joyce8/EMBER2024-capa huggingface dataset:
Function at 0x18001b6bc
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xe8
movaps xmmword [rsp + 0xd0], xmm6
mov rsi, r9
mov rdi, r8
mov rbx, rdx
mov rax, qword [rsp + 0x190]
mov cl, byte [rsp + 0x188]
mov r8b, byte [rsp + 0x180]
mov r12b, byte [rsp + 0x178]
mov r13, qword [rsp + 0x170]
mov r14, qword [rsp + 0x168]
movsd xmm6, qword [rsp + 0x160]
mov rbp, qword [rsp + 0x158]
mov r15, qword [rsp + 0x150]
mov rdx, qword [0x1800283e8]
test rdx, rdx
jne 0x18001b7aa
lea rdx, [rsp + 0x32]
movaps xmm0, xmmword [0x180024b70]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180024b80]
movaps xmmword [rdx + 0xe], xmm0
movabs rax, 0x5d002900250038
mov qword [rdx + 0x1e], rax
mov word [rdx + 0x4a], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x30], 0x5d
inc rax
cmp rax, 0x26
jne 0x18001b768
mov word [rsp + 0x7c], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov rdx, rax
mov qword [0x1800283e8], rax
mov rax, qword [rsp + 0x190]
mov cl, byte [rsp + 0x188]
mov r8b, byte [rsp + 0x180]
mov qword [rsp + 0x30], rbx
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x38], xmm0
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x48], xmm0
movups xmm0, xmmword [r15]
movups xmmword [rsp + 0x58], xmm0
movups xmm0, xmmword [rbp]
movups xmmword [rsp + 0x68], xmm0
movsd qword [rsp + 0x78], xmm6
movups xmm0, xmmword [r14]
movups xmmword [rsp + 0x80], xmm0
movups xmm0, xmmword [r13]
movups xmmword [rsp + 0x90], xmm0
mov byte [rsp + 0xa0], r12b
mov byte [rsp + 0xa1], r8b
mov byte [rsp + 0xa2], cl
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xa4], xmm0
mov rcx, qword [0x180027d30]
test rcx, rcx
je 0x18001b84d
mov rax, qword [rcx]
mov rax, qword [rax + 0x270]
lea r8, [rsp + 0xc0]
mov qword [r8], rax
mov qword [r8 + 8], 0
mov qword [rsp + 0x20], r8
lea r8, [rsp + 0x30]
xor r9d, r9d
call fcn.180020390
movaps xmm6, xmmword [rsp + 0xd0]
add rsp, 0xe8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x18001b86a
Capabilities:
Encode data using xor

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xa0
mov rsi, r9
mov rdi, r8
mov rbx, rdx
mov r14, qword [rsp + 0xf8]
mov ebp, dword [rsp + 0xf0]
mov rdx, qword [0x1800283f0]
test rdx, rdx
jne 0x18001b90a
lea rdx, [rsp + 0x32]
movaps xmm0, xmmword [0x180024b90]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180024ba0]
movaps xmmword [rdx + 0xe], xmm0
movabs rax, 0x53004d0058005b
mov qword [rdx + 0x1e], rax
mov dword [rdx + 0x26], 0x5a005b
mov word [rdx + 0x2a], 0x34
mov word [rdx + 0x56], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x30], 0x34
inc rax
cmp rax, 0x2c
jne 0x18001b8dc
mov word [rsp + 0x88], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov rdx, rax
mov qword [0x1800283f0], rax
mov qword [rsp + 0x30], rbx
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x38], xmm0
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x48], xmm0
mov dword [rsp + 0x58], ebp
movups xmm0, xmmword [r14]
movups xmmword [rsp + 0x5c], xmm0
mov rcx, qword [0x180027d30]
test rcx, rcx
je 0x18001b967
mov rax, qword [rcx]
mov rax, qword [rax + 0x270]
lea r8, [rsp + 0x90]
mov qword [r8], rax
mov qword [r8 + 8], 0
mov qword [rsp + 0x20], r8
lea r8, [rsp + 0x30]
xor r9d, r9d
call fcn.180020390
nop
add rsp, 0xa0
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret

Function at 0x18001b976
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xc8
movaps xmmword [rsp + 0xb0], xmm6
mov rsi, r9
mov rdi, r8
mov rbx, rdx
mov r14, qword [rsp + 0x158]
movss xmm6, dword [rsp + 0x150]
mov bpl, byte [rsp + 0x148]
mov r15, qword [rsp + 0x140]
mov r12, qword [rsp + 0x138]
mov r13, qword [rsp + 0x130]
mov rdx, qword [0x1800283f8]
test rdx, rdx
jne 0x18001ba46
lea rdx, [rsp + 0x32]
movaps xmm0, xmmword [0x180024bb0]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180024bc0]
movaps xmmword [rdx + 0xe], xmm0
movabs rax, 0x68006900650078
mov qword [rdx + 0x1e], rax
mov dword [rdx + 0x26], 0x78006f
mov word [rdx + 0x2a], 0x1d
mov word [rdx + 0x56], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x30], 0x1d
inc rax
cmp rax, 0x2c
jne 0x18001ba18
mov word [rsp + 0x88], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov rdx, rax
mov qword [0x1800283f8], rax
mov qword [rsp + 0x30], rbx
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x38], xmm0
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x48], xmm0
movups xmm0, xmmword [r13]
movups xmmword [rsp + 0x58], xmm0
movups xmm0, xmmword [r12]
movups xmmword [rsp + 0x68], xmm0
movups xmm0, xmmword [r15]
movups xmmword [rsp + 0x78], xmm0
mov byte [rsp + 0x88], bpl
movss dword [rsp + 0x8c], xmm6
movups xmm0, xmmword [r14]
movups xmmword [rsp + 0x90], xmm0
mov rcx, qword [0x180027d30]
test rcx, rcx
je 0x18001bad0
mov rax, qword [rcx]
mov rax, qword [rax + 0x270]
lea r8, [rsp + 0xa0]
mov qword [r8], rax
mov qword [r8 + 8], 0
mov qword [rsp + 0x20], r8
lea r8, [rsp + 0x30]
xor r9d, r9d
call fcn.180020390
movaps xmm6, xmmword [rsp + 0xb0]
add rsp, 0xc8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x18001baec
Capabilities:
Encode data using xor

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x1c8
mov rsi, r8
mov rdi, rdx
mov rbx, qword [0x180028400]
test rbx, rbx
jne 0x18001bb8f
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x180024bd0]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [str.___3_]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180024bf0]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [0x180024c00]
movaps xmmword [rdx + 0x2e], xmm0
movabs rax, 0x33003a00310038
mov qword [rdx + 0x3e], rax
mov word [rdx + 0x46], 0x56
mov word [rdx + 0x8e], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x56
inc rax
cmp rax, 0x48
jne 0x18001bb61
mov word [rsp + 0xd0], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov rbx, rax
mov qword [0x180028400], rax
lea r14, [rsp + 0xb0]
mov r8d, 0x90
mov rcx, r14
xor edx, edx
call fcn.18001e010
mov rax, qword [0x180027d58]
mov qword [r14 - 0x70], rax
movups xmm0, xmmword [rdi]
movups xmmword [r14 - 0x68], xmm0
mov rax, qword [rdi + 0x10]
mov qword [r14 - 0x58], rax
mov rax, qword [rsi + 0x10]
mov qword [r14 - 0x40], rax
movups xmm0, xmmword [rsi]
movups xmmword [r14 - 0x50], xmm0
mov word [r14 - 0x38], 0x101
xorps xmm0, xmm0
movups xmmword [r14 - 0x30], xmm0
mov byte [r14 - 0x20], 0
mov byte [r14 + 0xd8], 1
movaps xmm0, xmmword [section..rdata]
movups xmmword [r14 + 0xdc], xmm0
movups xmmword [r14 + 0xec], xmm0
mov dword [r14 + 0xfc], 0
mov rcx, qword [0x180027d28]
test rcx, rcx
je 0x18001bc5a
mov rax, qword [rcx]
mov rax, qword [rax + 0x270]
lea rdx, [rsp + 0x30]
mov qword [rdx], rax
mov qword [rdx + 8], 0
mov qword [rsp + 0x20], rdx
lea rsi, [rsp + 0x40]
mov rdx, rbx
mov r8, rsi
xor r9d, r9d
call fcn.180020390
cmp byte [rsi + 0x178], 0
sete al
jmp 0x18001bc5a
and al, 1
add rsp, 0x1c8
pop rbx
pop rdi
pop rsi
pop r14
ret

Function at 0x18001bc6a
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0xd0
mov rdi, r8
mov rsi, rdx
mov rdx, qword [0x180028408]
test rdx, rdx
jne 0x18001bd00
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x180024c10]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [str._43__v._55_i]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180024c30]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [0x180024c40]
movaps xmmword [rdx + 0x2e], xmm0
mov dword [rdx + 0x3e], 0x22002a
mov word [rdx + 0x42], 0x47
mov word [rdx + 0x86], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x47
inc rax
cmp rax, 0x44
jne 0x18001bcd2
mov word [rsp + 0xc8], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov rdx, rax
mov qword [0x180028408], rax
lea rbx, [rsp + 0x48]
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx - 8], rdi
mov rcx, qword [0x180027d28]
test rcx, rcx
je 0x18001bd47
mov rax, qword [rcx]
mov rax, qword [rax + 0x270]
lea r8, [rsp + 0x30]
mov qword [r8], rax
mov qword [r8 + 8], 0
mov qword [rsp + 0x20], r8
lea r8, [rsp + 0x40]
xor r9d, r9d
call fcn.180020390
movups xmm0, xmmword [rbx]
movups xmmword [rsi], xmm0
mov rax, rsi
add rsp, 0xd0
pop rbx
pop rdi
pop rsi
ret
Function at 0x18001bfbc
Capabilities:
Encode data using xor

Disassembly:
push rsi
sub rsp, 0xe0
mov rsi, rdx
cmp qword [0x180028420], 0
jne 0x18001c049
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x180024ce0]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180024cf0]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180024d00]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [0x180024d10]
movaps xmmword [rdx + 0x2e], xmm0
movabs rax, 0x65001100060000
mov qword [rdx + 0x3e], rax
mov word [rdx + 0x8a], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x65
inc rax
cmp rax, 0x46
jne 0x18001c01e
mov word [rsp + 0xcc], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov qword [0x180028420], rax
cmp byte [0x180028430], 0
je 0x18001c0a8
mov rcx, qword [0x180028428]
mov qword [rsp + 0x30], rsi
test rcx, rcx
je 0x18001c09f
mov rdx, qword [0x180028420]
mov rax, qword [rcx]
mov rax, qword [rax + 0x270]
lea r8, [rsp + 0x40]
mov qword [r8], rax
mov qword [r8 + 8], 0
mov qword [rsp + 0x20], r8
lea rsi, [rsp + 0x30]
mov r8, rsi
xor r9d, r9d
call fcn.180020390
mov rax, qword [rsi + 8]
jmp 0x18001c09f
add rsp, 0xe0
pop rsi
ret
mov byte [0x180028430], 1
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x180024d20]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180024d30]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180024d40]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [0x180024d50]
movaps xmmword [rdx + 0x2e], xmm0
movabs rax, 0x15001e000d001e
mov qword [rdx + 0x3e], rax
mov word [rdx + 0x46], 0x6c
mov word [rdx + 0x8e], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x6c
inc rax
cmp rax, 0x48
jne 0x18001c102
mov word [rsp + 0xd0], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov rcx, rax
mov qword [0x180028428], rax
jmp 0x18001c059

Function at 0x18001c136
Capabilities:
Encode data using xor

Disassembly:
push rsi
sub rsp, 0xb0
movaps xmmword [rsp + 0xa0], xmm6
movaps xmm6, xmm1
mov rdx, qword [0x180028438]
test rdx, rdx
jne 0x18001c1b4
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x180024d60]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180024d70]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180024d80]
movaps xmmword [rdx + 0x1e], xmm0
mov word [rdx + 0x5a], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x71
inc rax
cmp rax, 0x2e
jne 0x18001c186
mov word [rsp + 0x9c], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov rdx, rax
mov qword [0x180028438], rax
movsd qword [rsp + 0x30], xmm6
mov rcx, qword [0x180027d28]
test rcx, rcx
je 0x18001c1fc
mov rax, qword [rcx]
mov rax, qword [rax + 0x270]
lea r8, [rsp + 0x40]
mov qword [r8], rax
mov qword [r8 + 8], 0
mov qword [rsp + 0x20], r8
lea rsi, [rsp + 0x30]
mov r8, rsi
xor r9d, r9d
call fcn.180020390
movsd xmm0, qword [rsi + 8]
jmp 0x18001c1fc
movaps xmm6, xmmword [rsp + 0xa0]
add rsp, 0xb0
pop rsi
ret
Function at 0x18001c2e6
Capabilities:
Encode data using xor

Disassembly:
push rsi
sub rsp, 0xd0
movaps xmmword [rsp + 0xc0], xmm7
movaps xmmword [rsp + 0xb0], xmm6
movaps xmm6, xmm2
movaps xmm7, xmm1
mov rdx, qword [0x180028448]
test rdx, rdx
jne 0x18001c375
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [str._v_bxfn]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180024dd0]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180024de0]
movaps xmmword [rdx + 0x1e], xmm0
mov word [rdx + 0x2e], 0xb
mov word [rdx + 0x5e], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0xb
inc rax
cmp rax, 0x30
jne 0x18001c347
mov word [rsp + 0xa0], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov rdx, rax
mov qword [0x180028448], rax
movsd qword [rsp + 0x40], xmm7
movsd qword [rsp + 0x48], xmm6
mov rcx, qword [0x180027d28]
test rcx, rcx
je 0x18001c3c3
mov rax, qword [rcx]
mov rax, qword [rax + 0x270]
lea r8, [rsp + 0x30]
mov qword [r8], rax
mov qword [r8 + 8], 0
mov qword [rsp + 0x20], r8
lea rsi, [rsp + 0x40]
mov r8, rsi
xor r9d, r9d
call fcn.180020390
movsd xmm0, qword [rsi + 0x10]
jmp 0x18001c3c3
movaps xmm6, xmmword [rsp + 0xb0]
movaps xmm7, xmmword [rsp + 0xc0]
add rsp, 0xd0
pop rsi
ret

Function at 0x18001c3dc
Capabilities:
Encode data using xor

Disassembly:
push rsi
sub rsp, 0xc0
movaps xmmword [rsp + 0xb0], xmm6
movaps xmm6, xmm1
mov rdx, qword [0x180028450]
test rdx, rdx
jne 0x18001c460
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x180024df0]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [str.6_e_5_6_.y]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180024e10]
movaps xmmword [rdx + 0x1e], xmm0
mov word [rdx + 0x2e], 0x57
mov word [rdx + 0x5e], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x57
inc rax
cmp rax, 0x30
jne 0x18001c432
mov word [rsp + 0xa0], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov rdx, rax
mov qword [0x180028450], rax
movsd qword [rsp + 0x30], xmm6
mov rcx, qword [0x180027d28]
test rcx, rcx
je 0x18001c4a6
mov rax, qword [rcx]
mov rax, qword [rax + 0x270]
lea r8, [rsp + 0x40]
mov qword [r8], rax
mov qword [r8 + 8], 0
mov qword [rsp + 0x20], r8
lea rsi, [rsp + 0x30]
mov r8, rsi
xor r9d, r9d
call fcn.180020390
mov eax, dword [rsi + 8]
jmp 0x18001c4a6
movaps xmm6, xmmword [rsp + 0xb0]
add rsp, 0xc0
pop rsi
ret
Function at 0x18001c4b8
Capabilities:
Encode data using xor

Disassembly:
push rsi
sub rsp, 0xb0
movaps xmmword [rsp + 0xa0], xmm6
movaps xmm6, xmm1
mov rdx, qword [0x180028458]
test rdx, rdx
jne 0x18001c546
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x180024e20]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180024e30]
movaps xmmword [rdx + 0xe], xmm0
movabs rax, 0x270048001f0014
mov qword [rdx + 0x1e], rax
mov dword [rdx + 0x26], 0x150004
mov word [rdx + 0x2a], 0x66
mov word [rdx + 0x56], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x66
inc rax
cmp rax, 0x2c
jne 0x18001c518
mov word [rsp + 0x98], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov rdx, rax
mov qword [0x180028458], rax
movsd qword [rsp + 0x30], xmm6
mov rcx, qword [0x180027d28]
test rcx, rcx
je 0x18001c58e
mov rax, qword [rcx]
mov rax, qword [rax + 0x270]
lea r8, [rsp + 0x40]
mov qword [r8], rax
mov qword [r8 + 8], 0
mov qword [rsp + 0x20], r8
lea rsi, [rsp + 0x30]
mov r8, rsi
xor r9d, r9d
call fcn.180020390
movsd xmm0, qword [rsi + 8]
jmp 0x18001c58e
movaps xmm6, xmmword [rsp + 0xa0]
add rsp, 0xb0
pop rsi
ret

Function at 0x18001c5a0
Capabilities:
Encode data using xor

Disassembly:
push rsi
sub rsp, 0xb0
movaps xmmword [rsp + 0xa0], xmm6
movaps xmm6, xmm1
mov rdx, qword [0x180028460]
test rdx, rdx
jne 0x18001c62e
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x180024e40]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180024e50]
movaps xmmword [rdx + 0xe], xmm0
movabs rax, 0x61000c005b0050
mov qword [rdx + 0x1e], rax
mov dword [rdx + 0x26], 0x51004d
mov word [rdx + 0x2a], 0x22
mov word [rdx + 0x56], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x22
inc rax
cmp rax, 0x2c
jne 0x18001c600
mov word [rsp + 0x98], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov rdx, rax
mov qword [0x180028460], rax
movsd qword [rsp + 0x30], xmm6
mov rcx, qword [0x180027d28]
test rcx, rcx
je 0x18001c676
mov rax, qword [rcx]
mov rax, qword [rax + 0x270]
lea r8, [rsp + 0x40]
mov qword [r8], rax
mov qword [r8 + 8], 0
mov qword [rsp + 0x20], r8
lea rsi, [rsp + 0x30]
mov r8, rsi
xor r9d, r9d
call fcn.180020390
movsd xmm0, qword [rsi + 8]
jmp 0x18001c676
movaps xmm6, xmmword [rsp + 0xa0]
add rsp, 0xb0
pop rsi
ret
Function at 0x18001c688
Capabilities:
Encode data using xor

Disassembly:
push rsi
sub rsp, 0xb0
movaps xmmword [rsp + 0xa0], xmm6
movaps xmm6, xmm1
mov rdx, qword [0x180028468]
test rdx, rdx
jne 0x18001c716
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x180024e60]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180024e70]
movaps xmmword [rdx + 0xe], xmm0
movabs rax, 0x60001d004a0041
mov qword [rdx + 0x1e], rax
mov dword [rdx + 0x26], 0x5d005a
mov word [rdx + 0x2a], 0x33
mov word [rdx + 0x56], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x33
inc rax
cmp rax, 0x2c
jne 0x18001c6e8
mov word [rsp + 0x98], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov rdx, rax
mov qword [0x180028468], rax
movsd qword [rsp + 0x30], xmm6
mov rcx, qword [0x180027d28]
test rcx, rcx
je 0x18001c75e
mov rax, qword [rcx]
mov rax, qword [rax + 0x270]
lea r8, [rsp + 0x40]
mov qword [r8], rax
mov qword [r8 + 8], 0
mov qword [rsp + 0x20], r8
lea rsi, [rsp + 0x30]
mov r8, rsi
xor r9d, r9d
call fcn.180020390
movsd xmm0, qword [rsi + 8]
jmp 0x18001c75e
movaps xmm6, xmmword [rsp + 0xa0]
add rsp, 0xb0
pop rsi
ret

Function at 0x18001c770
Capabilities:
Encode data using xor

Disassembly:
push rsi
sub rsp, 0xb0
movaps xmmword [rsp + 0xa0], xmm6
movaps xmm6, xmm1
mov rdx, qword [0x180028470]
test rdx, rdx
jne 0x18001c7ee
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x180024e80]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180024e90]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180024ea0]
movaps xmmword [rdx + 0x1e], xmm0
mov word [rdx + 0x5a], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x49
inc rax
cmp rax, 0x2e
jne 0x18001c7c0
mov word [rsp + 0x9c], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov rdx, rax
mov qword [0x180028470], rax
movsd qword [rsp + 0x30], xmm6
mov rcx, qword [0x180027d28]
test rcx, rcx
je 0x18001c836
mov rax, qword [rcx]
mov rax, qword [rax + 0x270]
lea r8, [rsp + 0x40]
mov qword [r8], rax
mov qword [r8 + 8], 0
mov qword [rsp + 0x20], r8
lea rsi, [rsp + 0x30]
mov r8, rsi
xor r9d, r9d
call fcn.180020390
movsd xmm0, qword [rsi + 8]
jmp 0x18001c836
movaps xmm6, xmmword [rsp + 0xa0]
add rsp, 0xb0
pop rsi
ret
Function at 0x18001c848
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
sub rsp, 0xd8
mov rsi, r8
mov rdi, rdx
mov rdx, qword [0x180028478]
test rdx, rdx
jne 0x18001c8dd
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x180024eb0]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180024ec0]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180024ed0]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [0x180024ee0]
movaps xmmword [rdx + 0x2e], xmm0
mov dword [rdx + 0x3e], 0x510057
mov word [rdx + 0x42], 0x34
mov word [rdx + 0x86], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x34
inc rax
cmp rax, 0x44
jne 0x18001c8af
mov word [rsp + 0xc8], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov rdx, rax
mov qword [0x180028478], rax
mov rax, qword [rdi + 0x10]
mov qword [rsp + 0x50], rax
movups xmm0, xmmword [rdi]
movaps xmmword [rsp + 0x40], xmm0
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x58], xmm0
mov rax, qword [rsi + 0x10]
mov qword [rsp + 0x68], rax
mov rcx, qword [0x180027d28]
test rcx, rcx
je 0x18001c941
mov rax, qword [rcx]
mov rax, qword [rax + 0x270]
lea r8, [rsp + 0x30]
mov qword [r8], rax
mov qword [r8 + 8], 0
mov qword [rsp + 0x20], r8
lea rsi, [rsp + 0x40]
mov r8, rsi
xor r9d, r9d
call fcn.180020390
movsd xmm0, qword [rsi + 0x30]
jmp 0x18001c941
add rsp, 0xd8
pop rdi
pop rsi
ret

Function at 0x18001c94c
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0xe0
mov rdi, r9
mov rbx, r8
mov rsi, rdx
mov rdx, qword [0x180028480]
test rdx, rdx
jne 0x18001c9f1
lea rdx, [rsp + 0x32]
movaps xmm0, xmmword [0x180024ef0]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180024f00]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180024f10]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [0x180024f20]
movaps xmmword [rdx + 0x2e], xmm0
movabs rax, 0x650063007e006b
mov qword [rdx + 0x3e], rax
mov dword [rdx + 0x46], 0xa0064
mov word [rdx + 0x92], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x30], 0xa
inc rax
cmp rax, 0x4a
jne 0x18001c9c3
mov word [rsp + 0xc4], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov rdx, rax
mov qword [0x180028480], rax
mov rax, qword [rbx + 0x10]
mov qword [rsp + 0x40], rax
movups xmm0, xmmword [rbx]
movaps xmmword [rsp + 0x30], xmm0
xorps xmm0, xmm0
movaps xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], 0
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x48], xmm0
mov rax, qword [rdi + 0x10]
mov qword [rsp + 0x58], rax
mov rcx, qword [0x180027d28]
test rcx, rcx
je 0x18001ca5f
mov rax, qword [rcx]
mov rax, qword [rax + 0x270]
lea r8, [rsp + 0xd0]
mov qword [r8], rax
mov qword [r8 + 8], 0
mov qword [rsp + 0x20], r8
lea r8, [rsp + 0x30]
xor r9d, r9d
call fcn.180020390
mov rax, qword [rsp + 0x70]
mov qword [rsi + 0x10], rax
movaps xmm0, xmmword [rsp + 0x60]
movups xmmword [rsi], xmm0
mov rax, rsi
add rsp, 0xe0
pop rbx
pop rdi
pop rsi
ret
Function at 0x18001cbb0
Capabilities:
Encode data using xor

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x108
movaps xmmword [rsp + 0xf0], xmm6
mov rdi, r9
mov rbx, r8
mov rsi, rdx
movss xmm6, dword [rsp + 0x150]
mov rdx, qword [0x180028490]
test rdx, rdx
jne 0x18001cc6b
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x180024f50]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180024f60]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180024f70]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [0x180024f80]
movaps xmmword [rdx + 0x2e], xmm0
movaps xmm0, xmmword [0x180024f90]
movaps xmmword [rdx + 0x3e], xmm0
mov dword [rdx + 0x4e], 0x5e005b
mov word [rdx + 0x52], 8
mov word [rdx + 0xa6], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 8
inc rax
cmp rax, 0x54
jne 0x18001cc3d
mov word [rsp + 0xe8], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov rdx, rax
mov qword [0x180028490], rax
lea r14, [rsp + 0x64]
movaps xmm0, xmmword [section..rdata]
movups xmmword [r14], xmm0
movups xmm0, xmmword [rbx]
movaps xmmword [r14 - 0x24], xmm0
movups xmm0, xmmword [rdi]
movaps xmmword [r14 - 0x14], xmm0
movss dword [r14 - 4], xmm6
mov rcx, qword [0x180027d28]
test rcx, rcx
je 0x18001ccc9
mov rax, qword [rcx]
mov rax, qword [rax + 0x270]
lea r8, [rsp + 0x30]
mov qword [r8], rax
mov qword [r8 + 8], 0
mov qword [rsp + 0x20], r8
lea r8, [rsp + 0x40]
xor r9d, r9d
call fcn.180020390
movups xmm0, xmmword [r14]
movups xmmword [rsi], xmm0
mov rax, rsi
movaps xmm6, xmmword [rsp + 0xf0]
add rsp, 0x108
pop rbx
pop rdi
pop rsi
pop r14
ret

Function at 0x18001cce8
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0xf0
mov rdi, r9
mov rbx, r8
mov rsi, rdx
mov rdx, qword [0x180028498]
test rdx, rdx
jne 0x18001cd85
lea rdx, [rsp + 0x32]
movaps xmm0, xmmword [0x180024fa0]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180024fb0]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180024fc0]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [0x180024fd0]
movaps xmmword [rdx + 0x2e], xmm0
movaps xmm0, xmmword [0x180024fe0]
movaps xmmword [rdx + 0x3e], xmm0
mov word [rdx + 0x4e], 0x40
mov word [rdx + 0x9e], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x30], 0x40
inc rax
cmp rax, 0x50
jne 0x18001cd57
mov word [rsp + 0xd0], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov rdx, rax
mov qword [0x180028498], rax
mov rax, qword [rbx + 0x10]
mov qword [rsp + 0x40], rax
movups xmm0, xmmword [rbx]
movaps xmmword [rsp + 0x30], xmm0
xorps xmm0, xmm0
movaps xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], 0
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x48], xmm0
mov rax, qword [rdi + 0x10]
mov qword [rsp + 0x58], rax
mov rcx, qword [0x180027d28]
test rcx, rcx
je 0x18001cdf3
mov rax, qword [rcx]
mov rax, qword [rax + 0x270]
lea r8, [rsp + 0xe0]
mov qword [r8], rax
mov qword [r8 + 8], 0
mov qword [rsp + 0x20], r8
lea r8, [rsp + 0x30]
xor r9d, r9d
call fcn.180020390
mov rax, qword [rsp + 0x70]
mov qword [rsi + 0x10], rax
movaps xmm0, xmmword [rsp + 0x60]
movups xmmword [rsi], xmm0
mov rax, rsi
add rsp, 0xf0
pop rbx
pop rdi
pop rsi
ret