joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140034b50
Capabilities:
Encode data using xor

Disassembly:
xchg r12, rbx
mov qword [rsp + 8], r12
xchg rbx, r12
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x60
movsxd rax, r8d
xchg r15, r15
movabs rcx, 0x24d30ef23
xor rcx, 0x3b0b4844
xor rcx, 0x54597067
add rcx, 0x7fffffff
add rcx, 0x13adba01
add rax, rcx
xchg rsp, rdx
mov rbx, rsp
xchg rdx, rsp
imul rcx, rax, 0x989680
mov rax, qword [0x1400ee5a0]
mov rsi, rsi
lea rdx, [rsp + 0x30]
mov dword [rsp + 0x78], ecx
sar rcx, 0x16
sar rcx, 2
sar rcx, 1
sar rcx, 6
sar rcx, 1
mov dword [rsp + 0x7c], ecx
movabs rcx, 0x1335439a76918fd5
sub rcx, 0x75568906
add rcx, 0x450e7a1d
add rcx, 0x125818d0
xor rax, rcx
xchg r14, r14
movabs rcx, 0x399d38076ce04552
xor rcx, 0x2f09ae18
add rcx, 0xb9ce7c2
xor rcx, 0x12c0eb9b
xor rcx, 0x3136e4f8
not rax
mov dword [rsp - 0x24], 0x3bfe0193
ror rax, 0x20
ror rax, 6
ror rax, 6
ror rax, 1
ror rax, 1
ror rax, 1
xor rax, rcx
mov dword [rsp - 0x14], edi
movabs rcx, 0x5226eb0117db1be6
xor rcx, 0x2e6acd68
xor rcx, 0x2f5b8b5f
xor rcx, 0x3808ba
add rcx, 0x5e2af6ea
add rax, rcx
mov dword [rsp - 0x38], esp
movabs rcx, 0x4177bb9608e7e462
xor rcx, 0x29c03453
xor rcx, 0x4491a52a
sub rcx, 0x2df3531
add rcx, 0x53b43d43
not rax
mov dword [rsp - 0x44], ecx
sub rax, rcx
lea rcx, [rsp + 0x78]
call rax
xchg rbx, rbx
mov r10, qword [0x1400ee590]
lea r8, [rsp + 0x30]
movabs rcx, 0xf647394c4a887c9c
sub rcx, 0x18954cda
xor rcx, 0x5588366a
xor rcx, 0x7e4d925e
add rcx, 0x7fffffff
xor rcx, 0x59abf3a2
mov dword [rsp + 0x28], 0x157eaea5
xor dword [rsp + 0x28], 0x75f56462
sub dword [rsp + 0x28], 0x3cf2c13c
xor dword [rsp + 0x28], 0x23990987
add r10, rcx
movabs rax, 0xcd9f0eb272c45c5a
xor rax, 0x5fd3c985
add rax, 0x207e5faf
xor rax, 0x415f941a
sub rax, 0x3859088
xor r10, rax
xor r9d, r9d
lea rax, [rsp + 0x40]
mov r15, r15
xor edx, edx
mov ecx, 0x436518b8
add ecx, 0x30b1b61e
sub ecx, 0x3fd746f7
sub ecx, 0x343f83df
xchg r13, rax
mov qword [rsp + 0x20], r13
xchg r13, rax
call r10
lea rax, [rbx + 8]
mov dword [rsp - 0x30], ecx
xorps xmm0, xmm0
mov qword [rbx], rax
or rdx, 0xffffffffffffffff
mov dword [rsp - 0x20], esp
xchg rcx, rax
movups xmmword [rcx], xmm0
xchg rcx, rax
xor edi, edi
xchg r14, r14
xchg r10, rax
movups xmmword [r10 + 0x10], xmm0
xchg r10, rax
xchg r9, rax
movups xmmword [r9 + 0x20], xmm0
xchg r9, rax
lea rax, [rsp + 0x40]
inc rdx
mov dword [rsp - 0x3c], esi
cmp word [rax + rdx*2], di
jne 0x140034d93
mov rcx, rbx
xchg rdi, rdi
mov qword [rbx + 0x38], rdx
call fcn.140016760
mov edx, 0x10544973
add edx, 0x467edb3
add edx, 0x15fc6d63
add edx, 0x25b9442
cmp qword [rbx + 0x38], rdi
jbe 0x140034e2a
mov dword [rsp - 0x28], edx
lea r8, [rsp + 0x40]
sub r8, rax
movzx ecx, dx
mov r9d, 0xcbed7d5
xor r9d, 0x4438af37
sub r9d, 0x2295c06f
sub r9d, 0x25f0b774
and cx, r9w
mov r12, r12
ror edx, 4
ror edx, 4
xor cx, word [r8 + rax]
xchg rbp, rbp
inc rdi
mov word [rax], cx
lea rax, [rax + 2]
xchg rdx, rdx
cmp rdi, qword [rbx + 0x38]
jb 0x140034de0
xchg rsi, rax
mov rsi, rbx
xchg rsi, rax
xchg rbx, r14
mov r14, qword [rsp + 0x70]
xchg r14, rbx
neg rsp
add rsp, 0xffffffffffffffa0
neg rsp
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret
Function at 0x14003d3c8
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x5f]
add rsp, 0xffffffffffffff50
mov r14, rdx
movabs rdx, 0xf36add0114f360
xor rdx, 0x437be9f4
xor rdx, 0x39848f42
sub rdx, 0x5c607a9a
cmp qword [rcx + 0x538], rdx
jne 0x14003d6ae
xorps xmm0, xmm0
mov rax, r14
xor rax, rdx
mov qword [rcx + 0x538], rax
lea rax, [rbp - 0x41]
mov rsi, qword [rcx + 0x578]
mov rbx, qword [rcx + 0x540]
lea rcx, [rbp - 0x49]
mov qword [rbp - 0x49], rax
movups xmmword [rbp - 0x41], xmm0
lea rdx, [rsi + 1]
movups xmmword [rbp - 0x31], xmm0
movups xmmword [rbp - 0x21], xmm0
call fcn.140016760
xor r15d, r15d
mov edx, 0x3ccc3018
xor edx, 0x27f5d684
add edx, 0x3d8fbdc4
sub edx, 0x2bb56b95
test rsi, rsi
je 0x14003d4bb
mov rdi, rax
sub rbx, rax
mov r8, rsi
movzx ecx, dx
mov r9d, 0x28b19770
xor r9d, 0xd7b65b2
xor r9d, 0x65369925
sub r9d, 0x40fc6ae8
and cx, r9w
ror edx, 8
xor cx, word [rbx + rdi]
mov word [rdi], cx
lea rdi, [rdi + 2]
sub r8, 1
jne 0x14003d481
mov word [rax + rsi*2], r15w
movabs rcx, 0x9deed1935f9d13bb
sub rcx, 0x5c799b0d
add rcx, 0x569e3821
lea rax, [0x14003d6e4]
mov qword [rbp + 7], r15
mov qword [rbp - 1], rax
mov edx, 0x758e70d6
xor edx, 0x4ecad281
xor edx, 0x3b44dd57
mov rax, qword [0x1400ee158]
rol rax, 0x32
xor rax, rcx
mov qword [rbp + 0x17], r15
movabs rcx, 0x586f8d1000a7f699
add rcx, 0x901f47b
sub rcx, 0x4c76c3
add rcx, 0x62e3de0e
mov qword [rbp + 0x2f], r15
add rax, rcx
mov qword [rbp + 0x3f], r15
ror rax, 0x26
xor ecx, ecx
mov dword [rbp - 9], 0x21975d40
xor dword [rbp - 9], 0x7c22ac02
xor dword [rbp - 9], 0x5db5f112
mov dword [rbp - 5], 0x1c06fb4a
add dword [rbp - 5], 0x576a492c
xor dword [rbp - 5], 0x10eae579
sub dword [rbp - 5], 0x639ba10c
mov qword [rbp + 0xf], r14
call rax
mov qword [rbp + 0x1f], rax
movabs rcx, 0x4f5b9b642532916d
add rcx, 0x3d816c0b
xor rcx, 0x154dddf9
add rcx, 0x227a6ee0
mov rax, qword [0x1400ee730]
xor rax, rcx
movabs rcx, 0x1baee48f26567624
xor rcx, 0x707409bb
sub rcx, 0x4fa063de
xor rcx, 0x12833ba1
ror rax, 0x31
sub rax, rcx
movabs rcx, 0x17485e1f2469080c
add rcx, 0x286958a5
add rcx, 0x286ca14e
sub rcx, 0x62912fb2
ror rax, 0x12
add rax, rcx
xor ecx, ecx
ror rax, 0x17
call rax
mov rdx, qword [0x1400ee020]
movabs rcx, 0x41966c2267ef08b2
xor rcx, 0xb2c62
xor rcx, 0x6a4eeb3b
xor rcx, 0x18b11978
add rdx, rcx
mov qword [rbp + 0x27], rax
mov rax, qword [rbp - 0x49]
lea rcx, [rbp - 9]
not rdx
mov qword [rbp + 0x37], rax
movabs rax, 0x37ed26bb4335eb2d
xor rax, 0x1c72a361
xor rax, 0x46a532fe
add rax, 0x7fffffff
xor rax, 0x30c50827
add rdx, rax
movabs rax, 0x3e8157c635f7890e
add rax, 0xa011733
add rax, 0x7fffffff
sub rax, 0x3b756fae
xor rdx, rax
rol rdx, 0x2e
not rdx
call rdx
mov rcx, qword [rbp - 0x49]
test ax, ax
lea rax, [rbp - 0x41]
setne bl
cmp rcx, rax
jne 0x14003d6a2
xor eax, eax
lea rdi, [rbp - 0x41]
lea ecx, [rax + 0x30]
rep stosb byte [rdi], al
jmp 0x14003d6a7
call fcn.140092c10
mov al, bl
jmp 0x14003d6b0
xor al, al
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
Function at 0x14003e48c
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r14
push r15
nop
add rsp, 0x2139a9f5
sub rsp, 0x2139aa25
mov dword [rcx + 8], 0x1cb103d6
sub dword [rcx + 8], 0xcbe8240
xor dword [rcx + 8], 0xaf5fa3d
sub dword [rcx + 8], 0x5077baa
lea r14, [rcx + 0x298]
xorps xmm0, xmm0
lea rax, [0x140002928]
mov qword [rcx], rax
mov rbp, rdx
lea rax, [r14 + 8]
mov rbx, rcx
mov qword [r14], rax
xor edi, edi
mov qword [rcx + 0x290], rdi
mov rsi, r8
movups xmmword [rax], xmm0
mov rcx, r14
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
mov rdx, qword [r8 + 0x38]
mov qword [r14 + 0x38], rdx
call fcn.140016760
mov r8d, edi
cmp qword [r14 + 0x38], rdi
jbe 0x14003e53a
mov rcx, qword [rsi]
movzx edx, word [rcx + r8*2]
mov word [rax + r8*2], dx
inc r8
cmp r8, qword [r14 + 0x38]
jb 0x14003e520
mov ecx, dword [rsi + 0x40]
mov edx, 0x14a18190
add edx, 0x10a5bc4e
add edx, 0x3190785
xor edx, 0x780f53fc
mov qword [rbx + 0x2e0], rdi
bts ecx, 0xe
mov dword [rbx + 0x2d8], ecx
mov r15d, 0xd8e3579
xor r15d, 0x5b382291
add r15d, 0xf5495
mov eax, dword [rsi + 0x54]
and ecx, 0x2000
xor eax, edx
mov dword [rbx + 0x2e8], eax
mov eax, dword [rsi + 0x58]
xor eax, edx
mov dword [rbx + 0x2ec], eax
mov eax, dword [rsi + 0x44]
xor eax, edx
mov dword [rbx + 0x2f0], eax
mov eax, dword [rsi + 0x48]
xor eax, edx
mov dword [rbx + 0x2f4], eax
mov rax, qword [rsi + 0x60]
mov qword [rbx + 0x2f8], rax
mov eax, dword [rsi + 0x4c]
xor eax, r15d
mov dword [rbx + 0x308], eax
mov eax, dword [rsi + 0x50]
xor eax, edx
mov byte [rbx + 0x310], dil
neg ecx
mov dword [rbx + 0x30c], eax
pushf
mov edx, 0x1402bc35
add edx, 0x4847a852
xor edx, 0x5c4a6497
popf
mov qword [rbx + 0x318], rbp
sbb r14, r14
and r14, 0xffffffffffff0100
sub r14, 0x67c14fd5
add r14, 0x67c24fd4
mov rcx, r14
shl rcx, 4
call fcn.140092b30
mov rcx, rax
mov rdx, r14
movaps xmm0, xmmword [0x1400ef460]
movups xmmword [rcx], xmm0
lea rcx, [rcx + 0x10]
sub rdx, 1
jne 0x14003e61c
mov qword [rbx + 0x300], rax
mov rdx, rdi
mov rax, qword [rsi + 0x68]
inc rdi
mov ecx, dword [rax + rdx]
xor ecx, r15d
mov dword [rsp + 0x50], ecx
movss xmm0, dword [rsp + 0x50]
mov rax, qword [rsi + 0x68]
movss dword [rsp + 0x20], xmm0
mov ecx, dword [rax + rdx + 4]
xor ecx, r15d
mov dword [rsp + 0x50], ecx
movss xmm0, dword [rsp + 0x50]
mov rax, qword [rsi + 0x68]
movss dword [rsp + 0x24], xmm0
mov ecx, dword [rax + rdx + 8]
xor ecx, r15d
mov dword [rsp + 0x50], ecx
movss xmm0, dword [rsp + 0x50]
mov rax, qword [rsi + 0x68]
movss dword [rsp + 0x28], xmm0
mov ecx, dword [rax + rdx + 0xc]
xor ecx, r15d
mov dword [rsp + 0x50], ecx
movss xmm0, dword [rsp + 0x50]
mov rax, qword [rbx + 0x300]
movss dword [rsp + 0x2c], xmm0
movups xmm1, xmmword [rsp + 0x20]
xorps xmm1, xmmword [0x1400ef460]
movups xmmword [rdx + rax], xmm1
lea rdx, [rdx + 0x10]
cmp rdi, r14
jl 0x14003e63e
lea rcx, [rbp + 0xa0]
mov qword [rsp + 0x50], rbx
lea rdx, [rsp + 0x50]
call fcn.140020360
mov rbp, qword [rsp + 0x60]
mov rax, rbx
mov rbx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x68]
nop
add rsp, 0xad63320
sub rsp, 0xad632f0
pop r15
pop r14
pop rdi
ret
Function at 0x14004028c
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
mov r10d, 0x50382ddd
add r10d, 0x5997092
add r10d, 0xaf3177d
sub r10d, 0x10559f4d
mov r8d, dword [rcx + 0x2f4]
xor eax, r10d
xor r8d, r10d
xor r9d, r9d
add r8d, r8d
movd xmm2, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x56c56c7d
mov dword [rsp + 8], eax
movss xmm3, dword [rsp + 8]
mov al, byte [rdx]
cvtdq2ps xmm2, xmm2
test al, al
je 0x140040329
mov r10, qword [rcx + 0x300]
movzx eax, al
inc rdx
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
xorps xmm0, xmmword [0x1400ef460]
mov al, byte [rdx]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm2
addss xmm1, xmm3
cvttss2si ecx, xmm1
sub ecx, r8d
add r9d, ecx
test al, al
jne 0x1400402ed
mov eax, r9d
ret

Function at 0x140040428
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
mov r10d, 0x6726b92c
sub r10d, 0x66fe9840
xor r10d, 0x5557ede6
sub r10d, 0x510b66b
mov r8d, dword [rcx + 0x2f4]
xor eax, r10d
xor r8d, r10d
xor r11d, r11d
add r8d, r8d
mov r9d, r11d
movd xmm2, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x56c56c7d
mov dword [rsp + 8], eax
movss xmm3, dword [rsp + 8]
movzx eax, word [rdx]
cvtdq2ps xmm2, xmm2
test ax, ax
je 0x1400404d8
mov r10, qword [rcx + 0x300]
movzx eax, ax
nop
sub rdx, 0x206a5818
add rdx, 0x206a581a
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
xorps xmm0, xmmword [0x1400ef460]
movzx eax, word [rdx]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm2
addss xmm1, xmm3
cvttss2si ecx, xmm1
sub ecx, r8d
add r9d, ecx
test ax, ax
jne 0x14004048e
mov eax, r9d
ret

Function at 0x1400404dc
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
push rdi
neg rsp
sub rsp, 0xffffffffffffff60
neg rsp
xor ebx, ebx
mov rdi, rcx
mov qword [rax + 8], rbx
cmp qword [rcx + 0x2f8], rbx
je 0x14004057b
mov edx, dword [rcx + 0x2ec]
mov ecx, 0xf944d5f
add ecx, 0x2e395644
xor ecx, 0x3aad4835
add ecx, 0x490e2b09
mov eax, dword [rdi + 0x2e8]
xor edx, ecx
xor eax, ecx
lea rcx, [rbx - 1]
imul edx, eax
lea eax, [rbx + 4]
movsxd rsi, edx
mul rsi
cmovo rax, rcx
mov rcx, rax
call fcn.140092ac0
test rsi, rsi
jle 0x140040598
mov rcx, qword [rdi + 0x2f8]
mov edx, dword [rcx + rbx*4]
xor edx, 0x29f44e3a
mov dword [rax + rbx*4], edx
inc rbx
cmp rbx, rsi
jl 0x140040557
jmp 0x140040598
lea rdx, [rsp + 0xb0]
call fcn.1400406f8
test al, al
je 0x1400405ef
mov rax, qword [rsp + 0xb0]
lea rcx, [0x140002a28]
mov qword [rsp + 0x98], 0x70613964
sub qword [rsp + 0x98], 0x54c17530
add qword [rsp + 0x98], 0x44c0ff3b
xor qword [rsp + 0x98], 0x6060c377
mov qword [rsp + 0x20], rcx
lea rdx, [rsp + 0x20]
mov rcx, qword [rdi + 0x318]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x30], rax
call fcn.14003f59c
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x140049640
Capabilities:
Authenticate hmac

Disassembly:
push rbx
nop
add rsp, 0x70ca42cc
sub rsp, 0x70ca42ec
mov rbx, rcx
mov byte [rcx + 0xb43], 0x36
xor byte [rcx + 0xb43], 0x6b
sub byte [rcx + 0xb43], 0x5c
call fcn.1400438b0
mov rcx, rax
mov rdx, qword [rax]
call qword [rdx + 0xb0]
mov rcx, qword [0x1400eea70]
lea rdx, [rbx + 0xb70]
mov r8, rax
add rsp, 0x20
pop rbx
jmp fcn.14003af0c
Function at 0x14004a130
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
nop
add rsp, 0xd2183d5
sub rsp, 0xd218435
mov rbp, qword [rcx + 0xaf0]
lea rax, [rsp + 0x28]
mov rbx, qword [rcx + 0xab8]
xorps xmm0, xmm0
mov r14, rdx
mov qword [rsp + 0x20], rax
mov rsi, rcx
lea rcx, [rsp + 0x20]
lea rdx, [rbp + 1]
movups xmmword [rsp + 0x28], xmm0
movups xmmword [rsp + 0x38], xmm0
movups xmmword [rsp + 0x48], xmm0
call fcn.140016760
mov edi, 0x1a8d9acc
add edi, 0x3b66f912
sub edi, 0x28e05b13
mov r9, rax
mov ecx, edi
mov r15d, 0x45299261
xor r15d, 0x61ea82f1
sub r15d, 0x24c30f91
test rbp, rbp
je 0x14004a1fa
mov rdx, rax
sub rbx, rax
mov r8, rbp
nop dword [rax]
nop dword [rax + rax]
movzx eax, cx
lea rdx, [rdx + 2]
and ax, r15w
ror ecx, 8
xor ax, word [rbx + rdx - 2]
mov word [rdx - 2], ax
sub r8, 1
jne 0x14004a1d9
xor ebx, ebx
mov word [r9 + rbp*2], bx
cmp word [rsi + 0xb40], bx
je 0x14004a245
mov edx, ebx
cmp qword [rsi + 0xaf0], rbx
jbe 0x14004a245
nop dword [rax + rax]
mov rax, qword [rsp + 0x20]
movzx ecx, word [rsi + 0xb40]
mov word [rax + rdx*2], cx
inc rdx
cmp rdx, qword [rsi + 0xaf0]
jb 0x14004a225
mov rsi, qword [rsp + 0x20]
lea rax, [r14 + 8]
xorps xmm0, xmm0
mov qword [r14], rax
movups xmmword [rax], xmm0
nop
movabs rdx, 0xffffffff2a4f1486
xor rdx, 0x3dfd3f7e
xor rdx, 0x6d880811
add rdx, 0x7fffffff
add rdx, 0x5c5dc17
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
nop dword [rax]
inc rdx
cmp word [rsi + rdx*2], bx
jne 0x14004a289
mov rcx, r14
mov qword [r14 + 0x38], rdx
call fcn.140016760
cmp qword [r14 + 0x38], rbx
jbe 0x14004a2d5
sub rsi, rax
nop
movzx ecx, di
lea rax, [rax + 2]
and cx, r15w
ror edi, 8
xor cx, word [rsi + rax - 2]
inc rbx
mov word [rax - 2], cx
cmp rbx, qword [r14 + 0x38]
jb 0x14004a2b1
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x28]
cmp rcx, rax
jne 0x14004a307
lea rdi, [rsp + 0x28]
xor eax, eax
mov ecx, 0x38dd00c
add ecx, 0x4254b5ae
sub ecx, 0x45e2858a
rep stosb byte [rdi], al
jmp 0x14004a30c
call fcn.140092c10
lea r11, [rsp + 0x60]
mov rax, r14
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rdi
ret
Function at 0x140052a30
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
add rsp, 0xffffffffffffffe0
mov r8, qword [rcx + 0x648]
xor esi, esi
mov rbx, rcx
test r8, r8
je 0x140052a60
mov rdi, qword [rcx + 0x640]
jmp 0x140052a67
mov rdi, rsi
nop dword [rax]
test r8, r8
je 0x140052a80
mov rax, qword [rbx + 0x640]
lea rcx, [rax + r8*8]
jmp 0x140052a83
mov rcx, rsi
cmp rdi, rcx
je 0x140052caf
mov rax, qword [rdi]
cmp qword [rax + 0x28], rdx
je 0x140052aad
nop
sub rdi, 0x7f527fab
add rdi, 0x7f527fb3
jmp 0x140052a67
test r8, r8
je 0x140052b7a
cmp rdi, qword [rbx + 0x640]
jb 0x140052b7a
mov rax, qword [rbx + 0x640]
lea rcx, [rax + r8*8]
cmp rdi, rcx
jae 0x140052b7a
mov rdx, rdi
nop word [rax + rax]
mov rcx, qword [rbx + 0x648]
test rcx, rcx
je 0x140052b04
mov rax, qword [rbx + 0x640]
lea rax, [rax + rcx*8]
jmp 0x140052b07
mov rax, rsi
nop
add rax, 0xffffffff89ab3fae
sub rax, 0xffffffff89ab3fb6
cmp rdx, rax
jae 0x140052b33
mov rax, qword [rdx + 8]
mov qword [rdx], rax
neg rdx
add rdx, 0xfffffffffffffff8
neg rdx
jmp 0x140052ae4
test rcx, rcx
je 0x140052b7a
lea rax, [rcx - 1]
mov qword [rbx + 0x648], rax
test rax, rax
jne 0x140052b7a
mov rcx, qword [rbx + 0x640]
test rcx, rcx
je 0x140052b6c
call fcn.140092c10
mov qword [rbx + 0x640], rsi
mov qword [rbx + 0x650], rsi
mov qword [rbx + 0x648], rsi
mov rcx, qword [rdi]
test rcx, rcx
je 0x140052b9c
mov rax, qword [rcx]
mov edx, 0x78f7364e
sub edx, 0x3be15f8b
sub edx, 0x3d15d6c2
call qword [rax]
cmp qword [rbx + 0x648], rsi
je 0x140052caf
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400448a0
mov rcx, qword [rsp + 0x30]
mov r10d, 0x7b0d8f72
sub r10d, 0x3dbef78c
sub r10d, 0x3d4e9746
mov r8d, dword [rsp + 0x34]
mov eax, ecx
mov r9, qword [rbx + 0x648]
sub eax, r8d
cdq
idiv dword [rbx + 0x648]
cmp eax, r10d
cmovl r10d, eax
test r9, r9
je 0x140052c67
mov rdx, qword [rbx + 0x640]
lea r11, [rdx + r9*8]
cmp rdx, r11
je 0x140052c67
mov r9d, r10d
xor r9d, 0x506f169f
xor r8d, 0x506f169f
nop dword [rax]
mov rcx, qword [rdx]
mov eax, esi
xor eax, 0x506f169f
add esi, r10d
add rdx, 8
mov dword [rcx + 0x30], eax
mov dword [rcx + 0x34], 0x8fdd9f7
add dword [rcx + 0x34], 0x13ee43e3
add dword [rcx + 0x34], 0x3382f8c5
mov dword [rcx + 0x38], r9d
mov dword [rcx + 0x3c], r8d
cmp rdx, r11
jne 0x140052c23
mov rcx, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x34]
mov rax, qword [rbx + 0x660]
test rax, rax
je 0x140052ca7
sub ecx, r8d
mov dword [rax + 0x14], 0x3ece25f1
add dword [rax + 0x14], 0x1aabe595
xor dword [rax + 0x14], 0x9151d19
xor ecx, 0x506f169f
xor r8d, 0x506f169f
mov dword [rax + 0x10], ecx
mov dword [rax + 0x18], r8d
mov dword [rax + 0x1c], r8d
mov rcx, rbx
call fcn.1400438d0
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
nop
add rsp, 0x3dfac808
sub rsp, 0x3dfac7e8
pop rdi
ret
Function at 0x140052d89
Capabilities:
Encode data using xor

Disassembly:
push rbx
nop
add rsp, 0x7a390fc1
sub rsp, 0x7a390fe1
mov rax, qword [rcx]
mov rbx, rcx
call qword [rax + 0x78]
mov rdx, qword [rbx + 0x648]
mov rcx, rax
mov qword [rsp + 0x30], rax
call fcn.1400441b0
lea rcx, [rbx + 0x640]
lea rdx, [rsp + 0x30]
call fcn.1400528d0
mov rcx, rbx
nop
add rsp, 0x4b6f514b
sub rsp, 0x4b6f512b
pop rbx
jmp 0x140052cd0
push rbx
add rsp, 0xffffffffffffffe0
cmp qword [rcx + 0x648], 0
mov rbx, rcx
je 0x140052e04
lea rdx, [rsp + 0x30]
call fcn.1400448a0
mov r8, qword [rsp + 0x30]
mov r11d, 0x5620fd9f
sub r11d, 0x224db2cb
sub r11d, 0x33d34a34
mov r9d, dword [rsp + 0x34]
mov eax, r8d
sub eax, r9d
cdq
idiv dword [rbx + 0x648]
mov rdx, qword [rbx + 0x648]
cmp eax, r11d
cmovl r11d, eax
xor r10d, r10d
test rdx, rdx
je 0x140052dba
mov rax, qword [rbx + 0x640]
mov qword [rsp + 0x38], rdi
lea rdi, [rax + rdx*8]
cmp rax, rdi
je 0x140052db5
mov r8d, r11d
xor r8d, 0x506f169f
xor r9d, 0x506f169f
nop word [rax + rax]
mov rdx, qword [rax]
mov ecx, r10d
xor ecx, 0x506f169f
add r10d, r11d
nop
sub rax, 0x2bb950b6
add rax, 0x2bb950be
mov dword [rdx + 0x30], ecx
mov dword [rdx + 0x34], 0x6def746
add dword [rdx + 0x34], 0x4a2f7339
sub dword [rdx + 0x34], 0x9f53e0
mov dword [rdx + 0x38], r8d
mov dword [rdx + 0x3c], r9d
cmp rax, rdi
jne 0x140052d66
mov r8, qword [rsp + 0x30]
mov r9d, dword [rsp + 0x34]
mov rdi, qword [rsp + 0x38]
mov rax, qword [rbx + 0x660]
test rax, rax
je 0x140052dfc
sub r8d, r9d
mov dword [rax + 0x14], 0x15d41d26
add dword [rax + 0x14], 0x2f0067ba
add dword [rax + 0x14], 0xb9a91bf
xor r8d, 0x506f169f
xor r9d, 0x506f169f
mov dword [rax + 0x10], r8d
mov dword [rax + 0x18], r9d
mov dword [rax + 0x1c], r9d
mov rcx, rbx
call fcn.1400438d0
sub rsp, 0xffffffffffffffe0
pop rbx
ret

Function at 0x14005b290
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rdi
nop
sub rsp, 0x624fcaa1
add rsp, 0x624fca81
xchg r10, rbx
mov r10, rdx
xchg r10, rbx
xchg rdi, r9
mov r9, rcx
xchg rdi, r9
nop
movabs rdx, 0xffffffff1fc95394
add rdx, 0x54137247
xor rdx, 0x19474753
add rdx, 0x468879c
add rdx, 0x7fffffff
add rdx, 0x10fbf5dc
nop word [rax + rax]
inc rdx
cmp word [rbx + rdx*2], 0
xchg rsp, rsp
jne 0x14005b2ee
mov qword [rcx + 0x38], rdx
call fcn.140016760
mov dword [rsp - 0xc], edi
xor r8d, r8d
mov edx, 0x5b09bbcb
sub edx, 0x3b18cfd3
add edx, 0x5f5e9224
sub edx, 0x523b4551
cmp qword [rdi + 0x38], r8
mov r9, r9
jbe 0x14005b397
sub rbx, rax
mov r9d, 0xb451800
add r9d, 0x25858faa
sub r9d, 0x1f6562d3
add r9d, 0x29e980d3
sub r9d, 0x3b4ec4ab
nop word [rax + rax]
mov r12, r12
movzx ecx, dx
lea rax, [rax + 2]
and cx, r9w
mov dword [rsp - 0x40], 0x4343dc20
ror edx, 1
ror edx, 7
xor cx, word [rbx + rax - 2]
inc r8
mov dword [rsp - 0x44], ecx
mov word [rax - 2], cx
cmp r8, qword [rdi + 0x38]
jb 0x14005b361
mov dword [rsp - 0x20], edi
xchg rbx, r11
mov r11, qword [rsp + 0x30]
xchg rbx, r11
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
sub rsp, 0xffffffffffffffe0
mov dword [rsp - 0x38], esi
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret
Function at 0x14005bd90
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, rdi
mov qword [rsp + 8], rdi
xchg rdi, rbx
xchg r14, rsi
mov qword [rsp + 0x10], r14
xchg r14, rsi
nop
mov qword [rsp - 8], rdi
sub rsp, 8
nop
sub rsp, 0x37fcc92d
add rsp, 0x37fcc90d
xchg r10, rsi
mov r10, qword [rcx + 0x38]
xchg r10, rsi
xchg rdx, r10
mov rbx, r10
xchg r10, rdx
mov r8, qword [rdx + 0x38]
mov dword [rsp - 0x1c], ecx
xchg rdi, rcx
mov rcx, rdi
xchg rdi, rcx
add r8, rsi
xchg r8, r8
xchg rdx, rsi
mov rsi, rdx
xchg rsi, rdx
xchg r13, r8
mov qword [rcx + 0x38], r13
xchg r13, r8
call fcn.14005cb00
mov r15, r15
xchg r9, rsp
mov rsp, qword [rbx]
xchg rsp, r9
mov ecx, esi
xchg rsp, rsp
and ecx, 3
mov r8d, 0x71d2f77d
sub r8d, 0xb2f92d
sub r8d, 0x4fd68176
add r8d, 0x8c3c04d
xor r8d, 0x71905ec
shl ecx, 2
shl ecx, 1
mov edx, r8d
ror edx, cl
mov rbp, rbp
xchg r10, rax
mov rax, r10
xchg r10, rax
xor ecx, ecx
xchg r14, r14
cmp qword [rbx + 0x38], rcx
jbe 0x14005bed5
lea rax, [rsi + rsi]
mov r11d, 0x501d12f2
sub r11d, 0x3a9ace7c
add r11d, 0x47aec82c
add r11d, 0x258a6e4
xor r11d, 0x5f89b379
sub rax, r9
add r10, rax
nop dword [rax]
mov dword [rsp - 0x30], ebp
movzx eax, dx
lea r9, [r9 + 2]
xor ax, r8w
mov dword [rsp - 0x20], 0x442938fc
ror edx, 6
ror edx, 1
ror edx, 1
and ax, r11w
mov dword [rsp - 0x38], edi
ror r8d, 6
ror r8d, 2
xor ax, word [r9 - 2]
mov rdx, rdx
inc rcx
mov word [r10 + r9 - 2], ax
cmp rcx, qword [rbx + 0x38]
jb 0x14005be8d
xchg r12, r12
xchg rbx, r14
mov r14, qword [rsp + 0x30]
xchg r14, rbx
xchg rdi, rsp
mov rax, rsp
xchg rdi, rsp
xchg rbx, rsi
mov rbx, qword [rsp + 0x38]
xchg rbx, rsi
nop
add rsp, 0x21645922
sub rsp, 0x21645902
nop
mov rdi, qword [rsp]
add rsp, 8
ret
Function at 0x14005bf10
Capabilities:
Encode data using xor

Disassembly:
xchg r10, rbx
mov qword [rsp + 8], r10
xchg r10, rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov dword [rsp - 0x30], ebx
nop
mov qword [rsp - 8], r14
sub rsp, 8
nop
add rsp, 0x62f370e1
sub rsp, 0x62f37101
xchg r14, r11
mov r11, qword [rcx + 0x38]
xchg r11, r14
mov rdi, rdx
mov dword [rsp - 0xc], ebp
xchg rdx, rcx
mov rsi, rdx
xchg rdx, rcx
nop
movabs rbx, 0xffffffff272007da
sub rbx, 0x170441c7
xor rbx, 0x3f42c568
add rbx, 0x32694ef3
add rbx, 0x7fffffff
xor rbx, 0x1e3dad92
inc rbx
cmp word [rdx + rbx*2], 0
mov rsi, rsi
jne 0x14005bf8a
lea r8, [r14 + rbx]
mov rdx, r14
xchg rdi, r8
mov qword [rcx + 0x38], rdi
xchg rdi, r8
call fcn.14005cb00
mov ecx, r14d
mov dword [rsp - 0x34], 0x4106001d
mov edx, 0x37736629
sub edx, 0x1b8b832c
xor edx, 0x25bcd2ed
xor edx, 0x5ad9bda9
xor edx, 0x4996b572
and ecx, 3
shl ecx, 3
ror edx, cl
xchg rsp, rsp
test rbx, rbx
je 0x14005c04b
lea r8, [r14 + r14]
mov ecx, 0x56272461
sub ecx, 0x15222503
sub ecx, 0xa475acc
sub ecx, 0x36bda393
sub r8, rdi
add r8, rax
nop dword [rax]
mov r10, r10
nop dword [rax + rax]
movzx eax, dx
lea rdi, [rdi + 2]
mov dword [rsp - 0x3c], esi
and ax, cx
ror edx, 5
ror edx, 2
ror edx, 1
xor ax, word [rdi - 2]
mov dword [rsp - 0x20], esp
mov word [r8 + rdi - 2], ax
sub rbx, 1
jne 0x14005c01d
mov rbx, qword [rsp + 0x30]
xchg rdx, rdx
xchg rsi, rbx
mov rax, rbx
xchg rsi, rbx
xchg r8, rsi
mov r8, qword [rsp + 0x38]
xchg rsi, r8
xchg rdi, r15
mov r15, qword [rsp + 0x40]
xchg r15, rdi
nop
add rsp, 0x2c577514
sub rsp, 0x2c5774f4
nop
mov r14, qword [rsp]
add rsp, 8
ret