joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400dae50
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x58
mov qword [rsp + 0x48], rcx
xor eax, eax
cmp rcx, 0
mov byte [rsp + 0x57], al
je 0x1400daff8
mov rax, qword [rsp + 0x48]
movabs rcx, 0x575d387bf1d6c312
movabs rdx, 0xa8a2c7840e293ce2
xor rcx, rdx
add rax, rcx
mov qword [rsp + 0x38], rax
mov rcx, qword [rax]
mov qword [rsp + 0x40], rcx
movabs rdx, 0x571b65e8dfdd2a67
movabs rax, 0x571b65e8dfdd2a77
xor rdx, rax
mov al, 1
cmp rcx, rdx
mov byte [rsp + 0x57], al
jb 0x1400daff8
mov rdx, qword [rsp + 0x40]
mov rax, rdx
add rax, 0xfffffffffffffff0
mov qword [rsp + 0x30], rax
mov rcx, rax
xor rcx, rdx
movabs rdx, 0x9d1e347f5e829f40
movabs r8, 0x9d1e347f5e829f40
xor rdx, r8
cmp rcx, rdx
setl dl
cmp rax, 0xffffffffffffffff
setg al
or al, al
xor al, 0xff
mov cl, dl
xor cl, 0xff
xor dl, 0xff
and cl, dl
or al, cl
xor al, 0xff
test al, 1
jne 0x1400daf15
jmp 0x1400dafe5
mov ecx, dword [0x140250ee0]
mov eax, dword [0x140250ee4]
xor eax, 0xffffffff
add ecx, eax
add ecx, 1
sub ecx, 0x92d2d2b1
mov edx, 0xffffffff
xor edx, 0x526b6917
mov eax, ecx
xor eax, edx
and eax, ecx
or eax, 0xedd1d792
cmp eax, 0xb4df52d
jbe 0x1400db006
mov eax, dword [0x140250ee8]
mov ecx, dword [0x140250eec]
xor ecx, 0x82461b0f
xor edx, edx
div ecx
mov ecx, eax
mov eax, ecx
and eax, 0xa3b06189
mov edx, 0x96a85115
xor edx, 0x3518309c
xor ecx, edx
or eax, ecx
mov ecx, 0xb94df5eb
xor ecx, 0x792e6bc5
or eax, ecx
mov edx, 0x4ef6a840
xor edx, 0xa6e98989
mov ecx, 0xc16bb76e
xor ecx, 0x3e944891
xor edx, ecx
mov ecx, eax
and ecx, edx
mov edx, eax
xor edx, 0xe81f21c9
add eax, edx
sub eax, ecx
mov dword [rsp + 0x2c], eax
mov eax, 0xa651789e
xor eax, 0x259d7562
mov dword [rsp + 0x28], eax
call fcn.140008c92
mov ecx, dword [rsp + 0x28]
mov eax, dword [rsp + 0x2c]
cmp eax, ecx
jb 0x1400daf50
xor eax, eax
mov byte [rsp + 0x57], al
jmp 0x1400daff8
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x30]
mov qword [rax], rcx
xor eax, eax
mov byte [rsp + 0x57], al
mov al, byte [rsp + 0x57]
and al, 1
movzx eax, al
add rsp, 0x58
ret
movabs eax, dword [0xffffff41e9a03b7c]
Function at 0x1400dd9d0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x58
mov qword [rsp + 0x28], rcx
call fcn.1400dd2c0
mov rcx, qword [rsp + 0x28]
mov rax, qword [rcx + 8]
mov qword [rsp + 0x30], rax
cmp rax, 0
je 0x1400dda1c
mov rcx, qword [rsp + 0x30]
movabs rax, 0x4000000000000000
and rax, qword [rcx]
cmp rax, 0
jne 0x1400dda1c
mov rcx, qword [rsp + 0x30]
call fcn.14000eec9
mov rax, qword [rsp + 0x28]
mov al, byte [rax + 0x20]
mov byte [rsp + 0x27], al
sub al, 4
jb 0x1400ddb6c
jmp 0x1400dda35
mov al, byte [rsp + 0x27]
sub al, 4
je 0x1400dda57
jmp 0x1400dda46
mov al, byte [rsp + 0x27]
sub al, 5
je 0x1400dda7d
jmp 0x1400ddaa3
mov rax, qword [rsp + 0x28]
mov rcx, qword [rax + 0x28]
mov qword [rsp + 0x48], rcx
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x50], rax
lea rcx, [rsp + 0x48]
call fcn.1400dd3b0
jmp 0x1400ddb6c
mov rax, qword [rsp + 0x28]
mov rcx, qword [rax + 0x28]
mov qword [rsp + 0x38], rcx
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x38]
call fcn.1400dcf50
jmp 0x1400ddb6c
mov eax, dword [0x140251050]
mov edx, dword [0x140251054]
xor edx, 0xe2c31363
mov ecx, eax
xor ecx, edx
xor edx, 0xffffffff
and eax, edx
shl eax, 1
sub eax, ecx
imul eax, eax, 0xb3da722a
add eax, 0xde734832
mov ecx, 0x9c7eabc4
xor ecx, 0xdda5b5e3
add eax, ecx
sub eax, 0xde734832
mov r8d, 0xffffffff
xor r8d, 0xba0d9471
mov edx, eax
and edx, r8d
mov ecx, eax
or ecx, r8d
xor ecx, 0xffffffff
imul ecx, edx
mov r8d, 0xebe77634
xor r8d, 0x51eae245
mov edx, eax
and edx, r8d
mov r8d, 0x9434a591
xor r8d, 0x2e3931e0
or eax, r8d
imul eax, edx
add eax, ecx
cmp eax, 0xc16bb76e
ja 0x1400ddc21
mov eax, dword [0x140251058]
xor eax, 0x1bbe4f17
sub eax, dword [0x14025105c]
mov ecx, 0x97ce8ccd
xor ecx, 0x950c632a
imul eax, ecx
mov ecx, 0x7dd31a22
xor ecx, 0x8883c3e8
imul eax, ecx
xor eax, 0x244118b7
cmp eax, 0x3d0a23cc
jb 0x1400ddb2f
mov ecx, dword [0x140251060]
xor ecx, 0xa20d1f8e
mov eax, dword [0x140251064]
xor eax, 0x813b5e47
sub ecx, 0x56a24301
add ecx, eax
add ecx, 0x56a24301
mov eax, ecx
and eax, 0xe34acae
xor ecx, 0xe34acae
or eax, ecx
mov ecx, eax
xor ecx, 0xa65656e3
mov edx, 0x5f866bd3
xor edx, 0xa079942c
xor ecx, edx
or eax, 0xa65656e3
and eax, ecx
imul eax, eax, 0x6ffdfe21
cmp eax, 0xdb7fec1f
je 0x1400ddc2a
mov eax, dword [0x140251068]
and eax, dword [0x14025106c]
xor ecx, ecx
sub ecx, eax
mov eax, 0x4b5aa36
xor eax, 0x4b5aa36
mov edx, 0x38747f11
xor edx, 0xacee26c4
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov ecx, 0x5b5c0024
xor ecx, 0xfdedf18b
or eax, ecx
xor ecx, ecx
sub ecx, 0xe332693b
add eax, ecx
cmp eax, 0x2ef7d4c
jb 0x1400ddc2a
add rsp, 0x58
ret
push rbx
iretd
mov word [rsi], ds
jmp 0x13fa8c593
Function at 0x1400e61e0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x48
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x38], rcx
mov al, byte [rdx + 0x10]
mov byte [rsp + 0x47], al
sub al, 2
je 0x1400e6213
jmp 0x1400e6202
mov al, byte [rsp + 0x47]
sub al, 3
je 0x1400e634b
jmp 0x1400e62ac
mov eax, dword [0x1402512b0]
xor eax, 0x3c7bd0c0
mov ecx, dword [0x1402512b4]
xor ecx, 0xb7145979
xor eax, ecx
and eax, 0x988c2b4f
mov ecx, 0xa777994d
xor ecx, 0x2adc9145
or eax, ecx
mov ecx, 0xd14476fd
xor edx, edx
div ecx
cmp eax, 0x8a40ade0
ja 0x1400e6351
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x30]
mov eax, dword [0x1402512b8]
or eax, dword [0x1402512bc]
xor eax, 0x8c14ec1e
mov r8d, 0x68ad787d
xor r8d, 0x319822f4
add eax, r8d
add eax, 0xf1ad2488
add eax, 0xa97f4b04
mov r8d, 0x87d03063
xor r8d, 0x767d14eb
sub eax, r8d
mov dl, byte [rdx + 0x18]
mov byte [rcx], dl
cmp eax, 0x6c052d07
jb 0x1400e6252
jmp 0x1400e634b
movabs rcx, 0xbcc87be8fcac2037
movabs rax, 0xbcc87be8fcac2077
xor rcx, rax
movabs rdx, 0xf964905a6f878e40
movabs rax, 0xf964905a6f878e48
xor rdx, rax
call fcn.140012610
mov rcx, rax
mov rax, qword [0x140264728]
mov qword [rcx], rax
lea rax, [0x140262f60]
mov qword [rcx + 0x10], rax
mov rax, qword [0x140262fe8]
mov qword [rcx + 0x18], rax
mov rax, qword [0x140262ff0]
mov qword [rcx + 0x20], rax
mov qword [rcx + 8], 0
movabs rax, 0xa503589ea16f22cb
movabs rdx, 0xa503589eb70e4410
xor rax, rdx
lea rdx, [0x140262f60]
lea r8, [0x140262fb5]
lea r9, [0x140262f7b]
mov qword [rsp + 0x20], rax
call fcn.14001203f
nop
add rsp, 0x48
ret
xor al, 0xd2
outsb dx, byte [rsi]
xchg ecx, ebp
clc
invalid
Function at 0x1400ea0d0
Capabilities:
Encode data using xor

Disassembly:
push rbp
sub rsp, 0x40
lea rbp, [rsp + 0x40]
mov qword [rbp - 0x28], r8
mov qword [rbp - 0x10], rdx
mov qword [rbp - 0x20], rcx
mov eax, 0x10
call fcn.14024abd0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x18], rax
sub rsp, 0x20
call fcn.1400dd2c0
mov rdx, qword [rbp - 0x10]
add rsp, 0x20
mov qword [rbp - 8], rax
cmp byte [rdx + 0x10], 3
je 0x1400ea24f
mov rax, qword [rbp - 0x20]
mov rax, qword [rax]
cmp rax, 0
mov qword [rbp - 0x30], rax
jne 0x1400ea224
xor eax, eax
mov ecx, eax
sub rsp, 0x20
call fcn.1400f6880
mov rax, qword [rbp - 8]
add rsp, 0x20
cmp byte [rax], 0
jne 0x1400ea24f
mov eax, dword [0x1402513d0]
xor eax, 0x7cde298
mov r8d, dword [0x1402513d4]
mov r9d, r8d
xor r9d, 0xffffffff
mov edx, eax
and edx, r9d
mov ecx, eax
or ecx, r9d
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, r8d
or eax, r8d
imul eax, edx
add eax, ecx
mov ecx, 0xe4d2b0e9
xor ecx, 0x4f81087b
imul eax, ecx
and eax, 0xa59d9e01
mov ecx, 0x76217375
xor edx, edx
div ecx
cmp eax, 0x14778035
je 0x1400ea254
mov eax, dword [0x1402513d8]
xor edx, edx
div dword [0x1402513dc]
mov ecx, 0xf595f21b
xor edx, edx
div ecx
or eax, 0x59dea001
mov ecx, 0x5ef46b8c
xor ecx, 0x2dcb282a
xor edx, edx
div ecx
mov dword [rbp - 0x3c], eax
mov eax, 0x645d5c29
xor eax, 0x75a62bac
mov dword [rbp - 0x40], eax
mov ecx, 0x68
mov edx, 8
sub rsp, 0x20
call fcn.140012610
mov rdx, qword [rbp - 0x20]
mov ecx, dword [rbp - 0x40]
add rsp, 0x20
mov r8, rax
mov eax, dword [rbp - 0x3c]
mov qword [rbp - 0x38], r8
mov qword [rdx], r8
cmp eax, ecx
je 0x1400ea1a9
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x30], rax
jmp 0x1400ea224
mov r8, qword [rbp - 0x18]
mov rdx, qword [rbp - 0x10]
mov rax, qword [rbp - 0x28]
mov rcx, qword [rbp - 0x30]
mov r9, qword [rax]
mov qword [r8], r9
mov rax, qword [rax + 8]
mov qword [r8 + 8], rax
sub rsp, 0x20
call fcn.1400e6bf0
add rsp, 0x20
mov rsp, rbp
pop rbp
ret
fcomp qword [rcx + 0x4ce949b3]
invalid
Function at 0x1400f3630
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x48
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x40], rcx
mov ecx, dword [0x140251780]
mov r8d, dword [0x140251784]
xor r8d, 0x2e0e283d
mov edx, 0x7d25ff75
xor edx, 0x82da008a
mov eax, ecx
xor eax, edx
mov edx, ecx
xor edx, 0xffffffff
or eax, edx
and eax, r8d
xor eax, 0xffffffff
mov edx, r8d
xor edx, 0xffffffff
xor r8d, 0xffffffff
or edx, r8d
and ecx, edx
mov edx, 0x9ae5bbcf
xor edx, 0x651a4430
xor ecx, edx
xor eax, 0xffffffff
xor ecx, 0xffffffff
or eax, ecx
and eax, 0xd28a7efa
mov edx, 0x167f93d1
xor edx, 0x97230975
mov ecx, eax
xor ecx, edx
xor ecx, 0xffffffff
mov edx, 0x4f254941
xor edx, 0xce79d3e5
and edx, ecx
mov ecx, 0xcf5e7a37
xor ecx, 0xcf5e7a35
imul ecx, edx
sub ecx, 0x815c9aa4
sub eax, ecx
mov ecx, 0x8e2e1a9e
xor ecx, 0x8e2e1a9e
mov edx, 0xe9d3d9b4
xor edx, 0x1407315
sub ecx, edx
add eax, ecx
cmp eax, 0xb6599b7a
ja 0x1400f37b9
mov eax, dword [0x140251788]
xor eax, 0x8e5e6c1d
add eax, dword [str.9ZwE]
mov ecx, 0x91436e49
xor ecx, 0xd3f49d30
sub eax, ecx
mov ecx, 0x63b669b7
xor edx, edx
div ecx
mov rdx, qword [rsp + 0x40]
sub eax, 0x8dd6ea62
mov ecx, 0x920dfdb8
xor ecx, 0x40260205
mov rdx, qword [rdx]
mov qword [rsp + 0x28], rdx
movabs r8, 0x3ec28113af06ac02
movabs r9, 0x3ec28113af06ac02
xor r8, r9
cmp rdx, r8
setg dl
mov byte [rsp + 0x37], dl
cmp eax, ecx
je 0x1400f36f1
mov al, byte [rsp + 0x37]
test al, 1
jne 0x1400f376f
jmp 0x1400f37b3
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x28]
mov rdx, qword [rcx]
mov qword [rsp + 0x20], rdx
add rdx, rax
call fcn.1400141a0
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x20]
mov rax, qword [rsp + 0x40]
mov rcx, qword [rcx + 8]
add rcx, 8
add rcx, rdx
mov rdx, qword [rax + 8]
add rdx, 8
mov r8, qword [rax]
call fcn.1400df47f
nop
add rsp, 0x48
ret
push rcx
or byte [rax + 2], bh
jmp 0x1400f36f1
Function at 0x1400f5d90
Capabilities:
Encode data using xor

Disassembly:
push rbp
sub rsp, 0x60
lea rbp, [rsp + 0x60]
mov qword [rbp - 0x10], rdx
mov qword [rbp - 8], rcx
mov eax, dword [0x140251870]
mov edx, dword [0x140251874]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
add eax, 0xd3575150
mov ecx, 0x65c5d318
xor ecx, 0x7931ef63
xor edx, edx
div ecx
mov ecx, eax
mov eax, ecx
and eax, 0x17c482d1
or ecx, 0x17c482d1
add eax, ecx
cmp eax, 0xb18ae991
je 0x1400f5f9e
mov ecx, dword [0x140251878]
mov eax, dword [0x14025187c]
xor eax, ecx
xor eax, 0xfb5b1653
imul eax, eax, 0xe8945f77
or eax, 0x266b0131
and eax, 0xaefb1fb5
mov dword [rbp - 0x24], eax
mov eax, 0x10
mov qword [rbp - 0x40], rax
call fcn.14024abd0
sub rsp, rax
mov rax, qword [rbp - 0x40]
mov rcx, rsp
mov qword [rbp - 0x38], rcx
call fcn.14024abd0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x30], rax
sub rsp, 0x20
call fcn.1400dd2c0
mov rcx, qword [rbp - 8]
add rsp, 0x20
mov rdx, rax
mov eax, dword [rbp - 0x24]
mov qword [rbp - 0x20], rdx
cmp rcx, 0
sete cl
mov byte [rbp - 0x11], cl
cmp eax, 0xdefa3bcc
je 0x1400f5dec
mov al, byte [rbp - 0x11]
test al, 1
jne 0x1400f5e7d
jmp 0x1400f5f84
mov eax, dword [0x140251880]
mov ecx, 0x208782a3
xor ecx, 0x7e1290c8
xor eax, ecx
and eax, dword [0x140251884]
mov ecx, 0x12890a90
xor ecx, 0x3b644d33
sub eax, ecx
sub eax, 0x45faf0cd
add eax, 0x29ed47a3
and eax, 0x782d65ab
mov ecx, 0x4c61152f
xor edx, edx
div ecx
cmp eax, 0xc7fb581e
je 0x1400f5fa7
mov rcx, qword [rbp - 0x38]
mov eax, dword [0x140251888]
xor eax, dword [0x14025188c]
mov r8d, 0x17937d1
xor edx, edx
div r8d
mov edx, 0xe5959e2c
xor edx, 0x4203f383
add eax, edx
mov r8d, 0xca4e7af2
xor edx, edx
div r8d
mov dword [rbp - 0x54], eax
mov word [rcx], 0x3d3
sub rsp, 0x20
call fcn.140061b50
mov rcx, qword [rbp - 0x20]
add rsp, 0x20
mov rdx, rax
mov eax, dword [rbp - 0x54]
mov qword [rbp - 0x50], rdx
cmp byte [rcx], 0
sete cl
mov byte [rbp - 0x41], cl
cmp eax, 0xfeaa91a2
je 0x1400f5fa7
mov al, byte [rbp - 0x41]
test al, 1
jne 0x1400f5f40
jmp 0x1400f5f7f
mov rcx, qword [rbp - 0x10]
mov rax, qword [rbp - 0x50]
mov rdx, qword [rax]
sub rsp, 0x20
call fcn.140019cc0
mov rax, qword [rbp - 0x50]
mov rcx, qword [rbp - 0x10]
mov rdx, qword [rbp - 0x30]
add rsp, 0x20
mov r8, qword [rax]
mov qword [rdx], r8
mov rax, qword [rax + 8]
mov qword [rdx + 8], rax
sub rsp, 0x20
call fcn.1400ea4c0
add rsp, 0x20
jmp 0x1400f5f99
mov rdx, qword [rbp - 0x10]
mov rcx, qword [rbp - 8]
sub rsp, 0x20
call fcn.1400f5280
add rsp, 0x20
mov rsp, rbp
pop rbp
ret
lsl edi, word [rdi + 0x6f]
jmp 0x1400f5dec
invalid
Function at 0x1400f6fb0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x58
mov qword [rsp + 0x48], rcx
xor eax, eax
cmp rcx, 0
mov byte [rsp + 0x57], al
je 0x1400f70a4
mov rax, qword [rsp + 0x48]
mov rcx, rax
add rcx, 0xfffffffffffffff0
mov qword [rsp + 0x38], rcx
mov rcx, qword [rax - 0x10]
mov qword [rsp + 0x40], rcx
movabs rdx, 0x8e7deb8fb94df5eb
movabs rax, 0x8e7deb8fb94df5fb
xor rdx, rax
mov al, 1
cmp rcx, rdx
mov byte [rsp + 0x57], al
jb 0x1400f70a4
mov rdx, qword [rsp + 0x40]
movabs rcx, 0xeec45e1eb937889b
mov rax, rdx
add rax, rcx
add rax, 0xfffffffffffffff0
movabs rcx, 0xc79b5369b743e138
movabs r8, 0x295f0d770e7469a3
xor rcx, r8
sub rax, rcx
mov qword [rsp + 0x30], rax
mov rcx, rax
xor rcx, rdx
movabs rdx, 0x8c2b557a651789e
movabs r8, 0x8c2b557a651789e
xor rdx, r8
cmp rcx, rdx
setl dl
cmp rax, 0xffffffffffffffff
setg cl
xor dl, 0xff
mov al, cl
xor al, dl
and al, cl
test al, 1
jne 0x1400f7081
jmp 0x1400f7091
call fcn.140008c92
xor eax, eax
mov byte [rsp + 0x57], al
jmp 0x1400f70a4
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x30]
mov qword [rax], rcx
xor eax, eax
mov byte [rsp + 0x57], al
mov al, byte [rsp + 0x57]
mov byte [rsp + 0x2f], al
mov eax, dword [0x140251910]
mov ecx, dword [0x140251914]
xor ecx, 0x53ad4534
or eax, ecx
xor ecx, ecx
sub ecx, 0x60d27efb
add eax, ecx
mov ecx, eax
and ecx, 0x92e5247c
shl ecx, 1
xor eax, 0x92e5247c
add eax, ecx
mov edx, 0x2ef7d4c
xor edx, 0xf0a4d3e7
mov ecx, eax
and ecx, edx
shl ecx, 1
add eax, 0xf24baeab
sub eax, ecx
mov ecx, 0xbab25ff
xor ecx, 0xa0398336
cmp eax, ecx
jb 0x1400f7146
mov eax, dword [0x140251918]
mov ecx, dword [0x14025191c]
xor ecx, 0x91400b7e
or eax, ecx
xor eax, 0xb22e3ecb
imul eax, eax, 0xae872a28
imul eax, eax, 0x44c11861
cmp eax, 0xbc449b10
je 0x1400f7108
mov al, byte [rsp + 0x2f]
and al, 1
movzx eax, al
add rsp, 0x58
ret
movabs byte [0xffffffb9e931299f], al
Function at 0x140108d50
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rsi
sub rsp, 0xa8
lea rbp, [rsp + 0x80]
mov qword [rbp - 0x10], rcx
mov eax, 0x10
call fcn.14024abd0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x18], rax
sub rsp, 0x20
call fcn.1401089cf
mov rcx, qword [rbp - 0x10]
add rsp, 0x20
mov qword [rbp - 8], rax
mov rax, qword [rcx + 8]
mov qword [rbp], rax
cmp rax, 0
je 0x140108df3
Function at 0x140113120
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x38
mov eax, dword [0x1402523b8]
xor eax, 0xd64d2ca6
mov r8d, dword [0x1402523bc]
mov ecx, 0xaf9cc709
xor ecx, 0x506338f6
mov r9d, r8d
xor r9d, ecx
mov edx, eax
and edx, r9d
mov ecx, eax
or ecx, r9d
mov r9d, 0x3e4a7513
xor r9d, 0xc1b58aec
xor ecx, r9d
imul ecx, edx
mov edx, eax
and edx, r8d
or eax, r8d
imul eax, edx
add eax, ecx
xor eax, 0x6b0c3e10
imul eax, eax, 0x5da75477
sub eax, 0x184b21f6
cmp eax, 0x197d996f
jb 0x140113205
mov eax, dword [0x1402523c0]
or eax, dword [0x1402523c4]
mov ecx, 0x365f07de
xor ecx, 0x714bc829
add eax, ecx
xor eax, 0x363dc65f
mov edx, 0xb8284685
xor edx, 0x99842643
mov ecx, 0xde5a9f54
xor ecx, 0x21a560ab
xor edx, ecx
mov ecx, eax
and ecx, edx
mov edx, eax
xor edx, 0x21ac60c6
add eax, edx
sub eax, ecx
mov dword [rsp + 0x2c], eax
mov rax, qword [0x1402649d0]
mov ecx, dword [rax]
call fcn.140008923
mov rcx, rax
mov eax, dword [rsp + 0x2c]
mov qword [rsp + 0x30], rcx
cmp eax, 0x4c7c850b
je 0x14011318c
mov rax, qword [rsp + 0x30]
add rsp, 0x38
ret
or esp, esp
lodsb al, byte [rsi]
jmp 0x14011318c
Function at 0x140113210
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x118
movss dword [rsp + 0x34], xmm3
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x48], rcx
call fcn.1401134f0
mov qword [rsp + 0x50], rax
movabs rcx, 0xb159d0fbd50e359f
movabs rax, 0xb159d0fbd50e3527
xor rcx, rax
movabs rdx, 0xd3f597b6e06b5988
movabs rax, 0xd3f597b6e06b5980
xor rdx, rax
call fcn.140012610
mov qword [rsp + 0x58], rax
call fcn.1401134f0
xor eax, eax
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x28], rax
cmp rax, 0x80
je 0x1401132cb
mov rcx, qword [rsp + 0x28]
mov byte [rsp + rcx + 0x98], 0
mov rax, rcx
and rax, 1
movabs rdx, 0xc28a4be4fa7039a
movabs r8, 0xc28a4be4fa7039b
xor rdx, r8
or rcx, rdx
add rax, rcx
mov qword [rsp + 0x60], rax
jmp 0x14011327a
mov rax, qword [rsp + 0x48]
mov rcx, qword [rax]
mov qword [rsp + 0x88], rcx
mov rax, qword [rax + 8]
mov qword [rsp + 0x90], rax
lea rcx, [rsp + 0x88]
lea rdx, [rsp + 0x98]
call fcn.140100b30
mov rax, qword [rsp + 0x50]
cmp byte [rax], 0
jne 0x1401134da
mov eax, dword [str.WXS]
xor eax, 0xf41c2613
xor edx, edx
div dword [0x1402523cc]
mov ecx, eax
and ecx, ecx
mov edx, 0x301bb9b3
xor edx, 0xcfe4464c
xor ecx, edx
mov edx, 0x2e20e16f
xor edx, 0x9c3286ef
and ecx, edx
mov edx, 0xd5796dfe
xor edx, 0x2a869201
xor ecx, edx
mov edx, 0xb2126780
and edx, 0xb2126780
mov r8d, 0x4ce38a57
xor r8d, 0xb31c75a8
xor edx, r8d
and eax, edx
xor eax, 0xffffffff
xor ecx, 0xffffffff
xor eax, 0xffffffff
or ecx, eax
mov eax, ecx
and eax, eax
xor eax, 0xffffffff
xor eax, 0xffffffff
mov edx, 0xa7ae61b0
xor edx, 0x2267f99
mov r8d, 0xee1fd6e3
xor r8d, 0x11e0291c
xor edx, r8d
or eax, edx
mov edx, 0xa5881e29
and edx, 0xa5881e29
xor edx, 0xffffffff
and ecx, edx
mov edx, 0x12cd0b15
xor edx, 0xed32f4ea
xor ecx, edx
and eax, ecx
xor eax, 0xffffffff
mov ecx, 0x25dd2a05
xor edx, edx
div ecx
cmp eax, 0xaeec20ea
jae 0x1401134e7
mov rcx, qword [rsp + 0x58]
mov edx, dword [0x1402523d0]
imul edx, dword [0x1402523d4]
mov r8d, 0xbd7ffbc6
xor r8d, 0x42800439
mov eax, edx
xor eax, r8d
and eax, 0x7cdf94d7
mov r8d, 0x76a715b5
xor r8d, 0xa788162
mov r9d, 0x9b485d03
xor r9d, 0x64b7a2fc
xor r8d, r9d
and edx, r8d
or eax, edx
sub eax, 0xd837514f
sub eax, 0xe57954b
add eax, 0xd837514f
sub eax, 0xb6101cc5
mov dword [rsp + 0x20], eax
lea rdx, [rsp + 0x98]
call fcn.1400fd2e0
mov rcx, qword [rsp + 0x50]
mov eax, dword [rsp + 0x20]
cmp byte [rcx], 0
sete cl
mov byte [rsp + 0x27], cl
cmp eax, 0x12679833
jb 0x1401133cd
mov al, byte [rsp + 0x27]
test al, 1
jne 0x14011346c
jmp 0x1401134da
mov rcx, qword [rsp + 0x58]
mov rax, qword [rsp + 0x40]
add rcx, 0x98
mov rdx, qword [rax]
mov qword [rsp + 0x78], rdx
mov rax, qword [rax + 8]
mov qword [rsp + 0x80], rax
lea rdx, [rsp + 0x78]
call fcn.140018a3d
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x58]
add rcx, 0x80
mov rdx, qword [rax]
mov qword [rsp + 0x68], rdx
mov rax, qword [rax + 8]
mov qword [rsp + 0x70], rax
lea rdx, [rsp + 0x68]
call fcn.1400605c0
movss xmm0, dword [rsp + 0x34]
mov rax, qword [rsp + 0x58]
movss dword [rax + 0x90], xmm0
mov rax, qword [rsp + 0x58]
add rsp, 0x118
ret
ret 0x8d5e
Function at 0x140115820
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Parse credit card information

Disassembly:
push rsi
sub rsp, 0xdd0
call fcn.140115760
mov qword [rsp + 0xdc0], rax
mov eax, 0xef5504ad
mov dword [rsp + 0xdcc], eax
Function at 0x14012c090
Capabilities:
Get thread local storage value

Disassembly:
sub rsp, 0x58
mov qword [rsp + 0x50], rcx
mov eax, dword [0x140253010]
and eax, dword [0x140253014]
and eax, eax
xor eax, 0xffffffff
mov ecx, 0xd50e359f
xor ecx, 0x38dfe20d
mov edx, 0xe06b5988
xor edx, 0xdba8e1a
and ecx, edx
xor ecx, 0xffffffff
xor eax, 0xffffffff
xor ecx, 0xffffffff
or eax, ecx
sub eax, 0x60d27efb
mov ecx, 0x4fa7039a
xor ecx, 0x4fa7039a
mov edx, 0xa828b725
xor edx, 0x3acd9359
sub ecx, edx
sub eax, ecx
cmp eax, 0x31299fa2
ja 0x14012c2ff
mov eax, dword [0x140253018]
mov ecx, 0x1109a35b
xor ecx, 0x3e5f82fd
xor eax, ecx
or eax, dword [0x14025301c]
mov ecx, eax
and ecx, 0xe81f21c9
mov edx, 0xe6b72206
xor edx, 0xea803cf
xor eax, edx
or ecx, eax
mov eax, ecx
and eax, eax
mov edx, 0xbd73e070
xor edx, 0x428c1f8f
xor eax, edx
mov edx, 0x94ad90dd
xor edx, 0x2683ae16
and eax, edx
mov edx, 0x4ce38a57
xor edx, 0xb31c75a8
xor eax, edx
mov edx, 0xffffffff
xor edx, 0xb22e3ecb
mov r8d, 0xffffffff
xor r8d, 0xb22e3ecb
or edx, r8d
xor ecx, 0xffffffff
xor edx, 0xffffffff
or ecx, edx
xor eax, 0xffffffff
xor ecx, 0xffffffff
or eax, ecx
imul eax, eax, 0xae872a28
mov dword [rsp + 0x48], eax
call fcn.14012c308
mov rcx, qword [rsp + 0x50]
mov eax, dword [rsp + 0x48]
cmp rcx, 0
sete cl
mov byte [rsp + 0x4f], cl
cmp eax, 0x4e63c78e
je 0x14012c0f7
mov cl, byte [rsp + 0x4f]
xor eax, eax
test cl, 1
mov byte [rsp + 0x47], al
jne 0x14012c2ec
jmp 0x14012c1c3
mov rax, qword [rsp + 0x50]
mov rcx, rax
add rcx, 0xfffffffffffffff0
mov qword [rsp + 0x30], rcx
mov rax, qword [rax - 0x10]
mov qword [rsp + 0x38], rax
cmp rax, 0x10
setb cl
mov byte [rsp + 0x45], cl
mov al, 1
test cl, 1
mov byte [rsp + 0x46], al
jne 0x14012c2c1
mov r8, qword [rsp + 0x38]
movabs rcx, 0xff236017d3e391ba
mov rax, r8
add rax, rcx
add rax, 0xfffffffffffffff0
movabs rcx, 0xff236017d3e391ba
sub rax, rcx
mov qword [rsp + 0x28], rax
mov rcx, rax
or rcx, rcx
movabs rdx, 0x839e72c1bd7ffbc6
movabs r9, 0x7c618d3e42800439
xor rdx, r9
xor rcx, rdx
mov rdx, r8
xor rdx, 0xffffffffffffffff
movabs r10, 0xe6f0e7b76a715b5
movabs r9, 0xf190f1848958ea4a
xor r10, r9
mov r9, r8
xor r9, r10
and rdx, r9
or rcx, rdx
xor rcx, 0xffffffffffffffff
mov rdx, rax
or rdx, r8
xor rdx, 0xffffffffffffffff
or rcx, rdx
xor rcx, 0xffffffffffffffff
cmp rcx, 0
setl cl
cmp rax, 0xffffffffffffffff
setg al
and al, cl
test al, 1
jne 0x14012c29e
jmp 0x14012c2ae
call fcn.140008c92
xor eax, eax
mov byte [rsp + 0x47], al
jmp 0x14012c2ec
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x28]
mov qword [rax], rcx
xor eax, eax
mov byte [rsp + 0x46], al
mov rdx, qword [rsp + 0x30]
mov cl, byte [rsp + 0x45]
mov rax, qword [rsp + 0x50]
mov r8b, byte [rsp + 0x46]
mov byte [rsp + 0x27], r8b
mov r8, qword [rax]
and cl, 1
call fcn.14000fe77
mov al, byte [rsp + 0x27]
mov byte [rsp + 0x47], al
mov al, byte [rsp + 0x47]
cmp al, 0
setne al
and al, 1
movzx eax, al
add rsp, 0x58
ret
movabs eax, dword [0xfffffdefe9a03b7c]