joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140133740
Capabilities:
Encode data using xor
Hash data with crc32

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x70
mov rax, qword [0x1402d4040]
xor rax, rsp
mov qword [rsp + 0x68], rax
mov r15, r9
mov rbp, rcx
mov ebx, 0xffffffff
mov eax, ebx
lea r9, [0x14027e9b5]
lea r8, str.NodeReference
lea r12, [0x14028bec0]
nop word [rax + rax]
movsx edx, byte [r8]
mov ecx, eax
xor rdx, rcx
movzx ecx, dl
shr eax, 8
xor eax, dword [r12 + rcx*4]
inc r8
cmp r8, r9
jne 0x140133790
not eax
mov esi, dword [rsp + 0xd0]
mov ecx, esi
shl ecx, 6
mov edx, esi
shr edx, 2
add eax, ecx
add edx, 0x9e3779b9
add eax, edx
xor esi, eax
mov byte [rsp + 0x60], 0
mov eax, ebx
lea r13, [0x14027c500]
lea r8, str.name
nop
movsx edx, byte [r8]
mov ecx, eax
xor rdx, rcx
movzx ecx, dl
shr eax, 8
xor eax, dword [r12 + rcx*4]
inc r8
cmp r8, r13
jne 0x1401337e0
not eax
mov r14d, esi
shl r14d, 6
mov ecx, esi
shr ecx, 2
add r14d, ecx
lea edi, [r14 - 0x61c88647]
add edi, eax
xor edi, esi
lea rdx, str.name
lea rcx, [rsp + 0x40]
call fcn.1401137d0
nop
cmp qword [rax + 0x18], 0xf
jbe 0x140133833
mov rax, qword [rax]
mov dword [rsp + 0x38], 0
mov dword [rsp + 0x30], edi
mov qword [rsp + 0x28], r15
lea rcx, str.The_name_of_the_node
mov qword [rsp + 0x20], rcx
mov r9, rax
lea r8, [rsp + 0x60]
xor edx, edx
mov rcx, rbp
call fcn.14011aca0
mov ebp, eax
cmp byte [rsp + 0x60], 0
je 0x140133879
cmp edi, 0x9bca5295
jne 0x140133879
call fcn.140143df0
nop
lea rcx, [rsp + 0x40]
call fcn.1400050e0
cmp ebp, 1
jne 0x1401338f8
lea r8, str.name
nop
movsx ecx, byte [r8]
mov eax, ebx
xor rcx, rax
movzx eax, cl
shr ebx, 8
xor ebx, dword [r12 + rax*4]
inc r8
cmp r8, r13
jne 0x140133890
not ebx
add ebx, 0x9e3779b9
add ebx, r14d
xor ebx, esi
lea rdx, str.name
lea rcx, [rsp + 0x40]
call fcn.1401137d0
nop
cmp qword [rax + 0x18], 0xf
jbe 0x1401338d4
mov rax, qword [rax]
mov dword [rsp + 0x20], ebx
mov r9, r15
lea r8, str.The_name_of_the_node
mov rdx, rax
call fcn.140116c00
or byte [rsp + 0x60], al
lea rcx, [rsp + 0x40]
call fcn.1400050e0
lea rdx, str.nodeIndex
lea rcx, [rsp + 0x40]
call fcn.1401137d0
nop
lea rcx, [rsp + 0x40]
call fcn.1400050e0
movzx eax, byte [rsp + 0x60]
mov rcx, qword [rsp + 0x68]
xor rcx, rsp
call fcn.140244f00
mov rbx, qword [rsp + 0xb8]
add rsp, 0x70
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
Function at 0x140133940
Capabilities:
Encode data using xor
Hash data with crc32

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x70
mov rax, qword [0x1402d4040]
xor rax, rsp
mov qword [rsp + 0x68], rax
mov rsi, r9
mov r9, r8
mov rdi, rdx
mov rbp, rcx
mov eax, 0xffffffff
lea rcx, [0x14027e9e4]
lea rbx, str.TextureNodeReference
lea rdx, [0x14028bec0]
nop dword [rax]
movsx r11d, byte [rbx]
mov r10d, eax
xor r11, r10
movzx r8d, r11b
shr eax, 8
xor eax, dword [rdx + r8*4]
inc rbx
cmp rbx, rcx
jne 0x140133990
not eax
mov ebx, dword [rsp + 0xa0]
mov ecx, ebx
shl ecx, 6
mov edx, ebx
shr edx, 2
add eax, ecx
add edx, 0x9e3779b9
add eax, edx
xor ebx, eax
mov byte [rsp + 0x40], 0
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], r9
mov r9, rdi
lea r8, [rsp + 0x40]
mov rcx, rbp
call fcn.1401172f0
test eax, eax
jne 0x1401339f9
movzx eax, byte [rsp + 0x40]
jmp 0x140133b11
test rdi, rdi
je 0x140133a7d
cmp byte [rdi], 0
je 0x140133a7d
mov rcx, rdi
call fcn.1400946b0
mov rcx, qword [0x1402dc618]
mov rax, qword [rcx + 0x4148]
mov byte [rax + 0xf5], 1
mov rax, qword [rcx + 0x4148]
movss xmm0, dword [rcx + 0x3a6c]
addss xmm0, dword [rax + 0x184]
movss dword [rax + 0x184], xmm0
addss xmm0, dword [rax + 0x58]
addss xmm0, dword [rax + 0x188]
movss dword [rax + 0x140], xmm0
mov rcx, rdi
call fcn.140022100
mov ecx, 0x400
call fcn.1400163c0
test al, al
je 0x140133a7d
lea rdx, str.A_texture_node_reference
lea rcx, [0x1402641f4]
call fcn.140026740
mov dword [rsp + 0x20], ebx
mov r9, rsi
mov rcx, rbp
call fcn.140133740
movzx ebx, al
or bl, byte [rsp + 0x40]
lea rdx, str.textureNode
lea rcx, [rsp + 0x48]
call fcn.1401137d0
lea rcx, [rsp + 0x48]
call fcn.1400050e0
test rdi, rdi
je 0x140133b0e
cmp byte [rdi], 0
je 0x140133b0e
mov rcx, qword [0x1402dc618]
mov rax, qword [rcx + 0x4148]
dec dword [rax + 0x130]
mov rax, qword [rcx + 0x4148]
mov byte [rax + 0xf5], 1
mov rdx, qword [rcx + 0x4148]
movss xmm0, dword [rdx + 0x184]
subss xmm0, dword [rcx + 0x3a6c]
movss dword [rdx + 0x184], xmm0
addss xmm0, dword [rdx + 0x58]
addss xmm0, dword [rdx + 0x188]
movss dword [rdx + 0x140], xmm0
movzx eax, bl
mov rcx, qword [rsp + 0x68]
xor rcx, rsp
call fcn.140244f00
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x10]
mov rbp, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x140133b40
Capabilities:
Encode data using xor
Hash data with crc32

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x70
mov rax, qword [0x1402d4040]
xor rax, rsp
mov qword [rsp + 0x68], rax
mov rsi, r9
mov r9, r8
mov rdi, rdx
mov rbp, rcx
mov eax, 0xffffffff
lea rcx, [0x14027ea1b]
lea rbx, str.BufferNodeReference
lea rdx, [0x14028bec0]
nop dword [rax]
movsx r11d, byte [rbx]
mov r10d, eax
xor r11, r10
movzx r8d, r11b
shr eax, 8
xor eax, dword [rdx + r8*4]
inc rbx
cmp rbx, rcx
jne 0x140133b90
not eax
mov ebx, dword [rsp + 0xa0]
mov ecx, ebx
shl ecx, 6
mov edx, ebx
shr edx, 2
add eax, ecx
add edx, 0x9e3779b9
add eax, edx
xor ebx, eax
mov byte [rsp + 0x40], 0
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], r9
mov r9, rdi
lea r8, [rsp + 0x40]
mov rcx, rbp
call fcn.140117650
test eax, eax
jne 0x140133bf9
movzx eax, byte [rsp + 0x40]
jmp 0x140133d11
test rdi, rdi
je 0x140133c7d
cmp byte [rdi], 0
je 0x140133c7d
mov rcx, rdi
call fcn.1400946b0
mov rcx, qword [0x1402dc618]
mov rax, qword [rcx + 0x4148]
mov byte [rax + 0xf5], 1
mov rax, qword [rcx + 0x4148]
movss xmm0, dword [rcx + 0x3a6c]
addss xmm0, dword [rax + 0x184]
movss dword [rax + 0x184], xmm0
addss xmm0, dword [rax + 0x58]
addss xmm0, dword [rax + 0x188]
movss dword [rax + 0x140], xmm0
mov rcx, rdi
call fcn.140022100
mov ecx, 0x400
call fcn.1400163c0
test al, al
je 0x140133c7d
lea rdx, str.A_buffer_node_reference
lea rcx, [0x1402641f4]
call fcn.140026740
mov dword [rsp + 0x20], ebx
mov r9, rsi
mov rcx, rbp
call fcn.140133740
movzx ebx, al
or bl, byte [rsp + 0x40]
lea rdx, str.bufferNode
lea rcx, [rsp + 0x48]
call fcn.1401137d0
lea rcx, [rsp + 0x48]
call fcn.1400050e0
test rdi, rdi
je 0x140133d0e
cmp byte [rdi], 0
je 0x140133d0e
mov rcx, qword [0x1402dc618]
mov rax, qword [rcx + 0x4148]
dec dword [rax + 0x130]
mov rax, qword [rcx + 0x4148]
mov byte [rax + 0xf5], 1
mov rdx, qword [rcx + 0x4148]
movss xmm0, dword [rdx + 0x184]
subss xmm0, dword [rcx + 0x3a6c]
movss dword [rdx + 0x184], xmm0
addss xmm0, dword [rdx + 0x58]
addss xmm0, dword [rdx + 0x188]
movss dword [rdx + 0x140], xmm0
movzx eax, bl
mov rcx, qword [rsp + 0x68]
xor rcx, rsp
call fcn.140244f00
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x10]
mov rbp, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x140133d40
Capabilities:
Encode data using xor
Hash data with crc32

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x70
mov rax, qword [0x1402d4040]
xor rax, rsp
mov qword [rsp + 0x68], rax
mov rsi, r9
mov r9, r8
mov rdi, rdx
mov rbp, rcx
mov eax, 0xffffffff
lea rcx, [0x14027ea54]
lea rbx, str.TextureOrBufferNodeReference
lea rdx, [0x14028bec0]
nop dword [rax]
movsx r11d, byte [rbx]
mov r10d, eax
xor r11, r10
movzx r8d, r11b
shr eax, 8
xor eax, dword [rdx + r8*4]
inc rbx
cmp rbx, rcx
jne 0x140133d90
not eax
mov ebx, dword [rsp + 0xa0]
mov ecx, ebx
shl ecx, 6
mov edx, ebx
shr edx, 2
add eax, ecx
add edx, 0x9e3779b9
add eax, edx
xor ebx, eax
mov byte [rsp + 0x40], 0
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], r9
mov r9, rdi
lea r8, [rsp + 0x40]
mov rcx, rbp
call fcn.1401179b0
test eax, eax
jne 0x140133df9
movzx eax, byte [rsp + 0x40]
jmp 0x140133f2c
test rdi, rdi
je 0x140133e7d
cmp byte [rdi], 0
je 0x140133e7d
mov rcx, rdi
call fcn.1400946b0
mov rcx, qword [0x1402dc618]
mov rax, qword [rcx + 0x4148]
mov byte [rax + 0xf5], 1
mov rax, qword [rcx + 0x4148]
movss xmm0, dword [rcx + 0x3a6c]
addss xmm0, dword [rax + 0x184]
movss dword [rax + 0x184], xmm0
addss xmm0, dword [rax + 0x58]
addss xmm0, dword [rax + 0x188]
movss dword [rax + 0x140], xmm0
mov rcx, rdi
call fcn.140022100
mov ecx, 0x400
call fcn.1400163c0
test al, al
je 0x140133e7d
lea rdx, str.A_texture_or_buffer_node_reference
lea rcx, [0x1402641f4]
call fcn.140026740
mov dword [rsp + 0x20], ebx
mov r9, rsi
mov rcx, rbp
call fcn.140133740
movzx ebx, al
or bl, byte [rsp + 0x40]
lea rdx, str.textureNode
lea rcx, [rsp + 0x48]
call fcn.1401137d0
lea rcx, [rsp + 0x48]
call fcn.1400050e0
lea rdx, str.bufferNode
lea rcx, [rsp + 0x48]
call fcn.1401137d0
lea rcx, [rsp + 0x48]
call fcn.1400050e0
test rdi, rdi
je 0x140133f29
cmp byte [rdi], 0
je 0x140133f29
mov rcx, qword [0x1402dc618]
mov rax, qword [rcx + 0x4148]
dec dword [rax + 0x130]
mov rax, qword [rcx + 0x4148]
mov byte [rax + 0xf5], 1
mov rdx, qword [rcx + 0x4148]
movss xmm0, dword [rdx + 0x184]
subss xmm0, dword [rcx + 0x3a6c]
movss dword [rdx + 0x184], xmm0
addss xmm0, dword [rdx + 0x58]
addss xmm0, dword [rdx + 0x188]
movss dword [rdx + 0x140], xmm0
movzx eax, bl
mov rcx, qword [rsp + 0x68]
xor rcx, rsp
call fcn.140244f00
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x10]
mov rbp, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x1401375a0
Capabilities:
Encode data using xor
Hash data with crc32

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x60
mov rax, qword [0x1402d4040]
xor rax, rsp
mov qword [rsp + 0x50], rax
mov rdi, r9
mov r11, rcx
mov edx, 0xffffffff
lea rcx, [0x14027f3fc]
lea r10, str.RenderGraphNode_ResourceBase
lea r9, [0x14028bec0]
nop dword [rax]
movsx r8d, byte [r10]
mov eax, edx
xor r8, rax
movzx eax, r8b
shr edx, 8
xor edx, dword [r9 + rax*4]
inc r10
cmp r10, rcx
jne 0x1401375e0
not edx
mov eax, dword [rsp + 0x90]
mov ecx, eax
shl ecx, 6
mov r8d, eax
shr r8d, 2
add edx, ecx
add r8d, 0x9e3779b9
add edx, r8d
xor eax, edx
mov dword [rsp + 0x20], eax
mov r9, rdi
xor r8d, r8d
xor edx, edx
mov rcx, r11
call fcn.140137130
movzx ebx, al
lea rdx, str.transient
lea rcx, [rsp + 0x30]
call fcn.1401137d0
nop
lea rcx, [rsp + 0x30]
call fcn.1400050e0
lea rdx, str.transient
lea rcx, [rsp + 0x30]
call fcn.1401137d0
nop
cmp qword [rax + 0x18], 0xf
jbe 0x14013766e
mov rax, qword [rax]
lea rdx, [rdi + 0x110]
mov rcx, rax
call fcn.1400979f0
movzx edi, al
mov ecx, 0x400
call fcn.1400163c0
test al, al
je 0x1401376a1
lea rdx, str.A_non_transient_resource_will_persist_across_executions_and_frames._A_transient_resource_may_not__and_is_decided_by_the_backend_as_a_potential_optimization_opportunity.
lea rcx, [0x1402641f4]
call fcn.140026740
or bl, dil
lea rcx, [rsp + 0x30]
call fcn.1400050e0
lea rdx, str.startingState
lea rcx, [rsp + 0x30]
call fcn.1401137d0
nop
lea rcx, [rsp + 0x30]
call fcn.1400050e0
lea rdx, str.finalState
lea rcx, [rsp + 0x30]
call fcn.1401137d0
nop
lea rcx, [rsp + 0x30]
call fcn.1400050e0
lea rdx, str.accessedAs
lea rcx, [rsp + 0x30]
call fcn.1401137d0
nop
lea rcx, [rsp + 0x30]
call fcn.1400050e0
movzx eax, bl
mov rcx, qword [rsp + 0x50]
xor rcx, rsp
call fcn.140244f00
mov rbx, qword [rsp + 0x70]
add rsp, 0x60
pop rdi
ret
Function at 0x140137720
Capabilities:
Encode data using xor
Hash data with crc32

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r12
push r14
push r15
sub rsp, 0x60
mov rax, qword [0x1402d4040]
xor rax, rsp
mov qword [rsp + 0x50], rax
mov r14, r9
mov r15, rcx
mov ebx, 0xffffffff
mov eax, ebx
lea rcx, [0x14027f4ca]
lea r10, str.RenderGraphNode_ActionBase
lea r12, [0x14028bec0]
nop
movsx r8d, byte [r10]
mov edx, eax
xor r8, rdx
movzx edx, r8b
shr eax, 8
xor eax, dword [r12 + rdx*4]
inc r10
cmp r10, rcx
jne 0x140137770
not eax
mov edi, dword [rsp + 0xa0]
mov ecx, edi
shl ecx, 6
mov edx, edi
shr edx, 2
add eax, ecx
add edx, 0x9e3779b9
add eax, edx
xor edi, eax
mov dword [rsp + 0x20], edi
xor r8d, r8d
xor edx, edx
mov rcx, r15
call fcn.140137130
movzx ebp, al
lea rdx, str.resourceDependencies
lea rcx, [rsp + 0x30]
call fcn.1401137d0
lea rcx, [rsp + 0x30]
call fcn.1400050e0
lea rdx, str.condition
lea rcx, [rsp + 0x30]
call fcn.1401137d0
nop
cmp qword [rax + 0x18], 0xf
jbe 0x1401377f6
mov rax, qword [rax]
test rax, rax
je 0x14013780e
xor edx, edx
mov rcx, rax
call fcn.1400abfb0
test al, al
jne 0x14013780e
xor sil, sil
jmp 0x140137811
mov sil, 1
lea rcx, [rsp + 0x30]
call fcn.1400050e0
test sil, sil
je 0x1401378b9
lea r9, [0x14027cb09]
lea r8, str.condition
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8]
mov eax, ebx
xor rcx, rax
movzx eax, cl
shr ebx, 8
xor ebx, dword [r12 + rax*4]
inc r8
cmp r8, r9
jne 0x140137840
not ebx
mov eax, edi
shl eax, 6
mov ecx, edi
shr ecx, 2
add ebx, eax
add ecx, 0x9e3779b9
add ebx, ecx
xor ebx, edi
lea rdx, str.condition
lea rcx, [rsp + 0x30]
call fcn.1401137d0
nop
cmp qword [rax + 0x18], 0xf
jbe 0x14013788f
mov rax, qword [rax]
lea r9, [r14 + 0x128]
mov dword [rsp + 0x20], ebx
lea r8, str.An_optional_condition_added_for_the_action_to_happen
mov rdx, rax
mov rcx, r15
call fcn.14012b260
or bpl, al
lea rcx, [rsp + 0x30]
call fcn.1400050e0
lea rdx, str.linkProperties
lea rcx, [rsp + 0x30]
call fcn.1401137d0
lea rcx, [rsp + 0x30]
call fcn.1400050e0
lea rdx, str.connections
lea rcx, [rsp + 0x30]
call fcn.1401137d0
lea rcx, [rsp + 0x30]
call fcn.1400050e0
movzx eax, bpl
mov rcx, qword [rsp + 0x50]
xor rcx, rsp
call fcn.140244f00
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r12
ret
Function at 0x140142090
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r14
push r15
sub rsp, 0x50
mov rax, qword [0x1402d4040]
xor rax, rsp
mov qword [rsp + 0x40], rax
mov r15, rdx
xor esi, esi
mov qword [rsp + 0x20], rsi
lea r8, [0x14025d010]
lea rdx, str.GigiEdit_parserTest1.txt
lea rcx, [rsp + 0x20]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen_s]
mov rcx, qword [rsp + 0x20]
test rcx, rcx
jne 0x1401420eb
xor al, al
jmp 0x140142220
xor edx, edx
lea r8d, [rdx + 2]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fseek]
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ftell]
add eax, 1
movsxd rbx, eax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x38], rsi
mov r14, rsi
mov rdi, rsi
je 0x140142196
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
ja 0x140142254
cmp rbx, 0x1000
jb 0x140142163
lea rcx, [rbx + 0x27]
cmp rcx, rbx
jbe 0x14014224e
call fcn.140244f20
test rax, rax
je 0x140142247
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14014216e
mov rcx, rbx
call fcn.140244f20
mov rdi, rax
mov rbp, rdi
mov qword [rsp + 0x28], rdi
lea rsi, [rdi + rbx]
mov r14, rsi
mov qword [rsp + 0x38], rsi
mov r8, rbx
xor edx, edx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x30], rsi
jmp 0x14014219b
mov rbp, qword [rsp + 0x28]
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fseek]
sub r14, rdi
lea rbx, [r14 - 1]
mov r9, qword [rsp + 0x20]
mov r8, rbx
mov edx, 1
mov rcx, rbp
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
cmp rax, rbx
je 0x1401421d1
xor bl, bl
jmp 0x1401421e9
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov rdx, rbp
mov rcx, r15
call fcn.140154ee0
mov bl, 1
test rdi, rdi
je 0x14014221d
sub rsi, rdi
cmp rsi, 0x1000
jb 0x140142212
add rsi, 0x27
mov rcx, qword [rdi - 8]
sub rdi, rcx
lea rax, [rdi - 8]
cmp rax, 0x1f
ja 0x140142247
mov rdi, rcx
mov rdx, rsi
mov rcx, rdi
call fcn.140244f5c
movzx eax, bl
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.140244f00
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rdi
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140001710
int3
call fcn.140004ec0
int3
Function at 0x140148610
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
lea rbp, [rsp - 0xc0]
sub rsp, 0x1c0
mov rax, qword [0x1402d4040]
xor rax, rsp
mov qword [rbp + 0xb8], rax
lea rcx, [rsp + 0x40]
call fcn.14014f890
nop
mov rax, qword [rsp + 0x58]
cmp rax, 0xb
jb 0x14014867f
lea rbx, [rsp + 0x40]
cmp rax, 0xf
cmova rbx, qword [rsp + 0x40]
mov qword [rsp + 0x50], recv
mov r8d, recv
lea rdx, str.NewVariable
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0xb], 0
jmp 0x140148695
lea r9, str.NewVariable
mov edx, 0xb
lea rcx, [rsp + 0x40]
call fcn.140005c70
lea r9, [rbp + 0xb0]
xor ecx, ecx
mov dword [rbp + 0xb4], 0x88cb7d11
mov dword [rbp + 0xb0], 0x2d59fc07
nop dword [rax]
nop word [rax + rax]
mov eax, dword [r9]
mov edx, ecx
shl edx, 6
mov r8d, ecx
shr r8d, 2
add eax, 0x9e3779b9
add eax, edx
add eax, r8d
xor ecx, eax
add r9, 4
lea rax, [rbp + 0xb8]
cmp r9, rax
jne 0x1401486c0
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
lea r9, reloc.WS2_32.dll_accept
lea r8, [0x1402dc6f0]
call fcn.14015ff50
nop
lea rcx, [rbp + 0x88]
call fcn.1400050e0
lea rcx, [rbp + 0x68]
call fcn.1400050e0
lea rcx, [rbp + 0x40]
call fcn.1400050e0
lea rcx, [rbp + 0x20]
call fcn.1400050e0
lea rcx, [rbp]
call fcn.1400050e0
lea rcx, [rbp - 0x30]
call fcn.1401537d0
lea rcx, [rbp - 0x50]
call fcn.1400050e0
lea rcx, [rbp - 0x78]
call fcn.1400050e0
lea rcx, [rsp + 0x60]
call fcn.1400050e0
lea rcx, [rsp + 0x40]
call fcn.1400050e0
mov rcx, qword [rbp + 0xb8]
xor rcx, rsp
call fcn.140244f00
mov rbx, qword [rsp + 0x1d0]
add rsp, 0x1c0
pop rbp
ret
Function at 0x140148790
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
lea rbp, [rsp - 0xf0]
sub rsp, 0x1f0
mov rax, qword [0x1402d4040]
xor rax, rsp
mov qword [rbp + 0xe8], rax
lea rcx, [rsp + 0x40]
call fcn.14014fad0
nop
mov rax, qword [rsp + 0x58]
cmp rax, 9
jb 0x1401487ff
lea rbx, [rsp + 0x40]
cmp rax, 0xf
cmova rbx, qword [rsp + 0x40]
mov qword [rsp + 0x50], 9
mov r8d, 9
lea rdx, str.NewShader
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 9], 0
jmp 0x140148815
lea r9, str.NewShader
mov edx, 9
lea rcx, [rsp + 0x40]
call fcn.140005c70
lea r9, [rbp + 0xe0]
xor ecx, ecx
mov dword [rbp + 0xe4], 0x2e44946f
mov dword [rbp + 0xe0], 0x2d59fc07
nop dword [rax]
nop word [rax + rax]
mov eax, dword [r9]
mov edx, ecx
shl edx, 6
mov r8d, ecx
shr r8d, 2
add eax, 0x9e3779b9
add eax, edx
add eax, r8d
xor ecx, eax
add r9, 4
lea rax, [rbp + 0xe8]
cmp r9, rax
jne 0x140148840
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
lea r9, reloc.WS2_32.dll_accept
lea r8, [0x1402dc708]
call fcn.140160c20
nop
lea rcx, [rbp + 0xc0]
call fcn.1400050e0
lea rcx, [rbp + 0xa0]
call fcn.1400050e0
lea rcx, [rbp + 0x80]
call fcn.14000d450
lea rcx, [rbp + 0x68]
call fcn.140156260
lea rcx, [rbp + 0x50]
call fcn.140155f70
lea rcx, [rbp + 0x38]
call fcn.140153710
lea rcx, [rbp + 0x20]
call fcn.140156300
lea rcx, [rbp]
call fcn.1401537d0
lea rcx, [rbp - 0x38]
call fcn.140156260
lea rcx, [rbp - 0x58]
call fcn.1400050e0
lea rcx, [rbp - 0x80]
call fcn.1400050e0
lea rcx, [rsp + 0x60]
call fcn.1400050e0
lea rcx, [rsp + 0x40]
call fcn.1400050e0
mov rcx, qword [rbp + 0xe8]
xor rcx, rsp
call fcn.140244f00
mov rbx, qword [rsp + 0x200]
add rsp, 0x1f0
pop rbp
ret

Function at 0x140148930
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x100
mov rax, qword [0x1402d4040]
xor rax, rsp
mov qword [rsp + 0xf8], rax
lea rcx, [rsp + 0x40]
call fcn.14014fd60
nop
mov rax, qword [rsp + 0x58]
cmp rax, 9
jb 0x140148994
lea rbx, [rsp + 0x40]
cmp rax, 0xf
cmova rbx, qword [rsp + 0x40]
mov qword [rsp + 0x50], 9
mov r8d, 9
lea rdx, str.NewStruct
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 9], 0
jmp 0x1401489aa
lea r9, str.NewStruct
mov edx, 9
lea rcx, [rsp + 0x40]
call fcn.140005c70
lea r9, [rsp + 0xf0]
xor ecx, ecx
mov dword [rsp + 0xf4], 0xc7625013
mov dword [rsp + 0xf0], 0x2d59fc07
nop word [rax + rax]
mov eax, dword [r9]
mov edx, ecx
shl edx, 6
mov r8d, ecx
shr r8d, 2
add eax, 0x9e3779b9
add eax, edx
add eax, r8d
xor ecx, eax
add r9, 4
lea rax, [rsp + 0xf8]
cmp r9, rax
jne 0x1401489d0
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
lea r9, reloc.WS2_32.dll_accept
lea r8, [0x1402dc720]
call fcn.1401618a0
nop
lea rcx, [rsp + 0xd0]
call fcn.1400050e0
lea rcx, [rsp + 0xb0]
call fcn.1400050e0
lea rcx, [rsp + 0x90]
call fcn.1400050e0
lea rcx, [rsp + 0x68]
call fcn.1401563d0
lea rcx, [rsp + 0x40]
call fcn.1400050e0
mov rcx, qword [rsp + 0xf8]
xor rcx, rsp
call fcn.140244f00
add rsp, 0x100
pop rbx
ret
Function at 0x140148a80
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0xc0
mov rax, qword [0x1402d4040]
xor rax, rsp
mov qword [rsp + 0xb8], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x50], xmm1
xor r8d, r8d
lea rdx, [0x140262727]
lea rcx, [rsp + 0x40]
call fcn.140007c30
nop
xor ebx, ebx
mov dword [rsp + 0x60], ebx
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], rbx
mov qword [rsp + 0x80], rbx
xor r8d, r8d
lea rdx, [0x140262727]
lea rcx, [rsp + 0x68]
call fcn.140007c30
mov qword [rsp + 0x88], rbx
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x90], xmm0
mov byte [rsp + 0xa0], 1
mov dword [rsp + 0xa4], ebx
mov word [rsp + 0xa8], bx
mov dword [rsp + 0xb0], 0x2d59fc07
mov dword [rsp + 0xb4], 0xfe688a01
lea r8, [rsp + 0xb0]
nop dword [rax]
mov eax, dword [r8]
mov ecx, ebx
shl ecx, 6
mov edx, ebx
shr edx, 2
add eax, 0x9e3779b9
add eax, ecx
add eax, edx
xor ebx, eax
add r8, 4
lea rax, [rsp + 0xb8]
cmp r8, rax
jne 0x140148b40
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
lea r9, reloc.WS2_32.dll_accept
lea r8, [0x1402dc738]
call fcn.140162540
nop
lea rcx, [rsp + 0x88]
call fcn.1401537d0
lea rcx, [rsp + 0x68]
call fcn.1400050e0
lea rcx, [rsp + 0x40]
call fcn.1400050e0
mov rcx, qword [rsp + 0xb8]
xor rcx, rsp
call fcn.140244f00
add rsp, 0xc0
pop rbx
ret