joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1800428b4
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 8], rdi
jne 0x180042917
lea ecx, [rdi + 7]
call fcn.180096e9c
mov rbx, rax
test rax, rax
je 0x180042917
lea r8d, [rdi + 7]
mov rdx, rsi
mov rcx, rax
call fcn.1800877a0
mov cl, dil
movabs rdx, 0xfbb7f19909fd05e7
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 7
jb 0x1800428ed
ror rbx, 0xd
mov qword [rsi + 8], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x180042928
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 8], rdi
jne 0x18004298b
lea ecx, [rdi + 7]
call fcn.180096e9c
mov rbx, rax
test rax, rax
je 0x18004298b
lea r8d, [rdi + 7]
mov rdx, rsi
mov rcx, rax
call fcn.1800877a0
mov cl, dil
movabs rdx, 0x1d2fd1a17f934951
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 7
jb 0x180042961
ror rbx, 0xd
mov qword [rsi + 8], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x18004299c
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 8], rdi
jne 0x1800429ff
lea ecx, [rdi + 7]
call fcn.180096e9c
mov rbx, rax
test rax, rax
je 0x1800429ff
lea r8d, [rdi + 7]
mov rdx, rsi
mov rcx, rax
call fcn.1800877a0
mov cl, dil
movabs rdx, 0x7735e9e7dd3db78f
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 7
jb 0x1800429d5
ror rbx, 0xd
mov qword [rsi + 8], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x180042a84
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 8], rdi
jne 0x180042ae7
lea ecx, [rdi + 8]
call fcn.180096e9c
mov rbx, rax
test rax, rax
je 0x180042ae7
lea r8d, [rdi + 8]
mov rdx, rsi
mov rcx, rax
call fcn.1800877a0
mov cl, dil
movabs rdx, 0xf1556d3f9f51e7fd
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 8
jb 0x180042abd
ror rbx, 0xd
mov qword [rsi + 8], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x180042af8
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 8], rdi
jne 0x180042b5b
lea ecx, [rdi + 8]
call fcn.180096e9c
mov rbx, rax
test rax, rax
je 0x180042b5b
lea r8d, [rdi + 8]
mov rdx, rsi
mov rcx, rax
call fcn.1800877a0
mov cl, dil
movabs rdx, 0x335d25af4327a1b1
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 8
jb 0x180042b31
ror rbx, 0xd
mov qword [rsi + 8], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
Function at 0x180042b6c
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x10], rdi
jne 0x180042bcf
lea ecx, [rdi + 0xa]
call fcn.180096e9c
mov rbx, rax
test rax, rax
je 0x180042bcf
lea r8d, [rdi + 0xa]
mov rdx, rsi
mov rcx, rax
call fcn.1800877a0
mov cl, dil
movabs rdx, 0x956387018b6dd527
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0xa
jb 0x180042ba5
ror rbx, 0xd
mov qword [rsi + 0x10], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x180042be0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x10], rdi
jne 0x180042c43
lea ecx, [rdi + 0xa]
call fcn.180096e9c
mov rbx, rax
test rax, rax
je 0x180042c43
lea r8d, [rdi + 0xa]
mov rdx, rsi
mov rcx, rax
call fcn.1800877a0
mov cl, dil
movabs rdx, 0x113c1ad81655d7b
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0xa
jb 0x180042c19
ror rbx, 0xd
mov qword [rsi + 0x10], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x180042c54
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x10], rdi
jne 0x180042cb7
lea ecx, [rdi + 0xa]
call fcn.180096e9c
mov rbx, rax
test rax, rax
je 0x180042cb7
lea r8d, [rdi + 0xa]
mov rdx, rsi
mov rcx, rax
call fcn.1800877a0
mov cl, dil
movabs rdx, 0x2595f93faf67f131
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0xa
jb 0x180042c8d
ror rbx, 0xd
mov qword [rsi + 0x10], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x180042cc8
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x10], rdi
jne 0x180042d2b
lea ecx, [rdi + 0xa]
call fcn.180096e9c
mov rbx, rax
test rax, rax
je 0x180042d2b
lea r8d, [rdi + 0xa]
mov rdx, rsi
mov rcx, rax
call fcn.1800877a0
mov cl, dil
movabs rdx, 0x3137030b2137eb3b
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0xa
jb 0x180042d01
ror rbx, 0xd
mov qword [rsi + 0x10], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x180042d3c
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x10], rdi
jne 0x180042d9f
lea ecx, [rdi + 0xa]
call fcn.180096e9c
mov rbx, rax
test rax, rax
je 0x180042d9f
lea r8d, [rdi + 0xa]
mov rdx, rsi
mov rcx, rax
call fcn.1800877a0
mov cl, dil
movabs rdx, 0x5d8743751dc5cf41
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0xa
jb 0x180042d75
ror rbx, 0xd
mov qword [rsi + 0x10], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
Function at 0x180042db0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x18], rdi
jne 0x180042e13
lea ecx, [rdi + 0x13]
call fcn.180096e9c
mov rbx, rax
test rax, rax
je 0x180042e13
lea r8d, [rdi + 0x13]
mov rdx, rsi
mov rcx, rax
call fcn.1800877a0
mov cl, dil
movabs rdx, 0x8d7759b1056d47f3
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0x13
jb 0x180042de9
ror rbx, 0xd
mov qword [rsi + 0x18], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x180042e24
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x18], rdi
jne 0x180042e87
lea ecx, [rdi + 0x13]
call fcn.180096e9c
mov rbx, rax
test rax, rax
je 0x180042e87
lea r8d, [rdi + 0x13]
mov rdx, rsi
mov rcx, rax
call fcn.1800877a0
mov cl, dil
movabs rdx, 0x75c53deb63a749b9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0x13
jb 0x180042e5d
ror rbx, 0xd
mov qword [rsi + 0x18], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x180042e98
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x18], rdi
jne 0x180042efb
lea ecx, [rdi + 0x17]
call fcn.180096e9c
mov rbx, rax
test rax, rax
je 0x180042efb
lea r8d, [rdi + 0x17]
mov rdx, rsi
mov rcx, rax
call fcn.1800877a0
mov cl, dil
movabs rdx, 0x4b4def7517296573
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0x17
jb 0x180042ed1
ror rbx, 0xd
mov qword [rsi + 0x18], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x180042f0c
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x20], rdi
jne 0x180042f6f
lea ecx, [rdi + 0x1b]
call fcn.180096e9c
mov rbx, rax
test rax, rax
je 0x180042f6f
lea r8d, [rdi + 0x1b]
mov rdx, rsi
mov rcx, rax
call fcn.1800877a0
mov cl, dil
movabs rdx, 0xa943db0b319b81ab
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0x1b
jb 0x180042f45
ror rbx, 0xd
mov qword [rsi + 0x20], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x180042f80
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x20], rdi
jne 0x180042fe3
lea ecx, [rdi + 0x1b]
call fcn.180096e9c
mov rbx, rax
test rax, rax
je 0x180042fe3
lea r8d, [rdi + 0x1b]
mov rdx, rsi
mov rcx, rax
call fcn.1800877a0
mov cl, dil
movabs rdx, 0x9b2d194bb779bf77
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0x1b
jb 0x180042fb9
ror rbx, 0xd
mov qword [rsi + 0x20], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
Function at 0x180042ff4
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x20], rdi
jne 0x180043057
lea ecx, [rdi + 0x1b]
call fcn.180096e9c
mov rbx, rax
test rax, rax
je 0x180043057
lea r8d, [rdi + 0x1b]
mov rdx, rsi
mov rcx, rax
call fcn.1800877a0
mov cl, dil
movabs rdx, 0x6b9d49c7b371bf99
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0x1b
jb 0x18004302d
ror rbx, 0xd
mov qword [rsi + 0x20], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x180043068
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x20], rdi
jne 0x1800430cb
lea ecx, [rdi + 0x1d]
call fcn.180096e9c
mov rbx, rax
test rax, rax
je 0x1800430cb
lea r8d, [rdi + 0x1d]
mov rdx, rsi
mov rcx, rax
call fcn.1800877a0
mov cl, dil
movabs rdx, 0x3d559f1b5179717b
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0x1d
jb 0x1800430a1
ror rbx, 0xd
mov qword [rsi + 0x20], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x1800430dc
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x10], rdi
jne 0x18004313f
lea ecx, [rdi + 0xb]
call fcn.180096e9c
mov rbx, rax
test rax, rax
je 0x18004313f
lea r8d, [rdi + 0xb]
mov rdx, rsi
mov rcx, rax
call fcn.1800877a0
mov cl, dil
movabs rdx, 0xb973a363d3bd1df7
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0xb
jb 0x180043115
ror rbx, 0xd
mov qword [rsi + 0x10], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x180043150
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x10], rdi
jne 0x1800431b3
lea ecx, [rdi + 0xb]
call fcn.180096e9c
mov rbx, rax
test rax, rax
je 0x1800431b3
lea r8d, [rdi + 0xb]
mov rdx, rsi
mov rcx, rax
call fcn.1800877a0
mov cl, dil
movabs rdx, 0x19c395d9efa54507
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0xb
jb 0x180043189
ror rbx, 0xd
mov qword [rsi + 0x10], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x1800431c4
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x10], rdi
jne 0x180043227
lea ecx, [rdi + 0xb]
call fcn.180096e9c
mov rbx, rax
test rax, rax
je 0x180043227
lea r8d, [rdi + 0xb]
mov rdx, rsi
mov rcx, rax
call fcn.1800877a0
mov cl, dil
movabs rdx, 0x1d2fd1a17f934951
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0xb
jb 0x1800431fd
ror rbx, 0xd
mov qword [rsi + 0x10], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
Function at 0x180043238
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x10], rdi
jne 0x18004329b
lea ecx, [rdi + 0xb]
call fcn.180096e9c
mov rbx, rax
test rax, rax
je 0x18004329b
lea r8d, [rdi + 0xb]
mov rdx, rsi
mov rcx, rax
call fcn.1800877a0
mov cl, dil
movabs rdx, 0x57935dcfa56b3d03
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0xb
jb 0x180043271
ror rbx, 0xd
mov qword [rsi + 0x10], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x1800432ac
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x10], rdi
jne 0x18004330f
lea ecx, [rdi + 0xb]
call fcn.180096e9c
mov rbx, rax
test rax, rax
je 0x18004330f
lea r8d, [rdi + 0xb]
mov rdx, rsi
mov rcx, rax
call fcn.1800877a0
mov cl, dil
movabs rdx, 0x65e7b363ff4bf5bf
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0xb
jb 0x1800432e5
ror rbx, 0xd
mov qword [rsi + 0x10], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x180043320
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x10], rdi
jne 0x180043383
lea ecx, [rdi + 0xb]
call fcn.180096e9c
mov rbx, rax
test rax, rax
je 0x180043383
lea r8d, [rdi + 0xb]
mov rdx, rsi
mov rcx, rax
call fcn.1800877a0
mov cl, dil
movabs rdx, 0x752f016903dba913
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0xb
jb 0x180043359
ror rbx, 0xd
mov qword [rsi + 0x10], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x180043394
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x10], rdi
jne 0x1800433f7
lea ecx, [rdi + 0xc]
call fcn.180096e9c
mov rbx, rax
test rax, rax
je 0x1800433f7
lea r8d, [rdi + 0xc]
mov rdx, rsi
mov rcx, rax
call fcn.1800877a0
mov cl, dil
movabs rdx, 0x11c707c3533949bf
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0xc
jb 0x1800433cd
ror rbx, 0xd
mov qword [rsi + 0x10], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x180043408
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x10], rdi
jne 0x18004346b
lea ecx, [rdi + 0xd]
call fcn.180096e9c
mov rbx, rax
test rax, rax
je 0x18004346b
lea r8d, [rdi + 0xd]
mov rdx, rsi
mov rcx, rax
call fcn.1800877a0
mov cl, dil
movabs rdx, 0x1b75bd1119a31f5d
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0xd
jb 0x180043441
ror rbx, 0xd
mov qword [rsi + 0x10], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
Function at 0x18004347c
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x10], rdi
jne 0x1800434df
lea ecx, [rdi + 0xe]
call fcn.180096e9c
mov rbx, rax
test rax, rax
je 0x1800434df
lea r8d, [rdi + 0xe]
mov rdx, rsi
mov rcx, rax
call fcn.1800877a0
mov cl, dil
movabs rdx, 0xf34995d9c52d9dfd
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0xe
jb 0x1800434b5
ror rbx, 0xd
mov qword [rsi + 0x10], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x1800434f0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x10], rdi
jne 0x180043553
lea ecx, [rdi + 0xf]
call fcn.180096e9c
mov rbx, rax
test rax, rax
je 0x180043553
lea r8d, [rdi + 0xf]
mov rdx, rsi
mov rcx, rax
call fcn.1800877a0
mov cl, dil
movabs rdx, 0xafc7bf9b0d3f5795
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0xf
jb 0x180043529
ror rbx, 0xd
mov qword [rsi + 0x10], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x180044bc8
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
push rdi
mov eax, 0x2050
call fcn.180084490
sub rsp, rax
mov rax, qword [0x18013c128]
xor rax, rsp
mov qword [rsp + 0x2040], rax
mov rbx, rdx
lea rdx, [rsp + 0x20]
call fcn.18002ae5c
mov edi, 0x2000
mov rdx, rdi
lea rcx, [rsp + 0x20]
call fcn.18002bc9c
mov r9, rbx
mov r8, rdi
mov edx, 1
mov rcx, rax
call fcn.1800989e0
add qword [rsp + 0x30], rax
cmp rax, rdi
je 0x180044bff
lea rcx, [rsp + 0x20]
call fcn.18002bdac
mov rcx, qword [rsp + 0x2040]
xor rcx, rsp
call fcn.1800844f0
mov rbx, qword [rsp + 0x2070]
add rsp, 0x2050
pop rdi
ret

Function at 0x180044c54
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x20], rbx
push rdi
mov eax, 0x2050
call fcn.180084490
sub rsp, rax
mov rax, qword [0x18013c128]
xor rax, rsp
mov qword [rsp + 0x2040], rax
mov rbx, rdx
mov rdi, r8
lea rdx, [rsp + 0x20]
call fcn.18002ae5c
mov rdx, rdi
lea rcx, [rsp + 0x20]
call fcn.18002bc9c
mov r9, rbx
mov r8, rdi
mov edx, 1
mov rcx, rax
call fcn.1800989e0
add qword [rsp + 0x30], rax
lea rcx, [rsp + 0x20]
mov rbx, rax
call fcn.18002bdac
xor eax, eax
test rbx, rbx
setne al
mov rcx, qword [rsp + 0x2040]
xor rcx, rsp
call fcn.1800844f0
mov rbx, qword [rsp + 0x2078]
add rsp, 0x2050
pop rdi
ret

Function at 0x18004611c
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 8], rdi
jne 0x18004617f
lea ecx, [rdi + 3]
call fcn.180096e9c
mov rbx, rax
test rax, rax
je 0x18004617f
lea r8d, [rdi + 3]
mov rdx, rsi
mov rcx, rax
call fcn.1800877a0
mov cl, dil
movabs rdx, 0xdbaf4383c59f19cf
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 3
jb 0x180046155
ror rbx, 0xd
mov qword [rsi + 8], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
Function at 0x180046190
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 8], rdi
jne 0x1800461f3
lea ecx, [rdi + 3]
call fcn.180096e9c
mov rbx, rax
test rax, rax
je 0x1800461f3
lea r8d, [rdi + 3]
mov rdx, rsi
mov rcx, rax
call fcn.1800877a0
mov cl, dil
movabs rdx, 0xd517ab779d7d13e5
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 3
jb 0x1800461c9
ror rbx, 0xd
mov qword [rsi + 8], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x180046204
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 8], rdi
jne 0x180046267
lea ecx, [rdi + 3]
call fcn.180096e9c
mov rbx, rax
test rax, rax
je 0x180046267
lea r8d, [rdi + 3]
mov rdx, rsi
mov rcx, rax
call fcn.1800877a0
mov cl, dil
movabs rdx, 0x95355dfd798dc5a3
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 3
jb 0x18004623d
ror rbx, 0xd
mov qword [rsi + 8], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x180046278
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 8], rdi
jne 0x1800462db
lea ecx, [rdi + 3]
call fcn.180096e9c
mov rbx, rax
test rax, rax
je 0x1800462db
lea r8d, [rdi + 3]
mov rdx, rsi
mov rcx, rax
call fcn.1800877a0
mov cl, dil
movabs rdx, 0x89d75571bba92fd7
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 3
jb 0x1800462b1
ror rbx, 0xd
mov qword [rsi + 8], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x1800462ec
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 8], rdi
jne 0x18004634f
lea ecx, [rdi + 3]
call fcn.180096e9c
mov rbx, rax
test rax, rax
je 0x18004634f
lea r8d, [rdi + 3]
mov rdx, rsi
mov rcx, rax
call fcn.1800877a0
mov cl, dil
movabs rdx, 0x8107f5017dbbf511
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 3
jb 0x180046325
ror rbx, 0xd
mov qword [rsi + 8], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x180046360
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 8], rdi
jne 0x1800463c3
lea ecx, [rdi + 3]
call fcn.180096e9c
mov rbx, rax
test rax, rax
je 0x1800463c3
lea r8d, [rdi + 3]
mov rdx, rsi
mov rcx, rax
call fcn.1800877a0
mov cl, dil
movabs rdx, 0x1cdc31f65f3d5f1
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 3
jb 0x180046399
ror rbx, 0xd
mov qword [rsi + 8], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret