joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1800109ac
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
sub rsp, 0xb8
mov rsi, r8
mov rdi, rdx
mov rdx, qword [0x18001a010]
test rdx, rdx
jne 0x180010a3e
xor eax, eax
mov word [rsp + 0x30], ax
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x180016b20]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180016b30]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180016b40]
movaps xmmword [rdx + 0x1e], xmm0
movabs rcx, 0x47004300720043
mov qword [rdx + 0x2e], rcx
mov dword [rdx + 0x36], 0x26004b
mov word [rdx + 0x72], ax
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x26
inc rax
cmp rax, 0x3a
jne 0x180010a12
mov word [rsp + 0xb4], 0
lea rcx, [rsp + 0x30]
call fcn.180003922
mov rdx, rax
mov qword [0x18001a010], rax
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], rsi
mov rcx, qword [0x180019de0]
test rcx, rcx
je 0x180010a8c
mov rax, qword [rcx]
mov rax, qword [rax + 0x268]
lea r8, [rsp + 0x30]
mov qword [r8], rax
mov qword [r8 + 8], 0
mov qword [rsp + 0x20], r8
lea rsi, [rsp + 0x40]
mov r8, rsi
xor r9d, r9d
call fcn.1800147b0
cmp byte [rsi + 0x10], 0
setne al
jmp 0x180010a8c
and al, 1
add rsp, 0xb8
pop rdi
pop rsi
ret

Function at 0x180010a98
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
sub rsp, 0x78
mov rsi, rdx
mov rdx, qword [0x18001a018]
test rdx, rdx
jne 0x180010b07
xor eax, eax
mov word [rsp + 0x2e], ax
lea rdx, [rsp + 0x32]
movaps xmm0, xmmword [0x180016b50]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180016b60]
movaps xmmword [rdx + 0xe], xmm0
mov word [rdx + 0x1e], 0x27
mov word [rdx + 0x3e], ax
mov eax, 1
xor byte [rsp + rax*2 + 0x30], 0x27
inc rax
cmp rax, 0x20
jne 0x180010ade
mov word [rsp + 0x70], 0
lea rcx, [rsp + 0x2e]
call fcn.180003922
mov rdx, rax
mov qword [0x18001a018], rax
test rsi, rsi
je 0x180010b46
mov rax, qword [rsi]
mov rax, qword [rax + 0x268]
lea rcx, [rsp + 0x30]
mov qword [rcx], rax
mov qword [rcx + 8], 0
mov qword [rsp + 0x20], rcx
lea rdi, [rsp + 0x2e]
mov rcx, rsi
mov r8, rdi
xor r9d, r9d
call fcn.1800147b0
cmp byte [rdi], 0
setne al
jmp 0x180010b46
and al, 1
add rsp, 0x78
pop rdi
pop rsi
ret

Function at 0x180010b50
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
sub rsp, 0x78
mov rsi, rdx
mov rdx, qword [0x18001a020]
test rdx, rdx
jne 0x180010bbf
xor eax, eax
mov word [rsp + 0x2e], ax
lea rdx, [rsp + 0x32]
movaps xmm0, xmmword [0x180016b70]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [str.fALJFGB]
movaps xmmword [rdx + 0xe], xmm0
mov word [rdx + 0x1e], 8
mov word [rdx + 0x3e], ax
mov eax, 1
xor byte [rsp + rax*2 + 0x30], 8
inc rax
cmp rax, 0x20
jne 0x180010b96
mov word [rsp + 0x70], 0
lea rcx, [rsp + 0x2e]
call fcn.180003922
mov rdx, rax
mov qword [0x18001a020], rax
test rsi, rsi
je 0x180010bfe
mov rax, qword [rsi]
mov rax, qword [rax + 0x268]
lea rcx, [rsp + 0x30]
mov qword [rcx], rax
mov qword [rcx + 8], 0
mov qword [rsp + 0x20], rcx
lea rdi, [rsp + 0x2e]
mov rcx, rsi
mov r8, rdi
xor r9d, r9d
call fcn.1800147b0
cmp byte [rdi], 0
setne al
jmp 0x180010bfe
and al, 1
add rsp, 0x78
pop rdi
pop rsi
ret
Function at 0x180010c08
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
sub rsp, 0xa8
mov rsi, rdx
mov rdx, qword [0x18001a028]
test rdx, rdx
jne 0x180010c8f
xor eax, eax
mov word [rsp + 0x28], ax
lea rdx, [rsp + 0x32]
movaps xmm0, xmmword [0x180016b90]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180016ba0]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180016bb0]
movaps xmmword [rdx + 0x1e], xmm0
mov dword [rdx + 0x2e], 0x2c002d
mov word [rdx + 0x32], 0x42
mov word [rdx + 0x66], ax
mov eax, 1
xor byte [rsp + rax*2 + 0x30], 0x42
inc rax
cmp rax, 0x34
jne 0x180010c63
mov word [rsp + 0x98], 0
lea rcx, [rsp + 0x28]
call fcn.180003922
mov rdx, rax
mov qword [0x18001a028], rax
test rsi, rsi
je 0x180010ccb
mov rax, qword [rsi]
mov rax, qword [rax + 0x268]
lea rcx, [rsp + 0x30]
mov qword [rcx], rax
mov qword [rcx + 8], 0
mov qword [rsp + 0x20], rcx
lea rdi, [rsp + 0x28]
mov rcx, rsi
mov r8, rdi
xor r9d, r9d
call fcn.1800147b0
mov rax, qword [rdi]
jmp 0x180010ccb
add rsp, 0xa8
pop rdi
pop rsi
ret

Function at 0x180010cd6
Capabilities:
Encode data using xor

Disassembly:
push rsi
sub rsp, 0x90
mov rsi, rdx
mov rdx, qword [0x18001a030]
test rdx, rdx
jne 0x180010d5f
xor eax, eax
mov word [rsp + 0x2e], ax
lea rdx, [rsp + 0x32]
movaps xmm0, xmmword [0x180016bc0]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180016bd0]
movaps xmmword [rdx + 0xe], xmm0
movabs rcx, 0x5f007000460059
mov qword [rdx + 0x1e], rcx
mov dword [rdx + 0x26], 0x530044
mov word [rdx + 0x2a], 0x36
mov word [rdx + 0x56], ax
mov eax, 1
xor byte [rsp + rax*2 + 0x30], 0x36
inc rax
cmp rax, 0x2c
jne 0x180010d33
mov word [rsp + 0x88], 0
lea rcx, [rsp + 0x2e]
call fcn.180003922
mov rdx, rax
mov qword [0x18001a030], rax
mov byte [rsp + 0x2e], 0
test rsi, rsi
je 0x180010d98
mov rax, qword [rsi]
mov rax, qword [rax + 0x268]
lea rcx, [rsp + 0x30]
mov qword [rcx], rax
mov qword [rcx + 8], 0
mov qword [rsp + 0x20], rcx
lea r8, [rsp + 0x2e]
mov rcx, rsi
xor r9d, r9d
call fcn.1800147b0
nop
add rsp, 0x90
pop rsi
ret

Function at 0x180010da2
Capabilities:
Encode data using xor

Disassembly:
push rsi
sub rsp, 0x90
mov rsi, rdx
mov rdx, qword [0x18001a038]
test rdx, rdx
jne 0x180010e1b
xor eax, eax
mov word [rsp + 0x2e], ax
lea rdx, [rsp + 0x32]
movaps xmm0, xmmword [0x180016be0]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180016bf0]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180016c00]
movaps xmmword [rdx + 0x1e], xmm0
mov word [rdx + 0x5a], ax
mov eax, 1
xor byte [rsp + rax*2 + 0x30], 0x4a
inc rax
cmp rax, 0x2e
jne 0x180010def
mov word [rsp + 0x8c], 0
lea rcx, [rsp + 0x2e]
call fcn.180003922
mov rdx, rax
mov qword [0x18001a038], rax
mov byte [rsp + 0x2e], 0
test rsi, rsi
je 0x180010e54
mov rax, qword [rsi]
mov rax, qword [rax + 0x268]
lea rcx, [rsp + 0x30]
mov qword [rcx], rax
mov qword [rcx + 8], 0
mov qword [rsp + 0x20], rcx
lea r8, [rsp + 0x2e]
mov rcx, rsi
xor r9d, r9d
call fcn.1800147b0
nop
add rsp, 0x90
pop rsi
ret
Function at 0x180010e5e
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
sub rsp, 0x108
mov rdi, r8
mov rsi, rdx
mov rdx, qword [0x18001a040]
test rdx, rdx
jne 0x180010f0a
xor eax, eax
mov word [rsp + 0x30], ax
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x180016c10]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180016c20]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180016c30]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [0x180016c40]
movaps xmmword [rdx + 0x2e], xmm0
movaps xmm0, xmmword [0x180016c50]
movaps xmmword [rdx + 0x3e], xmm0
movaps xmm0, xmmword [0x180016c60]
movaps xmmword [rdx + 0x4e], xmm0
mov dword [rdx + 0x5e], 0x27005e
mov word [rdx + 0xc2], ax
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x27
inc rax
cmp rax, 0x62
jne 0x180010ede
mov word [rsp + 0x104], 0
lea rcx, [rsp + 0x30]
call fcn.180003922
mov rdx, rax
mov qword [0x18001a040], rax
xorps xmm0, xmm0
movaps xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 0
test rdi, rdi
je 0x180010f4f
mov rax, qword [rdi]
mov rax, qword [rax + 0x268]
lea rcx, [rsp + 0x30]
mov qword [rcx], rax
mov qword [rcx + 8], 0
mov qword [rsp + 0x20], rcx
lea r8, [rsp + 0x40]
mov rcx, rdi
xor r9d, r9d
call fcn.1800147b0
mov rax, qword [rsp + 0x50]
mov qword [rsi + 0x10], rax
movaps xmm0, xmmword [rsp + 0x40]
movups xmmword [rsi], xmm0
mov rax, rsi
add rsp, 0x108
pop rdi
pop rsi
ret

Function at 0x180010f6e
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
sub rsp, 0x98
mov rsi, rdx
mov rdx, qword [0x18001a048]
test rdx, rdx
jne 0x180010fef
xor eax, eax
mov word [rsp + 0x28], ax
lea rdx, [rsp + 0x32]
movaps xmm0, xmmword [0x180016c70]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180016c80]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [str.73__]
movaps xmmword [rdx + 0x1e], xmm0
mov dword [rdx + 0x2e], 0x520033
mov word [rdx + 0x62], ax
mov eax, 1
xor byte [rsp + rax*2 + 0x30], 0x52
inc rax
cmp rax, 0x32
jne 0x180010fc3
mov word [rsp + 0x94], 0
lea rcx, [rsp + 0x28]
call fcn.180003922
mov rdx, rax
mov qword [0x18001a048], rax
test rsi, rsi
je 0x18001102b
mov rax, qword [rsi]
mov rax, qword [rax + 0x268]
lea rcx, [rsp + 0x30]
mov qword [rcx], rax
mov qword [rcx + 8], 0
mov qword [rsp + 0x20], rcx
lea rdi, [rsp + 0x28]
mov rcx, rsi
mov r8, rdi
xor r9d, r9d
call fcn.1800147b0
mov rax, qword [rdi]
jmp 0x18001102b
add rsp, 0x98
pop rdi
pop rsi
ret
Function at 0x1800111da
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0xd8
cmp qword [0x18001a060], 0
jne 0x180011277
xor eax, eax
mov word [rsp + 0x2e], ax
lea rdx, [rsp + 0x32]
movaps xmm0, xmmword [0x180016d10]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180016d20]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180016d30]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [0x180016d40]
movaps xmmword [rdx + 0x2e], xmm0
movabs rcx, 0x41005b00770046
mov qword [rdx + 0x3e], rcx
mov dword [rdx + 0x46], 0x40005a
mov word [rdx + 0x4a], 0x34
mov word [rdx + 0x96], ax
mov eax, 1
xor byte [rsp + rax*2 + 0x30], 0x34
inc rax
cmp rax, 0x4c
jne 0x18001124e
mov word [rsp + 0xc8], 0
lea rcx, [rsp + 0x2e]
call fcn.180003922
mov qword [0x18001a060], rax
add rsp, 0xd8
ret

Function at 0x180011280
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
sub rsp, 0xc8
mov rsi, rdx
mov rdx, qword [0x18001a068]
test rdx, rdx
jne 0x180011320
xor eax, eax
mov word [rsp + 0x28], ax
lea rdx, [rsp + 0x32]
movaps xmm0, xmmword [0x180016d50]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180016d60]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180016d70]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [0x180016d80]
movaps xmmword [rdx + 0x2e], xmm0
movabs rcx, 0x4e004f00490054
mov qword [rdx + 0x3e], rcx
mov word [rdx + 0x46], 0x20
mov word [rdx + 0x8e], ax
mov eax, 1
xor byte [rsp + rax*2 + 0x30], 0x20
inc rax
cmp rax, 0x48
jne 0x1800112f4
mov word [rsp + 0xc0], 0
lea rcx, [rsp + 0x28]
call fcn.180003922
mov rdx, rax
mov qword [0x18001a068], rax
test rsi, rsi
je 0x18001135c
mov rax, qword [rsi]
mov rax, qword [rax + 0x268]
lea rcx, [rsp + 0x30]
mov qword [rcx], rax
mov qword [rcx + 8], 0
mov qword [rsp + 0x20], rcx
lea rdi, [rsp + 0x28]
mov rcx, rsi
mov r8, rdi
xor r9d, r9d
call fcn.1800147b0
mov rax, qword [rdi]
jmp 0x18001135c
add rsp, 0xc8
pop rdi
pop rsi
ret
Function at 0x180011366
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
sub rsp, 0x108
mov rsi, rdx
mov rdx, qword [0x18001a070]
test rdx, rdx
jne 0x180011421
xor eax, eax
mov word [rsp + 0x28], ax
lea rdx, [rsp + 0x32]
movaps xmm0, xmmword [0x180016d90]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180016da0]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180016db0]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [0x180016dc0]
movaps xmmword [rdx + 0x2e], xmm0
movaps xmm0, xmmword [0x180016dd0]
movaps xmmword [rdx + 0x3e], xmm0
movaps xmm0, xmmword [0x180016de0]
movaps xmmword [rdx + 0x4e], xmm0
movabs rcx, 0x170002000f0013
mov qword [rdx + 0x5e], rcx
mov dword [rdx + 0x66], 0x630006
mov word [rdx + 0xd2], ax
mov eax, 1
movzx ecx, word [rdx - 2]
xor word [rsp + rax*2 + 0x30], cx
inc rax
cmp rax, 0x6a
jne 0x1800113f5
mov word [rsp + 0x104], 0
lea rcx, [rsp + 0x28]
call fcn.180003922
mov rdx, rax
mov qword [0x18001a070], rax
test rsi, rsi
je 0x18001145d
mov rax, qword [rsi]
mov rax, qword [rax + 0x268]
lea rcx, [rsp + 0x30]
mov qword [rcx], rax
mov qword [rcx + 8], 0
mov qword [rsp + 0x20], rcx
lea rdi, [rsp + 0x28]
mov rcx, rsi
mov r8, rdi
xor r9d, r9d
call fcn.1800147b0
mov rax, qword [rdi]
jmp 0x18001145d
add rsp, 0x108
pop rdi
pop rsi
ret

Function at 0x180011468
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
sub rsp, 0x108
mov rsi, rdx
mov rdx, qword [0x18001a078]
test rdx, rdx
jne 0x180011523
xor eax, eax
mov word [rsp + 0x2c], ax
lea rdx, [rsp + 0x32]
movaps xmm0, xmmword [str._aAhusPbfwhiUfi_bcNsbjCbaninsnhi__bsWuhmbdsnkbSbj_bKVPwGEHEFHAbHKEPqPMHW_ncAPrEHQAROInQ_QXQRIhITQN]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180016e00]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180016e10]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [0x180016e20]
movaps xmmword [rdx + 0x2e], xmm0
movaps xmm0, xmmword [0x180016e30]
movaps xmmword [rdx + 0x3e], xmm0
movaps xmm0, xmmword [0x180016e40]
movaps xmmword [rdx + 0x4e], xmm0
movabs rcx, 0x730066006b0077
mov qword [rdx + 0x5e], rcx
mov dword [rdx + 0x66], 0x70062
mov word [rdx + 0xd2], ax
mov eax, 1
movzx ecx, word [rdx - 2]
xor word [rsp + rax*2 + 0x30], cx
inc rax
cmp rax, 0x6a
jne 0x1800114f7
mov word [rsp + 0x104], 0
lea rcx, [rsp + 0x2c]
call fcn.180003922
mov rdx, rax
mov qword [0x18001a078], rax
test rsi, rsi
je 0x18001156b
mov rax, qword [rsi]
mov rax, qword [rax + 0x268]
lea rcx, [rsp + 0x30]
mov qword [rcx], rax
mov qword [rcx + 8], 0
mov qword [rsp + 0x20], rcx
lea rdi, [rsp + 0x2c]
mov rcx, rsi
mov r8, rdi
xor r9d, r9d
call fcn.1800147b0
xorps xmm0, xmm0
cmpneqss xmm0, dword [rdi]
movd eax, xmm0
and eax, 1
jmp 0x18001156d
mov al, 1
add rsp, 0x108
pop rdi
pop rsi
ret
Function at 0x18001165e
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
sub rsp, 0xe8
mov esi, r8d
mov rdi, rdx
mov rdx, qword [0x18001a088]
test rdx, rdx
jne 0x1800116f4
xor eax, eax
mov word [rsp + 0x30], ax
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x180016e90]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180016ea0]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180016eb0]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [str.zXIkQHXIqXKXQ]
movaps xmmword [rdx + 0x2e], xmm0
movaps xmm0, xmmword [0x180016ed0]
movaps xmmword [rdx + 0x3e], xmm0
mov word [rdx + 0x9a], ax
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x3d
inc rax
cmp rax, 0x4e
jne 0x1800116c8
mov word [rsp + 0xdc], 0
lea rcx, [rsp + 0x30]
call fcn.180003922
mov rdx, rax
mov qword [0x18001a088], rax
mov rax, qword [rdi + 0x20]
mov qword [rsp + 0x60], rax
movups xmm0, xmmword [rdi]
movups xmm1, xmmword [rdi + 0x10]
movaps xmmword [rsp + 0x50], xmm1
movaps xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x68], esi
mov dword [rsp + 0x6c], 0
mov rcx, qword [0x180019d60]
test rcx, rcx
je 0x18001175c
mov rax, qword [rcx]
mov rax, qword [rax + 0x268]
lea r8, [rsp + 0x30]
mov qword [r8], rax
mov qword [r8 + 8], 0
mov qword [rsp + 0x20], r8
lea rsi, [rsp + 0x40]
mov r8, rsi
xor r9d, r9d
call fcn.1800147b0
movss xmm0, dword [rsi + 0x2c]
jmp 0x18001175f
xorps xmm0, xmm0
add rsp, 0xe8
pop rdi
pop rsi
ret

Function at 0x18001176a
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
sub rsp, 0xa8
mov rsi, rdx
mov rdx, qword [0x18001a090]
test rdx, rdx
jne 0x1800117f2
xor eax, eax
mov word [rsp + 0x2e], ax
lea rdx, [rsp + 0x32]
movaps xmm0, xmmword [0x180016ee0]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180016ef0]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180016f00]
movaps xmmword [rdx + 0x1e], xmm0
movabs rcx, 0x11006300740078
mov qword [rdx + 0x2e], rcx
mov word [rdx + 0x6a], ax
mov eax, 1
xor byte [rsp + rax*2 + 0x30], 0x11
inc rax
cmp rax, 0x36
jne 0x1800117c6
mov word [rsp + 0x9c], 0
lea rcx, [rsp + 0x2e]
call fcn.180003922
mov rdx, rax
mov qword [0x18001a090], rax
test rsi, rsi
je 0x18001182d
mov rax, qword [rsi]
mov rax, qword [rax + 0x268]
lea rcx, [rsp + 0x30]
mov qword [rcx], rax
mov qword [rcx + 8], 0
mov qword [rsp + 0x20], rcx
lea rdi, [rsp + 0x2e]
mov rcx, rsi
mov r8, rdi
xor r9d, r9d
call fcn.1800147b0
mov al, byte [rdi]
jmp 0x18001182d
add rsp, 0xa8
pop rdi
pop rsi
ret
Function at 0x1800119ec
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
sub rsp, 0xb8
mov rsi, r8
mov rdi, rdx
mov rdx, qword [0x18001a0a8]
test rdx, rdx
jne 0x180011a76
xor eax, eax
mov word [rsp + 0x30], ax
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x180016f90]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180016fa0]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180016fb0]
movaps xmmword [rdx + 0x1e], xmm0
mov dword [rdx + 0x2e], 0x570065
mov word [rdx + 0x32], 0x16
mov word [rdx + 0x66], ax
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x16
inc rax
cmp rax, 0x34
jne 0x180011a4a
mov word [rsp + 0xa8], 0
lea rcx, [rsp + 0x30]
call fcn.180003922
mov rdx, rax
mov qword [0x18001a0a8], rax
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], rsi
mov rcx, qword [0x180019de0]
test rcx, rcx
je 0x180011ac4
mov rax, qword [rcx]
mov rax, qword [rax + 0x268]
lea r8, [rsp + 0x30]
mov qword [r8], rax
mov qword [r8 + 8], 0
mov qword [rsp + 0x20], r8
lea rsi, [rsp + 0x40]
mov r8, rsi
xor r9d, r9d
call fcn.1800147b0
cmp byte [rsi + 0x10], 0
setne al
jmp 0x180011ac4
and al, 1
add rsp, 0xb8
pop rdi
pop rsi
ret

Function at 0x180011ad0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
sub rsp, 0xa8
mov rsi, rdx
mov rdx, qword [0x18001a0b0]
test rdx, rdx
jne 0x180011b58
xor eax, eax
mov word [rsp + 0x2c], ax
lea rdx, [rsp + 0x32]
movaps xmm0, xmmword [0x180016fc0]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180016fd0]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180016fe0]
movaps xmmword [rdx + 0x1e], xmm0
movabs rcx, 0x56002f0022003f
mov qword [rdx + 0x2e], rcx
mov word [rdx + 0x6a], ax
mov eax, 1
xor byte [rsp + rax*2 + 0x30], 0x56
inc rax
cmp rax, 0x36
jne 0x180011b2c
mov word [rsp + 0x9c], 0
lea rcx, [rsp + 0x2c]
call fcn.180003922
mov rdx, rax
mov qword [0x18001a0b0], rax
test rsi, rsi
je 0x180011ba0
mov rax, qword [rsi]
mov rax, qword [rax + 0x268]
lea rcx, [rsp + 0x30]
mov qword [rcx], rax
mov qword [rcx + 8], 0
mov qword [rsp + 0x20], rcx
lea rdi, [rsp + 0x2c]
mov rcx, rsi
mov r8, rdi
xor r9d, r9d
call fcn.1800147b0
xorps xmm0, xmm0
cmpneqss xmm0, dword [rdi]
movd eax, xmm0
and eax, 1
jmp 0x180011ba2
mov al, 1
add rsp, 0xa8
pop rdi
pop rsi
ret
Function at 0x180011bac
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
sub rsp, 0x98
mov rsi, rdx
mov rdx, qword [0x18001a0b8]
test rdx, rdx
jne 0x180011c2c
xor eax, eax
mov word [rsp + 0x2c], ax
lea rdx, [rsp + 0x32]
movaps xmm0, xmmword [0x180016ff0]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180017000]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180017010]
movaps xmmword [rdx + 0x1e], xmm0
mov word [rdx + 0x2e], pe_nt_image_headers64
mov word [rdx + 0x5e], ax
mov eax, 1
xor byte [rsp + rax*2 + 0x30], 0x78
inc rax
cmp rax, 0x30
jne 0x180011c00
mov word [rsp + 0x90], 0
lea rcx, [rsp + 0x2c]
call fcn.180003922
mov rdx, rax
mov qword [0x18001a0b8], rax
test rsi, rsi
je 0x180011c69
mov rax, qword [rsi]
mov rax, qword [rax + 0x268]
lea rcx, [rsp + 0x30]
mov qword [rcx], rax
mov qword [rcx + 8], 0
mov qword [rsp + 0x20], rcx
lea rdi, [rsp + 0x2c]
mov rcx, rsi
mov r8, rdi
xor r9d, r9d
call fcn.1800147b0
movss xmm0, dword [rdi]
jmp 0x180011c69
add rsp, 0x98
pop rdi
pop rsi
ret

Function at 0x180011c74
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0xd0
mov rbx, r9
mov rdi, r8
mov rsi, rdx
mov rdx, qword [0x18001a0c0]
test rdx, rdx
jne 0x180011d0a
xor eax, eax
mov word [rsp + 0x30], ax
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x180017020]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180017030]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180017040]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [0x180017050]
movaps xmmword [rdx + 0x2e], xmm0
mov dword [rdx + 0x3e], 0x7a0014
mov word [rdx + 0x82], ax
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x7a
inc rax
cmp rax, 0x42
jne 0x180011cde
mov word [rsp + 0xc4], 0
lea rcx, [rsp + 0x30]
call fcn.180003922
mov rdx, rax
mov qword [0x18001a0c0], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], 0
mov rax, qword [rbx]
mov qword [rsp + 0x40], rax
test rdi, rdi
je 0x180011d57
mov rax, qword [rdi]
mov rax, qword [rax + 0x268]
lea rcx, [rsp + 0x30]
mov qword [rcx], rax
mov qword [rcx + 8], 0
mov qword [rsp + 0x20], rcx
lea r8, [rsp + 0x40]
mov rcx, rdi
xor r9d, r9d
call fcn.1800147b0
mov rax, qword [rsp + 0x58]
mov qword [rsi + 0x10], rax
movups xmm0, xmmword [rsp + 0x48]
movups xmmword [rsi], xmm0
mov rax, rsi
add rsp, 0xd0
pop rbx
pop rdi
pop rsi
ret
Function at 0x180011d76
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
sub rsp, 0xc8
mov rsi, rdx
mov rdx, qword [0x18001a0c8]
test rdx, rdx
jne 0x180011e0c
xor eax, eax
mov word [rsp + 0x2c], ax
lea rdx, [rsp + 0x32]
movaps xmm0, xmmword [str.0_BY_YDYFUs____UD]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180017070]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180017080]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [0x180017090]
movaps xmmword [rdx + 0x2e], xmm0
movabs rcx, 0x300043005c0051
mov qword [rdx + 0x3e], rcx
mov word [rdx + 0x8a], ax
mov eax, 1
xor byte [rsp + rax*2 + 0x30], 0x30
inc rax
cmp rax, 0x46
jne 0x180011de0
mov word [rsp + 0xbc], 0
lea rcx, [rsp + 0x2c]
call fcn.180003922
mov rdx, rax
mov qword [0x18001a0c8], rax
test rsi, rsi
je 0x180011e47
mov rax, qword [rsi]
mov rax, qword [rax + 0x268]
lea rcx, [rsp + 0x30]
mov qword [rcx], rax
mov qword [rcx + 8], 0
mov qword [rsp + 0x20], rcx
lea rdi, [rsp + 0x2c]
mov rcx, rsi
mov r8, rdi
xor r9d, r9d
call fcn.1800147b0
mov eax, dword [rdi]
jmp 0x180011e47
add rsp, 0xc8
pop rdi
pop rsi
ret

Function at 0x180011e52
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0xc0
mov rdi, r9
mov ebx, r8d
mov rsi, rdx
mov rdx, qword [0x18001a0d0]
test rdx, rdx
jne 0x180011ede
xor eax, eax
mov word [rsp + 0x30], ax
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x1800170a0]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x1800170b0]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x1800170c0]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [0x1800170d0]
movaps xmmword [rdx + 0x2e], xmm0
mov word [rdx + 0x7a], ax
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x2f
inc rax
cmp rax, 0x3e
jne 0x180011eb2
mov word [rsp + 0xbc], 0
lea rcx, [rsp + 0x30]
call fcn.180003922
mov rdx, rax
mov qword [0x18001a0d0], rax
mov dword [rsp + 0x30], ebx
mov qword [rsp + 0x38], rdi
test rsi, rsi
je 0x180011f1b
mov rax, qword [rsi]
mov rax, qword [rax + 0x268]
lea rcx, [rsp + 0x40]
mov qword [rcx], rax
mov qword [rcx + 8], 0
mov qword [rsp + 0x20], rcx
lea r8, [rsp + 0x30]
mov rcx, rsi
xor r9d, r9d
call fcn.1800147b0
nop
add rsp, 0xc0
pop rbx
pop rdi
pop rsi
ret