joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400d94dc
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov dword [rsp - 0x14], 0x5c8f5e9e
mov qword [rsp + 0x20], rdi
nop
mov qword [rsp - 8], rbp
sub rsp, 8
xchg rdi, rbp
mov rdi, rsp
xchg rbp, rdi
add rsp, 0xffffffffffffffb0
xor esi, esi
mov dword [rbp - 0x30], 0x1b72cfe5
xor dword [rbp - 0x30], 0x7dadfb1d
add dword [rbp - 0x30], 0x45658f4
sub dword [rbp - 0x30], 0x6b1b8d3b
mov dword [rbp - 0x2c], 0x2a44ebe3
add dword [rbp - 0x2c], 0x50b890c8
xor dword [rbp - 0x2c], 0x7de540c3
sub dword [rbp - 0x2c], 0x6ab3c37
xchg rcx, r14
mov rbx, r14
xchg rcx, r14
mov dword [rbp - 0x28], 0x22828bed
xor dword [rbp - 0x28], 0x1da3fd6a
add dword [rbp - 0x28], 0x3fba8daf
sub dword [rbp - 0x28], 0x2bb50c32
sub dword [rbp - 0x28], 0x52cbf72f
mov dword [rbp - 0x24], 0x4b9e9e46
xor dword [rbp - 0x24], 0x1bc43d1
sub dword [rbp - 0x24], 0xdfa9b72
sub dword [rbp - 0x24], 0x3a3f5b50
xor dword [rbp - 0x24], 0x1bee6f8
mov dword [rbp - 0x20], 0x584e2daa
add dword [rbp - 0x20], 0x218f28ed
sub dword [rbp - 0x20], 0x26e81cfc
xor dword [rbp - 0x20], 0x52f03911
xchg rsi, r10
mov qword [rbp + 0x10], r10
xchg r10, rsi
xchg rdi, rax
mov rdi, qword [rbp + 0x10]
xchg rdi, rax
mov rcx, qword [rbp + 0x10]
mov rax, qword [rbp + 0x10]
xchg rsi, rsi
and cl, 3
shl cl, 3
movzx edx, word [rbp + rax*2 - 0x30]
mov dword [rsp - 0x14], 0x275f6c2a
mov eax, 0x4c86b661
xor eax, 0x66c9e813
add eax, 0x68b40a2
add eax, 0x128cad2
shr eax, cl
xchg r10, r10
movzx ecx, al
mov rax, qword [rbp + 0x10]
xor cx, dx
mov dword [rsp - 0x14], ecx
mov word [rbp + rax*2 - 0x1c], cx
mov rax, qword [rbp + 0x10]
inc rax
mov dword [rsp - 0x20], edi
xchg r10, rax
mov qword [rbp + 0x10], r10
xchg r10, rax
mov rax, qword [rbp + 0x10]
cmp rax, 0xa
jb 0x1400d95c1
mov r14, r14
xor edx, edx
mov word [rbp - 8], si
lea rcx, [rbp - 0x1c]
mov dword [rsp - 0x34], 0x58f4ddf7
call fcn.14008ade0
xchg rsp, rax
mov r8, rsp
xchg rsp, rax
mov qword [rbx + 0x200], rax
xor eax, eax
mov rbp, rbp
lea rdi, [rbp - 0x1c]
lea ecx, [rax + 0xa]
rep stosb byte [rdi], al
mov dword [rsp - 0x10], 0x244973c7
test r8, r8
je 0x1400d96c0
lea rdx, [rbx + 0x208]
xchg r8, r12
mov rcx, r12
xchg r8, r12
call fcn.1400d9d3c
test al, al
jne 0x1400d96b8
mov dword [rsp - 0x24], 0x5fe20dba
mov rcx, qword [rbx + 0x200]
call fcn.14008d260
xor al, al
xchg rsi, r8
mov qword [rbx + 0x200], r8
xchg r8, rsi
jmp 0x1400d96c0
mov al, 0x68
xor al, 0x10
xor al, 9
sub al, 0x70
mov rbx, qword [rsp + 0x68]
mov rbx, rbx
xchg rsi, r9
mov r9, qword [rsp + 0x70]
xchg rsi, r9
xchg r12, rdi
mov r12, qword [rsp + 0x78]
xchg rdi, r12
nop
add rsp, 0x1c20d287
sub rsp, 0x1c20d237
nop
mov rbp, qword [rsp]
add rsp, 8
ret
Function at 0x1400d9b40
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
add rsp, 0xcedf721
sub rsp, 0xcedf861
xchg rdi, r11
mov r11, r8
xchg r11, rdi
xchg r10, rcx
mov rbx, r10
xchg r10, rcx
mov r8d, 0x1765aa80
add r8d, 0x672a42b2
xor r8d, 0x76b01528
sub r8d, 0x83ff71a
lea rcx, [rsp + 0x40]
xchg rdi, rdi
xor edx, edx
call fcn.140098bf0
xchg rcx, r10
mov rcx, qword [rbx + 0x238]
xchg r10, rcx
lea r8, [rsp + 0x40]
mov dword [rsp - 0x20], 0x42767563
mov edx, dword [rdi + 0x10]
movabs rcx, 0x3b1d63512c83bf19
add rcx, 0x22dfafb
sub rcx, 0x106abb62
add rcx, 0x7fffffff
xor rcx, 0x7f12285c
rol r10, 0x27
mov dword [rsp - 0x1c], 0x342eeb0c
movabs rax, 0x395e71b878427b13
sub rax, 0x7b172f2
xor rax, 0x6e7835ce
xor rax, 0x7d408c70
add r10, rcx
mov dword [rsp + 0x30], 0x47bb9c4c
sub dword [rsp + 0x30], 0x325fab55
add dword [rsp + 0x30], 0x37fc3303
sub dword [rsp + 0x30], 0x22273135
sub dword [rsp + 0x30], 0x2b30f2c3
and dword [rsp + 0x28], 0
xor r10, rax
mov rcx, qword [rdi + 0x20]
xchg rsp, rsp
mov r9d, 0x5286278c
sub r9d, 0x2a7ba4e5
add r9d, 0x2f48e882
xor r9d, 0x57536a29
and qword [rsp + 0x20], 0
ror r10, 1
not r10
mov dword [rsp - 0x38], 0x78da51ce
call r10
test eax, eax
jne 0x1400d9d14
mov dword [rsp - 0x38], 0x75cf450e
or eax, 0xffffffff
lea rbx, [rsp + 0x40]
cmp byte [rsp + 0x40], 0
mov r9, r9
mov dword [rsp + 0x150], eax
je 0x1400d9ce3
mov rdx, rbx
mov rbx, rbx
lea rcx, [rsp + 0x150]
mov r8d, 0x5bc25b13
xor r8d, 0x4ddd4c8e
add r8d, 0x41a8d8f8
sub r8d, 0x14ed9b15
sub r8d, 0x42da557f
inc rbx
xchg r15, r15
call fcn.14008df10
cmp byte [rbx], 0
jne 0x1400d9c94
mov eax, dword [rsp + 0x150]
mov dword [rsp - 0x3c], ebx
not eax
cmp eax, 0xa2ca6717
je 0x1400d9d05
cmp eax, 0xd7b7e7a8
mov dword [rsp - 0x38], 0x48c9172c
sete al
jmp 0x1400d9d16
mov al, 0x4b
xor al, 7
add al, 0xf
sub al, 0x12
xor al, 0x48
jmp 0x1400d9d16
xor al, al
mov rbx, qword [rsp + 0x158]
mov dword [rsp - 0x18], edi
neg rsp
add rsp, 0xfffffffffffffec0
neg rsp
nop
mov rdi, qword [rsp]
add rsp, 8
ret

Function at 0x1400de4b0
Capabilities:
Encrypt data using curve25519

Disassembly:
xchg rbx, r11
mov qword [rsp + 8], r11
xchg rbx, r11
push rdi
mov r12, r12
sub rsp, 0x457c412a
add rsp, 0x457c406a
xchg r8, rax
mov r8, rax
xchg r8, rax
xchg rbx, rdx
mov rdx, rbx
xchg rbx, rdx
xchg rdx, r8
mov rdx, r8
xchg rdx, r8
xchg r9, rcx
mov rdi, r9
xchg rcx, r9
mov edx, 0x2d9f2206
add edx, 0x40d86f2a
sub edx, 0x599f769a
xor edx, 0x14d81ab6
mov rcx, rax
call fcn.1400ded10
mov r9, r9
movzx eax, byte [rbx + 0x1f]
lea rcx, [rsp + 0x20]
and byte [rbx], 0xf8
and al, 0x3f
mov r8, r8
or al, 0x40
xchg rbx, r14
mov rdx, r14
xchg rbx, r14
mov byte [rbx + 0x1f], al
call fcn.1400e22e0
mov r12, r12
lea rdx, [rsp + 0x20]
mov rcx, rdi
call fcn.1400e2210
xchg rdi, rbx
mov rdi, qword [rsp + 0xd0]
xchg rbx, rdi
add rsp, 0xc0
nop
mov rdi, qword [rsp]
add rsp, 8
ret
Function at 0x1400f0ed8
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r14
push r15
add rsp, 0xffffffffffffffd0
mov dword [rcx + 8], 0x7c7c0c49
xor dword [rcx + 8], 0x1883c06d
xor dword [rcx + 8], 0x6b4bb5be
xor dword [rcx + 8], 0xfb4799b
lea r14, [rcx + 0x298]
xorps xmm0, xmm0
lea rax, [0x14000ba68]
mov qword [rcx], rax
mov rbp, rdx
lea rax, [r14 + 8]
mov rbx, rcx
mov qword [r14], rax
xor edi, edi
mov qword [rcx + 0x290], rdi
mov rsi, r8
movups xmmword [rax], xmm0
mov rcx, r14
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
mov rdx, qword [r8 + 0x38]
mov qword [r14 + 0x38], rdx
call fcn.140017bbc
mov r8d, edi
cmp qword [r14 + 0x38], rdi
jbe 0x1400f0f7b
mov rcx, qword [rsi]
movzx edx, word [rcx + r8*2]
mov word [rax + r8*2], dx
inc r8
cmp r8, qword [r14 + 0x38]
jb 0x1400f0f61
mov ecx, dword [rsi + 0x40]
mov edx, 0x77b6fb35
xor edx, 0x672324ae
add edx, 0x5839e312
add edx, 0x32db5ee
mov qword [rbx + 0x2e0], rdi
bts ecx, 0xe
mov dword [rbx + 0x2d8], ecx
mov r15d, 0x438cbf42
sub r15d, 0x3c5b2e5e
xor r15d, 0x7c31f309
mov eax, dword [rsi + 0x54]
and ecx, 0x2000
xor eax, edx
mov dword [rbx + 0x2e8], eax
mov eax, dword [rsi + 0x58]
xor eax, edx
mov dword [rbx + 0x2ec], eax
mov eax, dword [rsi + 0x44]
xor eax, edx
mov dword [rbx + 0x2f0], eax
mov eax, dword [rsi + 0x48]
xor eax, edx
mov dword [rbx + 0x2f4], eax
mov rax, qword [rsi + 0x60]
mov qword [rbx + 0x2f8], rax
mov eax, dword [rsi + 0x4c]
xor eax, r15d
mov dword [rbx + 0x308], eax
mov eax, dword [rsi + 0x50]
xor eax, edx
mov byte [rbx + 0x310], dil
neg ecx
mov dword [rbx + 0x30c], eax
pushf
mov edx, 0x3fe95e67
sub edx, 0x11c5c5af
sub edx, 0x2e2398a8
popf
mov qword [rbx + 0x318], rbp
sbb r14, r14
and r14, 0xffffffffffff0100
add r14, 0xffff
mov rcx, r14
shl rcx, 4
call fcn.140098520
mov rcx, rax
mov rdx, r14
movaps xmm0, xmmword [0x140147580]
movups xmmword [rcx], xmm0
lea rcx, [rcx + 0x10]
sub rdx, 1
jne 0x1400f1056
mov qword [rbx + 0x300], rax
mov rdx, rdi
mov rax, qword [rsi + 0x68]
inc rdi
mov ecx, dword [rax + rdx]
xor ecx, r15d
mov dword [rsp + 0x50], ecx
movss xmm0, dword [rsp + 0x50]
mov rax, qword [rsi + 0x68]
movss dword [rsp + 0x20], xmm0
mov ecx, dword [rax + rdx + 4]
xor ecx, r15d
mov dword [rsp + 0x50], ecx
movss xmm0, dword [rsp + 0x50]
mov rax, qword [rsi + 0x68]
movss dword [rsp + 0x24], xmm0
mov ecx, dword [rax + rdx + 8]
xor ecx, r15d
mov dword [rsp + 0x50], ecx
movss xmm0, dword [rsp + 0x50]
mov rax, qword [rsi + 0x68]
movss dword [rsp + 0x28], xmm0
mov ecx, dword [rax + rdx + 0xc]
xor ecx, r15d
mov dword [rsp + 0x50], ecx
movss xmm0, dword [rsp + 0x50]
mov rax, qword [rbx + 0x300]
movss dword [rsp + 0x2c], xmm0
movups xmm1, xmmword [rsp + 0x20]
xorps xmm1, xmmword [0x140147580]
movups xmmword [rdx + rax], xmm1
lea rdx, [rdx + 0x10]
cmp rdi, r14
jl 0x1400f1078
lea rcx, [rbp + 0xa0]
mov qword [rsp + 0x50], rbx
lea rdx, [rsp + 0x50]
call fcn.1400ea9e0
mov rbp, qword [rsp + 0x60]
mov rax, rbx
mov rbx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x68]
neg rsp
add rsp, 0xffffffffffffffd0
neg rsp
pop r15
pop r14
pop rdi
ret
Function at 0x1400f2c88
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
mov r10d, 0x6c728d6
xor r10d, 0x36f0949d
add r10d, 0x1014a4a4
add r10d, 0x2bb117ac
mov r8d, dword [rcx + 0x2f4]
xor eax, r10d
xor r8d, r10d
xor r9d, r9d
add r8d, r8d
movd xmm2, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x7b0063ed
mov dword [rsp + 8], eax
movss xmm3, dword [rsp + 8]
mov al, byte [rdx]
cvtdq2ps xmm2, xmm2
test al, al
je 0x1400f2d25
mov r10, qword [rcx + 0x300]
movzx eax, al
inc rdx
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
xorps xmm0, xmmword [0x140147580]
mov al, byte [rdx]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm2
addss xmm1, xmm3
cvttss2si ecx, xmm1
sub ecx, r8d
add r9d, ecx
test al, al
jne 0x1400f2ce9
mov eax, r9d
ret

Function at 0x1400f2e1c
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
mov r10d, 0x44fb14ae
sub r10d, 0xfb36440
xor r10d, 0x47712451
xor r10d, 0x19cbeca4
mov r8d, dword [rcx + 0x2f4]
xor eax, r10d
xor r8d, r10d
xor r11d, r11d
add r8d, r8d
mov r9d, r11d
movd xmm2, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x7b0063ed
mov dword [rsp + 8], eax
movss xmm3, dword [rsp + 8]
movzx eax, word [rdx]
cvtdq2ps xmm2, xmm2
test ax, ax
je 0x1400f2ecc
mov r10, qword [rcx + 0x300]
movzx eax, ax
nop
add rdx, 0x4e053ea8
sub rdx, 0x4e053ea6
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
xorps xmm0, xmmword [0x140147580]
movzx eax, word [rdx]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm2
addss xmm1, xmm3
cvttss2si ecx, xmm1
sub ecx, r8d
add r9d, ecx
test ax, ax
jne 0x1400f2e82
mov eax, r9d
ret

Function at 0x1400f2ed0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
push rdi
sub rsp, 0xa0
xor ebx, ebx
mov rdi, rcx
mov qword [rax + 8], rbx
cmp qword [rcx + 0x2f8], rbx
je 0x1400f2f63
mov edx, dword [rcx + 0x2ec]
mov ecx, 0x103d8ef0
add ecx, 0x41a91157
xor ecx, 0x3a1bd8dc
mov eax, dword [rdi + 0x2e8]
xor edx, ecx
xor eax, ecx
lea rcx, [rbx - 1]
imul edx, eax
lea eax, [rbx + 4]
movsxd rsi, edx
mul rsi
cmovo rax, rcx
mov rcx, rax
call fcn.1400984a0
test rsi, rsi
jle 0x1400f2f80
mov rcx, qword [rdi + 0x2f8]
mov edx, dword [rcx + rbx*4]
xor edx, 0x691058b1
mov dword [rax + rbx*4], edx
inc rbx
cmp rbx, rsi
jl 0x1400f2f3f
jmp 0x1400f2f80
lea rdx, [rsp + 0xb0]
call fcn.1400f30d0
test al, al
je 0x1400f2fcb
mov rax, qword [rsp + 0xb0]
lea rcx, [0x14000bb68]
mov qword [rsp + 0x98], 0x4fecbe91
add qword [rsp + 0x98], 0x20dc0a1a
sub qword [rsp + 0x98], 0x70c8c893
mov qword [rsp + 0x20], rcx
lea rdx, [rsp + 0x20]
mov rcx, qword [rdi + 0x318]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x30], rax
call fcn.1400f1fcc
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x1400f7bf0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
nop
add rsp, 0x6a6766c4
sub rsp, 0x6a676724
mov rbp, qword [rcx + 0xaf0]
lea rax, [rsp + 0x28]
mov rbx, qword [rcx + 0xab8]
xorps xmm0, xmm0
mov r14, rdx
mov qword [rsp + 0x20], rax
mov rsi, rcx
lea rcx, [rsp + 0x20]
lea rdx, [rbp + 1]
movups xmmword [rsp + 0x28], xmm0
movups xmmword [rsp + 0x38], xmm0
movups xmmword [rsp + 0x48], xmm0
call fcn.140017bbc
mov edi, 0x663d9541
xor edi, 0x29b25b44
xor edi, 0x7d8ca7e3
mov r9, rax
mov ecx, edi
mov r15d, 0x475f9890
xor r15d, 0x2fe77c2c
sub r15d, 0x68b8e3bd
test rbp, rbp
je 0x1400f7cba
mov rdx, rax
sub rbx, rax
mov r8, rbp
nop dword [rax]
nop dword [rax + rax]
movzx eax, cx
lea rdx, [rdx + 2]
and ax, r15w
ror ecx, 8
xor ax, word [rbx + rdx - 2]
mov word [rdx - 2], ax
sub r8, 1
jne 0x1400f7c99
xor ebx, ebx
mov word [r9 + rbp*2], bx
cmp word [rsi + 0xb40], bx
je 0x1400f7d05
mov edx, ebx
cmp qword [rsi + 0xaf0], rbx
jbe 0x1400f7d05
nop dword [rax + rax]
mov rax, qword [rsp + 0x20]
movzx ecx, word [rsi + 0xb40]
mov word [rax + rdx*2], cx
inc rdx
cmp rdx, qword [rsi + 0xaf0]
jb 0x1400f7ce5
mov rsi, qword [rsp + 0x20]
lea rax, [r14 + 8]
xorps xmm0, xmm0
mov qword [r14], rax
movups xmmword [rax], xmm0
nop
movabs rdx, 0xffffffff3f6f7f6b
add rdx, 0x6a81904
xor rdx, 0xf4c2792
add rdx, 0x7fffffff
xor rdx, 0x36a44003
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
nop dword [rax]
inc rdx
cmp word [rsi + rdx*2], bx
jne 0x1400f7d49
mov rcx, r14
mov qword [r14 + 0x38], rdx
call fcn.140017bbc
cmp qword [r14 + 0x38], rbx
jbe 0x1400f7d95
sub rsi, rax
nop
movzx ecx, di
lea rax, [rax + 2]
and cx, r15w
ror edi, 8
xor cx, word [rsi + rax - 2]
inc rbx
mov word [rax - 2], cx
cmp rbx, qword [r14 + 0x38]
jb 0x1400f7d71
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x28]
cmp rcx, rax
jne 0x1400f7dc7
lea rdi, [rsp + 0x28]
xor eax, eax
mov ecx, 0x1ea8ec57
add ecx, 0x36006ac0
sub ecx, 0x54a956e7
rep stosb byte [rdi], al
jmp 0x1400f7dcc
call fcn.140098600
lea r11, [rsp + 0x60]
mov rax, r14
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rdi
ret
Function at 0x140105330
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
neg rsp
sub rsp, 0xffffffffffffffe0
neg rsp
mov r8, qword [rcx + 0x648]
xor esi, esi
mov rbx, rcx
test r8, r8
je 0x140105366
mov rdi, qword [rcx + 0x640]
jmp 0x14010536d
mov rdi, rsi
nop dword [rax]
test r8, r8
je 0x140105386
mov rax, qword [rbx + 0x640]
lea rcx, [rax + r8*8]
jmp 0x140105389
mov rcx, rsi
cmp rdi, rcx
je 0x1401055a1
mov rax, qword [rdi]
cmp qword [rax + 0x28], rdx
je 0x1401053a8
add rdi, 8
jmp 0x14010536d
test r8, r8
je 0x140105466
cmp rdi, qword [rbx + 0x640]
jb 0x140105466
mov rax, qword [rbx + 0x640]
lea rcx, [rax + r8*8]
cmp rdi, rcx
jae 0x140105466
mov rdx, rdi
nop word [rax + rax]
mov rcx, qword [rbx + 0x648]
test rcx, rcx
je 0x1401053ff
mov rax, qword [rbx + 0x640]
lea rax, [rax + rcx*8]
jmp 0x140105402
mov rax, rsi
sub rax, 8
cmp rdx, rax
jae 0x14010541f
mov rax, qword [rdx + 8]
mov qword [rdx], rax
sub rdx, 0xfffffffffffffff8
jmp 0x1401053df
test rcx, rcx
je 0x140105466
lea rax, [rcx - 1]
mov qword [rbx + 0x648], rax
test rax, rax
jne 0x140105466
mov rcx, qword [rbx + 0x640]
test rcx, rcx
je 0x140105458
call fcn.140098600
mov qword [rbx + 0x640], rsi
mov qword [rbx + 0x650], rsi
mov qword [rbx + 0x648], rsi
mov rcx, qword [rdi]
test rcx, rcx
je 0x140105488
mov rax, qword [rcx]
mov edx, 0x33188d43
add edx, 0x36779cf6
sub edx, 0x69902a38
call qword [rax]
cmp qword [rbx + 0x648], rsi
je 0x1401055a1
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400efaf0
mov rcx, qword [rsp + 0x30]
mov r10d, 0x7591050f
sub r10d, 0x20f8a5eb
xor r10d, 0x54985f84
mov r8d, dword [rsp + 0x34]
mov eax, ecx
mov r9, qword [rbx + 0x648]
sub eax, r8d
cdq
idiv dword [rbx + 0x648]
cmp eax, r10d
cmovl r10d, eax
test r9, r9
je 0x140105559
mov rdx, qword [rbx + 0x640]
lea r11, [rdx + r9*8]
cmp rdx, r11
je 0x140105559
mov r9d, r10d
xor r9d, 0x6bfd789b
xor r8d, 0x6bfd789b
nop dword [rax]
mov rcx, qword [rdx]
mov eax, esi
xor eax, 0x6bfd789b
add esi, r10d
neg rdx
add rdx, 0xfffffffffffffff8
neg rdx
mov dword [rcx + 0x30], eax
mov dword [rcx + 0x34], 0x387dddb8
add dword [rcx + 0x34], 0x3d00e512
sub dword [rcx + 0x34], 0x9814a2f
mov dword [rcx + 0x38], r9d
mov dword [rcx + 0x3c], r8d
cmp rdx, r11
jne 0x14010550f
mov rcx, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x34]
mov rax, qword [rbx + 0x660]
test rax, rax
je 0x140105599
sub ecx, r8d
mov dword [rax + 0x14], 0x815f11
xor dword [rax + 0x14], 0x18c2b22b
add dword [rax + 0x14], 0x53b98b61
xor ecx, 0x6bfd789b
xor r8d, 0x6bfd789b
mov dword [rax + 0x10], ecx
mov dword [rax + 0x18], r8d
mov dword [rax + 0x1c], r8d
mov rcx, rbx
call fcn.1400ef2c0
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
sub rsp, 0xffffffffffffffe0
pop rdi
ret
Function at 0x140105679
Capabilities:
Encode data using xor

Disassembly:
push rbx
neg rsp
sub rsp, 0xffffffffffffffe0
neg rsp
mov rax, qword [rcx]
mov rbx, rcx
call qword [rax + 0x78]
mov rdx, qword [rbx + 0x648]
mov rcx, rax
mov qword [rsp + 0x30], rax
call fcn.1401019d0
lea rcx, [rbx + 0x640]
lea rdx, [rsp + 0x30]
call fcn.1401051f0
mov rcx, rbx
sub rsp, 0xffffffffffffffe0
pop rbx
jmp 0x1401055c0
push rbx
sub rsp, 0x20
cmp qword [rcx + 0x648], 0
mov rbx, rcx
je 0x1401056ff
lea rdx, [rsp + 0x30]
call fcn.1400efaf0
mov r8, qword [rsp + 0x30]
mov r11d, 0x2b0486c6
add r11d, 0x363657d7
xor r11d, 0x613ade3d
mov r9d, dword [rsp + 0x34]
mov eax, r8d
sub eax, r9d
cdq
idiv dword [rbx + 0x648]
mov rdx, qword [rbx + 0x648]
cmp eax, r11d
cmovl r11d, eax
xor r10d, r10d
test rdx, rdx
je 0x1401056ae
mov rax, qword [rbx + 0x640]
mov qword [rsp + 0x38], rdi
lea rdi, [rax + rdx*8]
cmp rax, rdi
je 0x1401056a9
mov r8d, r11d
xor r8d, 0x6bfd789b
xor r9d, 0x6bfd789b
nop word [rax + rax]
mov rdx, qword [rax]
mov ecx, r10d
xor ecx, 0x6bfd789b
add r10d, r11d
neg rax
add rax, 0xfffffffffffffff8
neg rax
mov dword [rdx + 0x30], ecx
mov dword [rdx + 0x34], 0x6f34685c
xor dword [rdx + 0x34], 0x5772bc69
sub dword [rdx + 0x34], 0x314c57d7
xor dword [rdx + 0x34], 0x6d0704c5
mov dword [rdx + 0x38], r8d
mov dword [rdx + 0x3c], r9d
cmp rax, rdi
jne 0x140105656
mov r8, qword [rsp + 0x30]
mov r9d, dword [rsp + 0x34]
mov rdi, qword [rsp + 0x38]
mov rax, qword [rbx + 0x660]
test rax, rax
je 0x1401056f7
sub r8d, r9d
mov dword [rax + 0x14], 0x3434c1a5
xor dword [rax + 0x14], 0x627278fe
add dword [rax + 0x14], 0x248e898a
sub dword [rax + 0x14], 0xed7ca4a
xor r8d, 0x6bfd789b
xor r9d, 0x6bfd789b
mov dword [rax + 0x10], r8d
mov dword [rax + 0x18], r9d
mov dword [rax + 0x1c], r9d
mov rcx, rbx
call fcn.1400ef2c0
neg rsp
add rsp, 0xffffffffffffffe0
neg rsp
pop rbx
ret
Function at 0x140119300
Capabilities:
Encode data using xor

Disassembly:
xchg rdi, rbx
mov qword [rsp + 0x10], rdi
xchg rdi, rbx
mov qword [rsp + 0x18], rsi
mov rdx, rdx
xchg rdx, rdi
mov qword [rsp + 0x20], rdx
xchg rdx, rdi
nop
mov qword [rsp - 8], rbp
sub rsp, 8
xchg rbp, rsp
mov rsp, rbp
xchg rbp, rsp
sub rsp, 0x80
mov dword [rsp - 0x28], ebp
xor esi, esi
mov dword [rbp - 0x50], 0x72637ec7
add dword [rbp - 0x50], 0x1c6bda7
xor dword [rbp - 0x50], 0x6a919e71
add dword [rbp - 0x50], 0x55b2e1a5
xor dword [rbp - 0x50], 0x74558372
mov dword [rbp - 0x4c], 0xd928dad
add dword [rbp - 0x4c], 0x59fe7016
xor dword [rbp - 0x4c], 0x78f6d574
add dword [rbp - 0x4c], 0x3df5d25e
sub dword [rbp - 0x4c], 0x5ceafac9
mov dword [rbp - 0x48], 0x50e24285
sub dword [rbp - 0x48], 0x258841ed
sub dword [rbp - 0x48], 0x2043a968
sub dword [rbp - 0x48], 0xae5568d
mov dword [rbp - 0x44], 0x5758d953
xor dword [rbp - 0x44], 0x1be95c06
add dword [rbp - 0x44], 0x238f5262
xor dword [rbp - 0x44], 0x4acc410b
sub dword [rbp - 0x44], 0x3a0e9669
xchg rsi, r14
mov qword [rbp + 0x10], r14
xchg rsi, r14
lea ebx, [rsi + 1]
mov dword [rsp - 0x44], edx
mov rax, qword [rbp + 0x10]
xchg r13, rcx
mov r13, qword [rbp + 0x10]
xchg r13, rcx
xchg r14, rax
mov r14, qword [rbp + 0x10]
xchg r14, rax
and cl, 3
shl cl, 3
xchg r9, r9
movzx edx, word [rbp + rax*2 - 0x50]
mov eax, 0x4f7e78de
xor eax, 0x6cafc67a
add eax, 0x3018a4b7
sub eax, 0x21e6f975
shr eax, cl
movzx ecx, al
xchg r14, rax
mov r14, qword [rbp + 0x10]
xchg r14, rax
xor cx, dx
mov word [rbp + rax*2 - 0x20], cx
xchg r14, r14
mov rax, qword [rbp + 0x10]
add rax, rbx
xchg r15, rax
mov qword [rbp + 0x10], r15
xchg r15, rax
mov rax, qword [rbp + 0x10]
cmp rax, 8
jb 0x1401193d8
mov dword [rsp - 0x14], edi
lea rax, [rbp - 0x20]
mov word [rbp - 0x10], si
xorps xmm0, xmm0
mov qword [rbp - 0x38], rax
mov rsp, rsp
lea r9, [rbp - 0x30]
mov dword [rbp - 0x40], 0x296fc98c
xor dword [rbp - 0x40], 0x73775915
sub dword [rbp - 0x40], 0x31e3b5bc
sub dword [rbp - 0x40], 0x2822dacd
lea r8, [rbp - 0x40]
mov dword [rsp + 0x20], esi
xor edx, edx
xchg r8, r8
xor ecx, ecx
xchg rbp, r8
movups xmmword [r8 - 0x30], xmm0
xchg rbp, r8
call fcn.140133f70
xchg rdx, rdx
xchg r9, rax
mov rdi, r9
xchg r9, rax
test rax, rax
xchg r10, r10
je 0x1401194dd
mov rcx, rax
call fcn.14010f8ac
test al, al
mov r8, r8
je 0x1401194dd
lea rdx, [rbp - 0x40]
xchg rcx, r14
mov r14, rdi
xchg rcx, r14
call fcn.14010e770
mov dword [rsp - 0x1c], esi
test al, al
jne 0x1401194e8
mov bl, sil
mov dword [rsp - 0x18], 0x6bf14ad1
xor eax, eax
lea r11, [rsp + 0x80]
mov rsi, qword [r11 + 0x20]
lea rdi, [rbp - 0x20]
mov dword [rsp - 0x24], 0x572b002f
lea ecx, [rax + 8]
rep stosb byte [rdi], al
xchg rbp, rdi
mov rbp, qword [r11 + 0x28]
xchg rbp, rdi
mov al, bl
mov dword [rsp - 0x40], 0x734d533f
mov rbx, qword [r11 + 0x18]
xchg r11, r9
mov rsp, r9
xchg r11, r9
nop
add rsp, 8
mov rbp, qword [rsp - 8]
ret
Function at 0x14011d6b0
Capabilities:
Encode data using xor

Disassembly:
push rbx
xchg r12, r12
add rsp, 0xfffffffffffffdd0
mov rax, qword [0x1401422b0]
lea rdx, [rsp + 0x20]
not rax
mov dword [rsp - 0x14], esp
xchg rbx, rcx
mov rcx, rbx
xchg rcx, rbx
rol rax, 5
rol rax, 0xe
rol rax, 1
rol rax, 1
movabs rcx, 0x283af64c76f52663
sub rcx, 0x1e88de41
sub rcx, 0xd6b6784
sub rcx, 0x67705ee
add rcx, 0x7fffffff
xor rcx, 0x34df3bfc
not rax
xor r9d, r9d
xchg r14, r14
sub rax, rcx
xor ecx, ecx
ror rax, 4
ror rax, 0x19
ror rax, 1
not rax
ror rax, 0xe
ror rax, 8
ror rax, 6
ror rax, 2
ror rax, 1
lea r8d, [r9 + 8]
call rax
xchg r10, r10
lea rcx, [rbx + 8]
xorps xmm0, xmm0
mov qword [rbx], rcx
mov dword [rsp - 0x28], esi
xchg rcx, r8
movups xmmword [r8], xmm0
xchg r8, rcx
xchg rcx, r13
movups xmmword [r13 + 0x10], xmm0
xchg rcx, r13
xchg rcx, r11
movups xmmword [r11 + 0x20], xmm0
xchg r11, rcx
test eax, eax
je 0x14011d894
mov r15, r15
lea rax, [rsp + 0x20]
nop
movabs rdx, 0xffffffff103a979c
add rdx, 0x292bdc1a
add rdx, 0x50a186d
add rdx, 0x7fffffff
add rdx, 0x418f73dd
nop word [rax + rax]
inc rdx
xchg rdi, rdi
cmp word [rax + rdx*2], 0
jne 0x14011d7b6
xchg rdi, rcx
mov rdi, rbx
xchg rcx, rdi
mov qword [rbx + 0x38], rdx
xchg r13, r13
call fcn.140017bbc
xor r8d, r8d
xchg r10, rax
mov rdx, r10
xchg r10, rax
mov ecx, 0x505049a
xor ecx, 0x59a43313
xor ecx, 0x100c448c
add ecx, 0x8360b6
xor ecx, 0x7f33ba5d
cmp qword [rbx + 0x38], r8
mov dword [rsp - 0x40], ecx
jbe 0x14011d89e
lea r9, [rsp + 0x20]
mov r10d, 0x43d29b94
xor r10d, 0x32f6f51d
add r10d, 0x44abd0b
sub r10d, 0x756f2a95
sub r9, rax
xchg r9, r9
nop word [rax + rax]
movzx eax, cx
lea rdx, [rdx + 2]
xchg r15, r15
and ax, r10w
ror ecx, 5
ror ecx, 1
ror ecx, 1
ror ecx, 1
xor ax, word [r9 + rdx - 2]
inc r8
mov word [rdx - 2], ax
xchg r9, r9
cmp r8, qword [rbx + 0x38]
jb 0x14011d842
xchg rbx, rsi
mov rax, rsi
xchg rsi, rbx
sub rsp, 0x78037c2c
add rsp, 0x78037e5c
nop
mov rbx, qword [rsp]
add rsp, 8
ret
xor r8d, r8d
mov rbp, rbp
mov qword [rbx + 0x38], r8
xchg rsp, rax
mov rsp, rbx
xchg rsp, rax
sub rsp, 0x628856b0
add rsp, 0x628858e0
nop
add rsp, 8
mov rbx, qword [rsp - 8]
ret