joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1800038fc
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 0x1a
jl 0x180003908
ret

Function at 0x180003934
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 0x17
jl 0x180003940
ret

Function at 0x18000396c
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 0x1e
jl 0x180003978
ret

Function at 0x1800039a4
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 0x1d
jl 0x1800039b0
ret

Function at 0x1800039dc
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 0x19
jl 0x1800039e8
ret

Function at 0x180003a14
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 0x10
jl 0x180003a20
ret

Function at 0x180003a4c
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 0x13
jl 0x180003a58
ret

Function at 0x180003a84
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 0x23
jl 0x180003a90
ret
Function at 0x180003abc
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 0x20
jl 0x180003ac8
ret

Function at 0x180003af4
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 0x22
jl 0x180003b00
ret

Function at 0x180003b2c
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 0x1b
jl 0x180003b38
ret

Function at 0x180003b64
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 0x1f
jl 0x180003b70
ret

Function at 0x180003b9c
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 0x29
jl 0x180003ba8
ret

Function at 0x180003bd4
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 0x21
jl 0x180003be0
ret

Function at 0x180003c0c
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 0x32
jl 0x180003c18
ret

Function at 0x180003c44
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 0x2c
jl 0x180003c50
ret
Function at 0x180003c7c
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 0x39
jl 0x180003c88
ret

Function at 0x180003cb4
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 0x24
jl 0x180003cc0
ret

Function at 0x180003cec
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 0x2e
jl 0x180003cf8
ret

Function at 0x180003d24
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 0x30
jl 0x180003d30
ret

Function at 0x180003d5c
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 0x37
jl 0x180003d68
ret

Function at 0x180006238
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 5
jl 0x180006244
ret
Function at 0x180006b20
Capabilities:
Log keystrokes
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0xd0
mov rax, qword [0x180061020]
xor rax, rsp
mov qword [rsp + 0xc0], rax
movzx esi, dl
mov rdi, rcx
mov qword [rsp + 0x28], rcx
xor edx, edx
mov ecx, esi
mov ebx, esi
call qword [sym.imp.USER32.dll_MapVirtualKeyA]
mov ecx, eax
cmp sil, 1
jne 0x180006b7d
lea rdx, [rsp + 0x28]
call fcn.180006cb4
mov rcx, rax
call fcn.180011a04
mov rdx, rax
jmp 0x180006c4b
cmp sil, 2
jne 0x180006b8f
lea rdx, [rsp + 0x28]
call fcn.180006cd4
jmp 0x180006b6d
cmp sil, 4
jne 0x180006ba9
lea rdx, [rsp + 0x28]
call fcn.180006d2c
mov rcx, rax
call fcn.1800119d0
jmp 0x180006b75
cmp sil, 5
jne 0x180006bc3
lea rdx, [rsp + 0x28]
call fcn.180006d74
mov rcx, rax
call fcn.18001199c
jmp 0x180006b75
cmp sil, 6
jne 0x180006bd5
lea rdx, [rsp + 0x28]
call fcn.180006d90
jmp 0x180006bb9
cmp ebx, 0x2d
ja 0x180006c06
je 0x180006c2e
sub ebx, 0x21
je 0x180006c2e
sub ebx, 1
je 0x180006c2e
sub ebx, 1
je 0x180006c2e
sub ebx, 1
je 0x180006c2e
sub ebx, 1
je 0x180006c2e
sub ebx, 1
je 0x180006c2e
sub ebx, 1
je 0x180006c2e
cmp ebx, 1
je 0x180006c2e
jmp 0x180006c32
sub ebx, 0x2e
je 0x180006c2e
sub ebx, 0x2d
je 0x180006c2e
sub ebx, 1
je 0x180006c2e
sub ebx, 1
je 0x180006c2e
sub ebx, 0x12
je 0x180006c2e
sub ebx, 0x21
je 0x180006c2e
sub ebx, 0x13
je 0x180006c2e
cmp ebx, 2
jne 0x180006c32
bts ecx, 8
shl ecx, 0x10
lea rdx, [rsp + 0x40]
mov r8d, 0x80
call qword [sym.imp.USER32.dll_GetKeyNameTextA]
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.180012d78
mov rax, rdi
mov rcx, qword [rsp + 0xc0]
xor rcx, rsp
call fcn.18001dc00
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rdi
ret

Function at 0x180006c7c
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 7
jl 0x180006c88
ret

Function at 0x180006cf4
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 8
jl 0x180006d00
ret

Function at 0x180006d3c
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 9
jl 0x180006d48
ret
Function at 0x18000713c
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 0xc
jl 0x180007148
ret

Function at 0x180009390
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 3
jl 0x18000939c
ret

Function at 0x18000a810
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 0xe
jl 0x18000a81c
ret

Function at 0x18000f210
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movzx eax, dx
imul ecx, eax, 0x32
movzx eax, r9w
inc r9d
sub ax, cx
add ax, 0x36
xor ax, word [r10 + r8]
mov word [r8], ax
lea r8, [r8 + 2]
cmp r9d, 0xd
jl 0x18000f21c
ret

Function at 0x18000f278
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movzx eax, dx
imul ecx, eax, 0x32
movzx eax, r9w
inc r9d
sub ax, cx
add ax, 0x36
xor ax, word [r10 + r8]
mov word [r8], ax
lea r8, [r8 + 2]
cmp r9d, 0x1b
jl 0x18000f284
ret

Function at 0x18000f2f0
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 0xd
jl 0x18000f2fc
ret

Function at 0x18000f3d4
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 6
jl 0x18000f3e0
ret

Function at 0x18000f43c
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 0xb
jl 0x18000f448
ret
Function at 0x18000f57c
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 4
jl 0x18000f588
ret

Function at 0x18000f5c0
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 0xa
jl 0x18000f5cc
ret

Function at 0x18000f718
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 0xf
jl 0x18000f724
ret

Function at 0x1800100cc
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movzx eax, dx
imul ecx, eax, 0x32
movzx eax, r9w
inc r9d
sub ax, cx
add ax, 0x36
xor ax, word [r10 + r8]
mov word [r8], ax
lea r8, [r8 + 2]
cmp r9d, 0x1a
jl 0x1800100d8
ret

Function at 0x1800102c8
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movzx eax, dx
imul ecx, eax, 0x32
movzx eax, r9w
inc r9d
sub ax, cx
add ax, 0x36
xor ax, word [r10 + r8]
mov word [r8], ax
lea r8, [r8 + 2]
cmp r9d, 0xb
jl 0x1800102d4
ret
Function at 0x180010df8
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
push rsi
push rdi
push r14
sub rsp, 0x20
mov rdi, r8
mov rbp, rdx
mov rsi, rcx
test r8, r8
jg 0x180010e1f
xor eax, eax
jmp 0x180010f00
cmp qword [rcx + 0x68], 0
je 0x180010e30
call fcn.180012ad8
jmp 0x180010f00
mov rbx, rdi
mov qword [rsp + 0x50], rbx
call fcn.180014560
mov qword [rsp + 0x58], rax
test rax, rax
je 0x180010e86
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x50]
call fcn.180010f14
mov rcx, rsi
mov rbx, qword [rax]
call fcn.1800145fc
mov rdx, rax
mov r8, rbx
mov rcx, rbp
call fcn.18001498c
sub qword [rsp + 0x50], rbx
mov edx, ebx
mov rcx, rsi
add rbp, rbx
call fcn.1800145d0
mov rbx, qword [rsp + 0x50]
cmp qword [rsi + 0x80], 0
je 0x180010efa
mov rcx, rsi
call fcn.180013d44
mov rbx, qword [rsp + 0x50]
mov r14d, 0xfff
jmp 0x180010ed1
mov r9, qword [rsi + 0x80]
mov r8, r14
mov edx, 1
mov rcx, rbp
call fcn.18002b304
mov rbx, qword [rsp + 0x50]
add rbp, rax
sub rbx, rax
mov qword [rsp + 0x50], rbx
cmp rax, r14
jne 0x180010efa
cmp rbx, r14
ja 0x180010ea5
test rbx, rbx
je 0x180010efa
mov r9, qword [rsi + 0x80]
mov r8, rbx
mov edx, 1
mov rcx, rbp
call fcn.18002b304
mov rbx, qword [rsp + 0x50]
sub rbx, rax
sub rdi, rbx
mov rax, rdi
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x48]
add rsp, 0x20
pop r14
pop rdi
pop rsi
ret

Function at 0x180018f88
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
xor r9d, r9d
test r8, r8
je 0x1800019ce
movzx eax, byte [r9 + rdx]
movabs r10, 0x100000001b3
xor rcx, rax
inc r9
imul rcx, r10
cmp r9, r8
jb 0x1800019b0
mov rax, rcx
ret
jmp 0x18001931c
mov rcx, rdx
jmp 0x18001937c
jmp 0x1800197a0
mov rdx, rcx
jmp 0x1800199f4
movabs rcx, 0xcbf29ce484222325
mov r8d, 8
jmp 0x1800019a8

Function at 0x180019a80
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 0x2d
jl 0x180019a8c
ret

Function at 0x180019d40
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 0x2f
jl 0x180019d4c
ret

Function at 0x180019d78
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 0x25
jl 0x180019d84
ret
Function at 0x180019db0
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 0x28
jl 0x180019dbc
ret

Function at 0x180019de8
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 0x2a
jl 0x180019df4
ret

Function at 0x180019e20
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 0x34
jl 0x180019e2c
ret

Function at 0x180019e58
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 0x33
jl 0x180019e64
ret

Function at 0x18001a1b0
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 0x36
jl 0x18001a1bc
ret

Function at 0x18001a1e8
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 0x3a
jl 0x18001a1f4
ret

Function at 0x18001a220
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 0x38
jl 0x18001a22c
ret

Function at 0x18001a258
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r10, rdx
xor r9d, r9d
sub r10, rcx
mov r8, rcx
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
inc r9d
sub al, cl
add al, 0x36
xor al, byte [r10 + r8]
mov byte [r8], al
inc r8
cmp r9d, 0x3c
jl 0x18001a264
ret