joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400ac780
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x38
mov eax, dword [0x1401d9ac8]
mov edx, dword [0x1401d9acc]
xor edx, 0x829bac20
mov ecx, eax
xor ecx, edx
xor edx, 0xffffffff
and eax, edx
shl eax, 1
sub eax, ecx
mov ecx, 0xf32e94cf
xor ecx, 0x25a993dd
add eax, ecx
add eax, 0x5a42074e
mov ecx, eax
xor ecx, 0x1461ab
xor ecx, 0xffffffff
mov edx, 0x9730294c
xor edx, 0x972448e7
or eax, edx
and eax, ecx
cmp eax, 0x81c50afe
jae 0x1400ac88f
mov eax, dword [0x1401d9ad0]
mov r8d, dword [0x1401d9ad4]
mov ecx, 0x33cd7334
xor ecx, 0xcc328ccb
mov r9d, r8d
xor r9d, ecx
mov edx, eax
and edx, r9d
mov ecx, eax
or ecx, r9d
mov r9d, 0x66fdb4aa
xor r9d, 0x99024b55
xor ecx, r9d
imul ecx, edx
mov edx, eax
and edx, r8d
or eax, r8d
imul eax, edx
add eax, ecx
mov ecx, 0x4e539f46
xor ecx, 0x94cab370
or eax, ecx
mov ecx, 0x8831de5b
xor edx, edx
div ecx
add eax, 0x15daa0b7
mov ecx, 0x31c23f2b
xor ecx, 0xf6bb991d
add eax, ecx
mov ecx, 0xb3b9d54c
xor ecx, 0xa66375fb
sub eax, ecx
mov dword [rsp + 0x2c], eax
mov rax, qword [0x1401eb950]
mov ecx, dword [rax]
call fcn.140007543
mov rcx, rax
mov eax, dword [rsp + 0x2c]
add rcx, 0x60
mov qword [rsp + 0x30], rcx
cmp eax, 0x79b2235b
je 0x1400ac7db
mov rax, qword [rsp + 0x30]
add rsp, 0x38
ret
add eax, dword [rax]
test eax, 0xff43e9ff
invalid
Function at 0x1400ad220
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x48
mov qword [rsp + 0x38], rcx
mov rax, qword [rcx + 8]
mov qword [rsp + 0x40], rax
cmp rax, 0
je 0x1400ad289
mov rax, qword [rsp + 0x40]
mov rax, qword [rax]
mov rcx, rax
add rcx, 1
xor rax, 0xffffffffffffffff
movabs rdx, 0x4000000000000000
or rax, rdx
add rax, rcx
movabs rcx, 0x54048aff7d09528c
movabs rdx, 0x54048aff7d09528c
xor rcx, rdx
cmp rax, rcx
jne 0x1400ad289
mov rcx, qword [rsp + 0x40]
call fcn.14000eb2e
mov rax, qword [rsp + 0x38]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x30], rax
cmp rax, 0
je 0x1400ad30d
mov rax, qword [rsp + 0x30]
mov rcx, qword [rax]
mov rax, rcx
xor rax, 0xffffffffffffffff
mov rdx, 0xffffffffffffffff
movabs r8, 0x4000000000000000
xor rdx, r8
or rax, rdx
movabs rdx, 0x4000000000000000
and rcx, rdx
xor rcx, 0xffffffffffffffff
xor rax, 0xffffffffffffffff
movabs rdx, 0x3a6667b523e3483
movabs r8, 0xfc599984adc1cb7c
xor rdx, r8
xor rcx, rdx
or rax, rcx
cmp rax, 0
jne 0x1400ad30d
mov rcx, qword [rsp + 0x30]
call fcn.14000eb2e
mov eax, dword [0x1401d9b50]
and eax, dword [0x1401d9b54]
and eax, 0x9da6a3d3
xor eax, 0xd58749eb
sub eax, 0xbb35fbeb
cmp eax, 0x24187f29
ja 0x1400ad434
mov eax, dword [0x1401d9b58]
mov edx, dword [0x1401d9b5c]
mov ecx, eax
and ecx, edx
shl ecx, 1
xor eax, edx
add eax, ecx
or eax, 0x5991b618
xor eax, 0xbf217f0a
mov ecx, 0xfaf4a80f
xor edx, edx
div ecx
mov rdx, qword [rsp + 0x38]
mov ecx, 0x5c56643f
xor ecx, 0xbd68b09
mov rdx, qword [rdx + 0x28]
mov qword [rsp + 0x20], rdx
cmp rdx, 0
sete dl
mov byte [rsp + 0x2f], dl
cmp eax, ecx
jae 0x1400ad333
mov al, byte [rsp + 0x2f]
test al, 1
jne 0x1400ad42e
jmp 0x1400ad39a
mov rax, qword [rsp + 0x20]
mov rcx, qword [rax]
movabs rdx, 0x8ed83bcd8eb2f9c9
movabs rax, 0x7127c432714d0636
xor rdx, rax
mov rax, rcx
xor rax, rdx
mov rdx, 0xffffffffffffffff
movabs r8, 0x4000000000000000
xor rdx, r8
or rax, rdx
movabs rdx, 0x4000000000000000
and rcx, rdx
movabs rdx, 0x27579a16aebe61f9
movabs r8, 0xd8a865e951419e06
xor rdx, r8
xor rcx, rdx
and rax, rcx
movabs rcx, 0x4b54ac0585849343
movabs rdx, 0xb4ab53fa7a7b6cbc
xor rcx, rdx
xor rax, rcx
cmp rax, 0
jne 0x1400ad42e
mov rcx, qword [rsp + 0x20]
call fcn.14000eb2e
nop
add rsp, 0x48
ret
pop rax
and bl, byte [r10 - 0x10917]
dec dword [rax - 0x39]
add dword [rax], eax
add byte [rax], al
add byte [rax - 0x39], cl
or byte [r8], al
add byte [rax], al
add bl, al
nop dword [rax]
Function at 0x1400af210
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x58
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x38], rcx
call fcn.1400c0558
mov rdx, qword [rsp + 0x40]
xor eax, eax
test rdx, rdx
cmovg rax, rdx
mov qword [rsp + 0x48], rax
xor eax, eax
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x30], rax
mov eax, dword [0x1401d9bd0]
xor edx, edx
div dword [0x1401d9bd4]
mov ecx, eax
or ecx, 0x42fd7b55
mov eax, ecx
and eax, 0xe700c169
or ecx, 0xe700c169
add eax, ecx
mov edx, eax
xor edx, 0xffffffff
and edx, 0x401a2562
mov r8d, 0x98f27977
xor r8d, 0xd8e85c15
mov ecx, 0x67d67f38
xor ecx, 0x982980c7
xor r8d, ecx
mov ecx, eax
and ecx, r8d
imul ecx, edx
mov edx, eax
and edx, 0x401a2562
or eax, 0x401a2562
imul eax, edx
add eax, ecx
cmp eax, 0x7bff2288
je 0x1400af368
mov rcx, qword [rsp + 0x30]
mov eax, dword [0x1401d9bd8]
xor eax, 0xc78381ee
mov r8d, dword [0x1401d9bdc]
mov edx, 0xb6ff9ae4
xor edx, 0xb6ff9ae4
sub edx, eax
xor eax, eax
sub eax, r8d
add edx, eax
xor eax, eax
sub eax, edx
xor eax, 0x5c81d696
imul eax, eax, 0x90f98d95
mov r8d, 0x4c4767f9
xor edx, edx
div r8d
mov rdx, qword [rsp + 0x48]
cmp rcx, rdx
sete cl
mov byte [rsp + 0x2f], cl
cmp eax, 0xcc9e6c91
je 0x1400af2b7
mov al, byte [rsp + 0x2f]
test al, 1
jne 0x1400af363
jmp 0x1400af327
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x38]
mov byte [rax + rcx], 0
mov rax, rcx
and rax, 1
movabs rdx, 0xca1b36ea65b3a9e2
movabs r8, 0xca1b36ea65b3a9e3
xor rdx, r8
or rcx, rdx
add rax, rcx
mov qword [rsp + 0x50], rax
jmp 0x1400af23d
add rsp, 0x58
ret
push rbx
invalid
Function at 0x1400b0a00
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x58
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x50], rcx
mov eax, dword [0x1401d9c40]
mov r8d, dword [0x1401d9c44]
mov ecx, 0x33c914da
xor ecx, 0xcc36eb25
mov r9d, r8d
xor r9d, ecx
mov edx, eax
and edx, r9d
mov ecx, eax
or ecx, r9d
mov r9d, 0x38a13861
xor r9d, 0xc75ec79e
xor ecx, r9d
imul ecx, edx
mov edx, eax
and edx, r8d
or eax, r8d
imul eax, edx
add eax, ecx
mov ecx, 0x164da860
xor ecx, 0x5b598116
and eax, ecx
mov ecx, 0xbb8be32c
xor ecx, 0xdd388a1f
xor edx, edx
div ecx
add eax, 0xa955154c
sub eax, 0x582cc75
sub eax, 0xa955154c
cmp eax, 0x3a5be39d
je 0x1400b0bce
mov eax, dword [0x1401d9c48]
add eax, dword [0x1401d9c4c]
mov ecx, 0x28d16f3f
xor ecx, 0xdcec50f
xor eax, ecx
add eax, 0xf38f187
add eax, 0xd5693479
mov ecx, 0xa58aa170
xor ecx, 0xaab250f7
sub eax, ecx
add eax, 0xf12c6d9e
mov dword [rsp + 0x34], eax
call fcn.1400c0558
mov rcx, qword [rsp + 0x48]
mov rdx, rax
mov eax, dword [rsp + 0x34]
add rdx, 0x60
mov qword [rsp + 0x38], rdx
cmp rcx, 0
sete cl
mov byte [rsp + 0x47], cl
cmp eax, 0x2892b9ba
jb 0x1400b0a8c
mov al, byte [rsp + 0x47]
test al, 1
jne 0x1400b0b6f
jmp 0x1400b0b06
mov rax, qword [rsp + 0x48]
mov rcx, rax
add rcx, 0xfffffffffffffff0
mov qword [rsp + 0x20], rcx
mov rdx, qword [rax - 0x10]
mov rcx, rdx
add rcx, 0x10
mov qword [rsp + 0x28], rcx
movabs rax, 0xd241693b744e4038
movabs r8, 0x2dbe96c48bb1bfc7
xor rax, r8
xor rdx, rax
xor rdx, 0xffffffffffffffff
mov rax, rcx
xor rax, rdx
and rax, rcx
cmp rax, 0
jge 0x1400b0b62
call fcn.1400077a3
jmp 0x1400b0b6f
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x28]
mov qword [rax], rcx
mov rax, qword [rsp + 0x50]
mov rcx, qword [rax]
call fcn.1400b0be0
test al, 1
jne 0x1400b0b89
jmp 0x1400b0bbc
mov rax, qword [rsp + 0x50]
mov rcx, qword [rax]
call fcn.1400b09cd
mov rax, qword [rsp + 0x38]
mov al, byte [rax]
mov cl, 0xb
xor cl, 0xb
cmp al, cl
jne 0x1400b0bc9
mov rax, qword [rsp + 0x50]
mov rcx, qword [rax]
mov edx, 8
call fcn.14000eb78
mov rax, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x48]
mov qword [rax], rcx
add rsp, 0x58
ret
sub byte [rbx], cl
cmp ebx, dword [0x14009c1bf]
jmp qword [rsi + 0xf]
Function at 0x1400b37f0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x48
mov qword [rsp + 0x40], rcx
mov eax, dword [0x1401d9d20]
mov r8d, dword [0x1401d9d24]
xor r8d, 0xc97e33c4
mov ecx, 0x1d182bc1
xor ecx, 0xe2e7d43e
mov r9d, r8d
xor r9d, ecx
mov edx, eax
and edx, r9d
mov ecx, eax
or ecx, r9d
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, r8d
or eax, r8d
imul eax, edx
add eax, ecx
imul edx, eax, 0x6d23a0e5
mov ecx, edx
xor ecx, 0x75a8c2be
mov eax, 0xffffffff
xor eax, 0x75a8c2be
and edx, eax
mov eax, 0xd3252d93
xor eax, 0xd3252d91
imul eax, edx
sub eax, ecx
mov ecx, 0x8f6d650a
xor ecx, 0x525ff3b8
add eax, ecx
add eax, 0x6501f480
sub eax, 0xdd3296b2
mov ecx, 0xe40a7bb1
xor ecx, 0x631a2727
cmp eax, ecx
jbe 0x1400b3a78
mov rcx, qword [rsp + 0x40]
mov edx, dword [0x1401d9d28]
mov r8d, dword [0x1401d9d2c]
xor r8d, 0x130b08ea
mov eax, r8d
and eax, edx
mov r9d, 0x3b0dc13c
xor r9d, 0xc4f23ec3
xor eax, r9d
add edx, r8d
add edx, 1
add edx, eax
mov eax, edx
or eax, eax
xor eax, 0xffffffff
mov r8d, 0xffffffff
xor r8d, 0x443b0bc
mov r9d, 0xdfe6e4d8
xor r9d, 0xdba55464
mov r10d, 0x16375128
xor r10d, 0xe9c8aed7
xor r9d, r10d
and r8d, r9d
xor eax, 0xffffffff
xor r8d, 0xffffffff
and eax, r8d
mov r8d, 0xf1a50a75
xor r8d, 0xf5e6bac9
or edx, r8d
xor edx, 0xffffffff
or eax, edx
xor eax, 0xffffffff
xor eax, 0x83eb91d9
mov r8d, 0x6484b174
xor r8d, 0xecc872ea
xor edx, edx
div r8d
mov rcx, qword [rcx + 0x10]
mov qword [rsp + 0x30], rcx
cmp rcx, 0
sete cl
mov byte [rsp + 0x3f], cl
cmp eax, 0xed115cd3
ja 0x1400b388e
mov al, byte [rsp + 0x3f]
test al, 1
jne 0x1400b3987
jmp 0x1400b3961
mov rcx, qword [rsp + 0x30]
movabs rax, 0x4000000000000000
and rax, qword [rcx]
cmp rax, 0
jne 0x1400b3987
mov rcx, qword [rsp + 0x30]
call fcn.14000eb2e
mov rax, qword [rsp + 0x40]
mov rax, qword [rax + 0x20]
mov qword [rsp + 0x28], rax
cmp rax, 0
je 0x1400b3a73
mov rax, qword [rsp + 0x28]
mov rax, qword [rax]
movabs rcx, 0xc8a4187af6f9b8d4
movabs rdx, 0x88a4187af6f9b8d4
xor rcx, rdx
and rax, rcx
cmp rax, 0
jne 0x1400b3a73
mov eax, dword [0x1401d9d30]
mov ecx, dword [0x1401d9d34]
xor ecx, 0x35e66012
or eax, ecx
mov ecx, 0x77321456
xor edx, edx
div ecx
mov ecx, 0xfaeadf89
xor ecx, 0xeacec433
xor edx, edx
div ecx
add eax, 0xbadb00ba
mov ecx, 0x1d546602
xor ecx, 0x45f3a49
cmp eax, ecx
jb 0x1400b3a81
mov rcx, qword [rsp + 0x28]
mov eax, dword [0x1401d9d38]
xor eax, 0xce70c5bf
xor edx, edx
div dword [0x1401d9d3c]
mov edx, 0x184cf03f
xor edx, 0x45c8f026
mov r8d, 0x1db72bc0
xor r8d, 0xe248d43f
xor edx, r8d
add eax, edx
add eax, 1
xor edx, edx
sub edx, 0xb07481de
sub eax, edx
or eax, 0x60eda3d4
mov dword [rsp + 0x24], eax
call fcn.14000eb2e
mov eax, dword [rsp + 0x24]
cmp eax, 0x25616063
jb 0x1400b3a0f
jmp 0x1400b3a73
add rsp, 0x48
ret
mov esp, 0xe9838a86
or eax, 0x30fffffe
mov esp, 0x85e9e135
invalid
xor byte [rbp + rsi - 0x7a161f], bh
invalid
Function at 0x1400b7cd0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rsi
push rdi
sub rsp, 0x750
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x3d8], r8

Function at 0x1400bceb0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x20], rdx
mov qword [rsp + 0x28], rcx
call fcn.1400c0558
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0x30], rax
mov rcx, qword [rcx]
call fcn.1400b0be0
test al, 1
jne 0x1400bcee2
jmp 0x1400bcf10
mov rax, qword [rsp + 0x28]
mov rcx, qword [rax]
call fcn.1400b09cd
mov rax, qword [rsp + 0x30]
cmp byte [rax + 0x60], 0
jne 0x1400bcf1d
mov rax, qword [rsp + 0x28]
mov rcx, qword [rax]
mov edx, 8
call fcn.14000eb78
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x20]
mov qword [rax], rcx
mov eax, dword [0x1401da050]
xor eax, 0x62459917
sub eax, dword [0x1401da054]
xor eax, 0x3a17489d
xor eax, 0x9ac8e802
mov ecx, 0x12e1bc6f
xor ecx, 0xa9ec74c9
add eax, ecx
cmp eax, 0x9099a053
ja 0x1400bcf8c
mov eax, dword [0x1401da058]
mov ecx, dword [0x1401da05c]
xor ecx, 0x8bcfc151
sub eax, ecx
and eax, 0x4794db00
imul eax, eax, 0x7629377a
or eax, 0x16307b33
mov ecx, 0x3d926ea4
xor ecx, 0x585ef4e1
cmp eax, ecx
jb 0x1400bcf50
add rsp, 0x38
ret
insb byte [rdi], dx
xchg ecx, eax
xlatb
notrack jmp 0x1400bcf50
Function at 0x1400c0660
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x28], rcx
mov rax, qword [rcx + 8]
mov qword [rsp + 0x30], rax
cmp rax, 0
je 0x1400c06a2
mov rcx, qword [rsp + 0x30]
movabs rax, 0x4000000000000000
and rax, qword [rcx]
cmp rax, 0
jne 0x1400c06a2
mov rcx, qword [rsp + 0x30]
call fcn.14000eb2e
mov rax, qword [rsp + 0x28]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x20], rax
cmp rax, 0
je 0x1400c06e0
mov rcx, qword [rsp + 0x20]
movabs rax, 0x4000000000000000
and rax, qword [rcx]
cmp rax, 0
jne 0x1400c06e0
mov rcx, qword [rsp + 0x20]
call fcn.14000eb2e
mov eax, dword [0x1401da198]
xor edx, edx
div dword [0x1401da19c]
mov ecx, eax
mov eax, 0xc625f2d
xor eax, 0x165cd763
xor ecx, eax
mov edx, 0x9d2ae255
xor edx, 0xd5a3c709
mov eax, ecx
and eax, edx
or ecx, 0x4889255c
add eax, ecx
xor ecx, ecx
sub ecx, 0x30fc5a3d
add eax, ecx
cmp eax, 0x8d2bf424
je 0x1400c07a4
mov eax, dword [0x1401da1a0]
imul eax, dword [0x1401da1a4]
add eax, 0xdd017250
xor eax, 0x1a824213
mov r8d, 0x44a28cc
xor r8d, 0xbde3c9a8
mov ecx, 0x2cbecfad
xor ecx, 0xd3413052
xor r8d, ecx
mov edx, eax
and edx, r8d
mov ecx, eax
or ecx, r8d
mov r8d, 0x85a62c7
xor r8d, 0xf7a59d38
xor ecx, r8d
imul ecx, edx
mov edx, eax
and edx, 0xb9a9e164
mov r8d, 0xfba9644
xor r8d, 0xb6137720
or eax, r8d
imul eax, edx
add eax, ecx
cmp eax, 0x2c586c8e
je 0x1400c0728
add rsp, 0x38
ret
call qword [rdi - 0x40]
shr cl, 1
jnp 0x1400c07aa
invalid
invalid
Function at 0x1400c73d0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x58
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x40], rcx
mov rcx, qword [rcx]
mov qword [rsp + 0x48], rcx
xor eax, eax
cmp rcx, qword [rdx]
mov byte [rsp + 0x57], al
jne 0x1400c759e
mov rcx, qword [rsp + 0x48]
movabs rdx, 0xb4a3eb957f602a3d
movabs rax, 0xb4a3eb957f602a3d
xor rdx, rax
mov al, 1
cmp rcx, rdx
mov byte [rsp + 0x57], al
je 0x1400c759e
mov rcx, qword [rsp + 0x48]
mov rax, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x40]
mov rdx, qword [rdx + 8]
add rdx, 8
mov qword [rsp + 0x18], rdx
mov rax, qword [rax + 8]
add rax, 8
mov qword [rsp + 0x20], rax
xor eax, eax
test rcx, rcx
cmovg rax, rcx
mov qword [rsp + 0x28], rax
xor eax, eax
mov qword [rsp + 0x30], rax
mov rdx, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x30]
mov qword [rsp + 8], rcx
xor eax, eax
cmp rcx, rdx
mov dword [rsp + 0x14], eax
je 0x1400c74bb
mov rcx, qword [rsp + 8]
mov rdx, qword [rsp + 0x20]
mov rax, qword [rsp + 0x18]
movzx eax, byte [rax + rcx]
movzx r8d, byte [rdx + rcx]
mov edx, eax
xor edx, r8d
xor r8d, 0xffffffff
and eax, r8d
shl eax, 1
sub eax, edx
add rcx, 1
cmp eax, 0
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x14], eax
je 0x1400c745e
mov eax, dword [rsp + 0x14]
mov dword [rsp + 4], eax
mov eax, dword [0x1401da478]
mov edx, dword [0x1401da47c]
xor edx, 0x93d31e88
and eax, eax
mov ecx, 0xb26d18a
xor ecx, 0xf4d92e75
xor eax, ecx
mov r8d, 0x6c8ead80
xor r8d, 0x9371527f
mov ecx, edx
xor ecx, r8d
xor edx, 0xffffffff
or ecx, edx
and eax, ecx
xor eax, 0xffffffff
mov ecx, 0xa2fc2b4a
xor ecx, 0x1d1946a6
xor edx, edx
div ecx
add eax, 0xb35d9822
mov ecx, eax
and ecx, 0x26d12432
mov edx, 0x37e61f14
xor edx, 0xc819e0eb
xor ecx, edx
mov edx, 0x7d2d25b6
xor edx, 0x5bfc0184
add eax, edx
add eax, 1
add eax, ecx
mov ecx, 0xae70f073
xor ecx, 0x2ad6fddb
cmp eax, ecx
jb 0x1400c75ac
mov eax, dword [0x1401da480]
xor edx, edx
div dword [0x1401da484]
sub eax, 0x582cc75
mov ecx, 0x33fb60fb
xor edx, edx
div ecx
mov edx, dword [rsp + 4]
imul eax, eax, 0x92d1777b
mov ecx, 0x1c057234
xor ecx, 0xa7d1687e
cmp edx, 0
sete dl
mov byte [rsp + 3], dl
cmp eax, ecx
je 0x1400c754e
mov al, byte [rsp + 3]
mov byte [rsp + 0x57], al
jmp 0x1400c759e
mov al, byte [rsp + 0x57]
and al, 1
movzx eax, al
add rsp, 0x58
ret
sub byte [rbx], cl
cmp ebx, dword [0x1400c0f9d]
dec dword [rax - 0x7d]
sub rsp, 0x28
mov qword [rsp + 0x20], rcx
Function at 0x1400cb080
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x58
mov qword [rsp + 0x48], rcx
xor eax, eax
cmp rcx, 0
mov byte [rsp + 0x57], al
je 0x1400cb202
mov eax, dword [0x1401da620]
mov edx, dword [0x1401da624]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov ecx, eax
xor ecx, 0xffffffff
xor eax, 0xffffffff
and ecx, eax
mov eax, 0xffffffff
xor eax, 0x1461ab
mov edx, 0xffffffff
xor edx, 0x1461ab
and eax, edx
or ecx, eax
xor ecx, 0xffffffff
mov edx, 0x78b6112f
xor edx, 0xddfeaa07
mov eax, ecx
xor eax, edx
mov edx, 0xffffffff
xor edx, 0xa548bb28
and ecx, edx
shl ecx, 1
sub ecx, eax
mov edx, ecx
xor edx, 0xffffffff
mov eax, 0xc47ca30a
xor eax, 0xdc7f1ae9
and eax, edx
mov edx, 0xffffffff
xor edx, 0x1803b9e3
and ecx, edx
or eax, ecx
cmp eax, 0x46e22bbe
jae 0x1400cb210
mov eax, dword [0x1401da628]
mov ecx, 0x6dc66641
xor ecx, 0x29e1dcfb
xor eax, ecx
xor edx, edx
div dword [0x1401da62c]
add eax, 0xc779a636
mov ecx, 0xde4b239
xor ecx, 0x21ee0c0f
and eax, ecx
mov ecx, 0xcf7f7217
xor edx, edx
div ecx
mov rdx, qword [rsp + 0x48]
mov ecx, 0xc7a9eec7
xor ecx, 0xed7ce95a
mov r8, rdx
add r8, 0xfffffffffffffff0
mov qword [rsp + 0x30], r8
mov rdx, qword [rdx - 0x10]
mov qword [rsp + 0x38], rdx
cmp rdx, 0x10
setb dl
mov byte [rsp + 0x47], dl
cmp eax, ecx
ja 0x1400cb125
mov cl, byte [rsp + 0x47]
mov al, 1
test cl, 1
mov byte [rsp + 0x57], al
jne 0x1400cb202
jmp 0x1400cb1ab
mov rdx, qword [rsp + 0x38]
mov rax, rdx
add rax, 0xfffffffffffffff0
mov qword [rsp + 0x28], rax
mov rcx, rax
xor rcx, rdx
cmp rcx, 0
setl cl
cmp rax, 0xffffffffffffffff
setg al
and al, cl
test al, 1
jne 0x1400cb1df
jmp 0x1400cb1ef
call fcn.1400077a3
xor eax, eax
mov byte [rsp + 0x57], al
jmp 0x1400cb202
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x28]
mov qword [rax], rcx
xor eax, eax
mov byte [rsp + 0x57], al
mov al, byte [rsp + 0x57]
and al, 1
movzx eax, al
add rsp, 0x58
ret
add eax, dword [rax]
test eax, 0xff0ce9ff
invalid
Function at 0x1400cc2f0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x48
mov qword [rsp + 0x40], rcx
mov eax, dword [0x1401da6b0]
mov ecx, dword [0x1401da6b4]
mov edx, eax
and edx, ecx
or eax, ecx
add edx, eax
mov eax, 0x9b2eb218
xor eax, 0x64d14de7
mov r11d, edx
xor r11d, eax
and r11d, 0x37d996f2
mov ecx, 0x392488d3
xor ecx, 0xefd1e21
mov eax, 0x42d26184
xor eax, 0xbd2d9e7b
xor ecx, eax
and edx, ecx
mov eax, 0xffffffff
xor eax, 0xcebfaee2
and eax, 0x37d996f2
and ecx, 0xcebfaee2
or r11d, edx
or eax, ecx
xor r11d, eax
mov ecx, r11d
xor ecx, 0xffffffff
mov r8d, 0x5e2ea948
xor r8d, 0x8866bed
mov eax, 0xcfcca188
xor eax, 0x30335e77
xor r8d, eax
mov edx, 0x38ddd5a1
xor edx, 0xfa92b7e1
mov eax, 0x65261eb
xor eax, 0xf9ad9e14
xor edx, eax
mov eax, ecx
and eax, 0xc24f6240
and r11d, edx
mov r10d, 0xb2c451e5
xor r10d, 0x708b33a5
mov r9d, r8d
and r9d, r10d
mov r10d, edx
and r10d, 0x56a8c2a5
or eax, r11d
or r9d, r10d
xor eax, r9d
or ecx, r8d
mov r8d, 0xbc4e73c0
xor r8d, 0x43b18c3f
xor ecx, r8d
or edx, 0xc24f6240
and ecx, edx
or eax, ecx
mov ecx, 0x5077e263
xor ecx, 0xf6353538
xor edx, edx
div ecx
cmp eax, 0x2088b94d
ja 0x1400cc4a6
mov eax, dword [0x1401da6b8]
mov ecx, dword [0x1401da6bc]
xor ecx, 0x76b89cfd
xor eax, ecx
sub eax, 0x145d4c7b
imul eax, eax, 0x78452638
sub eax, 0x52913ea4
sub eax, 0xe277b493
add eax, 0x52913ea4
mov dword [rsp + 0x38], eax
mov eax, 0xed55fe8d
xor eax, 0xc592d5d4
mov dword [rsp + 0x34], eax
call fcn.1400cbb66
mov rcx, qword [rsp + 0x40]
mov ecx, dword [rsp + 0x40]
mov qword [rsp + 0x28], rax
call fcn.1400cbf76
mov ecx, dword [rsp + 0x34]
mov dl, al
mov eax, dword [rsp + 0x38]
mov byte [rsp + 0x3f], dl
cmp eax, ecx
jbe 0x1400cc3f8
mov al, byte [rsp + 0x3f]
test al, 1
jne 0x1400cc473
jmp 0x1400cc4a0
mov rcx, qword [rsp + 0x40]
call fcn.1400cba40
mov rax, qword [rsp + 0x28]
mov al, byte [rax]
mov cl, 0xcd
xor cl, 0xcd
cmp al, cl
jne 0x1400cc4a0
mov rcx, qword [rsp + 0x40]
mov edx, 8
call fcn.14000eb78
nop
add rsp, 0x48
ret
jge 0x1400cc43e
out dx, al
imul ecx
invalid
Function at 0x1400cd260
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x58
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x50], rcx
mov r8d, dword [0x1401da730]
xor r8d, 0x3a9f030a
mov edx, dword [0x1401da734]
xor edx, 0x16265280
mov eax, r8d
xor eax, 0xffffffff
and eax, 0x285e9b76
mov r9d, 0xffffffff
xor r9d, 0x285e9b76
and r8d, r9d
mov r10d, 0xf418608e
xor r10d, 0xbe79f71
mov ecx, edx
xor ecx, r10d
and ecx, 0x285e9b76
and edx, r9d
or eax, r8d
or ecx, edx
xor eax, ecx
mov ecx, 0xe4d7df63
xor ecx, 0x17a36008
and eax, ecx
mov ecx, 0xa8d8ebca
xor ecx, 0x3d72e10d
and eax, ecx
mov ecx, 0x4d22c6e7
xor edx, edx
div ecx
cmp eax, 0x3c464490
jae 0x1400cd45d
mov eax, dword [0x1401da738]
xor eax, dword [0x1401da73c]
or eax, 0x56a8c2a5
mov ecx, 0xa642d75b
xor edx, edx
div ecx
add eax, 0xa5da68fe
add eax, 0x565330fd
mov ecx, 0x232a1da0
xor ecx, 0x86f0755e
sub eax, ecx
mov dword [rsp + 0x40], eax
mov eax, 0xda24e403
xor eax, 0x992519f6
mov dword [rsp + 0x3c], eax
call fcn.1400ccdd0
mov rcx, rax
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x30], rcx
mov rcx, qword [rax]
call fcn.1400ccee0
mov ecx, dword [rsp + 0x3c]
mov dl, al
mov eax, dword [rsp + 0x40]
mov byte [rsp + 0x47], dl
cmp eax, ecx
jbe 0x1400cd2f3
mov al, byte [rsp + 0x47]
test al, 1
jne 0x1400cd377
jmp 0x1400cd44b
mov rax, qword [rsp + 0x50]
mov rcx, qword [rax]
call fcn.1400ccc20
mov rax, qword [rsp + 0x30]
cmp byte [rax], 0
jne 0x1400cd458
mov eax, dword [0x1401da740]
sub eax, dword [0x1401da744]
mov r8d, 0xffffffff
xor r8d, 0x78452638
mov edx, eax
and edx, r8d
mov ecx, eax
or ecx, r8d
mov r8d, 0xec38374e
xor r8d, 0x13c7c8b1
xor ecx, r8d
imul ecx, edx
mov edx, eax
and edx, 0x78452638
or eax, 0x78452638
imul eax, edx
add eax, ecx
sub eax, 0xe277b493
mov ecx, 0xd6fc0ab4
xor ecx, 0x35a4282e
sub eax, ecx
cmp eax, 0x6e20544d
jbe 0x1400cd466
mov eax, dword [0x1401da748]
xor eax, 0xa9f621d8
sub eax, dword [0x1401da74c]
mov ecx, 0xa4e59af7
xor edx, edx
div ecx
xor eax, 0x10e53656
mov ecx, 0xc96facc1
xor edx, edx
div ecx
mov ecx, eax
mov rax, qword [rsp + 0x50]
mov dword [rsp + 0x2c], ecx
mov rcx, qword [rax]
mov edx, 8
call fcn.14000eb78
mov eax, dword [rsp + 0x2c]
cmp eax, 0xa222db28
je 0x1400cd466
jmp 0x1400cd44b
mov rax, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x48]
mov qword [rax], rcx
add rsp, 0x58
ret
xor al, 0xe6
mov al, 0x74
jmp 0x1400cd2f3
stc
cmp al, 0xc4
sub al, 0xe9
mov bh, bh
invalid
Function at 0x1400cfc10
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x48
mov byte [rsp + 0x2f], dl
mov qword [rsp + 0x30], rcx
mov edx, 1
call fcn.14001c160
mov r8b, byte [rsp + 0x2f]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
add rax, 8
mov qword [rsp + 0x38], rax
mov rax, qword [rcx + 8]
mov rdx, qword [rcx]
mov byte [rax + rdx + 8], r8b
mov rcx, qword [rcx]
mov rax, rcx
add rax, 1
mov qword [rsp + 0x40], rax
xor rcx, 0xffffffffffffffff
movabs rdx, 0x9691ca23925a3862
movabs r8, 0x696e35dc6da5c79d
xor rdx, r8
xor rax, rdx
movabs rdx, 0x9118633997dbe6f
movabs r8, 0xf6ee79cc66824190
xor rdx, r8
xor rcx, rdx
mov rdx, 0xffffffffffffffff
movabs r8, 0xc96facc283a5315d
xor rdx, r8
or rax, rcx
movabs rcx, 0x274e42c745a036e2
movabs r8, 0xee21ee05c60507bf
xor rcx, r8
or rcx, rdx
xor rax, 0xffffffffffffffff
and rax, rcx
cmp rax, 0
jge 0x1400cfcdc
call fcn.1400077a3
jmp 0x1400cfdaa
mov eax, dword [0x1401da8c0]
mov ecx, 0xda261ee4
xor ecx, 0x66daba7c
xor eax, ecx
imul eax, dword [0x1401da8c4]
mov ecx, 0x7e7e057e
xor ecx, 0xa7a1d0af
and ecx, eax
xor ecx, 0xffffffff
add eax, 0xd9dfd5d1
mov edx, 0xec8e4c10
xor edx, 0xec8e4c11
add eax, edx
add eax, ecx
mov ecx, 0x99468093
xor edx, edx
div ecx
mov ecx, eax
and ecx, 0x6df5cbd6
shl ecx, 1
xor eax, 0x6df5cbd6
add eax, ecx
cmp eax, 0x4e37bfe8
jb 0x1400cfe47
mov r8, qword [rsp + 0x40]
mov r9, qword [rsp + 0x30]
mov eax, dword [0x1401da8c8]
xor eax, 0x501f1579
and eax, dword [0x1401da8cc]
mov ecx, 0x4d22c6e7
xor edx, edx
div ecx
mov ecx, 0xb7cd5081
xor edx, edx
div ecx
mov rdx, qword [rsp + 0x38]
mov ecx, 0x1c52fc20
xor ecx, 0x17f792ff
imul eax, ecx
mov ecx, 0x2892b9ba
xor ecx, 0xdf7c2fc7
mov qword [r9], r8
mov rdx, qword [rdx]
mov r9b, 0xe9
xor r9b, 0xe9
mov byte [rdx + r8 + 8], r9b
cmp eax, ecx
jae 0x1400cfe47
jmp 0x1400cfdaa
mov eax, dword [0x1401da8d0]
mov ecx, 0xe4fdb99d
xor ecx, 0x24df6059
xor eax, ecx
mov ecx, dword [str._G_]
xor ecx, 0x34949065
xor edx, edx
div ecx
add eax, 0xa5da68fe
add eax, 0x565330fd
sub eax, 0xa5da68fe
mov ecx, 0xe552d8ee
xor edx, edx
div ecx
mov ecx, 0xffffffff
xor ecx, 0x96974d71
xor edx, edx
sub edx, 1
sub ecx, edx
sub eax, ecx
cmp eax, 0xb4963503
je 0x1400cfe50
mov eax, dword [0x1401da8d8]
mov ecx, dword [0x1401da8dc]
mov edx, 0x638cbead
xor edx, 0x2cecd286
xor ecx, edx
sub eax, ecx
sub eax, 0xe358229a
and eax, 0xdb272815
mov ecx, 0x830a4458
xor ecx, 0xb6c52a5
imul eax, ecx
cmp eax, 0xe25d0994
je 0x1400cfe04
add rsp, 0x48
ret
sub eax, 0xe9c6aaed
invalid
xor al, 0xe6
mov al, 0x74
jmp 0x1400cfe04