joyce8/EMBER2024-capa huggingface dataset:
Function at 0x180081d74
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x30
mov rdi, r8
mov r14, rdx
mov r13, rcx
mov rbx, qword [0x1800cdb78]
mov rsi, qword [rbx + 0x5c38]
mov r12, qword [rbx + 0x5c40]
and qword [rbx + 0x5c40], 0
and qword [rbx + 0x5c38], 0
mov r15, qword [rbx + 0x3eb0]
test rdi, rdi
jne 0x180081dd2
xor edx, edx
mov rcx, r14
call fcn.18007ef44
mov rdi, rax
lea rax, [r13 + 4]
test r13, r13
je 0x180081e00
movss xmm1, dword [rbx + 0x5c48]
addss xmm1, dword [rbx + 0x3820]
movss xmm0, dword [rax]
addss xmm1, dword [0x180005f00]
comiss xmm0, xmm1
jbe 0x180081e00
mov cl, 1
jmp 0x180081e07
xor cl, cl
test r13, r13
je 0x180081e64
mov eax, dword [rax]
mov dword [rbx + 0x5c48], eax
test cl, cl
je 0x180081e64
mov word [rbp + 0x40], 0x393f
lea r9, [rbp + 0x40]
mov byte [rbp + 0x42], 0x34
xor r8d, r8d
mov eax, 0x1f7047dd
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x39
mov al, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9], al
inc r9
cmp r8d, 3
jl 0x180081e24
lea rcx, [rbp + 0x40]
call fcn.180081ff0
mov byte [rbx + 0x5c4c], 1
test rsi, rsi
je 0x180081e85
or r8, 0xffffffffffffffff
inc r8
cmp byte [rsi + r8], 0
jne 0x180081e6d
add r8, rsi
mov rdx, rsi
mov rcx, r13
call fcn.180081d74
mov ecx, dword [rbx + 0x5c50]
mov eax, dword [r15 + 0x180]
cmp ecx, eax
jle 0x180081e9e
mov dword [rbx + 0x5c50], eax
mov ecx, eax
mov r15d, dword [r15 + 0x180]
sub r15d, ecx
mov r8, rdi
mov edx, 0xa
sub r8, r14
mov rcx, r14
call fcn.1800c1648
test rax, rax
mov rsi, rdi
cmovne rsi, rax
cmp r14, rsi
jne 0x180081ed3
cmp rsi, rdi
je 0x180081fba
mov r9d, esi
mov dword [rbp + 0x50], 0x10471917
sub r9d, r14d
mov dword [rbp + 0x54], 0x394b1d18
cmp byte [rbx + 0x5c4c], 0
lea eax, [r15*4]
mov r10d, 1
lea r11, [rbp + 0x50]
cmovne r10d, eax
xor r8d, r8d
mov eax, 0x1f7047dd
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x39
mov al, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r11], al
inc r11
cmp r8d, 8
jl 0x180081f07
lea r8, [0x180005e40]
mov qword [rsp + 0x20], r14
mov edx, r10d
lea rcx, [rbp + 0x50]
call fcn.180081ff0
mov byte [rbx + 0x5c4c], 0
cmp byte [rsi], 0xa
jne 0x180081fac
mov word [rbp + 0x48], 0x393f
lea r9, [rbp + 0x48]
mov byte [rbp + 0x4a], 0x34
xor r8d, r8d
mov eax, 0x1f7047dd
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x39
mov al, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9], al
inc r9
cmp r8d, 3
jl 0x180081f6c
lea rcx, [rbp + 0x48]
call fcn.180081ff0
mov byte [rbx + 0x5c4c], 1
cmp rsi, rdi
je 0x180081fba
lea r14, [rsi + 1]
jmp 0x180081ea8
test r12, r12
je 0x180081fd8
or rdi, 0xffffffffffffffff
inc rdi
cmp byte [r12 + rdi], 0
jne 0x180081fc3
add rdi, r12
mov r14, r12
jmp 0x180081d94
mov rbx, qword [rsp + 0x88]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
Function at 0x18008534c
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r14
mov rbp, rsp
sub rsp, 0x40
mov rbx, qword [0x1800cdb78]
movss xmm0, dword [0x180005ecc]
mov rdi, rbx
comiss xmm0, dword [rbx + 0x4a18]
ja 0x1800855cd
cmp qword [rbx + 0x4a10], 0
mov esi, 0x1f7047dd
jne 0x180085401
movdqa xmm0, xmmword [0x180008ad0]
lea r9, [rbp - 0x20]
movdqu xmmword [rbp - 0x20], xmm0
mov dword [rbp - 0x10], 0x4530302b
xor r8d, r8d
mov eax, esi
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x39
mov al, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9], al
inc r9
cmp r8d, 0x14
jl 0x1800853aa
xor r8d, r8d
lea rcx, [rbp - 0x20]
xor edx, edx
call fcn.180080708
mov edx, eax
lea rcx, [rbx + 0x3e90]
call fcn.180080288
mov qword [rbx + 0x4a10], rax
mov rbx, qword [0x1800cdb78]
mov rax, qword [rbx + 0x4888]
lea rdx, [rbp + 0x20]
mov dword [rbp - 0x18], 0x7f7fffff
mov dword [rbp - 0x14], 0x7f7fffff
mov rcx, qword [rax]
movss xmm2, dword [rcx + 0xc]
movss xmm1, dword [rcx + 0x10]
or dword [rbx + 0x4788], 0x10
and qword [rbx + 0x47d8], 0
and qword [rbx + 0x47e0], 0
mulss xmm1, dword [0x180005ed4]
mulss xmm2, dword [0x180005ed4]
movss dword [rbp - 0x1c], xmm1
movss dword [rbp - 0x20], xmm2
movups xmm1, xmmword [rbp - 0x20]
movdqu xmmword [rbx + 0x47c4], xmm1
mov rax, qword [0x1800cdb78]
movss xmm1, dword [rcx + 0x10]
movss xmm2, dword [rcx + 0xc]
mulss xmm1, dword [0x180005eec]
mulss xmm2, dword [0x180005eec]
addss xmm1, dword [rcx + 8]
addss xmm2, dword [rcx + 4]
or dword [rax + 0x4788], 1
mov ecx, 0x3f000000
mov dword [rax + 0x47a0], ecx
movss dword [rax + 0x479c], xmm1
mov dword [rax + 0x47a4], ecx
mov ecx, 2
movss dword [rax + 0x4798], xmm2
mov dword [rax + 0x478c], 1
movss xmm0, dword [rdi + 0x37e8]
movss xmm1, dword [rdi + 0x37ec]
addss xmm0, xmm0
addss xmm1, xmm1
movss dword [rbp + 0x20], xmm0
movss dword [rbp + 0x24], xmm1
call fcn.1800865dc
movdqa xmm0, xmmword [0x180008ad0]
lea r9, [rbp - 0x20]
movdqu xmmword [rbp - 0x20], xmm0
mov dword [rbp - 0x10], 0x4530302b
xor r8d, r8d
mov eax, esi
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x39
mov al, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9], al
inc r9
cmp r8d, 0x14
jl 0x180085508
xor edx, edx
lea rcx, [rbp - 0x20]
mov r8d, 0xc1347
call fcn.180079958
mov eax, dword [rdi + 0x3e60]
sub eax, 1
movsxd rsi, eax
js 0x1800855be
mov rax, qword [rdi + 0x3e68]
mov rbx, qword [rax + rsi*8]
cmp byte [rbx + 0xaf], 0
je 0x1800855b8
cmp rbx, qword [rbx + 0x370]
jne 0x1800855b8
test dword [rbx + 0xc], 0x80000
jne 0x1800855b8
mov r14, qword [rbx]
xor edx, edx
mov rcx, r14
call fcn.18007ef44
cmp r14, rax
jne 0x180085597
mov rcx, rbx
call fcn.18007f778
mov r14, rax
and dword [rbp + 0x20], 0
lea r9, [rbp + 0x20]
and dword [rbp + 0x24], 0
mov rcx, r14
cmp qword [rdi + 0x4a00], rbx
sete dl
xor r8d, r8d
call fcn.1800ac744
sub rsi, 1
jns 0x180085554
call fcn.18007dc54
mov ecx, 1
call fcn.1800861fc
mov rbx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
add rsp, 0x40
pop r14
pop rdi
pop rbp
ret
Function at 0x180088958
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
push rdi
sub rsp, 0x20
mov rax, qword [0x1800cdb78]
mov rbx, rcx
and dword [rax + 0x5b84], 0
test rcx, rcx
je 0x180088a05
and qword [rsp + 0x38], 0
lea rcx, [rsp + 0x38]
call fcn.180088a10
mov rdi, rax
mov word [rsp + 0x30], 0x4745
xor r8d, r8d
mov byte [rsp + 0x32], 0x34
lea r9, [rsp + 0x30]
mov ecx, r8d
mov eax, 0x1f7047dd
mul r8d
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 5
movsx eax, cl
imul ecx, eax, 0x39
mov al, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9], al
inc r9
cmp r8d, 3
jl 0x1800889a3
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1800c1258
mov rbx, rax
test rax, rax
je 0x180088a05
mov r8, qword [rsp + 0x38]
mov r9, rax
mov edx, 1
mov rcx, rdi
call fcn.1800c14fc
mov rcx, rbx
call fcn.1800c1068
mov rbx, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
ret
Function at 0x180097e48
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
push rbp
mov rbp, rsp
sub rsp, 0x20
mov edi, edx
mov rbx, rcx
call fcn.18009a648
xor r8d, r8d
test eax, eax
je 0x180097e74
neg edi
sbb eax, eax
jmp 0x180098033
mov dword [rbp + 0x20], 0x53574746
lea r10, [rbp + 0x20]
mov byte [rbp + 0x24], 0x36
mov r9d, r8d
mov r11d, 0x1f7047dd
mov eax, r11d
mul r9d
mov eax, r9d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x39
mov al, r9b
inc r9d
sub al, cl
add al, 0x32
xor byte [r10], al
inc r10
cmp r9d, 5
jl 0x180097e8c
movzx ecx, byte [rbx]
movsx eax, byte [rbp + 0x20]
cmp ecx, eax
jne 0x180098030
mov dword [rbp + 0x20], 0x53574746
lea r10, [rbp + 0x20]
mov byte [rbp + 0x24], 0x36
mov r9d, r8d
mov eax, r11d
mul r9d
mov eax, r9d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x39
mov al, r9b
inc r9d
sub al, cl
add al, 0x32
xor byte [r10], al
inc r10
cmp r9d, 5
jl 0x180097edb
movzx ecx, byte [rbx + 1]
movsx eax, byte [rbp + 0x21]
cmp ecx, eax
jne 0x180098030
mov dword [rbp + 0x20], 0x53574746
lea r10, [rbp + 0x20]
mov byte [rbp + 0x24], 0x36
mov r9d, r8d
mov eax, r11d
mul r9d
mov eax, r9d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x39
mov al, r9b
inc r9d
sub al, cl
add al, 0x32
xor byte [r10], al
inc r10
cmp r9d, 5
jl 0x180097f2b
movzx ecx, byte [rbx + 2]
movsx eax, byte [rbp + 0x22]
cmp ecx, eax
jne 0x180098030
mov dword [rbp + 0x20], 0x53574746
lea r9, [rbp + 0x20]
mov byte [rbp + 0x24], 0x36
mov eax, r11d
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x39
mov al, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9], al
inc r9
cmp r8d, 5
jl 0x180097f78
movzx ecx, byte [rbx + 3]
movsx eax, byte [rbp + 0x23]
cmp ecx, eax
jne 0x180098030
movzx ecx, byte [rbx + 5]
movzx eax, byte [rbx + 6]
shl eax, 8
shl ecx, 0x10
add ecx, eax
movzx eax, byte [rbx + 4]
shl eax, 0x18
add ecx, eax
movzx eax, byte [rbx + 7]
add eax, 0xffff0000
add ecx, eax
test ecx, 0xfffeffff
jne 0x180098030
movzx eax, byte [rbx + 9]
movzx ecx, byte [rbx + 8]
shl ecx, 8
add ecx, eax
movzx eax, byte [rbx + 0xa]
shl ecx, 8
add ecx, eax
movzx eax, byte [rbx + 0xb]
shl ecx, 8
add ecx, eax
cmp edi, ecx
jge 0x180098030
lea eax, [rdi*4]
movsxd rdx, eax
movzx ecx, byte [rdx + rbx + 0xd]
movzx eax, byte [rdx + rbx + 0xc]
shl eax, 8
add eax, ecx
movzx ecx, byte [rdx + rbx + 0xe]
shl eax, 8
add eax, ecx
movzx ecx, byte [rdx + rbx + 0xf]
shl eax, 8
add eax, ecx
jmp 0x180098033
or eax, 0xffffffff
mov rbx, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x38]
add rsp, 0x20
pop rbp
ret
Function at 0x1800a8b74
Capabilities:
Encode data using xor

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x40
xor r8d, r8d
mov r10, rcx
test edx, edx
jne 0x1800a8bca
mov dword [rbp - 0x20], 0x67776011
lea r9, [rbp - 0x20]
mov dword [rbp - 0x1c], 0x61747b79
mov byte [rbp - 0x18], 0x3a
mov eax, 0xa0a0a0a1
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x33
mov al, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9], al
inc r9
cmp r8d, 9
jl 0x1800a8b9d
lea rdx, [rbp - 0x20]
jmp 0x1800a8c0b
mov dword [rbp - 0x17], 0x67776011
lea r9, [rbp - 0x17]
mov dword [rbp - 0x13], 0x60747b79
mov byte [rbp - 0xf], 0x3a
mov eax, 0xa0a0a0a1
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x33
mov al, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9], al
inc r9
cmp r8d, 9
jl 0x1800a8be0
lea rdx, [rbp - 0x17]
xor r8d, r8d
mov rcx, r10
call fcn.18007f8fc
add rsp, 0x40
pop rbp
ret
Function at 0x1800b02b8
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r13
push rbp
push r14
push r15
mov rbp, rsp
sub rsp, 0x40
lea r14, [rdx + 0x18]
mov r13d, 0xf
mov r15d, r8d
mov rbx, rdx
cmp qword [r14], r13
jbe 0x1800b02f5
mov rdx, qword [rdx]
lea rdi, [rbx + 0x18]
jmp 0x1800b02f8
mov rdi, r14
mov al, byte [rdx]
mov r8d, 0x84222325
test al, al
je 0x1800b031e
movsx eax, al
inc rdx
xor eax, r8d
imul r8d, eax, 0x1b3
mov al, byte [rdx]
test al, al
jne 0x1800b0304
lea rdi, [rbx + 0x18]
lea rdx, [rbp - 0x20]
call fcn.1800b15bc
cmp qword [rbp - 0x10], 0
jne 0x1800b03b7
mov rdx, qword [rbp - 8]
mov esi, 0x1000
cmp rdx, r13
jbe 0x1800b036d
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, rsi
jb 0x1800b0368
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b0478
call fcn.1800bf340
and qword [rbp - 0x10], 0
mov rdx, qword [r14]
mov qword [rbp - 8], r13
mov byte [rbp - 0x20], 0
cmp rdx, r13
jbe 0x1800b03ae
mov rcx, qword [rbx]
inc rdx
cmp rdx, rsi
jb 0x1800b03a9
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800b0478
mov rcx, r8
call fcn.1800bf340
mov qword [rbx + 0x18], r13
jmp 0x1800b044f
lea rcx, [rbp - 0x20]
mov r14, rdi
cmp qword [rbp - 8], r13
jbe 0x1800b03cc
mov rcx, qword [rbp - 0x20]
lea r14, [rbx + 0x18]
call fcn.1800c0e80
mov rdx, qword [rbp - 8]
mov r15d, eax
mov esi, 0x1000
cmp rdx, r13
jbe 0x1800b040e
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, rsi
jb 0x1800b0406
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b0478
call fcn.1800bf340
mov rdi, r14
and qword [rbp - 0x10], 0
mov rdx, qword [rbx + 0x18]
mov qword [rbp - 8], r13
mov byte [rbp - 0x20], 0
cmp rdx, r13
jbe 0x1800b044c
mov rcx, qword [rbx]
inc rdx
cmp rdx, rsi
jb 0x1800b0447
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800b0478
mov rcx, r8
call fcn.1800bf340
mov qword [rdi], r13
mov rsi, qword [rsp + 0x68]
mov eax, r15d
mov rdi, qword [rsp + 0x70]
mov r13, qword [rsp + 0x78]
mov byte [rbx], 0
and qword [rbx + 0x10], 0
mov rbx, qword [rsp + 0x60]
add rsp, 0x40
pop r15
pop r14
pop rbp
ret
call fcn.180089708
int3
Function at 0x1800b0480
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r14
mov rbp, rsp
sub rsp, 0x50
lea r14, [rdx + 0x18]
movaps xmmword [rax - 0x28], xmm6
mov r12d, 0xf
movaps xmm6, xmm2
mov rbx, rdx
cmp qword [r14], r12
jbe 0x1800b04bd
mov rdx, qword [rdx]
lea rdi, [rbx + 0x18]
jmp 0x1800b04c0
mov rdi, r14
mov al, byte [rdx]
mov r8d, 0x84222325
test al, al
je 0x1800b04e6
movsx eax, al
inc rdx
xor eax, r8d
imul r8d, eax, 0x1b3
mov al, byte [rdx]
test al, al
jne 0x1800b04cc
lea rdi, [rbx + 0x18]
lea rdx, [rbp - 0x30]
call fcn.1800b15bc
cmp qword [rbp - 0x20], 0
jne 0x1800b057f
mov rdx, qword [rbp - 0x18]
mov esi, 0x1000
cmp rdx, r12
jbe 0x1800b0535
mov rcx, qword [rbp - 0x30]
inc rdx
mov rax, rcx
cmp rdx, rsi
jb 0x1800b0530
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b0645
call fcn.1800bf340
and qword [rbp - 0x20], 0
mov rdx, qword [r14]
mov qword [rbp - 0x18], r12
mov byte [rbp - 0x30], 0
cmp rdx, r12
jbe 0x1800b0576
mov rcx, qword [rbx]
inc rdx
cmp rdx, rsi
jb 0x1800b0571
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800b0645
mov rcx, r8
call fcn.1800bf340
mov qword [rbx + 0x18], r12
jmp 0x1800b061b
lea rcx, [rbp - 0x30]
mov r14, rdi
cmp qword [rbp - 0x18], r12
jbe 0x1800b0594
mov rcx, qword [rbp - 0x30]
lea r14, [rbx + 0x18]
call fcn.1800c0d9c
mov rdx, qword [rbp - 0x18]
xorps xmm6, xmm6
mov esi, 0x1000
cvtsd2ss xmm6, xmm0
cmp rdx, r12
jbe 0x1800b05da
mov rcx, qword [rbp - 0x30]
inc rdx
mov rax, rcx
cmp rdx, rsi
jb 0x1800b05d2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b0645
call fcn.1800bf340
mov rdi, r14
and qword [rbp - 0x20], 0
mov rdx, qword [rbx + 0x18]
mov qword [rbp - 0x18], r12
mov byte [rbp - 0x30], 0
cmp rdx, r12
jbe 0x1800b0618
mov rcx, qword [rbx]
inc rdx
cmp rdx, rsi
jb 0x1800b0613
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800b0645
mov rcx, r8
call fcn.1800bf340
mov qword [rdi], r12
lea r11, [rsp + 0x50]
mov byte [rbx], 0
and qword [rbx + 0x10], 0
movaps xmm0, xmm6
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
movaps xmm6, xmmword [rsp + 0x40]
mov rsp, r11
pop r14
pop r12
pop rbp
ret
call fcn.180089708
int3
Function at 0x1800b08d4
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x40
mov r13d, 0xf
mov sil, r8b
mov rbx, rdx
cmp qword [rdx + 0x18], r13
jbe 0x1800b0902
mov rdx, qword [rdx]
mov r8d, 0x84222325
mov r15d, 1
jmp 0x1800b0920
movsx eax, al
xor eax, r8d
imul r8d, eax, 0x1b3
add rdx, r15
mov al, byte [rdx]
test al, al
jne 0x1800b0910
lea rdx, [rbp - 0x20]
call fcn.1800b15bc
mov r10, qword [rbp - 0x10]
test r10, r10
jne 0x1800b09b0
mov rdx, qword [rbp - 8]
mov edi, 0x1000
cmp rdx, r13
jbe 0x1800b0973
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, rdi
jb 0x1800b096e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b0ab1
call fcn.1800bf340
mov rdx, qword [rbx + 0x18]
cmp rdx, r13
jbe 0x1800b09a8
mov rcx, qword [rbx]
inc rdx
cmp rdx, rdi
jb 0x1800b09a3
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800b0ab1
mov rcx, r8
call fcn.1800bf340
mov al, sil
jmp 0x1800b0a8c
mov dword [rbp + 0x38], 0x50414146
lea r9, [rbp + 0x38]
mov byte [rbp + 0x3c], 0x36
xor r8d, r8d
mov eax, 0xa0a0a0a1
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x33
mov al, r8b
add r8d, r15d
sub al, cl
add al, 0x32
xor byte [r9], al
add r9, r15
cmp r8d, 5
jl 0x1800b09c2
lea rcx, [rbp + 0x38]
or rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x1800b09f1
mov r14, qword [rbp - 8]
lea rcx, [rbp - 0x20]
mov rsi, qword [rbp - 0x20]
cmp r14, r13
cmova rcx, rsi
cmp r10, rax
jne 0x1800b0a22
mov r8, r10
lea rdx, [rbp + 0x38]
call fcn.1800c1670
test eax, eax
je 0x1800b0a25
xor r15b, r15b
mov edi, 0x1000
cmp r14, r13
jbe 0x1800b0a58
lea rdx, [r14 + 1]
mov rax, rsi
cmp rdx, rdi
jb 0x1800b0a50
mov rsi, qword [rsi - 8]
add rdx, 0x27
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b0ab1
mov rcx, rsi
call fcn.1800bf340
mov rdx, qword [rbx + 0x18]
cmp rdx, r13
jbe 0x1800b0a89
mov rcx, qword [rbx]
inc rdx
cmp rdx, rdi
jb 0x1800b0a84
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800b0ab1
mov rcx, r8
call fcn.1800bf340
mov al, r15b
mov byte [rbx], 0
lea r11, [rsp + 0x40]
mov rsi, qword [r11 + 0x40]
mov qword [rbx + 0x18], r13
and qword [rbx + 0x10], 0
mov rbx, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop rdi
pop rbp
ret
call fcn.180089708
int3
Function at 0x1800b1064
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
mov rbp, rsp
sub rsp, 0x40
cmp qword [rdx + 0x18], 0xf
mov rbx, rdx
mov rsi, rcx
jbe 0x1800b1083
mov rdx, qword [rdx]
mov edi, 0x84222325
jmp 0x1800b1098
movsx eax, al
xor eax, edi
imul edi, eax, 0x1b3
inc rdx
mov al, byte [rdx]
test al, al
jne 0x1800b108a
test r8b, r8b
je 0x1800b10e2
mov dword [rbp + 0x28], 0x50414146
lea r9, [rbp + 0x28]
mov byte [rbp + 0x2c], 0x36
xor r8d, r8d
mov eax, 0xa0a0a0a1
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x33
mov al, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9], al
inc r9
cmp r8d, 5
jl 0x1800b10b5
lea rdx, [rbp + 0x28]
jmp 0x1800b1121
mov dword [rbp + 0x38], 0x46585254
lea r9, [rbp + 0x38]
mov word [rbp + 0x3c], 0x3753
xor r8d, r8d
mov eax, 0xa0a0a0a1
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x33
mov al, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9], al
inc r9
cmp r8d, 6
jl 0x1800b10f6
lea rdx, [rbp + 0x38]
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rbp - 0x20], xmm0
or r8, 0xffffffffffffffff
movdqu xmmword [rbp - 0x10], xmm1
inc r8
cmp byte [rdx + r8], 0
jne 0x1800b1134
lea rcx, [rbp - 0x20]
call fcn.180029790
lea r8, [rbp - 0x20]
mov edx, edi
mov rcx, rsi
call fcn.1800b194c
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x1800b118b
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x1800b1186
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800b11a8
mov rcx, r8
call fcn.1800bf340
and qword [rbx + 0x10], 0
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rbx, qword [rsp + 0x60]
add rsp, 0x40
pop rdi
pop rsi
pop rbp
ret
call fcn.180089708
int3
Function at 0x1800b15bc
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r14
mov rbp, rsp
sub rsp, 0x70
mov r14d, r8d
mov word [rbp + 0x20], 0x3338
mov rbx, rdx
lea r10, [rbp + 0x20]
mov rdi, rcx
xor r9d, r9d
mov eax, 0xa0a0a0a1
mul r9d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x33
mov al, r9b
inc r9d
sub al, cl
add al, 0x32
xor byte [r10], al
inc r10
cmp r9d, 2
jl 0x1800b15e7
xorps xmm0, xmm0
lea rax, [rbp + 0x20]
xorps xmm1, xmm1
or r8, 0xffffffffffffffff
movups xmmword [rbp - 0x20], xmm0
movdqu xmmword [rbp - 0x10], xmm1
inc r8
cmp byte [rax + r8], 0
jne 0x1800b1625
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x20]
call fcn.180029790
lea rdx, [rdi + 0x20]
lea r8, [rbp - 0x20]
lea rcx, [rbp - 0x38]
call fcn.1800b2034
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x1800b1688
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b1683
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b1803
call fcn.1800bf340
mov rdi, qword [rbp - 0x38]
mov rsi, qword [rbp - 0x30]
jmp 0x1800b1784
mov word [rbp + 0x20], 0x330f
lea r9, [rbp + 0x20]
xor r8d, r8d
mov eax, 0xa0a0a0a1
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x33
mov al, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9], al
inc r9
cmp r8d, 2
jl 0x1800b16a2
and qword [rbp - 0x10], 0
lea rax, [rbp + 0x20]
and qword [rbp - 8], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
or r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x1800b16e2
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x20]
call fcn.180029790
lea r8, [rbp - 0x20]
mov rdx, rdi
lea rcx, [rbp - 0x50]
call fcn.1800b2034
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x1800b1744
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b173f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b17fd
call fcn.1800bf340
mov rax, qword [rbp - 0x48]
mov rcx, qword [rbp - 0x50]
sub rax, rcx
and rax, 0xffffffffffffffe0
cmp rax, 0x40
jne 0x1800b1777
cmp qword [rcx + 0x18], 0xf
jbe 0x1800b1763
mov rcx, qword [rcx]
mov r8d, 0xa
lea rdx, [rbp + 0x38]
call fcn.1800c1930
cmp eax, r14d
je 0x1800b17c4
lea rcx, [rbp - 0x50]
call fcn.180030424
add rdi, 0x20
cmp rdi, rsi
jne 0x1800b1695
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
and qword [rbx + 0x10], 0
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
lea rcx, [rbp - 0x38]
call fcn.180030424
lea r11, [rsp + 0x70]
mov rax, rbx
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret
mov rdx, qword [rbp - 0x50]
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
and qword [rbx + 0x10], 0
add rdx, 0x20
and qword [rbx + 0x18], 0
cmp qword [rdx + 0x18], 0xf
mov r8, qword [rdx + 0x10]
jbe 0x1800b17ea
mov rdx, qword [rdx]
mov rcx, rbx
call fcn.180029978
lea rcx, [rbp - 0x50]
call fcn.180030424
jmp 0x1800b17a3
call fcn.180089708
int3
call fcn.180089708
int3
Function at 0x1800b180c
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
push rsi
push rdi
push r14
sub rsp, 0x20
mov rsi, rcx
mov word [rax + 8], 0x3340
xor r8d, r8d
lea r9, [rax + 8]
mov eax, 0xa0a0a0a1
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x33
mov al, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9], al
inc r9
cmp r8d, 2
jl 0x1800b182f
cmp qword [rsi + 0x18], 0xf
mov rcx, rsi
jbe 0x1800b1863
mov rcx, qword [rsi]
lea rdx, [rsp + 0x40]
call fcn.1800c1258
mov rbp, rax
test rax, rax
je 0x1800b1939
xor edx, edx
mov rcx, rax
lea r8d, [rdx + 2]
call fcn.1800c140c
mov rcx, rbp
call fcn.1800c14ac
xor r8d, r8d
movsxd rbx, eax
xor edx, edx
mov rcx, rbp
call fcn.1800c140c
test ebx, ebx
jg 0x1800b18b0
mov rcx, rbp
call fcn.1800c1068
jmp 0x1800b1939
mov rcx, rbx
mov rdi, rbx
call fcn.1800bf320
mov r9, rbp
mov r8, rdi
mov edx, 1
mov rcx, rax
mov rbx, rax
call fcn.1800c138c
mov rcx, rbp
mov r14, rax
call fcn.1800c1068
cmp r14, rdi
jne 0x1800b192c
lea rcx, [rsi + 0x20]
cmp r14, qword [rcx + 0x18]
ja 0x1800b1911
cmp qword [rcx + 0x18], 0xf
mov rdi, rcx
jbe 0x1800b18f8
mov rdi, qword [rcx]
mov qword [rcx + 0x10], r14
mov r8, r14
mov rcx, rdi
mov rdx, rbx
call fcn.1800c16a0
mov byte [rdi + r14], 0
jmp 0x1800b1921
mov r8b, byte [rsp + 0x40]
mov r9, rbx
mov rdx, r14
call fcn.18002a890
mov rcx, rsi
call fcn.1800b1590
mov dword [rsi + 0x40], eax
test rbx, rbx
je 0x1800b1939
mov rcx, rbx
call fcn.1800bf340
mov rbx, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x50]
add rsp, 0x20
pop r14
pop rdi
pop rsi
ret