joyce8/EMBER2024-capa huggingface dataset:
Function at 0x180010c88
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rdx
push rbx
sub rsp, 0x30
mov rbx, rdx
xor eax, eax
mov dword [rsp + 0x20], eax
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], 0xf
mov byte [rdx], al
mov dword [rsp + 0x20], 2
xor r8d, r8d
lea edx, [rax + 6]
mov rcx, rbx
call fcn.180004190
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x180010cd2
mov rcx, qword [rbx]
nop
mov dword [rcx], 0x89e465bd
nop
mov word [rcx + 4], 0x56c7
mov byte [rcx + 6], 0x3d
mov edx, 0x9d7780da
mov r8d, 7
imul edx, edx, 0x343fd
add edx, 0x269ec3
mov eax, edx
shr eax, 0x10
xor byte [rcx], al
inc rcx
sub r8, 1
jne 0x180010cef
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x180010d14
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rdx
push rbx
sub rsp, 0x30
mov rbx, rdx
xor eax, eax
mov dword [rsp + 0x20], eax
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], 0xf
mov byte [rdx], al
mov dword [rsp + 0x20], 2
xor r8d, r8d
lea edx, [rax + 0xa]
mov rcx, rbx
call fcn.180004190
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x180010d5e
mov rcx, qword [rbx]
nop
mov dword [rcx], 0x2767e108
nop
mov dword [rcx + 4], 0xc7040de
nop
mov word [rcx + 8], 0x5838
mov byte [rcx + 0xa], 0xb1
mov edx, 0xa078037e
mov r8d, VariantTimeToDosDateTime
imul edx, edx, 0x343fd
add edx, 0x269ec3
mov eax, edx
shr eax, 0x10
xor byte [rcx], al
inc rcx
sub r8, 1
jne 0x180010d83
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x180010da8
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rdx
push rbx
sub rsp, 0x30
mov rbx, rdx
xor eax, eax
mov dword [rsp + 0x20], eax
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], 0xf
mov byte [rdx], al
mov dword [rsp + 0x20], 2
xor r8d, r8d
lea edx, [rax + 5]
mov rcx, rbx
call fcn.180004190
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x180010df2
mov rcx, qword [rbx]
nop
mov dword [rcx], 0x2a11ede7
nop
mov word [rcx + 4], 0xfd5c
mov edx, 0xe5bfcfe6
mov r8d, 6
imul edx, edx, 0x343fd
add edx, 0x269ec3
mov eax, edx
shr eax, 0x10
xor byte [rcx], al
inc rcx
sub r8, 1
jne 0x180010e0b
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x180010e30
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rdx
push rbx
sub rsp, 0x30
mov rbx, rdx
xor eax, eax
mov dword [rsp + 0x20], eax
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], 0xf
mov byte [rdx], al
mov dword [rsp + 0x20], 2
xor r8d, r8d
lea edx, [rax + 6]
mov rcx, rbx
call fcn.180004190
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x180010e7a
mov rcx, qword [rbx]
nop
mov dword [rcx], 0xde37dcf2
nop
mov word [rcx + 4], 0xe56
mov byte [rcx + 6], 0xd6
mov edx, 0x40dcfaaa
mov r8d, 7
imul edx, edx, 0x343fd
add edx, 0x269ec3
mov eax, edx
shr eax, 0x10
xor byte [rcx], al
inc rcx
sub r8, 1
jne 0x180010e97
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x180010ebc
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rdx
push rbx
sub rsp, 0x30
mov rbx, rdx
xor eax, eax
mov dword [rsp + 0x20], eax
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], 0xf
mov byte [rdx], al
mov dword [rsp + 0x20], 2
xor r8d, r8d
lea edx, [rax + 4]
mov rcx, rbx
call fcn.180004190
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x180010f06
mov rcx, qword [rbx]
nop
mov dword [rcx], 0xfcb22578
nop
mov byte [rcx + 4], 0x48
mov edx, 0xf8823043
mov r8d, 5
imul edx, edx, 0x343fd
add edx, 0x269ec3
mov eax, edx
shr eax, 0x10
xor byte [rcx], al
inc rcx
sub r8, 1
jne 0x180010f1d
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x180010f44
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rdx
push rbx
sub rsp, 0x30
mov rbx, rdx
xor eax, eax
mov dword [rsp + 0x20], eax
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], 0xf
mov byte [rdx], al
mov dword [rsp + 0x20], 2
xor r8d, r8d
lea edx, [rax + 4]
mov rcx, rbx
call fcn.180004190
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x180010f8e
mov rcx, qword [rbx]
nop
mov dword [rcx], 0x844cfa2a
nop
mov byte [rcx + 4], 0x59
mov edx, 0xf78681b2
mov r8d, 5
imul edx, edx, 0x343fd
add edx, 0x269ec3
mov eax, edx
shr eax, 0x10
xor byte [rcx], al
inc rcx
sub r8, 1
jne 0x180010fa5
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x180010fcc
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rdx
push rbx
sub rsp, 0x30
mov rbx, rdx
xor eax, eax
mov dword [rsp + 0x20], eax
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], 0xf
mov byte [rdx], al
mov dword [rsp + 0x20], 2
xor r8d, r8d
lea edx, [rax + 8]
mov rcx, rbx
call fcn.180004190
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x180011016
mov rcx, qword [rbx]
nop
mov dword [rcx], 0xc8f0d6e2
nop
mov dword [rcx + 4], 0x9162cb7f
nop
mov byte [rcx + 8], DllRegisterServer
mov edx, 0xfb9c013
mov r8d, 9
imul edx, edx, 0x343fd
add edx, 0x269ec3
mov eax, edx
shr eax, 0x10
xor byte [rcx], al
inc rcx
sub r8, 1
jne 0x180011035
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18001105c
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rdx
push rbx
sub rsp, 0x30
mov rbx, rdx
xor eax, eax
mov dword [rsp + 0x20], eax
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], 0xf
mov byte [rdx], al
mov dword [rsp + 0x20], 2
xor r8d, r8d
lea edx, [rax + 6]
mov rcx, rbx
call fcn.180004190
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x1800110a6
mov rcx, qword [rbx]
nop
mov r8d, 7
mov dword [rcx], 0x1eff8b07
nop
mov word [rcx + 4], 0xe8ad
mov byte [rcx + 6], 0x52
mov edx, 0xd9b340d7
imul edx, edx, 0x343fd
add edx, 0x269ec3
mov eax, edx
shr eax, 0x10
xor byte [rcx], al
inc rcx
sub r8, 1
jne 0x1800110c3
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x1800110e8
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rdx
push rbx
sub rsp, 0x30
mov rbx, rdx
xor eax, eax
mov dword [rsp + 0x20], eax
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], 0xf
mov byte [rdx], al
mov dword [rsp + 0x20], 2
xor r8d, r8d
lea edx, [rax + 6]
mov rcx, rbx
call fcn.180004190
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x180011132
mov rcx, qword [rbx]
nop
mov dword [rcx], 0x77c75336
nop
mov word [rcx + 4], 0xa9f2
mov byte [rcx + 6], 0xd0
mov edx, 0xe23a3d66
mov r8d, 7
imul edx, edx, 0x343fd
add edx, 0x269ec3
mov eax, edx
shr eax, 0x10
xor byte [rcx], al
inc rcx
sub r8, 1
jne 0x18001114f
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x180011174
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rdx
push rbx
sub rsp, 0x30
mov rbx, rdx
xor eax, eax
mov dword [rsp + 0x20], eax
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], 0xf
mov byte [rdx], al
mov dword [rsp + 0x20], 2
xor r8d, r8d
lea edx, [rax + 6]
mov rcx, rbx
call fcn.180004190
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x1800111be
mov rcx, qword [rbx]
nop
mov dword [rcx], 0xc8f0b317
nop
mov word [rcx + 4], 0xee8f
mov byte [rcx + 6], 0x49
mov edx, 0x804620e5
mov r8d, 7
imul edx, edx, 0x343fd
add edx, 0x269ec3
mov eax, edx
shr eax, 0x10
xor byte [rcx], al
inc rcx
sub r8, 1
jne 0x1800111db
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x180011200
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rdx
push rbx
sub rsp, 0x30
mov rbx, rdx
xor eax, eax
mov dword [rsp + 0x20], eax
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], 0xf
mov byte [rdx], al
mov dword [rsp + 0x20], 2
xor r8d, r8d
lea edx, [rax + 6]
mov rcx, rbx
call fcn.180004190
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x18001124a
mov rcx, qword [rbx]
nop
mov dword [rcx], 0x603b1745
nop
mov word [rcx + 4], 0xd372
mov byte [rcx + 6], 0x4c
mov edx, 0x7efc5e20
mov r8d, 7
imul edx, edx, 0x343fd
add edx, 0x269ec3
mov eax, edx
shr eax, 0x10
xor byte [rcx], al
inc rcx
sub r8, 1
jne 0x180011267
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x18001128c
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rdx
push rbx
sub rsp, 0x30
mov rbx, rdx
xor eax, eax
mov dword [rsp + 0x20], eax
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], 0xf
mov byte [rdx], al
mov dword [rsp + 0x20], 2
xor r8d, r8d
lea edx, [rax + 0xa]
mov rcx, rbx
call fcn.180004190
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x1800112d6
mov rcx, qword [rbx]
nop
mov dword [rcx], 0x1d7a290
nop
mov dword [rcx + 4], 0xb880767d
nop
mov word [rcx + 8], 0xadb
mov byte [rcx + 0xa], reloc.OLEAUT32.dll_DllRegisterServer
mov edx, 0x6fbed621
mov r8d, VariantTimeToDosDateTime
imul edx, edx, 0x343fd
add edx, 0x269ec3
mov eax, edx
shr eax, 0x10
xor byte [rcx], al
inc rcx
sub r8, 1
jne 0x1800112fb
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x180011320
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rdx
push rbx
sub rsp, 0x30
mov rbx, rdx
xor eax, eax
mov dword [rsp + 0x20], eax
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], 0xf
mov byte [rdx], al
mov dword [rsp + 0x20], 2
xor r8d, r8d
lea edx, [rax + 6]
mov rcx, rbx
call fcn.180004190
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x18001136a
mov rcx, qword [rbx]
nop
mov dword [rcx], 0x1faf195d
nop
mov word [rcx + 4], 0xcadc
mov byte [rcx + 6], 0xfe
mov edx, 0xbed65af0
mov r8d, 7
imul edx, edx, 0x343fd
add edx, 0x269ec3
mov eax, edx
shr eax, 0x10
xor byte [rcx], al
inc rcx
sub r8, 1
jne 0x180011387
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1800113ac
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rdx
push rbx
sub rsp, 0x30
mov rbx, rdx
xor eax, eax
mov dword [rsp + 0x20], eax
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], 0xf
mov byte [rdx], al
mov dword [rsp + 0x20], 2
xor r8d, r8d
lea edx, [rax + 4]
mov rcx, rbx
call fcn.180004190
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x1800113f6
mov rcx, qword [rbx]
nop
mov dword [rcx], 0xcf84ab77
nop
mov byte [rcx + 4], 0x88
mov edx, 0xf057feef
mov r8d, 5
imul edx, edx, 0x343fd
add edx, 0x269ec3
mov eax, edx
shr eax, 0x10
xor byte [rcx], al
inc rcx
sub r8, 1
jne 0x18001140d
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x180011434
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rdx
push rbx
sub rsp, 0x30
mov rbx, rdx
xor eax, eax
mov dword [rsp + 0x20], eax
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], 0xf
mov byte [rdx], al
mov dword [rsp + 0x20], 2
xor r8d, r8d
lea edx, [rax + 8]
mov rcx, rbx
call fcn.180004190
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x18001147e
mov rcx, qword [rbx]
nop
mov dword [rcx], 0x67ba2519
nop
mov dword [rcx + 4], 0xfbbae363
nop
mov byte [rcx + 8], 0x17
mov edx, 0x91d257eb
mov r8d, 9
imul edx, edx, 0x343fd
add edx, 0x269ec3
mov eax, edx
shr eax, 0x10
xor byte [rcx], al
inc rcx
sub r8, 1
jne 0x18001149d
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1800114c4
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rdx
push rbx
sub rsp, 0x30
mov rbx, rdx
xor eax, eax
mov dword [rsp + 0x20], eax
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], 0xf
mov byte [rdx], al
mov dword [rsp + 0x20], 2
xor r8d, r8d
lea edx, [rax + 4]
mov rcx, rbx
call fcn.180004190
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x18001150e
mov rcx, qword [rbx]
nop
mov dword [rcx], 0x3749b144
nop
mov byte [rcx + 4], 0x99
mov edx, 0xeddfc690
mov r8d, 5
imul edx, edx, 0x343fd
add edx, 0x269ec3
mov eax, edx
shr eax, 0x10
xor byte [rcx], al
inc rcx
sub r8, 1
jne 0x180011525
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18001154c
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rdx
push rbx
sub rsp, 0x30
mov rbx, rdx
xor eax, eax
mov dword [rsp + 0x20], eax
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], 0xf
mov byte [rdx], al
mov dword [rsp + 0x20], 2
xor r8d, r8d
lea edx, [rax + 6]
mov rcx, rbx
call fcn.180004190
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x180011596
mov rcx, qword [rbx]
nop
mov dword [rcx], 0x33c6621c
nop
mov word [rcx + 4], 0xd73e
mov byte [rcx + 6], 0x45
mov edx, 0xef30ad1
mov r8d, 7
imul edx, edx, 0x343fd
add edx, 0x269ec3
mov eax, edx
shr eax, 0x10
xor byte [rcx], al
inc rcx
sub r8, 1
jne 0x1800115b3
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1800115d8
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rdx
push rbx
sub rsp, 0x30
mov rbx, rdx
xor eax, eax
mov dword [rsp + 0x20], eax
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], 0xf
mov byte [rdx], al
mov dword [rsp + 0x20], 2
xor r8d, r8d
lea edx, [rax + 6]
mov rcx, rbx
call fcn.180004190
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x180011622
mov rcx, qword [rbx]
nop
mov dword [rcx], 0xcbfe09e2
nop
mov word [rcx + 4], 0x689
mov byte [rcx + 6], 0xa8
mov edx, 0xc8a7dc7b
mov r8d, 7
imul edx, edx, 0x343fd
add edx, 0x269ec3
mov eax, edx
shr eax, 0x10
xor byte [rcx], al
inc rcx
sub r8, 1
jne 0x18001163f
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x180011664
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rdx
push rbx
sub rsp, 0x30
mov rbx, rdx
xor eax, eax
mov dword [rsp + 0x20], eax
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], 0xf
mov byte [rdx], al
mov dword [rsp + 0x20], 2
xor r8d, r8d
lea edx, [rax + 6]
mov rcx, rbx
call fcn.180004190
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x1800116ae
mov rcx, qword [rbx]
nop
mov dword [rcx], 0x6b93230c
nop
mov word [rcx + 4], 0xd619
mov byte [rcx + 6], 0xc7
mov edx, 0xf40ec3a3
mov r8d, 7
imul edx, edx, 0x343fd
add edx, 0x269ec3
mov eax, edx
shr eax, 0x10
xor byte [rcx], al
inc rcx
sub r8, 1
jne 0x1800116cb
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1800116f0
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rdx
push rbx
sub rsp, 0x30
mov rbx, rdx
xor eax, eax
mov dword [rsp + 0x20], eax
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], 0xf
mov byte [rdx], al
mov dword [rsp + 0x20], 2
xor r8d, r8d
lea edx, [rax + 8]
mov rcx, rbx
call fcn.180004190
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x18001173a
mov rcx, qword [rbx]
nop
mov dword [rcx], 0xa4334b97
nop
mov dword [rcx + 4], 0x2a3d0831
nop
mov byte [rcx + 8], reloc.OLEAUT32.dll_VariantTimeToDosDateTime
mov edx, 0xbf2937ef
mov r8d, 9
imul edx, edx, 0x343fd
add edx, 0x269ec3
mov eax, edx
shr eax, 0x10
xor byte [rcx], al
inc rcx
sub r8, 1
jne 0x180011759
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x180011780
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rdx
push rbx
sub rsp, 0x30
mov rbx, rdx
xor eax, eax
mov dword [rsp + 0x20], eax
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], 0xf
mov byte [rdx], al
mov dword [rsp + 0x20], 2
xor r8d, r8d
lea edx, [rax + 0xa]
mov rcx, rbx
call fcn.180004190
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x1800117ca
mov rcx, qword [rbx]
nop
mov dword [rcx], 0xac4bdc44
nop
mov dword [rcx + 4], 0x797e1977
nop
mov word [rcx + 8], 0x2d13
mov byte [rcx + 0xa], 0xa2
mov edx, 0x6388fc54
mov r8d, VariantTimeToDosDateTime
imul edx, edx, 0x343fd
add edx, 0x269ec3
mov eax, edx
shr eax, 0x10
xor byte [rcx], al
inc rcx
sub r8, 1
jne 0x1800117ef
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x180011814
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rdx
push rbx
sub rsp, 0x30
mov rbx, rdx
xor eax, eax
mov dword [rsp + 0x20], eax
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], 0xf
mov byte [rdx], al
mov dword [rsp + 0x20], 2
xor r8d, r8d
lea edx, [rax + 6]
mov rcx, rbx
call fcn.180004190
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x18001185e
mov rcx, qword [rbx]
nop
mov dword [rcx], 0x207efb5a
nop
mov word [rcx + 4], 0x2cbc
mov byte [rcx + 6], 0xa6
mov edx, 0xfedf34c8
mov r8d, 7
imul edx, edx, 0x343fd
add edx, 0x269ec3
mov eax, edx
shr eax, 0x10
xor byte [rcx], al
inc rcx
sub r8, 1
jne 0x18001187b
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1800118a0
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rdx
push rbx
sub rsp, 0x30
mov rbx, rdx
xor eax, eax
mov dword [rsp + 0x20], eax
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], 0xf
mov byte [rdx], al
mov dword [rsp + 0x20], 2
xor r8d, r8d
lea edx, [rax + 9]
mov rcx, rbx
call fcn.180004190
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x1800118ea
mov rcx, qword [rbx]
nop
mov dword [rcx], 0x91612b49
nop
mov dword [rcx + 4], 0xa2089cd0
nop
mov word [rcx + 8], 0x88fd
mov edx, 0xcbb84535
mov r8d, 0xa
imul edx, edx, 0x343fd
add edx, 0x269ec3
mov eax, edx
shr eax, 0x10
xor byte [rcx], al
inc rcx
sub r8, 1
jne 0x18001190b
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x180011930
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rdx
push rdi
sub rsp, 0x30
mov rbx, rdx
xor edi, edi
mov dword [rax - 0x18], edi
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], rdi
mov qword [rdx + 0x18], 0xf
mov byte [rdx], dil
mov dword [rax - 0x18], 2
xor r8d, r8d
lea edx, [rdi + 9]
mov rcx, rbx
call fcn.180004190
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x18001197f
mov rcx, qword [rbx]
nop
mov dword [rcx], 0x8814b4dd
nop
lea rdx, [rcx + 4]
lea eax, [rdi + 0x4d]
mov byte [rdx], al
inc edi
inc rdx
cmp edi, 2
jl 0x18001198b
mov word [rcx + 6], 0xa36
mov r8d, 0xa
nop
mov word [rcx + 8], 0x271
mov edx, 0xcbb84556
imul edx, edx, 0x343fd
add edx, 0x269ec3
mov eax, edx
shr eax, 0x10
xor byte [rcx], al
inc rcx
sub r8, 1
jne 0x1800119b2
mov rax, rbx
mov rbx, qword [rsp + 0x40]
add rsp, 0x30
pop rdi
ret
Function at 0x1800119dc
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rdx
push rbx
sub rsp, 0x30
mov rbx, rdx
xor eax, eax
mov dword [rsp + 0x20], eax
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], 0xf
mov byte [rdx], al
mov dword [rsp + 0x20], 2
xor r8d, r8d
lea edx, [rax + 6]
mov rcx, rbx
call fcn.180004190
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x180011a26
mov rcx, qword [rbx]
nop
mov dword [rcx], 0x628390f4
nop
mov word [rcx + 4], 0xf638
mov byte [rcx + 6], 0x53
mov edx, 0x54e71e95
mov r8d, 7
imul edx, edx, 0x343fd
add edx, 0x269ec3
mov eax, edx
shr eax, 0x10
xor byte [rcx], al
inc rcx
sub r8, 1
jne 0x180011a43
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x180011a68
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rdx
push rbx
sub rsp, 0x30
mov rbx, rdx
xor eax, eax
mov dword [rsp + 0x20], eax
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], 0xf
mov byte [rdx], al
mov dword [rsp + 0x20], 2
xor r8d, r8d
lea edx, [rax + 3]
mov rcx, rbx
call fcn.180004190
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x180011ab2
mov rcx, qword [rbx]
nop
mov dword [rcx], 0x252d717d
mov edx, 0x1710c6cf
mov r8d, 4
imul edx, edx, 0x343fd
add edx, 0x269ec3
mov eax, edx
shr eax, 0x10
xor byte [rcx], al
inc rcx
sub r8, 1
jne 0x180011ac4
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x180011aec
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rdx
push rbx
sub rsp, 0x30
mov rbx, rdx
xor eax, eax
mov dword [rsp + 0x20], eax
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], 0xf
mov byte [rdx], al
mov dword [rsp + 0x20], 2
xor r8d, r8d
lea edx, [rax + 6]
mov rcx, rbx
call fcn.180004190
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x180011b36
mov rcx, qword [rbx]
nop
mov dword [rcx], 0x697c88b4
nop
mov word [rcx + 4], 0xe4f3
mov byte [rcx + 6], 0x53
mov edx, 0x40dd4886
mov r8d, 7
imul edx, edx, 0x343fd
add edx, 0x269ec3
mov eax, edx
shr eax, 0x10
xor byte [rcx], al
inc rcx
sub r8, 1
jne 0x180011b53
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x180011b78
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rdx
push rbx
sub rsp, 0x30
mov rbx, rdx
xor eax, eax
mov dword [rsp + 0x20], eax
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], 0xf
mov byte [rdx], al
mov dword [rsp + 0x20], 2
xor r8d, r8d
lea edx, [rax + 6]
mov rcx, rbx
call fcn.180004190
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x180011bc2
mov rcx, qword [rbx]
nop
mov dword [rcx], 0x644bd55c
nop
mov word [rcx + 4], 0x4c06
mov byte [rcx + 6], 0xe9
mov edx, 0x4643e211
mov r8d, 7
imul edx, edx, 0x343fd
add edx, 0x269ec3
mov eax, edx
shr eax, 0x10
xor byte [rcx], al
inc rcx
sub r8, 1
jne 0x180011bdf
mov rax, rbx
add rsp, 0x30
pop rbx
ret