joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400df520
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rsi
push rdi
sub rsp, 0x150
lea rbp, [rsp + 0x80]
mov qword [rbp + 0xc0], 0xfffffffffffffffe
mov rax, qword [rcx]
mov rdx, rax
xor rdx, 3
lock cmpxchg qword [rcx], rdx
jne 0x1400df540
test al, 1
je 0x1400df641
test al, 2
jne 0x1400df65b
test al, 8
mov qword [rbp + 0xb8], rcx
jne 0x1400df580
add rcx, 0x20
mov qword [rbp - 0x60], 3
lea rdx, [rbp - 0x60]
call fcn.1400df890
jmp 0x1400df5a5
test al, 0x10
je 0x1400df5a5
mov rcx, qword [rbp + 0xb8]
mov rax, qword [rcx + 0xe8]
test rax, rax
je 0x1400df6e7
mov rcx, qword [rcx + 0xf0]
call qword [rax + 0x10]
mov rdi, qword [rbp + 0xb8]
lea rsi, [rdi + 0x20]
mov rcx, qword [rdi + 0x20]
mov rdx, rdi
call fcn.1401802e0
cmp rax, 1
mov eax, 2
sbb rax, 0
mov qword [rbp + 0xa0], rax
shl rax, 6
neg rax
lock xadd qword [rdi], rax
shr rax, 6
cmp rax, qword [rbp + 0xa0]
jb 0x1400df675
jne 0x1400df635
mov rcx, rsi
call fcn.1400d6d90
mov rax, qword [rbp + 0xb8]
mov rax, qword [rax + 0xe8]
test rax, rax
je 0x1400df61b
mov rcx, qword [rbp + 0xb8]
mov rcx, qword [rcx + 0xf0]
call qword [rax + 0x18]
mov rax, qword [rbp + 0xb8]
mov r8, qword [rax - 8]
mov rcx, qword [0x14026d258]
xor edx, edx
call qword [case.0x14001f69e.0]
nop
add rsp, 0x150
pop rdi
pop rsi
pop rbp
ret
lea rcx, [0x1401f5b20]
lea r8, [0x1401f5b48]
mov edx, 0x23
call fcn.1401949c0
ud2
lea rcx, [0x1401f5b60]
lea r8, [0x1401f5b88]
mov edx, 0x25
call fcn.1401949c0
ud2
mov qword [rbp + 0x98], rax
lea rax, [rbp + 0x98]
mov qword [rbp + 0x78], rax
lea rax, [fcn.140011310]
mov qword [rbp + 0x80], rax
lea rcx, [rbp + 0xa0]
mov qword [rbp + 0x88], rcx
mov qword [rbp + 0x90], rax
lea rax, [0x1401f5bb0]
mov qword [rbp + 0x48], rax
mov qword [rbp + 0x50], 2
mov qword [rbp + 0x68], 0
lea rax, [rbp + 0x78]
mov qword [rbp + 0x58], rax
mov qword [rbp + 0x60], 2
lea rdx, [0x1401f5bd0]
lea rcx, [rbp + 0x48]
call fcn.140194800
ud2
lea rax, [0x1401f5770]
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x58], 1
lea rax, [0x1402199d8]
mov qword [rbp - 0x50], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
lea rdx, [0x1401f5780]
lea rcx, [rbp - 0x60]
call fcn.140194800
ud2
Function at 0x1400e0b40
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rsi
push rdi
sub rsp, 0x150
lea rbp, [rsp + 0x80]
mov qword [rbp + 0xc0], 0xfffffffffffffffe
mov rax, qword [rcx]
mov rdx, rax
xor rdx, 3
lock cmpxchg qword [rcx], rdx
jne 0x1400e0b60
test al, 1
je 0x1400e0c61
test al, 2
jne 0x1400e0c7b
test al, 8
mov qword [rbp + 0xb8], rcx
jne 0x1400e0ba0
add rcx, 0x20
mov qword [rbp - 0x60], 3
lea rdx, [rbp - 0x60]
call fcn.1400df890
jmp 0x1400e0bc5
test al, 0x10
je 0x1400e0bc5
mov rcx, qword [rbp + 0xb8]
mov rax, qword [rcx + 0xe8]
test rax, rax
je 0x1400e0d07
mov rcx, qword [rcx + 0xf0]
call qword [rax + 0x10]
mov rdi, qword [rbp + 0xb8]
lea rsi, [rdi + 0x20]
mov rcx, qword [rdi + 0x20]
mov rdx, rdi
call fcn.14017e230
cmp rax, 1
mov eax, 2
sbb rax, 0
mov qword [rbp + 0xa0], rax
shl rax, 6
neg rax
lock xadd qword [rdi], rax
shr rax, 6
cmp rax, qword [rbp + 0xa0]
jb 0x1400e0c95
jne 0x1400e0c55
mov rcx, rsi
call fcn.1400d6bf0
mov rax, qword [rbp + 0xb8]
mov rax, qword [rax + 0xe8]
test rax, rax
je 0x1400e0c3b
mov rcx, qword [rbp + 0xb8]
mov rcx, qword [rcx + 0xf0]
call qword [rax + 0x18]
mov rax, qword [rbp + 0xb8]
mov r8, qword [rax - 8]
mov rcx, qword [0x14026d258]
xor edx, edx
call qword [case.0x14001f69e.0]
nop
add rsp, 0x150
pop rdi
pop rsi
pop rbp
ret
lea rcx, [0x1401f5b20]
lea r8, [0x1401f5b48]
mov edx, 0x23
call fcn.1401949c0
ud2
lea rcx, [0x1401f5b60]
lea r8, [0x1401f5b88]
mov edx, 0x25
call fcn.1401949c0
ud2
mov qword [rbp + 0x98], rax
lea rax, [rbp + 0x98]
mov qword [rbp + 0x78], rax
lea rax, [fcn.140011310]
mov qword [rbp + 0x80], rax
lea rcx, [rbp + 0xa0]
mov qword [rbp + 0x88], rcx
mov qword [rbp + 0x90], rax
lea rax, [0x1401f5bb0]
mov qword [rbp + 0x48], rax
mov qword [rbp + 0x50], 2
mov qword [rbp + 0x68], 0
lea rax, [rbp + 0x78]
mov qword [rbp + 0x58], rax
mov qword [rbp + 0x60], 2
lea rdx, [0x1401f5bd0]
lea rcx, [rbp + 0x48]
call fcn.140194800
ud2
lea rax, [0x1401f5770]
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x58], 1
lea rax, [0x1402199d8]
mov qword [rbp - 0x50], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
lea rdx, [0x1401f5780]
lea rcx, [rbp - 0x60]
call fcn.140194800
ud2
Function at 0x1400e2020
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rsi
push rdi
sub rsp, 0xe0
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x50], 0xfffffffffffffffe
mov rax, qword [rcx]
nop dword [rax]
mov rdx, rax
xor rdx, 3
lock cmpxchg qword [rcx], rdx
jne 0x1400e2040
test al, 1
je 0x1400e2115
test al, 2
jne 0x1400e212f
test al, 8
mov qword [rbp + 0x48], rcx
jne 0x1400e2079
add rcx, 0x20
mov byte [rbp - 8], 5
lea rdx, [rbp - 0x28]
call fcn.1400e2330
jmp 0x1400e2095
test al, 0x10
je 0x1400e2095
mov rcx, qword [rbp + 0x48]
mov rax, qword [rcx + 0x68]
test rax, rax
je 0x1400e21a9
mov rcx, qword [rcx + 0x70]
call qword [rax + 0x10]
mov rdi, qword [rbp + 0x48]
lea rsi, [rdi + 0x20]
mov rcx, qword [rdi + 0x20]
mov rdx, rdi
call fcn.1401802e0
cmp rax, 1
mov eax, 2
sbb rax, 0
mov qword [rbp + 0x30], rax
shl rax, 6
neg rax
lock xadd qword [rdi], rax
shr rax, 6
cmp rax, qword [rbp + 0x30]
jb 0x1400e2149
jne 0x1400e2109
mov rcx, rsi
call fcn.1400d68f0
mov rax, qword [rbp + 0x48]
mov rax, qword [rax + 0x68]
test rax, rax
je 0x1400e20f2
mov rcx, qword [rbp + 0x48]
mov rcx, qword [rcx + 0x70]
call qword [rax + 0x18]
mov rax, qword [rbp + 0x48]
mov r8, qword [rax - 8]
mov rcx, qword [0x14026d258]
xor edx, edx
call qword [case.0x14001f69e.0]
nop
add rsp, 0xe0
pop rdi
pop rsi
pop rbp
ret
lea rcx, [0x1401f5b20]
lea r8, [0x1401f5b48]
mov edx, 0x23
call fcn.1401949c0
ud2
lea rcx, [0x1401f5b60]
lea r8, [0x1401f5b88]
mov edx, 0x25
call fcn.1401949c0
ud2
mov qword [rbp + 0x28], rax
lea rax, [rbp + 0x28]
mov qword [rbp + 8], rax
lea rax, [fcn.140011310]
mov qword [rbp + 0x10], rax
lea rcx, [rbp + 0x30]
mov qword [rbp + 0x18], rcx
mov qword [rbp + 0x20], rax
lea rax, [0x1401f5bb0]
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x50], 2
mov qword [rbp - 0x38], 0
lea rax, [rbp + 8]
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x40], 2
lea rdx, [0x1401f5bd0]
lea rcx, [rbp - 0x58]
call fcn.140194800
ud2
lea rax, [0x1401f5770]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], 1
lea rax, [0x1402199d8]
mov qword [rbp - 0x18], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
lea rdx, [0x1401f5780]
lea rcx, [rbp - 0x28]
call fcn.140194800
ud2
Function at 0x1400e35e0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rsi
push rdi
sub rsp, 0xe0
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x50], 0xfffffffffffffffe
mov rax, qword [rcx]
nop dword [rax]
mov rdx, rax
xor rdx, 3
lock cmpxchg qword [rcx], rdx
jne 0x1400e3600
test al, 1
je 0x1400e36d5
test al, 2
jne 0x1400e36ef
test al, 8
mov qword [rbp + 0x48], rcx
jne 0x1400e3639
add rcx, 0x20
mov byte [rbp - 8], 5
lea rdx, [rbp - 0x28]
call fcn.1400e2330
jmp 0x1400e3655
test al, 0x10
je 0x1400e3655
mov rcx, qword [rbp + 0x48]
mov rax, qword [rcx + 0x68]
test rax, rax
je 0x1400e3769
mov rcx, qword [rcx + 0x70]
call qword [rax + 0x10]
mov rdi, qword [rbp + 0x48]
lea rsi, [rdi + 0x20]
mov rcx, qword [rdi + 0x20]
mov rdx, rdi
call fcn.14017e230
cmp rax, 1
mov eax, 2
sbb rax, 0
mov qword [rbp + 0x30], rax
shl rax, 6
neg rax
lock xadd qword [rdi], rax
shr rax, 6
cmp rax, qword [rbp + 0x30]
jb 0x1400e3709
jne 0x1400e36c9
mov rcx, rsi
call fcn.1400d6760
mov rax, qword [rbp + 0x48]
mov rax, qword [rax + 0x68]
test rax, rax
je 0x1400e36b2
mov rcx, qword [rbp + 0x48]
mov rcx, qword [rcx + 0x70]
call qword [rax + 0x18]
mov rax, qword [rbp + 0x48]
mov r8, qword [rax - 8]
mov rcx, qword [0x14026d258]
xor edx, edx
call qword [case.0x14001f69e.0]
nop
add rsp, 0xe0
pop rdi
pop rsi
pop rbp
ret
lea rcx, [0x1401f5b20]
lea r8, [0x1401f5b48]
mov edx, 0x23
call fcn.1401949c0
ud2
lea rcx, [0x1401f5b60]
lea r8, [0x1401f5b88]
mov edx, 0x25
call fcn.1401949c0
ud2
mov qword [rbp + 0x28], rax
lea rax, [rbp + 0x28]
mov qword [rbp + 8], rax
lea rax, [fcn.140011310]
mov qword [rbp + 0x10], rax
lea rcx, [rbp + 0x30]
mov qword [rbp + 0x18], rcx
mov qword [rbp + 0x20], rax
lea rax, [0x1401f5bb0]
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x50], 2
mov qword [rbp - 0x38], 0
lea rax, [rbp + 8]
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x40], 2
lea rdx, [0x1401f5bd0]
lea rcx, [rbp - 0x58]
call fcn.140194800
ud2
lea rax, [0x1401f5770]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], 1
lea rax, [0x1402199d8]
mov qword [rbp - 0x18], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
lea rdx, [0x1401f5780]
lea rcx, [rbp - 0x28]
call fcn.140194800
ud2
Function at 0x1400eb5b0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rsi
push rdi
sub rsp, 0x290
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x200], 0xfffffffffffffffe
mov rax, qword [rcx]
mov rdx, rax
xor rdx, 3
lock cmpxchg qword [rcx], rdx
jne 0x1400eb5d0
test al, 1
je 0x1400eb6d1
test al, 2
jne 0x1400eb6eb
test al, 8
mov qword [rbp + 0x1f8], rcx
jne case.0x1400698ef.290
add rcx, 0x20
mov qword [rbp - 0x58], 7
lea rdx, [rbp - 0x58]
call fcn.1400ecd40
jmp 0x1400eb635
test al, 0x10
je 0x1400eb635
mov rcx, qword [rbp + 0x1f8]
mov rax, qword [rcx + 0x220]
add byte [rax], al
test rax, rax
je 0x1400eb78f
mov rcx, qword [rcx + 0x228]
call qword [rax + 0x10]
mov rdi, qword [rbp + 0x1f8]
lea rsi, [rdi + 0x20]
mov rcx, qword [rdi + 0x20]
mov rdx, rdi
call fcn.1401802e0
cmp rax, 1
mov eax, 2
sbb rax, 0
mov qword [rbp + 0x1e0], rax
loopne 0x1400eb65f
add byte [rax], al
shl rax, 6
neg rax
lock xadd qword [rdi], rax
shr rax, 6
cmp rax, qword [rbp + 0x1e0]
jb 0x1400eb705
jne 0x1400eb6c5
mov rcx, rsi
call fcn.1400c2ed0
mov rax, qword [rbp + 0x1f8]
mov eax, dword [rbp + 0x1f8]
mov rax, qword [rax + 0x220]
test rax, rax
je 0x1400eb6ab
mov rcx, qword [rbp + 0x1f8]
mov rcx, qword [rcx + 0x228]
call qword [rax + 0x18]
mov rax, qword [rbp + 0x1f8]
mov r8, qword [rax - 8]
mov rcx, qword [0x14026d258]
xor edx, edx
call qword [case.0x14001f69e.0]
nop
add rsp, 0x290
pop rdi
pop rsi
pop rbp
ret
lea rcx, [0x1401f5b20]
lea r8, [0x1401f5b48]
mov edx, 0x23
call fcn.1401949c0
ud2
lea rcx, [0x1401f5b60]
lea r8, [0x1401f5b88]
mov edx, 0x25
call fcn.1401949c0
ud2
mov qword [rbp + 0x1d8], rax
lea rax, [rbp + 0x1d8]
add dword [rax], eax
add byte [rax - 0x77], cl
test dword [rax + 0x48000001], edi
lea eax, [fcn.140011310]
invalid
mov qword [rbp + 0x1c0], rax
lea rcx, [rbp + 0x1e0]
mov qword [rbp + 0x1c8], rcx
mov qword [rbp + 0x1d0], rax
lea rax, [0x1401f5bb0]
mov qword [rbp + 0x188], rax
mov qword [rbp + 0x190], 2
mov qword [rbp + 0x1a8], 0
lea rax, [rbp + 0x1b8]
mov qword [rbp + 0x198], rax
mov qword [rbp + 0x1a0], 2
lea rdx, [0x1401f5bd0]
lea rcx, [rbp + 0x188]
call fcn.140194800
ud2
lea rax, [0x1401f5770]
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x50], 1
lea rax, [0x1402199d8]
mov qword [rbp - 0x48], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
lea rdx, [0x1401f5780]
lea rcx, [rbp - 0x58]
call fcn.140194800
ud2
Function at 0x1400ec9b0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rsi
push rdi
sub rsp, 0x290
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x200], 0xfffffffffffffffe
mov rax, qword [rcx]
mov rdx, rax
xor rdx, 3
lock cmpxchg qword [rcx], rdx
jne 0x1400ec9d0
test al, 1
je 0x1400ecad1
test al, 2
jne 0x1400ecaeb
test al, 8
mov qword [rbp + 0x1f8], rcx
jne 0x1400eca10
add rcx, 0x20
mov qword [rbp - 0x58], 7
lea rdx, [rbp - 0x58]
call fcn.1400ecd40
jmp 0x1400eca35
test al, 0x10
je 0x1400eca35
mov rcx, qword [rbp + 0x1f8]
mov rax, qword [rcx + 0x220]
test rax, rax
je 0x1400ecb8f
mov rcx, qword [rcx + 0x228]
call qword [rax + 0x10]
mov rdi, qword [rbp + 0x1f8]
lea rsi, [rdi + 0x20]
mov rcx, qword [rdi + 0x20]
mov rdx, rdi
call fcn.14017e230
cmp rax, 1
mov eax, 2
sbb rax, 0
mov qword [rbp + 0x1e0], rax
shl rax, 6
neg rax
lock xadd qword [rdi], rax
shr rax, 6
cmp rax, qword [rbp + 0x1e0]
jb 0x1400ecb05
jne 0x1400ecac5
mov rcx, rsi
call fcn.1400c2d30
mov rax, qword [rbp + 0x1f8]
mov rax, qword [rax + 0x220]
test rax, rax
je 0x1400ecaab
mov rcx, qword [rbp + 0x1f8]
mov rcx, qword [rcx + 0x228]
call qword [rax + 0x18]
mov rax, qword [rbp + 0x1f8]
mov r8, qword [rax - 8]
mov rcx, qword [0x14026d258]
xor edx, edx
call qword [case.0x14001f69e.0]
nop
add rsp, 0x290
pop rdi
pop rsi
pop rbp
ret
lea rcx, [0x1401f5b20]
lea r8, [0x1401f5b48]
mov edx, 0x23
call fcn.1401949c0
ud2
lea rcx, [0x1401f5b60]
lea r8, [0x1401f5b88]
mov edx, 0x25
call fcn.1401949c0
ud2
mov qword [rbp + 0x1d8], rax
lea rax, [rbp + 0x1d8]
mov qword [rbp + 0x1b8], rax
lea rax, [fcn.140011310]
mov qword [rbp + 0x1c0], rax
lea rcx, [rbp + 0x1e0]
mov qword [rbp + 0x1c8], rcx
mov qword [rbp + 0x1d0], rax
lea rax, [0x1401f5bb0]
mov qword [rbp + 0x188], rax
mov qword [rbp + 0x190], 2
mov qword [rbp + 0x1a8], 0
lea rax, [rbp + 0x1b8]
mov qword [rbp + 0x198], rax
mov qword [rbp + 0x1a0], 2
lea rdx, [0x1401f5bd0]
lea rcx, [rbp + 0x188]
call fcn.140194800
ud2
lea rax, [0x1401f5770]
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x50], 1
lea rax, [0x1402199d8]
mov qword [rbp - 0x48], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
lea rdx, [0x1401f5780]
lea rcx, [rbp - 0x58]
call fcn.140194800
ud2
Function at 0x14010a8d0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rsi
push rdi
mov eax, 0x1030
call fcn.140193860
sub rsp, rax
lea rbp, [rsp + 0x80]
mov qword [rbp + 0xfa0], 0xfffffffffffffffe
mov rax, qword [rcx]
nop word cs:[rax + rax]
mov rdx, rax
xor rdx, 3
lock cmpxchg qword [rcx], rdx
jne 0x14010a900
test al, 1
je 0x14010aa01
test al, 2
jne 0x14010aa1b
test al, 8
mov qword [rbp + 0xf98], rcx
jne 0x14010a940
add rcx, 0x20
mov qword [rbp - 0x58], 4
lea rdx, [rbp - 0x58]
call fcn.14010ac70
jmp 0x14010a965
test al, 0x10
je 0x14010a965
mov rcx, qword [rbp + 0xf98]
mov rax, qword [rcx + 0xfc0]
test rax, rax
je 0x14010aabf
mov rcx, qword [rcx + 0xfc8]
call qword [rax + 0x10]
mov rdi, qword [rbp + 0xf98]
lea rsi, [rdi + 0x20]
mov rcx, qword [rdi + 0x20]
mov rdx, rdi
call fcn.1401802e0
cmp rax, 1
mov eax, 2
sbb rax, 0
mov qword [rbp + 0xf80], rax
shl rax, 6
neg rax
lock xadd qword [rdi], rax
shr rax, 6
cmp rax, qword [rbp + 0xf80]
jb 0x14010aa35
jne 0x14010a9f5
mov rcx, rsi
call fcn.1400c27a0
mov rax, qword [rbp + 0xf98]
mov rax, qword [rax + 0xfc0]
test rax, rax
je 0x14010a9db
mov rcx, qword [rbp + 0xf98]
mov rcx, qword [rcx + 0xfc8]
call qword [rax + 0x18]
mov rax, qword [rbp + 0xf98]
mov r8, qword [rax - 8]
mov rcx, qword [0x14026d258]
xor edx, edx
call qword [case.0x14001f69e.0]
nop
add rsp, 0x1030
pop rdi
pop rsi
pop rbp
ret
lea rcx, [0x1401f5b20]
lea r8, [0x1401f5b48]
mov edx, 0x23
call fcn.1401949c0
ud2
lea rcx, [0x1401f5b60]
lea r8, [0x1401f5b88]
mov edx, 0x25
add byte [rax], al
call fcn.1401949c0
ud2
mov qword [rbp + 0xf78], rax
lea rax, [rbp + 0xf78]
mov qword [rbp + 0xf58], rax
lea rax, [fcn.140011310]
mov qword [rbp + 0xf60], rax
lea rcx, [rbp + 0xf80]
mov qword [rbp + 0xf68], rcx
mov qword [rbp + 0xf70], rax
lea rax, [0x1401f5bb0]
mov qword [rbp + 0xf28], rax
mov qword [rbp + 0xf30], 2
mov qword [rbp + 0xf48], 0
lea rax, [rbp + 0xf58]
mov qword [rbp + 0xf38], rax
mov qword [rbp + 0xf40], 2
lea rdx, [0x1401f5bd0]
lea rcx, [rbp + 0xf28]
call fcn.140194800
ud2
lea rax, [0x1401f5770]
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x50], 1
lea rax, [0x1402199d8]
mov qword [rbp - 0x48], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
lea rdx, [0x1401f5780]
lea rcx, [rbp - 0x58]
call fcn.140194800
or al, 0x9d
or byte [rax], al
ud2
Function at 0x14010bff0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rsi
push rdi
mov eax, 0x1030
call fcn.140193860
sub rsp, rax
lea rbp, [rsp + 0x80]
mov qword [rbp + 0xfa0], 0xfffffffffffffffe
mov rax, qword [rcx]
nop word cs:[rax + rax]
mov rdx, rax
xor rdx, 3
lock cmpxchg qword [rcx], rdx
jne 0x14010c020
test al, 1
je 0x14010c121
test al, 2
jne 0x14010c13b
test al, 8
mov qword [rbp + 0xf98], rcx
jne 0x14010c060
add rcx, 0x20
mov qword [rbp - 0x58], 4
lea rdx, [rbp - 0x58]
call fcn.14010ac70
jmp 0x14010c085
test al, 0x10
je 0x14010c085
mov rcx, qword [rbp + 0xf98]
mov rax, qword [rcx + 0xfc0]
test rax, rax
je 0x14010c1df
mov rcx, qword [rcx + 0xfc8]
call qword [rax + 0x10]
mov rdi, qword [rbp + 0xf98]
lea rsi, [rdi + 0x20]
mov rcx, qword [rdi + 0x20]
mov rdx, rdi
call fcn.14017e230
cmp rax, 1
mov eax, 2
sbb rax, 0
mov qword [rbp + 0xf80], rax
shl rax, 6
neg rax
lock xadd qword [rdi], rax
shr rax, 6
cmp rax, qword [rbp + 0xf80]
jb 0x14010c155
jne 0x14010c115
mov rcx, rsi
call fcn.1400c2600
mov rax, qword [rbp + 0xf98]
mov rax, qword [rax + 0xfc0]
test rax, rax
je 0x14010c0fb
mov rcx, qword [rbp + 0xf98]
mov rcx, qword [rcx + 0xfc8]
call qword [rax + 0x18]
mov rax, qword [rbp + 0xf98]
mov r8, qword [rax - 8]
mov rcx, qword [0x14026d258]
xor edx, edx
call qword [case.0x14001f69e.0]
nop
add rsp, 0x1030
pop rdi
pop rsi
pop rbp
ret
lea rcx, [0x1401f5b20]
lea r8, [0x1401f5b48]
mov edx, 0x23
call fcn.1401949c0
ud2
lea rcx, [0x1401f5b60]
lea r8, [0x1401f5b88]
mov edx, 0x25
call fcn.1401949c0
ud2
mov qword [rbp + 0xf78], rax
lea rax, [rbp + 0xf78]
mov qword [rbp + 0xf58], rax
lea rax, [fcn.140011310]
mov qword [rbp + 0xf60], rax
lea rcx, [rbp + 0xf80]
mov qword [rbp + 0xf68], rcx
mov qword [rbp + 0xf70], rax
lea rax, [0x1401f5bb0]
mov qword [rbp + 0xf28], rax
mov qword [rbp + 0xf30], 2
mov qword [rbp + 0xf48], 0
lea rax, [rbp + 0xf58]
mov qword [rbp + 0xf38], rax
mov qword [rbp + 0xf40], 2
lea rdx, [0x1401f5bd0]
lea rcx, [rbp + 0xf28]
call fcn.140194800
ud2
lea rax, [0x1401f5770]
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x50], 1
lea rax, [0x1402199d8]
add byte [rax - 0x77], cl
mov r8d, 0xfc0570f
adc dword [rbp - 0x40], eax
lea rdx, [0x1401f5780]
lea rcx, [rbp - 0x58]
call fcn.140194800
add byte [rdi], cl
invalid
Function at 0x140129690
Capabilities:
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x8f8
lea rbp, [rsp + 0x80]
movdqa xmmword [rbp + 0x860], xmm9
movdqa xmmword [rbp + 0x850], xmm8
movaps xmmword [rbp + 0x840], xmm7
movdqa xmmword [rbp + 0x830], xmm6
mov qword [rbp + 0x828], 0xfffffffffffffffe
mov r15, rdx
mov qword [rbp + 0x6c0], rcx
mov rcx, qword [rdx + 0x130]
test rcx, rcx
mov qword [rbp + 0x4e8], r8
je 0x14012970b
mov rdx, r8
call fcn.140185fb0
mov r8, qword [rbp + 0x4e8]
test al, al
je 0x14012c37f
lea rax, [r15 + 0x20]
mov qword [rbp + 0x4f0], rax
lea rax, [r15 + 0xe0]
lea eax, [rdi + 0xe0]
mov word [rbp + 0x738], 1
mov qword [rbp + 0x728], 1
lea rax, [0x1401e89a0]
mov qword [rbp + 0x730], rax
mov dword [rbp + 0x6d0], 2
movzx eax, byte [0x14026d308]
mov rcx, qword [0x14026d258]
test rcx, rcx
jne 0x14012c3d7
call qword [case.0x14000382e.2]
test rax, rax
je 0x14012d1bf
mov rcx, rax
mov qword [0x14026d258], rax
mov r8d, 0x70
xor edx, edx
call qword [case.0x14000382e.1]
test rax, rax
je 0x14012d1bf
mov rsi, rax
movups xmm0, xmmword [rbp + 0x730]
movups xmmword [rax + 0x60], xmm0
movups xmm0, xmmword [rbp + 0x720]
movups xmmword [rax + 0x50], xmm0
movups xmm0, xmmword [rbp + 0x710]
movups xmmword [rax + 0x40], xmm0
movups xmm0, xmmword [rbp + 0x6d0]
movdqu xmm1, xmmword [rbp + 0x6e0]
movups xmm2, xmmword [rbp + 0x6f0]
movups xmm3, xmmword [rbp + 0x700]
movups xmmword [rax + 0x30], xmm3
movups xmmword [rax + 0x20], xmm2
movdqu xmmword [rax + 0x10], xmm1
movups xmmword [rax], xmm0
mov qword [rbp + 0x590], rax
mov rbx, qword [r15 + 0x98]
mov rdi, qword [r15 + 0xa8]
test rdi, rdi
je 0x14012c4ac
js 0x14012d271
movzx eax, byte [0x14026d308]
mov rcx, qword [0x14026d258]
test rcx, rcx
jne 0x14012c487
call qword [case.0x14000382e.2]
test rax, rax
je 0x14012c49a
mov rcx, rax
mov qword [0x14026d258], rax
xor edx, edx
mov r8, rdi
call qword [case.0x14000382e.1]
mov r14, rax
test rax, rax
jne 0x14012c4b2
mov ecx, 1
mov rdx, rdi
call fcn.140194470
jmp 0x14012d37c
mov r14d, 1
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call fcn.140194326
movdqu xmm6, xmmword [r15 + 0xb4]
movups xmm0, xmmword [r15 + 0xc8]
movzx eax, byte [r15 + 0xd8]
mov byte [rbp + 0x6e0], al
jmp 0x14012c990
mov ecx, 8
mov edx, 0x70
call fcn.140194470
jmp 0x14012d37c
call fcn.14000e130
jmp 0x14012d37c
Function at 0x1401429e0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rsi
push rdi
sub rsp, 0x350
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x2c0], 0xfffffffffffffffe
mov rax, qword [rcx]
mov rdx, rax
xor rdx, 3
lock cmpxchg qword [rcx], rdx
jne 0x140142a00
test al, 1
je 0x140142b01
test al, 2
jne 0x140142b1b
test al, 8
mov qword [rbp + 0x2b8], rcx
jne 0x140142a40
add rcx, 0x20
mov qword [rbp - 0x58], 4
lea rdx, [rbp - 0x58]
call fcn.140142d70
jmp 0x140142a65
test al, 0x10
je 0x140142a65
mov rcx, qword [rbp + 0x2b8]
mov rax, qword [rcx + 0x2e0]
test rax, rax
je 0x140142bbf
mov rcx, qword [rcx + 0x2e8]
call qword [rax + 0x10]
lea rcx, [0x1401f5b20]
lea r8, [0x1401f5b48]
mov edx, 0x23
call fcn.1401949c0
ud2
lea rcx, [0x1401f5b60]
lea r8, [0x1401f5b88]
mov edx, 0x25
call fcn.1401949c0
ud2
lea rax, [0x1401f5770]
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x50], 1
lea rax, [0x1402199d8]
mov qword [rbp - 0x48], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
lea rdx, [0x1401f5780]
lea rcx, [rbp - 0x58]
call fcn.140194800
ud2
Function at 0x140145100
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rsi
push rdi
sub rsp, 0x350
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x2c0], 0xfffffffffffffffe
mov rax, qword [rcx]
mov rdx, rax
xor rdx, 3
lock cmpxchg qword [rcx], rdx
jne 0x140145120
test al, 1
je 0x140145221
test al, 2
jne 0x14014523b
test al, 8
mov qword [rbp + 0x2b8], rcx
jne 0x140145160
add rcx, 0x20
mov qword [rbp - 0x58], 4
lea rdx, [rbp - 0x58]
call fcn.140142d70
jmp 0x140145185
test al, 0x10
je 0x140145185
mov rcx, qword [rbp + 0x2b8]
mov rax, qword [rcx + 0x2e0]
test rax, rax
je 0x1401452df
mov rcx, qword [rcx + 0x2e8]
call qword [rax + 0x10]
mov rdi, qword [rbp + 0x2b8]
lea rsi, [rdi + 0x20]
mov rcx, qword [rdi + 0x20]
mov rdx, rdi
call fcn.14017e230
cmp rax, 1
mov eax, 2
sbb rax, 0
mov qword [rbp + 0x2a0], rax
shl rax, 6
neg rax
lock xadd qword [rdi], rax
shr rax, 6
cmp rax, qword [rbp + 0x2a0]
jb 0x140145255
jne 0x140145215
mov rcx, rsi
call fcn.140141700
mov rax, qword [rbp + 0x2b8]
mov rax, qword [rax + 0x2e0]
test rax, rax
je 0x1401451fb
mov rcx, qword [rbp + 0x2b8]
mov rcx, qword [rcx + 0x2e8]
call qword [rax + 0x18]
mov rax, qword [rbp + 0x2b8]
mov r8, qword [rax - 8]
mov rcx, qword [0x14026d258]
xor edx, edx
call qword [case.0x14001f69e.0]
nop
add rsp, 0x350
pop rdi
pop rsi
pop rbp
ret
lea rcx, [0x1401f5b20]
lea r8, [0x1401f5b48]
mov edx, 0x23
call fcn.1401949c0
ud2
lea rcx, [0x1401f5b60]
lea r8, [0x1401f5b88]
mov edx, 0x25
call fcn.1401949c0
ud2
mov qword [rbp + 0x298], rax
lea rax, [rbp + 0x298]
mov qword [rbp + 0x278], rax
lea rax, [fcn.140011310]
mov qword [rbp + 0x280], rax
lea rcx, [rbp + 0x2a0]
mov qword [rbp + 0x288], rcx
mov qword [rbp + 0x290], rax
lea rax, [0x1401f5bb0]
mov qword [rbp + 0x248], rax
mov qword [rbp + 0x250], 2
mov qword [rbp + 0x268], 0
lea rax, [rbp + 0x278]
mov qword [rbp + 0x258], rax
mov qword [rbp + 0x260], 2
lea rdx, [0x1401f5bd0]
lea rcx, [rbp + 0x248]
call fcn.140194800
ud2
lea rax, [0x1401f5770]
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x50], 1
lea rax, [0x1402199d8]
mov qword [rbp - 0x48], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
lea rdx, [0x1401f5780]
lea rcx, [rbp - 0x58]
call fcn.140194800
ud2

Function at 0x140151f60
Capabilities:
Encode data using xor

Disassembly:
mov rax, rdx
sub rdx, rcx
cmp rdx, 0x20
jae fcn.140011720
cmp rax, rcx
je 0x140151f85
cmp rdx, 4
jae 0x140151f88
xor eax, eax
xor r8d, r8d
jmp 0x140152020
xor eax, eax
ret
mov r8, rdx
and r8, 0xfffffffffffffffc
pxor xmm0, xmm0
xor eax, eax
movdqa xmm2, xmmword [0x14019d700]
movdqa xmm3, xmmword [0x14019d710]
pxor xmm1, xmm1
nop dword [rax]
movzx r9d, word [rcx + rax]
movd xmm4, r9d
movzx r9d, word [rcx + rax + 2]
movd xmm5, r9d
pcmpgtb xmm4, xmm2
punpcklbw xmm4, xmm4
pshuflw xmm4, xmm4, 0xd4
pshufd xmm4, xmm4, 0xd4
pand xmm4, xmm3
paddq xmm0, xmm4
pcmpgtb xmm5, xmm2
punpcklbw xmm5, xmm5
pshuflw xmm4, xmm5, 0xd4
pshufd xmm4, xmm4, 0xd4
pand xmm4, xmm3
paddq xmm1, xmm4
add rax, 4
cmp r8, rax
jne 0x140151fb0
paddq xmm1, xmm0
pshufd xmm0, xmm1, 0xee
paddq xmm0, xmm1
movq rax, xmm0
cmp r8, rdx
je 0x140152037
nop dword [rax]
xor r9d, r9d
cmp byte [rcx + r8], 0xc0
setge r9b
add rax, r9
inc r8
cmp rdx, r8
jne 0x140152020
ret