joyce8/EMBER2024-capa huggingface dataset:
Function at 0x180044080
Capabilities:
Encode data using xor
Encrypt data using aes via x86 extensions

Disassembly:
mov r11, rsp
sub rsp, 0xc8
mov rax, qword [rcx + 0x10]
cmp qword [rcx + 8], rax
je 0x18004430a
mov rax, qword [rcx + 8]
movaps xmmword [r11 - 0x18], xmm6
movaps xmmword [r11 - 0x28], xmm7
movaps xmmword [r11 - 0x38], xmm8
movaps xmmword [r11 - 0x48], xmm9
movaps xmmword [r11 - 0x58], xmm10
movaps xmmword [r11 - 0x68], xmm11
movaps xmmword [r11 - 0x78], xmm12
movaps xmmword [rsp + 0x40], xmm13
movaps xmmword [rsp + 0x30], xmm14
movdqu xmm14, xmmword [rax + 0xa0]
movdqu xmm4, xmmword [rax]
movdqu xmm5, xmmword [rax + 0x10]
movdqu xmm6, xmmword [rax + 0x20]
movdqu xmm7, xmmword [rax + 0x30]
movdqu xmm8, xmmword [rax + 0x40]
movdqu xmm9, xmmword [rax + 0x50]
movdqu xmm10, xmmword [rax + 0x60]
movdqu xmm11, xmmword [rax + 0x70]
movdqu xmm12, xmmword [rax + 0x80]
movdqu xmm13, xmmword [rax + 0x90]
cmp r9, 4
jb 0x180044260
mov r10, r9
mov rcx, r8
shr r10, 2
sub rcx, rdx
imul rax, r10, 0xfffffffffffffffc
add r9, rax
nop
movdqu xmm0, xmmword [rdx]
movdqu xmm3, xmmword [rdx + 0x10]
movdqu xmm2, xmmword [rdx + 0x20]
movdqu xmm1, xmmword [rdx + 0x30]
pxor xmm0, xmm4
pxor xmm3, xmm4
pxor xmm2, xmm4
pxor xmm1, xmm4
aesenc xmm0, xmm5
aesenc xmm3, xmm5
aesenc xmm2, xmm5
aesenc xmm1, xmm5
aesenc xmm0, xmm6
aesenc xmm3, xmm6
aesenc xmm2, xmm6
aesenc xmm1, xmm6
aesenc xmm0, xmm7
aesenc xmm3, xmm7
aesenc xmm2, xmm7
aesenc xmm1, xmm7
aesenc xmm0, xmm8
aesenc xmm3, xmm8
aesenc xmm2, xmm8
aesenc xmm1, xmm8
aesenc xmm0, xmm9
aesenc xmm3, xmm9
aesenc xmm2, xmm9
aesenc xmm1, xmm9
aesenc xmm0, xmm10
aesenc xmm3, xmm10
aesenc xmm2, xmm10
aesenc xmm1, xmm10
aesenc xmm0, xmm11
aesenc xmm3, xmm11
aesenc xmm2, xmm11
aesenc xmm1, xmm11
aesenc xmm0, xmm12
aesenc xmm3, xmm12
aesenc xmm2, xmm12
aesenc xmm1, xmm12
aesenc xmm0, xmm13
aesenc xmm3, xmm13
aesenclast xmm0, xmm14
movdqu xmmword [r8], xmm0
add r8, 0x40
aesenc xmm2, xmm13
aesenclast xmm3, xmm14
movdqu xmmword [rcx + rdx + 0x10], xmm3
aesenc xmm1, xmm13
aesenclast xmm2, xmm14
movdqu xmmword [rcx + rdx + 0x20], xmm2
aesenclast xmm1, xmm14
movdqu xmmword [rcx + rdx + 0x30], xmm1
add rdx, 0x40
sub r10, 1
jne 0x180044130
test r9, r9
je 0x1800442c2
sub r8, rdx
nop dword [rax + rax]
movdqu xmm0, xmmword [rdx]
lea rdx, [rdx + 0x10]
pxor xmm0, xmm4
aesenc xmm0, xmm5
aesenc xmm0, xmm6
aesenc xmm0, xmm7
aesenc xmm0, xmm8
aesenc xmm0, xmm9
aesenc xmm0, xmm10
aesenc xmm0, xmm11
aesenc xmm0, xmm12
aesenc xmm0, xmm13
aesenclast xmm0, xmm14
movdqu xmmword [r8 + rdx - 0x10], xmm0
sub r9, 1
jne 0x180044270
movaps xmm13, xmmword [rsp + 0x40]
movaps xmm12, xmmword [rsp + 0x50]
movaps xmm11, xmmword [rsp + 0x60]
movaps xmm10, xmmword [rsp + 0x70]
movaps xmm9, xmmword [rsp + 0x80]
movaps xmm8, xmmword [rsp + 0x90]
movaps xmm7, xmmword [rsp + 0xa0]
movaps xmm6, xmmword [rsp + 0xb0]
movaps xmm14, xmmword [rsp + 0x30]
add rsp, 0xc8
ret
lea r9, str.gold
mov dword [rsp + 0x20], 0x70
lea r8, str.aesni_encrypt_n
lea rdx, str.Key_was_set
lea rcx, str.m_EK.empty____false
call fcn.1800401f0
int3
Function at 0x18004f2e0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov qword [rsp + 0x28], 0xfffffffffffffffe
mov rbx, r9
mov r12, rdx
mov r13, rcx
mov r15, qword [r8 + 0x10]
mov r10, qword [r8 + 0x18]
cmp r10, 0x10
jb 0x18004f323
mov r9, qword [r8]
jmp 0x18004f326
mov r9, r8
movabs rdx, 0xcbf29ce484222325
xor ecx, ecx
test r15, r15
je 0x18004f355
movabs r11, 0x100000001b3
movzx eax, byte [r9 + rcx]
xor rdx, rax
imul rdx, r11
inc rcx
cmp rcx, r15
jb 0x18004f341
mov r9, qword [r13 + 0x30]
and r9, rdx
shl r9, 4
mov qword [rsp + 0x20], r9
mov rax, qword [r13 + 0x18]
mov rsi, qword [r9 + rax]
cmp rsi, qword [r13 + 8]
jne 0x18004f379
mov rdi, qword [r13 + 8]
jmp 0x18004f381
mov rdi, qword [r9 + rax + 8]
mov rdi, qword [rdi]
cmp rdi, rsi
je 0x18004f435
nop word [rax + rax]
mov rdi, qword [rdi + 8]
lea rdx, [rdi + 0x10]
lea r14, [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x18004f3a6
mov rdx, qword [rdx]
cmp r10, 0x10
jb 0x18004f3b1
mov rcx, qword [r8]
jmp 0x18004f3b4
mov rcx, r8
mov r14, qword [r14]
mov r8, r14
cmp r15, r14
cmovb r8, r15
test r8, r8
je 0x18004f3cf
call fcn.18017c6f0
test eax, eax
jne 0x18004f41b
cmp r15, r14
jb 0x18004f41b
ja 0x18004f41b
mov rcx, qword [rbx + 8]
mov rax, qword [rbx]
mov qword [rcx], rax
mov rcx, qword [rbx]
mov rax, qword [rbx + 8]
mov qword [rcx + 8], rax
dec qword [r13 + 0x10]
lea rcx, [rbx + 0x30]
call fcn.180019b00
lea rcx, [rbx + 0x10]
call fcn.180019b00
mov rcx, rbx
call fcn.18015dea0
mov qword [r12], rdi
mov byte [r12 + 8], 0
mov rax, r12
jmp 0x18004f4d2
cmp rdi, rsi
mov r8, qword [rsp + 0x80]
mov r10, qword [r8 + 0x18]
jne 0x18004f390
mov r9, qword [rsp + 0x20]
mov qword [rsp + 0x80], rbx
mov rax, qword [rbx]
cmp rdi, rax
je 0x18004f472
mov rcx, qword [rbx + 8]
mov qword [rcx], rax
mov rcx, qword [rax + 8]
mov qword [rcx], rdi
mov rcx, qword [rdi + 8]
mov qword [rcx], rbx
mov rdx, qword [rdi + 8]
mov rcx, qword [rax + 8]
mov qword [rdi + 8], rcx
mov rcx, qword [rbx + 8]
mov qword [rax + 8], rcx
mov qword [rbx + 8], rdx
mov rdx, qword [r13 + 0x18]
add rdx, r9
mov rax, qword [rdx]
cmp rax, qword [r13 + 8]
jne 0x18004f490
mov qword [rdx], rbx
mov rax, qword [r13 + 0x18]
mov qword [r9 + rax + 8], rbx
jmp 0x18004f4bc
cmp rax, rdi
jne 0x18004f49a
mov qword [rdx], rbx
jmp 0x18004f4bc
mov rax, qword [rdx + 8]
mov rcx, qword [rax]
mov qword [rdx + 8], rcx
cmp rcx, rbx
je 0x18004f4bc
mov rdx, qword [r13 + 0x18]
mov rax, qword [rdx + r9 + 8]
mov rcx, qword [rax + 8]
mov qword [rdx + r9 + 8], rcx
mov rcx, r13
call fcn.18004fcd0
nop
mov qword [r12], rbx
mov byte [r12 + 8], 1
mov rax, r12
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
Function at 0x18004f4f0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov qword [rsp + 0x28], 0xfffffffffffffffe
mov rdi, r9
mov r14, rdx
mov r13, rcx
mov r12, qword [r8 + 0x10]
mov r10, qword [r8 + 0x18]
cmp r10, 0x10
jb 0x18004f533
mov r9, qword [r8]
jmp 0x18004f536
mov r9, r8
movabs rdx, 0xcbf29ce484222325
xor ecx, ecx
test r12, r12
je 0x18004f565
movabs r11, 0x100000001b3
movzx eax, byte [r9 + rcx]
xor rdx, rax
imul rdx, r11
inc rcx
cmp rcx, r12
jb 0x18004f551
mov r9, qword [r13 + 0x30]
and r9, rdx
shl r9, 4
mov qword [rsp + 0x20], r9
mov rax, qword [r13 + 0x18]
mov rsi, qword [rax + r9]
cmp rsi, qword [r13 + 8]
jne 0x18004f589
mov rbx, qword [r13 + 8]
jmp 0x18004f591
mov rbx, qword [rax + r9 + 8]
mov rbx, qword [rbx]
cmp rbx, rsi
je 0x18004f617
nop word [rax + rax]
mov rbx, qword [rbx + 8]
lea rdx, [rbx + 0x10]
lea r15, [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x18004f5b6
mov rdx, qword [rdx]
cmp r10, 0x10
jb 0x18004f5c1
mov rcx, qword [r8]
jmp 0x18004f5c4
mov rcx, r8
mov r15, qword [r15]
mov r8, r15
cmp r12, r15
cmovb r8, r12
test r8, r8
je 0x18004f5df
call fcn.18017c6f0
test eax, eax
jne 0x18004f601
cmp r12, r15
jb 0x18004f601
ja 0x18004f601
mov rdx, rdi
mov rcx, r13
call fcn.18004fea0
mov qword [r14], rbx
mov byte [r14 + 8], 0
mov rax, r14
jmp 0x18004f6b2
cmp rbx, rsi
mov r8, qword [rsp + 0x80]
mov r10, qword [r8 + 0x18]
jne 0x18004f5a0
mov r9, qword [rsp + 0x20]
mov qword [rsp + 0x80], rdi
mov rax, qword [rdi]
cmp rbx, rax
je 0x18004f654
mov rcx, qword [rdi + 8]
mov qword [rcx], rax
mov rcx, qword [rax + 8]
mov qword [rcx], rbx
mov rcx, qword [rbx + 8]
mov qword [rcx], rdi
mov rdx, qword [rbx + 8]
mov rcx, qword [rax + 8]
mov qword [rbx + 8], rcx
mov rcx, qword [rdi + 8]
mov qword [rax + 8], rcx
mov qword [rdi + 8], rdx
mov rdx, qword [r13 + 0x18]
add rdx, r9
mov rax, qword [rdx]
cmp rax, qword [r13 + 8]
jne 0x18004f672
mov qword [rdx], rdi
mov rax, qword [r13 + 0x18]
mov qword [rax + r9 + 8], rdi
jmp 0x18004f69e
cmp rax, rbx
jne 0x18004f67c
mov qword [rdx], rdi
jmp 0x18004f69e
mov rax, qword [rdx + 8]
mov rcx, qword [rax]
mov qword [rdx + 8], rcx
cmp rcx, rdi
je 0x18004f69e
mov rdx, qword [r13 + 0x18]
mov rax, qword [rdx + r9 + 8]
mov rcx, qword [rax + 8]
mov qword [rdx + r9 + 8], rcx
mov rcx, r13
call fcn.18004fd90
nop
mov qword [r14], rdi
mov byte [r14 + 8], 1
mov rax, r14
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
Function at 0x180050640
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], r8
push rbx
sub rsp, 0x20
cmp qword [r8 + 0x28], 0x10
lea r9, [r8 + 0x10]
mov r11, qword [r9 + 0x10]
mov rbx, rdx
mov r10, rcx
jb 0x180050662
mov r9, qword [r9]
xor ecx, ecx
movabs rdx, 0xcbf29ce484222325
test r11, r11
je 0x1800506a9
mov qword [rsp + 0x30], rdi
movabs rdi, 0x100000001b3
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r9 + rcx]
inc rcx
xor rdx, rax
imul rdx, rdi
cmp rcx, r11
jb 0x180050690
mov rdi, qword [rsp + 0x30]
mov r9, qword [r10 + 0x30]
mov rcx, qword [r10 + 0x18]
and r9, rdx
shl r9, 4
add rcx, r9
cmp qword [rcx + 8], r8
jne 0x1800506e6
cmp qword [rcx], r8
jne 0x1800506dc
mov rax, qword [r10 + 8]
mov qword [rcx], rax
mov rcx, qword [r10 + 0x18]
mov rax, qword [r10 + 8]
mov qword [rcx + r9 + 8], rax
jmp 0x1800506f1
mov rax, qword [r8 + 8]
mov qword [rcx + 8], rax
jmp 0x1800506f1
cmp qword [rcx], r8
jne 0x1800506f6
mov rax, qword [r8]
mov qword [rcx], rax
mov r8, qword [rsp + 0x40]
lea rcx, [r10 + 8]
mov rdx, rbx
call fcn.1800507e0
mov rax, rbx
add rsp, 0x20
pop rbx
ret

Function at 0x180050710
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], r8
push rbx
sub rsp, 0x20
cmp qword [r8 + 0x28], 0x10
lea r9, [r8 + 0x10]
mov r11, qword [r9 + 0x10]
mov rbx, rdx
mov r10, rcx
jb 0x180050732
mov r9, qword [r9]
xor ecx, ecx
movabs rdx, 0xcbf29ce484222325
test r11, r11
je 0x180050779
mov qword [rsp + 0x30], rdi
movabs rdi, 0x100000001b3
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r9 + rcx]
inc rcx
xor rdx, rax
imul rdx, rdi
cmp rcx, r11
jb 0x180050760
mov rdi, qword [rsp + 0x30]
mov r9, qword [r10 + 0x30]
mov rcx, qword [r10 + 0x18]
and r9, rdx
shl r9, 4
add rcx, r9
cmp qword [rcx + 8], r8
jne 0x1800507b6
cmp qword [rcx], r8
jne 0x1800507ac
mov rax, qword [r10 + 8]
mov qword [rcx], rax
mov rcx, qword [r10 + 0x18]
mov rax, qword [r10 + 8]
mov qword [rcx + r9 + 8], rax
jmp 0x1800507c1
mov rax, qword [r8 + 8]
mov qword [rcx + 8], rax
jmp 0x1800507c1
cmp qword [rcx], r8
jne 0x1800507c6
mov rax, qword [r8]
mov qword [rcx], rax
mov r8, qword [rsp + 0x40]
lea rcx, [r10 + 8]
mov rdx, rbx
call fcn.180050850
mov rax, rbx
add rsp, 0x20
pop rbx
ret
Function at 0x180050df0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
mov r15, qword [r8 + 0x18]
mov r14, r8
mov rdi, qword [r8 + 0x10]
mov r12, rdx
mov rbp, rcx
cmp r15, 0x10
jb 0x180050e21
mov r8, qword [r8]
xor ecx, ecx
movabs rdx, 0xcbf29ce484222325
test rdi, rdi
je 0x180050e54
movabs r9, 0x100000001b3
nop dword [rax]
movzx eax, byte [r8 + rcx]
inc rcx
xor rdx, rax
imul rdx, r9
cmp rcx, rdi
jb 0x180050e40
mov rcx, qword [rbp + 0x18]
mov rax, qword [rbp + 0x30]
mov rbp, qword [rbp + 8]
and rax, rdx
mov rbx, rax
mov qword [rsp + 0x58], rsi
add rax, rax
add rbx, rbx
mov r13, qword [rcx + rax*8]
inc rax
mov rbx, qword [rcx + rbx*8]
lea rax, [rcx + rax*8]
mov qword [rsp + 0x50], rax
cmp r13, rbp
jne 0x180050e8f
mov rax, rbp
jmp 0x180050e95
mov rax, qword [rax]
mov rax, qword [rax]
cmp rbx, rax
je 0x180050f33
lea rcx, [rbx + 0x10]
cmp r15, 0x10
jb 0x180050ead
mov rdx, qword [r14]
jmp 0x180050eb0
mov rdx, r14
cmp qword [rcx + 0x18], 0x10
lea rsi, [rcx + 0x10]
jb 0x180050ebe
mov rcx, qword [rcx]
mov rsi, qword [rsi]
mov r8, rdi
cmp rsi, rdi
cmovb r8, rsi
test r8, r8
je 0x180050ed9
call fcn.18017c6f0
test eax, eax
jne 0x180050ee0
cmp rsi, rdi
jb 0x180050ee0
jbe 0x180050eea
mov rbx, qword [rbx]
mov rax, qword [rsp + 0x50]
jmp 0x180050e85
cmp qword [rbx + 0x28], 0x10
lea rdx, [rbx + 0x10]
lea rsi, [rdx + 0x10]
jb 0x180050efc
mov rdx, qword [rdx]
cmp r15, 0x10
jb 0x180050f05
mov r14, qword [r14]
mov rsi, qword [rsi]
cmp rdi, rsi
mov r8, rsi
cmovb r8, rdi
test r8, r8
je 0x180050f23
mov rcx, r14
call fcn.18017c6f0
test eax, eax
jne 0x180050f2a
cmp rdi, rsi
jb 0x180050f2a
jbe 0x180050f2d
mov rbx, rbp
mov qword [r12], rbx
jmp 0x180050f37
mov qword [r12], rbp
mov rsi, qword [rsp + 0x58]
mov rax, r12
mov rbx, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x68]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
Function at 0x18005a850
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x20
lea rsi, [r9*8]
mov rdi, r8
mov rbp, r9
mov rbx, rdx
mov r14, rcx
mov r8, rsi
mov r10, rdi
cmp rsi, 0x10
jb 0x18005a8c1
mov r9, rsi
mov r11, rdi
shr r9, 4
sub r11, rdx
imul rax, r9, 0xfffffffffffffff0
add r8, rax
nop
mov rcx, qword [r11 + rdx + 8]
xor rcx, qword [rdx + 8]
mov rax, qword [r10]
add r10, 0x10
xor qword [rdx], rax
mov qword [rdx + 8], rcx
add rdx, 0x10
sub r9, 1
jne 0x18005a8a0
test r8, r8
je 0x18005a8e1
sub r10, rdx
nop dword [rax]
movzx eax, byte [r10 + rdx]
xor byte [rdx], al
lea rdx, [rdx + 1]
sub r8, 1
jne 0x18005a8d0
mov rax, qword [r14]
mov r9, rbp
mov r8, rbx
mov rdx, rbx
mov rcx, r14
call qword [rax + 0x48]
cmp rsi, 0x10
jb 0x18005a931
mov rdx, rsi
mov r8, rdi
shr rdx, 4
sub r8, rbx
imul rax, rdx, 0xfffffffffffffff0
add rsi, rax
nop dword [rax]
mov rcx, qword [r8 + rbx + 8]
xor rcx, qword [rbx + 8]
mov rax, qword [rdi]
add rdi, 0x10
xor qword [rbx], rax
mov qword [rbx + 8], rcx
add rbx, 0x10
sub rdx, 1
jne 0x18005a910
test rsi, rsi
je 0x18005a950
sub rdi, rbx
nop dword [rax]
movzx eax, byte [rdi + rbx]
xor byte [rbx], al
lea rbx, [rbx + 1]
sub rsi, 1
jne 0x18005a940
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
add rsp, 0x20
pop r14
ret

Function at 0x18005a970
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x20
mov rdi, r8
mov rsi, r9
shl rsi, 5
mov rbp, r9
mov rbx, rdx
mov r14, rcx
mov r8, rsi
mov r10, rdi
cmp rsi, 0x10
jb 0x18005a9e1
mov r9, rsi
mov r11, rdi
shr r9, 4
sub r11, rdx
imul rax, r9, 0xfffffffffffffff0
add r8, rax
nop dword [rax]
mov rcx, qword [r11 + rdx + 8]
xor rcx, qword [rdx + 8]
mov rax, qword [r10]
add r10, 0x10
xor qword [rdx], rax
mov qword [rdx + 8], rcx
add rdx, 0x10
sub r9, 1
jne 0x18005a9c0
test r8, r8
je 0x18005aa01
sub r10, rdx
nop dword [rax]
movzx eax, byte [r10 + rdx]
xor byte [rdx], al
lea rdx, [rdx + 1]
sub r8, 1
jne 0x18005a9f0
mov rax, qword [r14]
mov r9, rbp
mov r8, rbx
mov rdx, rbx
mov rcx, r14
call qword [rax + 0x48]
cmp rsi, 0x10
jb 0x18005aa51
mov rdx, rsi
mov r8, rdi
shr rdx, 4
sub r8, rbx
imul rax, rdx, 0xfffffffffffffff0
add rsi, rax
nop dword [rax]
mov rcx, qword [r8 + rbx + 8]
xor rcx, qword [rbx + 8]
mov rax, qword [rdi]
add rdi, 0x10
xor qword [rbx], rax
mov qword [rbx + 8], rcx
add rbx, 0x10
sub rdx, 1
jne 0x18005aa30
test rsi, rsi
je 0x18005aa70
sub rdi, rbx
nop dword [rax]
movzx eax, byte [rdi + rbx]
xor byte [rbx], al
lea rbx, [rbx + 1]
sub rsi, 1
jne 0x18005aa60
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
add rsp, 0x20
pop r14
ret
Function at 0x18005aa90
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x20
mov rdi, r8
mov rsi, r9
shl rsi, 6
mov rbp, r9
mov rbx, rdx
mov r14, rcx
mov r8, rsi
mov r10, rdi
cmp rsi, 0x10
jb 0x18005ab01
mov r9, rsi
mov r11, rdi
shr r9, 4
sub r11, rdx
imul rax, r9, 0xfffffffffffffff0
add r8, rax
nop dword [rax]
mov rcx, qword [r11 + rdx + 8]
xor rcx, qword [rdx + 8]
mov rax, qword [r10]
add r10, 0x10
xor qword [rdx], rax
mov qword [rdx + 8], rcx
add rdx, 0x10
sub r9, 1
jne 0x18005aae0
test r8, r8
je 0x18005ab21
sub r10, rdx
nop dword [rax]
movzx eax, byte [r10 + rdx]
xor byte [rdx], al
lea rdx, [rdx + 1]
sub r8, 1
jne 0x18005ab10
mov rax, qword [r14]
mov r9, rbp
mov r8, rbx
mov rdx, rbx
mov rcx, r14
call qword [rax + 0x48]
cmp rsi, 0x10
jb 0x18005ab71
mov rdx, rsi
mov r8, rdi
shr rdx, 4
sub r8, rbx
imul rax, rdx, 0xfffffffffffffff0
add rsi, rax
nop dword [rax]
mov rcx, qword [r8 + rbx + 8]
xor rcx, qword [rbx + 8]
mov rax, qword [rdi]
add rdi, 0x10
xor qword [rbx], rax
mov qword [rbx + 8], rcx
add rbx, 0x10
sub rdx, 1
jne 0x18005ab50
test rsi, rsi
je 0x18005ab90
sub rdi, rbx
nop dword [rax]
movzx eax, byte [rdi + rbx]
xor byte [rbx], al
lea rbx, [rbx + 1]
sub rsi, 1
jne 0x18005ab80
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
add rsp, 0x20
pop r14
ret

Function at 0x18005abb0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x20
lea rsi, [r9*8]
mov rdi, r8
mov rbp, r9
mov rbx, rdx
mov r14, rcx
mov r8, rsi
mov r10, rdi
cmp rsi, 0x10
jb 0x18005ac21
mov r9, rsi
mov r11, rdi
shr r9, 4
sub r11, rdx
imul rax, r9, 0xfffffffffffffff0
add r8, rax
nop
mov rcx, qword [r11 + rdx + 8]
xor rcx, qword [rdx + 8]
mov rax, qword [r10]
add r10, 0x10
xor qword [rdx], rax
mov qword [rdx + 8], rcx
add rdx, 0x10
sub r9, 1
jne 0x18005ac00
test r8, r8
je 0x18005ac41
sub r10, rdx
nop dword [rax]
movzx eax, byte [r10 + rdx]
xor byte [rdx], al
lea rdx, [rdx + 1]
sub r8, 1
jne 0x18005ac30
mov rax, qword [r14]
mov r9, rbp
mov r8, rbx
mov rdx, rbx
mov rcx, r14
call qword [rax + 0x40]
cmp rsi, 0x10
jb 0x18005ac91
mov rdx, rsi
mov r8, rdi
shr rdx, 4
sub r8, rbx
imul rax, rdx, 0xfffffffffffffff0
add rsi, rax
nop dword [rax]
mov rcx, qword [r8 + rbx + 8]
xor rcx, qword [rbx + 8]
mov rax, qword [rdi]
add rdi, 0x10
xor qword [rbx], rax
mov qword [rbx + 8], rcx
add rbx, 0x10
sub rdx, 1
jne 0x18005ac70
test rsi, rsi
je 0x18005acb0
sub rdi, rbx
nop dword [rax]
movzx eax, byte [rdi + rbx]
xor byte [rbx], al
lea rbx, [rbx + 1]
sub rsi, 1
jne 0x18005aca0
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
add rsp, 0x20
pop r14
ret
Function at 0x18005acd0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x20
mov rdi, r8
mov rsi, r9
shl rsi, 5
mov rbp, r9
mov rbx, rdx
mov r14, rcx
mov r8, rsi
mov r10, rdi
cmp rsi, 0x10
jb 0x18005ad41
mov r9, rsi
mov r11, rdi
shr r9, 4
sub r11, rdx
imul rax, r9, 0xfffffffffffffff0
add r8, rax
nop dword [rax]
mov rcx, qword [r11 + rdx + 8]
xor rcx, qword [rdx + 8]
mov rax, qword [r10]
add r10, 0x10
xor qword [rdx], rax
mov qword [rdx + 8], rcx
add rdx, 0x10
sub r9, 1
jne 0x18005ad20
test r8, r8
je 0x18005ad61
sub r10, rdx
nop dword [rax]
movzx eax, byte [r10 + rdx]
xor byte [rdx], al
lea rdx, [rdx + 1]
sub r8, 1
jne 0x18005ad50
mov rax, qword [r14]
mov r9, rbp
mov r8, rbx
mov rdx, rbx
mov rcx, r14
call qword [rax + 0x40]
cmp rsi, 0x10
jb 0x18005adb1
mov rdx, rsi
mov r8, rdi
shr rdx, 4
sub r8, rbx
imul rax, rdx, 0xfffffffffffffff0
add rsi, rax
nop dword [rax]
mov rcx, qword [r8 + rbx + 8]
xor rcx, qword [rbx + 8]
mov rax, qword [rdi]
add rdi, 0x10
xor qword [rbx], rax
mov qword [rbx + 8], rcx
add rbx, 0x10
sub rdx, 1
jne 0x18005ad90
test rsi, rsi
je 0x18005add0
sub rdi, rbx
nop dword [rax]
movzx eax, byte [rdi + rbx]
xor byte [rbx], al
lea rbx, [rbx + 1]
sub rsi, 1
jne 0x18005adc0
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
add rsp, 0x20
pop r14
ret

Function at 0x18005adf0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x20
mov rdi, r8
mov rsi, r9
shl rsi, 6
mov rbp, r9
mov rbx, rdx
mov r14, rcx
mov r8, rsi
mov r10, rdi
cmp rsi, 0x10
jb 0x18005ae61
mov r9, rsi
mov r11, rdi
shr r9, 4
sub r11, rdx
imul rax, r9, 0xfffffffffffffff0
add r8, rax
nop dword [rax]
mov rcx, qword [r11 + rdx + 8]
xor rcx, qword [rdx + 8]
mov rax, qword [r10]
add r10, 0x10
xor qword [rdx], rax
mov qword [rdx + 8], rcx
add rdx, 0x10
sub r9, 1
jne 0x18005ae40
test r8, r8
je 0x18005ae81
sub r10, rdx
nop dword [rax]
movzx eax, byte [r10 + rdx]
xor byte [rdx], al
lea rdx, [rdx + 1]
sub r8, 1
jne 0x18005ae70
mov rax, qword [r14]
mov r9, rbp
mov r8, rbx
mov rdx, rbx
mov rcx, r14
call qword [rax + 0x40]
cmp rsi, 0x10
jb 0x18005aed1
mov rdx, rsi
mov r8, rdi
shr rdx, 4
sub r8, rbx
imul rax, rdx, 0xfffffffffffffff0
add rsi, rax
nop dword [rax]
mov rcx, qword [r8 + rbx + 8]
xor rcx, qword [rbx + 8]
mov rax, qword [rdi]
add rdi, 0x10
xor qword [rbx], rax
mov qword [rbx + 8], rcx
add rbx, 0x10
sub rdx, 1
jne 0x18005aeb0
test rsi, rsi
je 0x18005aef0
sub rdi, rbx
nop dword [rax]
movzx eax, byte [rdi + rbx]
xor byte [rbx], al
lea rbx, [rbx + 1]
sub rsi, 1
jne 0x18005aee0
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
add rsp, 0x20
pop r14
ret
Function at 0x18005c060
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r12
push r13
push r15
sub rsp, 0x38
mov rbp, qword [rcx + 0x78]
mov r15, rcx
mov rcx, qword [rcx + 0x80]
mov r13, rdx
mov r12, r8
mov rdx, qword [r15 + 0x18]
mov rax, qword [r15 + 0x20]
sub rax, rdx
cmp rcx, rax
ja 0x18005c288
sub rax, rcx
cmp rax, r8
cmovb r8, rax
test r8, r8
je 0x18005c0ae
add rcx, rdx
mov rdx, r13
call fcn.18017c7f0
mov rcx, qword [r15 + 0x80]
add rcx, r12
cmp rcx, rbp
jbe 0x18005c275
mov r8, qword [r15 + 0x18]
mov r9, rbp
mov rdx, qword [r15 + 0x30]
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x30], r14
cmp rbp, 0x10
jb 0x18005c120
mov r10, rbp
shr r10, 4
imul r9, r10, 0xfffffffffffffff0
add r9, rbp
nop dword [rax]
nop dword [rax + rax]
mov rcx, qword [r8 + 8]
xor rcx, qword [rdx + 8]
mov rax, qword [r8]
add r8, 0x10
xor qword [rdx], rax
mov qword [rdx + 8], rcx
add rdx, 0x10
sub r10, 1
jne 0x18005c100
test r9, r9
je 0x18005c141
sub r8, rdx
nop dword [rax + rax]
movzx eax, byte [r8 + rdx]
xor byte [rdx], al
lea rdx, [rdx + 1]
sub r9, 1
jne 0x18005c130
mov r14, qword [r15 + 0x10]
mov rsi, qword [r15 + 0x30]
mov rcx, r14
mov rbx, qword [r15 + 0x38]
sub rbx, rsi
mov rdi, qword [r14]
call qword [rdi + 0x28]
xor edx, edx
mov rcx, r14
mov r8, rax
mov rax, rbx
div r8
mov r8, rsi
mov rdx, rsi
mov r9, rax
call qword [rdi + 0x40]
mov rcx, qword [r15 + 0x80]
mov rax, rbp
sub rax, rcx
sub rcx, rbp
add r12, rcx
add r13, rax
cmp r12, rbp
jbe 0x18005c242
nop dword [rax]
nop word [rax + rax]
mov rax, qword [r15 + 0x30]
mov r9, rbp
mov r8, r13
cmp rbp, 0x10
jb 0x18005c1e0
mov r10, rbp
shr r10, 4
imul r9, r10, 0xfffffffffffffff0
add r9, rbp
nop
mov rdx, qword [r8 + 8]
xor rdx, qword [rax + 8]
mov rcx, qword [r8]
add r8, 0x10
xor qword [rax], rcx
mov qword [rax + 8], rdx
add rax, 0x10
sub r10, 1
jne 0x18005c1c0
test r9, r9
je 0x18005c201
sub r8, rax
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
xor byte [rax], cl
lea rax, [rax + 1]
sub r9, 1
jne 0x18005c1f0
mov r14, qword [r15 + 0x10]
mov rsi, qword [r15 + 0x30]
mov rcx, r14
mov rbx, qword [r15 + 0x38]
sub rbx, rsi
mov rdi, qword [r14]
call qword [rdi + 0x28]
xor edx, edx
mov rcx, r14
mov r8, rax
mov rax, rbx
div r8
mov r8, rsi
mov rdx, rsi
mov r9, rax
call qword [rdi + 0x40]
add r13, rbp
sub r12, rbp
cmp r12, rbp
ja 0x18005c1a0
mov r14, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x60]
test r12, r12
je 0x18005c26a
mov rcx, qword [r15 + 0x18]
mov r8, r12
mov rdx, r13
call fcn.18017c7f0
mov qword [r15 + 0x80], 0
add qword [r15 + 0x80], r12
add rsp, 0x38
pop r15
pop r13
pop r12
pop rbp
ret
lea r9, str.gold
mov dword [rsp + 0x20], 0x6c
lea r8, str.buffer_insert
lea rdx, [0x1801ba248]
lea rcx, str.buf_offset___buf.size__
call fcn.1800401f0
int3