joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400a7da0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
sub rsp, 0x88
mov dword [rsp + 0x54], r9d
mov qword [rsp + 0x58], r8
mov dword [rsp + 0x60], edx
mov dword [rsp + 0x64], ecx
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x70], rax
mov eax, dword [rsp + 0xc8]
mov dword [rsp + 0x7c], eax
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x80], rax
mov ecx, dword [0x1401dcaf0]
mov edx, dword [0x1401dcaf4]
xor edx, 0xffffffff
mov eax, ecx
xor eax, edx
and eax, ecx
or eax, 0x33997032
add eax, 0x5c9be5be
imul eax, eax, 0x30b0ea12
cmp eax, 0xd947a344
je 0x1400a7edf
mov rsi, qword [rsp + 0x80]
mov eax, dword [0x1401dcaf8]
xor edx, edx
div dword [0x1401dcafc]
mov ecx, 0x258514fe
xor ecx, 0x3140b34e
sub eax, ecx
mov ecx, 0x12a58322
xor ecx, 0xc8284b61
mov edx, 0x2aa9485a
xor edx, 0xd556b7a5
xor ecx, edx
add eax, ecx
add eax, 1
mov ecx, 0x583f1db8
xor edx, edx
div ecx
mov dword [rsp + 0x4c], eax
mov eax, 0xff56b1a1
xor eax, 0x371b4c7e
mov dword [rsp + 0x48], eax
call fcn.1400a7692
mov ecx, dword [rsp + 0x64]
mov edx, dword [rsp + 0x60]
mov r8, qword [rsp + 0x58]
mov r9d, dword [rsp + 0x54]
mov r11d, dword [rsp + 0x7c]
mov r10, qword [rsp + 0x70]
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x20], rsi
mov dword [rsp + 0x28], r11d
mov qword [rsp + 0x30], r10
mov qword [rsp + 0x38], rax
call qword [0x1401fe1f0]
mov ecx, dword [rsp + 0x48]
mov edx, eax
mov eax, dword [rsp + 0x4c]
mov dword [rsp + 0x50], edx
cmp eax, ecx
ja 0x1400a7e20
mov eax, dword [rsp + 0x50]
add rsp, 0x88
pop rdi
pop rsi
ret
int3
Function at 0x1400aac70
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x48
mov qword [rsp + 0x30], r8
mov dword [rsp + 0x3c], edx
mov qword [rsp + 0x40], rcx
mov ecx, dword [0x1401dcc00]
mov eax, dword [0x1401dcc04]
mov edx, 0xe04f938b
xor edx, 0xca995b6b
add ecx, edx
add ecx, eax
sub ecx, 0x2ad6c8e0
mov eax, ecx
xor eax, 0xffffffff
xor ecx, 0xffffffff
and eax, ecx
mov ecx, 0xffffffff
xor ecx, 0x41518412
mov edx, 0xffffffff
xor edx, 0x41518412
and ecx, edx
or eax, ecx
xor eax, 0xffffffff
and eax, 0x13545913
and eax, eax
xor eax, 0xffffffff
mov ecx, 0x43abbb0
xor ecx, 0x5cdc9cd3
mov edx, 0xfed0221e
xor edx, 0x12fdde1
xor ecx, edx
mov edx, 0x353df8f4
xor edx, 0x6ddbdf97
mov r8d, 0x756b74bf
xor r8d, 0x8a948b40
xor edx, r8d
or ecx, edx
and eax, ecx
xor eax, 0xffffffff
cmp eax, 0xa1fcf31c
ja 0x1400aada3
mov eax, dword [0x1401dcc08]
mov ecx, 0x1b9d5b86
xor ecx, 0x885a81e
xor eax, ecx
sub eax, dword [0x1401dcc0c]
or eax, 0x9e1ff2b4
mov ecx, 0x3163d786
xor ecx, 0xc2f4767e
and eax, ecx
mov ecx, 0x473ba71f
xor ecx, 0xda5dab3a
mov edx, 0x54294f2e
xor edx, 0xabd6b0d1
xor ecx, edx
xor edx, edx
sub edx, 1
sub ecx, edx
sub eax, ecx
mov dword [rsp + 0x24], eax
call fcn.1400aadac
mov rcx, qword [rsp + 0x40]
mov edx, dword [rsp + 0x3c]
mov r8, qword [rsp + 0x30]
call qword [0x1401fe2d0]
mov rcx, rax
mov eax, dword [rsp + 0x24]
mov qword [rsp + 0x28], rcx
cmp eax, 0xef343caf
je 0x1400aad19
mov rax, qword [rsp + 0x28]
add rsp, 0x48
ret
invalid
Function at 0x1400adb70
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x48
mov qword [rsp + 0x28], r9
mov qword [rsp + 0x30], r8
mov dword [rsp + 0x3c], edx
mov qword [rsp + 0x40], rcx
mov eax, dword [0x1401dcd00]
xor edx, edx
div dword [0x1401dcd04]
mov r8d, 0x27261a97
xor r8d, 0x6072f9ef
mov ecx, 0x1e76a677
xor ecx, 0xe1895988
xor r8d, ecx
mov edx, eax
and edx, r8d
mov ecx, eax
or ecx, r8d
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, 0x4754e378
or eax, 0x4754e378
imul eax, edx
add eax, ecx
or eax, 0xd1b9fcab
mov ecx, 0x66eb5df4
xor ecx, 0xec8eaf1c
and eax, ecx
cmp eax, 0x5407b16c
jb 0x1400adc6d
mov eax, dword [0x1401dcd08]
mov ecx, dword [0x1401dcd0c]
adc al, byte [rax]
mov edx, 0x4d664fe
xor edx, 0x5f3cee2a
xor ecx, edx
or eax, ecx
add eax, 0xe14d4982
sub eax, 0xa3db8996
sub eax, 0xe14d4982
mov ecx, 0xe280ac5c
xor ecx, 0x516ea464
xor edx, edx
div ecx
or eax, 0x2a0807a6
mov dword [rsp + 0x20], eax
call fcn.1400ad7ad
mov rcx, qword [rsp + 0x40]
mov edx, dword [rsp + 0x3c]
mov r8, qword [rsp + 0x30]
mov r9, qword [rsp + 0x28]
call qword [0x1401fe3b0]
mov ecx, eax
mov eax, dword [rsp + 0x20]
mov dword [rsp + 0x24], ecx
cmp eax, 0x87eb9d79
jae 0x1400adbef
mov eax, dword [rsp + 0x24]
add rsp, 0x48
ret
test dword [rdi], edi
loop 0x1400adbf9
jmp 0x1400adbef
Function at 0x1400b6560
Capabilities:
Encode data using xor

Disassembly:
push rbp
sub rsp, 0x60
lea rbp, [rsp + 0x60]
mov qword [rbp - 8], rcx
mov eax, dword [0x1401dd010]
mov ecx, 0xf290eca3
xor ecx, 0xc33f18f6
xor eax, ecx
or eax, dword [0x1401dd014]
add eax, 0x5c9be5be
mov ecx, 0xdd90616e
xor ecx, 0xed208b7c
imul eax, ecx
mov r8d, 0xffffffff
xor r8d, 0x4442454c
mov edx, eax
and edx, r8d
mov ecx, eax
or ecx, r8d
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, 0x4442454c
or eax, 0x4442454c
imul eax, edx
add eax, ecx
cmp eax, 0x4349f6b0
jb 0x1400b66f1
mov ecx, dword [0x1401dd018]
mov edx, dword [0x1401dd01c]
xor edx, 0x8ad60449
mov eax, ecx
mov ecx, edx
lea eax, [rax + rcx + 0x257237be]
imul rax, rax, 0x17352c47
shr rax, 0x3b
or eax, 0x19fc14c
mov dword [rbp - 0x24], eax
mov eax, 0x378f2430
mov dword [rbp - 0x28], eax
mov eax, 0x10
mov qword [rbp - 0x50], rax
call fcn.1401d7280
sub rsp, rax
mov rax, qword [rbp - 0x50]
mov rcx, rsp
mov qword [rbp - 0x38], rcx
call fcn.1401d7280
sub rsp, rax
mov rax, qword [rbp - 0x50]
mov rcx, rsp
mov qword [rbp - 0x40], rcx
call fcn.1401d7280
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x48], rax
sub rsp, 0x20
call fcn.1400c80db
mov rdx, qword [rbp - 0x40]
mov rcx, qword [rbp - 0x38]
add rsp, 0x20
mov r8, rax
mov rax, qword [rbp - 8]
mov qword [rbp - 0x30], r8
mov r8, qword [rax]
mov qword [rdx], r8
mov rax, qword [rax + 8]
mov qword [rdx + 8], rax
sub rsp, 0x20
call fcn.1400b9340
mov r8, qword [rbp - 0x38]
mov rdx, qword [rbp - 0x30]
mov ecx, dword [rbp - 0x28]
mov eax, dword [rbp - 0x24]
add rsp, 0x20
mov r9, qword [r8]
mov qword [rbp - 0x20], r9
mov r8, qword [r8 + 8]
mov qword [rbp - 0x18], r8
cmp byte [rdx + 0x60], 0
sete dl
mov byte [rbp - 9], dl
cmp eax, ecx
je 0x1400b65d4
mov al, byte [rbp - 9]
test al, 1
jne 0x1400b66c4
jmp 0x1400b66e8
mov rcx, qword [rbp - 0x48]
mov rax, qword [rbp - 0x18]
mov rdx, qword [rbp - 0x20]
mov qword [rcx], rdx
mov qword [rcx + 8], rax
sub rsp, 0x20
call fcn.14009c710
add rsp, 0x20
mov qword [rbp - 0x58], rax
mov rax, qword [rbp - 0x58]
mov rsp, rbp
pop rbp
ret
int3
Function at 0x1400c7e30
Capabilities:
Encode data using xor

Disassembly:
push rbp
sub rsp, 0x30
lea rbp, [rsp + 0x30]
mov eax, dword [0x1401dd690]
mov ecx, dword [0x1401dd694]
mov edx, 0x96a1ad9e
xor edx, 0x171caf48
xor ecx, edx
xor edx, edx
div ecx
mov ecx, 0x1ac4ba09
xor ecx, 0xbd1343a
add eax, ecx
add eax, 0x22ff1c73
sub eax, 0x11158e33
mov ecx, 0x2d4376a7
xor ecx, 0x716681bf
add eax, ecx
sub eax, 0xc22657a8
sub eax, 0x5c25f718
mov ecx, 0xbc21b699
xor edx, edx
div ecx
cmp eax, 0xa227d0fd
je 0x1400c80c9
mov eax, dword [0x1401dd698]
xor eax, 0xcc99d5b
mov ecx, dword [0x1401dd69c]
imul eax, ecx
add eax, 0xb971cdec
mov ecx, eax
and ecx, 0x746d4014
add ecx, ecx
sub eax, ecx
add eax, 0x746d4014
imul rax, rax, 0x78221b57
shr rax, 0x3e
mov dword [rbp - 0x14], eax
mov eax, 0x10
call fcn.1401d7280
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x28], rax
sub rsp, 0x20
call fcn.1400c80db
add rsp, 0x20
mov qword [rbp - 0x20], rax
mov ecx, 0x20
sub rsp, 0x20
call fcn.140047450
mov rcx, qword [rbp - 0x20]
add rsp, 0x20
mov rdx, rax
mov eax, dword [rbp - 0x14]
mov qword [rbp - 0x10], rdx
mov cl, byte [rcx + 0x60]
mov dl, 0x19
xor dl, 0x19
cmp cl, dl
sete cl
mov byte [rbp - 1], cl
cmp eax, 0xc1599e85
ja 0x1400c7e99
mov al, byte [rbp - 1]
test al, 1
jne 0x1400c7f41
jmp 0x1400c80c4
mov r8d, dword [0x1401dd6a0]
imul r8d, dword [0x1401dd6a4]
mov eax, 0x58e0a3d3
xor eax, 0x1e27b41d
imul r8d, eax
mov ecx, 0x18393900
xor ecx, 0xe7c6c6ff
mov eax, r8d
xor eax, ecx
and eax, 0xec827f98
mov edx, 0xffffffff
xor edx, 0xec827f98
and r8d, edx
mov ecx, 0x50134866
xor ecx, 0x3122bfe3
mov r9d, 0xbd9e3898
xor r9d, 0x4261c767
xor ecx, r9d
and ecx, 0xec827f98
and edx, 0x6131f785
or eax, r8d
or ecx, edx
xor eax, ecx
and eax, 0x9d25f2e9
mov ecx, 0xfed35dcb
xor ecx, 0x3889d207
cmp eax, ecx
jae 0x1400c80d2
mov rcx, qword [rbp - 0x28]
mov rax, qword [rbp - 0x10]
mov edx, dword [0x1401dd6a8]
mov r8d, dword [0x1401dd6ac]
mov r9d, 0x8f8853df
xor r9d, 0x83b154cd
xor r8d, r9d
and edx, r8d
mov r8d, 0x5c42cd0
xor r8d, 0xafa0c12c
or edx, r8d
mov r10d, 0xffffffff
xor r10d, 0x1737d0b8
mov r9d, edx
and r9d, r10d
mov r8d, edx
or r8d, r10d
xor r8d, 0xffffffff
imul r8d, r9d
mov r9d, edx
and r9d, 0x1737d0b8
or edx, 0x1737d0b8
imul edx, r9d
add edx, r8d
mov r9d, edx
xor r9d, 0xffffffff
and r9d, 0x22d596e9
mov r10d, 0xffffffff
xor r10d, 0x22d596e9
mov r8d, edx
and r8d, r10d
imul r8d, r9d
mov r9d, edx
and r9d, 0x22d596e9
mov r10d, 0x8b011b79
xor r10d, 0xa9d48d90
or edx, r10d
imul edx, r9d
add edx, r8d
mov dword [rbp - 0x2c], edx
mov qword [0x1401fe8c8], rax
xor eax, eax
mov edx, eax
sub rsp, 0x20
call fcn.1400168ab
mov rcx, qword [rbp - 0x28]
mov eax, dword [rbp - 0x2c]
add rsp, 0x20
mov rdx, qword [rcx]
mov qword [0x1401fe8b0], rdx
mov rcx, qword [rcx + 8]
mov qword [0x1401fe8b8], rcx
cmp eax, 0x30ce90e4
je 0x1400c80d2
jmp 0x1400c80c4
mov rsp, rbp
pop rbp
ret
fmul dword [rdi - 0x38161ee0]
std
invalid
call 0x129c94180
in al, dx
invalid
Function at 0x1400c9340
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x28], rcx
call fcn.1400cbed8
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0x30], rax
call fcn.1400c94e0
test al, 1
jne 0x1400c936a
jmp 0x1400c94cd
mov rcx, qword [rsp + 0x28]
call fcn.1400c9160
mov rax, qword [rsp + 0x30]
mov al, byte [rax + 0x60]
mov cl, 0xa9
xor cl, 0xa9
cmp al, cl
jne 0x1400c94cd
mov r11d, dword [0x1401dd768]
mov eax, 0xaa48f9ba
xor eax, 0xbf1bfd62
xor r11d, eax
mov r10d, dword [0x1401dd76c]
mov ecx, r11d
xor ecx, 0xffffffff
mov edx, r10d
xor edx, 0xffffffff
mov r8d, 0xd3a89049
xor r8d, 0x3318bed6
mov eax, 0xa4d1cde5
xor eax, 0x5b2e321a
xor r8d, eax
mov eax, ecx
and eax, 0xe0b02e9f
and r11d, r8d
mov r9d, edx
and r9d, 0xe0b02e9f
and r10d, r8d
or eax, r11d
or r9d, r10d
xor eax, r9d
or ecx, edx
mov edx, 0x3441c15c
xor edx, 0xcbbe3ea3
xor ecx, edx
mov edx, 0xa39c9f6f
xor edx, 0x432cb1f0
or edx, r8d
and ecx, edx
or eax, ecx
add eax, 0xc561e3d
sub eax, 0x2f254173
add eax, 0x4add4601
add eax, 0xa46f5fab
sub eax, 0x4add4601
cmp eax, 0xbe04593a
je 0x1400c94d2
mov rcx, qword [rsp + 0x28]
mov eax, dword [0x1401dd770]
mov r8d, dword [0x1401dd774]
mov edx, eax
xor edx, r8d
mov r9d, 0x76f999c2
xor r9d, 0x8906663d
xor r8d, r9d
and eax, r8d
shl eax, 1
sub eax, edx
mov edx, 0x17b22d34
xor edx, 0x34b52f8b
mov r8d, 0xb00e2844
xor r8d, 0x4ff1d7bb
xor edx, r8d
mov r8d, 0x2252ad42
xor r8d, 0x2252ad42
mov r9d, 0x576e155a
xor r9d, 0x576e155b
sub r8d, r9d
sub edx, r8d
sub eax, edx
mov r8d, 0xace39f4b
xor edx, edx
div r8d
sub eax, 0xd3f93115
mov dword [rsp + 0x24], eax
mov edx, 8
call fcn.14000de70
mov eax, dword [rsp + 0x24]
cmp eax, 0x691a6b2a
je 0x1400c942f
jmp 0x1400c94cd
add rsp, 0x38
ret
fbld tbyte [rsi - 0x32]
movsd dword [rdi], dword [rsi]
jmp 0x1400c942f
Function at 0x1400cbef0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x48
mov rax, qword [rcx]
mov qword [rsp + 0x38], rax
movabs rcx, 0x56b6485967ef4fe5
movabs rdx, 0x56b6485967ef4fe7
xor rcx, rdx
cqo
idiv rcx
mov rdx, rax
mov rax, qword [rsp + 0x38]
mov rcx, rdx
and rcx, 0xffffffffffffffff
mov r8, rdx
or r8, 0xffffffffffffffff
add rcx, r8
mov qword [rsp + 0x40], rcx
xor rcx, rdx
cmp rcx, 0
setl cl
movabs rdx, 0x122b6bf95eab9e45
movabs r8, 0x122b6bf95eab9e44
xor rdx, r8
cmp rax, rdx
setg al
and al, cl
test al, 1
jne 0x1400cbf6c
jmp 0x1400cbf76
call fcn.140007bb8
jmp 0x1400cc0b2
mov eax, dword [0x1401dd878]
mov edx, dword [0x1401dd87c]
or eax, eax
mov ecx, 0xc478ee8f
xor ecx, 0x3b871170
xor eax, ecx
mov r8d, 0x30884da
xor r8d, 0xfcf77b25
mov ecx, edx
xor ecx, r8d
xor edx, 0xffffffff
and ecx, edx
or eax, ecx
xor eax, 0xffffffff
mov ecx, 0xffffffff
xor ecx, 0x8591cc47
add eax, ecx
mov ecx, 0xcb9492f8
xor ecx, 0xcb9492f9
add eax, ecx
mov r8d, 0x71eaf3c1
xor r8d, 0xc77bb0ee
mov ecx, 0x9e728623
xor ecx, 0x618d79dc
xor r8d, ecx
mov edx, eax
and edx, r8d
mov ecx, eax
or ecx, r8d
mov r8d, 0x21fd127f
xor r8d, 0xde02ed80
xor ecx, r8d
imul ecx, edx
mov edx, eax
and edx, 0xb691432f
mov r8d, 0x336378bd
xor r8d, 0x85f23b92
or eax, r8d
imul eax, edx
add eax, ecx
imul eax, eax, 0x43081770
cmp eax, 0x5f59c14e
je 0x1400cc0bc
mov r8, qword [rsp + 0x40]
mov eax, dword [0x1401dd880]
add eax, dword [0x1401dd884]
mov ecx, 0x30514a4a
xor edx, edx
div ecx
mov ecx, 0x43471028
xor edx, edx
div ecx
mov edx, 0xc1e2910
xor edx, 0x27c18c62
mov ecx, 0xf313290a
xor ecx, 0xcecd6f5
xor edx, ecx
mov ecx, eax
and ecx, edx
mov r9d, 0x76cd348f
xor r9d, 0x5d1291fd
mov edx, eax
xor edx, r9d
add eax, edx
sub eax, ecx
mov ecx, 0xbd8a7720
xor ecx, 0x54752a76
xor edx, edx
test r8, r8
cmovg rdx, r8
mov qword [rsp + 0x30], rdx
cmp eax, ecx
ja 0x1400cc02d
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x28], rax
jmp 0x1400cc0b2
mov rax, qword [rsp + 0x28]
add rsp, 0x48
ret
push r14
cli
jmp 0x1400cc02d
Function at 0x1400cf930
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0xa8
mov qword [rsp + 0x60], rcx
call fcn.1400cf8a3
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x68], rax
mov rax, qword [rcx]
mov qword [rsp + 0x78], rax
mov rax, qword [rcx + 8]
mov qword [rsp + 0x70], rax
call fcn.1400cf8a3
mov rcx, qword [rsp + 0x70]
mov r8, qword [rsp + 0x78]
movabs r9, 0xf41c0c4a13d20808
movabs rdx, 0xf41c0c4a13d20808
xor r9, rdx
add rcx, 8
lea rdx, [0x1401ed238]
cmp r8, r9
cmove rcx, rdx
mov qword [rsp + 0x80], rcx
mov al, byte [rax]
mov cl, 0x74
xor cl, 0x74
cmp al, cl
jne 0x1400cfae8
mov eax, dword [0x1401dda60]
sub eax, dword [0x1401dda64]
mov ecx, eax
xor ecx, 0x2303dca3
xor ecx, 0xffffffff
or eax, 0x2303dca3
and eax, ecx
or eax, 0x3f7c03bc
imul eax, eax, 0xca9452af
mov ecx, 0x24109526
xor ecx, 0x874f0beb
cmp eax, ecx
jae 0x1400cfbf6
mov rcx, qword [rsp + 0x78]
mov eax, dword [0x1401dda68]
mov edx, 0x4916fc32
xor edx, 0xab285a31
xor eax, edx
mov r8d, dword [0x1401dda6c]
xor r8d, 0x3a8a124c
xor edx, edx
div r8d
sub eax, 0x78342454
mov r8d, 0x6c34f858
xor edx, edx
div r8d
mov edx, eax
mov eax, edx
or eax, eax
xor eax, 0xffffffff
mov r8d, 0xa3596e6f
or r8d, 0xa3596e6f
xor r8d, 0xffffffff
xor eax, 0xffffffff
mov r9d, 0x73e6e5f0
xor r9d, 0x8c191a0f
xor r8d, r9d
and eax, r8d
or edx, 0xa3596e6f
xor edx, 0xffffffff
xor eax, 0xffffffff
mov r8d, 0x6fea3c21
xor r8d, 0x9015c3de
xor edx, r8d
and eax, edx
cmp rcx, 0
setl cl
mov byte [rsp + 0x5f], cl
cmp eax, 0x45577d73
je 0x1400cfbf6
mov al, byte [rsp + 0x5f]
test al, 1
jne 0x1400cfa97
jmp 0x1400cfab4
mov rcx, qword [rsp + 0x78]
xor eax, eax
mov edx, eax
movabs r8, 0x7fffffffffffffff
call fcn.14000c4b0
jmp 0x1400cfae8
mov r8, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x80]
lea rcx, [rsp + 0x98]
call fcn.14009d410
mov rax, qword [rsp + 0x98]
mov rcx, qword [rsp + 0xa0]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x50]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x40], rax
mov eax, dword [0x1401dda70]
mov ecx, dword [0x1401dda74]
mov edx, 0x96f8c557
xor edx, 0x3f7075ea
sub eax, edx
add eax, ecx
add eax, 0xa988b0bd
or eax, 0xd0a8a0ab
or eax, 0x3ac0eef1
mov ecx, 0x8cd1043e
xor edx, edx
div ecx
mov ecx, 0x1f78de46
xor ecx, 0xfcd21897
cmp eax, ecx
je 0x1400cfbff
mov rdx, qword [rsp + 0x68]
mov eax, dword [0x1401dda78]
mov ecx, 0xe2b22773
xor ecx, 0xed98dda6
xor eax, ecx
xor eax, dword [0x1401dda7c]
mov ecx, 0xb9d22a8b
xor ecx, 0xb9d22a8b
mov r8d, 0x40c31f2b
xor r8d, 0xd6861b28
sub ecx, r8d
add eax, ecx
add eax, 0xc8ffad53
mov ecx, 0x488a4a7
xor ecx, 0x5342c19f
or eax, ecx
mov ecx, 0x698029d7
xor ecx, 0x7a9b0b88
cmp byte [rdx], 0
sete dl
mov byte [rsp + 0x37], dl
cmp eax, ecx
je 0x1400cfb42
mov al, byte [rsp + 0x37]
test al, 1
jne 0x1400cfbbd
jmp 0x1400cfbe9
mov rax, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x38]
mov qword [rsp + 0x88], rcx
mov qword [rsp + 0x90], rax
lea rcx, [rsp + 0x88]
call fcn.14009c710
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
add rsp, 0xa8
ret
sub esp, ebp
cmp ecx, dword [rdx]
jmp 0x1400cf9e7
invalid
Function at 0x1400d3e40
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rcx
mov edx, dword [0x1401ddc20]
mov eax, dword [0x1401ddc24]
xor eax, 0x79b64254
imul edx, eax
mov ecx, edx
xor ecx, 0xcf6b2c62
mov eax, 0xffffffff
xor eax, 0xcf6b2c62
and edx, eax
mov eax, 0x51a6b067
xor eax, 0x51a6b065
imul eax, edx
sub eax, ecx
mov ecx, 0xd69b9f55
xor edx, edx
div ecx
mov ecx, 0xfc4eb514
xor ecx, 0xeb86933e
or eax, ecx
cmp eax, 0xf1d4d8f9
je 0x1400d3f40
mov ecx, dword [0x1401ddc28]
mov eax, dword [0x1401ddc2c]
xor eax, 0xcf68d355
xor ecx, eax
mov eax, ecx
and eax, 0xaf0e3cea
or ecx, 0xaf0e3cea
add eax, ecx
mov ecx, 0xc30f94e7
xor ecx, 0x628031ed
add eax, ecx
add eax, 0x837a3499
mov dword [rsp + 0x28], eax
call fcn.1400d3977
mov rcx, qword [rsp + 0x30]
mov qword [rsp + 0x20], rax
call fcn.1400d3bc0
mov cl, al
mov eax, dword [rsp + 0x28]
mov byte [rsp + 0x2f], cl
cmp eax, 0xd136043c
jae 0x1400d3ea1
mov al, byte [rsp + 0x2f]
test al, 1
jne 0x1400d3f13
jmp 0x1400d3f3a
mov rcx, qword [rsp + 0x30]
call fcn.1400d3e10
mov rax, qword [rsp + 0x20]
cmp byte [rax], 0
jne 0x1400d3f3a
mov rcx, qword [rsp + 0x30]
mov edx, 8
call fcn.14000de70
nop
add rsp, 0x38
ret
xchg ebx, eax
cmpsb byte [rsi], byte [rdi]
mov cl, cl
jmp 0x1400d3ea1

Function at 0x1400d4020
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x28], rcx
call fcn.1400d3977
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0x30], rax
call fcn.1400d3bc0
test al, 1
jne 0x1400d404a
jmp 0x1400d413f
mov ecx, dword [0x1401ddc30]
xor ecx, 0x4117af9
mov edx, dword [0x1401ddc34]
mov eax, 0xa34528cc
xor eax, 0xd49b0955
xor edx, eax
mov eax, ecx
xor eax, edx
xor edx, 0xffffffff
and ecx, edx
shl ecx, 1
sub ecx, eax
add ecx, 0x5c63e426
mov eax, 0xde649f13
xor eax, 0xee7ce3a0
sub ecx, eax
sub ecx, 0x5c63e426
mov eax, ecx
or eax, 0x9c91e747
xor eax, 0xffffffff
or ecx, 0x9c91e747
mov edx, 0xa42613ae
xor edx, 0x5bd9ec51
xor ecx, edx
xor eax, 0xffffffff
xor ecx, 0xffffffff
and eax, ecx
add eax, 0x326a098e
cmp eax, 0xf32595fe
jae 0x1400d4145
mov rcx, qword [rsp + 0x28]
mov eax, dword [0x1401ddc38]
mov r8d, dword [str.Ez_blu]
xor r8d, 0x109df391
xor edx, edx
sub edx, r8d
add eax, edx
or eax, 0x987f50e1
imul eax, eax, 0xdb0a58fe
xor edx, edx
sub edx, 0xa0e5d54e
sub eax, edx
mov dword [rsp + 0x20], eax
call fcn.1400d3880
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0x20]
cmp byte [rcx], 0
sete cl
mov byte [rsp + 0x27], cl
cmp eax, 0x918a74dd
ja 0x1400d40c3
mov al, byte [rsp + 0x27]
test al, 1
jne 0x1400d4130
jmp 0x1400d413f
mov rcx, qword [rsp + 0x28]
mov edx, 8
call fcn.14000de70
nop
add rsp, 0x38
ret
bnd jmp 0x1b5f6dd8c
Function at 0x1400d5670
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x48
mov qword [rsp + 0x40], rcx
mov eax, dword [0x1401ddce0]
xor eax, 0xde3b68e5
imul eax, dword [0x1401ddce4]
mov ecx, 0xf767bff3
xor ecx, 0x672e02fd
mov edx, 0xc6f1198f
xor edx, 0x390ee670
xor ecx, edx
add eax, ecx
add eax, 1
sub eax, 0xaf29d813
mov ecx, 0x2eae2891
xor ecx, 0x72cb6449
imul eax, ecx
cmp eax, 0xac26990d
je 0x1400d577b
mov ecx, dword [0x1401ddce8]
mov edx, dword [0x1401ddcec]
xor edx, 0x1f5c0222
mov eax, 0xae117566
xor eax, 0x51ee8a99
xor edx, eax
mov eax, ecx
xor eax, edx
and eax, ecx
mov ecx, 0xff1e716e
xor edx, edx
div ecx
mov ecx, 0x48b833ec
xor edx, edx
div ecx
add eax, 0x5a0d26e8
mov dword [rsp + 0x38], eax
mov eax, 0xb5f8c605
xor eax, 0xe1ed2c13
mov dword [rsp + 0x34], eax
call fcn.1400d5435
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x28], rax
call fcn.1400d5450
mov ecx, dword [rsp + 0x34]
mov dl, al
mov eax, dword [rsp + 0x38]
mov byte [rsp + 0x3f], dl
cmp eax, ecx
jb 0x1400d56c6
mov al, byte [rsp + 0x3f]
test al, 1
jne 0x1400d574e
jmp 0x1400d5775
mov rcx, qword [rsp + 0x40]
call fcn.1400d52c0
mov rax, qword [rsp + 0x28]
cmp byte [rax], 0
jne 0x1400d5775
mov rcx, qword [rsp + 0x40]
mov edx, 8
call fcn.14000de70
nop
add rsp, 0x48
ret
adc eax, 0xe974e97c
invalid
Function at 0x1400d63e0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x38
mov eax, dword [0x1401ddd50]
xor edx, edx
div dword [0x1401ddd54]
mov r8d, 0xffffffff
xor r8d, 0x4754e378
mov edx, eax
and edx, r8d
mov ecx, eax
or ecx, r8d
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, 0x4754e378
or eax, 0x4754e378
imul eax, edx
add eax, ecx
or eax, 0xd1b9fcab
and eax, 0x8a65f2e8
cmp eax, 0x5407b16c
jb 0x1400d64ad
mov eax, dword [0x1401ddd58]
or eax, dword [0x1401ddd5c]
jns 0x1400d644b
add byte [rbx], cl
add eax, 0x10791a
add eax, 0xe14d4982
mov ecx, 0x4d0dc923
xor ecx, 0xeed640b5
xor r9, 0xffffffffeed640b5
sub eax, ecx
sub eax, 0xe14d4982
mov ecx, 0xb3ee0838
xor edx, edx
div ecx
or eax, 0x2a0807a6
mov dword [rsp + 0x2c], eax
mov eax, 0xd4790cb7
xor eax, 0x539291ce
mov dword [rsp + 0x28], eax
mov rax, qword [0x1401eeb10]
mov ecx, dword [rax]
call fcn.140007a23
mov ecx, dword [rsp + 0x28]
mov rdx, rax
mov eax, dword [rsp + 0x2c]
add rdx, 0x60
mov qword [rsp + 0x30], rdx
cmp eax, ecx
jae 0x1400d6436
mov rax, qword [rsp + 0x30]
add rsp, 0x38
ret
test dword [rdi], edi
loop 0x1400d6439
jmp 0x1400d6436
Function at 0x1400dc980
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rsi
push rdi
sub rsp, 0x2c0
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x228], rdx
mov qword [rbp + 0x230], rcx

Function at 0x1400de280
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x58
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x50], rcx
mov r8d, dword [0x1401de0c0]
xor r8d, 0x23ef5578
mov edx, dword [0x1401de0c4]
mov ecx, 0xf7e3fae7
xor ecx, 0x81c0518
mov eax, r8d
xor eax, ecx
and eax, 0xb008d99f
mov r9d, 0xffffffff
xor r9d, 0xb008d99f
and r8d, r9d
mov r10d, 0x31e808c7
xor r10d, 0xce17f738
mov ecx, edx
xor ecx, r10d
mov r10d, 0x544dcec8
xor r10d, 0xe4451757
and ecx, r10d
and edx, r9d
or eax, r8d
or ecx, edx
xor eax, ecx
mov r8d, 0xffffffff
xor r8d, 0xe6ec8e19
mov edx, eax
and edx, r8d
mov ecx, eax
or ecx, r8d
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, 0xe6ec8e19
or eax, 0xe6ec8e19
imul eax, edx
add eax, ecx
xor eax, 0x5ccc891b
mov ecx, eax
add ecx, 1
xor eax, 0xffffffff
or eax, 0xfb2c7640
add eax, ecx
cmp eax, 0x38a6a46c
jb 0x1400de3e0
mov eax, dword [0x1401de0c8]
mov edx, dword [0x1401de0cc]
mov ecx, 0x8a5d7a51
xor ecx, 0x8a5d7a51
sub ecx, edx
add eax, ecx
imul eax, eax, 0x5f6e45c2
add eax, 0x49e02dee
mov ecx, 0x677465a3
xor edx, edx
div ecx
mov dword [rsp + 0x3c], eax
call fcn.1400da244
mov rdx, qword [rsp + 0x48]
mov eax, dword [rsp + 0x3c]
xor ecx, ecx
test rdx, rdx
cmovg rcx, rdx
mov qword [rsp + 0x40], rcx
cmp eax, 0xde6c3314
jae 0x1400de341
xor eax, eax
mov qword [rsp + 0x30], rax
jmp 0x1400de3a7
mov rcx, qword [rsp + 0x40]
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x28], rax
cmp rax, rcx
je 0x1400de3db
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x50]
mov byte [rcx + rax], 0
add rax, 1
mov qword [rsp + 0x30], rax
jmp 0x1400de3a7
add rsp, 0x58
ret
fadd dword [rbx + rdx*2]
adc eax, 0xffff58e9
dec dword [rdi]
invalid