joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400040f0
Capabilities:
Encode data using xor

Disassembly:
push rbp
sub rsp, 0x40
lea rbp, [rsp + 0x40]
mov qword [rbp - 0x30], r8
mov qword [rbp - 0x28], rdx
mov qword [rbp - 0x20], rcx
mov eax, 0x10
call fcn.1401d4340
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x18], rax
sub rsp, 0x20
call fcn.140004360
add rsp, 0x20
mov qword [rbp - 0x10], rax
mov ecx, 0x3e88
sub rsp, 0x20
call fcn.140004000
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp - 0x10]
mov qword [rbp - 8], rcx
mov al, byte [rax]
mov cl, 0xe8
xor cl, 0xe8
cmp al, cl
jne 0x140004348
mov r9, qword [rbp - 0x20]
mov r10, qword [rbp - 0x18]
mov rax, qword [rbp - 0x28]
mov rcx, qword [rbp - 0x30]
mov rdx, qword [rbp - 8]
mov qword [r9], rdx
mov qword [r9 + 0x18], rcx
mov qword [r9 + 0x10], rax
mov dword [r10], 0
xor eax, eax
mov ecx, eax
mov edx, 0x1ff000
lea r8, [0x140004093]
xor eax, eax
mov rax, qword [0x1401eb4e8]
sub rsp, 0x30
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x28], r10
call qword [rax]
mov rcx, qword [rbp - 0x20]
add rsp, 0x30
mov qword [rcx + 8], rax
movabs rcx, 0x9f7361dfc9976b80
movabs rdx, 0x9f7361dfc9976b81
xor rcx, rdx
cmp rax, rcx
jge 0x140004348
mov eax, dword [0x1401d5330]
add eax, dword [0x1401d5334]
mov ecx, eax
xor ecx, 0xae67c13c
mov edx, 0xffffffff
xor edx, 0xae67c13c
and eax, edx
shl eax, 1
sub eax, ecx
mov ecx, eax
xor ecx, 0x230ff7e0
mov edx, 0xffffffff
xor edx, 0x230ff7e0
and eax, edx
shl eax, 1
sub eax, ecx
mov ecx, 0xc47ca30a
xor ecx, 0xc47ca30a
mov edx, 0x6e20544d
xor edx, 0x2e238769
sub ecx, edx
sub eax, ecx
cmp eax, 0xe0b158ad
ja 0x14000434d
mov eax, dword [0x1401d5338]
mov ecx, dword [0x1401d533c]
mov edx, 0x6dc66641
xor edx, 0x29e1dcfb
xor ecx, edx
xor edx, edx
div ecx
add eax, 0xf283265
imul eax, eax, 0xace3a9c3
mov edx, 0xde4b239
xor edx, 0xf21b4dc6
mov ecx, eax
xor ecx, edx
and ecx, 0xd0a6863e
mov edx, 0xc7a9eec7
xor edx, 0x170f68f9
mov r8d, 0x83a5315d
xor r8d, 0x7c5acea2
xor edx, r8d
and eax, edx
sub eax, ecx
mov dword [rbp - 0x34], eax
movabs rcx, 0xf4d4bfd4ca49ddc8
movabs rax, 0xf4d4bfd4ca49dd88
xor rcx, rax
movabs rdx, 0xcdf2786e99d06bdb
movabs rax, 0xcdf2786e99d06bd3
xor rdx, rax
sub rsp, 0x20
call fcn.1400133d1
add rsp, 0x20
mov rcx, rax
mov rax, qword [0x1401eb650]
mov qword [rcx], rax
lea rax, [0x1401e22d8]
mov qword [rcx + 0x10], rax
mov rax, qword [0x1401e2310]
mov qword [rcx + 0x18], rax
mov rax, qword [0x1401e2318]
mov qword [rcx + 0x20], rax
mov qword [rcx + 8], 0
lea rdx, [0x1401e22d8]
lea r8, [0x1401e22ef]
lea r9, [0x1401e22fc]
sub rsp, 0x30
mov qword [rsp + 0x20], 0x6abaa4d5
call fcn.14001331d
mov eax, dword [rbp - 0x34]
add rsp, 0x30
cmp eax, 0x6456256b
jb 0x14000423a
jmp 0x140004348
mov rsp, rbp
pop rbp
ret
call qword [rdi - 0x40]
shr cl, 1
in al, 0xfe
invalid
Function at 0x140004360
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x38
mov eax, dword [0x1401d5340]
mov edx, dword [0x1401d5344]
mov ecx, eax
xor ecx, edx
xor edx, 0xffffffff
and eax, edx
shl eax, 1
sub eax, ecx
mov ecx, 0xf32e94cf
xor ecx, 0x25a993dd
add eax, ecx
add eax, 0x5a42074e
mov ecx, eax
xor ecx, 0x1461ab
xor ecx, 0xffffffff
mov edx, 0x9730294c
xor edx, 0x972448e7
or eax, edx
and eax, ecx
cmp eax, 0x81c50afe
jae 0x140004469
mov eax, dword [0x1401d5348]
mov r8d, dword [0x1401d534c]
mov ecx, 0x33cd7334
xor ecx, 0xcc328ccb
mov r9d, r8d
xor r9d, ecx
mov edx, eax
and edx, r9d
mov ecx, eax
or ecx, r9d
mov r9d, 0x66fdb4aa
xor r9d, 0x99024b55
xor ecx, r9d
imul ecx, edx
mov edx, eax
and edx, r8d
or eax, r8d
imul eax, edx
add eax, ecx
mov ecx, 0x4e539f46
xor ecx, 0x94cab370
or eax, ecx
mov ecx, 0x8831de5b
xor edx, edx
div ecx
add eax, 0x15daa0b7
mov ecx, 0x31c23f2b
xor ecx, 0xf6bb991d
add eax, ecx
mov ecx, 0xb3b9d54c
xor ecx, 0xa66375fb
sub eax, ecx
mov dword [rsp + 0x2c], eax
mov rax, qword [0x1401eb950]
mov ecx, dword [rax]
call fcn.140007543
mov rcx, rax
mov eax, dword [rsp + 0x2c]
add rcx, 0x60
mov qword [rsp + 0x30], rcx
cmp eax, 0x79b2235b
je 0x1400043b5
mov rax, qword [rsp + 0x30]
add rsp, 0x38
ret
add eax, dword [rax]
test eax, 0xff43e9ff
invalid
Function at 0x14000aa66
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x28
mov qword [rsp + 0x20], rcx
call fcn.14000aa89
mov rdx, qword [rsp + 0x20]
mov rcx, rax
add rcx, 0x68
add rsp, 0x28
jmp fcn.14000a070

Function at 0x14000b3a0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x58
mov qword [rsp + 0x38], r8
mov rax, rdx
mov rdx, rax
imul rdx, rcx
mov qword [rsp + 0x40], rdx
cvtsi2sd xmm0, rcx
cvtsi2sd xmm1, rax
mulsd xmm0, xmm1
movsd qword [rsp + 0x48], xmm0
cvtsi2sd xmm1, rdx
movsd qword [rsp + 0x50], xmm1
ucomisd xmm0, xmm1
jne 0x14000b3ec
jp 0x14000b3ec
jmp 0x14000b437
movsd xmm1, qword [rsp + 0x48]
movsd xmm0, qword [rsp + 0x50]
subsd xmm0, xmm1
call fcn.1401d43f0
movaps xmm1, xmm0
movsd xmm0, qword [rsp + 0x48]
movsd qword [rsp + 0x28], xmm1
call fcn.1401d43f0
movsd xmm1, qword [rsp + 0x28]
movsd xmm2, qword [0x1401e23a0]
mulsd xmm1, xmm2
mov al, 1
ucomisd xmm0, xmm1
mov byte [rsp + 0x37], al
jb 0x14000b44a
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x40]
mov qword [rax], rcx
xor eax, eax
mov byte [rsp + 0x37], al
mov al, byte [rsp + 0x37]
mov byte [rsp + 0x27], al
mov eax, dword [0x1401d5638]
add eax, dword [0x1401d563c]
mov ecx, 0x6fe4a727
xor ecx, 0x4d77d02d
or eax, ecx
sub eax, 0x4b40b355
imul eax, eax, 0x1c36ee9a
cmp eax, 0xecf4a068
ja 0x14000b4de
mov eax, dword [0x1401d5640]
mov ecx, dword [0x1401d5644]
mov edx, 0x8455c51b
xor edx, 0x4ff84d43
xor ecx, edx
and eax, ecx
and eax, 0xa056e09c
add eax, 0xae9c0064
mov ecx, 0x10f6bb76
xor ecx, 0x1f2936e7
sub eax, ecx
add eax, 0x9677daad
add eax, 0xfdf8d91
mov ecx, 0xa1f21995
xor ecx, 0x24429372
cmp eax, ecx
jbe 0x14000b481
mov al, byte [rsp + 0x27]
and al, 1
movzx eax, al
add rsp, 0x58
ret
test dword [rdx - 0x34], ebx
adc ebp, ecx
invalid
Function at 0x14000cf70
Capabilities:
Encode data using xor

Disassembly:
push rbp
sub rsp, 0x30
lea rbp, [rsp + 0x30]
mov qword [rbp - 0x20], rcx
mov eax, 0x10
call fcn.1401d4340
sub rsp, rax
mov r8, rsp
mov qword [rbp - 0x18], r8
mov rax, rcx
add rax, 8
mov qword [rbp - 0x10], rax
mov rcx, qword [rcx + 8]
movabs rdx, 0x26e50db17f46dcd0
movabs rax, 0x26e50db17f46dcd3
xor rdx, rax
sub rsp, 0x20
call fcn.14000b3a0
add rsp, 0x20
test al, 1
jne 0x14000cfd2
jmp 0x14000cfe4
sub rsp, 0x20
call fcn.1400077a3
add rsp, 0x20
jmp 0x14000d159
mov rax, qword [rbp - 0x18]
mov rax, qword [rax]
mov ecx, 2
cqo
idiv rcx
mov rcx, rax
mov rax, qword [rbp - 0x10]
mov qword [rax], rcx
movabs rdx, 0xc180f0a432311861
movabs rax, 0xc180f0a432311871
xor rdx, rax
lea r8, [rbp - 8]
sub rsp, 0x20
call fcn.14000b3a0
add rsp, 0x20
test al, 1
jne 0x14000d034
jmp 0x14000d046
sub rsp, 0x20
call fcn.1400077a3
add rsp, 0x20
jmp 0x14000d159
mov rax, qword [rbp - 8]
mov qword [rbp - 0x28], rax
cmp rax, 0
jge 0x14000d070
sub rsp, 0x20
mov rcx, r8
mov rdx, r8
call fcn.14000d167
add rsp, 0x20
jmp 0x14000d159
mov eax, dword [0x1401d5708]
mov edx, dword [0x1401d570c]
and eax, eax
mov ecx, 0xe2232dd
xor ecx, 0xf1ddcd22
xor eax, ecx
mov ecx, edx
xor ecx, 0xffffffff
xor edx, 0xffffffff
or ecx, edx
mov edx, 0x2f2bb7aa
xor edx, 0xd0d44855
xor eax, edx
xor ecx, 0xffffffff
or eax, ecx
mov ecx, eax
and ecx, 0x77f147ef
xor ecx, 0xffffffff
add eax, 0x77f147ef
add eax, 1
add eax, ecx
imul eax, eax, 0x4022f15
mov ecx, 0x24f4f8d7
xor ecx, 0x24f4f8d7
mov edx, 0x5ee95d5e
xor edx, 0xba9aea80
sub ecx, edx
add eax, ecx
cmp eax, 0x82a69a41
je 0x14000d15e
mov rax, qword [rbp - 0x20]
mov rdx, qword [rbp - 0x28]
mov ecx, dword [0x1401d5710]
mov r8d, 0x74211ea1
xor r8d, 0x544226fe
xor ecx, r8d
and ecx, dword [0x1401d5714]
or ecx, 0x729896bb
add ecx, 0x3156d311
mov r8d, 0x5baa4fc4
xor r8d, 0x1eee7ee9
add ecx, r8d
mov dword [rbp - 0x2c], ecx
mov rcx, qword [rax + 0x10]
sub rsp, 0x20
call fcn.14000cdf9
mov rcx, qword [rbp - 0x20]
add rsp, 0x20
mov rdx, rax
mov eax, dword [rbp - 0x2c]
mov qword [rcx + 0x10], rdx
cmp eax, 0x4dd5a889
jbe 0x14000d0e7
jmp 0x14000d159
mov rsp, rbp
pop rbp
ret
imul edx, eax, 0x51
xlatb
jmp 0x14000d0e7
Function at 0x14000d1a0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x48
mov qword [rsp + 0x30], rdx
mov rax, rcx
mov rcx, qword [rsp + 0x30]
mov qword [rsp + 0x38], rax
mov qword [rax], 0
mov qword [rax + 8], rcx
mov edx, 0x10
lea r8, [rsp + 0x40]
call fcn.14000b3a0
test al, 1
jne 0x14000d1dd
jmp 0x14000d1e7
call fcn.1400077a3
jmp 0x14000d366
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x28], rax
cmp rax, 0
jge 0x14000d205
call fcn.14000b01b
jmp 0x14000d366
mov eax, dword [0x1401d5718]
mov ecx, 0x7110e15c
xor ecx, 0x6fa9af15
xor eax, ecx
xor edx, edx
div dword [0x1401d571c]
and eax, 0xd3daa888
sub eax, 0xd57fe78f
or eax, 0x4ea21d2e
cmp eax, 0x729d5ea6
ja 0x14000d400
mov rcx, qword [rsp + 0x28]
mov edx, dword [0x1401d5720]
mov r8d, dword [0x1401d5724]
xor r8d, 0x3bab841b
mov eax, edx
xor eax, 0xffffffff
mov r9d, edx
xor r9d, 0xffffffff
and eax, r9d
mov r9d, r8d
or r9d, r9d
xor r9d, 0xffffffff
or eax, r9d
xor eax, 0xffffffff
or edx, r8d
mov r8d, 0x2bf49699
xor r8d, 0xd40b6966
xor edx, r8d
or eax, edx
xor eax, 0xffffffff
mov r9d, 0xc6a4aa75
xor r9d, 0x21ac9ee4
mov edx, 0x139c3605
xor edx, 0xec63c9fa
xor r9d, edx
mov r8d, eax
and r8d, r9d
mov edx, eax
or edx, r9d
mov r9d, 0x1f0b1d47
xor r9d, 0xe0f4e2b8
xor edx, r9d
imul edx, r8d
mov r8d, eax
and r8d, 0xe7083491
or eax, 0xe7083491
imul eax, r8d
add eax, edx
mov edx, eax
xor edx, 0xffffffff
mov r8d, 0x4de2306d
xor r8d, 0x27466b9f
and r8d, edx
mov r9d, 0xffffffff
xor r9d, 0x6aa45bf2
mov edx, eax
and edx, r9d
imul edx, r8d
mov r8d, eax
and r8d, 0x6aa45bf2
mov r9d, 0x63ced7cc
xor r9d, 0x96a8c3e
or eax, r9d
imul eax, r8d
add eax, edx
xor edx, edx
sub edx, 0xf5ec2c89
sub eax, edx
mov dword [rsp + 0x24], eax
mov eax, 0x15deffa2
xor eax, 0xef6d5d99
mov dword [rsp + 0x20], eax
call fcn.14000aa66
mov rdx, qword [rsp + 0x38]
mov ecx, dword [rsp + 0x20]
mov r8, rax
mov eax, dword [rsp + 0x24]
mov qword [rdx + 0x10], r8
cmp eax, ecx
jae 0x14000d400
jmp 0x14000d366
mov eax, dword [0x1401d5728]
xor edx, edx
div dword [0x1401d572c]
mov ecx, 0x36b622a3
xor ecx, 0x9a15053c
sub eax, ecx
sub eax, 0xe09e4564
mov edx, eax
xor edx, 0xffffffff
and edx, 0x58d7b02e
mov r8d, 0xffffffff
xor r8d, 0x58d7b02e
mov ecx, eax
and ecx, r8d
imul ecx, edx
mov r8d, 0x65df337c
xor r8d, 0x3d088352
mov edx, eax
and edx, r8d
or eax, 0x58d7b02e
imul eax, edx
add eax, ecx
cmp eax, 0x160f9ee7
ja 0x14000d409
mov eax, dword [0x1401d5730]
mov ecx, dword [0x1401d5734]
xor ecx, 0xdadb9cc6
and eax, ecx
xor eax, 0x538ae712
or eax, 0x36a95e96
xor eax, 0x8b7bcb0e
cmp eax, 0x89d95b2d
jb 0x14000d3cd
add rsp, 0x48
ret
xchg qword [rsi - 0x3c], r11
jmp 0x14000d23a
jno 0x14000d414
ja 0x14000d47c
jmp 0x14000d3cd
nop word cs:[rax + rax]
and edx, eax
Function at 0x140010050
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x58
mov qword [rsp + 0x38], rcx
call fcn.14000aa89
mov rcx, qword [rsp + 0x38]
mov qword [rsp + 0x40], rax
mov rax, qword [rcx]
mov rcx, qword [rax]
mov qword [rsp + 0x48], rcx
cmp rcx, 0
mov qword [rsp + 0x50], rax
je 0x1400100b0
mov rax, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x38]
call rax
mov rax, qword [rsp + 0x40]
mov al, byte [rax + 0x60]
mov cl, 0xd7
xor cl, 0xd7
cmp al, cl
jne 0x1400101a6
mov rax, qword [rsp + 0x38]
mov rax, qword [rax]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x30], rax
mov eax, dword [0x1401d5858]
xor eax, 0x3de1a195
imul eax, dword [0x1401d585c]
add eax, 0xa2492e4
mov ecx, 0x914550a1
xor ecx, 0xf0c6df0d
mov edx, eax
xor edx, ecx
xor edx, 0xffffffff
and edx, 0x61838fac
mov ecx, 0x247ad7bc
xor ecx, 0x247ad7be
imul ecx, edx
sub ecx, 0x61838fac
sub eax, ecx
mov r8d, 0xffffffff
xor r8d, 0xb0369cef
mov edx, eax
and edx, r8d
mov ecx, eax
or ecx, r8d
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, 0xb0369cef
or eax, 0xb0369cef
imul eax, edx
add eax, ecx
cmp eax, 0xb3110937
jae 0x140010240
mov rcx, qword [rsp + 0x38]
mov eax, dword [0x1401d5860]
xor eax, 0x21c80ecf
xor edx, edx
div dword [0x1401d5864]
mov edx, eax
mov rax, qword [rsp + 0x30]
and edx, 0x73e862d5
or edx, 0x5337606f
mov r8d, 0x44a38f62
xor r8d, 0x5a9ff3f4
add edx, r8d
mov dword [rsp + 0x2c], edx
mov edx, 0x997addeb
xor edx, 0xa3bb1f14
mov dword [rsp + 0x28], edx
movsx rdx, word [rax + 0x10]
call fcn.14000eb78
mov ecx, dword [rsp + 0x28]
mov eax, dword [rsp + 0x2c]
cmp eax, ecx
je 0x140010240
jmp 0x1400101a6
mov eax, dword [0x1401d5868]
mov ecx, dword [0x1401d586c]
mov edx, 0x40a46c91
xor edx, 0x3cd74ece
add eax, edx
add eax, ecx
mov ecx, 0xc94f36b2
xor ecx, 0xb53c14ed
sub eax, ecx
add eax, 0xe17270fc
mov ecx, 0xf5641761
xor ecx, 0x4344686a
mov edx, 0x99157715
xor edx, 0x66ea88ea
xor ecx, edx
xor edx, edx
sub edx, 1
sub ecx, edx
sub eax, ecx
or eax, 0xb009cd4e
mov ecx, 0xfcca482b
xor ecx, 0x5d415d8e
cmp eax, ecx
jbe 0x140010249
mov eax, dword [0x1401d5870]
or eax, dword [0x1401d5874]
mov ecx, 0xdc1a98da
xor ecx, 0x9f9cb17c
or eax, ecx
imul eax, eax, 0xe9cc806c
or eax, 0x68cefe82
cmp eax, 0x523934cc
jb 0x14001020c
add rsp, 0x58
ret
invalid
pop rax
rcl byte [rsi - 0x45169c], cl
invalid
Function at 0x140010510
Capabilities:
Encode data using xor

Disassembly:
push rax
mov qword [rsp], rcx
mov ecx, dword [0x1401d5888]
sub ecx, dword [0x1401d588c]
xor ecx, 0xa969bf34
mov r8d, 0x2d89f03c
xor r8d, 0x6c569ed
mov eax, 0x5deee37a
xor eax, 0xa2111c85
xor r8d, eax
mov edx, ecx
and edx, r8d
mov eax, ecx
or eax, r8d
xor eax, 0xffffffff
imul eax, edx
mov edx, ecx
and edx, 0x2b4c99d1
or ecx, 0x2b4c99d1
imul ecx, edx
add ecx, eax
mov eax, 0xa35ccc68
xor eax, 0x5ca33397
mov edx, ecx
xor edx, eax
mov eax, 0x7b77f45f
xor eax, 0x6e78d3ab
and eax, edx
mov edx, 0xffffffff
xor edx, 0x150f27f4
and ecx, edx
or eax, ecx
cmp eax, 0x443cb218
je 0x1400105de
mov rcx, qword [rsp]
mov eax, dword [0x1401d5890]
xor edx, edx
div dword [0x1401d5894]
imul eax, eax, 0x1a03f8b6
mov edx, 0xd56156a2
xor edx, 0xe78fdf99
xor eax, edx
sub eax, 0xb1a1a30c
mov qword [rcx], 0
mov qword [rcx + 8], 0
cmp eax, 0x73431cf8
je 0x140010598
pop rax
ret
std
invalid
Function at 0x140013130
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x38
mov rax, rcx
mov rcx, qword [rax]
mov qword [rsp + 0x30], rcx
mov qword [rax], rdx
call fcn.140012e00
test al, 1
jne 0x140013154
jmp 0x140013258
mov eax, dword [0x1401d59d8]

Function at 0x140014010
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x30], rcx
mov eax, dword [0x1401d5a38]
mov ecx, 0x62d69185
xor ecx, 0x4c3f11b5
xor eax, ecx
mov ecx, dword [0x1401d5a3c]
xor ecx, 0xfc2ce2e5
mov edx, 0xf68964fc
xor edx, 0x8a47c366
sub eax, edx
add eax, ecx
add eax, 0x7ccea79a
mov ecx, 0x10e2a59e
xor edx, edx
div ecx
mov ecx, 0x6e27bd63
xor edx, edx
div ecx
mov ecx, 0xc2b782ee
xor ecx, 0x315ce3d1
xor edx, edx
div ecx
cmp eax, 0xec3336d5
jae 0x1400140e6
mov rcx, qword [rsp + 0x30]
mov eax, dword [0x1401d5a40]
xor eax, 0xb5ce672b
or eax, dword [0x1401d5a44]
and eax, 0x904bc827
xor edx, edx
sub edx, 0x5718317d
sub eax, edx
and eax, 0x910fc6d9
mov dword [rsp + 0x24], eax
mov eax, 0x5030a900
xor eax, 0x7bd2a5e4
mov dword [rsp + 0x20], eax
xor eax, eax
mov edx, eax
call fcn.140013780
mov rcx, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x28]
call fcn.140013a50
mov ecx, dword [rsp + 0x20]
mov eax, dword [rsp + 0x24]
cmp eax, ecx
je 0x14001407d
add rsp, 0x38
ret
int1
imul edi, dword [rax], 0xff8ee90f
invalid
Function at 0x140019090
Capabilities:
Encode data using xor

Disassembly:
push rbp
sub rsp, 0x40
lea rbp, [rsp + 0x40]
mov qword [rbp - 0x30], rdx
mov qword [rbp - 0x28], rcx
mov eax, 0x10
call fcn.1401d4340
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x20], rax
mov rax, rcx
add rax, 8
mov qword [rbp - 0x18], rax
mov rax, qword [rcx + 8]
mov rcx, rdx
add rcx, 8
mov qword [rbp - 0x10], rcx
cmp rax, qword [rdx + 8]
mov qword [rbp - 8], rax
je 0x14001910c
mov rcx, qword [rbp - 0x20]
mov rax, qword [rbp - 0x28]
mov rdx, qword [rax]
mov qword [rcx], rdx
mov rax, qword [rax + 8]
mov qword [rcx + 8], rax
sub rsp, 0x20
call fcn.140018e70
mov rax, qword [rbp - 0x10]
add rsp, 0x20
mov rax, qword [rax]
mov qword [rbp - 8], rax
mov rax, qword [rbp - 8]
mov qword [rbp - 0x38], rax
mov ecx, dword [0x1401d5cf8]
and ecx, dword [0x1401d5cfc]
mov eax, 0x304f4f31
xor eax, 0x63c886db
add ecx, eax
and ecx, 0x1862e0a5
mov edx, 0xffffffff
xor edx, 0x579dcd78
mov eax, ecx
xor eax, edx
and eax, ecx
mov ecx, 0xa96d5b98
xor ecx, 0x9d8b96e8
cmp eax, ecx
ja 0x1400191a9
mov rcx, qword [rbp - 0x18]
mov r8, qword [rbp - 0x28]
mov r9, qword [rbp - 0x30]
mov eax, dword [0x1401d5d00]
xor edx, edx
div dword [0x1401d5d04]
sub eax, 0xd7d84df3
mov r10d, 0x4bfb44b6
xor r10d, 0x97f6502e
xor edx, edx
div r10d
mov rdx, qword [rbp - 0x38]
sub eax, 0xadace4f8
mov r9, qword [r9]
mov qword [r8], r9
mov qword [rcx], rdx
cmp eax, 0x694733e8
ja 0x140019156
mov rsp, rbp
pop rbp
ret
movabs dword [0xffffffa4e9ae7ec5], eax
Function at 0x14001e6d0
Capabilities:
Encode data using xor

Disassembly:
push rbp
sub rsp, 0x10
lea rbp, [rsp + 0x10]
mov ecx, dword [0x1401d5fc8]
mov edx, dword [0x1401d5fcc]
xor edx, 0x6808a11a
mov eax, ecx
xor eax, 0xffffffff
mov r8d, 0xb4e1a165
xor r8d, 0x4b1e5e9a
xor ecx, r8d
or eax, ecx
mov ecx, edx
xor ecx, 0xffffffff
mov r8d, 0x1a237ad3
xor r8d, 0xe5dc852c
xor edx, r8d
or ecx, edx
and eax, ecx
xor eax, 0xffffffff
mov ecx, 0x42073871
xor edx, edx
div ecx
mov ecx, eax
mov eax, ecx
xor eax, 0xffffffff
mov edx, ecx
xor edx, 0xffffffff
and eax, edx
mov edx, 0xffffffff
xor edx, 0x9c939c39
mov r8d, 0xffffffff
xor r8d, 0x9c939c39
and edx, r8d
or eax, edx
mov edx, 0x5a2396e0
xor edx, 0xa5dc691f
xor eax, edx
xor ecx, 0xffffffff
mov edx, 0xffffffff
xor edx, 0x9c939c39
and ecx, edx
mov edx, 0x6cc3932a
xor edx, 0x933c6cd5
xor eax, edx
xor ecx, 0xffffffff
and eax, ecx
or eax, 0x4712b88
cmp eax, 0xba67bf66
jae 0x14001e806
mov eax, dword [0x1401d5fd0]
mov ecx, dword [0x1401d5fd4]
imul eax, ecx
imul eax, eax, 0xb1fa8d35
mov ecx, 0xab6172d5
imul rax, rcx
shr rax, 0x3f
or eax, 0x689e7b4e
xor eax, 0x9551f6c4
mov dword [rbp - 4], eax
mov eax, 0x10
call fcn.1401d4340
sub rsp, rax
mov rcx, rsp
mov rax, qword [0x1401e24c0]
mov qword [rcx], rax
mov rax, qword [0x1401e24c8]
mov qword [rcx + 8], rax
sub rsp, 0x20
call fcn.14001367f
mov eax, dword [rbp - 4]
add rsp, 0x20
cmp eax, 0xd0d3ed65
jb 0x14001e792
mov rsp, rbp
pop rbp
ret
out dx, al
mov bl, 0xe
fldl2t
cmp edi, 0xffffffff
invalid
Function at 0x14001f4f0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x78
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x70], rcx
mov eax, dword [0x1401d6048]
and eax, dword [0x1401d604c]
mov ecx, 0xd6f98133
xor ecx, 0x6f32ae07
or eax, ecx
imul eax, eax, 0xea8fb4f
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0x74202db7
mov edx, 0xffffffff
xor edx, 0x74202db7
and eax, edx
sub eax, ecx
cmp eax, 0xacce1f5b
je 0x14001f6cb
mov rdx, qword [rsp + 0x70]
mov eax, dword [0x1401d6050]
add eax, dword [0x1401d6054]
mov ecx, 0xfd2e42dc
xor ecx, 0xbc6807aa
and eax, ecx
xor eax, 0xc3420e23
mov ecx, 0xaa421f4
xor ecx, 0xa00582ee
add eax, ecx
mov ecx, 0x3d9e30c8
xor ecx, 0xccdc1ca0
mov r8, qword [rdx]
mov qword [rsp + 0x38], r8
mov r9, rdx
add r9, 8
mov qword [rsp + 0x40], r9
mov rdx, qword [rdx + 8]
mov qword [rsp + 0x48], rdx
cmp rdx, 0
sete dl
mov byte [rsp + 0x57], dl
xor edx, edx
mov r9d, edx
sub r9, 1
mov rdx, r8
sub rdx, r9
mov qword [rsp + 0x58], rdx
movabs r9, 0x60c1a6cec74b0ed
movabs r10, 0xf9f3e593138b4f12
xor r9, r10
xor r8, r9
and rdx, r8
mov qword [rsp + 0x60], rdx
cmp eax, ecx
je 0x14001f542
mov al, byte [rsp + 0x57]
test al, 1
jne 0x14001f637
jmp 0x14001f5f4
mov rax, qword [rsp + 0x60]
cmp rax, 0
jl 0x14001f62d
mov rax, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x58]
movabs rcx, 0xbfffffffffffffff
and rcx, qword [rax]
cmp rcx, rdx
mov qword [rsp + 0x30], rax
jl 0x14001f637
jmp 0x14001f681
call fcn.1400077a3
jmp 0x14001f6c6
mov rdx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x38]
mov r8d, 1
mov r9d, 0x20
mov qword [rsp + 0x20], 8
call fcn.140011990
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x60]
mov qword [rdx], rax
cmp rcx, 0
mov qword [rsp + 0x30], rax
jge 0x14001f681
call fcn.1400077a3
jmp 0x14001f6c6
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x38]
mov r8, qword [rsp + 0x70]
mov r9, qword [rsp + 0x58]
mov rax, qword [rsp + 0x30]
mov qword [r8], r9
add rax, 8
shl rdx, 5
add rax, rdx
mov rdx, qword [rcx]
mov qword [rax], rdx
mov rdx, qword [rcx + 8]
mov qword [rax + 8], rdx
mov rdx, qword [rcx + 0x10]
mov qword [rax + 0x10], rdx
mov rcx, qword [rcx + 0x18]
mov qword [rax + 0x18], rcx
add rsp, 0x78
ret
invalid
Function at 0x140020450
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x28], rcx
call fcn.14000aa89
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0x30], rax
mov rcx, qword [rcx]
call fcn.1400caf40
mov rax, qword [rsp + 0x30]
cmp byte [rax + 0x60], 0
jne 0x140020510
mov eax, dword [0x1401d60b8]
xor eax, dword [0x1401d60bc]
xor ecx, ecx
sub ecx, 0x739d9d4a
sub eax, ecx
and eax, 0xd916713c
mov ecx, 0x47e12cf1
xor ecx, 0x1844a8ac
or eax, ecx
cmp eax, 0xe99ba94e
ja 0x140020515
mov rdx, qword [rsp + 0x28]
mov eax, dword [0x1401d60c0]
xor eax, 0x3bb76160
xor eax, dword [0x1401d60c4]
mov ecx, 0xa8ac4909
xor ecx, 0xd294f3a7
add eax, ecx
mov ecx, 0x3df17778
xor ecx, 0x1bb71445
sub eax, ecx
sub eax, 0x7a38baae
xor eax, 0xb3b40c4c
add eax, 0xcde13fcd
mov ecx, 0x67a3fe25
xor ecx, 0xb36c2919
mov qword [rdx], 0
cmp eax, ecx
je 0x1400204b2
jmp 0x140020510
add rsp, 0x38
ret
invalid

Function at 0x1400216f6
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rcx
xor eax, eax
mov edx, eax
call fcn.140020dd0
mov rcx, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x30]
add rsp, 0x38
jmp fcn.1400211a0
Function at 0x1400217e0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x48
mov qword [rsp + 0x40], rcx
mov eax, dword [0x1401d6138]
mov ecx, dword [str.___bd]
xor ecx, 0x3e57c829
sub eax, 0x354c7864
add eax, ecx
add eax, 0x354c7864
mov ecx, 0x57aeb269
xor edx, edx
div ecx
mov ecx, 0xffffffff
xor ecx, 0x4f6e1695
add eax, ecx
add eax, 1
mov ecx, 0xcb36a88e
xor ecx, 0x49d0f72b
xor edx, edx
div ecx
mov ecx, 0xfee6fa6
xor ecx, 0x82d74fb9
cmp eax, ecx
je 0x140021a0a
mov eax, dword [0x1401d6140]
xor edx, edx
div dword [0x1401d6144]
xor ecx, ecx
sub ecx, 0xf29fc072
add eax, ecx
xor eax, 0xbb0d2542
mov ecx, eax
xor ecx, 0x2ae68da9
mov edx, 0x651c36f5
xor edx, 0x9ae3c90a
xor ecx, edx
or eax, 0x2ae68da9
and eax, ecx
mov dword [rsp + 0x38], eax
call fcn.14000aa89
mov rcx, rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x30], rcx
mov rcx, qword [rax]
call fcn.1400cd080
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0x38]
cmp byte [rcx + 0x60], 0
sete cl
mov byte [rsp + 0x3f], cl
cmp eax, 0xb9ae324b
je 0x140021842
mov al, byte [rsp + 0x3f]
test al, 1
jne 0x1400218c9
jmp 0x140021a05
mov eax, dword [0x1401d6148]
xor edx, edx
div dword [0x1401d614c]
mov ecx, 0xa840853c
xor ecx, 0xcf617ab4
xor edx, edx
div ecx
mov ecx, eax
mov eax, ecx
or eax, eax
xor eax, 0xffffffff
mov edx, 0x94179861
or edx, 0x94179861
xor edx, 0xffffffff
xor eax, 0xffffffff
mov r8d, 0x1954599a
xor r8d, 0xe6aba665
xor edx, r8d
and eax, edx
xor ecx, 0xffffffff
mov edx, 0x6ce42015
xor edx, 0xf8f3b874
mov r8d, 0x4c4dc64e
xor r8d, 0xb3b239b1
xor edx, r8d
and ecx, edx
or eax, ecx
xor eax, 0xffffffff
mov ecx, eax
and ecx, 0xe4d26c2
shl ecx, 1
add eax, 0xe4d26c2
sub eax, ecx
cmp eax, 0xfdef6c3c
je 0x140021a13
mov rcx, qword [rsp + 0x40]
mov eax, dword [0x1401d6150]
imul eax, dword [0x1401d6154]
sub eax, 0x78c7d182
mov edx, eax
xor edx, 0x88e30fb2
xor edx, 0xffffffff
or eax, 0x88e30fb2
and eax, edx
mov edx, 0x544adbe7
xor edx, 0xabb52418
mov r8d, eax
xor r8d, edx
and r8d, 0x5fb8067f
mov r9d, 0x6fe65ed7
xor r9d, 0x305e58a8
mov edx, 0x69a81f7b
xor edx, 0x9657e084
xor r9d, edx
mov edx, eax
and edx, r9d
imul edx, r8d
mov r8d, eax
and r8d, 0x5fb8067f
mov r9d, 0x4c0e547c
xor r9d, 0x13b65203
or eax, r9d
imul eax, r8d
add eax, edx
mov dword [rsp + 0x2c], eax
mov eax, 0x3a810f7b
xor eax, 0x522602f9
mov dword [rsp + 0x28], eax
call fcn.1400cd255
mov ecx, dword [rsp + 0x28]
mov eax, dword [rsp + 0x2c]
cmp eax, ecx
jbe 0x140021954
jmp 0x140021a05
add rsp, 0x48
ret
cmpsd dword [rsi], dword [rdi]
rcr ecx, 0x4b
jmp 0x140021842
paddw mm0, mm5
push rdi
jmp 0x140021954