joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400045f0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rdx
mov rdi, rcx
mov ebx, dword [0x140d10e58]
call fcn.140006250
cdqe
lea rcx, [0x1400e1474]
cmp ebx, dword [rcx + rax*4]
je 0x1400046a1
lea r14, [rsi + 0x17]
lea r12, [0x1400e148c]
lea r13, [0x1400e1498]
xor eax, eax
nop word [rax + rax]
movsxd rbp, eax
movzx r15d, byte [r14 + rbp]
call fcn.1400062c0
movsxd rcx, eax
mov ebx, ebp
mov eax, ebp
xor edx, edx
lea r8, [0x1400e1480]
div dword [r8 + rcx*4]
movsxd rax, edx
xor r15b, byte [rsi + rax]
mov byte [rdi + rbp], r15b
call fcn.140006340
cdqe
mov ebp, dword [r12 + rax*4]
add ebp, ebx
call fcn.1400063c0
movsxd rcx, eax
mov eax, ebp
cmp ebp, dword [r13 + rcx*4]
jne 0x140004640
call fcn.140006450
cdqe
lea rcx, [0x1400e14a4]
mov eax, dword [rcx + rax*4]
mov dword [0x140d10e58], eax
imul eax, dword [0x140bd09b8], 0x5669de70
imul ecx, dword [0x140bd09bc], 0x4b94c58d
add eax, ecx
add eax, 0x1ab6edab
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret

Function at 0x1400046d0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rdx
mov rdi, rcx
mov ebx, dword [0x140d10e68]
call fcn.1400064d0
cdqe
lea rcx, [0x1400e14b0]
cmp ebx, dword [rcx + rax*4]
je 0x140004781
lea r14, [rsi + 0x12]
lea r12, [0x1400e14c8]
lea r13, [0x1400e14d4]
xor eax, eax
nop word [rax + rax]
movsxd rbp, eax
movzx r15d, byte [r14 + rbp]
call fcn.140006550
movsxd rcx, eax
mov ebx, ebp
mov eax, ebp
xor edx, edx
lea r8, [0x1400e14bc]
div dword [r8 + rcx*4]
movsxd rax, edx
xor r15b, byte [rsi + rax]
mov byte [rdi + rbp], r15b
call fcn.1400065d0
cdqe
mov ebp, dword [r12 + rax*4]
add ebp, ebx
call fcn.140006650
movsxd rcx, eax
mov eax, ebp
cmp ebp, dword [r13 + rcx*4]
jne 0x140004720
call fcn.1400066e0
cdqe
lea rcx, [0x1400e14e0]
mov eax, dword [rcx + rax*4]
mov dword [0x140d10e68], eax
mov eax, dword [0x140bd09c0]
mov ecx, dword [0x140bd09c4]
shrd ecx, eax, 9
mov eax, ecx
xor eax, 0x515bc1eb
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x140009cd0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rdx
mov rdi, rcx
mov ebx, dword [0x140d10ea0]
call fcn.14000ba40
cdqe
lea rcx, [0x14042c228]
cmp ebx, dword [rcx + rax*4]
je 0x140009d81
lea r14, [rsi + 0x16]
lea r12, [0x14042c240]
lea r13, [0x14042c24c]
xor eax, eax
nop word [rax + rax]
movsxd rbp, eax
movzx r15d, byte [r14 + rbp]
call fcn.14000bac0
movsxd rcx, eax
mov ebx, ebp
mov eax, ebp
xor edx, edx
lea r8, [0x14042c234]
div dword [r8 + rcx*4]
movsxd rax, edx
xor r15b, byte [rsi + rax]
mov byte [rdi + rbp], r15b
call fcn.14000bb50
cdqe
mov ebp, dword [r12 + rax*4]
add ebp, ebx
call fcn.14000bbe0
movsxd rcx, eax
mov eax, ebp
cmp ebp, dword [r13 + rcx*4]
jne 0x140009d20
call fcn.14000bc60
cdqe
lea rcx, [0x14042c258]
mov eax, dword [rcx + rax*4]
mov dword [0x140d10ea0], eax
imul eax, dword [0x140c39688], 0xd785f0a2
imul ecx, dword [0x140c3968c], 0x8f4ee627
add eax, ecx
add eax, 0x19752a53
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret

Function at 0x140009db0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rdx
mov rdi, rcx
mov ebx, dword [0x140d10ec4]
call fcn.14000bcf0
cdqe
lea rcx, [0x14042c264]
cmp ebx, dword [rcx + rax*4]
je 0x140009e61
lea r14, [rsi + 0x1e]
lea r12, [0x14042c27c]
lea r13, [0x14042c288]
xor eax, eax
nop word [rax + rax]
movsxd rbp, eax
movzx r15d, byte [r14 + rbp]
call fcn.14000bd70
movsxd rcx, eax
mov ebx, ebp
mov eax, ebp
xor edx, edx
lea r8, [0x14042c270]
div dword [r8 + rcx*4]
movsxd rax, edx
xor r15b, byte [rsi + rax]
mov byte [rdi + rbp], r15b
call fcn.14000bdf0
cdqe
mov ebp, dword [r12 + rax*4]
add ebp, ebx
call fcn.14000be60
movsxd rcx, eax
mov eax, ebp
cmp ebp, dword [r13 + rcx*4]
jne 0x140009e00
call fcn.14000bee0
cdqe
lea rcx, [0x14042c294]
mov eax, dword [rcx + rax*4]
mov dword [0x140d10ec4], eax
mov eax, dword [0x140c39690]
mov ecx, dword [0x140c39694]
shrd ecx, eax, 0x14
mov eax, ecx
xor eax, 0x96cccc6a
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x140009e90
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rdx
mov rdi, rcx
mov ebx, dword [0x140d10ed8]
call fcn.14000bf60
cdqe
lea rcx, [0x14042c2a0]
cmp ebx, dword [rcx + rax*4]
je 0x140009f41
lea r14, [rsi + 0x16]
lea r12, [0x14042c2b8]
lea r13, [0x14042c2c4]
xor eax, eax
nop word [rax + rax]
movsxd rbp, eax
movzx r15d, byte [r14 + rbp]
call fcn.14000bfe0
movsxd rcx, eax
mov ebx, ebp
mov eax, ebp
xor edx, edx
lea r8, [0x14042c2ac]
div dword [r8 + rcx*4]
movsxd rax, edx
xor r15b, byte [rsi + rax]
mov byte [rdi + rbp], r15b
call fcn.14000c070
cdqe
mov ebp, dword [r12 + rax*4]
add ebp, ebx
call fcn.14000c100
movsxd rcx, eax
mov eax, ebp
cmp ebp, dword [r13 + rcx*4]
jne 0x140009ee0
call fcn.14000c170
cdqe
lea rcx, [0x14042c2d0]
mov eax, dword [rcx + rax*4]
mov dword [0x140d10ed8], eax
mov eax, dword [0x140c39698]
mov ecx, dword [0x140c3969c]
shrd ecx, eax, 0x15
mov eax, ecx
xor eax, 0x6b31057f
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret

Function at 0x140009f70
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rdx
mov rdi, rcx
mov ebx, dword [0x140d10ef0]
call fcn.14000c1f0
cdqe
lea rcx, [0x14042c2dc]
cmp ebx, dword [rcx + rax*4]
je 0x14000a021
lea r14, [rsi + 0x12]
lea r12, [0x14042c2f4]
lea r13, [0x14042c300]
xor eax, eax
nop word [rax + rax]
movsxd rbp, eax
movzx r15d, byte [r14 + rbp]
call fcn.14000c260
movsxd rcx, eax
mov ebx, ebp
mov eax, ebp
xor edx, edx
lea r8, [0x14042c2e8]
div dword [r8 + rcx*4]
movsxd rax, edx
xor r15b, byte [rsi + rax]
mov byte [rdi + rbp], r15b
call fcn.14000c2e0
cdqe
mov ebp, dword [r12 + rax*4]
add ebp, ebx
call fcn.14000c370
movsxd rcx, eax
mov eax, ebp
cmp ebp, dword [r13 + rcx*4]
jne 0x140009fc0
call fcn.14000c3f0
cdqe
lea rcx, [0x14042c30c]
mov eax, dword [rcx + rax*4]
mov dword [0x140d10ef0], eax
mov eax, dword [0x140c396a0]
mov ecx, dword [0x140c396a4]
shrd ecx, eax, 8
mov eax, ecx
xor eax, 0x226ee27a
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x14000a050
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rdx
mov rdi, rcx
mov ebx, dword [0x140d10f08]
call fcn.14000c460
cdqe
lea rcx, [0x14042c318]
cmp ebx, dword [rcx + rax*4]
je 0x14000a101
lea r14, [rsi + 0x1a]
lea r12, [0x14042c330]
lea r13, [0x14042c33c]
xor eax, eax
nop word [rax + rax]
movsxd rbp, eax
movzx r15d, byte [r14 + rbp]
call fcn.14000c4e0
movsxd rcx, eax
mov ebx, ebp
mov eax, ebp
xor edx, edx
lea r8, [0x14042c324]
div dword [r8 + rcx*4]
movsxd rax, edx
xor r15b, byte [rsi + rax]
mov byte [rdi + rbp], r15b
call fcn.14000c550
cdqe
mov ebp, dword [r12 + rax*4]
add ebp, ebx
call fcn.14000c5d0
movsxd rcx, eax
mov eax, ebp
cmp ebp, dword [r13 + rcx*4]
jne 0x14000a0a0
call fcn.14000c650
cdqe
lea rcx, [0x14042c348]
mov eax, dword [rcx + rax*4]
mov dword [0x140d10f08], eax
mov eax, dword [0x140c396a8]
mov ecx, dword [0x140c396ac]
shrd ecx, eax, 5
mov eax, ecx
xor eax, 0x73fac4e8
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret

Function at 0x14000a130
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rdx
mov rdi, rcx
mov ebx, dword [0x140d10f1c]
call fcn.14000c6c0
cdqe
lea rcx, [0x14042c354]
cmp ebx, dword [rcx + rax*4]
je 0x14000a1e1
lea r14, [rsi + 0x1a]
lea r12, [0x14042c36c]
lea r13, [0x14042c378]
xor eax, eax
nop word [rax + rax]
movsxd rbp, eax
movzx r15d, byte [r14 + rbp]
call fcn.14000c730
movsxd rcx, eax
mov ebx, ebp
mov eax, ebp
xor edx, edx
lea r8, [0x14042c360]
div dword [r8 + rcx*4]
movsxd rax, edx
xor r15b, byte [rsi + rax]
mov byte [rdi + rbp], r15b
call fcn.14000c7a0
cdqe
mov ebp, dword [r12 + rax*4]
add ebp, ebx
call fcn.14000c820
movsxd rcx, eax
mov eax, ebp
cmp ebp, dword [r13 + rcx*4]
jne 0x14000a180
call fcn.14000c880
cdqe
lea rcx, [0x14042c384]
mov eax, dword [rcx + rax*4]
mov dword [0x140d10f1c], eax
mov eax, dword [0x140c396b0]
mov ecx, dword [0x140c396b4]
shrd ecx, eax, 0x15
mov eax, ecx
xor eax, 0x8bff3ae1
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x14000a210
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rdx
mov rdi, rcx
mov ebx, dword [0x140d10f38]
call fcn.14000c8f0
cdqe
lea rcx, [0x14042c390]
cmp ebx, dword [rcx + rax*4]
je 0x14000a2c1
lea r14, [rsi + 0x10]
lea r12, [0x14042c3a8]
lea r13, [0x14042c3b4]
xor eax, eax
nop word [rax + rax]
movsxd rbp, eax
movzx r15d, byte [r14 + rbp]
call fcn.14000c970
movsxd rcx, eax
mov ebx, ebp
mov eax, ebp
xor edx, edx
lea r8, [0x14042c39c]
div dword [r8 + rcx*4]
movsxd rax, edx
xor r15b, byte [rsi + rax]
mov byte [rdi + rbp], r15b
call fcn.14000c9f0
cdqe
mov ebp, dword [r12 + rax*4]
add ebp, ebx
call fcn.14000ca80
movsxd rcx, eax
mov eax, ebp
cmp ebp, dword [r13 + rcx*4]
jne 0x14000a260
call fcn.14000caf0
cdqe
lea rcx, [0x14042c3c0]
mov eax, dword [rcx + rax*4]
mov dword [0x140d10f38], eax
mov eax, dword [0x140c396b8]
mov ecx, dword [0x140c396bc]
shrd ecx, eax, 0xd
mov eax, ecx
xor eax, 0x5550c86d
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret

Function at 0x14000cef0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, r8
mov rdi, rdx
mov rbx, rcx
call fcn.14000d070
cdqe
lea rcx, [0x1405159c0]
cmp rsi, qword [rcx + rax*8]
jae 0x14000cf25
mov rcx, rdi
mov rdx, rbx
jmp 0x14000cfa4
call fcn.14000d0f0
cdqe
lea rcx, [0x1405159e0]
movzx ecx, byte [rcx + rax*8]
mov rax, rsi
shr rax, cl
lea r14, [0x140515a00]
movabs r15, 0xb739e2bd306def02
nop
mov r12, rax
call fcn.14000d170
cdqe
add r12, qword [r14 + rax*8]
mov rax, qword [rdi]
mov qword [rbx], rax
mov r13, rdi
add r13, 8
mov rbp, rbx
add rbp, 8
call fcn.14000d1f0
mov rax, qword [0x140c3a4a8]
mov rcx, qword [0x140c3a4b0]
shrd rcx, rax, 8
mov r8, rcx
xor r8, r15
mov rax, r12
mov rbx, rbp
mov rdi, r13
mov rcx, r13
mov rdx, rbp
cmp r12, r8
jne 0x14000cf50
mov rdi, rdx
mov rbx, rcx
call fcn.14000d270
cdqe
lea rcx, [0x140515a20]
mov r15, rsi
and r15, qword [rcx + rax*8]
call fcn.14000d300
movabs rax, 0x38ec98f608cc412d
imul rax, qword [0x140c3a4b8]
movabs rcx, 0x1a90875e6d7dd272
imul rcx, qword [0x140c3a4c0]
add rcx, rax
movabs rax, 0x26d19d96e44133f3
add rax, rcx
cmp r15, rax
je 0x14000d053
lea rsi, [0x140515a40]
movabs r14, 0xfdcf2610f08d599f
xor eax, eax
mov r12, rax
call fcn.14000d370
cdqe
mov r13, r15
add r13, qword [rsi + rax*8]
movzx eax, byte [rbx + r12]
mov byte [rdi + r12], al
call fcn.14000d3f0
mov rax, qword [0x140c3a4c8]
mov rcx, qword [0x140c3a4d0]
shrd rcx, rax, 0x3c
xor rcx, r14
inc r12
mov rax, r12
mov r15, r13
cmp r13, rcx
jne 0x14000d010
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x140015fd0
Capabilities:
Encode data using xor

Disassembly:
jmp 0x1400ddec0
mov rax, rcx
neg rcx
test rax, 7
je 0x1400ddedd
nop
mov dl, byte [rax]
inc rax
test dl, dl
je 0x1400ddf38
test al, 7
jne 0x1400dded0
movabs r8, 0x7efefefefefefeff
movabs r11, 0x8101010101010100
mov rdx, qword [rax]
mov r9, r8
add rax, 8
add r9, rdx
not rdx
xor rdx, r9
and rdx, r11
je 0x1400ddef1
mov rdx, qword [rax - 8]
test dl, dl
je 0x1400ddf62
test dh, dh
je 0x1400ddf5c
shr rdx, 0x10
test dl, dl
je 0x1400ddf56
test dh, dh
je 0x1400ddf50
shr rdx, 0x10
test dl, dl
je 0x1400ddf4a
test dh, dh
je 0x1400ddf44
shr edx, 0x10
test dl, dl
je 0x1400ddf3e
test dh, dh
jne 0x1400ddef1
lea rax, [rax + rcx - 1]
ret
lea rax, [rax + rcx - 2]
ret
lea rax, [rax + rcx - 3]
ret
lea rax, [rax + rcx - 4]
ret
lea rax, [rax + rcx - 5]
ret
lea rax, [rax + rcx - 6]
ret
lea rax, [rax + rcx - 7]
ret
lea rax, [rax + rcx - 8]
ret

Function at 0x14001b400
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rdx
mov rdi, rcx
mov ebx, dword [0x140d11000]
call fcn.140022970
cdqe
lea rcx, [0x140bac2a8]
cmp ebx, dword [rcx + rax*4]
je 0x14001b4b1
lea r14, [rsi + 0x1b]
lea r12, [0x140bac2c0]
lea r13, [0x140bac2cc]
xor eax, eax
nop word [rax + rax]
movsxd rbp, eax
movzx r15d, byte [r14 + rbp]
call fcn.1400229f0
movsxd rcx, eax
mov ebx, ebp
mov eax, ebp
xor edx, edx
lea r8, [0x140bac2b4]
div dword [r8 + rcx*4]
movsxd rax, edx
xor r15b, byte [rsi + rax]
mov byte [rdi + rbp], r15b
call fcn.140022a80
cdqe
mov ebp, dword [r12 + rax*4]
add ebp, ebx
call fcn.140022b00
movsxd rcx, eax
mov eax, ebp
cmp ebp, dword [r13 + rcx*4]
jne 0x14001b450
call fcn.140022b80
cdqe
lea rcx, [0x140bac2d8]
mov eax, dword [rcx + rax*4]
mov dword [0x140d11000], eax
imul eax, dword [0x140d0b628], 0xada08e4d
imul ecx, dword [0x140d0b62c], 0x230c6042
add eax, ecx
add eax, 0x1fb09fab
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret

Function at 0x14001b4e0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rdx
mov rdi, rcx
mov ebx, dword [0x140d11020]
call fcn.140022bf0
cdqe
lea rcx, [0x140bac2e4]
cmp ebx, dword [rcx + rax*4]
je 0x14001b591
lea r14, [rsi + 0x19]
lea r12, [0x140bac2fc]
lea r13, [0x140bac308]
xor eax, eax
nop word [rax + rax]
movsxd rbp, eax
movzx r15d, byte [r14 + rbp]
call fcn.140022c70
movsxd rcx, eax
mov ebx, ebp
mov eax, ebp
xor edx, edx
lea r8, [0x140bac2f0]
div dword [r8 + rcx*4]
movsxd rax, edx
xor r15b, byte [rsi + rax]
mov byte [rdi + rbp], r15b
call fcn.140022cf0
cdqe
mov ebp, dword [r12 + rax*4]
add ebp, ebx
call fcn.140022d70
movsxd rcx, eax
mov eax, ebp
cmp ebp, dword [r13 + rcx*4]
jne 0x14001b530
call fcn.140022de0
cdqe
lea rcx, [0x140bac314]
mov eax, dword [rcx + rax*4]
mov dword [0x140d11020], eax
imul eax, dword [0x140d0b630], 0x2640cdd8
imul ecx, dword [0x140d0b634], 0x7164e203
add eax, ecx
add eax, 0x753ddefd
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x14001b780
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rdx
mov rdi, rcx
mov ebx, dword [0x140d11068]
call fcn.140023370
cdqe
lea rcx, [0x140bac398]
cmp ebx, dword [rcx + rax*4]
je 0x14001b831
lea r14, [rsi + 0x17]
lea r12, [0x140bac3b0]
lea r13, [0x140bac3bc]
xor eax, eax
nop word [rax + rax]
movsxd rbp, eax
movzx r15d, byte [r14 + rbp]
call fcn.1400233f0
movsxd rcx, eax
mov ebx, ebp
mov eax, ebp
xor edx, edx
lea r8, [0x140bac3a4]
div dword [r8 + rcx*4]
movsxd rax, edx
xor r15b, byte [rsi + rax]
mov byte [rdi + rbp], r15b
call fcn.140023460
cdqe
mov ebp, dword [r12 + rax*4]
add ebp, ebx
call fcn.1400234f0
movsxd rcx, eax
mov eax, ebp
cmp ebp, dword [r13 + rcx*4]
jne 0x14001b7d0
call fcn.140023570
cdqe
lea rcx, [0x140bac3c8]
mov eax, dword [rcx + rax*4]
mov dword [0x140d11068], eax
mov eax, dword [0x140d0b648]
mov ecx, dword [0x140d0b64c]
shrd ecx, eax, 0xe
mov eax, ecx
xor eax, 0x13248c7f
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret

Function at 0x14001b940
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rdx
mov rdi, rcx
mov ebx, dword [0x140d11098]
call fcn.140023850
cdqe
lea rcx, [0x140bac410]
cmp ebx, dword [rcx + rax*4]
je 0x14001b9f1
lea r14, [rsi + 0x17]
lea r12, [0x140bac428]
lea r13, [0x140bac434]
xor eax, eax
nop word [rax + rax]
movsxd rbp, eax
movzx r15d, byte [r14 + rbp]
call fcn.1400238c0
movsxd rcx, eax
mov ebx, ebp
mov eax, ebp
xor edx, edx
lea r8, [0x140bac41c]
div dword [r8 + rcx*4]
movsxd rax, edx
xor r15b, byte [rsi + rax]
mov byte [rdi + rbp], r15b
call fcn.140023950
cdqe
mov ebp, dword [r12 + rax*4]
add ebp, ebx
call fcn.1400239d0
movsxd rcx, eax
mov eax, ebp
cmp ebp, dword [r13 + rcx*4]
jne 0x14001b990
call fcn.140023a60
cdqe
lea rcx, [0x140bac440]
mov eax, dword [rcx + rax*4]
mov dword [0x140d11098], eax
mov eax, dword [0x140d0b658]
mov ecx, dword [0x140d0b65c]
shrd ecx, eax, 0xf
mov eax, ecx
xor eax, 0x4261e73e
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x14001ba20
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rdx
mov rdi, rcx
mov ebx, dword [0x140d110b4]
call fcn.140023ae0
cdqe
lea rcx, [0x140bac44c]
cmp ebx, dword [rcx + rax*4]
je 0x14001bad1
lea r14, [rsi + 0x14]
lea r12, [0x140bac464]
lea r13, [0x140bac470]
xor eax, eax
nop word [rax + rax]
movsxd rbp, eax
movzx r15d, byte [r14 + rbp]
call fcn.140023b60
movsxd rcx, eax
mov ebx, ebp
mov eax, ebp
xor edx, edx
lea r8, [0x140bac458]
div dword [r8 + rcx*4]
movsxd rax, edx
xor r15b, byte [rsi + rax]
mov byte [rdi + rbp], r15b
call fcn.140023bf0
cdqe
mov ebp, dword [r12 + rax*4]
add ebp, ebx
call fcn.140023c70
movsxd rcx, eax
mov eax, ebp
cmp ebp, dword [r13 + rcx*4]
jne 0x14001ba70
call fcn.140023ce0
cdqe
lea rcx, [0x140bac47c]
mov eax, dword [rcx + rax*4]
mov dword [0x140d110b4], eax
mov eax, dword [0x140d0b660]
mov ecx, dword [0x140d0b664]
shrd ecx, eax, 0xd
mov eax, ecx
xor eax, 0x95ffab32
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret

Function at 0x14001bb00
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rdx
mov rdi, rcx
mov ebx, dword [0x140d110d0]
call fcn.140023d50
cdqe
lea rcx, [0x140bac488]
cmp ebx, dword [rcx + rax*4]
je 0x14001bbb1
lea r14, [rsi + 0x1a]
lea r12, [0x140bac4a0]
lea r13, [0x140bac4ac]
xor eax, eax
nop word [rax + rax]
movsxd rbp, eax
movzx r15d, byte [r14 + rbp]
call fcn.140023dc0
movsxd rcx, eax
mov ebx, ebp
mov eax, ebp
xor edx, edx
lea r8, [0x140bac494]
div dword [r8 + rcx*4]
movsxd rax, edx
xor r15b, byte [rsi + rax]
mov byte [rdi + rbp], r15b
call fcn.140023e30
cdqe
mov ebp, dword [r12 + rax*4]
add ebp, ebx
call fcn.140023ea0
movsxd rcx, eax
mov eax, ebp
cmp ebp, dword [r13 + rcx*4]
jne 0x14001bb50
call fcn.140023f10
cdqe
lea rcx, [0x140bac4b8]
mov eax, dword [rcx + rax*4]
mov dword [0x140d110d0], eax
mov eax, dword [0x140d0b668]
mov ecx, dword [0x140d0b66c]
shrd ecx, eax, 0x15
mov eax, ecx
xor eax, 0xf5175fc0
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x14001bda0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rdx
mov rdi, rcx
mov ebx, dword [0x140d11110]
call fcn.140024490
cdqe
lea rcx, [0x140bac53c]
cmp ebx, dword [rcx + rax*4]
je 0x14001be51
lea r14, [rsi + 0x1f]
lea r12, [0x140bac554]
lea r13, [0x140bac560]
xor eax, eax
nop word [rax + rax]
movsxd rbp, eax
movzx r15d, byte [r14 + rbp]
call fcn.140024510
movsxd rcx, eax
mov ebx, ebp
mov eax, ebp
xor edx, edx
lea r8, [0x140bac548]
div dword [r8 + rcx*4]
movsxd rax, edx
xor r15b, byte [rsi + rax]
mov byte [rdi + rbp], r15b
call fcn.1400245a0
cdqe
mov ebp, dword [r12 + rax*4]
add ebp, ebx
call fcn.140024630
movsxd rcx, eax
mov eax, ebp
cmp ebp, dword [r13 + rcx*4]
jne 0x14001bdf0
call fcn.1400246b0
cdqe
lea rcx, [0x140bac56c]
mov eax, dword [rcx + rax*4]
mov dword [0x140d11110], eax
imul eax, dword [0x140d0b680], 0x446334be
imul ecx, dword [0x140d0b684], 0x976dd58c
add eax, ecx
add eax, 0xbda5cd1
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret

Function at 0x14001be80
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rdx
mov rdi, rcx
mov ebx, dword [0x140d11124]
call fcn.140024740
cdqe
lea rcx, [0x140bac578]
cmp ebx, dword [rcx + rax*4]
je 0x14001bf31
lea r14, [rsi + 0x1f]
lea r12, [0x140bac590]
lea r13, [0x140bac59c]
xor eax, eax
nop word [rax + rax]
movsxd rbp, eax
movzx r15d, byte [r14 + rbp]
call fcn.1400247d0
movsxd rcx, eax
mov ebx, ebp
mov eax, ebp
xor edx, edx
lea r8, [0x140bac584]
div dword [r8 + rcx*4]
movsxd rax, edx
xor r15b, byte [rsi + rax]
mov byte [rdi + rbp], r15b
call fcn.140024850
cdqe
mov ebp, dword [r12 + rax*4]
add ebp, ebx
call fcn.1400248c0
movsxd rcx, eax
mov eax, ebp
cmp ebp, dword [r13 + rcx*4]
jne 0x14001bed0
call fcn.140024940
cdqe
lea rcx, [0x140bac5a8]
mov eax, dword [rcx + rax*4]
mov dword [0x140d11124], eax
mov eax, dword [0x140d0b688]
mov ecx, dword [0x140d0b68c]
shrd ecx, eax, 0x15
mov eax, ecx
xor eax, 0x5412b567
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x14001bf60
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rdx
mov rdi, rcx
mov ebx, dword [0x140d11134]
call fcn.1400249c0
cdqe
lea rcx, [0x140bac5b4]
cmp ebx, dword [rcx + rax*4]
je 0x14001c011
lea r14, [rsi + 0x14]
lea r12, [0x140bac5cc]
lea r13, [0x140bac5d8]
xor eax, eax
nop word [rax + rax]
movsxd rbp, eax
movzx r15d, byte [r14 + rbp]
call fcn.140024a50
movsxd rcx, eax
mov ebx, ebp
mov eax, ebp
xor edx, edx
lea r8, [0x140bac5c0]
div dword [r8 + rcx*4]
movsxd rax, edx
xor r15b, byte [rsi + rax]
mov byte [rdi + rbp], r15b
call fcn.140024ac0
cdqe
mov ebp, dword [r12 + rax*4]
add ebp, ebx
call fcn.140024b40
movsxd rcx, eax
mov eax, ebp
cmp ebp, dword [r13 + rcx*4]
jne 0x14001bfb0
call fcn.140024bc0
cdqe
lea rcx, [0x140bac5e4]
mov eax, dword [rcx + rax*4]
mov dword [0x140d11134], eax
mov eax, dword [0x140d0b690]
mov ecx, dword [0x140d0b694]
shrd ecx, eax, 5
mov eax, ecx
xor eax, 0x542bdf22
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret

Function at 0x14001c040
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rdx
mov rdi, rcx
mov ebx, dword [0x140d11150]
call fcn.140024c50
cdqe
lea rcx, [0x140bac5f0]
cmp ebx, dword [rcx + rax*4]
je 0x14001c0f1
lea r14, [rsi + 0x18]
lea r12, [0x140bac608]
lea r13, [0x140bac614]
xor eax, eax
nop word [rax + rax]
movsxd rbp, eax
movzx r15d, byte [r14 + rbp]
call fcn.140024ce0
movsxd rcx, eax
mov ebx, ebp
mov eax, ebp
xor edx, edx
lea r8, [0x140bac5fc]
div dword [r8 + rcx*4]
movsxd rax, edx
xor r15b, byte [rsi + rax]
mov byte [rdi + rbp], r15b
call fcn.140024d60
cdqe
mov ebp, dword [r12 + rax*4]
add ebp, ebx
call fcn.140024df0
movsxd rcx, eax
mov eax, ebp
cmp ebp, dword [r13 + rcx*4]
jne 0x14001c090
call fcn.140024e70
cdqe
lea rcx, [0x140bac620]
mov eax, dword [rcx + rax*4]
mov dword [0x140d11150], eax
imul eax, dword [0x140d0b698], 0x82f0b847
imul ecx, dword [0x140d0b69c], 0xe95a0139
add eax, ecx
add eax, 0xccbbc6ae
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret