joyce8/EMBER2024-capa huggingface dataset:
Function at 0x18007d9b0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
push rsi
push rdi
push r14
sub rsp, 0x20
mov rax, qword [rcx + 0x30]
mov edi, edx
mov r14d, r9d
movsxd rdx, dword [rax + 0x10]
mov esi, r8d
mov rbp, rcx
mov eax, edx
imul eax, edi
movsxd rbx, eax
add rbx, qword [rcx + 0x38]
cmp r9d, 0xff
jge 0x18007daf6
mov qword [rsp + 0x40], r15
mov r15, rdx
nop word [rax + rax]
lea rdx, [rsp + 0x48]
mov r8d, edi
mov rcx, rbp
call fcn.18005bfe0
mov ecx, 0x100
dec esi
mov edx, dword [rax]
inc edi
mov r9d, edx
and edx, 0xff00ff
shr r9d, 8
and r9d, 0xff00ff
imul edx, r14d
shr edx, 8
and edx, 0xff00ff
imul r9d, r14d
shr r9d, 8
and r9d, 0xff00ff
mov eax, r9d
shr eax, 0x10
sub ecx, eax
mov eax, dword [rbx]
mov r8d, eax
shr eax, 8
and eax, 0xff00ff
and r8d, 0xff00ff
imul eax, ecx
imul r8d, ecx
mov ecx, 0x100
shr eax, 8
shr r8d, 8
and eax, 0xff00ff
and r8d, 0xff00ff
add r9d, eax
add r8d, edx
mov edx, 0x100
mov eax, r9d
shr eax, 8
and eax, 0xff00ff
sub edx, eax
mov eax, r9d
shl eax, 8
shl edx, 8
or edx, eax
mov eax, r8d
shr eax, 8
and eax, 0xff00ff
sub ecx, eax
mov eax, r9d
shl r9d, 8
or ecx, r8d
shr eax, 8
xor edx, ecx
and eax, 0xff00ff
mov ecx, 0x100
sub ecx, eax
and edx, 0xff00ff
shl ecx, 8
or ecx, r9d
xor edx, ecx
mov dword [rbx], edx
add rbx, r15
test esi, esi
jg 0x18007da00
mov r15, qword [rsp + 0x40]
jmp 0x18007dbd0
mov r14, rdx
nop dword [rax]
lea rdx, [rsp + 0x48]
mov r8d, edi
mov rcx, rbp
call fcn.18005bfe0
mov ecx, 0x100
dec esi
mov edx, dword [rax]
inc edi
mov r9d, edx
and edx, 0xff00ff
shr r9d, 8
and r9d, 0xff00ff
mov eax, r9d
shr eax, 0x10
sub ecx, eax
mov eax, dword [rbx]
mov r8d, eax
shr eax, 8
and eax, 0xff00ff
and r8d, 0xff00ff
imul eax, ecx
imul r8d, ecx
mov ecx, 0x100
shr eax, 8
shr r8d, 8
and eax, 0xff00ff
and r8d, 0xff00ff
add r9d, eax
add r8d, edx
mov edx, 0x100
mov eax, r9d
shr eax, 8
and eax, 0xff00ff
sub edx, eax
mov eax, r9d
shl eax, 8
shl edx, 8
or edx, eax
mov eax, r8d
shr eax, 8
and eax, 0xff00ff
sub ecx, eax
mov eax, r9d
shl r9d, 8
or ecx, r8d
shr eax, 8
xor edx, ecx
and eax, 0xff00ff
mov ecx, 0x100
sub ecx, eax
and edx, 0xff00ff
shl ecx, 8
or ecx, r9d
xor edx, ecx
mov dword [rbx], edx
add rbx, r14
test esi, esi
jg 0x18007db00
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
add rsp, 0x20
pop r14
pop rdi
pop rsi
ret
Function at 0x18007dbf0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
sub rsp, 0x20
mov rax, qword [rcx + 0x30]
mov ebp, r8d
mov esi, edx
movsxd r9, dword [rax + 0x10]
mov rdi, rcx
mov eax, r9d
mov r14, r9
imul eax, edx
movsxd rbx, eax
add rbx, qword [rcx + 0x38]
nop dword [rax]
nop word [rax + rax]
lea rdx, [rsp + 0x48]
mov r8d, esi
mov rcx, rdi
call fcn.18005bfe0
mov ecx, 0x100
dec ebp
mov edx, dword [rax]
inc esi
mov r9d, edx
and edx, 0xff00ff
shr r9d, 8
and r9d, 0xff00ff
mov eax, r9d
shr eax, 0x10
sub ecx, eax
mov eax, dword [rbx]
mov r8d, eax
shr eax, 8
and eax, 0xff00ff
and r8d, 0xff00ff
imul eax, ecx
imul r8d, ecx
mov ecx, 0x100
shr eax, 8
shr r8d, 8
and eax, 0xff00ff
and r8d, 0xff00ff
add r9d, eax
add r8d, edx
mov edx, 0x100
mov eax, r9d
shr eax, 8
and eax, 0xff00ff
sub edx, eax
mov eax, r9d
shl eax, 8
shl edx, 8
or edx, eax
mov eax, r8d
shr eax, 8
and eax, 0xff00ff
sub ecx, eax
mov eax, r9d
shl r9d, 8
or ecx, r8d
shr eax, 8
xor edx, ecx
and eax, 0xff00ff
mov ecx, 0x100
sub ecx, eax
and edx, 0xff00ff
shl ecx, 8
or ecx, r9d
xor edx, ecx
mov dword [rbx], edx
add rbx, r14
test ebp, ebp
jg 0x18007dc30
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x50]
add rsp, 0x20
pop r14
pop rdi
pop rsi
ret
Function at 0x18007e830
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x20
movsxd rsi, r8d
mov r14d, r9d
mov ebp, edx
mov rdi, rcx
cmp esi, dword [rcx + 0x80]
jle 0x18007e87e
mov qword [rcx + 0x80], rsi
mov rcx, qword [rcx + 0x78]
call fcn.1800a09c8
lea rcx, [rsi*4]
call fcn.1800a0a4c
mov qword [rdi + 0x78], rax
mov rbx, qword [rdi + 0x78]
mov r9d, esi
mov r8d, ebp
mov rdx, rbx
mov rcx, rdi
call fcn.1800838c0
mov rax, qword [rdi + 0x48]
mov r11d, dword [rdi + 0x58]
imul r11d, r14d
movsxd rcx, dword [rax + 0x10]
sar r11d, 8
mov eax, ecx
imul eax, ebp
movsxd r10, eax
add r10, qword [rdi + 0x70]
cmp r11d, 0xfe
jge 0x18007e9b4
mov rdi, rcx
nop dword [rax]
nop word [rax + rax]
mov r8d, dword [rbx]
mov edx, dword [r10]
mov ecx, 0x100
mov r9d, r8d
and r8d, 0xff00ff
dec esi
shr r9d, 8
lea rbx, [rbx + 4]
imul r8d, r11d
and r9d, 0xff00ff
shr r8d, 8
and r8d, 0xff00ff
imul r9d, r11d
shr r9d, 8
and r9d, 0xff00ff
mov eax, r9d
shr eax, 0x10
sub ecx, eax
mov eax, edx
shr edx, 8
and eax, 0xff00ff
and edx, 0xff00ff
imul eax, ecx
imul edx, ecx
mov ecx, 0x100
shr eax, 8
shr edx, 8
and eax, 0xff00ff
and edx, 0xff00ff
add r8d, eax
add r9d, edx
mov edx, 0x100
mov eax, r9d
shr eax, 8
and eax, 0xff00ff
sub edx, eax
mov eax, r9d
shl eax, 8
shl edx, 8
or edx, eax
mov eax, r8d
shr eax, 8
and eax, 0xff00ff
sub ecx, eax
mov eax, r9d
shl r9d, 8
or ecx, r8d
shr eax, 8
xor edx, ecx
and eax, 0xff00ff
mov ecx, 0x100
sub ecx, eax
and edx, 0xff00ff
shl ecx, 8
or ecx, r9d
xor edx, ecx
mov dword [r10], edx
add r10, rdi
test esi, esi
jg 0x18007e8d0
jmp 0x18007ea84
mov r11, rcx
nop word [rax + rax]
mov edx, dword [rbx]
mov ecx, 0x100
dec esi
mov r9d, edx
and edx, 0xff00ff
lea rbx, [rbx + 4]
shr r9d, 8
and r9d, 0xff00ff
mov eax, r9d
shr eax, 0x10
sub ecx, eax
mov eax, dword [r10]
mov r8d, eax
shr eax, 8
and eax, 0xff00ff
and r8d, 0xff00ff
imul eax, ecx
imul r8d, ecx
mov ecx, 0x100
shr eax, 8
shr r8d, 8
and eax, 0xff00ff
and r8d, 0xff00ff
add r9d, eax
add r8d, edx
mov edx, 0x100
mov eax, r9d
shr eax, 8
and eax, 0xff00ff
sub edx, eax
mov eax, r9d
shl eax, 8
shl edx, 8
or edx, eax
mov eax, r8d
shr eax, 8
and eax, 0xff00ff
sub ecx, eax
mov eax, r9d
shl r9d, 8
or ecx, r8d
shr eax, 8
xor edx, ecx
and eax, 0xff00ff
mov ecx, 0x100
sub ecx, eax
and edx, 0xff00ff
shl ecx, 8
or ecx, r9d
xor edx, ecx
mov dword [r10], edx
add r10, r11
test esi, esi
jg 0x18007e9c0
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
add rsp, 0x20
pop r14
ret
Function at 0x18007eaa0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
push rsi
push rdi
push r14
sub rsp, 0x20
movsxd rdi, r8d
mov r14d, r9d
mov ebp, edx
mov rsi, rcx
cmp edi, dword [rcx + 0x80]
jle 0x18007eae2
mov qword [rcx + 0x80], rdi
mov rcx, qword [rcx + 0x78]
call fcn.1800a09c8
lea rcx, [rdi + rdi*2]
call fcn.1800a0a4c
mov qword [rsi + 0x78], rax
mov rbx, qword [rsi + 0x78]
mov r9d, edi
mov r8d, ebp
mov rdx, rbx
mov rcx, rsi
call fcn.180083a00
mov rax, qword [rsi + 0x48]
mov r11d, dword [rsi + 0x58]
imul r11d, r14d
movsxd rcx, dword [rax + 0x10]
sar r11d, 8
mov eax, ecx
imul eax, ebp
movsxd r10, eax
add r10, qword [rsi + 0x70]
cmp r11d, 0xfe
jge 0x18007ec14
mov rsi, rcx
add rbx, 2
nop dword [rax + rax]
mov edx, dword [r10]
movzx r9d, byte [rbx - 1]
movzx r8d, byte [rbx]
or r9d, 0xff0000
shl r8d, 0x10
mov ecx, 0x100
dec edi
lea rbx, [rbx + 3]
imul r9d, r11d
shr r9d, 8
and r9d, 0xff00ff
mov eax, r9d
shr eax, 0x10
sub ecx, eax
movzx eax, byte [rbx - 5]
or r8d, eax
mov eax, edx
shr edx, 8
and eax, 0xff00ff
and edx, 0xff00ff
imul r8d, r11d
shr r8d, 8
and r8d, 0xff00ff
imul eax, ecx
imul edx, ecx
shr eax, 8
and eax, 0xff00ff
shr edx, 8
mov ecx, 0x100
add r8d, eax
and edx, 0xff00ff
add r9d, edx
mov edx, 0x100
mov eax, r9d
shr eax, 8
and eax, 0xff00ff
sub edx, eax
mov eax, r9d
shl eax, 8
shl edx, 8
or edx, eax
mov eax, r8d
shr eax, 8
and eax, 0xff00ff
sub ecx, eax
mov eax, r9d
shl r9d, 8
or ecx, r8d
shr eax, 8
xor edx, ecx
and eax, 0xff00ff
mov ecx, 0x100
sub ecx, eax
and edx, 0xff00ff
shl ecx, 8
or ecx, r9d
xor edx, ecx
mov dword [r10], edx
add r10, rsi
test edi, edi
jg 0x18007eb30
jmp 0x18007ec56
mov rdx, rcx
nop word [rax + rax]
movzx eax, word [rbx]
movzx ecx, byte [rbx + 2]
dec edi
shl ecx, 8
mov word [rsp + 0x50], ax
movzx eax, byte [rsp + 0x51]
or ecx, eax
movzx eax, byte [rsp + 0x50]
lea rbx, [rbx + 3]
shl ecx, 8
or ecx, eax
or ecx, 0xff000000
mov dword [r10], ecx
add r10, rdx
test edi, edi
jg 0x18007ec20
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x48]
add rsp, 0x20
pop r14
pop rdi
pop rsi
ret
Function at 0x18007ec70
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
push rsi
push rdi
push r14
sub rsp, 0x20
movsxd rdi, r8d
mov r14d, r9d
mov ebp, edx
mov rsi, rcx
cmp edi, dword [rcx + 0x80]
jle 0x18007ecb2
mov qword [rcx + 0x80], rdi
mov rcx, qword [rcx + 0x78]
call fcn.1800a09c8
lea rcx, [rdi + rdi*2]
call fcn.1800a0a4c
mov qword [rsi + 0x78], rax
mov rbx, qword [rsi + 0x78]
mov r9d, edi
mov r8d, ebp
mov rdx, rbx
mov rcx, rsi
call fcn.180083b50
mov rax, qword [rsi + 0x48]
mov r11d, dword [rsi + 0x58]
imul r11d, r14d
movsxd rcx, dword [rax + 0x10]
sar r11d, 8
mov eax, ecx
imul eax, ebp
movsxd r10, eax
add r10, qword [rsi + 0x70]
cmp r11d, 0xfe
jge 0x18007ede4
mov rsi, rcx
add rbx, 2
nop dword [rax + rax]
mov edx, dword [r10]
movzx r9d, byte [rbx - 1]
movzx r8d, byte [rbx]
or r9d, 0xff0000
shl r8d, 0x10
mov ecx, 0x100
dec edi
lea rbx, [rbx + 3]
imul r9d, r11d
shr r9d, 8
and r9d, 0xff00ff
mov eax, r9d
shr eax, 0x10
sub ecx, eax
movzx eax, byte [rbx - 5]
or r8d, eax
mov eax, edx
shr edx, 8
and eax, 0xff00ff
and edx, 0xff00ff
imul r8d, r11d
shr r8d, 8
and r8d, 0xff00ff
imul eax, ecx
imul edx, ecx
shr eax, 8
and eax, 0xff00ff
shr edx, 8
mov ecx, 0x100
add r8d, eax
and edx, 0xff00ff
add r9d, edx
mov edx, 0x100
mov eax, r9d
shr eax, 8
and eax, 0xff00ff
sub edx, eax
mov eax, r9d
shl eax, 8
shl edx, 8
or edx, eax
mov eax, r8d
shr eax, 8
and eax, 0xff00ff
sub ecx, eax
mov eax, r9d
shl r9d, 8
or ecx, r8d
shr eax, 8
xor edx, ecx
and eax, 0xff00ff
mov ecx, 0x100
sub ecx, eax
and edx, 0xff00ff
shl ecx, 8
or ecx, r9d
xor edx, ecx
mov dword [r10], edx
add r10, rsi
test edi, edi
jg 0x18007ed00
jmp 0x18007ee26
mov rdx, rcx
nop word [rax + rax]
movzx eax, word [rbx]
movzx ecx, byte [rbx + 2]
dec edi
shl ecx, 8
mov word [rsp + 0x50], ax
movzx eax, byte [rsp + 0x51]
or ecx, eax
movzx eax, byte [rsp + 0x50]
lea rbx, [rbx + 3]
shl ecx, 8
or ecx, eax
or ecx, 0xff000000
mov dword [r10], ecx
add r10, rdx
test edi, edi
jg 0x18007edf0
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x48]
add rsp, 0x20
pop r14
pop rdi
pop rsi
ret
Function at 0x18007ee40
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x20
movsxd rsi, r8d
mov r14d, r9d
mov ebp, edx
mov rdi, rcx
cmp esi, dword [rcx + 0x80]
jle 0x18007ee89
mov qword [rcx + 0x80], rsi
mov rcx, qword [rcx + 0x78]
call fcn.1800a09c8
mov rcx, rsi
call fcn.1800a0a4c
mov qword [rdi + 0x78], rax
mov rbx, qword [rdi + 0x78]
mov r9d, esi
mov r8d, ebp
mov rdx, rbx
mov rcx, rdi
call fcn.180083e40
mov rax, qword [rdi + 0x48]
mov r11d, dword [rdi + 0x58]
imul r11d, r14d
movsxd rcx, dword [rax + 0x10]
sar r11d, 8
mov eax, ecx
imul eax, ebp
movsxd r10, eax
add r10, qword [rdi + 0x70]
cmp r11d, 0xfe
jge 0x18007ef9f
mov rdi, rcx
nop
movzx eax, byte [rbx]
mov ecx, 0x100
mov edx, 0x100
mov r9d, eax
dec esi
lea rbx, [rbx + 1]
shl r9d, 0x10
or r9d, eax
imul r9d, r11d
shr r9d, 8
and r9d, 0xff00ff
mov eax, r9d
shr eax, 0x10
sub ecx, eax
mov eax, dword [r10]
mov r8d, eax
shr eax, 8
and eax, 0xff00ff
and r8d, 0xff00ff
imul eax, ecx
imul r8d, ecx
mov ecx, 0x100
shr eax, 8
shr r8d, 8
and eax, 0xff00ff
and r8d, 0xff00ff
add r8d, r9d
add r9d, eax
mov eax, r9d
shr eax, 8
and eax, 0xff00ff
sub edx, eax
mov eax, r9d
shl eax, 8
shl edx, 8
or edx, eax
mov eax, r8d
shr eax, 8
and eax, 0xff00ff
sub ecx, eax
mov eax, r9d
shl r9d, 8
or ecx, r8d
shr eax, 8
xor edx, ecx
and eax, 0xff00ff
mov ecx, 0x100
sub ecx, eax
and edx, 0xff00ff
shl ecx, 8
or ecx, r9d
xor edx, ecx
mov dword [r10], edx
add r10, rdi
test esi, esi
jg 0x18007eed0
jmp 0x18007f06b
mov r11, rcx
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rbx]
mov ecx, 0x100
mov edx, 0x100
mov r9d, eax
dec esi
lea rbx, [rbx + 1]
shl r9d, 0x10
or r9d, eax
mov eax, r9d
shr eax, 0x10
sub ecx, eax
mov eax, dword [r10]
mov r8d, eax
shr eax, 8
and eax, 0xff00ff
and r8d, 0xff00ff
imul eax, ecx
imul r8d, ecx
mov ecx, 0x100
shr eax, 8
shr r8d, 8
and eax, 0xff00ff
and r8d, 0xff00ff
add r8d, r9d
add r9d, eax
mov eax, r9d
shr eax, 8
and eax, 0xff00ff
sub edx, eax
mov eax, r9d
shl eax, 8
shl edx, 8
or edx, eax
mov eax, r8d
shr eax, 8
and eax, 0xff00ff
sub ecx, eax
mov eax, r9d
shl r9d, 8
or ecx, r8d
shr eax, 8
xor edx, ecx
and eax, 0xff00ff
mov ecx, 0x100
sub ecx, eax
and edx, 0xff00ff
shl ecx, 8
or ecx, r9d
xor edx, ecx
mov dword [r10], edx
add r10, r11
test esi, esi
jg 0x18007efb0
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
add rsp, 0x20
pop r14
ret
Function at 0x18007f090
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x20
movsxd rsi, r8d
mov r14d, r9d
mov ebp, edx
mov rdi, rcx
cmp esi, dword [rcx + 0x80]
jle 0x18007f0d9
mov qword [rcx + 0x80], rsi
mov rcx, qword [rcx + 0x78]
call fcn.1800a09c8
mov rcx, rsi
call fcn.1800a0a4c
mov qword [rdi + 0x78], rax
mov rbx, qword [rdi + 0x78]
mov r9d, esi
mov r8d, ebp
mov rdx, rbx
mov rcx, rdi
call fcn.18006bcd0
mov rax, qword [rdi + 0x48]
mov r11d, dword [rdi + 0x58]
imul r11d, r14d
movsxd rcx, dword [rax + 0x10]
sar r11d, 8
mov eax, ecx
imul eax, ebp
movsxd r10, eax
add r10, qword [rdi + 0x70]
cmp r11d, 0xfe
jge 0x18007f1ef
mov rdi, rcx
nop
movzx eax, byte [rbx]
mov ecx, 0x100
mov edx, 0x100
mov r9d, eax
dec esi
lea rbx, [rbx + 1]
shl r9d, 0x10
or r9d, eax
imul r9d, r11d
shr r9d, 8
and r9d, 0xff00ff
mov eax, r9d
shr eax, 0x10
sub ecx, eax
mov eax, dword [r10]
mov r8d, eax
shr eax, 8
and eax, 0xff00ff
and r8d, 0xff00ff
imul eax, ecx
imul r8d, ecx
mov ecx, 0x100
shr eax, 8
shr r8d, 8
and eax, 0xff00ff
and r8d, 0xff00ff
add r8d, r9d
add r9d, eax
mov eax, r9d
shr eax, 8
and eax, 0xff00ff
sub edx, eax
mov eax, r9d
shl eax, 8
shl edx, 8
or edx, eax
mov eax, r8d
shr eax, 8
and eax, 0xff00ff
sub ecx, eax
mov eax, r9d
shl r9d, 8
or ecx, r8d
shr eax, 8
xor edx, ecx
and eax, 0xff00ff
mov ecx, 0x100
sub ecx, eax
and edx, 0xff00ff
shl ecx, 8
or ecx, r9d
xor edx, ecx
mov dword [r10], edx
add r10, rdi
test esi, esi
jg 0x18007f120
jmp 0x18007f2bb
mov r11, rcx
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rbx]
mov ecx, 0x100
mov edx, 0x100
mov r9d, eax
dec esi
lea rbx, [rbx + 1]
shl r9d, 0x10
or r9d, eax
mov eax, r9d
shr eax, 0x10
sub ecx, eax
mov eax, dword [r10]
mov r8d, eax
shr eax, 8
and eax, 0xff00ff
and r8d, 0xff00ff
imul eax, ecx
imul r8d, ecx
mov ecx, 0x100
shr eax, 8
shr r8d, 8
and eax, 0xff00ff
and r8d, 0xff00ff
add r8d, r9d
add r9d, eax
mov eax, r9d
shr eax, 8
and eax, 0xff00ff
sub edx, eax
mov eax, r9d
shl eax, 8
shl edx, 8
or edx, eax
mov eax, r8d
shr eax, 8
and eax, 0xff00ff
sub ecx, eax
mov eax, r9d
shl r9d, 8
or ecx, r8d
shr eax, 8
xor edx, ecx
and eax, 0xff00ff
mov ecx, 0x100
sub ecx, eax
and edx, 0xff00ff
shl ecx, 8
or ecx, r9d
xor edx, ecx
mov dword [r10], edx
add r10, r11
test esi, esi
jg 0x18007f200
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
add rsp, 0x20
pop r14
ret
Function at 0x180080360
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
mov rax, qword [rcx]
mov rbx, rcx
mov r11d, edx
movsxd rcx, dword [rax + 0x10]
mov edi, dword [rbx + 0x10]
sub r11d, dword [rbx + 0x14]
imul edi, r9d
mov eax, ecx
sar edi, 8
mov esi, r8d
imul eax, edx
movsxd r10, eax
add r10, qword [rbx + 0x20]
cmp edi, 0xfe
jge 0x1800804b7
mov qword [rsp + 0x10], rbp
mov rbp, rcx
nop dword [rax]
mov rcx, qword [rbx + 8]
mov eax, r11d
dec esi
cdq
inc r11d
idiv dword [rcx + 0x14]
mov eax, dword [rcx + 0x10]
imul eax, edx
movsxd rcx, eax
add rcx, qword [rbx + 0x28]
mov edx, dword [rcx]
mov ecx, 0x100
mov r9d, edx
and edx, 0xff00ff
shr r9d, 8
and r9d, 0xff00ff
imul edx, edi
shr edx, 8
and edx, 0xff00ff
imul r9d, edi
shr r9d, 8
and r9d, 0xff00ff
mov eax, r9d
shr eax, 0x10
sub ecx, eax
mov eax, dword [r10]
mov r8d, eax
shr eax, 8
and eax, 0xff00ff
and r8d, 0xff00ff
imul eax, ecx
imul r8d, ecx
mov ecx, 0x100
shr eax, 8
shr r8d, 8
and eax, 0xff00ff
and r8d, 0xff00ff
add r9d, eax
add r8d, edx
mov edx, 0x100
mov eax, r9d
shr eax, 8
and eax, 0xff00ff
sub edx, eax
mov eax, r9d
shl eax, 8
shl edx, 8
or edx, eax
mov eax, r8d
shr eax, 8
and eax, 0xff00ff
sub ecx, eax
mov eax, r9d
shl r9d, 8
or ecx, r8d
shr eax, 8
xor edx, ecx
and eax, 0xff00ff
mov ecx, 0x100
sub ecx, eax
and edx, 0xff00ff
shl ecx, 8
or ecx, r9d
xor edx, ecx
mov dword [r10], edx
add r10, rbp
test esi, esi
jg 0x1800803b0
mov rbp, qword [rsp + 0x10]
mov rbx, qword [rsp + 0x18]
mov rsi, qword [rsp + 0x20]
pop rdi
ret
mov rdi, rcx
nop word [rax + rax]
mov rcx, qword [rbx + 8]
mov eax, r11d
dec esi
cdq
inc r11d
idiv dword [rcx + 0x14]
mov eax, dword [rcx + 0x10]
imul eax, edx
movsxd rcx, eax
add rcx, qword [rbx + 0x28]
mov edx, dword [rcx]
mov ecx, 0x100
mov r9d, edx
and edx, 0xff00ff
shr r9d, 8
and r9d, 0xff00ff
mov eax, r9d
shr eax, 0x10
sub ecx, eax
mov eax, dword [r10]
mov r8d, eax
shr eax, 8
and eax, 0xff00ff
and r8d, 0xff00ff
imul eax, ecx
imul r8d, ecx
mov ecx, 0x100
shr eax, 8
shr r8d, 8
and eax, 0xff00ff
and r8d, 0xff00ff
add r9d, eax
add r8d, edx
mov edx, 0x100
mov eax, r9d
shr eax, 8
and eax, 0xff00ff
sub edx, eax
mov eax, r9d
shl eax, 8
shl edx, 8
or edx, eax
mov eax, r8d
shr eax, 8
and eax, 0xff00ff
sub ecx, eax
mov eax, r9d
shl r9d, 8
or ecx, r8d
shr eax, 8
xor edx, ecx
and eax, 0xff00ff
mov ecx, 0x100
sub ecx, eax
and edx, 0xff00ff
shl ecx, 8
or ecx, r9d
xor edx, ecx
mov dword [r10], edx
add r10, rdi
test esi, esi
jg 0x1800804c0
mov rbx, qword [rsp + 0x18]
mov rsi, qword [rsp + 0x20]
pop rdi
ret
Function at 0x1800805b0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
mov rax, qword [rcx]
mov r11, rcx
mov edi, edx
movsxd rcx, dword [rax + 0x10]
sub edi, dword [r11 + 0x14]
mov esi, r8d
mov eax, ecx
imul eax, edx
movsxd rbx, eax
add rbx, qword [r11 + 0x20]
cmp dword [r11 + 0x10], 0xfe
jge 0x1800806fa
mov qword [rsp + 0x10], rbp
mov rbp, rcx
mov rcx, qword [r11 + 8]
mov eax, edi
dec esi
cdq
inc edi
idiv dword [rcx + 0x14]
mov eax, dword [rcx + 0x10]
imul eax, edx
mov edx, 0x100
movsxd rcx, eax
add rcx, qword [r11 + 0x28]
mov r8d, dword [rcx]
mov ecx, 0x100
mov r10d, r8d
and r8d, 0xff00ff
shr r10d, 8
and r10d, 0xff00ff
imul r8d, dword [r11 + 0x10]
imul r10d, dword [r11 + 0x10]
shr r8d, 8
and r8d, 0xff00ff
shr r10d, 8
and r10d, 0xff00ff
mov eax, r10d
shr eax, 0x10
sub ecx, eax
mov eax, dword [rbx]
mov r9d, eax
shr eax, 8
and eax, 0xff00ff
and r9d, 0xff00ff
imul eax, ecx
imul r9d, ecx
mov ecx, 0x100
shr eax, 8
shr r9d, 8
and eax, 0xff00ff
and r9d, 0xff00ff
add r10d, eax
add r9d, r8d
mov eax, r10d
shr eax, 8
and eax, 0xff00ff
sub edx, eax
mov eax, r10d
shl eax, 8
shl edx, 8
or edx, eax
mov eax, r9d
shr eax, 8
and eax, 0xff00ff
sub ecx, eax
mov eax, r10d
shl r10d, 8
or ecx, r9d
shr eax, 8
xor edx, ecx
and eax, 0xff00ff
mov ecx, 0x100
sub ecx, eax
and edx, 0xff00ff
shl ecx, 8
or ecx, r10d
xor edx, ecx
mov dword [rbx], edx
add rbx, rbp
test esi, esi
jg 0x1800805f0
mov rbp, qword [rsp + 0x10]
mov rbx, qword [rsp + 0x18]
mov rsi, qword [rsp + 0x20]
pop rdi
ret
mov r10, rcx
nop dword [rax]
mov rcx, qword [r11 + 8]
mov eax, edi
dec esi
cdq
inc edi
idiv dword [rcx + 0x14]
mov eax, dword [rcx + 0x10]
imul eax, edx
movsxd rcx, eax
add rcx, qword [r11 + 0x28]
mov edx, dword [rcx]
mov ecx, 0x100
mov r9d, edx
and edx, 0xff00ff
shr r9d, 8
and r9d, 0xff00ff
mov eax, r9d
shr eax, 0x10
sub ecx, eax
mov eax, dword [rbx]
mov r8d, eax
shr eax, 8
and eax, 0xff00ff
and r8d, 0xff00ff
imul eax, ecx
imul r8d, ecx
mov ecx, 0x100
shr eax, 8
shr r8d, 8
and eax, 0xff00ff
and r8d, 0xff00ff
add r9d, eax
add r8d, edx
mov edx, 0x100
mov eax, r9d
shr eax, 8
and eax, 0xff00ff
sub edx, eax
mov eax, r9d
shl eax, 8
shl edx, 8
or edx, eax
mov eax, r8d
shr eax, 8
and eax, 0xff00ff
sub ecx, eax
mov eax, r9d
shl r9d, 8
or ecx, r8d
shr eax, 8
xor edx, ecx
and eax, 0xff00ff
mov ecx, 0x100
sub ecx, eax
and edx, 0xff00ff
shl ecx, 8
or ecx, r9d
xor edx, ecx
mov dword [rbx], edx
add rbx, r10
test esi, esi
jg 0x180080700
mov rbx, qword [rsp + 0x18]
mov rsi, qword [rsp + 0x20]
pop rdi
ret
Function at 0x1800807f0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
push rsi
push rdi
mov rax, qword [rcx]
mov rdi, rcx
mov r10d, edx
movsxd rcx, dword [rax + 0x10]
mov ebp, dword [rdi + 0x10]
sub r10d, dword [rdi + 0x14]
imul ebp, r9d
mov eax, ecx
sar ebp, 8
mov esi, r8d
imul eax, edx
movsxd rbx, eax
add rbx, qword [rdi + 0x20]
cmp ebp, 0xfe
jge 0x180080950
mov qword [rsp + 0x20], r14
mov r14, rcx
nop word [rax + rax]
mov rcx, qword [rdi + 8]
mov r8d, dword [rbx]
mov eax, r10d
cdq
dec esi
inc r10d
idiv dword [rcx + 0x14]
mov eax, dword [rcx + 0x10]
imul eax, edx
mov edx, 0x100
movsxd rcx, eax
add rcx, qword [rdi + 0x28]
movzx r11d, byte [rcx + 1]
movzx r9d, byte [rcx + 2]
or r11d, 0xff0000
shl r9d, 0x10
imul r11d, ebp
shr r11d, 8
and r11d, 0xff00ff
mov eax, r11d
shr eax, 0x10
sub edx, eax
movzx eax, byte [rcx]
mov ecx, 0x100
or r9d, eax
mov eax, r8d
shr r8d, 8
and eax, 0xff00ff
and r8d, 0xff00ff
imul r9d, ebp
shr r9d, 8
and r9d, 0xff00ff
imul eax, edx
shr eax, 8
imul r8d, edx
and eax, 0xff00ff
shr r8d, 8
mov edx, 0x100
add r9d, eax
and r8d, 0xff00ff
add r11d, r8d
mov eax, r11d
shr eax, 8
and eax, 0xff00ff
sub edx, eax
mov eax, r11d
shl eax, 8
shl edx, 8
or edx, eax
mov eax, r9d
shr eax, 8
and eax, 0xff00ff
sub ecx, eax
mov eax, r11d
shl r11d, 8
or ecx, r9d
shr eax, 8
xor edx, ecx
and eax, 0xff00ff
mov ecx, 0x100
sub ecx, eax
and edx, 0xff00ff
shl ecx, 8
or ecx, r11d
xor edx, ecx
mov dword [rbx], edx
add rbx, r14
test esi, esi
jg 0x180080840
mov r14, qword [rsp + 0x20]
mov rbx, qword [rsp + 0x28]
mov rbp, qword [rsp + 0x30]
pop rdi
pop rsi
ret
mov r8, rcx
mov rcx, qword [rdi + 8]
mov eax, r10d
dec esi
cdq
inc r10d
idiv dword [rcx + 0x14]
mov eax, dword [rcx + 0x10]
imul eax, edx
movsxd rcx, eax
add rcx, qword [rdi + 0x28]
movzx eax, word [rcx]
movzx edx, byte [rcx + 2]
shl edx, 8
mov word [rsp + 0x18], ax
movzx eax, byte [rsp + 0x19]
or edx, eax
movzx eax, byte [rsp + 0x18]
shl edx, 8
or edx, eax
or edx, 0xff000000
mov dword [rbx], edx
add rbx, r8
test esi, esi
jg 0x180080953
mov rbx, qword [rsp + 0x28]
mov rbp, qword [rsp + 0x30]
pop rdi
pop rsi
ret