joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140068c70
Capabilities:
Encode data using xor

Disassembly:
push rbp
sub rsp, 0x40
lea rbp, [rsp + 0x40]
mov qword [rbp - 0x10], rdx
mov qword [rbp - 8], rcx
mov eax, dword [0x14024df58]
xor eax, dword [0x14024df5c]
sub eax, 0x26b15e66
mov ecx, 0x70646f0a
xor ecx, 0x96557b13
add eax, ecx
mov ecx, 0x2418e25d
xor ecx, 0x24290cc2
add eax, ecx
mov ecx, 0xb88ee6b3
xor ecx, 0x5ebff2aa
sub eax, ecx
add eax, 0x3007b0cc
mov ecx, 0xb7145979
xor ecx, 0x37935bfd
sub eax, ecx
sub eax, 0x3007b0cc
cmp eax, 0x6d3bebf8
jae 0x140068dca
mov rcx, qword [rbp - 0x10]
mov eax, dword [0x14024df60]
xor eax, 0x26d10503
mov edx, dword [0x14024df64]
xor edx, 0xb61e5ead
add eax, edx
mov r8d, eax
not r8d
or r8d, 0xdea15b55
mov edx, eax
mov eax, r8d
lea eax, [rax + rdx + 1]
imul rax, rax, 0x76cfb49b
shr rax, 0x3e
imul eax, eax, 0xaa88e31
mov dword [rbp - 0x18], eax
mov eax, 0x10
mov qword [rbp - 0x38], rax
call fcn.14024abd0
sub rsp, rax
mov rax, qword [rbp - 0x38]
mov rdx, rsp
mov qword [rbp - 0x28], rdx
call fcn.14024abd0
sub rsp, rax
mov rax, qword [rbp - 0x28]
mov rdx, rsp
mov qword [rbp - 0x30], rdx
mov qword [rax], rcx
sub rsp, 0x20
call fcn.140067614
mov rcx, qword [rbp - 0x30]
mov rdx, qword [rbp - 0x28]
add rsp, 0x20
mov qword [rbp - 0x20], rax
mov qword [rcx], 0
sub rsp, 0x20
call fcn.140068dd3
mov rcx, qword [rbp - 0x20]
mov eax, dword [rbp - 0x18]
add rsp, 0x20
cmp byte [rcx], 0
sete cl
mov byte [rbp - 0x11], cl
cmp eax, 0xbeef6c3a
je 0x140068cdc
mov al, byte [rbp - 0x11]
test al, 1
jne 0x140068dad
jmp 0x140068dc5
mov rcx, qword [rbp - 8]
mov rax, qword [rbp - 0x30]
mov rdx, qword [rax]
sub rsp, 0x20
call fcn.140033e62
add rsp, 0x20
mov rsp, rbp
pop rbp
ret
pop rax
xor ch, al
pop rax
jmp 0x140068cdc

Function at 0x140069410
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x30], rcx
mov eax, dword [0x14024df78]
mov edx, dword [0x14024df7c]
xor edx, 0xc1124101
mov ecx, eax
xor ecx, edx
xor ecx, 0xffffffff
or eax, edx
and eax, ecx
imul eax, eax, 0x37f71bcc
imul eax, eax, 0x79e7e1b7
mov ecx, 0x5a648472
xor ecx, 0x46f935de
xor edx, edx
div ecx
mov ecx, 0x3b518ff3
xor ecx, 0x4220a01d
cmp eax, ecx
ja 0x1400694e0
mov eax, dword [0x14024df80]
xor edx, edx
div dword [0x14024df84]
mov ecx, eax
mov edx, 0x21dbc333
xor edx, 0x33070045
mov eax, ecx
and eax, edx
or ecx, 0x12dcc376
add eax, ecx
add eax, 0x3a9eaf0d
mov ecx, 0x7542fb6f
xor ecx, 0x5e88b26f
sub eax, ecx
sub eax, 0x57bdc288
mov ecx, 0x2c577729
xor ecx, 0x79d3e29
add eax, ecx
mov dword [rsp + 0x24], eax
call fcn.140067614
mov rcx, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x28]
call fcn.140069290
mov eax, dword [rsp + 0x24]
cmp eax, 0x279e43fa
jbe 0x140069469
add rsp, 0x38
ret
add eax, 0xe998c3d2
cmp bh, 0xff
dec dword [rdi]
invalid
Function at 0x14006a1c0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x58
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x50], rcx
mov eax, dword [0x14024dfe8]
xor eax, dword [str._T_wS]
mov ecx, 0xf05c17dd
xor edx, edx
div ecx
and eax, 0x710b8b89
and eax, 0xfbb44ade
cmp eax, 0x3517030e
ja 0x14006a33b
mov ecx, dword [0x14024dff0]
mov r10d, ecx
xor r10d, 0x9600008
mov r9d, dword [0x14024dff4]
xor ecx, 0x7417e344
mov edx, r9d
not edx
mov eax, ecx
and eax, 0x84014422
and r10d, 0x9640348
mov r8d, edx
and r8d, 0x84014422
and r9d, 0x9640348
or eax, r10d
or r8d, r9d
xor eax, r8d
or ecx, edx
not ecx
or eax, ecx
xor eax, 0x444456a
and eax, 0x8d65476a
imul eax, eax, 0x56e236e1
mov dword [rsp + 0x30], eax
call fcn.140067614
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x48]
mov r8, qword [rsp + 0x38]
mov qword [rsp + 0x28], rax
call fcn.140033aad
mov rcx, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x48]
mov r8, qword [rsp + 0x38]
mov eax, dword [rsp + 0x30]
mov cl, byte [rcx]
test cl, cl
setne cl
mov rdx, qword [rdx]
sub rdx, r8
sete dl
or cl, dl
mov byte [rsp + 0x37], cl
cmp eax, 0xe5d8eb
jbe 0x14006a202
mov al, byte [rsp + 0x37]
test al, 1
jne 0x14006a331
jmp 0x14006a2c9
mov ecx, 0x40
mov edx, 8
call fcn.140012610
mov rcx, rax
mov rax, qword [0x140264708]
mov qword [rcx], rax
lea rax, [0x1402623d0]
mov qword [rcx + 0x10], rax
mov rax, qword [0x1402624a8]
mov qword [rcx + 0x18], rax
mov rax, qword [0x1402624b0]
mov qword [rcx + 0x20], rax
mov qword [rcx + 8], 0
lea rdx, [0x1402623d0]
lea r8, [0x1402623d8]
lea r9, [0x1402623e5]
mov qword [rsp + 0x20], 0x3f2d5c02
call fcn.14001203f
mov rax, qword [rsp + 0x50]
add rsp, 0x58
ret
and esi, eax
outsb dx, byte [rsi]
xchg edi, eax
jmp 0x14006a202
Function at 0x14006d3d0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x48
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x38], rcx
call fcn.140067614
mov rcx, qword [rsp + 0x38]
mov qword [rsp + 0x40], rax
call fcn.140069a90
mov rax, qword [rsp + 0x40]
cmp byte [rax], 0
jne 0x14006d579
mov rdx, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
call fcn.14006cffa
mov rax, qword [rsp + 0x40]
cmp byte [rax], 0
jne 0x14006d579
mov eax, dword [0x14024e148]
mov edx, dword [0x14024e14c]
mov ecx, 0x1e07405c
xor ecx, 0x6a9a7f2d
xor edx, ecx
mov ecx, eax
and ecx, edx
shl ecx, 1
add eax, edx
sub eax, ecx
mov ecx, eax
and ecx, 0x42d70de7
xor ecx, 0xffffffff
add eax, 0x42d70de7
mov edx, 0x48eceeba
xor edx, 0x48eceebb
add eax, edx
add eax, ecx
add eax, 0x9e43d726
sub eax, 0x81052fa2
sub eax, 0x9e43d726
mov ecx, 0xa01f75d3
xor ecx, 0x5fe08a2c
mov edx, eax
xor edx, ecx
and edx, 0x613ca4af
mov r8d, 0x4172b7aa
xor r8d, 0x204e1305
mov ecx, 0x5df17287
xor ecx, 0xa20e8d78
xor r8d, ecx
mov ecx, eax
and ecx, r8d
imul ecx, edx
mov edx, eax
and edx, 0x613ca4af
or eax, 0x613ca4af
imul eax, edx
add eax, ecx
mov ecx, 0xfba87376
xor ecx, 0xafddead
cmp eax, ecx
jb 0x14006d57f
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x30]
mov eax, dword [0x14024e150]
mov r8d, dword [0x14024e154]
sub eax, 0xfaf8a667
sub eax, r8d
add eax, 0xfaf8a667
xor r8d, r8d
sub r8d, 0x3c1fd70
add eax, r8d
mov r8d, 0x7f4701b5
xor r8d, 0xe0929273
add eax, r8d
xor eax, 0xca17f58f
mov dword [rsp + 0x28], eax
mov eax, 0x3025cb87
xor eax, 0xcced85b9
mov dword [rsp + 0x24], eax
add rdx, 0x10
call fcn.14006ce1a
mov rdx, qword [rsp + 0x40]
mov ecx, dword [rsp + 0x24]
mov eax, dword [rsp + 0x28]
mov dl, byte [rdx]
mov r8b, 3
xor r8b, 3
cmp dl, r8b
sete dl
mov byte [rsp + 0x2f], dl
cmp eax, ecx
je 0x14006d4cc
mov al, byte [rsp + 0x2f]
test al, 1
jne 0x14006d566
jmp 0x14006d579
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x30]
add rdx, 0x14
call fcn.14006ce1a
nop
add rsp, 0x48
ret
sbb ah, al
xor dword [rax - 0xbb17], eax
dec dword [rax - 0x7d]
sub rsp, 0x38
mov qword [rsp + 0x30], rdx
sub rsp, 0x38
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rcx
call fcn.140067614
mov rcx, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x30]
add rsp, 0x38
jmp 0x14006d3d0
Function at 0x14006f29d
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x58
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x40], rcx
call fcn.140067614
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x48], rax
call fcn.1400341cd
mov cl, al
mov rax, qword [rsp + 0x48]
mov byte [rsp + 0x57], cl
cmp byte [rax], 0
jne 0x14006f28e
mov al, byte [rsp + 0x57]
cmp al, 0xc0
jne 0x14006f191
mov rcx, qword [rsp + 0x40]
call fcn.14006b740
jmp 0x14006f28e
mov rax, qword [rsp + 0x38]
mov rax, qword [rax]
cmp rax, 0
mov qword [rsp + 0x30], rax
jne 0x14006f27f
xor eax, eax
mov ecx, eax
call fcn.1400dc0a0
mov rax, qword [rsp + 0x48]
cmp byte [rax], 0
jne 0x14006f28e
mov eax, dword [0x14024e238]
xor edx, edx
div dword [0x14024e23c]
mov ecx, eax
xor ecx, 0xbdf28d50
mov edx, 0xff281916
xor edx, 0xd7e6e9
xor ecx, edx
or eax, 0xbdf28d50
and eax, ecx
add eax, 0x4b1984ff
mov ecx, 0xb3be6eaf
xor edx, edx
div ecx
mov ecx, 0xb02d41bc
xor ecx, 0x1735f25a
cmp eax, ecx
jae 0x14006f294
mov eax, dword [0x14024e240]
xor eax, 0x5b2b3423
mov ecx, dword [0x14024e244]
mov edx, 0xc46f20ae
xor edx, 0xca4843a7
xor ecx, edx
imul eax, ecx
sub eax, 0x4702a8d2
or eax, 0x56fbf2fa
mov ecx, 0xcbe49e9a
xor edx, edx
div ecx
mov dword [rsp + 0x24], eax
mov ecx, 0x48
mov edx, 8
call fcn.140012610
mov rcx, qword [rsp + 0x38]
mov rdx, rax
mov eax, dword [rsp + 0x24]
mov qword [rsp + 0x28], rdx
mov qword [rcx], rdx
cmp eax, 0xda09082
ja 0x14006f20a
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x30], rax
jmp 0x14006f27f
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x30]
call fcn.14006f114
nop
add rsp, 0x58
ret
invalid
sub rsp, 0x38
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rcx
call fcn.140067614
mov rcx, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x30]
add rsp, 0x38
jmp 0x14006f140
Function at 0x1400709f9
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x68
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x50], rcx
call fcn.140067614
mov rcx, qword [rsp + 0x50]
mov qword [rsp + 0x58], rax
call fcn.1400341cd
mov cl, al
mov rax, qword [rsp + 0x58]
mov byte [rsp + 0x67], cl
cmp byte [rax], 0
jne 0x1400709e2
mov eax, dword [0x14024e318]
mov ecx, dword [0x14024e31c]
xor ecx, 0xde4eee5e
and eax, ecx
add eax, 0x896a55c6
mov ecx, 0xe9139f6d
xor ecx, 0xf15b6a0c
xor edx, edx
div ecx
sub eax, 0xff3b87be
cmp eax, 0xf44ec5e7
ja 0x1400709e7
mov eax, dword [0x14024e320]
xor eax, 0xad18f19d
xor edx, edx
div dword [0x14024e324]
mov dl, byte [rsp + 0x67]
imul eax, eax, 0x927b3ec9
add eax, 0x7604b4c4
mov ecx, 0x11cdaf81
xor ecx, 0xf2b290d9
add eax, ecx
mov ecx, 0x2f51a7e6
xor ecx, 0xf898673c
cmp dl, 0xc0
sete dl
mov byte [rsp + 0x47], dl
cmp eax, ecx
jae 0x14007083e
mov al, byte [rsp + 0x47]
test al, 1
jne 0x14007089b
jmp 0x1400708aa
mov rcx, qword [rsp + 0x50]
call fcn.14006b740
jmp 0x1400709e2
mov rax, qword [rsp + 0x48]
mov rax, qword [rax]
cmp rax, 0
mov qword [rsp + 0x38], rax
jne 0x1400708f4
xor eax, eax
mov ecx, eax
call fcn.1400f6290
mov rax, qword [rsp + 0x58]
cmp byte [rax], 0
jne 0x1400709e2
mov ecx, 0x10
mov edx, 8
call fcn.140012610
mov rcx, qword [rsp + 0x48]
mov qword [rcx], rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x30], rax
mov eax, dword [0x14024e328]
xor eax, 0x39801624
mov edx, dword [0x14024e32c]
mov r8d, 0xad08191e
xor r8d, 0xad08191f
mov ecx, eax
add ecx, r8d
xor eax, 0xffffffff
or eax, edx
add eax, ecx
imul eax, eax, 0x8524b68f
mov ecx, 0x55f9fc85
xor edx, edx
div ecx
sub eax, 0xbcc1fcc0
mov ecx, 0x684885ff
xor ecx, 0x9bcd442c
cmp eax, ecx
jae 0x1400709f0
mov rdx, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x50]
mov eax, dword [0x14024e330]
and eax, dword [0x14024e334]
and eax, 0x935e0b8c
mov r8d, 0x67963a35
xor r8d, 0xa74ba1c8
imul eax, r8d
mov r8d, 0x98bec67f
xor r8d, 0x67413980
xor eax, r8d
mov r9d, 0x1efa99c9
xor r9d, 0xd8e1d070
mov r8d, 0x75f53c69
xor r8d, 0x8a0ac396
xor r9d, r8d
mov r8d, 0xffffffff
xor r8d, 0x933830d9
or eax, r9d
or r8d, 0x933830d9
xor eax, 0xffffffff
and eax, r8d
mov dword [rsp + 0x2c], eax
call fcn.1400707a4
mov eax, dword [rsp + 0x2c]
cmp eax, 0xe6312017
ja 0x14007094f
jmp 0x1400709e2
add rsp, 0x68
ret
jnp 0x140070a62
cmp esp, esi
jmp 0x14007083e
sbb eax, 0xe99eb4d0
push rsi
invalid
sub rsp, 0x38
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rcx
call fcn.140067614
mov rcx, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x30]
add rsp, 0x38
jmp 0x1400707d0
cmp bl, al
Function at 0x140071fc0
Capabilities:
Encode data using xor

Disassembly:
push rbp
sub rsp, 0x60
lea rbp, [rsp + 0x60]
mov qword [rbp - 0x10], rdx
mov qword [rbp - 8], rcx
mov eax, dword [0x14024e418]
mov ecx, dword [0x14024e41c]
xor ecx, 0x1ae445eb
add eax, ecx
mov ecx, 0xa59c63
xor ecx, 0xcf54ee6f
sub eax, ecx
add eax, 0x66980bad
mov ecx, 0xd916fc49
xor ecx, 0x98ba7ccf
add eax, ecx
sub eax, 0x66980bad
and eax, 0x42a2758f
cmp eax, 0xf69a498d
ja 0x140072190
mov eax, dword [0x14024e420]
mov ecx, dword [0x14024e424]
or eax, ecx
or eax, 0xc801
xor eax, 0x3040002
and eax, 0x1705dc03
mov dword [rbp - 0x24], eax
mov eax, 0x10
mov qword [rbp - 0x50], rax
call fcn.14024abd0
sub rsp, rax
mov rax, qword [rbp - 0x50]
mov rcx, rsp
mov qword [rbp - 0x40], rcx
call fcn.14024abd0
sub rsp, rax
mov rax, qword [rbp - 0x50]
mov rcx, rsp
mov qword [rbp - 0x48], rcx
call fcn.14024abd0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x38], rax
sub rsp, 0x20
call fcn.140067614
mov rdx, qword [rbp - 0x48]
mov rcx, qword [rbp - 0x40]
add rsp, 0x20
mov r8, rax
mov rax, qword [rbp - 8]
mov qword [rbp - 0x30], r8
mov r8, qword [rax]
mov qword [rdx], r8
mov rax, qword [rax + 8]
mov qword [rdx + 8], rax
sub rsp, 0x20
call fcn.14001ba7e
mov rax, qword [rbp - 0x40]
mov rcx, qword [rbp - 0x38]
add rsp, 0x20
mov rdx, qword [rax]
mov rax, qword [rax + 8]
mov qword [rcx], rdx
mov qword [rcx + 8], rax
sub rsp, 0x20
call fcn.140067640
mov rcx, qword [rbp - 0x30]
add rsp, 0x20
mov rdx, rax
mov eax, dword [rbp - 0x24]
mov qword [rbp - 0x20], rdx
cmp byte [rcx], 0
sete cl
mov byte [rbp - 0x11], cl
cmp eax, 0x83c2a68
je 0x14007201a
mov cl, byte [rbp - 0x11]
mov al, 1
test cl, 1
mov byte [rbp - 0x51], al
jne 0x14007210e
jmp 0x140072153
mov rcx, qword [rbp - 0x20]
xor eax, eax
mov edx, eax
sub rsp, 0x20
call fcn.14003402b
mov rcx, qword [rbp - 0x30]
add rsp, 0x20
mov al, 1
cmp byte [rcx], 0
mov byte [rbp - 0x51], al
jne 0x140072153
mov rdx, qword [rbp - 0x10]
mov rcx, qword [rbp - 0x20]
sub rsp, 0x20
call fcn.140071f9a
mov rax, qword [rbp - 0x30]
add rsp, 0x20
mov al, byte [rax]
mov byte [rbp - 0x51], al
mov rax, qword [rbp - 0x30]
mov rcx, qword [rbp - 0x20]
mov dl, byte [rbp - 0x51]
mov byte [rbp - 0x52], dl
mov dl, 0x3c
xor dl, 0x3c
mov byte [rax], dl
sub rsp, 0x20
call fcn.1400672e0
mov rax, qword [rbp - 0x30]
add rsp, 0x20
cmp byte [rax], 0
jne 0x14007218b
mov rax, qword [rbp - 0x30]
mov cl, byte [rbp - 0x52]
mov byte [rax], cl
mov rsp, rbp
pop rbp
ret
not dword [rcx - 0x2e]
sbb ecx, ebp
cmp esi, 0x1f0fffff
add byte [rax], 0
add byte [rax], al
Function at 0x140074260
Capabilities:
Encode data using xor

Disassembly:
push rbp
sub rsp, 0x40
lea rbp, [rsp + 0x40]
mov qword [rbp - 0x10], rdx
mov qword [rbp - 8], rcx
mov eax, dword [0x14024e518]
xor eax, 0xbe9a5a0f
mov ecx, dword [0x14024e51c]
mov edx, 0x457cd21f
xor edx, 0xd4c07c73
xor ecx, edx
add eax, ecx
sub eax, 0xfd304e35
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xd71ac18b
mov edx, 0xffffffff
xor edx, 0xd71ac18b
and eax, edx
sub eax, ecx
mov ecx, 0x85a9b3cb
xor ecx, 0x6e679916
mov edx, 0x3866cbd9
xor edx, 0xc7993426
xor ecx, edx
add eax, ecx
add eax, 1
cmp eax, 0xb68d8e19
je 0x140074482
mov ecx, dword [0x14024e520]
mov eax, dword [0x14024e524]
xor eax, ecx
xor eax, 0x9d62a5e4
imul eax, eax, 0xc8342fc0
add eax, 0x3b5eaef6
and eax, 0xffffffc0
xor eax, 0x1b285741
mov dword [rbp - 0x18], eax
mov eax, 0x89019d4e
mov dword [rbp - 0x1c], eax
mov eax, 0x10
call fcn.14024abd0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x30], rax
sub rsp, 0x20
call fcn.140067614
mov rcx, qword [rbp - 8]
add rsp, 0x20
mov qword [rbp - 0x28], rax
mov edx, 2
sub rsp, 0x20
call fcn.140067bb0
mov rdx, qword [rbp - 0x28]
mov ecx, dword [rbp - 0x1c]
mov eax, dword [rbp - 0x18]
add rsp, 0x20
cmp byte [rdx], 0
sete dl
mov byte [rbp - 0x11], dl
cmp eax, ecx
ja 0x1400742d9
mov al, byte [rbp - 0x11]
test al, 1
jne 0x140074370
jmp 0x14007447d
mov rcx, qword [rbp - 8]
mov rax, qword [rbp - 0x10]
mov rdx, qword [rax]
sub rsp, 0x20
call fcn.140073750
mov rax, qword [rbp - 0x28]
add rsp, 0x20
mov al, byte [rax]
mov cl, 0x68
xor cl, 0x68
cmp al, cl
jne 0x14007447d
mov eax, dword [0x14024e528]
xor edx, edx
div dword [0x14024e52c]
mov edx, eax
xor edx, 0xffffffff
and edx, 0x36025e45
mov r8d, 0x4d4e7b33
xor r8d, 0x7b4c2576
mov ecx, 0xdbbd1a22
xor ecx, 0x2442e5dd
xor r8d, ecx
mov ecx, eax
and ecx, r8d
imul ecx, edx
mov edx, eax
and edx, 0x36025e45
or eax, 0x36025e45
imul eax, edx
add eax, ecx
xor ecx, ecx
sub ecx, 0x4c9d889b
add eax, ecx
mov ecx, 0xb9183116
xor ecx, 0x951425e1
sub eax, ecx
cmp eax, 0x302ffdb
jb 0x14007448b
mov rcx, qword [rbp - 8]
mov eax, dword [0x14024e530]
xor edx, edx
div dword [0x14024e534]
mov rdx, qword [rbp - 0x30]
mov r9d, eax
mov rax, qword [rbp - 0x10]
add r9d, 0xc60efe55
xor r9d, 0x849b2c9
mov r8d, r9d
and r8d, 0x49a97cd4
or r9d, 0x49a97cd4
add r8d, r9d
mov dword [rbp - 0x34], r8d
mov r8, qword [rax + 8]
mov qword [rdx], r8
mov rax, qword [rax + 0x10]
mov qword [rdx + 8], rax
sub rsp, 0x20
call fcn.140073fa0
mov eax, dword [rbp - 0x34]
add rsp, 0x20
cmp eax, 0xd6fc976
jbe 0x14007448b
jmp 0x14007447d
mov rsp, rbp
pop rbp
ret
in al, 0x9e
pop rbp
mov dl, 0xe9
invalid
and al, 0x3d
sbb cl, ch
ja 0x140074491
invalid
invalid
Function at 0x140074940
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x58
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x38], rcx
call fcn.140067614
mov rcx, qword [rsp + 0x38]
mov qword [rsp + 0x40], rax
movabs rdx, 0x8314a38f199e217f
movabs rax, 0x8314a38f199e217d
xor rdx, rax
call fcn.140067bb0
mov rax, qword [rsp + 0x40]
cmp byte [rax], 0
jne 0x140074a8e
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x30]
mov rdx, qword [rax]
call fcn.140073750
mov rax, qword [rsp + 0x40]
cmp byte [rax], 0
jne 0x140074a8e
mov ecx, dword [0x14024e568]
mov eax, 0x9ae5bbcf
xor eax, 0x8eccb919
xor ecx, eax
mov edx, dword [0x14024e56c]
mov eax, ecx
and eax, edx
or ecx, edx
add eax, ecx
mov ecx, 0x167f93d1
xor ecx, 0x764339e7
or eax, ecx
sub eax, 0x5103b83
mov ecx, 0x4f254941
xor ecx, 0x67b61aa
add eax, ecx
mov ecx, 0xcf5e7a37
xor ecx, 0xe4c8b13e
cmp eax, ecx
jbe 0x140074a93
mov rcx, qword [rsp + 0x38]
mov eax, dword [0x14024e570]
mov r8d, dword [0x14024e574]
mov edx, 0x8e2e1a9e
xor edx, 0x8e2e1a9e
sub edx, r8d
sub eax, edx
mov r8d, 0x14e227c0
xor r8d, 0x298e8e62
xor edx, edx
div r8d
mov edx, eax
mov rax, qword [rsp + 0x30]
add edx, 0xbcce9c95
mov r8d, 0xd8df8af7
xor r8d, 0x7738ae1
and edx, r8d
mov dword [rsp + 0x2c], edx
mov edx, 0x5134b218
xor edx, 0xbe94a188
mov dword [rsp + 0x28], edx
mov rdx, qword [rax + 8]
mov qword [rsp + 0x48], rdx
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x50], rax
lea rdx, [rsp + 0x48]
call fcn.140068b60
mov ecx, dword [rsp + 0x28]
mov eax, dword [rsp + 0x2c]
cmp eax, ecx
je 0x1400749f9
jmp 0x140074a8e
add rsp, 0x58
ret
pop rdi
fld dword [rcx - 0xa216bc]
invalid
Function at 0x140074aa0
Capabilities:
Encode data using xor

Disassembly:
push rbp
sub rsp, 0x20
lea rbp, [rsp + 0x20]
mov qword [rbp - 0x10], rdx
mov qword [rbp - 8], rcx
mov eax, dword [0x14024e578]
xor eax, 0x920dfdb8
mov r8d, dword [0x14024e57c]
xor r8d, 0xaf06ac02
mov edx, 0xce5f79e0
xor edx, 0x31a0861f
mov ecx, eax
xor ecx, edx
mov edx, r8d
and edx, ecx
mov ecx, 0xcc37f903
xor ecx, 0x33c806fc
mov r9d, r8d
xor r9d, ecx
mov ecx, eax
and ecx, r9d
imul ecx, edx
mov edx, eax
and edx, r8d
or eax, r8d
imul eax, edx
add eax, ecx
mov ecx, 0xa138b540
xor edx, edx
div ecx
mov ecx, 0xa5bf0430
xor ecx, 0x86c3244b
and eax, ecx
mov ecx, 0xbd2360e0
xor ecx, 0xcbeca7ce
xor edx, edx
div ecx
cmp eax, 0x499aa16d
ja 0x140074c1a
mov ecx, dword [0x14024e580]
mov edx, dword [0x14024e584]
mov eax, ecx
xor eax, edx
not edx
and ecx, edx
add ecx, ecx
sub ecx, eax
mov edx, ecx
and edx, 0x23daa571
add edx, edx
mov eax, ecx
neg edx
mov ecx, edx
lea eax, [rax + rcx - 0x5c255a8f]
mov ecx, eax
xor ecx, 0xd14a8df9
or eax, 0x2eb57206
and eax, ecx
mov ecx, 0xb5af9641
imul rax, rcx
shr rax, 0x3e
mov dword [rbp - 0x18], eax
mov eax, 0x20
call fcn.14024abd0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x20], rax
sub rsp, 0x20
call fcn.140067614
mov rcx, qword [rbp - 0x10]
add rsp, 0x20
mov eax, dword [rbp - 0x18]
cmp rcx, 0
sete cl
mov byte [rbp - 0x11], cl
cmp eax, 0xdbab9335
je 0x140074b35
mov al, byte [rbp - 0x11]
test al, 1
jne 0x140074bd0
jmp 0x140074be6
mov rcx, qword [rbp - 8]
sub rsp, 0x20
call fcn.14006792a
add rsp, 0x20
jmp 0x140074c15
mov rdx, qword [rbp - 0x20]
mov rcx, qword [rbp - 8]
mov rax, qword [rbp - 0x10]
mov r8, qword [rax]
mov qword [rdx], r8
mov r8, qword [rax + 8]
mov qword [rdx + 8], r8
mov rax, qword [rax + 0x10]
mov qword [rdx + 0x10], rax
sub rsp, 0x20
call fcn.140074940
add rsp, 0x20
mov rsp, rbp
pop rbp
ret
out 0x11, al
or eax, 0xff12e96e
invalid
Function at 0x140074c30
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x68
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x58], rcx
call fcn.140067614
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x58]
mov qword [rsp + 0x60], rax
mov rdx, qword [rdx]
call fcn.140067bb0
mov rax, qword [rsp + 0x60]
mov al, byte [rax]
mov cl, 0x13
xor cl, 0x13
cmp al, cl
jne 0x140074e73
mov rax, qword [rsp + 0x50]
mov rdx, qword [rax]
movabs rcx, 0x2ea8b93da33eb3be
movabs rax, 0xd15746c25cc14c41
xor rcx, rax
mov rax, rdx
and rax, rcx
mov rcx, rdx
or rcx, 0xffffffffffffffff
add rax, rcx
mov qword [rsp + 0x48], rax
mov rcx, rax
xor rcx, rdx
cmp rcx, 0
setl cl
movabs rdx, 0xd5595241e57c647
movabs r8, 0xf2aa6adbe1a839b8
xor rdx, r8
cmp rax, rdx
setg al
and al, cl
test al, 1
jne 0x140074cf0
mov rax, qword [rsp + 0x50]
add rax, 8
mov qword [rsp + 0x38], rax
xor eax, eax
mov qword [rsp + 0x40], rax
jmp 0x140074cfa
call fcn.140008c92
jmp 0x140074e73
mov rcx, qword [rsp + 0x48]
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x30], rax
cmp rax, rcx
jg 0x140074e73
mov eax, dword [0x14024e588]
xor eax, 0x5045ac7f
imul eax, dword [0x14024e58c]
mov ecx, 0xafc08338
xor edx, edx
div ecx
mov r8d, eax
mov eax, r8d
xor eax, 0xffffffff
and eax, 0x22045beb
mov edx, 0xffffffff
xor edx, 0x22045beb
and r8d, edx
mov ecx, 0x697fbcbd
xor ecx, 0x6758aa33
mov r9d, 0x4983b66
xor r9d, 0xfb67c499
xor ecx, r9d
mov r9d, 0x9ee32094
xor r9d, 0xbce77b7f
and ecx, r9d
and edx, 0xe27168e
or eax, r8d
or ecx, edx
xor eax, ecx
and eax, 0xe03ec46b
cmp eax, 0xd9500313
je 0x140074e78
mov rdx, qword [rsp + 0x30]
mov r8, qword [rsp + 0x50]
mov eax, dword [0x14024e590]
sub eax, dword [0x14024e594]
xor eax, 0x3591bf9c
mov ecx, 0x16b090a9
xor ecx, 0x7217ce76
or eax, ecx
imul eax, eax, 0x621c6958
mov ecx, 0xf278c0df
xor ecx, 0x6471825c
mov r8, qword [r8]
mov qword [rsp + 0x20], r8
cmp rdx, r8
setl dl
mov byte [rsp + 0x2f], dl
cmp eax, ecx
je 0x140074d91
mov al, byte [rsp + 0x2f]
test al, 1
jne 0x140074e27
jmp 0x140074df5
mov rcx, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x20]
movabs rax, 0xf493af310d0b77b7
sub rdx, rax
add rdx, 0xffffffffffffffff
movabs rax, 0xf493af310d0b77b7
add rdx, rax
call fcn.14001284c
jmp 0x140074e73
mov rcx, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x38]
mov rax, qword [rax]
mov rdx, qword [rax + rdx*8 + 8]
call fcn.140074aa0
mov rax, qword [rsp + 0x60]
cmp byte [rax], 0
jne 0x140074e73
mov rax, qword [rsp + 0x30]
xor ecx, ecx
sub rcx, rax
xor eax, eax
sub rax, 1
add rcx, rax
xor eax, eax
sub rax, rcx
mov qword [rsp + 0x40], rax
jmp 0x140074cfa
add rsp, 0x68
ret
invalid