joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14007db60
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x58
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x38], rcx
call fcn.140071710
mov rcx, qword [rsp + 0x38]
mov qword [rsp + 0x40], rax
mov edx, 3
call fcn.140071ec0
mov rax, qword [rsp + 0x40]
mov al, byte [rax]
mov cl, 0x48
xor cl, 0x48
cmp al, cl
jne 0x14007dd37
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x30]
mov rdx, qword [rax]
call fcn.14007d9d0
mov rax, qword [rsp + 0x40]
cmp byte [rax], 0
jne 0x14007dd37
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x30]
mov rdx, qword [rax + 8]
mov qword [rsp + 0x48], rdx
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x50], rax
lea rdx, [rsp + 0x48]
call fcn.140073127
mov rax, qword [rsp + 0x40]
cmp byte [rax], 0
jne 0x14007dd37
mov eax, dword [0x1401f50a8]
xor eax, 0x607bd113
xor edx, edx
div dword [0x1401f50ac]
mov ecx, eax
mov r8d, 0xffffffff
xor r8d, 0x5580c5a6
mov edx, ecx
and edx, r8d
mov eax, ecx
or eax, r8d
mov r8d, 0x8d3d0bf6
xor r8d, 0x72c2f409
xor eax, r8d
imul eax, edx
mov r8d, 0x8bc4878e
xor r8d, 0xde444228
mov edx, ecx
and edx, r8d
or ecx, 0x5580c5a6
imul ecx, edx
add ecx, eax
mov edx, ecx
and edx, 0x4d69ab15
mov eax, 0xd2b692dd
xor eax, 0xd2b692df
imul eax, edx
mov edx, 0xdaf78097
xor edx, 0x979e2b82
add ecx, edx
sub ecx, eax
mov eax, ecx
xor eax, 0xffffffff
xor ecx, 0xffffffff
and eax, ecx
mov ecx, 0x5d8ac599
or ecx, 0x5d8ac599
xor ecx, 0xffffffff
xor eax, 0xffffffff
xor ecx, 0xffffffff
and eax, ecx
cmp eax, 0xabb832a2
ja 0x14007dd3c
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x30]
mov edx, dword [0x1401f50b0]
xor edx, 0xa0a7b6ad
and edx, dword [0x1401f50b4]
mov r8d, 0x20d67799
xor r8d, 0xa1141eeb
mov r9d, 0x2ea49f4
xor r9d, 0xfd15b60b
xor r8d, r9d
add edx, r8d
mov r8d, 0x6c42bd40
xor r8d, 0x6c42bd41
add edx, r8d
mov r9d, 0xf8013a5b
xor r9d, 0xcea15e73
mov r8d, edx
and r8d, r9d
shl r8d, 1
add edx, 0x36a06428
sub edx, r8d
mov r8d, 0xdf792091
xor r8d, 0x7fe2ebac
imul edx, r8d
mov dword [rsp + 0x2c], edx
mov edx, dword [rax + 0x18]
call fcn.1400729ad
mov eax, dword [rsp + 0x2c]
cmp eax, 0x87287d46
je 0x14007dc9a
jmp 0x14007dd37
add rsp, 0x58
ret
sub dword [rsi + rdx*8], edi
shr cl, 0x55
invalid
Function at 0x140082a90
Capabilities:
Encode data using add xor sub operations

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rcx
call fcn.140071710
mov rdx, qword [rsp + 0x30]
cmp rdx, 0
jne 0x140082ac1
mov rcx, qword [rsp + 0x28]
call fcn.140071b13
jmp 0x140082c2b
mov eax, dword [0x1401f53a8]
or eax, dword [0x1401f53ac]
mov ecx, eax
xor ecx, 0xfac0c7b9
mov edx, 0xa141f1e
xor edx, 0xf5ebe0e1
xor ecx, edx
or eax, 0xfac0c7b9
and eax, ecx
mov ecx, 0x6d13b126
xor ecx, 0xfc90505d
add eax, ecx
mov ecx, 0x7c0f3836
xor ecx, 0x38837266
sub eax, ecx
cmp eax, 0x4a38a328
jbe 0x140082c30
mov rcx, qword [rsp + 0x28]
mov rax, qword [rsp + 0x30]
mov edx, dword [0x1401f53b0]
mov r8d, dword [0x1401f53b4]
mov r10d, edx
or r10d, r10d
xor r10d, 0xffffffff
mov r9d, r8d
xor r9d, 0xffffffff
mov r11d, r8d
xor r11d, 0xffffffff
and r9d, r11d
or r10d, r9d
mov r9d, 0x4b2c07d
xor r9d, 0xfb4d3f82
xor r10d, r9d
or edx, r8d
mov r8d, 0x7a04b32f
xor r8d, 0x85fb4cd0
xor edx, r8d
xor r10d, 0xffffffff
mov r8d, 0xe110e5da
xor r8d, 0x1eef1a25
xor edx, r8d
and r10d, edx
mov edx, r10d
xor edx, 0xffffffff
mov r8d, 0xea9b59a7
xor r8d, 0xa48f7fb0
and r8d, edx
mov r9d, 0xffffffff
xor r9d, 0x4e142617
and r10d, r9d
mov edx, 0xffffffff
xor edx, 0x4c81c3c6
and edx, 0x4e142617
and r9d, 0x4c81c3c6
or r8d, r10d
or edx, r9d
xor r8d, edx
mov edx, r8d
xor edx, 0xffffffff
mov r9d, 0xffffffff
xor r9d, 0xdaf9bd19
and edx, r9d
xor r8d, 0xffffffff
mov r9d, 0xffffffff
xor r9d, 0xdaf9bd19
and r8d, r9d
or edx, r8d
xor edx, 0xffffffff
mov r8d, edx
and r8d, 0x512dde51
shl r8d, 1
add edx, 0x512dde51
sub edx, r8d
mov dword [rsp + 0x24], edx
mov rdx, qword [rax]
call fcn.140082960
mov eax, dword [rsp + 0x24]
cmp eax, 0xb95312dd
je 0x140082b0e
jmp 0x140082c2b
add rsp, 0x38
ret
and al, 0xc5
sub byte [rsi - 0x12a17], bl
dec dword [rax - 0x7d]
sub rsp, 0x38
mov qword [rsp + 0x30], rdx
sub rsp, 0x38
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rcx
call fcn.140071710
mov rcx, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x30]
add rsp, 0x38
jmp 0x140082a90
Function at 0x140083810
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x48
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x38], rcx
call fcn.140071710
mov rcx, qword [rsp + 0x38]
mov qword [rsp + 0x40], rax
mov edx, 2
call fcn.140071ec0
mov rax, qword [rsp + 0x40]
mov al, byte [rax]
mov cl, 0x64
xor cl, 0x64
cmp al, cl
jne 0x140083909
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x30]
mov rdx, qword [rax]
call fcn.14007d9d0
mov rax, qword [rsp + 0x40]
cmp byte [rax], 0
jne 0x140083909
mov eax, dword [0x1401f5428]
and eax, dword [0x1401f542c]
add eax, 0xcaecdaf6
mov ecx, 0x4d1e266b
xor ecx, 0xf923ffe6
and eax, ecx
mov ecx, 0x39d34d8
xor edx, edx
div ecx
cmp eax, 0x1ea27ee6
jae 0x14008390e
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x30]
mov edx, dword [0x1401f5430]
mov r8d, dword [0x1401f5434]
mov r9d, 0x9e7a178c
xor r9d, 0xacc960a7
xor r8d, r9d
and edx, r8d
imul edx, edx, 0x65daf8e6
add edx, 0x66788fe1
and edx, 0x6aadda1e
mov dword [rsp + 0x2c], edx
mov edx, 0xccb3472b
xor edx, 0x6625b1ec
mov dword [rsp + 0x28], edx
mov edx, dword [rax + 8]
call fcn.1400729ad
mov ecx, dword [rsp + 0x28]
mov eax, dword [rsp + 0x2c]
cmp eax, ecx
ja 0x14008389d
jmp 0x140083909
add rsp, 0x48
ret
sub eax, 0xe93c2f36
xchg bh, bh
invalid
Function at 0x140084940
Capabilities:
Encode data using xor

Disassembly:
push rbp
sub rsp, 0x30
lea rbp, [rsp + 0x30]
mov qword [rbp - 0x10], rdx
mov qword [rbp - 8], rcx
mov eax, dword [0x1401f54b8]
mov r8d, dword [0x1401f54bc]
mov r9d, r8d
xor r9d, 0xffffffff
mov edx, eax
and edx, r9d
mov ecx, eax
or ecx, r9d
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, r8d
or eax, r8d
imul eax, edx
add eax, ecx
xor ecx, ecx
sub ecx, 0x695ec1bf
sub eax, ecx
mov ecx, 0xf856887e
xor edx, edx
div ecx
and eax, 0xf087a250
mov ecx, 0xf8d3ccf3
xor ecx, 0x131beaff
cmp eax, ecx
jae 0x140084b92
mov ecx, dword [0x1401f54c0]
xor ecx, 0x8aff98b4
mov eax, dword [0x1401f54c4]
or ecx, eax
add ecx, 0x8c2ac8b8
mov eax, ecx
not eax
and eax, 0x1d2289ad
mov edx, ecx
and edx, 0xe2dd7652
imul edx, eax
mov eax, ecx
and eax, 0x1d2289ad
or ecx, 0x1d2289ad
imul ecx, eax
mov eax, ecx
mov ecx, edx
lea eax, [rax + rcx + 0x1a69bddd]
mov dword [rbp - 0x18], eax
mov eax, 0x10
call fcn.1401f0aa0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x28], rax
sub rsp, 0x20
call fcn.140071710
mov rcx, qword [rbp - 8]
add rsp, 0x20
mov qword [rbp - 0x20], rax
mov edx, 2
sub rsp, 0x20
call fcn.140071ec0
mov rcx, qword [rbp - 0x20]
mov eax, dword [rbp - 0x18]
add rsp, 0x20
mov cl, byte [rcx]
mov dl, 0x9e
xor dl, 0x9e
cmp cl, dl
sete cl
mov byte [rbp - 0x11], cl
cmp eax, 0x52c3f6e5
jae 0x1400849ae
mov al, byte [rbp - 0x11]
test al, 1
jne 0x140084a66
jmp 0x140084b8d
mov rcx, qword [rbp - 8]
mov rax, qword [rbp - 0x10]
mov rdx, qword [rax]
sub rsp, 0x20
call fcn.14007d9d0
mov rax, qword [rbp - 0x20]
add rsp, 0x20
cmp byte [rax], 0
jne 0x140084b8d
mov eax, dword [0x1401f54c8]
mov ecx, dword [0x1401f54cc]
xor ecx, 0x22d283e0
or eax, ecx
mov ecx, 0x9c8907c9
xor ecx, 0xe08c8f8b
xor edx, edx
div ecx
mov ecx, 0xe61c77b
xor ecx, 0xd08adbd9
add eax, ecx
mov edx, 0xe4d9c1ec
xor edx, 0xd773c2d3
mov ecx, 0xe7cb60fe
xor ecx, 0x18349f01
xor edx, ecx
mov ecx, eax
and ecx, edx
mov edx, eax
xor edx, 0x33aa033f
add eax, edx
sub eax, ecx
cmp eax, 0x88c85e74
jbe 0x140084b9b
mov rdx, qword [rbp - 0x28]
mov rcx, qword [rbp - 8]
mov rax, qword [rbp - 0x10]
mov r8d, dword [0x1401f54d0]
mov r9d, dword [0x1401f54d4]
xor r9d, 0x89197491
and r8d, r9d
mov r9d, 0x651ecd5c
xor r9d, 0x6b8a328c
sub r8d, r9d
or r8d, r8d
xor r8d, 0xffffffff
mov r9d, 0xffffffff
xor r9d, 0xfa05ecfb
mov r10d, 0xffffffff
xor r10d, 0xfa05ecfb
and r9d, r10d
or r8d, r9d
xor r8d, 0xffffffff
xor r9d, r9d
sub r9d, 0x4088f49a
add r8d, r9d
mov dword [rbp - 0x2c], r8d
mov r8, qword [rax + 8]
mov qword [rdx], r8
mov rax, qword [rax + 0x10]
mov qword [rdx + 8], rax
sub rsp, 0x20
call fcn.14007e618
mov eax, dword [rbp - 0x2c]
add rsp, 0x20
cmp eax, 0xd474961e
jae 0x140084b9b
jmp 0x140084b8d
mov rsp, rbp
pop rbp
ret
cdq
fsubr qword [rsp + rbp*8 - 0x1ec17]
invalid
fdiv st(5)
sbb al, 0x73
jmp 0x140084aee
Function at 0x140084bb0
Capabilities:
Encode data using xor

Disassembly:
push rbp
sub rsp, 0x30
lea rbp, [rsp + 0x30]
mov qword [rbp - 0x10], rdx
mov qword [rbp - 8], rcx
mov eax, dword [0x1401f54d8]
xor eax, 0x4a927b23
mov edx, dword [0x1401f54dc]
mov ecx, eax
xor ecx, 0xffffffff
and ecx, edx
xor edx, 0xffffffff
and eax, edx
sub eax, ecx
xor eax, 0x880e784d
mov ecx, 0xcfe2cdcd
xor ecx, 0x34711e28
imul eax, ecx
mov ecx, 0x45e7fe57
xor ecx, 0x26e76b98
xor edx, edx
div ecx
mov ecx, 0x1a4372d0
xor ecx, 0x64f146f6
cmp eax, ecx
ja 0x140084cd0
mov eax, dword [0x1401f54e0]
mov ecx, dword [0x1401f54e4]
xor eax, ecx
xor eax, 0x40000
or eax, 0x7fd3ffbf
mov dword [rbp - 0x18], eax
mov eax, 0xd18122fc
mov dword [rbp - 0x1c], eax
mov eax, 0x20
call fcn.1401f0aa0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x28], rax
sub rsp, 0x20
call fcn.140071710
mov rdx, qword [rbp - 0x10]
mov ecx, dword [rbp - 0x1c]
add rsp, 0x20
mov eax, dword [rbp - 0x18]
cmp rdx, 0
sete dl
mov byte [rbp - 0x11], dl
cmp eax, ecx
jae 0x140084c16
mov al, byte [rbp - 0x11]
test al, 1
jne 0x140084c86
jmp 0x140084c9c
mov rcx, qword [rbp - 8]
sub rsp, 0x20
call fcn.140071b13
add rsp, 0x20
jmp 0x140084ccb
mov rdx, qword [rbp - 0x28]
mov rcx, qword [rbp - 8]
mov rax, qword [rbp - 0x10]
mov r8, qword [rax]
mov qword [rdx], r8
mov r8, qword [rax + 8]
mov qword [rdx + 8], r8
mov rax, qword [rax + 0x10]
mov qword [rdx + 0x10], rax
sub rsp, 0x20
call fcn.140084940
add rsp, 0x20
mov rsp, rbp
pop rbp
ret
pushfq
jb 0x140084d0a
jmp 0x140084cbe
imul dword [rbx - 0x7f]
retf 0x2001

Function at 0x140084ce0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x30], rcx
mov ecx, dword [0x1401f54e8]
or ecx, dword [0x1401f54ec]
sub ecx, 0x6520ff8e
mov eax, ecx
or eax, eax
xor eax, 0xffffffff
mov edx, 0x6bf72001
or edx, 0x6bf72001
xor edx, 0xffffffff
mov r8d, 0xa6e7d418
xor r8d, 0x59182be7
xor eax, r8d
xor edx, 0xffffffff
and eax, edx
mov edx, 0x4f8561f3
xor edx, 0x247241f2
or ecx, edx
xor ecx, 0xffffffff
xor eax, 0xffffffff
xor ecx, 0xffffffff
and eax, ecx
add eax, 0x95103e19
cmp eax, 0xaf51ecce
je 0x140084db4
mov eax, dword [0x1401f54f0]
sub eax, dword [0x1401f54f4]
mov ecx, 0x1a1afd6
xor edx, edx
div ecx
sub eax, 0xb0c9ae21
mov ecx, 0x3bdaebab
xor ecx, 0xd29bdef0
sub eax, ecx
mov dword [rsp + 0x24], eax
mov eax, 0xf3b90365
xor eax, 0x633e35a8
mov dword [rsp + 0x20], eax
call fcn.140071710
mov rcx, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x28]
call fcn.140084bb0
mov ecx, dword [rsp + 0x20]
mov eax, dword [rsp + 0x24]
cmp eax, ecx
je 0x140084d52
add rsp, 0x38
ret
add dword [rax + rdi*4 - 0x6a1629], esp
invalid
Function at 0x140085d45
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x30], rcx
mov eax, dword [0x1401f5568]
mov edx, dword [0x1401f556c]
xor edx, 0x6424f787
mov ecx, edx
and ecx, eax
mov r8d, 0x99307e36
xor r8d, 0x66cf81c9
xor ecx, r8d
add eax, edx
add eax, 1
add eax, ecx
or eax, 0x6ed65c81
or eax, 0x90887c0a
imul eax, eax, 0x506a8149
cmp eax, 0x1ae01956
jbe 0x140085d33
mov eax, dword [0x1401f5570]
xor edx, edx
div dword [str.aFp]
mov edx, eax
and edx, 0x56da82cc
mov ecx, 0x9185c488
xor ecx, 0x9185c48a
imul ecx, edx
mov edx, 0xb6618c04
xor edx, 0xe0bb0ec8
add eax, edx
sub eax, ecx
mov ecx, 0x66ba3060
xor ecx, 0xb15344c7
add eax, ecx
sub eax, 0x7a3232c6
mov ecx, 0x65b031a6
xor ecx, 0xc47a2dc4
add eax, ecx
add eax, 0x7a3232c6
mov dword [rsp + 0x20], eax
call fcn.140071710
mov rcx, qword [rsp + 0x28]
mov eax, dword [rsp + 0x20]
cmp rcx, 0
sete cl
mov byte [rsp + 0x27], cl
cmp eax, 0xc7896e94
je 0x140085be6
mov al, byte [rsp + 0x27]
test al, 1
jne 0x140085c76
jmp 0x140085c85
mov rcx, qword [rsp + 0x30]
call fcn.140071b13
jmp 0x140085c97
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x28]
mov rdx, qword [rax]
call fcn.1400858d0
mov eax, dword [0x1401f5578]
xor eax, 0x89fae313
mov ecx, dword [str._qBxc]
xor ecx, 0x14aa1280
xor eax, ecx
mov ecx, 0xffffffff
xor ecx, 0x95c0e646
add eax, ecx
add eax, 1
sub eax, 0xbfeb86b8
sub eax, 0xb1fcee4b
mov ecx, 0xb32d13a0
xor ecx, 0xcc69518
add eax, ecx
mov ecx, eax
xor ecx, 0x66d39933
mov edx, 0xe583c319
xor edx, 0x1a7c3ce6
xor ecx, edx
or eax, 0x66d39933
and eax, ecx
cmp eax, 0x7ea99ee8
ja 0x140085d3c
mov eax, dword [0x1401f5580]
xor eax, dword [0x1401f5584]
xor eax, 0xe9aa3128
mov ecx, 0x73518202
xor ecx, 0xabfa7aba
xor edx, edx
div ecx
or eax, 0xdaf978a
cmp eax, 0x9a87e7a3
je 0x140085cfe
add rsp, 0x38
ret
and eax, 0xe987d740
stosb byte [rdi], al
invalid
clc
invalid
sub rsp, 0x38
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rcx
call fcn.140071710
mov rcx, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x30]
add rsp, 0x38
jmp 0x140085b90
Function at 0x1400867b0
Capabilities:
Encode data using xor

Disassembly:
push rbp
sub rsp, 0x50
lea rbp, [rsp + 0x50]
mov qword [rbp - 0x18], rdx
mov qword [rbp - 0x10], rcx
mov qword [rbp - 8], rcx
mov eax, dword [0x1401f55e8]
xor eax, 0xf0cb20c2
and eax, dword [0x1401f55ec]
mov ecx, eax
xor ecx, 0xf6571bd8
xor ecx, 0xffffffff
and ecx, 0xf6571bd8
shl ecx, 1
sub ecx, 0xf6571bd8
sub eax, ecx
mov edx, eax
xor edx, 0xffffffff
and edx, 0xb8c06344
mov r8d, 0xffffffff
xor r8d, 0xb8c06344
mov ecx, eax
and ecx, r8d
imul ecx, edx
mov edx, eax
and edx, 0xb8c06344
or eax, 0xb8c06344
imul eax, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, 0x79e3ba9d
xor eax, 0x79e3ba9d
mov edx, 0x531f3b5c
xor edx, 0x2d0c5189
sub eax, edx
add ecx, eax
mov eax, 0x8e9d9134
xor eax, 0x8e9d9134
sub eax, ecx
mov ecx, 0x21a33335
xor ecx, 0xe14bdda4
cmp eax, ecx
je 0x1400869d1
mov ecx, dword [0x1401f55f0]
mov eax, dword [0x1401f55f4]
xor eax, 0x3536bb4a
add ecx, eax
mov eax, ecx
not eax
and eax, 0x7ee6ad8c
mov edx, ecx
and edx, 0x81195273
imul edx, eax
mov eax, ecx
and eax, 0x7ee6ad8c
or ecx, 0x7ee6ad8c
imul ecx, eax
mov eax, ecx
mov ecx, edx
lea eax, [rax + rcx - 0x267026df]
or eax, 0x2b1a2d37
mov dword [rbp - 0x2c], eax
mov eax, 0x10
call fcn.1401f0aa0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x40], rax
sub rsp, 0x20
call fcn.140071710
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp - 0x10]
mov qword [rbp - 0x38], rcx
mov qword [rax], 0
mov qword [rax + 8], 0
mov ecx, 8
sub rsp, 0x20
call fcn.140071a72
mov rcx, qword [rbp - 0x38]
add rsp, 0x20
mov rdx, rax
mov eax, dword [rbp - 0x2c]
mov qword [rbp - 0x28], rdx
mov cl, byte [rcx]
mov dl, 0x94
xor dl, 0x94
cmp cl, dl
sete cl
mov byte [rbp - 0x19], cl
cmp eax, 0x6e68ef64
jbe 0x140086861
mov cl, byte [rbp - 0x19]
mov al, 1
test cl, 1
mov byte [rbp - 0x41], al
jne 0x140086936
jmp 0x14008698e
mov rdx, qword [rbp - 0x18]
mov rcx, qword [rbp - 0x28]
sub rsp, 0x20
call fcn.14008678a
mov rcx, qword [rbp - 0x38]
add rsp, 0x20
mov al, 1
cmp byte [rcx], 0
mov byte [rbp - 0x41], al
jne 0x14008698e
mov rdx, qword [rbp - 0x40]
mov rcx, qword [rbp - 0x10]
mov rax, qword [rbp - 0x28]
mov r8, qword [rax + 0x58]
mov qword [rdx], r8
mov rax, qword [rax + 0x60]
mov qword [rdx + 8], rax
sub rsp, 0x20
call fcn.14001d789
mov rax, qword [rbp - 0x38]
add rsp, 0x20
mov al, byte [rax]
mov byte [rbp - 0x41], al
mov rax, qword [rbp - 0x38]
mov rcx, qword [rbp - 0x28]
mov dl, byte [rbp - 0x41]
mov byte [rbp - 0x42], dl
mov byte [rax], 0
sub rsp, 0x20
call fcn.140071100
mov rax, qword [rbp - 0x38]
add rsp, 0x20
mov al, byte [rax]
mov cl, 0xd6
xor cl, 0xd6
cmp al, cl
jne 0x1400869c8
mov rax, qword [rbp - 0x38]
mov cl, byte [rbp - 0x42]
mov byte [rax], cl
mov rax, qword [rbp - 8]
mov rsp, rbp
pop rbp
ret
ficomp word [rbx - 0x78162f5b]
invalid
Function at 0x140093c40
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x58
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x50], rcx
mov ecx, dword [0x1401f5b38]
xor ecx, dword [0x1401f5b3c]
xor ecx, 0xd2aa83da
mov eax, 0x935ab1cb
xor eax, 0xf63c63af
or ecx, eax
mov edx, 0x5e3b1044
xor edx, 0xa1c4efbb
mov eax, ecx
xor eax, edx
mov edx, 0x9b6adbd2
xor edx, 0x6495242d
xor ecx, edx
or eax, ecx
mov ecx, 0xb299da11
xor ecx, 0x64eb1000
mov edx, 0x9efc83c2
xor edx, 0x488e49d3
and ecx, edx
mov edx, 0x2f32166b
xor edx, 0xd0cde994
xor ecx, edx
and eax, ecx
xor eax, 0xffffffff
mov ecx, 0xed8bd4c5
xor ecx, 0x4738246e
cmp eax, ecx
jb 0x140093e80
mov eax, dword [0x1401f5b40]
mov edx, dword [0x1401f5b44]
xor eax, 0xffffffff
xor edx, 0xffffffff
mov ecx, 0xffffffff
xor ecx, 0x46953545
or eax, edx
or ecx, 0x46953545
xor eax, 0xffffffff
and eax, ecx
mov edx, eax
xor edx, 0xffffffff
and edx, 0x7b29f2a8
mov r8d, 0xee701839
xor r8d, 0x9559ea91
mov ecx, 0xe338c00d
xor ecx, 0x1cc73ff2
xor r8d, ecx
mov ecx, eax
and ecx, r8d
imul ecx, edx
mov r8d, 0xcb27581
xor r8d, 0x779b8729
mov edx, eax
and edx, r8d
or eax, 0x7b29f2a8
imul eax, edx
add eax, ecx
sub eax, 0x116f4fd2
sub eax, 0x9c5b5f42
add eax, 0x116f4fd2
imul eax, eax, 0xea119a0f
mov dword [rsp + 0x3c], eax
call fcn.140093c21
mov rdx, qword [rsp + 0x48]
mov eax, dword [rsp + 0x3c]
xor ecx, ecx
test rdx, rdx
cmovg rcx, rdx
mov qword [rsp + 0x40], rcx
cmp eax, 0xf8bdd66c
jae 0x140093cc7
xor eax, eax
mov qword [rsp + 0x30], rax
jmp 0x140093d87
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x28], rax
mov eax, dword [0x1401f5b48]
mov edx, dword [0x1401f5b4c]
xor edx, 0x5c68fa4a
mov ecx, 0x46a1412e
xor ecx, 0x46a1412e
sub ecx, eax
mov eax, 0xc4fdce73
xor eax, 0xc4fdce73
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
add eax, 0x6a950d38
xor ecx, ecx
sub ecx, 0x5a00ec53
add eax, ecx
add eax, 0xde4e417d
sub eax, 0x8320d27b
mov ecx, 0x4efff749
xor ecx, 0x90b1b634
sub eax, ecx
cmp eax, 0xc79ad40e
ja 0x140093e89
mov rcx, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x40]
mov eax, dword [0x1401f5b50]
mov r8d, dword [0x1401f5b54]
xor r8d, 0x87ffb8da
add eax, r8d
sub eax, 0x91d31ca1
xor eax, 0x9fc7251e
add eax, 0xb3c3a7d9
cmp rcx, rdx
sete cl
mov byte [rsp + 0x27], cl
cmp eax, 0x6d4f175f
je 0x140093df3
mov al, byte [rsp + 0x27]
test al, 1
jne 0x140093e7b
jmp 0x140093e49
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x50]
mov byte [rcx + rax], 0
movabs rcx, 0xfb04d3aa855b631e
movabs rdx, 0xfb04d3aa855b631f
xor rcx, rdx
add rax, rcx
mov qword [rsp + 0x30], rax
jmp 0x140093d87
add rsp, 0x58
ret
sbb byte [rax + 0x75], spl
jmp 0x140093cc7
je 0x140093e53
insb byte [rdi], dx
mov dl, 0xe9
invalid
Function at 0x140098f60
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x48
mov qword [rsp + 0x40], rcx
mov ecx, dword [0x1401f5d78]
mov eax, 0x1a978a16
xor eax, 0x86226dbc
xor ecx, eax
mov eax, dword [0x1401f5d7c]
xor eax, 0x6cc83f99
or ecx, eax
mov eax, ecx
and eax, 0xee994bbf
xor eax, 0xffffffff
xor ecx, 0xffffffff
mov edx, 0x935ab1cb
xor edx, 0x7dc3fa74
mov r8d, 0xef04154
xor r8d, 0xf10fbeab
xor edx, r8d
or ecx, edx
and eax, ecx
xor eax, 0xffffffff
mov ecx, 0xb299da11
xor ecx, 0x625850b4
sub eax, ecx
mov ecx, 0xa0db4bdf
xor edx, edx
div ecx
mov ecx, 0x2f32166b
xor ecx, 0x695c8f28
cmp eax, ecx
ja 0x1400991d8
mov eax, dword [0x1401f5d80]
mov edx, dword [0x1401f5d84]
mov ecx, 0xed8bd4c5
xor ecx, 0x6e9976a4
xor edx, ecx
mov ecx, eax
and ecx, edx
shl ecx, 1
add eax, edx
sub eax, ecx
mov edx, eax
xor edx, 0xffffffff
and edx, 0x8596a6c2
mov r8d, 0xffffffff
xor r8d, 0x8596a6c2
mov ecx, eax
and ecx, r8d
imul ecx, edx
mov edx, eax
and edx, 0x8596a6c2
or eax, 0x8596a6c2
imul eax, edx
add eax, ecx
xor eax, 0xffffffff
mov ecx, 0x6a97ac09
xor ecx, 0xa5fc6643
mov edx, 0xea471921
xor edx, 0x15b8e6de
xor ecx, edx
mov edx, 0xd1fd90f7
xor edx, 0x7aeb4c3
mov r8d, 0x669000d0
xor r8d, 0x996fff2f
xor edx, r8d
or eax, ecx
mov ecx, 0x57536609
xor ecx, 0x8100423d
or ecx, edx
xor eax, 0xffffffff
and eax, ecx
mov ecx, eax
xor ecx, 0x9de27220
mov edx, 0xffffffff
xor edx, 0x9de27220
and eax, edx
shl eax, 1
sub eax, ecx
mov dword [rsp + 0x3c], eax
mov eax, 0x5c68fa4a
xor eax, 0xaa88b3
mov dword [rsp + 0x38], eax
call fcn.140098f41
mov ecx, dword [rsp + 0x38]
mov eax, dword [rsp + 0x3c]
cmp eax, ecx
je 0x1400991d8
xor eax, eax
mov qword [rsp + 0x30], rax
jmp 0x1400990cd
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x28], rax
movabs rcx, 0x517ebee5c4fdce73
movabs rdx, 0x517ebee5c4fdce53
xor rcx, rdx
cmp rax, rcx
je 0x140099118
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x40]
mov byte [rcx + rax], 0
xor ecx, ecx
sub rcx, 1
sub rax, rcx
mov qword [rsp + 0x30], rax
jmp 0x1400990cd
mov eax, dword [0x1401f5d88]
xor edx, edx
div dword [0x1401f5d8c]
mov r8d, 0x4efff749
xor r8d, 0xd5b2ea39
mov ecx, 0x96a37f52
xor ecx, 0x695c80ad
xor r8d, ecx
mov edx, eax
and edx, r8d
mov ecx, eax
or ecx, r8d
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, 0x9b4d1d70
or eax, 0x9b4d1d70
imul eax, edx
add eax, ecx
mov ecx, eax
and ecx, 0x52f0d2be
xor ecx, 0xffffffff
mov edx, 0x2df0b
xor edx, 0x52f20db5
add eax, edx
add eax, 1
add eax, ecx
xor ecx, ecx
sub ecx, 0x443f7ec5
sub eax, ecx
mov ecx, 0x7c828621
xor ecx, 0xbd4998a
cmp eax, ecx
je 0x1400991e1
test byte [rax + rax], al
add byte [rbx + 0x15cbed05], cl
add byte [rbx + 0x15cbeb15], cl
add byte [rcx - 0x1596ff0e], al
jmp 0x1400991e1
mov eax, dword [0x1401f5d90]
mov edx, dword [0x1401f5d94]
xor edx, 0xebea6900
xor ecx, ecx
sub ecx, edx
add eax, ecx
sub eax, 0x5460f554
add eax, 0x4d06fd3c
mov ecx, 0x10c393bd
xor edx, edx
div ecx
cmp eax, 0x310d3120
je 0x14009919d
add rsp, 0x48
ret
jp 0x140099198
xchg ebx, eax
cmc
jmp 0x140098fe0
invalid
Function at 0x1400a6d80
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x68
mov qword [rsp + 0x40], rdx
mov rax, rcx
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rax
mov rax, rcx
add rax, 1
mov qword [rsp + 0x58], rax
movabs rdx, 0x209c45fdb8cfb269
movabs r8, 0xdf63ba0247304d96
xor rdx, r8
xor rcx, rdx
xor rax, 0xffffffffffffffff
movabs rdx, 0xa648ae5ca5a0e441
movabs r8, 0x59b751a35a5f1bbe
xor rdx, r8
xor rcx, rdx
mov rdx, 0xffffffffffffffff
movabs r8, 0xc33d9cbbe1eacc03
xor rdx, r8
or rax, rcx
movabs rcx, 0x622d3da8b85844a
movabs r8, 0xc51f4f616a6f4849
xor rcx, r8
or rcx, rdx
movabs rdx, 0xdc50182c881eb177
movabs r8, 0x23afe7d377e14e88
xor rdx, r8
xor rax, rdx
and rax, rcx
cmp rax, 0
jge 0x1400a6e41
call fcn.1400091c0
jmp 0x1400a6ff6
mov rcx, qword [rsp + 0x58]
mov edx, 2
lea r8, [rsp + 0x60]
call fcn.1400a7020
test al, 1
jne 0x1400a6e62
jmp 0x1400a6e6c
call fcn.1400091c0
jmp 0x1400a6ff6
mov eax, dword [0x1401f62f8]
or eax, dword [0x1401f62fc]
mov ecx, 0xef9b9864
xor edx, edx
div ecx
mov ecx, 0xda783a1a
xor ecx, 0xee14ac01
xor eax, ecx
and eax, 0xf0aee9ef
mov ecx, 0x654db1b4
xor ecx, 0x64704c88
cmp eax, ecx
jb 0x1400a7000
mov ecx, dword [0x1401f6300]
mov eax, dword [0x1401f6304]
xor eax, 0xf859fc25
xor ecx, eax
and ecx, 0x6e6a1a9e
mov eax, ecx
and eax, 0x747856db
xor eax, 0xffffffff
xor ecx, 0xffffffff
mov edx, 0xffffffff
xor edx, 0x747856db
or ecx, edx
and eax, ecx
xor eax, 0xffffffff
and eax, 0x578eb59d
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x30], rcx
cmp rcx, 0
setl cl
mov byte [rsp + 0x3f], cl
cmp eax, 0xf06386ed
je 0x1400a7000
mov al, byte [rsp + 0x3f]
test al, 1
jne 0x1400a6f14
jmp 0x1400a6f31
mov rcx, qword [rsp + 0x30]
xor eax, eax
mov edx, eax
movabs r8, 0x7fffffffffffffff
call fcn.14000f6ec
jmp 0x1400a6ff6
mov eax, dword [0x1401f6308]
sub eax, dword [0x1401f630c]
xor eax, 0xb0de1b5e
mov ecx, 0x82772d7e
xor edx, edx
div ecx
mov ecx, 0x8ca9ece0
xor ecx, 0x169c840d
or eax, ecx
cmp eax, 0x4edfeda8
jb 0x1400a7009
mov rdx, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x48]
mov eax, dword [0x1401f6310]
mov r8d, dword [0x1401f6314]
xor r8d, 0x205cf2af
sub eax, r8d
mov r8d, 0x880f6db
xor r8d, 0xf657ecfa
sub eax, r8d
mov r8d, 0x9dea7f02
xor r8d, 0x7e3a54fe
mov r9d, 0x1c39e4a6
xor r9d, 0xe3c61b59
xor r8d, r9d
mov r9d, 0x3739139
xor r9d, 0x3739139
mov r10d, 0x5402b75
xor r10d, 0x5402b74
sub r9d, r10d
sub r8d, r9d
sub eax, r8d
and eax, 0xd3a36fbc
mov dword [rsp + 0x2c], eax
call fcn.14001d7d0
mov eax, dword [rsp + 0x2c]
cmp eax, 0xf32ad73e
jae 0x1400a6f63
jmp 0x1400a6ff6
mov rax, qword [rsp + 0x50]
add rsp, 0x68
ret
scasb al, byte [rdi]
adc al, 0x2e
ret 0x9de9
sbb eax, 0xe94ac451
push rcx
invalid