joyce8/EMBER2024-capa huggingface dataset:
Function at 0x18008a2f4
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 8], rdi
jne 0x18008a357
lea ecx, [rdi + 8]
call fcn.1800bbd1c
mov rbx, rax
test rax, rax
je 0x18008a357
lea r8d, [rdi + 8]
mov rdx, rsi
mov rcx, rax
call fcn.1800ac630
mov cl, dil
movabs rdx, 0xcd15890f1fef9f7d
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 8
jb 0x18008a32d
ror rbx, 0xd
mov qword [rsi + 8], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x18008a3dc
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x20], rdi
jne 0x18008a43f
lea ecx, [rdi + 0x1d]
call fcn.1800bbd1c
mov rbx, rax
test rax, rax
je 0x18008a43f
lea r8d, [rdi + 0x1d]
mov rdx, rsi
mov rcx, rax
call fcn.1800ac630
mov cl, dil
movabs rdx, 0xe57fbf1f7b375791
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0x1d
jb 0x18008a415
ror rbx, 0xd
mov qword [rsi + 0x20], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x18008bec4
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x10], rdi
jne 0x18008bf27
lea ecx, [rdi + 0xa]
call fcn.1800bbd1c
mov rbx, rax
test rax, rax
je 0x18008bf27
lea r8d, [rdi + 0xa]
mov rdx, rsi
mov rcx, rax
call fcn.1800ac630
mov cl, dil
movabs rdx, 0xcf2529af23519919
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0xa
jb 0x18008befd
ror rbx, 0xd
mov qword [rsi + 0x10], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x18008c020
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x18], rdi
jne 0x18008c083
lea ecx, [rdi + 0x14]
call fcn.1800bbd1c
mov rbx, rax
test rax, rax
je 0x18008c083
lea r8d, [rdi + 0x14]
mov rdx, rsi
mov rcx, rax
call fcn.1800ac630
mov cl, dil
movabs rdx, 0x1f3fd56d15fbb583
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0x14
jb 0x18008c059
ror rbx, 0xd
mov qword [rsi + 0x18], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x18008c17c
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x20], rdi
jne 0x18008c1df
lea ecx, [rdi + 0x19]
call fcn.1800bbd1c
mov rbx, rax
test rax, rax
je 0x18008c1df
lea r8d, [rdi + 0x19]
mov rdx, rsi
mov rcx, rax
call fcn.1800ac630
mov cl, dil
movabs rdx, 0x810979618f4359cd
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0x19
jb 0x18008c1b5
ror rbx, 0xd
mov qword [rsi + 0x20], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
Function at 0x18008d1e4
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 8], rdi
jne 0x18008d247
lea ecx, [rdi + 5]
call fcn.1800bbd1c
mov rbx, rax
test rax, rax
je 0x18008d247
lea r8d, [rdi + 5]
mov rdx, rsi
mov rcx, rax
call fcn.1800ac630
mov cl, dil
movabs rdx, 0x6b9d49c7b371bf99
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 5
jb 0x18008d21d
ror rbx, 0xd
mov qword [rsi + 8], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x18008d258
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 8], rdi
jne 0x18008d2bb
lea ecx, [rdi + 6]
call fcn.1800bbd1c
mov rbx, rax
test rax, rax
je 0x18008d2bb
lea r8d, [rdi + 6]
mov rdx, rsi
mov rcx, rax
call fcn.1800ac630
mov cl, dil
movabs rdx, 0xe59fef494b4dbfa1
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 6
jb 0x18008d291
ror rbx, 0xd
mov qword [rsi + 8], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x18008d2cc
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 8], rdi
jne 0x18008d32f
lea ecx, [rdi + 7]
call fcn.1800bbd1c
mov rbx, rax
test rax, rax
je 0x18008d32f
lea r8d, [rdi + 7]
mov rdx, rsi
mov rcx, rax
call fcn.1800ac630
mov cl, dil
movabs rdx, 0xdfe7f527c79f85eb
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 7
jb 0x18008d305
ror rbx, 0xd
mov qword [rsi + 8], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x18008d340
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x10], rdi
jne 0x18008d3a3
lea ecx, [rdi + 0xa]
call fcn.1800bbd1c
mov rbx, rax
test rax, rax
je 0x18008d3a3
lea r8d, [rdi + 0xa]
mov rdx, rsi
mov rcx, rax
call fcn.1800ac630
mov cl, dil
movabs rdx, 0x8db795733d7987fd
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0xa
jb 0x18008d379
ror rbx, 0xd
mov qword [rsi + 0x10], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x18008d3b4
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x18], rdi
jne 0x18008d417
lea ecx, [rdi + 0x13]
call fcn.1800bbd1c
mov rbx, rax
test rax, rax
je 0x18008d417
lea r8d, [rdi + 0x13]
mov rdx, rsi
mov rcx, rax
call fcn.1800ac630
mov cl, dil
movabs rdx, 0x1901a1eb0f7f7567
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0x13
jb 0x18008d3ed
ror rbx, 0xd
mov qword [rsi + 0x18], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
Function at 0x18008d428
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x18], rdi
jne 0x18008d48b
lea ecx, [rdi + 0x13]
call fcn.1800bbd1c
mov rbx, rax
test rax, rax
je 0x18008d48b
lea r8d, [rdi + 0x13]
mov rdx, rsi
mov rcx, rax
call fcn.1800ac630
mov cl, dil
movabs rdx, 0x27cf676ff1953f9d
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0x13
jb 0x18008d461
ror rbx, 0xd
mov qword [rsi + 0x18], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x18008d49c
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x18], rdi
jne 0x18008d4ff
lea ecx, [rdi + 0x13]
call fcn.1800bbd1c
mov rbx, rax
test rax, rax
je 0x18008d4ff
lea r8d, [rdi + 0x13]
mov rdx, rsi
mov rcx, rax
call fcn.1800ac630
mov cl, dil
movabs rdx, 0x5d5373a54167492b
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0x13
jb 0x18008d4d5
ror rbx, 0xd
mov qword [rsi + 0x18], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x18008d510
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x18], rdi
jne 0x18008d573
lea ecx, [rdi + 0x16]
call fcn.1800bbd1c
mov rbx, rax
test rax, rax
je 0x18008d573
lea r8d, [rdi + 0x16]
mov rdx, rsi
mov rcx, rax
call fcn.1800ac630
mov cl, dil
movabs rdx, 0x7d410717b555f99b
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0x16
jb 0x18008d549
ror rbx, 0xd
mov qword [rsi + 0x18], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x18008d584
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x18], rdi
jne 0x18008d5e7
lea ecx, [rdi + 0x16]
call fcn.1800bbd1c
mov rbx, rax
test rax, rax
je 0x18008d5e7
lea r8d, [rdi + 0x16]
mov rdx, rsi
mov rcx, rax
call fcn.1800ac630
mov cl, dil
movabs rdx, 0x93de57d4d91d391
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0x16
jb 0x18008d5bd
ror rbx, 0xd
mov qword [rsi + 0x18], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x18008d5f8
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x20], rdi
jne 0x18008d65b
lea ecx, [rdi + 0x1d]
call fcn.1800bbd1c
mov rbx, rax
test rax, rax
je 0x18008d65b
lea r8d, [rdi + 0x1d]
mov rdx, rsi
mov rcx, rax
call fcn.1800ac630
mov cl, dil
movabs rdx, 0x9592b41c54dfb37
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0x1d
jb 0x18008d631
ror rbx, 0xd
mov qword [rsi + 0x20], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
Function at 0x18008d66c
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x20], rdi
jne 0x18008d6cf
lea ecx, [rdi + 0x1f]
call fcn.1800bbd1c
mov rbx, rax
test rax, rax
je 0x18008d6cf
lea r8d, [rdi + 0x1f]
mov rdx, rsi
mov rcx, rax
call fcn.1800ac630
mov cl, dil
movabs rdx, 0xeb995df1ff715fd1
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0x1f
jb 0x18008d6a5
ror rbx, 0xd
mov qword [rsi + 0x20], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x18008d6e0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x28], rdi
jne 0x18008d743
lea ecx, [rdi + 0x28]
call fcn.1800bbd1c
mov rbx, rax
test rax, rax
je 0x18008d743
lea r8d, [rdi + 0x28]
mov rdx, rsi
mov rcx, rax
call fcn.1800ac630
mov cl, dil
movabs rdx, 0xabdd53d5df95413f
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0x28
jb 0x18008d719
ror rbx, 0xd
mov qword [rsi + 0x28], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x18008d754
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x10], rdi
jne 0x18008d7b7
lea ecx, [rdi + 0xc]
call fcn.1800bbd1c
mov rbx, rax
test rax, rax
je 0x18008d7b7
lea r8d, [rdi + 0xc]
mov rdx, rsi
mov rcx, rax
call fcn.1800ac630
mov cl, dil
movabs rdx, 0x1b75bd1119a31f5d
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0xc
jb 0x18008d78d
ror rbx, 0xd
mov qword [rsi + 0x10], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x18008d7c8
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x10], rdi
jne 0x18008d82b
lea ecx, [rdi + 0xc]
call fcn.1800bbd1c
mov rbx, rax
test rax, rax
je 0x18008d82b
lea r8d, [rdi + 0xc]
mov rdx, rsi
mov rcx, rax
call fcn.1800ac630
mov cl, dil
movabs rdx, 0x37e3419fb3472d09
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0xc
jb 0x18008d801
ror rbx, 0xd
mov qword [rsi + 0x10], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x18008d83c
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x10], rdi
jne 0x18008d89f
lea ecx, [rdi + 0xd]
call fcn.1800bbd1c
mov rbx, rax
test rax, rax
je 0x18008d89f
lea r8d, [rdi + 0xd]
mov rdx, rsi
mov rcx, rax
call fcn.1800ac630
mov cl, dil
movabs rdx, 0xd385d54713e1dbf3
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0xd
jb 0x18008d875
ror rbx, 0xd
mov qword [rsi + 0x10], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
Function at 0x18008d8b0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x10], rdi
jne 0x18008d913
lea ecx, [rdi + 0xd]
call fcn.1800bbd1c
mov rbx, rax
test rax, rax
je 0x18008d913
lea r8d, [rdi + 0xd]
mov rdx, rsi
mov rcx, rax
call fcn.1800ac630
mov cl, dil
movabs rdx, 0x6bdffbd1bffb17b5
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0xd
jb 0x18008d8e9
ror rbx, 0xd
mov qword [rsi + 0x10], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x18008d924
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x10], rdi
jne 0x18008d987
lea ecx, [rdi + 0xf]
call fcn.1800bbd1c
mov rbx, rax
test rax, rax
je 0x18008d987
lea r8d, [rdi + 0xf]
mov rdx, rsi
mov rcx, rax
call fcn.1800ac630
mov cl, dil
movabs rdx, 0x579735abedf3c931
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0xf
jb 0x18008d95d
ror rbx, 0xd
mov qword [rsi + 0x10], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x18008e764
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 8], rdi
jne 0x18008e7c7
lea ecx, [rdi + 6]
call fcn.1800bbd1c
mov rbx, rax
test rax, rax
je 0x18008e7c7
lea r8d, [rdi + 6]
mov rdx, rsi
mov rcx, rax
call fcn.1800ac630
mov cl, dil
movabs rdx, 0xd5b16f5727c90d07
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 6
jb 0x18008e79d
ror rbx, 0xd
mov qword [rsi + 8], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x18008e7d8
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x18], rdi
jne 0x18008e83b
lea ecx, [rdi + 0x17]
call fcn.1800bbd1c
mov rbx, rax
test rax, rax
je 0x18008e83b
lea r8d, [rdi + 0x17]
mov rdx, rsi
mov rcx, rax
call fcn.1800ac630
mov cl, dil
movabs rdx, 0x3b850599eb6dd1bb
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0x17
jb 0x18008e811
ror rbx, 0xd
mov qword [rsi + 0x18], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x18008e84c
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x20], rdi
jne 0x18008e8af
lea ecx, [rdi + 0x1a]
call fcn.1800bbd1c
mov rbx, rax
test rax, rax
je 0x18008e8af
lea r8d, [rdi + 0x1a]
mov rdx, rsi
mov rcx, rax
call fcn.1800ac630
mov cl, dil
movabs rdx, 0xa7113981c121c599
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0x1a
jb 0x18008e885
ror rbx, 0xd
mov qword [rsi + 0x20], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
Function at 0x18008e8c0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x20], rdi
jne 0x18008e923
lea ecx, [rdi + 0x1a]
call fcn.1800bbd1c
mov rbx, rax
test rax, rax
je 0x18008e923
lea r8d, [rdi + 0x1a]
mov rdx, rsi
mov rcx, rax
call fcn.1800ac630
mov cl, dil
movabs rdx, 0x2363215df389f19b
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0x1a
jb 0x18008e8f9
ror rbx, 0xd
mov qword [rsi + 0x20], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x18008e934
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x20], rdi
jne 0x18008e997
lea ecx, [rdi + 0x1c]
call fcn.1800bbd1c
mov rbx, rax
test rax, rax
je 0x18008e997
lea r8d, [rdi + 0x1c]
mov rdx, rsi
mov rcx, rax
call fcn.1800ac630
mov cl, dil
movabs rdx, 0x534d870d1f9f5137
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0x1c
jb 0x18008e96d
ror rbx, 0xd
mov qword [rsi + 0x20], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x18008e9a8
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x20], rdi
jne 0x18008ea0b
lea ecx, [rdi + 0x1d]
call fcn.1800bbd1c
mov rbx, rax
test rax, rax
je 0x18008ea0b
lea r8d, [rdi + 0x1d]
mov rdx, rsi
mov rcx, rax
call fcn.1800ac630
mov cl, dil
movabs rdx, 0xc965bf35015d93b5
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0x1d
jb 0x18008e9e1
ror rbx, 0xd
mov qword [rsi + 0x20], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x18008ea1c
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x28], rdi
jne 0x18008ea7f
lea ecx, [rdi + 0x25]
call fcn.1800bbd1c
mov rbx, rax
test rax, rax
je 0x18008ea7f
lea r8d, [rdi + 0x25]
mov rdx, rsi
mov rcx, rax
call fcn.1800ac630
mov cl, dil
movabs rdx, 0xd9b1d17b7163b721
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0x25
jb 0x18008ea55
ror rbx, 0xd
mov qword [rsi + 0x28], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x18008ea90
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x28], rdi
jne 0x18008eaf3
lea ecx, [rdi + 0x27]
call fcn.1800bbd1c
mov rbx, rax
test rax, rax
je 0x18008eaf3
lea r8d, [rdi + 0x27]
mov rdx, rsi
mov rcx, rax
call fcn.1800ac630
mov cl, dil
movabs rdx, 0x8169c98f0b5dc5f7
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0x27
jb 0x18008eac9
ror rbx, 0xd
mov qword [rsi + 0x28], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
Function at 0x18008eb04
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x28], rdi
jne 0x18008eb67
lea ecx, [rdi + 0x27]
call fcn.1800bbd1c
mov rbx, rax
test rax, rax
je 0x18008eb67
lea r8d, [rdi + 0x27]
mov rdx, rsi
mov rcx, rax
call fcn.1800ac630
mov cl, dil
movabs rdx, 0x611df90529270ddd
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0x27
jb 0x18008eb3d
ror rbx, 0xd
mov qword [rsi + 0x28], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x18008eb78
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
xor edi, edi
mov rsi, rcx
cmp qword [rcx + 0x10], rdi
jne 0x18008ebdb
lea ecx, [rdi + 0xe]
call fcn.1800bbd1c
mov rbx, rax
test rax, rax
je 0x18008ebdb
lea r8d, [rdi + 0xe]
mov rdx, rsi
mov rcx, rax
call fcn.1800ac630
mov cl, dil
movabs rdx, 0x1da105513127d165
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rdi + rbx], dl
inc rdi
cmp rdi, 0xe
jb 0x18008ebb1
ror rbx, 0xd
mov qword [rsi + 0x10], rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x18009a960
Capabilities:
Hash data with crc32

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0x18
mov dword [rsp], 0xffffffff
mov qword [rsp + 8], 0
jmp 0x18009a98d
mov rax, qword [rsp + 8]
inc rax
mov qword [rsp + 8], rax
mov rax, qword [rsp + 0x28]
cmp qword [rsp + 8], rax
jae 0x18009a9d0
mov eax, dword [rsp]
shr eax, 8
mov rcx, qword [rsp + 8]
mov rdx, qword [rsp + 0x20]
add rdx, rcx
mov rcx, rdx
movzx ecx, byte [rcx]
mov edx, dword [rsp]
xor edx, ecx
mov ecx, edx
and ecx, 0xff
mov ecx, ecx
lea rdx, [0x180139de0]
xor eax, dword [rdx + rcx*4]
mov dword [rsp], eax
jmp 0x18009a980
mov eax, dword [rsp]
xor eax, 0xffffffff
add rsp, 0x18
ret
Function at 0x1800a4c20
Capabilities:
Generate random numbers using the delphi lcg
Hash data with crc32

Disassembly:
mov byte [rsp + 0x10], dl
mov qword [rsp + 8], rcx
mov eax, 4
imul rax, rax, 0
movsx ecx, byte [rsp + 0x10]
mov rdx, qword [rsp + 8]
mov eax, dword [rdx + rax]
xor eax, ecx
and eax, 0xff
cdqe
lea rcx, [0x18013a3f0]
mov edx, 4
imul rdx, rdx, 0
mov r8, qword [rsp + 8]
mov edx, dword [r8 + rdx]
shr edx, 8
mov eax, dword [rcx + rax*4]
xor eax, edx
mov ecx, 4
imul rcx, rcx, 0
mov rdx, qword [rsp + 8]
mov dword [rdx + rcx], eax
mov eax, 4
imul rax, rax, 1
mov ecx, 4
imul rcx, rcx, 0
mov rdx, qword [rsp + 8]
mov ecx, dword [rdx + rcx]
and ecx, 0xff
mov rdx, qword [rsp + 8]
add ecx, dword [rdx + rax]
mov eax, ecx
mov ecx, 4
imul rcx, rcx, 1
mov rdx, qword [rsp + 8]
mov dword [rdx + rcx], eax
mov eax, 4
imul rax, rax, 1
mov rcx, qword [rsp + 8]
imul eax, dword [rcx + rax], 0x8088405
inc eax
mov ecx, 4
imul rcx, rcx, 1
mov rdx, qword [rsp + 8]
mov dword [rdx + rcx], eax
mov eax, 4
imul rax, rax, 2
mov ecx, 4
imul rcx, rcx, 1
mov rdx, qword [rsp + 8]
mov ecx, dword [rdx + rcx]
shr ecx, 0x18
mov rdx, qword [rsp + 8]
mov eax, dword [rdx + rax]
xor eax, ecx
and eax, 0xff
mov eax, eax
lea rcx, [0x18013a3f0]
mov edx, 4
imul rdx, rdx, 2
mov r8, qword [rsp + 8]
mov edx, dword [r8 + rdx]
shr edx, 8
mov eax, dword [rcx + rax*4]
xor eax, edx
mov ecx, 4
imul rcx, rcx, 2
mov rdx, qword [rsp + 8]
mov dword [rdx + rcx], eax
ret

Function at 0x1800a5460
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0x38
mov rax, qword [rsp + 0x48]
imul rax, qword [rsp + 0x50]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x58]
movzx eax, byte [rax]
test eax, eax
je 0x1800a54d6
mov eax, dword [rsp + 0x20]
mov rcx, qword [rsp + 0x58]
mov r9, qword [rcx + 8]
mov r8d, eax
mov edx, 1
mov rcx, qword [rsp + 0x40]
call fcn.1800ea654
mov dword [rsp + 0x24], eax
mov eax, dword [rsp + 0x20]
cmp dword [rsp + 0x24], eax
je 0x1800a54c9
mov rax, qword [rsp + 0x58]
mov byte [rax + 0x10], 1
mov eax, dword [rsp + 0x24]
xor edx, edx
div qword [rsp + 0x48]
jmp 0x1800a554e
mov rax, qword [rsp + 0x58]
mov eax, dword [rax + 0x2c]
add eax, dword [rsp + 0x20]
mov rcx, qword [rsp + 0x58]
cmp eax, dword [rcx + 0x28]
jbe 0x1800a5502
mov rax, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x58]
mov ecx, dword [rcx + 0x2c]
mov eax, dword [rax + 0x28]
sub eax, ecx
mov dword [rsp + 0x20], eax
mov eax, dword [rsp + 0x20]
mov rcx, qword [rsp + 0x58]
mov ecx, dword [rcx + 0x2c]
mov rdx, qword [rsp + 0x58]
add rcx, qword [rdx + 0x20]
mov r8d, eax
mov rdx, rcx
mov rcx, qword [rsp + 0x40]
call fcn.1800ac630
mov eax, dword [rsp + 0x20]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x58]
mov eax, dword [rax + 0x2c]
add eax, dword [rsp + 0x28]
mov rcx, qword [rsp + 0x58]
mov dword [rcx + 0x2c], eax
mov eax, dword [rsp + 0x28]
xor edx, edx
div qword [rsp + 0x48]
add rsp, 0x38
ret