joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400d9c8c
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov dword [rsp - 0x30], esp
nop
sub rsp, 8
mov qword [rsp], rdi
neg rsp
sub rsp, 0xfffffffffffffec0
neg rsp
mov rdi, r8
mov rbx, rcx
mov dword [rsp - 0x20], ebp
mov r8d, 0x1eaca18e
add r8d, 0x2da5a6e
add r8d, 0x43bb34bf
xor r8d, 0x654231bb
lea rcx, [rsp + 0x40]
xchg rbx, rbx
xor edx, edx
call fcn.1400990e0
mov rax, qword [rbx + 0x238]
lea r8, [rsp + 0x40]
xchg r9, r9
mov edx, dword [rdi + 0x10]
movabs rcx, 0x5120d5d02ee23ca7
add rcx, 0x289de0f8
xor rcx, 0x37019b1a
sub rcx, 0x55d2d6ff
add rcx, 0x7fffffff
add rcx, 0xe3832bc
add rax, rcx
mov dword [rsp + 0x30], 0x2e079124
add dword [rsp + 0x30], 0x1622caa5
sub dword [rsp + 0x30], 0x32f42d6f
sub dword [rsp + 0x30], 0x11362e58
and dword [rsp + 0x28], 0
mov r11, r11
movabs rcx, 0xe996c7556fef5c8
add rcx, 0x26b11a7
sub rcx, 0x2ca5fc5d
add rcx, 0xe269d91
and qword [rsp + 0x20], 0
mov r9d, 0x30c2c8aa
add r9d, 0xdcdad0b
xor r9d, 0x1e9b2fa3
add r9d, 0xb8b629a
sub r9d, 0x2b96bbb0
rol rax, 0xa
rol rax, 2
rol rax, 3
rol rax, 1
rol rax, 1
not rax
rol rax, 4
rol rax, 0x27
rol rax, 1
xor rax, rcx
movabs rcx, 0x73325ad75d5ca032
add rcx, 0x222c4148
sub rcx, 0x4466134c
xor rcx, 0x717e9cc5
add rcx, 0x3322ba49
sub rax, rcx
mov dword [rsp - 0x30], 0x690c71e1
mov rcx, qword [rdi + 0x20]
ror rax, 0x1f
ror rax, 0xe
ror rax, 8
ror rax, 1
ror rax, 1
call rax
xchg r15, r15
test eax, eax
jne 0x1400d9ea5
or eax, 0xffffffff
lea rbx, [rsp + 0x40]
mov dword [rsp - 0x38], ebp
cmp byte [rsp + 0x40], 0
mov dword [rsp + 0x150], eax
je 0x1400d9e79
mov rdx, rbx
mov dword [rsp - 0x18], 0x49d6e998
lea rcx, [rsp + 0x150]
mov r8d, 0x5a2fec8c
xor r8d, 0x1cad43be
sub r8d, 0x42f45b0f
xor r8d, 0x46d565e5
xor r8d, 0x455b31c7
inc rbx
xchg r11, r11
call fcn.14008e1e0
cmp byte [rbx], 0
jne 0x1400d9e25
mov eax, dword [rsp + 0x150]
mov dword [rsp - 0x38], edi
not eax
cmp eax, 0xa2ca6717
je 0x1400d9e96
xchg r11, r11
cmp eax, 0xd7b7e7a8
sete al
jmp 0x1400d9ea7
mov al, 0x7a
xor al, 0x4d
add al, 0x45
xor al, 0x30
sub al, 0x4b
jmp 0x1400d9ea7
xor al, al
xchg rbx, r15
mov r15, qword [rsp + 0x158]
xchg r15, rbx
neg rsp
add rsp, 0xfffffffffffffec0
neg rsp
nop
mov rdi, qword [rsp]
add rsp, 8
ret

Function at 0x1400de3b0
Capabilities:
Encrypt data using curve25519

Disassembly:
mov qword [rsp + 8], rbx
push rdi
xchg rdi, rdi
add rsp, 0x5c242480
sub rsp, 0x5c242540
mov rax, r8
mov rdi, rdi
xchg rbx, rsi
mov rsi, rdx
xchg rsi, rbx
xchg rdx, r8
mov rdx, r8
xchg rdx, r8
xchg rcx, rbx
mov rdi, rbx
xchg rcx, rbx
mov edx, 0xd33f534
add edx, 0x168fafa0
sub edx, 0xde6270c
add edx, 0x5e520a96
sub edx, 0x742f883e
xchg r15, rax
mov rcx, r15
xchg r15, rax
call fcn.1400dec10
xchg rdi, rdi
movzx eax, byte [rbx + 0x1f]
lea rcx, [rsp + 0x20]
and byte [rbx], 0xf8
and al, 0x3f
mov rbp, rbp
or al, 0x40
xchg rbx, rsi
mov rdx, rsi
xchg rsi, rbx
mov byte [rbx + 0x1f], al
mov r11, r11
call fcn.1400e22c0
lea rdx, [rsp + 0x20]
xchg rdi, rcx
mov rdi, rcx
xchg rdi, rcx
call fcn.1400e21f0
mov dword [rsp - 0x34], 0x62c87d6
xchg r10, rbx
mov r10, qword [rsp + 0xd0]
xchg r10, rbx
add rsp, 0x3346dc56
sub rsp, 0x3346db96
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret
Function at 0x1400ed944
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0x3db8925b
add rsp, 0x3db891ab
mov r14, rdx
movabs rdx, 0x77ee73b41ad94463
add rdx, 0x5d0354f1
xor rdx, 0x6c07b8cd
cmp qword [rcx + 0x538], rdx
jne 0x1400edc10
xorps xmm0, xmm0
mov rax, r14
xor rax, rdx
mov qword [rcx + 0x538], rax
lea rax, [rbp - 0x41]
mov rsi, qword [rcx + 0x578]
mov rbx, qword [rcx + 0x540]
lea rcx, [rbp - 0x49]
mov qword [rbp - 0x49], rax
movups xmmword [rbp - 0x41], xmm0
lea rdx, [rsi + 1]
movups xmmword [rbp - 0x31], xmm0
movups xmmword [rbp - 0x21], xmm0
call fcn.14001795c
xor r15d, r15d
mov edx, 0x467e1b19
sub edx, 0x3c64b856
add edx, 0x10254f5f
add edx, 0x131690ed
test rsi, rsi
je 0x1400eda30
mov rdi, rax
sub rbx, rax
mov r8, rsi
movzx ecx, dx
mov r9d, 0x2e597d40
add r9d, 0x1d876c30
sub r9d, 0x4be0e871
and cx, r9w
ror edx, 8
xor cx, word [rbx + rdi]
mov word [rdi], cx
lea rdi, [rdi + 2]
sub r8, 1
jne 0x1400ed9fd
mov word [rax + rsi*2], r15w
movabs rcx, 0x2ee75b5732ddb21a
add rcx, 0x2901cecb
xor rcx, 0x479cecfc
add rcx, 0x778e4f16
lea rax, [0x1400edc44]
mov qword [rbp + 7], r15
mov qword [rbp - 1], rax
mov edx, 0x625f72ed
sub edx, 0x4d60662
sub edx, 0x5d88ed8b
mov rax, qword [0x140142158]
add rax, rcx
mov qword [rbp + 0x17], r15
ror rax, 0x33
movabs rcx, 0x653f416c09a88815
xor rcx, 0x7f1928e4
xor rcx, 0x39d444ac
xor rax, rcx
mov qword [rbp + 0x2f], r15
ror rax, 0x25
movabs rcx, 0x3538e93b4a62b173
sub rcx, 0x41501863
xor rcx, 0x5fc8fc42
sub rcx, 0xee49870
xor rax, rcx
mov qword [rbp + 0x3f], r15
rol rax, 0x2d
xor ecx, ecx
mov dword [rbp - 9], 0x78eca307
xor dword [rbp - 9], 0x317b1782
sub dword [rbp - 9], 0x4997b435
mov dword [rbp - 5], 0x69fbc329
add dword [rbp - 5], 0xffbe8aa
sub dword [rbp - 5], 0x78fc186d
xor dword [rbp - 5], 0xfb9365
mov qword [rbp + 0xf], r14
call rax
mov qword [rbp + 0x1f], rax
movabs rcx, 0x82131ef1138da864
xor rcx, 0x345c5f84
add rcx, 0x3bf527e6
mov rax, qword [0x140142730]
ror rax, 0x1e
xor rax, rcx
xor ecx, ecx
ror rax, 0x21
call rax
mov qword [rbp + 0x27], rax
movabs rcx, 0x71df7f578c0212c
sub rcx, 0x705efaf6
add rcx, 0x497f946f
add rcx, 0x47f22dc9
add rcx, qword [0x140142020]
mov rax, qword [rbp - 0x49]
mov qword [rbp + 0x37], rax
movabs rax, 0xbc344221fc4eaf6
xor rax, 0x1ab9e552
xor rax, 0x2094ee2f
add rax, 0x7fffffff
add rax, 0x4fab7774
xor rcx, rax
movabs rax, 0x7c9bfb081facc4eb
xor rax, 0x631531f6
add rax, 0x7fffffff
xor rax, 0x18e69548
add rcx, rax
movabs rax, 0x5a1fe38430c3326d
add rax, 0x48cc6df5
sub rax, 0x4a8732f0
add rax, 0x5b97a252
ror rcx, 0x3d
add rax, rcx
lea rcx, [rbp - 9]
call rax
mov rcx, qword [rbp - 0x49]
test ax, ax
lea rax, [rbp - 0x41]
setne bl
cmp rcx, rax
jne 0x1400edc04
xor eax, eax
lea rdi, [rbp - 0x41]
lea ecx, [rax + 0x30]
rep stosb byte [rdi], al
jmp 0x1400edc09
call fcn.140098ac0
mov al, bl
jmp 0x1400edc12
xor al, al
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
Function at 0x1400f29c4
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
mov r10d, 0xca36019
sub r10d, 0xbfb9681
xor r10d, 0x74240eb4
sub r10d, 0x4e708442
mov r8d, dword [rcx + 0x2f4]
xor eax, r10d
xor r8d, r10d
xor r9d, r9d
add r8d, r8d
movd xmm2, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x446b21f1
mov dword [rsp + 8], eax
movss xmm3, dword [rsp + 8]
mov al, byte [rdx]
cvtdq2ps xmm2, xmm2
test al, al
je 0x1400f2a61
mov r10, qword [rcx + 0x300]
movzx eax, al
inc rdx
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
xorps xmm0, xmmword [0x140147580]
mov al, byte [rdx]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm2
addss xmm1, xmm3
cvttss2si ecx, xmm1
sub ecx, r8d
add r9d, ecx
test al, al
jne 0x1400f2a25
mov eax, r9d
ret

Function at 0x1400f2b64
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
mov r10d, 0x69371247
sub r10d, 0x3e26ce5f
add r10d, 0x416f0b6e
sub r10d, 0x466c0c6c
mov r8d, dword [rcx + 0x2f4]
xor eax, r10d
xor r8d, r10d
xor r11d, r11d
add r8d, r8d
mov r9d, r11d
movd xmm2, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x446b21f1
mov dword [rsp + 8], eax
movss xmm3, dword [rsp + 8]
movzx eax, word [rdx]
cvtdq2ps xmm2, xmm2
test ax, ax
je 0x1400f2c14
mov r10, qword [rcx + 0x300]
movzx eax, ax
nop
add rdx, 0x741dc02
sub rdx, 0x741dc00
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
xorps xmm0, xmmword [0x140147580]
movzx eax, word [rdx]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm2
addss xmm1, xmm3
cvttss2si ecx, xmm1
sub ecx, r8d
add r9d, ecx
test ax, ax
jne 0x1400f2bca
mov eax, r9d
ret

Function at 0x1400f2c18
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
push rdi
neg rsp
sub rsp, 0xffffffffffffff60
neg rsp
xor ebx, ebx
mov rdi, rcx
mov qword [rax + 8], rbx
cmp qword [rcx + 0x2f8], rbx
je 0x1400f2cb1
mov edx, dword [rcx + 0x2ec]
mov ecx, 0x4bd6f15f
add ecx, 0x1459d9c4
sub ecx, 0x3a1d8839
mov eax, dword [rdi + 0x2e8]
xor edx, ecx
xor eax, ecx
lea rcx, [rbx - 1]
imul edx, eax
lea eax, [rbx + 4]
movsxd rsi, edx
mul rsi
cmovo rax, rcx
mov rcx, rax
call fcn.140098990
test rsi, rsi
jle 0x1400f2cce
mov rcx, qword [rdi + 0x2f8]
mov edx, dword [rcx + rbx*4]
xor edx, 0x396d0ebe
mov dword [rax + rbx*4], edx
inc rbx
cmp rbx, rsi
jl 0x1400f2c8d
jmp 0x1400f2cce
lea rdx, [rsp + 0xb0]
call fcn.1400f2e20
test al, al
je 0x1400f2d19
mov rax, qword [rsp + 0xb0]
lea rcx, [0x14000bb68]
mov qword [rsp + 0x98], 0x2c305330
add qword [rsp + 0x98], 0x103b8cbc
sub qword [rsp + 0x98], 0x3c6bdfd4
mov qword [rsp + 0x20], rcx
lea rdx, [rsp + 0x20]
mov rcx, qword [rdi + 0x318]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x30], rax
call fcn.1400f1d30
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x1400f49e0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r14
push r15
mov rbp, rsp
nop
add rsp, 0x8d989ec
sub rsp, 0x8d98a4c
mov rbx, rdx
mov rdi, rcx
mov edx, r8d
lea rcx, [rbp - 0x20]
mov r12, r9
call fcn.14007e28c
mov r8d, 0x66841ff1
xor r8d, 0x6ff4d164
xor r8d, 0x970ce97
lea rcx, [rbp - 0x20]
mov rdx, rbx
call fcn.14007e31c
test al, al
je 0x1400f4c78
mov eax, dword [rdi + 0x2e8]
lea rdx, [rbp - 0x40]
and dword [rbp - 0x28], 0
mov ecx, 0x3a99bf5
add ecx, 0x1bc41c2c
add ecx, 0x6a58ac9
and dword [rbp - 0x24], 0
xor eax, ecx
mov dword [rbp - 0x38], eax
mov r8d, 0x38e554f1
xor r8d, 0x48cf0839
sub r8d, 0x702a5ca8
mov eax, dword [rdi + 0x2ec]
xor eax, ecx
mov dword [rbp - 0x40], 0x12903c89
xor dword [rbp - 0x40], 0x3ee25425
add dword [rbp - 0x40], 0x5d5da9a
mov dword [rbp - 0x34], eax
mov eax, dword [rdi + 0x2f4]
xor eax, ecx
mov dword [rbp - 0x3c], 0x4a6cb53d
xor dword [rbp - 0x3c], 0x55c34e3a
add dword [rbp - 0x3c], 0x4f544aa4
xor dword [rbp - 0x3c], 0x6f04458b
mov dword [rbp - 0x30], eax
mov eax, dword [rdi + 0x30c]
xor eax, ecx
lea rcx, [rbp - 0x20]
mov dword [rbp - 0x2c], eax
call fcn.140080224
test al, al
je 0x1400f4c78
mov r14d, dword [rdi + 0x2d8]
mov edx, 0x14c3ea0a
add edx, 0x7a9317a
add edx, 0x6023b22e
xor edx, 0x7c90cda2
and r14d, 0x2000
mov eax, r14d
neg eax
sbb rbx, rbx
and rbx, 0xffffffffffff0100
add rbx, 0x10b47ace
sub rbx, 0x10b37acf
mov r15, rbx
shl r15, 4
mov rcx, r15
call fcn.140098a00
mov rsi, rax
test rax, rax
je 0x1400f4c78
mov rdx, qword [rdi + 0x300]
xor r8d, r8d
sub rdx, rax
lea edi, [r8 + 1]
movups xmm0, xmmword [rdx + rax]
add r8, rdi
xorps xmm0, xmmword [0x140147580]
movups xmmword [rax], xmm0
lea rax, [rax + 0x10]
cmp r8, rbx
jl 0x1400f4b54
mov rcx, r15
call fcn.140098990
neg r14d
mov rdx, rax
mov rcx, rsi
mov rbx, rax
sbb r8d, r8d
and r8d, 0xfff01000
add r8d, 0xffff0
mov r9d, r8d
call fcn.140094800
mov r8d, eax
mov dword [rbp - 0x28], eax
mov rdx, rbx
lea rcx, [rbp - 0x20]
call fcn.140080224
mov rcx, rsi
test al, al
jne 0x1400f4bc9
call fcn.1400989b0
mov rcx, rbx
jmp 0x1400f4c24
call fcn.1400989b0
mov rcx, rbx
call fcn.1400989a0
mov eax, dword [rbp - 0x34]
imul eax, dword [rbp - 0x38]
movsxd rcx, eax
shl rcx, 2
call fcn.140098990
mov r8d, dword [rbp - 0x34]
mov rdx, rax
imul r8d, dword [rbp - 0x38]
mov rcx, r12
mov rbx, rax
shl r8d, 2
mov r9d, r8d
call fcn.140094800
mov r8d, eax
mov dword [rbp - 0x24], eax
mov rdx, rbx
lea rcx, [rbp - 0x20]
call fcn.140080224
mov rcx, rbx
test al, al
jne 0x1400f4c2e
call fcn.1400989a0
jmp 0x1400f4c78
call fcn.1400989a0
lea rcx, [rbp - 0x20]
call fcn.140080498
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.14007f9b8
test al, al
je 0x1400f4c78
mov r8d, 0x2d4fd2ca
xor r8d, 0x7188f138
xor r8d, 0x5cc723d2
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x20]
call fcn.140080224
test al, al
jne 0x1400f4c7b
xor dil, dil
lea rcx, [rbp - 0x20]
call fcn.14007e314
lea r11, [rsp + 0x60]
mov al, dil
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
Function at 0x1400f7610
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
add rsp, 0xffffffffffffffa0
mov rbp, qword [rcx + 0xaf0]
lea rax, [rsp + 0x28]
mov rbx, qword [rcx + 0xab8]
xorps xmm0, xmm0
mov r14, rdx
mov qword [rsp + 0x20], rax
mov rsi, rcx
lea rcx, [rsp + 0x20]
lea rdx, [rbp + 1]
movups xmmword [rsp + 0x28], xmm0
movups xmmword [rsp + 0x38], xmm0
movups xmmword [rsp + 0x48], xmm0
call fcn.14001795c
mov edi, 0x30d2787d
xor edi, 0x757378e2
add edi, 0x24978ec0
sub edi, 0x3ce34c50
mov r9, rax
mov ecx, edi
mov r15d, 0x4f8a12e6
add r15d, 0x22e8ef81
sub r15d, 0x72730168
test rbp, rbp
je 0x1400f76d5
mov rdx, rax
sub rbx, rax
mov r8, rbp
nop dword [rax]
nop dword [rax + rax]
movzx eax, cx
lea rdx, [rdx + 2]
and ax, r15w
ror ecx, 8
xor ax, word [rbx + rdx - 2]
mov word [rdx - 2], ax
sub r8, 1
jne 0x1400f76b4
xor ebx, ebx
mov word [r9 + rbp*2], bx
cmp word [rsi + 0xb40], bx
je 0x1400f7720
mov edx, ebx
cmp qword [rsi + 0xaf0], rbx
jbe 0x1400f7720
nop dword [rax + rax]
mov rax, qword [rsp + 0x20]
movzx ecx, word [rsi + 0xb40]
mov word [rax + rdx*2], cx
inc rdx
cmp rdx, qword [rsi + 0xaf0]
jb 0x1400f7700
mov rsi, qword [rsp + 0x20]
lea rax, [r14 + 8]
xorps xmm0, xmm0
mov qword [r14], rax
movups xmmword [rax], xmm0
nop
movabs rdx, 0xffffffff74fc7173
xor rdx, 0x43fbacd4
add rdx, 0x7fffffff
add rdx, 0x48f82259
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
nop dword [rax]
inc rdx
cmp word [rsi + rdx*2], bx
jne 0x1400f775d
mov rcx, r14
mov qword [r14 + 0x38], rdx
call fcn.14001795c
cmp qword [r14 + 0x38], rbx
jbe 0x1400f77a9
sub rsi, rax
nop
movzx ecx, di
lea rax, [rax + 2]
and cx, r15w
ror edi, 8
xor cx, word [rsi + rax - 2]
inc rbx
mov word [rax - 2], cx
cmp rbx, qword [r14 + 0x38]
jb 0x1400f7785
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x28]
cmp rcx, rax
jne 0x1400f77e1
lea rdi, [rsp + 0x28]
xor eax, eax
mov ecx, 0x6eb52d14
sub ecx, 0x1c8b644b
xor ecx, 0x43b6cc2c
sub ecx, 0x119f04b5
rep stosb byte [rdi], al
jmp 0x1400f77e6
call fcn.140098ac0
lea r11, [rsp + 0x60]
mov rax, r14
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rdi
ret
Function at 0x140104ca0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
nop
add rsp, 0x1dcb8a0e
sub rsp, 0x1dcb8a2e
mov r8, qword [rcx + 0x648]
xor esi, esi
mov rbx, rcx
test r8, r8
je 0x140104cdb
mov rdi, qword [rcx + 0x640]
jmp 0x140104ce2
mov rdi, rsi
nop dword [rax]
test r8, r8
je 0x140104cfb
mov rax, qword [rbx + 0x640]
lea rcx, [rax + r8*8]
jmp 0x140104cfe
mov rcx, rsi
cmp rdi, rcx
je 0x140104f2e
mov rax, qword [rdi]
cmp qword [rax + 0x28], rdx
je 0x140104d1d
sub rdi, 0xfffffffffffffff8
jmp 0x140104ce2
test r8, r8
je 0x140104de1
cmp rdi, qword [rbx + 0x640]
jb 0x140104de1
mov rax, qword [rbx + 0x640]
lea rcx, [rax + r8*8]
cmp rdi, rcx
jae 0x140104de1
mov rdx, rdi
nop word [rax + rax]
mov rcx, qword [rbx + 0x648]
test rcx, rcx
je 0x140104d74
mov rax, qword [rbx + 0x640]
lea rax, [rax + rcx*8]
jmp 0x140104d77
mov rax, rsi
add rax, 0xfffffffffffffff8
cmp rdx, rax
jae 0x140104d9a
mov rax, qword [rdx + 8]
mov qword [rdx], rax
neg rdx
add rdx, 0xfffffffffffffff8
neg rdx
jmp 0x140104d54
test rcx, rcx
je 0x140104de1
lea rax, [rcx - 1]
mov qword [rbx + 0x648], rax
test rax, rax
jne 0x140104de1
mov rcx, qword [rbx + 0x640]
test rcx, rcx
je 0x140104dd3
call fcn.140098ac0
mov qword [rbx + 0x640], rsi
mov qword [rbx + 0x650], rsi
mov qword [rbx + 0x648], rsi
mov rcx, qword [rdi]
test rcx, rcx
je 0x140104e09
mov rax, qword [rcx]
mov edx, 0x36296845
sub edx, 0x4dca12a
sub edx, 0x165a8b5e
xor edx, 0x1af23bbc
call qword [rax]
cmp qword [rbx + 0x648], rsi
je 0x140104f2e
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400ef850
mov rcx, qword [rsp + 0x30]
mov r10d, 0x21de692c
sub r10d, 0x3e83eb3
sub r10d, 0x1df629d9
mov r8d, dword [rsp + 0x34]
mov eax, ecx
mov r9, qword [rbx + 0x648]
sub eax, r8d
cdq
idiv dword [rbx + 0x648]
cmp eax, r10d
cmovl r10d, eax
test r9, r9
je 0x140104ee6
mov rdx, qword [rbx + 0x640]
lea r11, [rdx + r9*8]
cmp rdx, r11
je 0x140104ee6
mov r9d, r10d
xor r9d, 0x261342ea
xor r8d, 0x261342ea
nop dword [rax]
mov rcx, qword [rdx]
mov eax, esi
xor eax, 0x261342ea
add esi, r10d
nop
add rdx, 0x1883f62f
sub rdx, 0x1883f627
mov dword [rcx + 0x30], eax
mov dword [rcx + 0x34], 0x4d4d4078
xor dword [rcx + 0x34], 0x3c06a8d2
sub dword [rcx + 0x34], 0x6abd8780
add dword [rcx + 0x34], 0x1f84e1c0
mov dword [rcx + 0x38], r9d
mov dword [rcx + 0x3c], r8d
cmp rdx, r11
jne 0x140104e90
mov rcx, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x34]
mov rax, qword [rbx + 0x660]
test rax, rax
je 0x140104f26
sub ecx, r8d
mov dword [rax + 0x14], 0x17f42b56
xor dword [rax + 0x14], 0x395ea115
sub dword [rax + 0x14], 0x8974759
xor ecx, 0x261342ea
xor r8d, 0x261342ea
mov dword [rax + 0x10], ecx
mov dword [rax + 0x18], r8d
mov dword [rax + 0x1c], r8d
mov rcx, rbx
call fcn.1400eefa0
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
ret
Function at 0x140104ff9
Capabilities:
Encode data using xor

Disassembly:
push rbx
neg rsp
sub rsp, 0xffffffffffffffe0
neg rsp
mov rax, qword [rcx]
mov rbx, rcx
call qword [rax + 0x78]
mov rdx, qword [rbx + 0x648]
mov rcx, rax
mov qword [rsp + 0x30], rax
call fcn.1401012c0
lea rcx, [rbx + 0x640]
lea rdx, [rsp + 0x30]
call fcn.140104b60
mov rcx, rbx
neg rsp
add rsp, 0xffffffffffffffe0
neg rsp
pop rbx
jmp 0x140104f40
push rbx
neg rsp
sub rsp, 0xffffffffffffffe0
neg rsp
cmp qword [rcx + 0x648], 0
mov rbx, rcx
je 0x140105078
lea rdx, [rsp + 0x30]
call fcn.1400ef850
mov r8, qword [rsp + 0x30]
mov r11d, 0x17df3979
add r11d, 0x2a0f5783
xor r11d, 0x41ee905c
mov r9d, dword [rsp + 0x34]
mov eax, r8d
sub eax, r9d
cdq
idiv dword [rbx + 0x648]
mov rdx, qword [rbx + 0x648]
cmp eax, r11d
cmovl r11d, eax
xor r10d, r10d
test rdx, rdx
je 0x14010502e
mov rax, qword [rbx + 0x640]
mov qword [rsp + 0x38], rdi
lea rdi, [rax + rdx*8]
cmp rax, rdi
je 0x140105029
mov r8d, r11d
xor r8d, 0x261342ea
xor r9d, 0x261342ea
nop word [rax + rax]
mov rdx, qword [rax]
mov ecx, r10d
xor ecx, 0x261342ea
add r10d, r11d
add rax, 8
mov dword [rdx + 0x30], ecx
mov dword [rdx + 0x34], 0x531f0bb0
xor dword [rdx + 0x34], 0x5e2227c7
xor dword [rdx + 0x34], 0xb4033f4
add dword [rdx + 0x34], 0x1f962367
mov dword [rdx + 0x38], r8d
mov dword [rdx + 0x3c], r9d
cmp rax, rdi
jne 0x140104fdc
mov r8, qword [rsp + 0x30]
mov r9d, dword [rsp + 0x34]
mov rdi, qword [rsp + 0x38]
mov rax, qword [rbx + 0x660]
test rax, rax
je 0x140105070
sub r8d, r9d
mov dword [rax + 0x14], 0xc03ed54
add dword [rax + 0x14], 0x5eb5e093
xor dword [rax + 0x14], 0x4caa8f0d
xor r8d, 0x261342ea
xor r9d, 0x261342ea
mov dword [rax + 0x10], r8d
mov dword [rax + 0x18], r9d
mov dword [rax + 0x1c], r9d
mov rcx, rbx
call fcn.1400eefa0
add rsp, 0x20
pop rbx
ret
Function at 0x140118be4
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
xchg rsp, rsp
push rbp
mov rbp, rsp
add rsp, 0x236048ca
sub rsp, 0x2360494a
xor esi, esi
mov r14, r14
mov dword [rbp - 0x50], 0x30f329ca
sub dword [rbp - 0x50], 0xe5bba64
xor dword [rbp - 0x50], 0x7027d84a
sub dword [rbp - 0x50], 0x529fb6cd
mov dword [rbp - 0x4c], 0xe54243d
add dword [rbp - 0x4c], 0x1e318042
add dword [rbp - 0x4c], 0x2383b52a
xor dword [rbp - 0x4c], 0x506759b3
mov dword [rbp - 0x48], 0x46c51e43
sub dword [rbp - 0x48], 0x216cab28
add dword [rbp - 0x48], 0x2a6ad857
add dword [rbp - 0x48], 0x22c6e9cf
sub dword [rbp - 0x48], 0x726f34f7
mov dword [rbp - 0x44], 0x5061858e
xor dword [rbp - 0x44], 0x4c9e5c41
add dword [rbp - 0x44], 0x4de12092
sub dword [rbp - 0x44], 0x3ddce723
sub dword [rbp - 0x44], 0x2ca31339
xchg rsi, rdx
mov qword [rbp + 0x10], rdx
xchg rdx, rsi
lea ebx, [rsi + 1]
mov rax, qword [rbp + 0x10]
xchg r12, rcx
mov r12, qword [rbp + 0x10]
xchg rcx, r12
xchg rbx, rax
mov rbx, qword [rbp + 0x10]
xchg rbx, rax
and cl, 3
mov dword [rsp - 0x14], ebx
shl cl, 2
shl cl, 1
movzx edx, word [rbp + rax*2 - 0x50]
mov eax, 0x30d6142c
add eax, 0x32242818
sub eax, 0x1e547474
sub eax, 0x175084c1
shr eax, cl
mov dword [rsp - 0x38], esp
movzx ecx, al
mov rax, qword [rbp + 0x10]
xor cx, dx
mov word [rbp + rax*2 - 0x20], cx
mov dword [rsp - 0x20], 0x5e1724ea
mov rax, qword [rbp + 0x10]
add rax, rbx
xchg rsi, rax
mov qword [rbp + 0x10], rsi
xchg rsi, rax
xchg r15, rax
mov r15, qword [rbp + 0x10]
xchg r15, rax
cmp rax, 8
jb 0x140118c9c
mov r13, r13
lea rax, [rbp - 0x20]
mov word [rbp - 0x10], si
xorps xmm0, xmm0
xchg rcx, rcx
xchg rdx, rax
mov qword [rbp - 0x38], rdx
xchg rdx, rax
lea r9, [rbp - 0x30]
mov r11, r11
mov dword [rbp - 0x40], 0x575664db
xor dword [rbp - 0x40], 0x3a476882
xor dword [rbp - 0x40], 0x675042c3
sub dword [rbp - 0x40], 0xa2f4e8a
lea r8, [rbp - 0x40]
mov dword [rsp + 0x20], esi
xor edx, edx
mov rsi, rsi
xor ecx, ecx
xchg rsi, rbp
movups xmmword [rsi - 0x30], xmm0
xchg rbp, rsi
call fcn.1401340d0
xchg rdi, rax
mov rax, rdi
xchg rdi, rax
test rax, rax
mov r9, r9
je 0x140118db8
mov rcx, rax
call fcn.14010f270
test al, al
mov dword [rsp - 0x24], 0x454278e0
je 0x140118db8
lea rdx, [rbp - 0x40]
xchg rcx, r11
mov r11, rdi
xchg r11, rcx
call fcn.14010e0ec
test al, al
mov dword [rsp - 0x38], 0x24be0a68
jne 0x140118dbb
mov bl, sil
xor eax, eax
mov dword [rsp - 0x44], ecx
lea r11, [rsp + 0x80]
xchg rsi, rdx
mov rdx, qword [r11 + 0x20]
xchg rsi, rdx
lea rdi, [rbp - 0x20]
lea ecx, [rax + 8]
xchg r15, r15
rep stosb byte [rdi], al
xchg rdi, r15
mov r15, qword [r11 + 0x28]
xchg r15, rdi
mov al, bl
mov rbx, qword [r11 + 0x18]
xchg rsp, rbx
mov rbx, r11
xchg rbx, rsp
nop
add rsp, 8
mov rbp, qword [rsp - 8]
ret