joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14014d960
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x48
mov dword [rsp + 0x34], edx
mov qword [rsp + 0x38], rcx
call fcn.140167250
mov rcx, rax
add rcx, 0x60
mov qword [rsp + 0x40], rcx
cmp byte [rax + 0x60], 0
jne 0x14014da49
call fcn.140167250
mov rax, qword [rsp + 0x40]
cmp byte [rax], 0
jne 0x14014da49
mov eax, dword [0x1401faa88]
xor eax, 0x9890408a
mov edx, dword [0x1401faa8c]
mov ecx, eax
xor ecx, 0xffffffff
and ecx, edx
mov r8d, 0x65935cc
xor r8d, 0xf9a6ca33
xor edx, r8d
and eax, edx
sub eax, ecx
mov ecx, 0x8ec44a0d
xor ecx, 0xd27da672
sub eax, ecx
imul eax, eax, 0x25d93246
mov ecx, 0xe5132e81
xor edx, edx
div ecx
cmp eax, 0x7259751b
jae 0x14014da53
mov ecx, dword [rsp + 0x34]
mov eax, dword [0x1401faa90]
xor edx, edx
div dword [0x1401faa94]
mov r8d, 0xca5010ea
xor edx, edx
div r8d
mov rdx, qword [rsp + 0x38]
mov r8d, 0xb68ce3e6
xor r8d, 0xd3c0fba6
sub eax, r8d
xor eax, 0xfe0108f5
mov ecx, ecx
add rcx, rdx
mov qword [rsp + 0x28], rcx
cmp eax, 0x2fedd242
jbe 0x14014d9ee
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x20], rax
jmp 0x14014da49
mov rax, qword [rsp + 0x20]
add rsp, 0x48
ret
call qword [rdi - 0x6d1697bc]
invalid
Function at 0x1401518b0
Capabilities:
Encode data using xor

Disassembly:
push rbp
sub rsp, 0xe0
lea rbp, [rsp + 0x80]
mov qword [rbp - 0x38], r8
Function at 0x140168650
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x68
mov qword [rsp + 0x48], rcx
call fcn.1401679a3
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0x50], rax
add rcx, 8
mov qword [rsp + 0x58], rcx
xor eax, eax
mov qword [rsp + 0x60], rax
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x48]
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x38], rax
mov rcx, qword [rcx]
mov rdx, qword [rdx]
mov qword [rsp + 0x40], rdx
cmp rax, rcx
jge 0x14016880c
mov rax, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rax + rcx*8 + 8]
call fcn.1401679c0
test al, 1
jne 0x1401686c1
jmp 0x1401687d5
mov eax, dword [0x1401fb728]
mov ecx, dword [0x1401fb72c]
add eax, 0xde4e417d
sub eax, ecx
sub eax, 0xde4e417d
mov ecx, 0x9c4abd2e
xor ecx, 0x4571a9f9
imul eax, ecx
sub eax, 0x17e67380
or eax, 0x786f254b
cmp eax, 0xaf180783
jae 0x140168830
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x58]
mov edx, dword [0x1401fb730]
or edx, dword [0x1401fb734]
xor edx, 0xb027e15f
mov r8d, 0xe995e6d9
xor r8d, 0x8b16c654
sub edx, r8d
sub edx, 0x401b5519
mov r8d, 0x41533f39
xor r8d, 0x23d01fb4
add edx, r8d
mov r8d, 0x64ac3484
xor r8d, 0xafd0f342
or edx, r8d
mov dword [rsp + 0x30], edx
mov edx, 0x9c1630e1
xor edx, 0x35d2f961
mov dword [rsp + 0x2c], edx
mov rax, qword [rax]
mov rcx, qword [rax + rcx*8 + 8]
call fcn.140168320
mov rdx, qword [rsp + 0x50]
mov ecx, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x30]
mov dl, byte [rdx]
mov r8b, 0x41
xor r8b, 0x41
cmp dl, r8b
sete dl
mov byte [rsp + 0x37], dl
cmp eax, ecx
je 0x1401686fc
mov al, byte [rsp + 0x37]
test al, 1
jne 0x1401687a7
jmp 0x14016882a
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x58]
mov rax, qword [rax]
mov rcx, qword [rax + rcx*8 + 8]
movabs rdx, 0xdc50182c881eb177
movabs rax, 0xdc50182c881eb17f
xor rdx, rax
call fcn.140011370
mov rax, qword [rsp + 0x38]
xor ecx, ecx
sub rcx, rax
xor eax, eax
sub rax, 1
add rcx, rax
movabs rax, 0x5785c11adf79a71f
movabs rdx, 0x5785c11adf79a71f
xor rax, rdx
sub rax, rcx
mov qword [rsp + 0x60], rax
jmp 0x140168678
mov rax, qword [rsp + 0x40]
cmp rax, 0
je 0x14016882a
mov rcx, qword [rsp + 0x40]
mov edx, 8
call fcn.14001130a
nop
add rsp, 0x68
ret
imul edx, ebp, 0x5f
sbb ebp, ecx
ret
Function at 0x140169c70
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x20], rdx
mov qword [rsp + 0x28], rcx
call fcn.14017940c
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0x30], rax
mov rcx, qword [rcx]
call fcn.1401696ae
test al, 1
jne 0x140169ca2
jmp 0x140169cd0
mov rax, qword [rsp + 0x28]
mov rcx, qword [rax]
call fcn.140169780
mov rax, qword [rsp + 0x30]
cmp byte [rax + 0x60], 0
jne 0x140169dcf
mov rax, qword [rsp + 0x28]
mov rcx, qword [rax]
mov edx, 8
call fcn.140011370
mov eax, dword [0x1401fb810]
xor eax, 0x65ea6a23
mov edx, dword [0x1401fb814]
mov ecx, eax
and ecx, edx
xor ecx, 0xffffffff
mov r8d, 0x6df588e2
xor r8d, 0x920a771d
xor eax, r8d
xor edx, 0xffffffff
or eax, edx
and ecx, eax
xor ecx, 0xffffffff
mov eax, 0x315bae14
xor eax, 0x2f08f3c
and ecx, eax
add ecx, 0xe34c8dca
add ecx, 0xaa962711
sub ecx, 0xe34c8dca
mov eax, ecx
xor eax, 0xffffffff
mov edx, ecx
xor edx, 0xffffffff
or eax, edx
and eax, 0x947a462
mov edx, 0x68aa940d
xor edx, 0x97556bf2
xor eax, edx
mov edx, 0x43d1a40
xor edx, 0xd7abe22
mov r8d, 0x9cd2cc98
xor r8d, 0x632d3367
xor edx, r8d
mov r8d, 0xffffffff
xor r8d, 0x947a462
or edx, r8d
and ecx, edx
xor ecx, 0xffffffff
and eax, ecx
xor eax, 0xffffffff
cmp eax, 0x1acf2856
jbe 0x140169dd4
mov rdx, qword [rsp + 0x28]
mov r8, qword [rsp + 0x20]
mov eax, dword [0x1401fb818]
xor eax, 0x3f7161bd
mov ecx, dword [0x1401fb81c]
add eax, 0x5c1cd81e
sub eax, ecx
sub eax, 0x5c1cd81e
sub eax, 0xdc212f00
add eax, 0xfd7f5790
sub eax, 0x2debca0c
mov ecx, 0x1d3b6315
xor ecx, 0x34e1f472
mov qword [rdx], r8
cmp eax, ecx
jbe 0x140169d7e
jmp 0x140169dcf
add rsp, 0x38
ret
adc eax, edx
popfq
shr cl, 0xa1
invalid
Function at 0x14016bf50
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x28
mov eax, dword [0x1401fb8d0]
mov ecx, 0x80494291
xor ecx, 0x70bd1cb
xor eax, ecx
mov edx, dword [0x1401fb8d4]
mov ecx, 0x7a827176
xor ecx, 0xe2bd9b58
xor edx, ecx
xor eax, 0xffffffff
xor edx, 0xffffffff
mov ecx, 0xffffffff
xor ecx, 0x458796c9
or eax, edx
or ecx, 0x458796c9
xor eax, 0xffffffff
and eax, ecx
imul eax, eax, 0xd353e07e
mov ecx, 0xb44f98d5
xor ecx, 0x41700284
xor edx, edx
div ecx
mov r11d, eax
mov ecx, r11d
xor ecx, 0xffffffff
mov r8d, 0xffffffff
xor r8d, 0x8060e2d
mov edx, 0xffffffff
xor edx, 0x983eb5b5
mov r9d, 0x2aab439f
xor r9d, 0xb295f62a
mov eax, ecx
and eax, r9d
and r11d, edx
mov r9d, r8d
and r9d, 0x983eb5b5
mov r10d, edx
and r10d, 0x8060e2d
or eax, r11d
or r9d, r10d
xor eax, r9d
or ecx, r8d
xor ecx, 0xffffffff
or edx, 0x983eb5b5
and ecx, edx
or eax, ecx
mov ecx, 0x65beb7e3
xor ecx, 0x28e1402e
cmp eax, ecx
je 0x14016c093
mov eax, dword [0x1401fb8d8]
add eax, dword [0x1401fb8dc]
xor eax, 0xcf47920f
or eax, 0x21fea087
sub eax, 0x35e89b2b
mov ecx, 0x269f436d
xor ecx, 0xa9935578
sub eax, ecx
add eax, 0x35e89b2b
mov dword [rsp + 0x24], eax
mov eax, 0x51b26bd2
xor eax, 0x384c1ad6
mov dword [rsp + 0x20], eax
call fcn.14017940c
mov rcx, rax
add rcx, 0x10
mov rax, qword [rax + 0x10]
mov rdx, qword [rax + 0x38]
xor r8d, r8d
call fcn.140015b08
mov ecx, dword [rsp + 0x20]
mov eax, dword [rsp + 0x24]
cmp eax, ecx
jbe 0x14016c023
add rsp, 0x28
ret
or dword [rbx - 0x1e], ecx
fsubp st(1)
xchg edi, edi
invalid
Function at 0x14017a110
Capabilities:
Encode data using xor

Disassembly:
push rbp
sub rsp, 0x30
lea rbp, [rsp + 0x30]
mov qword [rbp - 8], rcx
mov eax, dword [0x1401fbd50]
xor eax, 0x8b51962
mov ecx, dword [0x1401fbd54]
mov edx, 0x5c797578
xor edx, 0xa3868a87
xor ecx, edx
xor edx, edx
sub edx, 1
sub ecx, edx
sub eax, ecx
or eax, 0x2af69790
mov ecx, 0x3ad92349
xor ecx, 0x6cb69016
xor eax, ecx
mov ecx, 0x7b30c54
xor ecx, 0x6fb9c962
xor eax, ecx
cmp eax, 0x78357ae5
ja 0x14017a2ef
mov rdx, qword [rbp - 8]
mov r11d, dword [0x1401fbd58]
mov r10d, dword [0x1401fbd5c]
mov ecx, r11d
not ecx
mov r8d, r10d
not r8d
mov eax, ecx
and eax, 0x426f6024
and r11d, 0xbd909fdb
mov r9d, r8d
and r9d, 0x426f6024
and r10d, 0xbd909fdb
or eax, r11d
or r9d, r10d
xor eax, r9d
or ecx, r8d
not ecx
or eax, ecx
imul rax, rax, 0x18ef124f
shr rax, 0x39
mov ecx, eax
mov r8d, ecx
not r8d
or r8d, 0xfffffffb
mov eax, ecx
mov ecx, r8d
lea eax, [rax + rcx - 0x37f394a8]
mov dword [rbp - 0x24], eax
mov ecx, 0xce32ee9d
mov eax, 0x10
call fcn.1401f0aa0
sub rsp, rax
mov eax, dword [rbp - 0x24]
mov r8, rsp
mov qword [rbp - 0x20], r8
mov rdx, qword [rdx + 8]
mov qword [rbp - 0x18], rdx
cmp rdx, 0
sete dl
mov byte [rbp - 9], dl
cmp eax, ecx
jae 0x14017a16f
mov al, byte [rbp - 9]
test al, 1
jne 0x14017a287
jmp 0x14017a227
mov rax, qword [rbp - 0x18]
mov rax, qword [rax]
movabs rdx, 0xc03aec16f0321016
movabs rcx, 0x803aec16f0321016
xor rdx, rcx
mov rcx, rax
xor rcx, rdx
xor rcx, 0xffffffffffffffff
movabs rdx, 0xca099fa793a5faaa
movabs r8, 0x8a099fa793a5faaa
xor rdx, r8
or rax, rdx
and rax, rcx
cmp rax, 0
jne 0x14017a287
mov rcx, qword [rbp - 0x18]
sub rsp, 0x20
call fcn.140011305
add rsp, 0x20
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x18]
mov qword [rbp - 0x30], rax
cmp rax, 0
je 0x14017a2c9
mov rcx, qword [rbp - 0x30]
movabs rax, 0x4000000000000000
and rax, qword [rcx]
cmp rax, 0
jne 0x14017a2c9
mov rcx, qword [rbp - 0x30]
sub rsp, 0x20
call fcn.140011305
add rsp, 0x20
mov rcx, qword [rbp - 0x20]
mov rax, qword [rbp - 8]
mov rdx, qword [rax + 0x20]
mov qword [rcx], rdx
mov rax, qword [rax + 0x28]
mov qword [rcx + 8], rax
sub rsp, 0x20
call fcn.140026fe0
nop
mov rsp, rbp
pop rbp
ret
int 6
enter 0xffffffffffffe9d2, 0x77
invalid
Function at 0x14017bed0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x20], rdx
mov qword [rsp + 0x28], rcx
call fcn.140189f00
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0x30], rax
mov rcx, qword [rcx]
call fcn.14017b210
test al, 1
jne 0x14017bf02
jmp 0x14017bf36
mov rax, qword [rsp + 0x28]
mov rcx, qword [rax]
call fcn.14017b790
mov rax, qword [rsp + 0x30]
mov al, byte [rax + 0x60]
mov cl, 0xca
xor cl, 0xca
cmp al, cl
jne 0x14017c001
mov rax, qword [rsp + 0x28]
mov rcx, qword [rax]
mov edx, 8
call fcn.140011370
mov eax, dword [0x1401fbe88]
xor eax, 0xe885fbda
mov ecx, dword [0x1401fbe8c]
xor ecx, 0x14f9ed75
xor edx, edx
div ecx
mov ecx, 0x6b49c815
xor ecx, 0x7373c27c
xor edx, edx
div ecx
mov ecx, 0xbeb3229
xor edx, edx
div ecx
mov ecx, 0x4989372a
xor ecx, 0x5f8b0ab2
xor edx, edx
div ecx
mov ecx, 0x9e41b741
xor ecx, 0x5065505
cmp eax, ecx
je 0x14017c090
mov rcx, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x20]
mov r8d, dword [0x1401fbe90]
and r8d, dword [0x1401fbe94]
mov eax, 0xf1d6986a
xor eax, 0xb33a9a1b
mov r9d, 0x6adc8cb6
xor r9d, 0x95237349
xor eax, r9d
add r8d, eax
add r8d, 1
mov r9d, 0xd3e708f5
xor r9d, 0xc827a689
mov eax, r8d
and eax, r9d
xor r8d, 0x1bc0ae7c
or eax, r8d
xor r8d, r8d
sub r8d, 0x903dac0b
sub eax, r8d
mov qword [rcx], rdx
cmp eax, 0x422512e8
jb 0x14017bf8b
jmp 0x14017c001
mov eax, dword [0x1401fbe98]
mov ecx, dword [0x1401fbe9c]
xor ecx, 0x82d4cf89
sub eax, ecx
mov ecx, 0x99d1aa12
xor ecx, 0x8f7ada23
sub eax, ecx
mov ecx, 0xe34c5a9
xor ecx, 0xba03c547
sub eax, ecx
add eax, 0x16ab7031
and eax, 0x596fbe18
xor ecx, ecx
sub ecx, 0x6d63fef
add eax, ecx
cmp eax, 0xe3530df1
je 0x14017c099
mov eax, dword [0x1401fbea0]
mov edx, dword [0x1401fbea4]
mov ecx, eax
and ecx, edx
shl ecx, 1
xor eax, edx
add eax, ecx
and eax, 0x77e36947
mov ecx, 0x1afafc8e
xor ecx, 0x9158d9fb
or eax, ecx
mov ecx, 0xbc15026a
xor edx, edx
div ecx
cmp eax, 0xa4d50b95
je 0x14017c04e
add rsp, 0x38
ret
and byte [rcx], dh
or eax, 0xfef2e931
invalid
cmp byte [rdi - 0x17], r14b
lodsb al, byte [rsi]
invalid
Function at 0x14018ced0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
mov eax, 0x1368
call fcn.1401f0aa0
sub rsp, rax
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x8b0], rcx

Function at 0x140198cb0
Capabilities:
Encode data using xor

Disassembly:
push rbp
sub rsp, 0x20
lea rbp, [rsp + 0x20]
mov qword [rbp - 8], rcx
mov ecx, dword [0x1401fcb58]
mov edx, dword [0x1401fcb5c]
mov eax, ecx
or eax, eax
mov r8d, 0xeaa05898
xor r8d, 0x155fa767
xor eax, r8d
mov r9d, 0xf957add1
xor r9d, 0x6a8522e
mov r8d, edx
xor r8d, r9d
mov r9d, edx
xor r9d, 0xffffffff
and r8d, r9d
or eax, r8d
xor eax, 0xffffffff
xor ecx, 0xffffffff
xor edx, 0xffffffff
and ecx, edx
or eax, ecx
xor eax, 0xffffffff
xor ecx, ecx
sub ecx, 0x9d802500
sub eax, ecx
mov ecx, 0xfd5b5270
xor ecx, 0x436b2622
xor edx, edx
div ecx
mov ecx, 0x8abe9d2c
xor edx, edx
div ecx
cmp eax, 0xdebee66e
ja 0x140198dc6
mov eax, dword [str.AU]
mov ecx, dword [0x1401fcb64]
xor ecx, 0x10001018
or eax, ecx
and eax, 0x9a00101a
add eax, 0xacba8e19
mov dword [rbp - 0x14], eax
mov eax, 0xc8073e86
mov dword [rbp - 0x18], eax
mov eax, 0x10
call fcn.1401f0aa0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x20], rax
sub rsp, 0x20
call fcn.14019f069
mov rcx, qword [rbp - 0x20]
add rsp, 0x20
mov rax, qword [rbp - 8]
mov rdx, qword [rax]
mov qword [rcx], rdx
mov rax, qword [rax + 8]
mov qword [rcx + 8], rax
sub rsp, 0x20
call fcn.14019f077
mov ecx, dword [rbp - 0x18]
add rsp, 0x20
mov rdx, rax
mov eax, dword [rbp - 0x14]
mov qword [rbp - 0x10], rdx
cmp eax, ecx
ja 0x140198d3b
mov rax, qword [rbp - 0x10]
mov rsp, rbp
pop rbp
ret
xchg byte [rsi], ah
adc edi, dword [rdx]
jmp 0x140198d3b

Function at 0x140199b80
Capabilities:
Encode data using xor

Disassembly:
push rbp
sub rsp, 0x20
lea rbp, [rsp + 0x20]
mov ecx, dword [0x1401fcbd8]
mov edx, dword [0x1401fcbdc]
mov eax, 0xd685d45
xor eax, 0xd685d45
sub eax, edx
add ecx, eax
and ecx, 0x1238fd9
mov eax, ecx
or eax, eax
mov edx, 0xebda33b0
xor edx, 0x1425cc4f
xor eax, edx
mov edx, 0xffffffff
xor edx, 0x60036cb5
mov r8d, 0xffffffff
xor r8d, 0x60036cb5
and edx, r8d
or eax, edx
mov edx, 0xd000d094
xor edx, 0x2fff2f6b
xor eax, edx
xor ecx, 0xffffffff
mov edx, 0x7873f0e8
xor edx, 0x18709c5d
mov r8d, 0x17e537d1
xor r8d, 0xe81ac82e
xor edx, r8d
and ecx, edx
or eax, ecx
mov ecx, 0x32035ea1
xor ecx, 0xcdfca15e
xor eax, ecx
mov ecx, 0xeccf9b0e
xor ecx, 0x5001c4ac
and eax, ecx
mov ecx, 0x52679a9f
xor ecx, 0x4e0ecc2f
cmp eax, ecx
jb 0x140199c9f
mov eax, dword [0x1401fcbe0]
mov ecx, dword [0x1401fcbe4]
xor ecx, 0xfa7f1e78
xor edx, edx
div ecx
add eax, 0x7f01419e
or eax, 0xe1aafba0
mov dword [rbp - 0xc], eax
mov eax, 0x10
call fcn.1401f0aa0
sub rsp, rax
mov rcx, rsp
mov qword [rbp - 0x18], rcx
mov edx, 8
sub rsp, 0x20
call fcn.140198b61
mov rcx, qword [rbp - 0x18]
mov eax, dword [rbp - 0xc]
add rsp, 0x20
mov rcx, qword [rcx]
mov qword [rbp - 8], rcx
cmp eax, 0xe7aa3586
je 0x140199c34
mov rax, qword [rbp - 8]
mov rsp, rbp
pop rbp
ret
mov byte [rdi - 0x7316f26e], ah
invalid
Function at 0x140199cb0
Capabilities:
Encode data using add xor sub operations

Disassembly:
sub rsp, 0x28
mov r11d, dword [0x1401fcbe8]
mov r10d, dword [0x1401fcbec]
mov eax, 0x54d36a9d
xor eax, 0xab2c9562
mov ecx, r11d
xor ecx, eax
mov r8d, r10d
xor r8d, 0xffffffff
mov edx, 0xb20cfd11
xor edx, 0xb8ba372d
mov eax, 0x8d82b7ab
xor eax, 0x727d4854
xor edx, eax
mov r9d, 0x98ff2dd1
xor r9d, 0x9249e7ed
mov eax, ecx
and eax, r9d
and r11d, edx
mov r9d, r8d
and r9d, 0xab6ca3c
and r10d, edx
or eax, r11d
or r9d, r10d
xor eax, r9d
or ecx, r8d
xor ecx, 0xffffffff
or edx, 0xab6ca3c
and ecx, edx
or eax, ecx
add eax, 0xb08cbe1f
or eax, 0x6faf9d92
add eax, 0xe6d0c8f3
sub eax, 0x12c6fdd8
mov ecx, 0x1537fb3f
xor ecx, 0xf3e733cc
sub eax, ecx
cmp eax, 0xd78d9531
je 0x140199ddc
mov eax, dword [0x1401fcbf0]
sub eax, dword [0x1401fcbf4]
xor eax, 0xa0715817
mov ecx, 0x5931a764
xor edx, edx
div ecx
mov ecx, eax
mov eax, ecx
xor eax, 0xffffffff
xor ecx, 0xffffffff
or eax, ecx
mov ecx, 0xbb4c0ba7
and ecx, 0xbb4c0ba7
mov edx, 0xb727d8c7
xor edx, 0x48d82738
xor ecx, edx
and eax, ecx
xor eax, 0xffffffff
mov dword [rsp + 0x24], eax
mov eax, 0xc7fa81a4
xor eax, 0x11057851
mov dword [rsp + 0x20], eax
call fcn.14019f069
mov rcx, rax
add rcx, 0x10
mov rax, qword [rax + 0x10]
mov rdx, qword [rax + 0x38]
xor r8d, r8d
call fcn.140015b08
mov ecx, dword [rsp + 0x20]
mov eax, dword [rsp + 0x24]
cmp eax, ecx
ja 0x140199d56
add rsp, 0x28
ret
mov edi, gs
mov ebp, 0xff71e960
invalid
Function at 0x1401a2ac0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x58
mov qword [rsp + 0x38], r8
mov r8, rdx
xor r8, 0xffffffffffffffff
mov rax, rcx
and rax, r8
mov r9, rcx
xor r9, 0xffffffffffffffff
mov r8, rdx
and r8, r9
imul r8, rax
mov r9, rdx
and r9, rcx
mov rax, rdx
or rax, rcx
imul rax, r9
add rax, r8
mov qword [rsp + 0x40], rax
cvtsi2sd xmm0, rcx
cvtsi2sd xmm1, rdx
mulsd xmm0, xmm1
movsd qword [rsp + 0x48], xmm0
cvtsi2sd xmm1, rax
movsd qword [rsp + 0x50], xmm1
ucomisd xmm0, xmm1
jne 0x1401a2b33
jp 0x1401a2b33
jmp 0x1401a2b7e
movsd xmm1, qword [rsp + 0x48]
movsd xmm0, qword [rsp + 0x50]
subsd xmm0, xmm1
call fcn.1401f0b50
movaps xmm1, xmm0
movsd xmm0, qword [rsp + 0x48]
movsd qword [rsp + 0x28], xmm1
call fcn.1401f0b50
movsd xmm1, qword [rsp + 0x28]
movsd xmm2, qword [0x140207f38]
mulsd xmm1, xmm2
mov al, 1
ucomisd xmm0, xmm1
mov byte [rsp + 0x37], al
jb 0x1401a2c22
mov ecx, dword [0x1401fced0]
add ecx, dword [0x1401fced4]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, 0xe1ddbe2e
add eax, ecx
mov ecx, 0x2d5c7b0e
xor ecx, 0x2d5c7b0e
sub ecx, eax
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, 0x38d7ff
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov edx, 0xffffffff
xor edx, 0xb8f9a4c
mov eax, ecx
xor eax, edx
and eax, ecx
cmp eax, 0xfdd7e407
jae 0x1401a2c30
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x40]
mov eax, dword [0x1401fced8]
mov r9d, dword [0x1401fcedc]
xor r9d, 0x5e3b1044
xor r8d, r8d
sub r8d, r9d
add eax, r8d
or eax, 0xff1be18e
and eax, 0x5040e496
and eax, 0xd9b3d7da
mov qword [rcx], rdx
cmp eax, 0x53174c47
jae 0x1401a2bd3
xor eax, eax
mov byte [rsp + 0x37], al
jmp 0x1401a2c22
mov al, byte [rsp + 0x37]
and al, 1
movzx eax, al
add rsp, 0x58
ret
sbb al, 0x48
mov ebx, 0xff9ae9b8
invalid
Function at 0x1401a6dc0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x48
mov rax, qword [rcx]
mov qword [rsp + 0x38], rax
movabs rcx, 0xaea917e03da38a21
movabs rdx, 0xaea917e03da38a23
xor rcx, rdx
cqo
idiv rcx
mov rdx, rax
mov rax, qword [rsp + 0x38]
mov rcx, rdx
and rcx, 0xffffffffffffffff
mov r8, rdx
or r8, 0xffffffffffffffff
add rcx, r8
mov qword [rsp + 0x40], rcx
xor rcx, rdx
cmp rcx, 0
setl cl
cmp rax, 1
setg al
and al, cl
test al, 1
jne 0x1401a6e26
jmp 0x1401a6f02
mov eax, dword [0x1401fd0b8]
imul eax, dword [0x1401fd0bc]
mov ecx, 0xda844a7c
xor ecx, 0xa3b68b42
and eax, ecx
and eax, 0x1c9b3fde
mov r8d, 0x7ebc85c1
xor r8d, 0xd596de34
mov ecx, 0x43c2cd11
xor ecx, 0xbc3d32ee
xor r8d, ecx
mov edx, eax
and edx, r8d
mov ecx, eax
or ecx, r8d
mov r8d, 0xaabc6fb5
xor r8d, 0x5543904a
xor ecx, r8d
imul ecx, edx
mov r8d, 0x503914fe
xor r8d, 0xfb134f0b
mov edx, eax
and edx, r8d
or eax, 0xab2a5bf5
imul eax, edx
add eax, ecx
cmp eax, 0x2ac82e2e
jbe 0x1401a7027
mov eax, dword [0x1401fd0c0]
mov r8d, dword [0x1401fd0c4]
mov ecx, 0x46a393f5
xor ecx, 0xb95c6c0a
mov edx, r8d
xor edx, ecx
mov ecx, eax
and ecx, edx
mov edx, eax
xor edx, r8d
add eax, edx
sub eax, ecx
and eax, 0x539cafd8
mov ecx, 0x3b6708e
xor ecx, 0xcfbf17dd
add eax, ecx
and eax, 0xefa5392f
mov dword [rsp + 0x34], eax
call fcn.1400091c0
mov eax, dword [rsp + 0x34]
cmp eax, 0x2bf2a216
jae 0x1401a6ea4
jmp 0x1401a6f15
mov rcx, qword [rsp + 0x40]
xor eax, eax
test rcx, rcx
cmovg rax, rcx
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x20], rax
mov eax, dword [0x1401fd0c8]
sub eax, dword [0x1401fd0cc]
imul eax, eax, 0x349ca7d4
sub eax, 0xf3b78b5b
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0x284566a
mov edx, 0x9202df8c
xor edx, 0x908689e6
mov r8d, 0xf408b45a
xor r8d, 0xbf74ba5
xor edx, r8d
and eax, edx
sub eax, ecx
mov ecx, 0x4fd6fb9
xor ecx, 0xc6a257c
cmp eax, ecx
jb 0x1401a7030
mov eax, dword [0x1401fd0d0]
xor edx, edx
div dword [0x1401fd0d4]
mov ecx, 0x8de34b70
xor edx, edx
div ecx
mov ecx, eax
mov eax, ecx
xor eax, 0xffffffff
mov edx, 0x46d13bb8
xor edx, 0xcfe7876
and edx, eax
mov r8d, 0xffffffff
xor r8d, 0x4a2f43ce
mov eax, ecx
and eax, r8d
imul eax, edx
mov r8d, 0xe924a70d
xor r8d, 0xa30be4c3
mov edx, ecx
and edx, r8d
mov r8d, 0x6d211114
xor r8d, 0x270e52da
or ecx, r8d
imul ecx, edx
add ecx, eax
mov edx, ecx
xor edx, 0xffffffff
mov eax, 0xbbb65dd5
xor eax, 0xfe824230
and eax, edx
mov edx, 0xb0ec013c
xor edx, 0xf5d81ed9
mov r8d, 0x345535c6
xor r8d, 0xcbaaca39
xor edx, r8d
and ecx, edx
or eax, ecx
mov ecx, 0xbcd809a5
xor ecx, 0xa7032013
cmp eax, ecx
jbe 0x1401a6f73
mov rax, qword [rsp + 0x20]
add rsp, 0x48
ret
invalid
push rdx
invalid
Function at 0x1401ad9f0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x48
mov qword [rsp + 0x40], rcx
mov eax, dword [0x1401fd418]
xor edx, edx
div dword [0x1401fd41c]
mov ecx, eax
mov r8d, 0xffffffff
xor r8d, 0x6447cef7
mov edx, ecx
and edx, r8d
mov eax, ecx
or eax, r8d
xor eax, 0xffffffff
imul eax, edx
mov edx, ecx
and edx, 0x6447cef7
mov r8d, 0xba5f51b
xor r8d, 0x6fe23bec
or ecx, r8d
imul ecx, edx
add ecx, eax
mov eax, ecx
xor eax, 0xffffffff
xor ecx, 0xffffffff
and eax, ecx
mov ecx, 0x1f7fcd03
or ecx, 0x1f7fcd03
xor ecx, 0xffffffff
or eax, ecx
mov ecx, 0x3014c31d
xor ecx, 0xcfeb3ce2
xor eax, ecx
mov ecx, 0x7755caa8
xor ecx, 0x455380d
sub eax, ecx
sub eax, 0x4b050407
add eax, 0x7300f2a5
mov ecx, 0xd65940d6
xor ecx, 0x3515cd1c
cmp eax, ecx
je 0x1401adc68
mov edx, dword [0x1401fd420]
xor edx, 0x14dc8f4f
mov ecx, dword [0x1401fd424]
mov eax, edx
xor eax, 0xffffffff
xor edx, 0xffffffff
or eax, edx
and ecx, ecx
xor ecx, 0xffffffff
xor eax, 0xffffffff
xor ecx, 0xffffffff
or eax, ecx
mov ecx, 0xec9b2693
xor ecx, 0x8421ac28
imul eax, ecx
mov ecx, 0xe84911bc
xor ecx, 0xddbf4a90
xor edx, edx
div ecx
sub eax, 0xb215c398
mov dword [rsp + 0x38], eax
call fcn.1401ad2c2
mov rcx, rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x30], rcx
mov rcx, qword [rax]
call fcn.1401ad2e0
mov cl, al
mov eax, dword [rsp + 0x38]
mov byte [rsp + 0x3f], cl
cmp eax, 0x1b1ff18b
je 0x1401ada94
mov al, byte [rsp + 0x3f]
test al, 1
jne 0x1401adb23
jmp 0x1401adb50
mov rax, qword [rsp + 0x40]
mov rcx, qword [rax]
call fcn.14008dcb2
mov rax, qword [rsp + 0x30]
cmp byte [rax], 0
jne 0x1401adb9b
mov rax, qword [rsp + 0x40]
mov rcx, qword [rax]
mov edx, 8
call fcn.140011370
mov rax, qword [rsp + 0x40]
mov rcx, rax
add rcx, 8
mov qword [rsp + 0x28], rcx
mov rcx, qword [rax + 8]
call fcn.1401ad2e0
test al, 1
jne 0x1401adb77
jmp 0x1401adb9b
mov rax, qword [rsp + 0x28]
mov rcx, qword [rax]
movabs rdx, 0x7e1b7188d02a9303
movabs rax, 0x7e1b7188d02a9307
xor rdx, rax
call fcn.140011370
mov eax, dword [0x1401fd428]
xor edx, edx
div dword [0x1401fd42c]
and eax, eax
mov ecx, 0x9c1630e1
xor ecx, 0x63e9cf1e
xor eax, ecx
mov ecx, 0xffffffff
xor ecx, 0xf2b9f052
mov edx, 0xb8cfb269
xor edx, 0x4a76423b
mov r8d, 0xdd6157e6
xor r8d, 0x229ea819
xor edx, r8d
or ecx, edx
and eax, ecx
xor eax, 0xffffffff
mov ecx, 0x8b85844a
xor ecx, 0xd634d745
mov edx, 0x7a550537
xor edx, 0x85aafac8
xor ecx, edx
add eax, ecx
add eax, 1
mov ecx, eax
add ecx, 1
xor eax, 0xffffffff
mov edx, 0xdf79a71f
xor edx, 0x86e8b3f9
or eax, edx
add eax, ecx
cmp eax, 0xe38469f4
jae 0x1401adc71
mov eax, dword [0x1401fd430]
mov ecx, dword [0x1401fd434]
xor ecx, 0x329abbbc
and eax, ecx
mov ecx, 0x58280a53
xor edx, edx
div ecx
mov ecx, 0xb7f749ad
xor edx, edx
div ecx
mov ecx, 0x654db1b4
xor ecx, 0x9bf0787b
imul eax, ecx
cmp eax, 0x812790d2
jae 0x1401adc24
add rsp, 0x48
ret
xor byte [rax + 0x23e99a12], ch
invalid
sub eax, dword [rdx]
adc ah, dl
jmp 0x1401adc24
Function at 0x1401af6e0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rsi
sub rsp, 0xda8
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x578], rcx
mov eax, 0x10
mov qword [rbp + 0x6a0], rax
call fcn.1401f0aa0
Function at 0x1401c3370
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rsi
sub rsp, 0x478
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x158], rcx
mov eax, 0x10
mov qword [rbp + 0x1f0], rax