joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14087f8dd
Capabilities:
Resolve function by parsing pe exports

Disassembly:
xor qword [rsp + 0x50], 0x13d750c8
or dword [rsp + 0x58], 0x7ff5542d
cmp r11, 0x40e62d44
jo 0x140d3ee59
je 0x140d3ee96
or byte [rsp + 0x58], 0x19
cmp byte [rsp + 0x50], r11b
movabs r11, 0x774a523f7cc10209
jle 0x140f94815
cmova r11d, dword [rsp + 0x58]
movsx r11w, word [rsp + 0x53]
xor r11d, 0x76b82535
neg rsi
add dword [rsp + 0x50], 0x570690
neg word [rsp + 0x58]
jle 0x1408f9a31
jl 0x14083bb4b
js 0x14085d9d9
jne 0x14083baf9
out dx, al
jne 0x14087f93b
insw word [rdi], dx
and esp, dword [rbp + 0x5e]
cmp ecx, dword [rcx - 0x2834518]
call 0x140857597
jns 0x140d5b777
lea rsi, [rsi + rsi + 0x5ba51b2d]
or sil, 0xee
push rsp
and al, 0x60
add esi, 0x5e317be3
mov qword [rsp + 0x50], 0x4a50b60
mov r11, qword [rsp + 8]
Function at 0x14087f936
Capabilities:
Resolve function by parsing pe exports

Disassembly:
cmp bx, word [rsp + 0xe]
seto r12b
or r12d, edi
sub edi, 0x79ef4707
xor rsi, 0x763b08d2
mov r12, qword [rsp + 0x58]
setne bl
or edi, dword [rsp + 0x10]
jns 0x140867090
test si, 0x4d86
lea rsi, [rdi + rbx*8 + 0x54575038]
bswap edi
mov qword [rsp + 8], rdi
movsx rsi, sil
lea rsi, [rdi + rsi*4 + 0x1de250f7]
mov rsi, qword [rsp + 8]
lea rsi, [rdi + rsi*2 + 0x320a3a2f]
lea rbx, [rdi*2 + 0x40f43074]
jb 0x140867076
add byte [rsp + 8], 0xdd
cmp qword [rsp + 8], 0x39c07c4a
jle 0x140e973bd
and dword [rsp + 8], 0xdd15c55
jae 0x1408ada1a
call fcn.14084dde6
lea r10, [r10 + r10*2 + 0x4cd4649c]
movzx r10, r12w
push r14
push rdi
movabs rdi, 0x4a7320475e431456
push rsi
push rbx
neg r10d
call fcn.140d7b7d1
jns 0x140d5b777
lea rsi, [rsi + rsi + 0x5ba51b2d]
or sil, 0xee
test rsi, rbx
setno sil
neg ebx
xor bl, sil
pop rbx
je 0x14084c884
not rsi
movabs rsi, 0x1b934c5c49325d4e
bswap esi
lea rsi, [rsi + rsi*8 + 0x24ef720f]
and rsi, 0x5df67b09
lea rsi, [rsi + 0x11122e10]
xor sil, 0xb0
mov rsi, qword [rsp]
jno 0x140d84b81
not byte [rsp + 0x60]
not byte [rsp + 0x60]
not byte [rsp + 0x60]
not dword [rsp + 0x60]
je 0x140d85408
jbe 0x140d853f2
cmp word [rsp + 0x60], 0x5243
push qword [rsp + 0x78]
popfq
lea rsp, [rsp + 0x80]
call fcn.14101eec2
sub word [rsp + 8], bx
mov bl, 0xc6
mov rdi, qword [rsp + 0x38]
call fcn.140870038
adc cl, al
add dword [rax], 0x5638aa
or byte [rax], al
add byte [rax], al
cmp word [rsp + 0x18], 0x97b
lea rsp, [rsp + 0x10]
ret 8
cmp qword [rsp + 0x68], 0x29650ecb
bswap r12
mov rsi, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x50]
push qword [rsp + 0x40]
popfq
lea rsp, [rsp + 0x70]
ret
jg 0x14087f92b
call fcn.140854c58
and r14b, dil
movabs rcx, 0x33ec121a6e3e2374
jl 0x140d4b92d
and word [rsp + 0x58], 0x5128
add byte [rsp + 0x38], 0x7e
add r14b, byte [rsp + 0x58]
movzx rdi, dl
js 0x140d84bcb
or byte [rsp + 0x30], r14b
setg dil
not r10b
mov dword [rsp + 0x38], r10d
mov rcx, qword [rsp + 0x30]
xor word [rsp + 0x30], 0x463e
sub dil, dil
add di, di
call fcn.140852586
setg r12b
add esi, 0x2c6705f6
add dword [rsp + 8], edi
neg rbx
setne r12b
jl 0x14084c819
je 0x14085e133
not r15d
mov r15d, dword [rsp + 0x13]
jg 0x1408554ed
mov r15b, byte [rsp + 0x16]
mov r15d, dword [rsp + 0x10]
movsx r13, byte [rsp + 0x10]
xor qword [rsp + 0x10], 0xc8e7c71
call fcn.140888730
shl dword [rdi + rsi*2 + 0x46], cl
imul edi, dword [rbp + 0x62], 0xbec3a52
movabs al, byte [0xdff00114a65e0c96]
jno 0x140e973ee
jl 0x140e97414
invalid
or esp, dword [rax - 0x59a1f36a]
adc al, 1
invalid
enter 0xffffffffffffdf2d, 0xffffffffffffffbe
outsd dx, dword [rsi]
mov edx, 0xcd1720fa
jae 0x140e9741a
and bh, cl
pop rdi
invalid
Function at 0x14088df0e
Capabilities:
Resolve function by parsing pe exports

Disassembly:
and r10w, word [rsp + 0x19]
or r10b, r10b
mov r10d, dword [rsp + 0x1b]
mov qword [rsp + 0x18], 0x2cc03a95
lea rsp, [rsp + 8]
ret
push r9
push 0x6768758e
call fcn.140890b10
test byte [rsp + 0x18], 0x2d
setg byte [rsp + 0x18]
push qword [rsp + 0x20]
popfq
lea rsp, [rsp + 0x28]
call fcn.14101eec2
jno 0x140e97131
invalid
lea rbp, [rbp + rbp*2 + 0x2bf60f0]
xor byte [rsp], 1
mov dword [rsp], ebp
jbe 0x140866fc3
sub qword [rsp], 0x2157268f
setno byte [rsp]
sub ebp, dword [rsp + 3]
setle byte [rsp]
mov byte [rsp], 0x97
not bp
mov word [rsp], 0x75c5
mov rbp, qword [rsp + 0x10]
mov qword [rsp + 0x10], 0x675fa019
je 0x140886dc2
je 0x1408508da
not dword [rsp]
or qword [rsp], 0x445784e
mov word [rsp], 0x3ec9
xor dword [rsp], 0x44ad696c
and word [rsp], 0x4c6a
push r10
movabs r10, 0x1f4e14830855243d
push rdx
mov rdx, qword [rsp + 0x10]
mov r10w, word [rsp + 0x12]
neg qword [rsp + 0x10]
mov qword [rsp + 0x10], 0x2ea75c63
test r10w, dx
call fcn.140fb2197
invalid
not qword [rsp + 0x18]
js 0x140866fab
test byte [rsp + 0x18], 0xa9
mov word [rsp + 0x18], 0x667b
mov dword [rsp + 0x18], 0x3b0960f9
jbe 0x140866ffe
and byte [rsp + 0x18], 0x8a
or qword [rsp + 0x18], 0x7835943
xor qword [rsp + 0x18], 0x584f415b
cmp byte [rsp + 0x18], 0x9a
jae 0x14082af78
xor qword [rsp + 0x18], 0x46885338
jle 0x1408508d0
neg dword [rsp + 0x20]
test word [rsp + 0x20], 0x2442
mov word [rsp + 0x20], 0x538c
not byte [rsp + 0x20]
call fcn.140ed1c4f
add byte [rsp + 8], 0x48
xor dword [rsp + 8], 0x596d2e15
jae 0x1408a0a2a
jno 0x1408be01d
neg r12b
mov rbp, qword [rsp + 0x38]
jae fcn.1408e201c
mov qword [rsp + 0x40], 0xffffffffcdd6adcf
lea r9, [r12*2 + 0x69c83105]
bswap ebp
add qword [rsp + 0x10], 0xffffffffffffbee5
mov r9b, byte [rsp + 0x27]
test r9w, 0x7949
jbe 0x14083a014
push r11
movabs r11, 0x9755e23b207379
pushfq
or r11w, 0x4bb3
setge r11b
push r13
push r8
add r11, 0x404256
movabs r8, 0x3b406d4a33fa0bef
movabs r13, 0x9593a750895324a
add r13b, 0xca
jl 0x140d7c14c
push rdi
sub r11, r13
add r11w, r11w
call fcn.140d8660f
invalid
not qword [rsp + 8]
sets byte [rsp + 8]
add dword [rsp + 8], 0x381874c3
neg byte [rsp + 8]
neg byte [rsp + 8]
jle 0x140e9d737
jb 0x1408afec8
xor r8, r8
lea r8, [r8 + r8*4 + 0x706f2ca8]
cmp r8w, 0x7019
mov r8, qword [rsp]
jo 0x14085e357
call fcn.140d6d903
push rbp
movabs rbp, 0x58336b394c251c97
movabs rbp, 0x10e6338c344d579e
bswap rbp
lea rbp, [rbp*4 + 0x535939af]
not rbp
pushfq
or bp, 0x5606
push rbp
jno 0x140866f9a

Function at 0x140899742
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r15
mov r15, r10
sete r10b
or r10, 0x72273133
bswap r15d
Function at 0x1408a053a
Capabilities:
Resolve function by parsing pe exports

Disassembly:
or dword [rsp + 0x20], 0x4833427b
setbe r9b
jg 0x1408aff6f
movzx r8d, byte [rsp]
lea r12, [r12 + r12 + 0x497b2890]
movsx r12w, byte [rsp + 6]
lea r12, [r15 + r8 + 0x7104419b]
push rcx
mov dword [rsp + 8], r12d
push r10
movabs r10, 0x70031ea807ac5537
mov byte [rsp + 0x10], r12b
push rbx
push rdi
mov rbx, qword [rsp + 0x20]
lea r12, [r10*4 + 0x2f106b31]
mov rbx, qword [rsp + 8]
call fcn.140e9d705
cmp eax, 0x8a13d803
fisub word [rdx]
sbb byte [rdx + 0x2282b367], al
invalid

Function at 0x1408ae837
Capabilities:
Resolve function by parsing pe exports

Disassembly:
xor bpl, sil
add qword [rsp + 0x40], 0xffffffffbf287dc5
not r15
and si, si
mov r13b, byte [rsp + 0xb]
add rsi, rsi
mov r15, qword [rsp + 0x70]
or byte [rsp + 8], 0x68
xor r8d, 0x51c67e0
call fcn.14086ebe6
push rcx
retf 0xbf6f
push rcx
jns 0x140d7d4b2
mov r15, qword [rsp + 0x58]
xor si, 0x310
or r13b, 0xb5
mov r9, qword [rsp + 0x40]
movabs r10, 0x57fc153756c15520
mov byte [rsp + 0x40], 0x9a
movabs rcx, 0x3e5f447e44f82c36
cmp qword [rsp + 0x38], 0x28333bd2
bswap r13d
bswap r9
jno 0x140eb65a6
cmp word [rsp + 0x10], si
push r13
push r9
push r10
mov r13, qword [rsp + 0x30]
lea rsi, [r15 + 0x1d1b761a]
call fcn.140ea5f1b
xor qword [rsp + 0x38], 0x6ce52f84
and r9w, 0x2535
cmove r12d, r10d
mov r9, qword [rsp + 0x48]
cmp word [rsp + 0x38], r12w
lea rsp, [rsp + 8]
pop rcx
call 0x1408cf233
not r12b
add bx, r10w
jb 0x140eba5ac
jns 0x1408a4502
not rbp
add qword [rsp + 0x18], 0xfffffffffffd3bf0
not bp
call fcn.140ea1334
setne byte [rsp + 8]
lea r10, [r10 + r10*8 + 0x51951ac6]
neg r10b
pop r10
mov qword [rsp], 0x297f3d34
test word [rsp], 0x41fd
setno byte [rsp]
setl byte [rsp]
neg byte [rsp]
setae byte [rsp]
setae byte [rsp]
call fcn.1408800ba
add qword [rsp + 8], 0xffffffffffeba5a1
not bp
movzx cx, byte [rsp + 0x31]
or word [rsp + 0x30], cx
bswap r10d
cmp byte [rsp + 0x38], 0x2b
jle 0x140ea01b1

Function at 0x1408bafe6
Capabilities:
Encode data using xor

Disassembly:
jns 0x140d40c7e
jge 0x1408b3443
xor al, 0x7d
add ecx, dword [rcx]
jo 0x1408bafec
pushfq
xchg ecx, eax
jge 0x1408bb026
shl dword [rbp - 0x4ee48f45], 0x4d
movsb byte [rdi], byte [rsi]
fprem1
ret
invalid
call fcn.140ea9979

Function at 0x1408c23b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov r11d, 0x4a35770e
jbe fcn.140d7c235
not r11
bswap r11
xor r11d, 0x3080539b
jo 0x140e87f27
add qword [rsp], 0xfffffffffffcee6e
push r10
movabs r10, 0x69f759af3f7048e5
test r11, 0x55d10ca3
setne r11b
mov r11, qword [rsp + 0x20]
mov qword [rsp + 0x20], 0xffffffffc4e00373
mov r10b, 0x1b
mov r10, qword [rsp]
lea rsp, [rsp + 8]
ret 8
Function at 0x1408ce243
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov r11, qword [rsp + 0x10]
jo 0x14083abbb
imul eax, dword [rcx], 0x8793517e
shl ebp, 0x32
invalid
xor byte [rsp + 0x18], 0xdf
xor ebx, 0x5ca965e2
setg bl
and r12w, 0x642d
and dword [rsp + 0x28], 0x18e4aa0
xor r12d, dword [rsp + 0x1c]
or qword [rsp + 0x28], 0x368f551d
xor byte [rsp + 0x18], 0x97
not word [rsp + 0x18]
or word [rsp + 0x18], 0x5cf5
test word [rsp + 0x18], 0x394d
sete byte [rsp + 0x28]
or bl, 0x75
cmovl bx, word [rsp + 0x29]
mov rbx, qword [rsp + 0x30]
jle 0x140e965d5
cmova r12w, word [rsp + 0x28]
test qword [rsp + 0x28], 0x6fd661e2
lea r12, [r12 + r12 + 0x57616df9]
lea r12, [r12 + r12*2 + 0x1d75182f]
jl 0x1408b269e
jae 0x1408d94ba
movsx r9w, r9b
setns r9b
and r9b, 0x91
not r9d
and r9, r9
sub r9d, r9d
not r9
mov r9w, 0x73b5
mov r9, qword [rsp + 0x10]
call fcn.140895c82
mov dword [rsp + 0x28], r12d
call fcn.140ec5618
invalid

Function at 0x1408d71c6
Capabilities:
Resolve function by parsing pe exports

Disassembly:
neg word [rsp + 0x28]
or qword [rsp + 0x18], r13
setbe byte [rsp + 0x28]
add word [rsp + 0x38], 0x1725
jae 0x140e81e61
and eax, 0x7f830f17
lodsb al, byte [rsi]
pop rdx
add al, bh
clc
push rax
jge 0x1408d721e
cmp byte [rdi + rdi*8 - 0x6c0bc7a2], 0x78
push rsp
cmp byte [rdi*2 + 0x16c79806], dl
rcl byte [rbx + 0x52]
cmp al, bl
test ecx, ecx
cmp edi, dword [rax]
invalid
xchg esp, eax
xor al, byte [rsi + 0x38]
movsb byte [rdi], byte [rsi]
jmp 0x1408d71da
cmovs r13, qword [rsp + 0x18]
or r8d, 0x4b3069bb
or word [rsp + 0x38], 0x178e
xor r8b, r8b
jno 0x140e8f87b
mov rdx, qword [rsp + 0x10]
xor r8d, 0x6fb13337
test r13w, 0x5fa3
pop r13
not r8
pop r8
je 0x141100fa9
call fcn.140d5c817
call fcn.140d46e4f
in al, dx
insb byte [rdi], dx
cmc
jns 0x140d417a4
int3
push rdi
or dword [rax - 0x16], 0x5d1ab1d4
xlatb
mov byte [rbx + 0x45], al
int1
movsd dword [rdi], dword [rsi]
and eax, 0xf5866fe9
and eax, 0x951b381d
invalid
not word [rsp + 0x38]
setl byte [rsp + 0x28]
cmp r13b, byte [rsp + 0x1c]
jl 0x140d416e7
seta byte [rsp + 0x38]
xor word [rsp + 0x28], 0x14f3
jg 0x1408a09e5
xor qword [rsp + 0x18], 0x1ab27ae8
call 0x140ee075e

Function at 0x1408db140
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add esi, dword [rsp + 0x44]
bswap r11d
setno r11b
add qword [rsp + 8], 0xffffffffbf719a85
and sil, 0xd
mov r13, qword [rsp + 0x48]
xor qword [rsp + 0x40], 0x49d07565
add si, 0x69b7
jg 0x14085cec3

Function at 0x1408db16d
Capabilities:
Resolve function by parsing pe exports

Disassembly:
lea rdi, [rsi + rsi*8 + 0x6b7828bd]
setae sil
add qword [rsp], 0x538e64
sub sil, r9b
cmp edi, 0x74621f6a
jns 0x140f93a6f
ret 0x10
Function at 0x1408dc421
Capabilities:
Encode data using xor

Disassembly:
add dword [rsp + 0x18], 0x3035606b
add qword [rsp + 0x28], 0x13b1f7
xor r8, 0x5ffb4174
cmovae r12d, dword [rsp + 0x18]
and r12d, dword [rsp + 0x19]
or r11b, 0xad
neg r14
mov r8b, byte [rsp + 0x1c]
seto r12b
bswap r8d
js 0x1408dc432
add qword [rsp + 0x40], 0xffffffffbf04957b
lea r14, [r8 + 0x507d471e]
mov r11, qword [rsp + 0x20]
bswap r8d
not byte [rsp + 0x18]
sub r14, qword [rsp + 0x18]
add qword [rsp + 8], 0xffffffffbf283d8b
test r8, r8
jae 0x140fb0d5f
pop rsi
call fcn.140ed2dfd

Function at 0x1408e76ce
Capabilities:
Resolve function by parsing pe exports

Disassembly:
setle r10b
xor r10, 0x4f047fb0
xor r11b, 0x1e
and r10d, r11d
setno r11b
xor r11b, 0xb5
bswap r11d
and r10, 0x4f9e2ea2
movsx r10w, r11b
bswap r10d
setae r11b
mov r10w, 0x68d9
mov r10, qword [rsp + 0x40]

Function at 0x140d3e833
Capabilities:
Resolve function by parsing pe exports

Disassembly:
setbe r12b
sub r12d, r12d
jle 0x140f8f475
call fcn.14087d690
neg r15w
lea r12, [r12*2 + 0x4d381f39]
sub r15b, 0x22
add qword [rsp + 0x30], 0xffffffffbf12e320
xor r12w, 0x65ec
not r15b
lea r12, [r12*2 + 0x4c992b57]
mov r15, qword [rsp + 0x20]
add r12w, 0x406b
cmp r12b, 0x70
bswap r12
setg r12b
not r12b
call fcn.14089728e
invalid

Function at 0x140d3e845
Capabilities:
Resolve function by parsing pe exports

Disassembly:
movzx r12, r15b
jne 0x140d4adce
neg ecx
mov rcx, qword [rsp + 0x40]
mov r15w, 0x3fc4
cmp r15, 0x52bf237e
ja 0x1408f67af
sal dword [rax + rsi*2 + 0x75], cl
insd dword [rdi], dx
invalid

Function at 0x140d47450
Capabilities:
Resolve function by parsing pe exports

Disassembly:
movabs rbx, 0x7abd7595082a4442
lea rdi, [r10 + r12*2 + 0x3bc86f4b]
or rbx, 0x59ad0de5
movabs r12, 0x6e9a663756462bd1
movabs rbp, 0x2cce0c7f633a1e12
lea rbx, [rcx + rcx*4 + 0x1d5c3948]
push r11
movsx r12, r10w
movzx r10, r10w
setae bl
movzx r15, r15b
movabs r11, 0x36ac589567c86458
or r12b, 0xea
xor bpl, 0x68
bswap r10d
mov r11, qword [rsp]
movabs rdx, 0x553c77c4600f66b7
lea r15, [r10*4 + 0x1e6b34e0]
add rdx, r12
mov r10w, 0x8bb
or ebx, 0x6564651b
not ecx
or rcx, rdi
neg rdx
lea rdi, [rbx*2 + 0x37f5765c]
xor dil, bl
mov rdx, rdi
xlatb
jns fcn.1408aeec3
call fcn.1408291cb
and ebp, ebp
cmp byte [rsp + 0x68], r9b
call fcn.140833b09
push r8
call fcn.140e98450
mov cl, 9
pop rax
imul eax, ebp, 0x20d8eb57
cli
sub eax, 0xf1df31fc
insd dword [rdi], dx
xor al, 0xdf
jns 0x140d41ee6
xchg dword [rax], ecx
fild qword [0x161af7674]
push rsi
test dword [rax + rsi + 0x20], esi
iretd
jl 0x140d4adce
mov r10, r12
jne 0x140d41e51
sub r12d, ebp
cmp edi, 0x7795090a
sete r15b
lea rdx, [r15 + rbp*8 + 0x59804a7]
call fcn.140870d77

Function at 0x140d4ade8
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r14
push r13
movabs rbp, 0x8a14c2f04320e95
test bpl, bpl
movabs r13, 0x60c1639a0bc346d7
js 0x140d6ed21
or esi, ebp
mov byte [rsi - 0x7b], al
jne 0x140d4ae24
invalid
push 0x5e9d0445
invalid

Function at 0x140d58e71
Capabilities:
Resolve function by parsing pe exports

Disassembly:
pushfq
add qword [rsp + 8], 0xffffffffbf2be1af
Function at 0x140d5b8ec
Capabilities:
Resolve function by parsing pe exports

Disassembly:
lea rcx, [rcx*2 + 0x7d935c96]
sete dil

Function at 0x140d6fe70
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add bpl, 0x75
and rbx, rbp
push r14
movabs r14, 0x4fee42db14b870a2
add ebp, ebp
not r14b
and bpl, bl
or bpl, 0x67
sub ebp, 0x60b47755
cmp r14, 0x6cbe1c5e
movabs rbx, 0x4e49323d280e6fc0
mov ebx, 0x3b29318b
setl bl
jns 0x140d84c03
push rdi
jae 0x14083e1a3

Function at 0x140d7c220
Capabilities:
Resolve function by parsing pe exports

Disassembly:
jle 0x140855bae
push qword [rsp + 0x60]
popfq
lea rsp, [rsp + 0x68]
call fcn.14103fafc

Function at 0x140d853b6
Capabilities:
Resolve function by parsing pe exports

Disassembly:
call fcn.14082ca8b
xor r15, 0x74e37b50
jg 0x140845317
mov qword [rsp + 8], 0x3bfb57f8
push rbp
je 0x140fb6c43
setns byte [rsp + 0x10]
movabs rbp, 0x31de42d41c6e579c
mov word [rsp + 0x10], 0x4e36
or qword [rsp + 0x10], rbp
lea rbp, [rbp + rbp*8 + 0x6a193680]
push rcx
push rdx
mov rcx, qword [rsp + 0x20]
not ebp
or word [rsp + 0x20], 0xfe0
or cx, word [rsp + 0x21]
movabs rdx, 0x473c5bd87cb850aa
mov rdx, qword [rsp]
mov qword [rsp + 0x20], 0x4666189b
neg bpl
sets bpl
xor bp, word [rsp + 0x20]
sub rbp, qword [rsp + 0x20]
call fcn.140fa8ec7
seta cl
bswap ecx
je fcn.140d7c19d
sub ecx, ecx
movzx rcx, cx
call fcn.140eb1c90
jle 0x140fb6c40
xchg rdi, rdi
adc dword [rcx + 0x57], eax
pushfq
movabs r15, 0x683319a631177a94
neg r15d
setno r15b
neg r15b
js 0x1408e64e2
add al, 0xe8
ret

Function at 0x140e0a89e
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov dl, 0x12
sub word [rsp + 0x28], 0x396c
call fcn.140f95f34
push rbp
sub al, 0xd9
xchg ebx, eax
pop rcx
lea eax, [rbx]
xor ah, byte [rdx]
mov eax, ds
mov bl, 0x27
in al, dx
invalid
add rbx, qword [rsp + 0x28]
cmovle bx, dx
not dword [rsp + 0x30]
sete bl
xor byte [rsp + 0x38], 0x1c
neg byte [rsp + 0x30]
add rdx, rdx
jge 0x140ec5bcc
neg r12d
bswap edx
mov rdx, qword [rsp + 8]
lea rsp, [rsp + 0x10]
ret 8
mov byte [rsp + 0x38], bh
test dword [rsp + 0x38], 0x44355848
setb bl
jns 0x140d4c7dd
test byte [rsp + 0x28], 0x7f
not bx
mov byte [rsp + 0x30], 0xc6
jg 0x140eda27c
mov rbx, qword [rsp + 0x18]
jae 0x14089d348
push r14
pushfq
movabs r14, 0x29e8318c4862758c
lea r14, [r14*2 + 0x69b14074]
push r14
test byte [rsp], r14b
setle r14b
not word [rsp]
push r10
movabs r10, 0x6f8904081af3036a
or word [rsp + 8], 0x5bbd
test dword [rsp + 0xa], r10d
call fcn.140d68b26
not r10
add qword [rsp + 0x28], 0x41b5003a
call fcn.1408508e9

Function at 0x140e87ee2
Capabilities:
Resolve function by parsing pe exports

Disassembly:
lea rsi, [rsi + r11*8 + 0x6b116fc1]
jno 0x1408a36dd

Function at 0x140e8b523
Capabilities:
Resolve function by parsing pe exports

Disassembly:
setl r12b
add qword [rsp + 0x28], 0x615cbe
cmp r12w, word [rsp + 0x5b]
mov rdx, qword [rsp + 0x38]
bswap edi
not dil
not word [rsp + 0x58]
jle 0x1408c304e
xor rsi, rbx
xor ah, byte [rax]
xor eax, 0xc1b4deea
cmc
and byte [rbx], cl
jmp 0x155b8c1e5

Function at 0x140e8d5bb
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov r11, qword [rsp + 0x30]
ja 0x140854c5d
Function at 0x140e90d3f
Capabilities:
Resolve function by parsing pe exports

Disassembly:
movabs r8, 0x634a1cc27c384729
xor r8d, 0x71371b0c
xor r8w, 0x2341
xor r8d, 0x1c9c6e35
push r10
or r8b, 0xf8
bswap r8
sub r8, 0x66c51d7e
and r9, qword [rsp + 0x28]
and r14, qword [rsp + 0x28]
not r8
movabs r8, 0x66260a3721056349
cmp r9, 0x57db653f
mov dil, r8b
setl byte [rsp + 0x28]
and r10b, byte [rsp + 0x2f]
mov r14, qword [rsp + 0x20]
bswap r9d
or r10, r9
and r8w, word [rsp + 0x2c]
neg r10
xor edi, dword [rsp + 0x2a]
add qword [rsp + 0x40], 0x16aaf9
sub r10b, 0x5d
and cl, 0xe3
neg r15w
push r8
movabs r8, 0x6a204c3350175ac3
push rcx
jge 0x1408673b5
setns cl
push r14
push r9
mov r9, qword [rsp + 0x10]
not cx
push rdi
cmp r10b, byte [rsp + 0x1f]
mov r14, qword [rsp + 0x18]
mov r15, qword [rsp + 0x28]
lea rcx, [r10*8 + 0x50f44836]
mov dword [rsp + 0x18], ecx
not r8
call fcn.14081e2ae
adc edi, dword [rsi - 0x14]
sbb dword ss:[rbx - 0x694ddf7f], ecx
test al, 0x6a
and byte [rcx + rbx*2], cl
invalid
cmovne r8d, dword [rsp + 0x2c]
or r10d, r9d
sub qword [rsp + 0x28], 0x2ae73c86
test dword [rsp + 0x28], r10d
je 0x140899755
not r8
neg r9d
jb 0x140888767
mov ecx, 0xede18cd3
sal dword [0xc3019506], cl
shr ebx, 1
int1
invalid

Function at 0x140e96552
Capabilities:
Resolve function by parsing pe exports

Disassembly:
seta bl
add word [rsp + 0x40], 0x4d1f
sub dword [rsp + 0x10], ebx
jg 0x140eba660
call fcn.1408e3b6c
push r15
movabs r15, 0x2ed912b530074c14
and word [rsp + 0x70], 0x6cf6
lea rcx, [rcx + rcx*2 + 0x19d008db]
not cl
ja 0x140f99e08
seta r10b
lea rsi, [r10 + rsi*2 + 0x66e64fe8]
and r10w, si
push r13
not si
movabs r13, 0x24da364226347290
sub r10d, r13d
and r10d, 0x12e44231
bswap r13
not r13b
cmp rsi, 0x1bb3412a
call fcn.140828ee7
add cl, byte [rsp + 0x74]
bswap rcx
mov byte [rsp + 0x70], ch
not dword [rsp + 0x40]
mov rcx, qword [rsp + 0x60]
not dword [rsp + 0x70]
and byte [rsp + 0x70], 0x12
add byte [rsp + 0x70], 0x7d
jbe 0x140ea8c3c
setb byte [rsp + 0x70]
cmp qword [rsp + 0x70], 0x49363022
seto byte [rsp + 0x70]
sub byte [rsp + 0x40], 0x30
not dword [rsp + 0x40]
sub dword [rsp + 0x40], 0x311014a

Function at 0x140e9a399
Capabilities:
Resolve function by parsing pe exports

Disassembly:
jb 0x141100dae
mov r8w, 0x3a99
movabs r8, 0x655e7c50473a17eb
neg r8w
not r8b
test r8w, r8w
movabs r8, 0x10c8009a7b117d55
not r8d
mov r8, qword [rsp + 0x28]
call fcn.1408cfe95

Function at 0x140e9a3ee
Capabilities:
Resolve function by parsing pe exports

Disassembly:
js 0x1408b4329
not qword [rsp + 0x18]
xor qword [rsp + 0x18], 0x1e31212b
neg qword [rsp + 0x18]
sub word [rsp + 0x18], 0x4013
seta byte [rsp + 0x10]
call fcn.140d7de32
or al, 0x80
cmp al, 0xbf
invalid
Function at 0x140e9d873
Capabilities:
Encode data using xor

Disassembly:
setae byte [rsp + 8]
and byte [rsp + 0x10], cl
cmp ecx, dword [rsp + 0xa]
mov rcx, qword [rsp + 0x20]
setae byte [rsp + 0x18]
jne 0x140e8eab9
movabs r9, 0x6ad919ab30003c54
push r12
push r13
mov r13, r9
mov rcx, qword [rsp + 0x50]
mov qword [rsp + 0x50], 0x29841349
push r11
bswap rbp
lea r12, [r13*8 + 0x163a6480]
jge 0x140ee0932
xor eax, 0xe7d8eed7
invalid
seto byte [rsp + 8]
test dword [rsp + 0x38], 0x56780540
setns byte [rsp + 0x38]
or byte [rsp + 0x38], 0xd
xor word [rsp + 0x38], 0x3906
cmp word [rsp + 8], 0x136a
not byte [rsp + 0x18]
mov dword [rsp + 0x38], 0xef71a23
mov word [rsp + 0x38], 0x5573
setne byte [rsp + 0x10]
test word [rsp + 0x10], 0x6bd5
ja 0x1408554a1
cmpsd dword [rsi], dword [rdi]
in eax, dx
mov edx, 0xcc548013
jp 0x140e8ea8e
invalid
je 0x140e0a8d6
mov r14, qword [rsp + 0x40]
sub qword [rsp + 0x88], 0x52470812
not cl
and ecx, dword [rsp + 0x94]
and qword [rsp + 0x88], rcx
xor rcx, qword [rsp + 0x90]
jo 0x140e9d88a
lea rcx, [r13 + r15*2 + 0x361c4f33]
and byte [rsp + 0xb0], r13b
neg byte [rsp + 0x88]
mov ecx, 0x3cb601c0
test dword [rsp + 0x88], r15d
mov r13d, dword [rsp + 0x91]
lea rsp, [rsp + 0x58]
ret

Function at 0x140ea825f
Capabilities:
Resolve function by parsing pe exports

Disassembly:
test rdi, rdi
jne 0x1408f67e5
neg rdi
test dx, 0x4603
movzx di, di
jae 0x140e9a390

Function at 0x140eaa283
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push rbp
lea rbx, [r9*8 + 0x7ad907d3]
mov rbp, r13
push rbx
add bx, word [rsp]
mov r13, qword [rsp + 0x50]
mov qword [rsp + 0x50], 0xfffffffff31725ec
movsx cx, word [rsp + 5]
cmp ebp, dword [rsp + 0x30]
setbe cl
not esi
test bx, 0x56d

Function at 0x140eaa8c5
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], r10
jl 0x140ec7977
neg dil
bswap r10
xor r12, r10
add qword [rsp], 0x6d1b37
or qword [rsp + 8], 0x1ffe65a4
cmp bl, byte [rsp + 0xb]
jns 0x1408bac10
neg ebx
mov rbx, qword [rsp + 0x38]
cmp r10d, dword [rsp + 0xc]
ret 8

Function at 0x140eb2e9c
Capabilities:
Encode data using xor

Disassembly:
mov rsi, qword [rsp + 0x20]
call fcn.140857746
lea r8, [r8 + r8*4 + 0x67ea3922]
lea r8, [r8*2 + 0x20ff4b8f]
not r8
jge 0x140ee0321
pop r13
bswap r14d
jge 0x1408b5a67
cmp word [rsp + 0x70], 0x455
lea rsp, [rsp + 0x28]
ret 8
setne r8b
xor r8, 0x23265133
not r8d
not r8d
add r8b, 0xcc
mov r8, qword [rsp + 0x20]
push rcx
and eax, dword es:[rcx - 9]
rol byte [rcx - 9], 1
rol byte [rcx - 0x80], 1
ror ah, 0x4c
mov eax, dword [rsp + 0x20]
call fcn.140d5b798
lahf
xor eax, 0x5cc89311
push rdx
adc edx, dword [rbx + 0x255b69b8]
xchg ebx, eax
adc bh, bh
jne 0x140ee0329
insb byte [rdi], dx
mov ebx, 0x6ca790de
push rsi
sub ah, byte [rbx + 5]
xchg ebx, eax
invalid

Function at 0x140eb4050
Capabilities:
Resolve function by parsing pe exports

Disassembly:
not r11w
push rbp
je 0x140eba689
mov r11, qword [rsp + 0x18]
mov rbp, qword [rsp + 0x38]
movabs r8, 0x5362238622a06434
mov r8, qword [rsp + 0x38]
lea r13, [r10*8 + 0x523b7247]
call fcn.140e9585d