi, rax
sub rbx, rax
mov r8, rsi
movzx ecx, dx
mov r9d, 0x2004e64
add r9d, 0x383fb7fb
sub r9d, 0x3a400560
and cx, r9w
ror edx, 8
xor cx, word [rbx + rdi]
mov word [rdi], cx
lea rdi, [rdi + 2]
sub r8, 1
jne 0x1400ec4be
mov word [rax + rsi*2], r15w
movabs rcx, 0x25ce1e6b032e339a
xor rcx, 0x5e50840d
xor rcx, 0x4e31034
add rcx, 0x67c8457b
lea rax, [0x1400ec6fc]
mov qword [rbp + 7], r15
mov qword [rbp - 1], rax
mov edx, 0xa7778b2
add edx, 0x63616a4d
sub edx, 0x4aa4e763
xor edx, 0x2333849c
mov rax, qword [0x140140158]
not rax
mov qword [rbp + 0x17], r15
add rax, rcx
mov qword [rbp + 0x2f], r15
rol rax, 0x37
movabs rcx, 0x1e2efb7322ce56eb
add rcx, 0x5968315b
xor rcx, 0x5ae4a008
add rcx, 0x7fffffff
add rcx, 0x3857eed6
add rax, rcx
mov qword [rbp + 0x3f], r15
not rax
mov dword [rbp - 9], 0x1b267fdb
add dword [rbp - 9], 0x350f9fc
sub dword [rbp - 9], 0x1e777987
rol rax, 0x25
xor ecx, ecx
not rax
mov dword [rbp - 5], 0x735744f
add dword [rbp - 5], 0x32a032b7
xor dword [rbp - 5], 0x39d5a705
mov qword [rbp + 0xf], r14
call rax
mov qword [rbp + 0x1f], rax
movabs rcx, 0x4157494d055a92db
add rcx, 0x61fe95ff
xor rcx, 0x3523db1b
mov rax, qword [0x140140730]
not rax
ror rax, 0x3b
xor rax, rcx
movabs rcx, 0x3db38b4517b73190
add rcx, 0x5b535ff0
add rcx, 0x275e45f3
add rax, rcx
xor ecx, ecx
call rax
mov qword [rbp + 0x27], rax
movabs rcx, 0x44653804df84aa8
xor rcx, 0x644fea8
add rcx, 0x7fffffff
xor rcx, 0x146081a1
mov rax, qword [rbp - 0x49]
mov qword [rbp + 0x37], rax
mov rax, qword [0x140140020]
not rax
sub rax, rcx
movabs rcx, 0x31760d664f616928
add rcx, 0x104afabe
sub rcx, 0x5a5a31f0
xor rcx, 0x66836243
not rax
add rax, rcx
movabs rcx, 0x4c1a417e68f1ae70
sub rcx, 0x3de7d006
add rcx, 0x7fffffff
add rcx, 0xc35c61e
not rax
add rax, rcx
lea rcx, [rbp - 9]
ror rax, 0x12
call rax
mov rcx, qword [rbp - 0x49]
test ax, ax
lea rax, [rbp - 0x41]
setne bl
cmp rcx, rax
jne 0x1400ec6bc
xor eax, eax
lea rdi, [rbp - 0x41]
lea ecx, [rax + 0x30]
rep stosb byte [rdi], al
jmp 0x1400ec6c1
call fcn.140097490
mov al, bl
jmp 0x1400ec6ca
xor al, al
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
Function at 0x1400f1158
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
add rsp, 0x37e9050d
sub rsp, 0x37e905bd
mov rsi, rcx
lea rdx, [rcx + 0x298]
lea rcx, [rsp + 0x20]
call fcn.140072a60
or ebx, 0xffffffff
mov dword [rsp + 0xc0], ebx
mov rdi, qword [rax]
cmp byte [rdi], 0
je 0x1400f11d2
mov rdx, rdi
lea rcx, [rsp + 0xc0]
mov r8d, 0x3cfeeb65
add r8d, 0x2a27aef0
xor r8d, 0x67269a54
inc rdi
call fcn.14008cc90
cmp byte [rdi], 0
jne 0x1400f119b
mov ebx, dword [rsp + 0xc0]
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x28]
not ebx
cmp rcx, rax
jne 0x1400f120c
lea rdi, [rsp + 0x28]
xor eax, eax
mov ecx, 0x3189b007
add ecx, 0x2e36003c
xor ecx, 0x3c1c587f
xor ecx, 0x63a3e8bc
rep stosb byte [rdi], al
jmp 0x1400f1211
call fcn.140097490
mov eax, dword [rsi + 0x2f0]
lea r11, [rsp + 0xb0]
xor eax, 0x22a4
shl eax, 0x10
or eax, dword [rsi + 0x2d8]
mov rsi, qword [r11 + 0x20]
xor eax, ebx
mov rbx, qword [r11 + 0x18]
xor eax, 2
mov rsp, r11
pop rdi
ret

Function at 0x1400f1354
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
mov r10d, 0x38b00b4b
sub r10d, 0xb10cbfe
xor r10d, 0x1a7efa8a
xor r10d, 0x1fcde763
mov r8d, dword [rcx + 0x2f4]
xor eax, r10d
xor r8d, r10d
xor r9d, r9d
add r8d, r8d
movd xmm2, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x215b58c1
mov dword [rsp + 8], eax
movss xmm3, dword [rsp + 8]
mov al, byte [rdx]
cvtdq2ps xmm2, xmm2
test al, al
je 0x1400f13f1
mov r10, qword [rcx + 0x300]
movzx eax, al
inc rdx
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
xorps xmm0, xmmword [0x140145620]
mov al, byte [rdx]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm2
addss xmm1, xmm3
cvttss2si ecx, xmm1
sub ecx, r8d
add r9d, ecx
test al, al
jne 0x1400f13b5
mov eax, r9d
ret

Function at 0x1400f14f4
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
mov r10d, 0x554a08b1
xor r10d, 0x305cf6b5
sub r10d, 0x3ceadb60
mov r8d, dword [rcx + 0x2f4]
xor eax, r10d
xor r8d, r10d
xor r11d, r11d
add r8d, r8d
mov r9d, r11d
movd xmm2, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x215b58c1
mov dword [rsp + 8], eax
movss xmm3, dword [rsp + 8]
movzx eax, word [rdx]
cvtdq2ps xmm2, xmm2
test ax, ax
je 0x1400f1592
mov r10, qword [rcx + 0x300]
movzx eax, ax
add rdx, 2
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
xorps xmm0, xmmword [0x140145620]
movzx eax, word [rdx]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm2
addss xmm1, xmm3
cvttss2si ecx, xmm1
sub ecx, r8d
add r9d, ecx
test ax, ax
jne 0x1400f1553
mov eax, r9d
ret
Function at 0x1400f1598
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
push rdi
add rsp, 0xffffffffffffff60
xor ebx, ebx
mov rdi, rcx
mov qword [rax + 8], rbx
cmp qword [rcx + 0x2f8], rbx
je 0x1400f1631
mov edx, dword [rcx + 0x2ec]
mov ecx, 0x333b9b2b
add ecx, 0x1feb3cc5
xor ecx, 0x625943e7
sub ecx, 0x9537173
mov eax, dword [rdi + 0x2e8]
xor edx, ecx
xor eax, ecx
lea rcx, [rbx - 1]
imul edx, eax
lea eax, [rbx + 4]
movsxd rsi, edx
mul rsi
cmovo rax, rcx
mov rcx, rax
call fcn.1400972b0
test rsi, rsi
jle 0x1400f164e
mov rcx, qword [rdi + 0x2f8]
mov edx, dword [rcx + rbx*4]
xor edx, 0xa8323c2
mov dword [rax + rbx*4], edx
inc rbx
cmp rbx, rsi
jl 0x1400f160d
jmp 0x1400f164e
lea rdx, [rsp + 0xb0]
call fcn.1400f17b0
test al, al
je 0x1400f16a5
mov rax, qword [rsp + 0xb0]
lea rcx, [0x14000bb80]
mov qword [rsp + 0x98], 0x2b625c9f
add qword [rsp + 0x98], 0x55e656a
sub qword [rsp + 0x98], 0x35e0519
sub qword [rsp + 0x98], 0x2d62bcd8
mov qword [rsp + 0x20], rcx
lea rdx, [rsp + 0x20]
mov rcx, qword [rdi + 0x318]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x30], rax
call fcn.1400f067c
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x1400f351c
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r14
push r15
mov rbp, rsp
neg rsp
sub rsp, 0xffffffffffffffa0
neg rsp
mov rbx, rdx
mov rdi, rcx
mov edx, r8d
lea rcx, [rbp - 0x20]
mov r12, r9
call fcn.14007cfac
mov r8d, 0x2663c673
add r8d, 0x13eae970
add r8d, 0x1c4f0999
xor r8d, 0x569db97e
lea rcx, [rbp - 0x20]
mov rdx, rbx
call fcn.14007d024
test al, al
je 0x1400f37a9
mov eax, dword [rdi + 0x2e8]
lea rdx, [rbp - 0x40]
and dword [rbp - 0x28], 0
mov ecx, 0x14b6a4ad
xor ecx, 0x192a9ec1
add ecx, 0x1a8fe838
and dword [rbp - 0x24], 0
xor eax, ecx
mov dword [rbp - 0x38], eax
mov r8d, 0x14e5c956
add r8d, 0x606253d4
xor r8d, 0x75481d0a
mov eax, dword [rdi + 0x2ec]
xor eax, ecx
mov dword [rbp - 0x40], 0x6ea411a2
sub dword [rbp - 0x40], 0x5660536e
add dword [rbp - 0x40], 0x1a048512
mov dword [rbp - 0x34], eax
mov eax, dword [rdi + 0x2f4]
xor eax, ecx
mov dword [rbp - 0x3c], 0x36dead21
add dword [rbp - 0x3c], 0x2d8b1e6a
sub dword [rbp - 0x3c], 0x6469cb6b
mov dword [rbp - 0x30], eax
mov eax, dword [rdi + 0x30c]
xor eax, ecx
lea rcx, [rbp - 0x20]
mov dword [rbp - 0x2c], eax
call fcn.14007f0b8
test al, al
je 0x1400f37a9
mov r14d, dword [rdi + 0x2d8]
mov edx, 0x7664cf28
sub edx, 0x14f06fa4
sub edx, 0x61745f74
and r14d, 0x2000
mov eax, r14d
neg eax
sbb rbx, rbx
and rbx, 0xffffffffffff0100
sub rbx, 0xffffffffffff0001
mov r15, rbx
shl r15, 4
mov rcx, r15
call fcn.140097320
mov rsi, rax
test rax, rax
je 0x1400f37a9
mov rdx, qword [rdi + 0x300]
xor r8d, r8d
sub rdx, rax
lea edi, [r8 + 1]
movups xmm0, xmmword [rdx + rax]
add r8, rdi
xorps xmm0, xmmword [0x140145620]
movups xmmword [rax], xmm0
lea rax, [rax + 0x10]
cmp r8, rbx
jl 0x1400f367e
mov rcx, r15
call fcn.1400972b0
neg r14d
mov rdx, rax
mov rcx, rsi
mov rbx, rax
sbb r8d, r8d
and r8d, 0xfff01000
add r8d, 0xaadff95
sub r8d, 0xa9dffa5
mov r9d, r8d
call fcn.140093220
mov r8d, eax
mov dword [rbp - 0x28], eax
mov rdx, rbx
lea rcx, [rbp - 0x20]
call fcn.14007f0b8
mov rcx, rsi
test al, al
jne 0x1400f36fa
call fcn.1400972d0
mov rcx, rbx
jmp 0x1400f3755
call fcn.1400972d0
mov rcx, rbx
call fcn.1400972c0
mov eax, dword [rbp - 0x34]
imul eax, dword [rbp - 0x38]
movsxd rcx, eax
shl rcx, 2
call fcn.1400972b0
mov r8d, dword [rbp - 0x34]
mov rdx, rax
imul r8d, dword [rbp - 0x38]
mov rcx, r12
mov rbx, rax
shl r8d, 2
mov r9d, r8d
call fcn.140093220
mov r8d, eax
mov dword [rbp - 0x24], eax
mov rdx, rbx
lea rcx, [rbp - 0x20]
call fcn.14007f0b8
mov rcx, rbx
test al, al
jne 0x1400f375f
call fcn.1400972c0
jmp 0x1400f37a9
call fcn.1400972c0
lea rcx, [rbp - 0x20]
call fcn.14007f320
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.14007e654
test al, al
je 0x1400f37a9
mov r8d, 0x42a4993c
xor r8d, 0xbeab20b
sub r8d, 0x494e2b17
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x20]
call fcn.14007f0b8
test al, al
jne 0x1400f37ac
xor dil, dil
lea rcx, [rbp - 0x20]
call fcn.14007d01c
lea r11, [rsp + 0x60]
mov al, dil
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
Function at 0x1400f6050
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
add rsp, 0xffffffffffffffa0
mov rbp, qword [rcx + 0xaf0]
lea rax, [rsp + 0x28]
mov rbx, qword [rcx + 0xab8]
xorps xmm0, xmm0
mov r14, rdx
mov qword [rsp + 0x20], rax
mov rsi, rcx
lea rcx, [rsp + 0x20]
lea rdx, [rbp + 1]
movups xmmword [rsp + 0x28], xmm0
movups xmmword [rsp + 0x38], xmm0
movups xmmword [rsp + 0x48], xmm0
call fcn.140017c38
mov edi, 0x6ad38eec
add edi, 0xfd10a26
sub edi, 0x34bc1d08
sub edi, 0x2d93639c
mov r9, rax
mov ecx, edi
mov r15d, 0x5a2791e2
xor r15d, 0x32c0d06f
sub r15d, 0x68e7408e
test rbp, rbp
je 0x1400f6115
mov rdx, rax
sub rbx, rax
mov r8, rbp
nop dword [rax]
nop dword [rax + rax]
movzx eax, cx
lea rdx, [rdx + 2]
and ax, r15w
ror ecx, 8
xor ax, word [rbx + rdx - 2]
mov word [rdx - 2], ax
sub r8, 1
jne 0x1400f60f4
xor ebx, ebx
mov word [r9 + rbp*2], bx
cmp word [rsi + 0xb40], bx
je 0x1400f6160
mov edx, ebx
cmp qword [rsi + 0xaf0], rbx
jbe 0x1400f6160
nop dword [rax + rax]
mov rax, qword [rsp + 0x20]
movzx ecx, word [rsi + 0xb40]
mov word [rax + rdx*2], cx
inc rdx
cmp rdx, qword [rsi + 0xaf0]
jb 0x1400f6140
mov rsi, qword [rsp + 0x20]
lea rax, [r14 + 8]
xorps xmm0, xmm0
mov qword [r14], rax
movups xmmword [rax], xmm0
nop
movabs rdx, 0xffffffff5b858bc2
xor rdx, 0x6b62d7e6
xor rdx, 0xa7afd1d
add rdx, 0x7fffffff
add rdx, 0x45625ec7
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
nop dword [rax]
inc rdx
cmp word [rsi + rdx*2], bx
jne 0x1400f61a4
mov rcx, r14
mov qword [r14 + 0x38], rdx
call fcn.140017c38
cmp qword [r14 + 0x38], rbx
jbe 0x1400f61f0
sub rsi, rax
nop
movzx ecx, di
lea rax, [rax + 2]
and cx, r15w
ror edi, 8
xor cx, word [rsi + rax - 2]
inc rbx
mov word [rax - 2], cx
cmp rbx, qword [r14 + 0x38]
jb 0x1400f61cc
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x28]
cmp rcx, rax
jne 0x1400f6228
lea rdi, [rsp + 0x28]
xor eax, eax
mov ecx, 0x66c28b83
sub ecx, 0x34a4c7f8
xor ecx, 0xe868f1d
sub ecx, 0x3c9b4c66
rep stosb byte [rdi], al
jmp 0x1400f622d
call fcn.140097490
lea r11, [rsp + 0x60]
mov rax, r14
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rdi
ret
Function at 0x140103830
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
neg rsp
sub rsp, 0xffffffffffffffe0
neg rsp
mov r8, qword [rcx + 0x648]
xor esi, esi
mov rbx, rcx
test r8, r8
je 0x140103866
mov rdi, qword [rcx + 0x640]
jmp 0x14010386d
mov rdi, rsi
nop dword [rax]
test r8, r8
je 0x140103886
mov rax, qword [rbx + 0x640]
lea rcx, [rax + r8*8]
jmp 0x140103889
mov rcx, rsi
cmp rdi, rcx
je 0x140103abb
mov rax, qword [rdi]
cmp qword [rax + 0x28], rdx
je 0x1401038b3
nop
add rdi, 0x7b503ae1
sub rdi, 0x7b503ad9
jmp 0x14010386d
test r8, r8
je 0x140103980
cmp rdi, qword [rbx + 0x640]
jb 0x140103980
mov rax, qword [rbx + 0x640]
lea rcx, [rax + r8*8]
cmp rdi, rcx
jae 0x140103980
mov rdx, rdi
nop word [rax + rax]
mov rcx, qword [rbx + 0x648]
test rcx, rcx
je 0x14010390a
mov rax, qword [rbx + 0x640]
lea rax, [rax + rcx*8]
jmp 0x14010390d
mov rax, rsi
nop
add rax, 0xffffffffeea87ada
sub rax, 0xffffffffeea87ae2
cmp rdx, rax
jae 0x140103939
mov rax, qword [rdx + 8]
mov qword [rdx], rax
neg rdx
add rdx, 0xfffffffffffffff8
neg rdx
jmp 0x1401038ea
test rcx, rcx
je 0x140103980
lea rax, [rcx - 1]
mov qword [rbx + 0x648], rax
test rax, rax
jne 0x140103980
mov rcx, qword [rbx + 0x640]
test rcx, rcx
je 0x140103972
call fcn.140097490
mov qword [rbx + 0x640], rsi
mov qword [rbx + 0x650], rsi
mov qword [rbx + 0x648], rsi
mov rcx, qword [rdi]
test rcx, rcx
je 0x1401039a8
mov rax, qword [rcx]
mov edx, 0x33a226c
add edx, 0x1dc66438
sub edx, 0x13626b68
sub edx, 0xd9e1b3b
call qword [rax]
cmp qword [rbx + 0x648], rsi
je 0x140103abb
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400ee1f0
mov rcx, qword [rsp + 0x30]
mov r10d, 0x3302a76
xor r10d, 0x79c2ec4f
sub r10d, 0x7af2c599
mov r8d, dword [rsp + 0x34]
mov eax, ecx
mov r9, qword [rbx + 0x648]
sub eax, r8d
cdq
idiv dword [rbx + 0x648]
cmp eax, r10d
cmovl r10d, eax
test r9, r9
je 0x140103a73
mov rdx, qword [rbx + 0x640]
lea r11, [rdx + r9*8]
cmp rdx, r11
je 0x140103a73
mov r9d, r10d
xor r9d, 0x282c22a4
xor r8d, 0x282c22a4
nop dword [rax]
mov rcx, qword [rdx]
mov eax, esi
xor eax, 0x282c22a4
add esi, r10d
add rdx, 8
mov dword [rcx + 0x30], eax
mov dword [rcx + 0x34], 0x41366386
add dword [rcx + 0x34], 0x79223b0
xor dword [rcx + 0x34], 0x60e4a592
mov dword [rcx + 0x38], r9d
mov dword [rcx + 0x3c], r8d
cmp rdx, r11
jne 0x140103a2f
mov rcx, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x34]
mov rax, qword [rbx + 0x660]
test rax, rax
je 0x140103ab3
sub ecx, r8d
mov dword [rax + 0x14], 0x5103a630
xor dword [rax + 0x14], 0x41a2737f
add dword [rax + 0x14], 0x178a4d55
xor ecx, 0x282c22a4
xor r8d, 0x282c22a4
mov dword [rax + 0x10], ecx
mov dword [rax + 0x18], r8d
mov dword [rax + 0x1c], r8d
mov rcx, rbx
call fcn.1400ed960
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
neg rsp
add rsp, 0xffffffffffffffe0
neg rsp
pop rdi
ret