joyce8/EMBER2024-capa huggingface dataset:
Function at 0x7ff75f80be90
Capabilities:
Hash data with crc32

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x40
mov rax, qword [0x7ff75f965010]
xor rax, rsp
mov qword [rsp + 0x30], rax
mov rbx, qword [0x7ff75f9675d0]
mov edi, ecx
cmp byte [rbx + 0x4cf1], 0
jne 0x7ff75f80bef1
cmp byte [rbx + 0x4cf2], 0
jne 0x7ff75f80bef1
movsx r9d, word [rbx + 0x5e38]
lea r8, [0x7ff75f94aab8]
mov edx, 0x10
lea rcx, [rsp + 0x20]
call fcn.7ff75f7fd350
test dil, 2
je 0x7ff75f80c01f
jmp 0x7ff75f80bf7a
movss xmm1, dword [rbx + 0x39c4]
lea r8, [0x7ff75f94aab8]
movsx r9d, word [rbx + 0x5e38]
lea rcx, [rsp + 0x20]
movaps xmm0, xmm1
xor eax, eax
mulss xmm0, dword [0x7ff75f94badc]
mulss xmm1, dword [0x7ff75f94bacc]
lea edx, [rax + 0x10]
addss xmm0, dword [rbx + 0xe48]
addss xmm1, dword [rbx + 0xe4c]
mov qword [rbx + 0x49d0], rax
mov dword [rbx + 0x49bc], 1
movss dword [rbx + 0x49c8], xmm0
movss dword [rbx + 0x49cc], xmm1
movss xmm0, dword [rbx + 0x3a20]
mulss xmm0, dword [0x7ff75f94ba64]
or dword [rbx + 0x49b8], 0x41
movss dword [rbx + 0x4a18], xmm0
call fcn.7ff75f7fd350
movzx r9d, byte [rsp + 0x20]
lea r8, [rsp + 0x21]
mov r10d, 0xffffffff
mov ecx, r10d
test r9b, r9b
je 0x7ff75f80bfd0
lea r11, [0x7ff75f9456e0]
nop word [rax + rax]
cmp r9b, 0x23
jne 0x7ff75f80bfb3
cmp byte [r8], r9b
jne 0x7ff75f80bfb3
cmp byte [r8 + 1], r9b
cmove ecx, r10d
movzx edx, cl
movzx eax, r9b
movzx r9d, byte [r8]
xor rdx, rax
shr ecx, 8
inc r8
xor ecx, dword [r11 + rdx*4]
test r9b, r9b
jne 0x7ff75f80bfa0
not ecx
call fcn.7ff75f803180
test rax, rax
je 0x7ff75f80c01f
cmp byte [rax + 0xbe], 0
je 0x7ff75f80c01f
mov byte [rax + 0xc3], 1
lea r8, [0x7ff75f94aab8]
mov byte [rax + 0xc5], 1
lea rcx, [rsp + 0x20]
mov byte [rax + 0xe4], 1
mov edx, 0x10
inc word [rbx + 0x5e38]
movsx r9d, word [rbx + 0x5e38]
call fcn.7ff75f7fd350
xor edx, edx
lea rcx, [rsp + 0x20]
mov r8d, 0x2030347
call fcn.7ff75f805d00
mov al, 1
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.7ff75f8a6770
mov rbx, qword [rsp + 0x50]
add rsp, 0x40
pop rdi
ret
Function at 0x7ff75f811690
Capabilities:
Hash data with crc32

Disassembly:
sub rsp, 8
movzx r9d, byte [rcx]
lea r8, [rcx + 1]
mov r10, qword [0x7ff75f9675d0]
mov r11d, 0xffffffff
mov eax, r11d
test r9b, r9b
je 0x7ff75f8116f3
mov qword [rsp], rbx
lea rbx, [0x7ff75f9456e0]
nop dword [rax]
cmp r9b, 0x23
jne 0x7ff75f8116d3
cmp byte [r8], r9b
jne 0x7ff75f8116d3
cmp byte [r8 + 1], r9b
cmove eax, r11d
movzx edx, al
movzx ecx, r9b
movzx r9d, byte [r8]
xor rdx, rcx
shr eax, 8
inc r8
xor eax, dword [rbx + rdx*4]
test r9b, r9b
jne 0x7ff75f8116c0
mov rbx, qword [rsp]
movsxd rcx, dword [r10 + 0x5f00]
not eax
mov r8, qword [r10 + 0x5f08]
lea rdx, [rcx + rcx*8]
lea rcx, [r8 + rdx*8]
cmp r8, rcx
je 0x7ff75f81171f
cmp dword [r8 + 8], eax
je 0x7ff75f811726
add r8, 0x48
cmp r8, rcx
jne 0x7ff75f811710
xor eax, eax
add rsp, 8
ret
mov rax, r8
add rsp, 8
ret
Function at 0x7ff75f82e710
Capabilities:
Hash data using fnv

Disassembly:
movzx eax, byte [rcx]
test al, al
jne 0x7ff75f82e71a
mov eax, edx
ret
xor eax, edx
imul edx, eax, 0x1000193
inc rcx
jmp fcn.7ff75f82e710
Function at 0x7ff75f83bb40
Capabilities:
Encode data using xor
Generate random numbers using a mersenne twister

Disassembly:
sub rsp, 8
mov r9, rcx
mov r10d, 0x270
mov ecx, dword [rcx]
cmp ecx, r10d
jne 0x7ff75f83bba1
lea r8, [r9 + 8]
nop dword [rax + rax]
mov edx, dword [r8 - 4]
xor edx, dword [r8]
lea r8, [r8 + 4]
btr edx, 0x1f
xor edx, dword [r8 - 8]
mov eax, edx
and al, 1
neg al
sbb ecx, ecx
shr edx, 1
and ecx, 0x9908b0df
xor ecx, dword [r8 + 0x62c]
xor ecx, edx
mov dword [r8 + 0x9b8], ecx
sub r10, 1
jne 0x7ff75f83bb60
mov ecx, dword [r9]
jmp 0x7ff75f83bc88
cmp ecx, 0x4e0
jb 0x7ff75f83bc88
lea r10, [r9 + 0x9c4]
mov qword [rsp], rbx
mov r11d, dword [r10]
mov ebx, 0xe3
mov eax, r11d
mov r11d, dword [r10 + 4]
mov edx, r11d
lea r10, [r10 + 4]
xor edx, eax
btr edx, 0x1f
xor edx, eax
mov eax, edx
and al, 1
neg al
sbb ecx, ecx
shr edx, 1
and ecx, 0x9908b0df
xor ecx, dword [r10 + 0x630]
xor ecx, edx
mov dword [r10 - 0x9c4], ecx
sub rbx, 1
jne 0x7ff75f83bbc0
lea r10, [r9 + 0xd50]
mov ebx, 0x18c
mov r11d, dword [r10]
nop dword [rax + rax]
mov eax, r11d
mov r11d, dword [r10 + 4]
mov edx, r11d
lea r10, [r10 + 4]
xor edx, eax
btr edx, 0x1f
xor edx, eax
mov eax, edx
and al, 1
neg al
sbb ecx, ecx
shr edx, 1
and ecx, 0x9908b0df
xor ecx, dword [r10 - 0xd50]
xor ecx, edx
mov dword [r10 - 0x9c4], ecx
sub rbx, 1
jne 0x7ff75f83bc10
mov eax, dword [r9 + 0x1380]
mov edx, eax
xor edx, dword [r9 + 4]
mov rbx, qword [rsp]
btr edx, 0x1f
xor edx, eax
mov eax, edx
and al, 1
neg al
sbb ecx, ecx
shr edx, 1
and ecx, 0x9908b0df
xor ecx, dword [r9 + 0x634]
xor ecx, edx
mov dword [r9 + 0x9c0], ecx
xor ecx, ecx
mov dword [r9], ecx
mov eax, ecx
mov edx, dword [r9 + rax*4 + 4]
lea eax, [rcx + 1]
mov dword [r9], eax
mov ecx, edx
mov eax, dword [r9 + 0x1384]
shr ecx, 0xb
and eax, ecx
xor edx, eax
mov eax, edx
and eax, 0xff3a58ad
shl eax, 7
xor edx, eax
mov eax, edx
and eax, 0xffffdf8c
shl eax, 0xf
xor edx, eax
mov eax, edx
shr eax, 0x12
xor eax, edx
add rsp, 8
ret
Function at 0x7ff75f84eb70
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push rbx
push rbp
push rdi
sub rsp, 0x50
mov rax, qword [rcx + 8]
mov ebp, r8d
mov ecx, 0x3e80000
mov rbx, qword [rax + 0x2f0]
mov rax, qword [rdx + 0x80]
movzx edx, word [rdx + 0x68]
movzx edi, word [rax + 0x18]
mov eax, 0x40000
shl edi, 0x10
cmp edi, eax
cmovl edi, eax
shl edx, 0x10
call fcn.7ff75f83d530
mov dword [rsp + 0x24], eax
mov ecx, eax
cmp eax, 0x28f
jge 0x7ff75f84ebc6
xor eax, eax
add rsp, 0x50
pop rdi
pop rbp
pop rbx
ret
mov eax, dword [rbx + 0x24]
mov qword [rsp + 0x80], rsi
mov esi, dword [rbx + 0x28]
mov qword [rsp + 0x48], r12
mov r12d, dword [rbx + 0x3c]
mov qword [rsp + 0x40], r13
mov r13d, dword [rbx + 0x38]
mov dword [rsp + 0x88], eax
mov eax, dword [rbx + 0x2c]
mov qword [rsp + 0x38], r14
mov r14d, dword [rbx + 0x40]
mov dword [rsp + 0x70], eax
mov eax, dword [rbx + 0x34]
mov qword [rsp + 0x30], r15
mov r15d, dword [rbx + 0x30]
mov dword [rsp + 0x78], eax
mov dword [rsp + 0x20], r12d
test ebp, ebp
jg 0x7ff75f84ec1d
mov ebp, 0x4b0000
jmp 0x7ff75f84ec2b
shl ebp, 0x10
mov edx, ecx
mov ecx, ebp
call fcn.7ff75f83fa90
mov ebp, eax
bsr ecx, ebp
bsr eax, edi
shl r12d, 0x10
add eax, ecx
cmp eax, 0x2e
jl 0x7ff75f84ec41
mov eax, r12d
jmp 0x7ff75f84ec4a
mov edx, edi
mov ecx, ebp
call fcn.7ff75f83fa90
mov r9d, dword [rsp + 0x88]
mov ecx, r9d
shl ecx, 0x10
cmp eax, ecx
jge 0x7ff75f84ec66
shl esi, 0x10
mov ecx, esi
jmp 0x7ff75f84ed55
mov r8d, dword [rsp + 0x70]
mov edx, r8d
shl edx, 0x10
mov dword [rsp + 0x88], edx
cmp eax, edx
jge 0x7ff75f84ecc4
mov ebx, r8d
mov edx, edi
sub ebx, r9d
call fcn.7ff75f83d530
mov ecx, ebp
sub ecx, eax
test ebx, ebx
je 0x7ff75f84ecb4
sub r15d, esi
mov r8d, ebx
mov edx, r15d
call fcn.7ff75f83f980
shl esi, 0x10
mov edx, edi
mov ecx, esi
mov ebx, eax
call fcn.7ff75f83d530
add ebx, eax
jmp 0x7ff75f84ed5e
mov esi, dword [rsp + 0x78]
mov ebx, esi
mov r8d, dword [rsp + 0x70]
shl ebx, 0x10
jmp 0x7ff75f84ecd1
mov esi, dword [rsp + 0x78]
mov ebx, esi
shl ebx, 0x10
cmp eax, ebx
jge 0x7ff75f84ed10
mov ecx, dword [rsp + 0x88]
mov r12d, esi
mov edx, edi
sub r12d, r8d
call fcn.7ff75f83d530
mov ecx, ebp
sub ecx, eax
test r12d, r12d
je 0x7ff75f84ed15
sub r13d, r15d
mov r8d, r12d
mov edx, r13d
call fcn.7ff75f83f980
shl r15d, 0x10
mov edx, edi
mov ecx, r15d
mov ebx, eax
call fcn.7ff75f83d530
add ebx, eax
jmp 0x7ff75f84ed5e
cmp eax, r12d
jge 0x7ff75f84ed4e
mov r15d, dword [rsp + 0x20]
mov edx, edi
mov ecx, ebx
call fcn.7ff75f83d530
sub ebp, eax
sub r15d, esi
je 0x7ff75f84ed4e
sub r14d, r13d
mov r8d, r15d
mov edx, r14d
mov ecx, ebp
call fcn.7ff75f83f980
shl r13d, 0x10
mov edx, edi
mov ecx, r13d
mov ebx, eax
call fcn.7ff75f83d530
add ebx, eax
jmp 0x7ff75f84ed5e
shl r14d, 0x10
mov ecx, r14d
mov edx, edi
call fcn.7ff75f83d530
mov ebx, eax
mov edx, dword [rsp + 0x24]
mov ecx, ebx
mov r15, qword [rsp + 0x30]
mov r14, qword [rsp + 0x38]
mov r13, qword [rsp + 0x40]
mov r12, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x80]
add rsp, 0x50
pop rdi
pop rbp
pop rbx
jmp fcn.7ff75f83d530
Function at 0x7ff75f8a2ac0
Capabilities:
Encode data using xor
Hash data with crc32

Disassembly:
mov r9, rdx
test rdx, rdx
jne 0x7ff75f8a2acb
xor eax, eax
ret
lea r11, [0x7ff75f92daf0]
not ecx
cmp r8, 8
jb 0x7ff75f8a2b9d
mov r10, r8
shr r10, 3
imul rax, r10, 0xfffffffffffffff8
add r8, rax
nop dword [rax]
movzx edx, byte [r9]
mov eax, ecx
xor rdx, rax
shr ecx, 8
movzx eax, dl
movzx edx, byte [r9 + 1]
xor ecx, dword [r11 + rax*4]
mov eax, ecx
shr ecx, 8
xor rdx, rax
movzx eax, dl
movzx edx, byte [r9 + 2]
xor ecx, dword [r11 + rax*4]
mov eax, ecx
shr ecx, 8
xor rdx, rax
movzx eax, dl
movzx edx, byte [r9 + 3]
xor ecx, dword [r11 + rax*4]
mov eax, ecx
shr ecx, 8
xor rdx, rax
movzx eax, dl
movzx edx, byte [r9 + 4]
xor ecx, dword [r11 + rax*4]
mov eax, ecx
shr ecx, 8
xor rdx, rax
movzx eax, dl
movzx edx, byte [r9 + 5]
xor ecx, dword [r11 + rax*4]
mov eax, ecx
shr ecx, 8
xor rdx, rax
movzx eax, dl
movzx edx, byte [r9 + 6]
xor ecx, dword [r11 + rax*4]
mov eax, ecx
shr ecx, 8
xor rdx, rax
movzx eax, dl
movzx edx, byte [r9 + 7]
add r9, 8
xor ecx, dword [r11 + rax*4]
mov eax, ecx
shr ecx, 8
xor rdx, rax
movzx eax, dl
xor ecx, dword [r11 + rax*4]
sub r10, 1
jne 0x7ff75f8a2af0
test r8, r8
je 0x7ff75f8a2bcd
nop dword [rax]
nop word [rax + rax]
movzx edx, byte [r9]
lea r9, [r9 + 1]
mov eax, ecx
shr ecx, 8
xor rdx, rax
movzx eax, dl
xor ecx, dword [r11 + rax*4]
sub r8, 1
jne 0x7ff75f8a2bb0
not ecx
mov eax, ecx
ret
Function at 0x7ff75f8a7590
Capabilities:
Parse pe header

Disassembly:
sub rsp, 0x28
xor ecx, ecx
call qword [0x7ff75f9112f8]
test rax, rax
je 0x7ff75f8a75da
mov ecx, 0x5a4d
cmp word [rax], cx
jne 0x7ff75f8a75da
movsxd rcx, dword [rax + 0x3c]
add rcx, rax
cmp dword [rcx], 0x4550
jne 0x7ff75f8a75da
mov eax, 0x20b
cmp word [rcx + 0x18], ax
jne 0x7ff75f8a75da
cmp dword [rcx + 0x84], 0xe
jbe 0x7ff75f8a75da
cmp dword [rcx + 0xf8], 0
setne al
jmp 0x7ff75f8a75dc
xor al, al
add rsp, 0x28
ret

Function at 0x7ff75f8a7e20
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rsi
push rdi
sub rsp, 0x50
mov r10, r8
mov rbx, rdx
mov rdi, rcx
mov qword [rsp + 0x28], rcx
xor esi, esi
cmp byte [r8 + 6], sil
je 0x7ff75f8a7e54
mov eax, esi
lea ecx, [rax - 0x25]
xor byte [r8 + rax], cl
inc rax
cmp rax, 5
jb 0x7ff75f8a7e40
mov byte [r8 + 6], sil
add r8, 5
lea r9, [rsp + 0x20]
mov rdx, r10
lea rcx, [rsp + 0x30]
call fcn.7ff75f8a79f0
nop
mov r9, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0x10
jb 0x7ff75f8a7e79
mov rbx, qword [rbx]
mov r8, rbx
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.7ff75f8b5c00
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
movups xmm0, xmmword [rax]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x7ff75f8a7ef3
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff75f8a7eee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff75f8a7eee
call qword [0x7ff75f911ad8]
int3
call fcn.7ff75f8a69e8
mov rax, rdi
add rsp, 0x50
pop rdi
pop rsi
pop rbx
ret

Function at 0x7ff75f8a7f00
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rsi
push rdi
sub rsp, 0x50
mov r10, r8
mov rbx, rdx
mov rdi, rcx
mov qword [rsp + 0x28], rcx
xor esi, esi
cmp byte [r8 + 7], sil
je 0x7ff75f8a7f34
mov eax, esi
lea ecx, [rax - 0x25]
xor byte [r8 + rax], cl
inc rax
cmp rax, 6
jb 0x7ff75f8a7f20
mov byte [r8 + 7], sil
add r8, 6
lea r9, [rsp + 0x20]
mov rdx, r10
lea rcx, [rsp + 0x30]
call fcn.7ff75f8a79f0
nop
mov r9, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0x10
jb 0x7ff75f8a7f59
mov rbx, qword [rbx]
mov r8, rbx
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.7ff75f8b5c00
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
movups xmm0, xmmword [rax]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x7ff75f8a7fd3
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff75f8a7fce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff75f8a7fce
call qword [0x7ff75f911ad8]
int3
call fcn.7ff75f8a69e8
mov rax, rdi
add rsp, 0x50
pop rdi
pop rsi
pop rbx
ret
Function at 0x7ff75f8a7fe0
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rsi
push rdi
sub rsp, 0x50
mov r10, r8
mov rbx, rdx
mov rdi, rcx
mov qword [rsp + 0x28], rcx
xor esi, esi
cmp byte [r8 + 8], sil
je 0x7ff75f8a8014
mov eax, esi
lea ecx, [rax - 0x25]
xor byte [r8 + rax], cl
inc rax
cmp rax, 7
jb 0x7ff75f8a8000
mov byte [r8 + 8], sil
add r8, 7
lea r9, [rsp + 0x20]
mov rdx, r10
lea rcx, [rsp + 0x30]
call fcn.7ff75f8a79f0
nop
mov r9, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0x10
jb 0x7ff75f8a8039
mov rbx, qword [rbx]
mov r8, rbx
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.7ff75f8b5c00
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
movups xmm0, xmmword [rax]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x7ff75f8a80b3
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff75f8a80ae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff75f8a80ae
call qword [0x7ff75f911ad8]
int3
call fcn.7ff75f8a69e8
mov rax, rdi
add rsp, 0x50
pop rdi
pop rsi
pop rbx
ret

Function at 0x7ff75f8a80c0
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rsi
push rdi
sub rsp, 0x70
mov r10, r8
mov rdi, rdx
mov rsi, rcx
mov qword [rsp + 0x28], rcx
xor ebx, ebx
cmp byte [r8 + 9], bl
je 0x7ff75f8a80f4
mov ecx, ebx
lea eax, [rcx - 0x25]
xor byte [r8 + rcx], al
inc rcx
cmp rcx, 8
jb 0x7ff75f8a80e0
mov byte [r8 + 9], bl
add r8, 8
lea r9, [rsp + 0x20]
mov rdx, r10
lea rcx, [rsp + 0x50]
call fcn.7ff75f8a79f0
nop
cmp byte [rdi + 9], 0
je 0x7ff75f8a8124
lea eax, [rbx - 0x25]
xor byte [rbx + rdi], al
inc rbx
cmp rbx, 8
jb 0x7ff75f8a8111
mov byte [rdi + 9], 0
lea r8, [rdi + 8]
lea r9, [rsp + 0x20]
mov rdx, rdi
lea rcx, [rsp + 0x30]
call fcn.7ff75f8a79f0
nop
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x30]
movzx edx, byte [rsp + 0x20]
mov rcx, rsi
call fcn.7ff75f8adea0
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x7ff75f8a8194
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff75f8a818e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff75f8a818e
call qword [0x7ff75f911ad8]
int3
call fcn.7ff75f8a69e8
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x7ff75f8a81d4
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff75f8a81cf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff75f8a81cf
call qword [0x7ff75f911ad8]
int3
call fcn.7ff75f8a69e8
mov rax, rsi
add rsp, 0x70
pop rdi
pop rsi
pop rbx
ret
Function at 0x7ff75f8a81e0
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rsi
push rdi
sub rsp, 0x50
mov r10, r8
mov rbx, rdx
mov rdi, rcx
mov qword [rsp + 0x28], rcx
xor esi, esi
cmp byte [r8 + 9], sil
je 0x7ff75f8a8214
mov eax, esi
lea ecx, [rax - 0x25]
xor byte [r8 + rax], cl
inc rax
cmp rax, 8
jb 0x7ff75f8a8200
mov byte [r8 + 9], sil
add r8, 8
lea r9, [rsp + 0x20]
mov rdx, r10
lea rcx, [rsp + 0x30]
call fcn.7ff75f8a79f0
nop
mov r9, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0x10
jb 0x7ff75f8a8239
mov rbx, qword [rbx]
mov r8, rbx
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.7ff75f8b5c00
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
movups xmm0, xmmword [rax]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x7ff75f8a82b3
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff75f8a82ae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff75f8a82ae
call qword [0x7ff75f911ad8]
int3
call fcn.7ff75f8a69e8
mov rax, rdi
add rsp, 0x50
pop rdi
pop rsi
pop rbx
ret

Function at 0x7ff75f8a82c0
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rsi
push rdi
sub rsp, 0x50
mov r10, r8
mov rbx, rdx
mov rdi, rcx
mov qword [rsp + 0x28], rcx
xor esi, esi
cmp byte [r8 + 0xa], sil
je 0x7ff75f8a82f4
mov eax, esi
lea ecx, [rax - 0x25]
xor byte [r8 + rax], cl
inc rax
cmp rax, 9
jb 0x7ff75f8a82e0
mov byte [r8 + 0xa], sil
add r8, 9
lea r9, [rsp + 0x20]
mov rdx, r10
lea rcx, [rsp + 0x30]
call fcn.7ff75f8a79f0
nop
mov r9, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0x10
jb 0x7ff75f8a8319
mov rbx, qword [rbx]
mov r8, rbx
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.7ff75f8b5c00
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
movups xmm0, xmmword [rax]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x7ff75f8a8393
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff75f8a838e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff75f8a838e
call qword [0x7ff75f911ad8]
int3
call fcn.7ff75f8a69e8
mov rax, rdi
add rsp, 0x50
pop rdi
pop rsi
pop rbx
ret
Function at 0x7ff75f8a83a0
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rsi
push rdi
sub rsp, 0x50
mov r10, r8
mov rbx, rdx
mov rdi, rcx
mov qword [rsp + 0x28], rcx
xor esi, esi
cmp byte [r8 + 0xc], sil
je 0x7ff75f8a83d4
mov eax, esi
lea ecx, [rax - 0x25]
xor byte [r8 + rax], cl
inc rax
cmp rax, 0xb
jb 0x7ff75f8a83c0
mov byte [r8 + 0xc], sil
add r8, 0xb
lea r9, [rsp + 0x20]
mov rdx, r10
lea rcx, [rsp + 0x30]
call fcn.7ff75f8a79f0
nop
mov r9, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0x10
jb 0x7ff75f8a83f9
mov rbx, qword [rbx]
mov r8, rbx
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.7ff75f8b5c00
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
movups xmm0, xmmword [rax]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x7ff75f8a8473
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff75f8a846e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff75f8a846e
call qword [0x7ff75f911ad8]
int3
call fcn.7ff75f8a69e8
mov rax, rdi
add rsp, 0x50
pop rdi
pop rsi
pop rbx
ret

Function at 0x7ff75f8af050
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor eax, eax
mov rbx, rdx
cmp byte [rcx + 0x10], al
je 0x7ff75f8af073
lea edx, [rax - 0x25]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xf
jb 0x7ff75f8af060
mov byte [rcx + 0x10], 0
lea r8, [rcx + 0xf]
mov rdx, rcx
mov rcx, rbx
lea r9, [rsp + 0x48]
call fcn.7ff75f8a79f0
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x7ff75f8d7ab0
Capabilities:
Hash data with md5

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r14
push r15
sub rsp, 0x100
mov rax, qword [0x7ff75f965010]
xor rax, rsp
mov qword [rsp + 0xf0], rax
mov r14, rdx
mov rbx, rcx
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x30], rdx
xor r15d, r15d
mov dword [rsp + 0x20], r15d
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x7ff75f8d7afb
mov rdx, qword [rdx]
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
mov qword [rcx + 0x10], r15
mov qword [rcx + 0x18], 0xf
mov byte [rcx], 0
mov dword [rsp + 0x20], 2
mov dword [rsp + 0x48], 0x67452301
mov dword [rsp + 0x4c], 0xefcdab89
mov dword [rsp + 0x50], 0x98badcfe
mov dword [rsp + 0x54], 0x10325476
mov qword [rsp + 0x40], r15
lea rcx, [rsp + 0x40]
call fcn.7ff75f8d6f10
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0xe0]
call fcn.7ff75f8d6d90
mov rdi, r15
mov ebp, 0x57
movzx esi, byte [rsp + rdi + 0xe0]
movzx eax, sil
shr al, 4
mov r9d, 0x30
cmp al, 0xa
cmovae r9d, ebp
add r9b, al
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
cmp rcx, rdx
jae 0x7ff75f8d7bab
lea rax, [rcx + 1]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x7ff75f8d7ba0
mov rax, qword [rbx]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x7ff75f8d7bba
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rbx
call fcn.7ff75f7e9810
and sil, 0xf
mov r9d, 0x30
cmp sil, 0xa
cmovae r9d, ebp
add r9b, sil
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
cmp rcx, rdx
jae 0x7ff75f8d7bfb
lea rax, [rcx + 1]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x7ff75f8d7bf0
mov rax, qword [rbx]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x7ff75f8d7c0a
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rbx
call fcn.7ff75f7e9810
inc rdi
cmp rdi, 0x10
jb 0x7ff75f8d7b61
mov rdx, qword [r14 + 0x18]
cmp rdx, 0x10
jb 0x7ff75f8d7c4d
inc rdx
mov rcx, qword [r14]
cmp rdx, 0x1000
jb 0x7ff75f8d7c48
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x7ff75f8d7c87
mov rcx, r8
call fcn.7ff75f8a69e8
mov qword [r14 + 0x10], r15
mov qword [r14 + 0x18], 0xf
mov byte [r14], 0
mov rax, rbx
mov rcx, qword [rsp + 0xf0]
xor rcx, rsp
call fcn.7ff75f8a6770
mov rbx, qword [rsp + 0x140]
add rsp, 0x100
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
call qword [0x7ff75f911ad8]
int3