joyce8/EMBER2024-capa huggingface dataset:
Function at 0x7ff794c59030
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
mov r9, rcx
mov qword [rsp + 0x28], rdx
xor edx, edx
cmp byte [rcx + 0x2a], dl
je 0x7ff794c59066
mov ecx, edx
mov r8d, 0x48bc
lea eax, [r8 + rcx]
xor word [r9 + rcx*2], ax
inc rcx
cmp rcx, 0x14
jb 0x7ff794c59050
mov byte [r9 + 0x2a], dl
lea rcx, [r9 + 0x28]
mov qword [rbx], rdx
mov qword [rbx + 0x10], rdx
mov qword [rbx + 0x18], 7
mov word [rbx], dx
cmp r9, rcx
je 0x7ff794c5908e
mov edx, 0x14
mov rcx, rbx
call fcn.7ff794c5dcf0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x7ff794c590a0
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rsi
push rdi
sub rsp, 0x50
mov rbx, rdx
mov rdi, rcx
mov qword [rsp + 0x48], rcx
xor esi, esi
cmp byte [r8 + 0x2e], sil
je 0x7ff794c590e5
mov ecx, esi
mov edx, 0x48bc
nop dword [rax]
nop word [rax + rax]
lea eax, [rdx + rcx]
xor word [r8 + rcx*2], ax
inc rcx
cmp rcx, 0x16
jb 0x7ff794c590d0
mov byte [r8 + 0x2e], sil
lea rax, [r8 + 0x2c]
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x40], 7
mov word [rsp + 0x28], si
cmp r8, rax
je 0x7ff794c59119
mov r9, r8
mov edx, 0x16
lea rcx, [rsp + 0x28]
call fcn.7ff794c5dcf0
nop
mov r9, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 8
jb 0x7ff794c59127
mov rbx, qword [rbx]
mov r8, rbx
lea rcx, [rsp + 0x28]
call fcn.7ff794c5e530
mov qword [rdi], rsi
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
movups xmm0, xmmword [rax]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x7ff794c591a1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff794c5919c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff794c5919c
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff794c61b74
mov rax, rdi
add rsp, 0x50
pop rdi
pop rsi
pop rbx
ret
Function at 0x7ff794c591b0
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rsi
push rdi
sub rsp, 0x50
mov rbx, rdx
mov rdi, rcx
mov qword [rsp + 0x48], rcx
xor esi, esi
cmp byte [r8 + 0x26], sil
je 0x7ff794c591f5
mov ecx, esi
mov edx, 0x48bc
nop dword [rax]
nop word [rax + rax]
lea eax, [rdx + rcx]
xor word [r8 + rcx*2], ax
inc rcx
cmp rcx, 0x12
jb 0x7ff794c591e0
mov byte [r8 + 0x26], sil
lea rax, [r8 + 0x24]
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x40], 7
mov word [rsp + 0x28], si
cmp r8, rax
je 0x7ff794c59229
mov r9, r8
mov edx, 0x12
lea rcx, [rsp + 0x28]
call fcn.7ff794c5dcf0
nop
mov r9, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 8
jb 0x7ff794c59237
mov rbx, qword [rbx]
mov r8, rbx
lea rcx, [rsp + 0x28]
call fcn.7ff794c5e530
mov qword [rdi], rsi
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
movups xmm0, xmmword [rax]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x7ff794c592b1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff794c592ac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff794c592ac
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff794c61b74
mov rax, rdi
add rsp, 0x50
pop rdi
pop rsi
pop rbx
ret

Function at 0x7ff794c592c0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
mov r9, rcx
mov qword [rsp + 0x28], rdx
xor edx, edx
cmp byte [rcx + 0x26], dl
je 0x7ff794c592f6
mov ecx, edx
mov r8d, 0x48bc
lea eax, [r8 + rcx]
xor word [r9 + rcx*2], ax
inc rcx
cmp rcx, 0x12
jb 0x7ff794c592e0
mov byte [r9 + 0x26], dl
lea rcx, [r9 + 0x24]
mov qword [rbx], rdx
mov qword [rbx + 0x10], rdx
mov qword [rbx + 0x18], 7
mov word [rbx], dx
cmp r9, rcx
je 0x7ff794c5931e
mov edx, 0x12
mov rcx, rbx
call fcn.7ff794c5dcf0
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x7ff794c59330
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rsi
push rdi
sub rsp, 0x50
mov rbx, rdx
mov rdi, rcx
mov qword [rsp + 0x48], rcx
xor esi, esi
cmp byte [r8 + 0x2c], sil
je 0x7ff794c59375
mov ecx, esi
mov edx, 0x48bc
nop dword [rax]
nop word [rax + rax]
lea eax, [rdx + rcx]
xor word [r8 + rcx*2], ax
inc rcx
cmp rcx, 0x15
jb 0x7ff794c59360
mov byte [r8 + 0x2c], sil
lea rax, [r8 + 0x2a]
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x40], 7
mov word [rsp + 0x28], si
cmp r8, rax
je 0x7ff794c593a9
mov r9, r8
mov edx, 0x15
lea rcx, [rsp + 0x28]
call fcn.7ff794c5dcf0
nop
mov r9, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 8
jb 0x7ff794c593b7
mov rbx, qword [rbx]
mov r8, rbx
lea rcx, [rsp + 0x28]
call fcn.7ff794c5e530
mov qword [rdi], rsi
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
movups xmm0, xmmword [rax]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x7ff794c59431
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff794c5942c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff794c5942c
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff794c61b74
mov rax, rdi
add rsp, 0x50
pop rdi
pop rsi
pop rbx
ret

Function at 0x7ff794c59440
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
mov r9, rcx
mov qword [rsp + 0x28], rdx
xor edx, edx
cmp byte [rcx + 0x2c], dl
je 0x7ff794c59476
mov ecx, edx
mov r8d, 0x48bc
lea eax, [r8 + rcx]
xor word [r9 + rcx*2], ax
inc rcx
cmp rcx, 0x15
jb 0x7ff794c59460
mov byte [r9 + 0x2c], dl
lea rcx, [r9 + 0x2a]
mov qword [rbx], rdx
mov qword [rbx + 0x10], rdx
mov qword [rbx + 0x18], 7
mov word [rbx], dx
cmp r9, rcx
je 0x7ff794c5949e
mov edx, 0x15
mov rcx, rbx
call fcn.7ff794c5dcf0
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x7ff794c594b0
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rsi
push rdi
sub rsp, 0x50
mov rbx, rdx
mov rdi, rcx
mov qword [rsp + 0x48], rcx
xor esi, esi
cmp byte [r8 + 0xc6], sil
je 0x7ff794c594f8
mov ecx, esi
mov edx, 0x48bc
nop word [rax + rax]
lea eax, [rdx + rcx]
xor word [r8 + rcx*2], ax
inc rcx
cmp rcx, 0x62
jb 0x7ff794c594e0
mov byte [r8 + 0xc6], sil
lea rax, [r8 + 0xc4]
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x40], 7
mov word [rsp + 0x28], si
cmp r8, rax
je 0x7ff794c5952f
mov r9, r8
mov edx, 0x62
lea rcx, [rsp + 0x28]
call fcn.7ff794c5dcf0
nop
mov r9, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 8
jb 0x7ff794c5953d
mov rbx, qword [rbx]
mov r8, rbx
lea rcx, [rsp + 0x28]
call fcn.7ff794c5e530
mov qword [rdi], rsi
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
movups xmm0, xmmword [rax]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x7ff794c595b7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff794c595b2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff794c595b2
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff794c61b74
mov rax, rdi
add rsp, 0x50
pop rdi
pop rsi
pop rbx
ret

Function at 0x7ff794c596a0
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rsi
push rdi
sub rsp, 0x50
mov rbx, rdx
mov rdi, rcx
mov qword [rsp + 0x48], rcx
xor esi, esi
cmp byte [r8 + 0x1c], sil
je 0x7ff794c596e5
mov ecx, esi
mov edx, 0x48bc
nop dword [rax]
nop word [rax + rax]
lea eax, [rdx + rcx]
xor word [r8 + rcx*2], ax
inc rcx
cmp rcx, 0xd
jb 0x7ff794c596d0
mov byte [r8 + 0x1c], sil
lea rax, [r8 + 0x1a]
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x40], 7
mov word [rsp + 0x28], si
cmp r8, rax
je 0x7ff794c59719
mov r9, r8
mov edx, 0xd
lea rcx, [rsp + 0x28]
call fcn.7ff794c5dcf0
nop
mov r9, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 8
jb 0x7ff794c59727
mov rbx, qword [rbx]
mov r8, rbx
lea rcx, [rsp + 0x28]
call fcn.7ff794c5e530
mov qword [rdi], rsi
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
movups xmm0, xmmword [rax]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x7ff794c597a1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff794c5979c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff794c5979c
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.7ff794c61b74
mov rax, rdi
add rsp, 0x50
pop rdi
pop rsi
pop rbx
ret
Function at 0x7ff794c5a440
Capabilities:
Get session user name

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x250
mov rax, qword [0x7ff794c70008]
xor rax, rsp
mov qword [rsp + 0x240], rax
mov rdi, rcx
mov qword [rsp + 0x28], rcx
xor esi, esi
mov dword [rsp + 0x28], 0x101
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x30]
call qword [sym.imp.advapi32.dll_GetUserNameW]
mov qword [rdi], rsi
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], 7
mov word [rdi], si
lea rax, [rsp + 0x30]
mov rdx, 0xffffffffffffffff
inc rdx
cmp word [rax + rdx*2], 0
jne 0x7ff794c5a4a4
mov rcx, rdi
cmp rdx, 7
ja 0x7ff794c5a4d2
mov qword [rdi + 0x10], rdx
lea rbx, [rdx + rdx]
mov r8, rbx
lea rdx, [rsp + 0x30]
call sub.VCRUNTIME140.dll_memcpy_1
mov word [rbx + rdi], si
jmp 0x7ff794c5a4dc
lea r9, [rsp + 0x30]
call fcn.7ff794c5dcf0
mov rax, rdi
mov rcx, qword [rsp + 0x240]
xor rcx, rsp
call fcn.7ff794c61b10
lea r11, [rsp + 0x250]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x7ff794c5ba40
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x40
mov rbx, rdx
mov r9, rcx
mov qword [rsp + 0x30], rdx
xor edx, edx
cmp byte [rcx + 0x62], dl
je 0x7ff794c5ba76
mov ecx, edx
mov r8d, 0x48bc
lea eax, [r8 + rcx]
xor word [r9 + rcx*2], ax
inc rcx
cmp rcx, 0x30
jb 0x7ff794c5ba60
mov byte [r9 + 0x62], dl
lea rcx, [r9 + 0x60]
mov qword [rbx], rdx
mov qword [rbx + 0x10], rdx
mov qword [rbx + 0x18], 7
mov word [rbx], dx
cmp r9, rcx
je 0x7ff794c5ba9e
mov edx, 0x30
mov rcx, rbx
call fcn.7ff794c5dcf0
mov rax, rbx
add rsp, 0x40
pop rbx
ret

Function at 0x7ff794c5bab0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x40
mov rbx, rdx
mov r9, rcx
mov qword [rsp + 0x30], rdx
xor edx, edx
cmp byte [rcx + 0x54], dl
je 0x7ff794c5bae6
mov ecx, edx
mov r8d, 0x48bc
lea eax, [r8 + rcx]
xor word [r9 + rcx*2], ax
inc rcx
cmp rcx, 0x29
jb 0x7ff794c5bad0
mov byte [r9 + 0x54], dl
lea rcx, [r9 + 0x52]
mov qword [rbx], rdx
mov qword [rbx + 0x10], rdx
mov qword [rbx + 0x18], 7
mov word [rbx], dx
cmp r9, rcx
je 0x7ff794c5bb0e
mov edx, 0x29
mov rcx, rbx
call fcn.7ff794c5dcf0
mov rax, rbx
add rsp, 0x40
pop rbx
ret

Function at 0x7ff794c5bb20
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x40
mov rbx, rdx
mov r9, rcx
mov qword [rsp + 0x30], rdx
xor edx, edx
cmp byte [rcx + 0x64], dl
je 0x7ff794c5bb56
mov ecx, edx
mov r8d, 0x48bc
lea eax, [r8 + rcx]
xor word [r9 + rcx*2], ax
inc rcx
cmp rcx, 0x31
jb 0x7ff794c5bb40
mov byte [r9 + 0x64], dl
lea rcx, [r9 + 0x62]
mov qword [rbx], rdx
mov qword [rbx + 0x10], rdx
mov qword [rbx + 0x18], 7
mov word [rbx], dx
cmp r9, rcx
je 0x7ff794c5bb7e
mov edx, 0x31
mov rcx, rbx
call fcn.7ff794c5dcf0
mov rax, rbx
add rsp, 0x40
pop rbx
ret

Function at 0x7ff794c5bb90
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x40
mov rbx, rdx
mov r9, rcx
mov qword [rsp + 0x30], rdx
xor edx, edx
cmp byte [rcx + 0x78], dl
je 0x7ff794c5bbc6
mov ecx, edx
mov r8d, 0x48bc
lea eax, [r8 + rcx]
xor word [r9 + rcx*2], ax
inc rcx
cmp rcx, 0x3b
jb 0x7ff794c5bbb0
mov byte [r9 + 0x78], dl
lea rcx, [r9 + 0x76]
mov qword [rbx], rdx
mov qword [rbx + 0x10], rdx
mov qword [rbx + 0x18], 7
mov word [rbx], dx
cmp r9, rcx
je 0x7ff794c5bbee
mov edx, 0x3b
mov rcx, rbx
call fcn.7ff794c5dcf0
mov rax, rbx
add rsp, 0x40
pop rbx
ret

Function at 0x7ff794c5bc00
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x40
mov rbx, rdx
mov r9, rcx
mov qword [rsp + 0x30], rdx
xor edx, edx
cmp byte [rcx + 0xc4], dl
je 0x7ff794c5bc49
mov ecx, edx
mov r8d, 0x48bc
nop dword [rax]
nop word [rax + rax]
lea eax, [r8 + rcx]
xor word [r9 + rcx*2], ax
inc rcx
cmp rcx, 0x61
jb 0x7ff794c5bc30
mov byte [r9 + 0xc4], dl
lea rcx, [r9 + 0xc2]
mov qword [rbx], rdx
mov qword [rbx + 0x10], rdx
mov qword [rbx + 0x18], 7
mov word [rbx], dx
cmp r9, rcx
je 0x7ff794c5bc74
mov edx, 0x61
mov rcx, rbx
call fcn.7ff794c5dcf0
mov rax, rbx
add rsp, 0x40
pop rbx
ret
Function at 0x7ff794c5bc80
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x40
mov rbx, rdx
mov r9, rcx
mov qword [rsp + 0x30], rdx
xor edx, edx
cmp byte [rcx + 0x94], dl
je 0x7ff794c5bcc9
mov ecx, edx
mov r8d, 0x48bc
nop dword [rax]
nop word [rax + rax]
lea eax, [r8 + rcx]
xor word [r9 + rcx*2], ax
inc rcx
cmp rcx, 0x49
jb 0x7ff794c5bcb0
mov byte [r9 + 0x94], dl
lea rcx, [r9 + 0x92]
mov qword [rbx], rdx
mov qword [rbx + 0x10], rdx
mov qword [rbx + 0x18], 7
mov word [rbx], dx
cmp r9, rcx
je 0x7ff794c5bcf4
mov edx, 0x49
mov rcx, rbx
call fcn.7ff794c5dcf0
mov rax, rbx
add rsp, 0x40
pop rbx
ret

Function at 0x7ff794c5bd00
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x40
mov rbx, rdx
mov r9, rcx
mov qword [rsp + 0x30], rdx
xor edx, edx
cmp byte [rcx + 0xb0], dl
je 0x7ff794c5bd49
mov ecx, edx
mov r8d, 0x48bc
nop dword [rax]
nop word [rax + rax]
lea eax, [r8 + rcx]
xor word [r9 + rcx*2], ax
inc rcx
cmp rcx, 0x57
jb 0x7ff794c5bd30
mov byte [r9 + 0xb0], dl
lea rcx, [r9 + 0xae]
mov qword [rbx], rdx
mov qword [rbx + 0x10], rdx
mov qword [rbx + 0x18], 7
mov word [rbx], dx
cmp r9, rcx
je 0x7ff794c5bd74
mov edx, 0x57
mov rcx, rbx
call fcn.7ff794c5dcf0
mov rax, rbx
add rsp, 0x40
pop rbx
ret

Function at 0x7ff794c5bd80
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x40
mov rbx, rdx
mov r9, rcx
mov qword [rsp + 0x30], rdx
xor edx, edx
cmp byte [rcx + 0x92], dl
je 0x7ff794c5bdc9
mov ecx, edx
mov r8d, 0x48bc
nop dword [rax]
nop word [rax + rax]
lea eax, [r8 + rcx]
xor word [r9 + rcx*2], ax
inc rcx
cmp rcx, 0x48
jb 0x7ff794c5bdb0
mov byte [r9 + 0x92], dl
lea rcx, [r9 + 0x90]
mov qword [rbx], rdx
mov qword [rbx + 0x10], rdx
mov qword [rbx + 0x18], 7
mov word [rbx], dx
cmp r9, rcx
je 0x7ff794c5bdf4
mov edx, 0x48
mov rcx, rbx
call fcn.7ff794c5dcf0
mov rax, rbx
add rsp, 0x40
pop rbx
ret

Function at 0x7ff794c5be00
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x40
mov rbx, rdx
mov r9, rcx
mov qword [rsp + 0x30], rdx
xor edx, edx
cmp byte [rcx + 0x80], dl
je 0x7ff794c5be49
mov ecx, edx
mov r8d, 0x48bc
nop dword [rax]
nop word [rax + rax]
lea eax, [r8 + rcx]
xor word [r9 + rcx*2], ax
inc rcx
cmp rcx, 0x3f
jb 0x7ff794c5be30
mov byte [r9 + 0x80], dl
lea rcx, [r9 + 0x7e]
mov qword [rbx], rdx
mov qword [rbx + 0x10], rdx
mov qword [rbx + 0x18], 7
mov word [rbx], dx
cmp r9, rcx
je 0x7ff794c5be71
mov edx, 0x3f
mov rcx, rbx
call fcn.7ff794c5dcf0
mov rax, rbx
add rsp, 0x40
pop rbx
ret

Function at 0x7ff794c5be80
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x40
mov rbx, rdx
mov r9, rcx
mov qword [rsp + 0x30], rdx
xor edx, edx
cmp byte [rcx + 0x58], dl
je 0x7ff794c5beb6
mov ecx, edx
mov r8d, 0x48bc
lea eax, [r8 + rcx]
xor word [r9 + rcx*2], ax
inc rcx
cmp rcx, 0x2b
jb 0x7ff794c5bea0
mov byte [r9 + 0x58], dl
lea rcx, [r9 + 0x56]
mov qword [rbx], rdx
mov qword [rbx + 0x10], rdx
mov qword [rbx + 0x18], 7
mov word [rbx], dx
cmp r9, rcx
je 0x7ff794c5bede
mov edx, 0x2b
mov rcx, rbx
call fcn.7ff794c5dcf0
mov rax, rbx
add rsp, 0x40
pop rbx
ret
Function at 0x7ff794c5bef0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x40
mov rbx, rdx
mov r9, rcx
mov qword [rsp + 0x30], rdx
xor edx, edx
cmp byte [rcx + 0x76], dl
je 0x7ff794c5bf26
mov ecx, edx
mov r8d, 0x48bc
lea eax, [r8 + rcx]
xor word [r9 + rcx*2], ax
inc rcx
cmp rcx, 0x3a
jb 0x7ff794c5bf10
mov byte [r9 + 0x76], dl
lea rcx, [r9 + 0x74]
mov qword [rbx], rdx
mov qword [rbx + 0x10], rdx
mov qword [rbx + 0x18], 7
mov word [rbx], dx
cmp r9, rcx
je 0x7ff794c5bf4e
mov edx, 0x3a
mov rcx, rbx
call fcn.7ff794c5dcf0
mov rax, rbx
add rsp, 0x40
pop rbx
ret

Function at 0x7ff794c5bf60
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x40
mov rbx, rdx
mov r9, rcx
mov qword [rsp + 0x30], rdx
xor edx, edx
cmp byte [rcx + 0x68], dl
je 0x7ff794c5bf96
mov ecx, edx
mov r8d, 0x48bc
lea eax, [r8 + rcx]
xor word [r9 + rcx*2], ax
inc rcx
cmp rcx, 0x33
jb 0x7ff794c5bf80
mov byte [r9 + 0x68], dl
lea rcx, [r9 + 0x66]
mov qword [rbx], rdx
mov qword [rbx + 0x10], rdx
mov qword [rbx + 0x18], 7
mov word [rbx], dx
cmp r9, rcx
je 0x7ff794c5bfbe
mov edx, 0x33
mov rcx, rbx
call fcn.7ff794c5dcf0
mov rax, rbx
add rsp, 0x40
pop rbx
ret

Function at 0x7ff794c5bfd0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x40
mov rbx, rdx
mov r9, rcx
mov qword [rsp + 0x30], rdx
xor edx, edx
cmp byte [rcx + 0x5e], dl
je 0x7ff794c5c006
mov ecx, edx
mov r8d, 0x48bc
lea eax, [r8 + rcx]
xor word [r9 + rcx*2], ax
inc rcx
cmp rcx, 0x2e
jb 0x7ff794c5bff0
mov byte [r9 + 0x5e], dl
lea rcx, [r9 + 0x5c]
mov qword [rbx], rdx
mov qword [rbx + 0x10], rdx
mov qword [rbx + 0x18], 7
mov word [rbx], dx
cmp r9, rcx
je 0x7ff794c5c02e
mov edx, 0x2e
mov rcx, rbx
call fcn.7ff794c5dcf0
mov rax, rbx
add rsp, 0x40
pop rbx
ret

Function at 0x7ff794c5c040
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x40
mov rbx, rdx
mov r9, rcx
mov qword [rsp + 0x30], rdx
xor edx, edx
cmp byte [rcx + 0x7c], dl
je 0x7ff794c5c076
mov ecx, edx
mov r8d, 0x48bc
lea eax, [r8 + rcx]
xor word [r9 + rcx*2], ax
inc rcx
cmp rcx, 0x3d
jb 0x7ff794c5c060
mov byte [r9 + 0x7c], dl
lea rcx, [r9 + 0x7a]
mov qword [rbx], rdx
mov qword [rbx + 0x10], rdx
mov qword [rbx + 0x18], 7
mov word [rbx], dx
cmp r9, rcx
je 0x7ff794c5c09e
mov edx, 0x3d
mov rcx, rbx
call fcn.7ff794c5dcf0
mov rax, rbx
add rsp, 0x40
pop rbx
ret

Function at 0x7ff794c5c0b0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x40
mov rbx, rdx
mov r9, rcx
mov qword [rsp + 0x30], rdx
xor edx, edx
cmp byte [rcx + 0xaa], dl
je 0x7ff794c5c0f9
mov ecx, edx
mov r8d, 0x48bc
nop dword [rax]
nop word [rax + rax]
lea eax, [r8 + rcx]
xor word [r9 + rcx*2], ax
inc rcx
cmp rcx, 0x54
jb 0x7ff794c5c0e0
mov byte [r9 + 0xaa], dl
lea rcx, [r9 + 0xa8]
mov qword [rbx], rdx
mov qword [rbx + 0x10], rdx
mov qword [rbx + 0x18], 7
mov word [rbx], dx
cmp r9, rcx
je 0x7ff794c5c124
mov edx, 0x54
mov rcx, rbx
call fcn.7ff794c5dcf0
mov rax, rbx
add rsp, 0x40
pop rbx
ret
Function at 0x7ff794c5c130
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x40
mov rbx, rdx
mov r9, rcx
mov qword [rsp + 0x30], rdx
xor edx, edx
cmp byte [rcx + 0x9e], dl
je 0x7ff794c5c179
mov ecx, edx
mov r8d, 0x48bc
nop dword [rax]
nop word [rax + rax]
lea eax, [r8 + rcx]
xor word [r9 + rcx*2], ax
inc rcx
cmp rcx, 0x4e
jb 0x7ff794c5c160
mov byte [r9 + 0x9e], dl
lea rcx, [r9 + 0x9c]
mov qword [rbx], rdx
mov qword [rbx + 0x10], rdx
mov qword [rbx + 0x18], 7
mov word [rbx], dx
cmp r9, rcx
je 0x7ff794c5c1a4
mov edx, 0x4e
mov rcx, rbx
call fcn.7ff794c5dcf0
mov rax, rbx
add rsp, 0x40
pop rbx
ret

Function at 0x7ff794c5c1b0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x40
mov rbx, rdx
mov r9, rcx
mov qword [rsp + 0x30], rdx
xor edx, edx
cmp byte [rcx + 0xac], dl
je 0x7ff794c5c1f9
mov ecx, edx
mov r8d, 0x48bc
nop dword [rax]
nop word [rax + rax]
lea eax, [r8 + rcx]
xor word [r9 + rcx*2], ax
inc rcx
cmp rcx, 0x55
jb 0x7ff794c5c1e0
mov byte [r9 + 0xac], dl
lea rcx, [r9 + 0xaa]
mov qword [rbx], rdx
mov qword [rbx + 0x10], rdx
mov qword [rbx + 0x18], 7
mov word [rbx], dx
cmp r9, rcx
je 0x7ff794c5c224
mov edx, 0x55
mov rcx, rbx
call fcn.7ff794c5dcf0
mov rax, rbx
add rsp, 0x40
pop rbx
ret

Function at 0x7ff794c5c230
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x40
mov rbx, rdx
mov r9, rcx
mov qword [rsp + 0x30], rdx
xor edx, edx
cmp byte [rcx + 0x90], dl
je 0x7ff794c5c279
mov ecx, edx
mov r8d, 0x48bc
nop dword [rax]
nop word [rax + rax]
lea eax, [r8 + rcx]
xor word [r9 + rcx*2], ax
inc rcx
cmp rcx, 0x47
jb 0x7ff794c5c260
mov byte [r9 + 0x90], dl
lea rcx, [r9 + 0x8e]
mov qword [rbx], rdx
mov qword [rbx + 0x10], rdx
mov qword [rbx + 0x18], 7
mov word [rbx], dx
cmp r9, rcx
je 0x7ff794c5c2a4
mov edx, 0x47
mov rcx, rbx
call fcn.7ff794c5dcf0
mov rax, rbx
add rsp, 0x40
pop rbx
ret

Function at 0x7ff794c5c2b0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x40
mov rbx, rdx
mov r9, rcx
mov qword [rsp + 0x30], rdx
xor edx, edx
cmp byte [rcx + 0x86], dl
je 0x7ff794c5c2f9
mov ecx, edx
mov r8d, 0x48bc
nop dword [rax]
nop word [rax + rax]
lea eax, [r8 + rcx]
xor word [r9 + rcx*2], ax
inc rcx
cmp rcx, 0x42
jb 0x7ff794c5c2e0
mov byte [r9 + 0x86], dl
lea rcx, [r9 + 0x84]
mov qword [rbx], rdx
mov qword [rbx + 0x10], rdx
mov qword [rbx + 0x18], 7
mov word [rbx], dx
cmp r9, rcx
je 0x7ff794c5c324
mov edx, 0x42
mov rcx, rbx
call fcn.7ff794c5dcf0
mov rax, rbx
add rsp, 0x40
pop rbx
ret

Function at 0x7ff794c5c330
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x40
mov rbx, rdx
mov r9, rcx
mov qword [rsp + 0x30], rdx
xor edx, edx
cmp byte [rcx + 0x88], dl
je 0x7ff794c5c379
mov ecx, edx
mov r8d, 0x48bc
nop dword [rax]
nop word [rax + rax]
lea eax, [r8 + rcx]
xor word [r9 + rcx*2], ax
inc rcx
cmp rcx, 0x43
jb 0x7ff794c5c360
mov byte [r9 + 0x88], dl
lea rcx, [r9 + 0x86]
mov qword [rbx], rdx
mov qword [rbx + 0x10], rdx
mov qword [rbx + 0x18], 7
mov word [rbx], dx
cmp r9, rcx
je 0x7ff794c5c3a4
mov edx, 0x43
mov rcx, rbx
call fcn.7ff794c5dcf0
mov rax, rbx
add rsp, 0x40
pop rbx
ret