joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140095710
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x30], rcx
mov rax, qword [0x1402c6150]
mov ecx, dword [rax]
call fcn.14000eaf8
cmp byte [rax + 0x60], 0
jne 0x1400957d6
mov ecx, dword [0x1402abe78]
xor ecx, 0x7ba86bb6
or ecx, dword [0x1402abe7c]
mov edx, ecx
xor edx, 0xffffffff
mov eax, 0x49a823ab
xor eax, 0x4f103b9d
and eax, edx
mov edx, 0xffffffff
xor edx, 0x6b81836
and ecx, edx
or eax, ecx
imul eax, eax, 0x4f4f949d
mov ecx, 0x51b5e225
xor ecx, 0xd0493c36
xor edx, edx
div ecx
cmp eax, 0x12ca73ac
je 0x1400957db
mov rcx, qword [rsp + 0x30]
mov eax, dword [0x1402abe80]
xor edx, edx
div dword [0x1402abe84]
imul eax, eax, 0xd696ae07
mov r8d, 0xfadcfba4
xor edx, edx
div r8d
mov rdx, qword [rsp + 0x28]
xor eax, 0xb5bbec27
mov dword [rsp + 0x24], eax
bswap rdx
call fcn.140051619
mov eax, dword [rsp + 0x24]
cmp eax, 0x3ff6290d
jb 0x140095788
jmp 0x1400957d6
add rsp, 0x38
ret
xchg ebx, eax
mov cl, dl
jmp 0x140095788
Function at 0x140096250
Capabilities:
Encode data using xor

Disassembly:
push rbp
sub rsp, 0x50
lea rbp, [rsp + 0x50]
mov qword [rbp - 0x18], rdx
mov qword [rbp - 0x10], rcx
mov qword [rbp - 8], rcx
mov eax, dword [0x1402abed8]
mov ecx, 0x77e697de
xor ecx, 0x196f0b76
xor eax, ecx
mov edx, dword [0x1402abedc]
mov ecx, eax
and ecx, edx
xor eax, edx
or ecx, eax
mov edx, ecx
xor edx, 0x3a46ce22
mov eax, 0xae628b6e
xor eax, 0x519d7491
xor edx, eax
and edx, 0x3a46ce22
mov eax, 0xaeacddc4
xor eax, 0xaeacddc6
imul eax, edx
mov edx, 0x9735703a
xor edx, 0xad73be18
sub eax, edx
sub ecx, eax
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, 0xdfce3341
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov edx, 0xffffffff
xor edx, 0x3990c71a
mov eax, ecx
xor eax, edx
and eax, ecx
cmp eax, 0xce18206b
ja 0x14009645e
mov ecx, dword [0x1402abee0]
xor ecx, 0xd9ea943a
mov eax, dword [0x1402abee4]
xor eax, 0x36616f88
add ecx, eax
mov eax, ecx
and eax, 0xabab0d3d
xor eax, 0x83080529
and ecx, 0x83080529
or eax, ecx
add eax, 0x9197362b
mov dword [rbp - 0x2c], eax
mov eax, 0x10
call fcn.1402a7dd0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x48], rax
mov rax, qword [0x1402c6150]
mov ecx, dword [rax]
sub rsp, 0x20
call fcn.14000eaf8
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp - 0x10]
mov qword [rbp - 0x38], rcx
add rcx, 0x60
mov qword [rbp - 0x40], rcx
mov qword [rax], 0
mov qword [rax + 8], 0
mov ecx, 8
sub rsp, 0x20
call fcn.140094410
mov rcx, qword [rbp - 0x38]
add rsp, 0x20
mov rdx, rax
mov eax, dword [rbp - 0x2c]
mov qword [rbp - 0x28], rdx
cmp byte [rcx + 0x60], 0
sete cl
mov byte [rbp - 0x19], cl
cmp eax, 0x2f89c5e3
jbe 0x1400962eb
mov cl, byte [rbp - 0x19]
mov al, 1
test cl, 1
mov byte [rbp - 0x49], al
jne 0x1400963b7
jmp 0x14009641d
mov rax, qword [0x1402c6150]
mov ecx, dword [rax]
sub rsp, 0x20
call fcn.14000eaf8
mov rcx, qword [rbp - 0x28]
mov rdx, qword [rbp - 0x18]
call fcn.1400961b6
mov rcx, qword [rbp - 0x40]
add rsp, 0x20
mov al, 1
cmp byte [rcx], 0
mov byte [rbp - 0x49], al
jne 0x14009641d
mov rdx, qword [rbp - 0x48]
mov rcx, qword [rbp - 0x10]
mov rax, qword [rbp - 0x28]
mov r8, qword [rax + 0x58]
mov qword [rdx], r8
mov rax, qword [rax + 0x60]
mov qword [rdx + 8], rax
sub rsp, 0x20
call fcn.140030ffb
mov rax, qword [rbp - 0x40]
add rsp, 0x20
mov al, byte [rax]
mov byte [rbp - 0x49], al
mov rax, qword [rbp - 0x40]
mov rcx, qword [rbp - 0x28]
mov dl, byte [rbp - 0x49]
mov byte [rbp - 0x4a], dl
mov dl, 0x1c
xor dl, 0x1c
mov byte [rax], dl
sub rsp, 0x20
call fcn.140093eeb
mov rax, qword [rbp - 0x40]
add rsp, 0x20
cmp byte [rax], 0
jne 0x140096455
mov rax, qword [rbp - 0x40]
mov cl, byte [rbp - 0x4a]
mov byte [rax], cl
mov rax, qword [rbp - 8]
mov rsp, rbp
pop rbp
ret
invalid
Function at 0x1400980e0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x88
mov qword [rsp + 0x60], rcx
mov rax, qword [0x1402c6150]
mov ecx, dword [rax]
call fcn.14000eaf8
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x70], rax
add rax, 0x60
mov qword [rsp + 0x68], rax
call fcn.140051859
mov rcx, qword [rsp + 0x70]
mov byte [rsp + 0x7f], al
xor eax, eax
cmp byte [rcx + 0x60], 0
mov qword [rsp + 0x80], rax
jne 0x14009841a
mov dl, byte [rsp + 0x7f]
cmp dl, 0xe0
setb cl
movsx rax, dl
mov qword [rsp + 0x50], rax
movabs r8, 0xbb5f7a612ecb9421
movabs r9, 0xbb5f7a612ecb9421
xor r8, r9
cmp dl, 0xe0
mov rdx, rax
cmovb rdx, r8
mov qword [rsp + 0x58], rdx
test cl, 1
mov qword [rsp + 0x80], rax
jne 0x14009817e
jmp 0x14009841a
mov rax, qword [rsp + 0x50]
mov r8, qword [rsp + 0x58]
mov dl, byte [rsp + 0x7f]
mov r9b, 0x91
xor r9b, 0x91
cmp dl, r9b
setl cl
cmp dl, r9b
mov rdx, rax
cmovl rdx, r8
mov qword [rsp + 0x48], rdx
test cl, 1
mov qword [rsp + 0x80], rax
jne 0x1400981be
jmp 0x14009841a
mov al, byte [rsp + 0x7f]
add al, 0x34
movzx ecx, al
mov qword [rsp + 0x40], rcx
sub al, 7
ja 0x14009839d
mov rax, qword [rsp + 0x40]
lea rcx, [0x1400984ac]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
lea rcx, [0x1402c2598]
call fcn.140096d14
mov rcx, qword [rsp + 0x68]
mov rdx, rax
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x30], rdx
mov cl, byte [rcx]
mov dl, 1
xor dl, 1
cmp cl, dl
mov qword [rsp + 0x80], rax
jne 0x14009841a
mov rcx, qword [rsp + 0x30]
movabs rax, 0x57c9d2b470917f28
movabs rdx, 0x57c9d2b46dc9ad22
xor rax, rdx
lea rdx, [0x1402c24e5]
lea r8, [0x1402c2524]
lea r9, [0x1402c24d5]
mov qword [rsp + 0x20], rax
call fcn.140025a43
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x28], rax
mov eax, dword [0x1402abfb8]
mov ecx, dword [0x1402abfbc]
xor ecx, 0xffffffff
xor edx, edx
sub edx, 1
sub ecx, edx
sub eax, ecx
or eax, 0x7ec08dfd
imul eax, eax, 0xfcc916b3
mov ecx, 0x202e77f6
xor edx, edx
div ecx
cmp eax, 0xfb052b15
je 0x1400984a1
mov eax, dword [0x1402abfc0]
or eax, dword [0x1402abfc4]
mov ecx, 0x9e0a8ed0
xor ecx, 0xb09dc82e
sub eax, ecx
sub eax, 0xd5eb312a
add eax, 0x6b9a3d71
mov ecx, 0x63e8a8f7
xor ecx, 0x8c8b3d57
cmp eax, ecx
ja 0x14009845e
mov rax, qword [rsp + 0x28]
add rsp, 0x88
ret
lodsb al, byte [rsi]
xchg dword [rdi + 0x71], edx
jmp 0x14009845e
Function at 0x140099e40
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x48
mov qword [rsp + 0x30], rcx
mov rax, qword [0x1402c6150]
mov ecx, dword [rax]
call fcn.14000eaf8
mov rcx, qword [rsp + 0x30]
mov qword [rsp + 0x38], rax
call fcn.1400980e0
mov rcx, rax
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x40], rcx
cmp byte [rax + 0x60], 0
jne 0x140099f41
mov eax, dword [0x1402ac068]
and eax, dword [0x1402ac06c]
mov ecx, 0x5638bfb3
xor edx, edx
div ecx
mov ecx, 0x8bdca80
xor edx, edx
div ecx
mov ecx, 0xe78af5ed
xor ecx, 0xd17cdcb1
and eax, ecx
cmp eax, 0x87cc64cb
jae 0x140099f4a
mov rcx, qword [rsp + 0x40]
mov eax, dword [0x1402ac070]
mov edx, dword [0x1402ac074]
xor edx, 0x7c9deaba
sub eax, edx
mov edx, 0x191152e
xor edx, 0xab51d468
and eax, edx
mov edx, 0x419130dc
xor edx, 0xe582e0aa
add eax, edx
mov r8d, 0xa6c604e8
xor r8d, 0x5277091e
xor edx, edx
div r8d
cmp rcx, 1
seta cl
mov byte [rsp + 0x2f], cl
cmp eax, 0x1fbcd32a
ja 0x140099eb3
mov al, byte [rsp + 0x2f]
test al, 1
jne 0x140099f1f
jmp 0x140099f38
mov rcx, qword [rsp + 0x40]
xor eax, eax
mov edx, eax
mov r8d, 1
call fcn.140018506
jmp 0x140099f41
mov rax, qword [rsp + 0x40]
mov byte [rsp + 0x2e], al
mov al, byte [rsp + 0x2e]
add rsp, 0x48
ret
push 0xffffffffe9b2ac98
invalid
Function at 0x1400a20d0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x78
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x60], rcx
mov rax, qword [0x1402c6150]
mov ecx, dword [rax]
call fcn.14000eaf8
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x70], rax
add rax, 0x60
mov qword [rsp + 0x68], rax
mov rdx, qword [rdx]
call fcn.140094700
mov rax, qword [rsp + 0x70]
cmp byte [rax + 0x60], 0
jne 0x1400a2350
mov rax, qword [rsp + 0x58]
mov rcx, qword [rax]
movabs rdx, 0x8508bc0f19cd6cd7
movabs rax, 0x7af743f0e6329328
xor rdx, rax
Function at 0x1400a3330
Capabilities:
Encode data using xor

Disassembly:
push rbp
sub rsp, 0x50
lea rbp, [rsp + 0x50]
mov qword [rbp - 0x40], rdx
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x38], rcx
mov eax, 0x10
call fcn.1402a7dd0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x30], rax
mov rax, qword [0x1402c6150]
mov ecx, dword [rax]
sub rsp, 0x20
call fcn.14000eaf8
mov rcx, qword [rbp - 0x28]
add rsp, 0x20
mov qword [rbp - 0x18], rax
add rax, 0x60
mov qword [rbp - 0x20], rax
mov qword [rcx], 0
mov qword [rcx + 8], 0
movabs rcx, 0x2a50cd27fbf1fa6e
movabs rax, 0x2a50cd27fbf1fa66
xor rcx, rax
sub rsp, 0x20
call fcn.140094410
mov rcx, qword [rbp - 0x18]
add rsp, 0x20
mov qword [rbp - 0x10], rax
mov al, 1
cmp byte [rcx + 0x60], 0
mov byte [rbp - 1], al
jne 0x1400a3430
mov rax, qword [0x1402c6150]
mov ecx, dword [rax]
sub rsp, 0x20
call fcn.14000eaf8
mov rcx, qword [rbp - 0x10]
mov rdx, qword [rbp - 0x40]
call fcn.1400a30a0
mov rcx, qword [rbp - 0x20]
add rsp, 0x20
mov al, 1
cmp byte [rcx], 0
mov byte [rbp - 1], al
jne 0x1400a3430
mov rdx, qword [rbp - 0x30]
mov rcx, qword [rbp - 0x28]
mov rax, qword [rbp - 0x10]
mov r8, qword [rax + 0x58]
mov qword [rdx], r8
mov rax, qword [rax + 0x60]
mov qword [rdx + 8], rax
sub rsp, 0x20
call fcn.140030ffb
mov rax, qword [rbp - 0x20]
add rsp, 0x20
mov al, byte [rax]
mov byte [rbp - 1], al
mov al, byte [rbp - 1]
mov byte [rbp - 0x41], al
mov eax, dword [0x1402ac448]
xor eax, 0xd086f8b9
mov r8d, dword [0x1402ac44c]
xor r8d, 0xf6704bbb
mov r9d, r8d
xor r9d, 0xffffffff
mov edx, eax
and edx, r9d
mov ecx, eax
or ecx, r9d
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, r8d
or eax, r8d
imul eax, edx
add eax, ecx
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0x6b8e123
mov edx, 0xffffffff
xor edx, 0x6b8e123
and eax, edx
or ecx, eax
mov eax, ecx
xor eax, 0xffffffff
mov edx, ecx
xor edx, 0xffffffff
and eax, edx
mov edx, 0xac62d1c0
xor edx, 0x5ad0d2c2
mov r8d, 0x463437b2
xor r8d, 0xb08634b0
or edx, r8d
xor edx, 0xffffffff
mov r8d, 0xc76918d5
xor r8d, 0x3896e72a
xor eax, r8d
mov r8d, 0x50ee5fe3
xor r8d, 0xaf11a01c
xor edx, r8d
and eax, edx
xor ecx, 0xffffffff
mov edx, 0xffffffff
xor edx, 0xf6b20302
and ecx, edx
or eax, ecx
xor eax, 0xffffffff
mov ecx, 0xb1dce3d0
xor edx, edx
div ecx
cmp eax, 0x19540f14
jae 0x1400a3583
mov rax, qword [rbp - 0x20]
mov rcx, qword [rbp - 0x10]
mov edx, dword [0x1402ac450]
mov r8d, dword [0x1402ac454]
xor r8d, 0x96e6e3b0
add edx, r8d
imul edx, edx, 0x385d0661
or edx, 0x5276f812
sub edx, 0x1ab4d51f
mov dword [rbp - 0x48], edx
mov byte [rax], 0
sub rsp, 0x20
call fcn.140093eeb
mov rcx, qword [rbp - 0x20]
mov eax, dword [rbp - 0x48]
add rsp, 0x20
cmp byte [rcx], 0
sete cl
mov byte [rbp - 0x42], cl
cmp eax, 0xcee7f906
jb 0x1400a3502
mov al, byte [rbp - 0x42]
test al, 1
jne 0x1400a3571
jmp 0x1400a357a
mov rax, qword [rbp - 0x20]
mov cl, byte [rbp - 0x41]
mov byte [rax], cl
mov rax, qword [rbp - 0x38]
mov rsp, rbp
pop rbp
ret
lea r9d, [rdx]
retf
Function at 0x1400a3a30
Capabilities:
Encode data using xor

Disassembly:
push rbp
sub rsp, 0x50
lea rbp, [rsp + 0x50]
mov qword [rbp - 0x18], rdx
mov qword [rbp - 0x10], rcx
mov qword [rbp - 8], rcx
mov eax, dword [0x1402ac468]
xor eax, 0x7e4848af
and eax, dword [0x1402ac46c]
imul eax, eax, 0x3f1f8104
mov r8d, 0x796f0d4b
xor r8d, 0x37caffd5
mov ecx, 0x9839aa92
xor ecx, 0x67c6556d
xor r8d, ecx
mov edx, eax
and edx, r8d
mov ecx, eax
or ecx, r8d
mov r8d, 0xecbe9a40
xor r8d, 0x134165bf
xor ecx, r8d
imul ecx, edx
mov r8d, 0xa6828212
xor r8d, 0xe827708c
mov edx, eax
and edx, r8d
or eax, 0x4ea5f29e
imul eax, edx
add eax, ecx
imul eax, eax, 0x87d9fc1c
cmp eax, 0x4b75c6d7
jae 0x1400a3c43
mov ecx, dword [0x1402ac470]
mov edx, dword [0x1402ac474]
xor edx, 0x1879e203
mov eax, ecx
mov ecx, edx
lea eax, [rax + rcx - 0x32a4b99f]
mov ecx, eax
xor ecx, 0x70418185
or eax, 0x8fbe7e7a
and eax, ecx
mov dword [rbp - 0x2c], eax
mov eax, 0x10
call fcn.1402a7dd0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x48], rax
mov rax, qword [0x1402c6150]
mov ecx, dword [rax]
sub rsp, 0x20
call fcn.14000eaf8
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp - 0x10]
mov qword [rbp - 0x38], rcx
add rcx, 0x60
mov qword [rbp - 0x40], rcx
mov qword [rax], 0
mov qword [rax + 8], 0
movabs rcx, 0x6b17a1a48e62168f
movabs rax, 0x6b17a1a48e621687
xor rcx, rax
sub rsp, 0x20
call fcn.140094410
mov rcx, qword [rbp - 0x38]
add rsp, 0x20
mov rdx, rax
mov eax, dword [rbp - 0x2c]
mov qword [rbp - 0x28], rdx
cmp byte [rcx + 0x60], 0
sete cl
mov byte [rbp - 0x19], cl
cmp eax, 0x686f8629
je 0x1400a3ac2
mov cl, byte [rbp - 0x19]
mov al, 1
test cl, 1
mov byte [rbp - 0x49], al
jne 0x1400a3b9a
jmp 0x1400a3c06
mov rax, qword [0x1402c6150]
mov ecx, dword [rax]
sub rsp, 0x20
call fcn.14000eaf8
mov rcx, qword [rbp - 0x28]
mov rdx, qword [rbp - 0x18]
call fcn.1400a3953
mov rax, qword [rbp - 0x40]
add rsp, 0x20
mov cl, byte [rax]
mov dl, 0x6c
xor dl, 0x6c
mov al, 1
cmp cl, dl
mov byte [rbp - 0x49], al
jne 0x1400a3c06
mov rdx, qword [rbp - 0x48]
mov rcx, qword [rbp - 0x10]
mov rax, qword [rbp - 0x28]
mov r8, qword [rax + 0x58]
mov qword [rdx], r8
mov rax, qword [rax + 0x60]
mov qword [rdx + 8], rax
sub rsp, 0x20
call fcn.140030ffb
mov rax, qword [rbp - 0x40]
add rsp, 0x20
mov al, byte [rax]
mov byte [rbp - 0x49], al
mov rax, qword [rbp - 0x40]
mov rcx, qword [rbp - 0x28]
mov dl, byte [rbp - 0x49]
mov byte [rbp - 0x4a], dl
mov byte [rax], 0
sub rsp, 0x20
call fcn.140093eeb
mov rax, qword [rbp - 0x40]
add rsp, 0x20
cmp byte [rax], 0
jne 0x1400a3c3a
mov rax, qword [rbp - 0x40]
mov cl, byte [rbp - 0x4a]
mov byte [rax], cl
mov rax, qword [rbp - 8]
mov rsp, rbp
pop rbp
ret
dec byte [rax]
out dx, al
invalid
Function at 0x1400a4630
Capabilities:
Encode data using xor

Disassembly:
push rbp
sub rsp, 0x50
lea rbp, [rsp + 0x50]
mov qword [rbp - 0x18], rdx
mov qword [rbp - 0x10], rcx
mov qword [rbp - 8], rcx
mov eax, dword [0x1402ac4b8]
mov ecx, dword [0x1402ac4bc]
mov edx, 0xfaedf578
xor edx, 0x4f2f223f
xor ecx, edx
and eax, ecx
mov ecx, 0x2b635f4f
xor ecx, 0x46506146
sub eax, ecx
mov ecx, 0x11f0d1d7
xor ecx, 0x401e219c
sub eax, ecx
add eax, 0xbba9517e
cmp eax, 0x9c2c9360
jae 0x1400a4806
mov ecx, dword [0x1402ac4c0]
mov edx, dword [0x1402ac4c4]
xor ecx, 0x559a5f58
not edx
mov eax, ecx
or eax, edx
and ecx, edx
not ecx
and eax, ecx
add eax, 0xf0f67d22
imul rax, rax, 0x31f45077
shr rax, 0x3d
imul eax, eax, 0x66cbedce
mov dword [rbp - 0x2c], eax
mov eax, 0x10
call fcn.1402a7dd0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x48], rax
mov rax, qword [0x1402c6150]
mov ecx, dword [rax]
sub rsp, 0x20
call fcn.14000eaf8
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp - 0x10]
mov qword [rbp - 0x38], rcx
add rcx, 0x60
mov qword [rbp - 0x40], rcx
mov qword [rax], 0
mov qword [rax + 8], 0
mov ecx, 8
sub rsp, 0x20
call fcn.140094410
mov rcx, qword [rbp - 0x38]
add rsp, 0x20
mov rdx, rax
mov eax, dword [rbp - 0x2c]
mov qword [rbp - 0x28], rdx
cmp byte [rcx + 0x60], 0
sete cl
mov byte [rbp - 0x19], cl
cmp eax, 0x1313a2f7
jbe 0x1400a468b
mov cl, byte [rbp - 0x19]
mov al, 1
test cl, 1
mov byte [rbp - 0x49], al
jne 0x1400a4759
jmp 0x1400a47c5
mov rax, qword [0x1402c6150]
mov ecx, dword [rax]
sub rsp, 0x20
call fcn.14000eaf8
mov rcx, qword [rbp - 0x28]
mov rdx, qword [rbp - 0x18]
call fcn.1400a44e0
mov rax, qword [rbp - 0x40]
add rsp, 0x20
mov cl, byte [rax]
mov dl, 0xad
xor dl, 0xad
mov al, 1
cmp cl, dl
mov byte [rbp - 0x49], al
jne 0x1400a47c5
mov rdx, qword [rbp - 0x48]
mov rcx, qword [rbp - 0x10]
mov rax, qword [rbp - 0x28]
mov r8, qword [rax + 0x58]
mov qword [rdx], r8
mov rax, qword [rax + 0x60]
mov qword [rdx + 8], rax
sub rsp, 0x20
call fcn.140030ffb
mov rax, qword [rbp - 0x40]
add rsp, 0x20
mov al, byte [rax]
mov byte [rbp - 0x49], al
mov rax, qword [rbp - 0x40]
mov rcx, qword [rbp - 0x28]
mov dl, byte [rbp - 0x49]
mov byte [rbp - 0x4a], dl
mov dl, 0x10
xor dl, 0x10
mov byte [rax], dl
sub rsp, 0x20
call fcn.140093eeb
mov rax, qword [rbp - 0x40]
add rsp, 0x20
cmp byte [rax], 0
jne 0x1400a47fd
mov rax, qword [rbp - 0x40]
mov cl, byte [rbp - 0x4a]
mov byte [rax], cl
mov rax, qword [rbp - 8]
mov rsp, rbp
pop rbp
ret
test al, 0x71
pop rcx
push 0xfffffffffffe7ce9
call qword [rax - 0x137cb7ab]
push rbp
sub rsp, 0x30
lea rbp, [rsp + 0x30]
Function at 0x1400a6500
Capabilities:
Encode data using xor

Disassembly:
push rbp
sub rsp, 0x30
lea rbp, [rsp + 0x30]
mov qword [rbp - 0x28], rdx
mov qword [rbp - 0x18], rcx
mov eax, 0x10
call fcn.1402a7dd0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x20], rax
mov rax, qword [0x1402c6150]
mov ecx, dword [rax]
sub rsp, 0x20
call fcn.14000eaf8
mov rcx, qword [rbp - 0x18]
add rsp, 0x20
mov qword [rbp - 8], rax
add rax, 0x60
mov qword [rbp - 0x10], rax
movabs rdx, 0xc4e68b28f25dc20b
movabs rax, 0xc4e68b28f25dc209
xor rdx, rax
sub rsp, 0x20
call fcn.140094700
mov rax, qword [rbp - 8]
add rsp, 0x20
cmp byte [rax + 0x60], 0
jne 0x1400a6657
mov ecx, dword [0x1402ac5c8]
add ecx, dword [0x1402ac5cc]
mov eax, ecx
add eax, 1
mov edx, 0x5634d434
xor edx, 0xa9cb2bcb
xor ecx, edx
or ecx, 0x44756c09
add ecx, eax
xor ecx, 0x95c709cb
mov eax, ecx
and eax, 0xb248b3e0
xor ecx, 0xb248b3e0
or eax, ecx
cmp eax, 0x294ba18f
jb 0x1400a665c
mov rcx, qword [rbp - 0x18]
mov rax, qword [rbp - 0x28]
mov edx, dword [0x1402ac5d0]
imul edx, dword [0x1402ac5d4]
add edx, 0x9b83b2da
sub edx, 0x38e1d87c
add edx, 0x2df75e5f
mov dword [rbp - 0x30], edx
mov rdx, qword [rax]
sub rsp, 0x20
call fcn.14009eda0
mov rcx, qword [rbp - 0x10]
mov eax, dword [rbp - 0x30]
add rsp, 0x20
mov cl, byte [rcx]
mov dl, 0xa9
xor dl, 0xa9
cmp cl, dl
sete cl
mov byte [rbp - 0x29], cl
cmp eax, 0x25fd67c2
jbe 0x1400a65c4
mov al, byte [rbp - 0x29]
test al, 1
jne 0x1400a662f
jmp 0x1400a6657
mov rdx, qword [rbp - 0x20]
mov rcx, qword [rbp - 0x18]
mov rax, qword [rbp - 0x28]
mov r8, qword [rax + 8]
mov qword [rdx], r8
mov rax, qword [rax + 0x10]
mov qword [rdx + 8], rax
sub rsp, 0x20
call fcn.14009f810
add rsp, 0x20
mov rsp, rbp
pop rbp
ret
sbb ebp, dword [rsi - 0x7b]
jmp 0x1400a65c4
Function at 0x1400aa000
Capabilities:
Encode data using xor

Disassembly:
push rbp
sub rsp, 0x380
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x240], rdx
mov qword [rbp + 0x230], rcx
mov eax, 0x10
call fcn.1402a7dd0
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x238], rax
mov rax, qword [0x1402c6150]
Function at 0x1400d9a03
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x58
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x40], rcx
mov rax, qword [0x1402c6150]
mov ecx, dword [rax]
call fcn.14000eaf8
mov qword [rsp + 0x48], rax
mov rax, qword [0x1402c6150]
mov ecx, dword [rax]
call fcn.14000eaf8
xor eax, eax
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x38]
xorps xmm0, xmm0
movups xmmword [rcx + rax], xmm0
movabs rcx, 0x47ec67af4f81e4c7
movabs rdx, 0x4bb3d1bce3f54a7d
xor rcx, rdx
sub rax, rcx
add rax, 0x10
movabs rcx, 0xc30910f61890b75
movabs rdx, 0x6f271ccdfda5cf
xor rcx, rdx
add rax, rcx
cmp rax, 0x30
mov qword [rsp + 0x50], rax
jne 0x1400d9a39
mov rcx, qword [rsp + 0x40]
call fcn.140051e20
mov rcx, rax
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x30], rcx
cmp byte [rax + 0x60], 0
jne 0x1400d9b6f
mov rdx, qword [rsp + 0x30]
movabs rcx, 0x4944681820a2fd9e
movabs rax, 0xb6bb97e7df5d0261
xor rcx, rax
mov rax, rdx
add rax, rcx
mov qword [rsp + 0x28], rax
mov rcx, rax
xor rcx, rdx
cmp rcx, 0
setl cl
cmp rax, 0xffffffffffffffff
setg al
and al, cl
test al, 1
jne 0x1400d9afc
jmp 0x1400d9b06
call fcn.14000ee80
jmp 0x1400d9b6f
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x28]
mov qword [rcx + 0x28], rdx
cmp rax, 0
jge 0x1400d9b60
mov rcx, qword [rsp + 0x30]
movabs rdx, 0x25abd6ee29389638
movabs rax, 0x25abd6ee29389638
xor rdx, rax
movabs r8, 0x162d84ff1ca150c2
movabs rax, 0x69d27b00e35eaf3d
xor r8, rax
call fcn.140018506
jmp 0x1400d9b6f
mov rdx, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
call fcn.140036f26
nop
add rsp, 0x58
ret
Function at 0x1401054e5
Capabilities:
Get thread local storage value

Disassembly:
sub rsp, 0x28
mov rax, qword [0x1402c6150]
mov ecx, dword [rax]
call fcn.14000eaf8
mov rcx, rax
add rcx, 0x10
mov rax, qword [rax + 0x10]
mov rdx, qword [rax + 0x38]
xor eax, eax
mov r8b, al
add rsp, 0x28
jmp fcn.140024f90
Function at 0x14011a176
Capabilities:
Get thread local storage value

Disassembly:
sub rsp, 0x28
mov rax, qword [0x1402c6150]
mov ecx, dword [rax]
call fcn.14000eaf8
mov rcx, rax
add rcx, 0x10
mov rax, qword [rax + 0x10]
mov rdx, qword [rax + 0x38]
xor eax, eax
mov r8b, al
add rsp, 0x28
jmp fcn.140024f90
Function at 0x140145ae2
Capabilities:
Get thread local storage value

Disassembly:
sub rsp, 0x28
mov rax, qword [0x1402c6150]
mov ecx, dword [rax]
call fcn.14000eaf8
mov rcx, rax
add rcx, 0x10
mov rax, qword [rax + 0x10]
mov rdx, qword [rax + 0x38]
xor eax, eax
mov r8b, al
add rsp, 0x28
jmp fcn.140024f90
Function at 0x140168d20
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x48
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x40], rcx
mov eax, dword [0x1402b13f8]
mov ecx, 0x995e85f7
xor ecx, 0xb8d258aa
xor eax, ecx
mov edx, dword [0x1402b13fc]
mov ecx, 0x93b194aa
xor ecx, 0x93b194aa
sub ecx, edx
sub eax, ecx
mov ecx, 0x16987e3b
xor edx, edx
div ecx
mov ecx, 0x935a565c
xor ecx, 0xd33a5ca8
xor edx, edx
div ecx
add eax, 0xd5bba6c4
add eax, 0x9591c8b4
sub eax, 0xd5bba6c4
mov ecx, 0x4a8d5a8b
xor ecx, 0x95b3f505
cmp eax, ecx
je 0x140168e23
mov eax, dword [0x1402b1400]
mov ecx, dword [0x1402b1404]
xor ecx, 0x47a69ae5
or eax, ecx
or eax, 0x258a6f44
or eax, 0xa45bf22e
xor eax, 0x1369cfa6
mov dword [rsp + 0x2c], eax
mov eax, 0xcfcdb269
xor eax, 0xdf167dff
mov dword [rsp + 0x28], eax
mov rax, qword [0x1402c6150]
mov ecx, dword [rax]
call fcn.14000eaf8
mov rcx, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x38]
movabs rax, 0x5538744535a6b3e7
movabs r8, 0x5538744535a6b3e7
xor rax, r8
mov qword [rdx], rax
mov qword [rdx + 8], 0
call fcn.140168830
mov ecx, dword [rsp + 0x28]
mov eax, dword [rsp + 0x2c]
cmp eax, ecx
jbe 0x140168d95
mov rax, qword [rsp + 0x40]
add rsp, 0x48
ret
test dword [0x1aa008001], 0xfffffff
invalid
Function at 0x140171e10
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x48
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x30], rcx
mov rax, qword [0x1402c6150]
mov ecx, dword [rax]
call fcn.14000eaf8
mov rcx, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x38]
mov qword [rsp + 0x40], rax
call fcn.140040af0
mov rax, qword [rsp + 0x40]
mov al, byte [rax + 0x60]
mov cl, 0x58
xor cl, 0x58
cmp al, cl
jne 0x140171f3e
mov rax, qword [rsp + 0x30]
mov r8, qword [rax]
movabs rcx, 0x42798b6c9afa873b
mov rax, r8
add rax, rcx
add rax, 0xffffffffffffffff
movabs rcx, 0x42798b6c9afa873b
sub rax, rcx
mov qword [rsp + 0x28], rax
mov rcx, rax
and rcx, rcx
xor rcx, 0xffffffffffffffff
movabs rdx, 0x1b74caeeff630d62
movabs r9, 0xe48b3511009cf29d
xor rdx, r9
xor rcx, rdx
movabs r9, 0x7a93c5c0bfecbb9a
movabs rdx, 0x856c3a3f40134465
xor r9, rdx
mov rdx, r8
xor rdx, r9
or rcx, rdx
and r8, r8
movabs rdx, 0xbd95d1704526fdaa
movabs r9, 0x426a2e8fbad90255
xor rdx, r9
xor r8, rdx
mov rdx, rax
xor rdx, 0xffffffffffffffff
xor r8, 0xffffffffffffffff
or rdx, r8
xor rcx, 0xffffffffffffffff
xor rdx, 0xffffffffffffffff
or rcx, rdx
cmp rcx, 0
setl dl
cmp rax, 0xffffffffffffffff
setg cl
xor dl, 0xff
mov al, cl
xor al, dl
and al, cl
test al, 1
jne 0x140171f21
jmp 0x140171f2b
call fcn.14000ee80
jmp 0x140171f3e
mov r8, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x30]
xor eax, eax
mov edx, eax
call fcn.140170fd0
mov ecx, dword [0x1402b17f0]
mov eax, dword [0x1402b17f4]
sub ecx, 0x2c5c125
add ecx, eax
mov eax, 0xeeeef62
xor eax, 0xc2b2e47
add ecx, eax
mov eax, ecx
or eax, 0x36d3b573
xor eax, 0xffffffff
mov edx, 0x5292e4b5
xor edx, 0xad6d1b4a
xor ecx, edx
mov edx, 0xffffffff
xor edx, 0x36d3b573
and ecx, edx
or eax, ecx
xor eax, 0xffffffff
mov ecx, eax
xor ecx, 0xf501b0fd
xor ecx, 0xffffffff
and ecx, 0xf501b0fd
shl ecx, 1
sub ecx, 0xf501b0fd
sub eax, ecx
or eax, 0xdbb522ca
mov ecx, 0x2f88188
xor ecx, 0x45661b92
cmp eax, ecx
je 0x140171fea
mov eax, dword [0x1402b17f8]
add eax, dword [0x1402b17fc]
xor eax, 0x53431d6f
or eax, 0x55612403
mov ecx, 0xdf691846
xor edx, edx
div ecx
cmp eax, 0x8b88a3e2
ja 0x140171fbb
add rsp, 0x48
ret
push rbx
leave
jmp 0x140171fbb
Function at 0x140179340
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
mov eax, 0x1268
call fcn.1402a7dd0
sub rsp, rax
lea rbp, [rsp + 0x80]