joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1800174d4
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0xe0
mov rdi, r8
mov rsi, rdx
mov rdx, qword [0x180028198]
test rdx, rdx
jne 0x180017568
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x1800238d0]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x1800238e0]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x1800238f0]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [str._v_a_b4]
movaps xmmword [rdx + 0x2e], xmm0
movaps xmm0, xmmword [0x180023910]
movaps xmmword [rdx + 0x3e], xmm0
mov word [rdx + 0x9a], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x66
inc rax
cmp rax, 0x4e
jne 0x18001753a
mov word [rsp + 0xdc], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov rdx, rax
mov qword [0x180028198], rax
lea rbx, [rsp + 0x48]
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx - 8], rdi
mov rcx, qword [0x180027d28]
test rcx, rcx
je 0x1800175af
mov rax, qword [rcx]
mov rax, qword [rax + 0x270]
lea r8, [rsp + 0x30]
mov qword [r8], rax
mov qword [r8 + 8], 0
mov qword [rsp + 0x20], r8
lea r8, [rsp + 0x40]
xor r9d, r9d
call fcn.180020390
movups xmm0, xmmword [rbx]
movups xmmword [rsi], xmm0
mov rax, rsi
add rsp, 0xe0
pop rbx
pop rdi
pop rsi
ret

Function at 0x1800175c4
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
sub rsp, 0xb8
mov rsi, r8
mov rdi, rdx
mov rdx, qword [0x1800281a0]
test rdx, rdx
jne 0x180017653
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x180023920]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180023930]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [str.lg0QpM]
movaps xmmword [rdx + 0x1e], xmm0
movabs rax, 0x7f007b004a007b
mov qword [rdx + 0x2e], rax
mov dword [rdx + 0x36], 0x1e0073
mov word [rdx + 0x72], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x1e
inc rax
cmp rax, 0x3a
jne 0x180017625
mov word [rsp + 0xb4], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov rdx, rax
mov qword [0x1800281a0], rax
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], rsi
mov rcx, qword [0x180027d28]
test rcx, rcx
je 0x1800176a1
mov rax, qword [rcx]
mov rax, qword [rax + 0x270]
lea r8, [rsp + 0x30]
mov qword [r8], rax
mov qword [r8 + 8], 0
mov qword [rsp + 0x20], r8
lea rsi, [rsp + 0x40]
mov r8, rsi
xor r9d, r9d
call fcn.180020390
cmp byte [rsi + 0x10], 0
setne al
jmp 0x1800176a1
and al, 1
add rsp, 0xb8
pop rdi
pop rsi
ret
Function at 0x1800176ae
Capabilities:
Encode data using xor

Disassembly:
push rsi
sub rsp, 0x100
mov rsi, rdx
mov rdx, qword [0x1800281a8]
test rdx, rdx
jne 0x18001774c
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x180023950]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180023960]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180023970]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [0x180023980]
movaps xmmword [rdx + 0x2e], xmm0
movaps xmm0, xmmword [0x180023990]
movaps xmmword [rdx + 0x3e], xmm0
movaps xmm0, xmmword [0x1800239a0]
movaps xmmword [rdx + 0x4e], xmm0
mov word [rdx + 0xba], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x7b
inc rax
cmp rax, 0x5e
jne 0x18001771e
mov word [rsp + 0xfc], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov rdx, rax
mov qword [0x1800281a8], rax
mov qword [rsp + 0x30], rsi
mov rcx, qword [0x180027d28]
test rcx, rcx
je 0x180017792
mov rax, qword [rcx]
mov rax, qword [rax + 0x270]
lea r8, [rsp + 0x40]
mov qword [r8], rax
mov qword [r8 + 8], 0
mov qword [rsp + 0x20], r8
lea rsi, [rsp + 0x30]
mov r8, rsi
xor r9d, r9d
call fcn.180020390
mov rax, qword [rsi + 8]
jmp 0x180017792
add rsp, 0x100
pop rsi
ret

Function at 0x18001779c
Capabilities:
Encode data using xor

Disassembly:
push rsi
sub rsp, 0xc0
mov rdx, qword [0x1800281b0]
test rdx, rdx
jne 0x18001781a
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x1800239b0]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x1800239c0]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x1800239d0]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [0x1800239e0]
movaps xmmword [rdx + 0x2e], xmm0
mov word [rdx + 0x7a], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x54
inc rax
cmp rax, 0x3e
jne 0x1800177ec
mov word [rsp + 0xbc], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov rdx, rax
mov qword [0x1800281b0], rax
mov rax, qword [0x180027d58]
mov qword [rsp + 0x30], rax
mov rcx, qword [0x180027d28]
test rcx, rcx
je 0x180017866
mov rax, qword [rcx]
mov rax, qword [rax + 0x270]
lea r8, [rsp + 0x40]
mov qword [r8], rax
mov qword [r8 + 8], 0
mov qword [rsp + 0x20], r8
lea rsi, [rsp + 0x30]
mov r8, rsi
xor r9d, r9d
call fcn.180020390
mov eax, dword [rsi + 8]
jmp 0x180017866
add rsp, 0xc0
pop rsi
ret
Function at 0x180017d8c
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
sub rsp, 0x88
mov rsi, rdx
mov rdx, qword [0x1800281e0]
test rdx, rdx
jne 0x180017e0d
lea rdx, [rsp + 0x32]
movaps xmm0, xmmword [0x180023b70]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180023b80]
movaps xmmword [rdx + 0xe], xmm0
movabs rax, 0x2e002700270024
mov qword [rdx + 0x1e], rax
mov dword [rdx + 0x26], 0x4b002f
mov word [rdx + 0x52], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x30], 0x4b
inc rax
cmp rax, 0x2a
jne 0x180017ddf
mov word [rsp + 0x84], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov rdx, rax
mov qword [0x1800281e0], rax
test rsi, rsi
je 0x180017e4c
mov rax, qword [rsi]
mov rax, qword [rax + 0x270]
lea rcx, [rsp + 0x30]
mov qword [rcx], rax
mov qword [rcx + 8], 0
mov qword [rsp + 0x20], rcx
lea rdi, [rsp + 0x2f]
mov rcx, rsi
mov r8, rdi
xor r9d, r9d
call fcn.180020390
cmp byte [rdi], 0
setne al
jmp 0x180017e4c
and al, 1
add rsp, 0x88
pop rdi
pop rsi
ret

Function at 0x180017f16
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0xd0
mov rdi, r9
mov ebx, r8d
mov rsi, rdx
mov rdx, qword [0x1800281f0]
test rdx, rdx
jne 0x180017fa5
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x180023bb0]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [str.glN]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180023bd0]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [0x180023be0]
movaps xmmword [rdx + 0x2e], xmm0
mov word [rdx + 0x3e], 0x1e
mov word [rdx + 0x7e], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x1e
inc rax
cmp rax, 0x40
jne 0x180017f77
mov word [rsp + 0xc0], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov rdx, rax
mov qword [0x1800281f0], rax
mov byte [rsp + 0x30], bl
mov qword [rsp + 0x38], rdi
test rsi, rsi
je 0x180017fe2
mov rax, qword [rsi]
mov rax, qword [rax + 0x270]
lea rcx, [rsp + 0x40]
mov qword [rcx], rax
mov qword [rcx + 8], 0
mov qword [rsp + 0x20], rcx
lea r8, [rsp + 0x30]
mov rcx, rsi
xor r9d, r9d
call fcn.180020390
nop
add rsp, 0xd0
pop rbx
pop rdi
pop rsi
ret

Function at 0x180018342
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
sub rsp, 0x78
mov rsi, rdx
mov rdx, qword [0x180028218]
test rdx, rdx
jne 0x1800183ae
lea rdx, [rsp + 0x32]
movaps xmm0, xmmword [0x180023cf0]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180023d00]
movaps xmmword [rdx + 0xe], xmm0
mov word [rdx + 0x1e], 0x6f
mov word [rdx + 0x3e], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x30], 0x6f
inc rax
cmp rax, 0x20
jne 0x180018383
mov word [rsp + 0x70], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov rdx, rax
mov qword [0x180028218], rax
test rsi, rsi
je 0x1800183ed
mov rax, qword [rsi]
mov rax, qword [rax + 0x270]
lea rcx, [rsp + 0x30]
mov qword [rcx], rax
mov qword [rcx + 8], 0
mov qword [rsp + 0x20], rcx
lea rdi, [rsp + 0x2f]
mov rcx, rsi
mov r8, rdi
xor r9d, r9d
call fcn.180020390
cmp byte [rdi], 0
setne al
jmp 0x1800183ed
and al, 1
add rsp, 0x78
pop rdi
pop rsi
ret
Function at 0x1800183f6
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
sub rsp, 0x78
mov rsi, rdx
mov rdx, qword [0x180028220]
test rdx, rdx
jne 0x180018462
lea rdx, [rsp + 0x32]
movaps xmm0, xmmword [0x180023d10]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180023d20]
movaps xmmword [rdx + 0xe], xmm0
mov word [rdx + 0x1e], 0x60
mov word [rdx + 0x3e], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x30], 0x60
inc rax
cmp rax, 0x20
jne 0x180018437
mov word [rsp + 0x70], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov rdx, rax
mov qword [0x180028220], rax
test rsi, rsi
je 0x1800184a1
mov rax, qword [rsi]
mov rax, qword [rax + 0x270]
lea rcx, [rsp + 0x30]
mov qword [rcx], rax
mov qword [rcx + 8], 0
mov qword [rsp + 0x20], rcx
lea rdi, [rsp + 0x2f]
mov rcx, rsi
mov r8, rdi
xor r9d, r9d
call fcn.180020390
cmp byte [rdi], 0
setne al
jmp 0x1800184a1
and al, 1
add rsp, 0x78
pop rdi
pop rsi
ret

Function at 0x1800184aa
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
sub rsp, 0xa8
mov rsi, rdx
mov rdx, qword [0x180028228]
test rdx, rdx
jne 0x18001852e
lea rdx, [rsp + 0x32]
movaps xmm0, xmmword [0x180023d30]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180023d40]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [str.1_7]
movaps xmmword [rdx + 0x1e], xmm0
mov dword [rdx + 0x2e], 0x2d002c
mov word [rdx + 0x32], 0x43
mov word [rdx + 0x66], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x30], 0x43
inc rax
cmp rax, 0x34
jne 0x180018500
mov word [rsp + 0x98], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov rdx, rax
mov qword [0x180028228], rax
test rsi, rsi
je 0x18001856a
mov rax, qword [rsi]
mov rax, qword [rax + 0x270]
lea rcx, [rsp + 0x30]
mov qword [rcx], rax
mov qword [rcx + 8], 0
mov qword [rsp + 0x20], rcx
lea rdi, [rsp + 0x28]
mov rcx, rsi
mov r8, rdi
xor r9d, r9d
call fcn.180020390
mov rax, qword [rdi]
jmp 0x18001856a
add rsp, 0xa8
pop rdi
pop rsi
ret

Function at 0x180018574
Capabilities:
Encode data using xor

Disassembly:
push rsi
sub rsp, 0x90
mov rsi, rdx
mov rdx, qword [0x180028230]
test rdx, rdx
jne 0x1800185fa
lea rdx, [rsp + 0x32]
movaps xmm0, xmmword [0x180023d60]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180023d70]
movaps xmmword [rdx + 0xe], xmm0
movabs rax, 0x31001e00280037
mov qword [rdx + 0x1e], rax
mov dword [rdx + 0x26], 0x3d002a
mov word [rdx + 0x2a], 0x58
mov word [rdx + 0x56], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x30], 0x58
inc rax
cmp rax, 0x2c
jne 0x1800185cc
mov word [rsp + 0x88], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov rdx, rax
mov qword [0x180028230], rax
mov byte [rsp + 0x2f], 0
test rsi, rsi
je 0x180018633
mov rax, qword [rsi]
mov rax, qword [rax + 0x270]
lea rcx, [rsp + 0x30]
mov qword [rcx], rax
mov qword [rcx + 8], 0
mov qword [rsp + 0x20], rcx
lea r8, [rsp + 0x2f]
mov rcx, rsi
xor r9d, r9d
call fcn.180020390
nop
add rsp, 0x90
pop rsi
ret
Function at 0x18001863e
Capabilities:
Encode data using xor

Disassembly:
push rsi
sub rsp, 0x90
mov rsi, rdx
mov rdx, qword [0x180028238]
test rdx, rdx
jne 0x1800186b4
lea rdx, [rsp + 0x32]
movaps xmm0, xmmword [0x180023d80]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180023d90]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180023da0]
movaps xmmword [rdx + 0x1e], xmm0
mov word [rdx + 0x5a], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x30], 0x54
inc rax
cmp rax, 0x2e
jne 0x180018686
mov word [rsp + 0x8c], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov rdx, rax
mov qword [0x180028238], rax
mov byte [rsp + 0x2f], 0
test rsi, rsi
je 0x1800186ed
mov rax, qword [rsi]
mov rax, qword [rax + 0x270]
lea rcx, [rsp + 0x30]
mov qword [rcx], rax
mov qword [rcx + 8], 0
mov qword [rsp + 0x20], rcx
lea r8, [rsp + 0x2f]
mov rcx, rsi
xor r9d, r9d
call fcn.180020390
nop
add rsp, 0x90
pop rsi
ret

Function at 0x180018804
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
sub rsp, 0x98
mov rsi, rdx
mov rdx, qword [0x180028248]
test rdx, rdx
jne 0x180018882
lea rdx, [rsp + 0x32]
movaps xmm0, xmmword [0x180023e10]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180023e20]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180023e30]
movaps xmmword [rdx + 0x1e], xmm0
mov dword [rdx + 0x2e], 0xa006b
mov word [rdx + 0x62], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x30], 0xa
inc rax
cmp rax, 0x32
jne 0x180018854
mov word [rsp + 0x94], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov rdx, rax
mov qword [0x180028248], rax
test rsi, rsi
je 0x1800188be
mov rax, qword [rsi]
mov rax, qword [rax + 0x270]
lea rcx, [rsp + 0x30]
mov qword [rcx], rax
mov qword [rcx + 8], 0
mov qword [rsp + 0x20], rcx
lea rdi, [rsp + 0x28]
mov rcx, rsi
mov r8, rdi
xor r9d, r9d
call fcn.180020390
mov rax, qword [rdi]
jmp 0x1800188be
add rsp, 0x98
pop rdi
pop rsi
ret

Function at 0x1800188c8
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
sub rsp, 0xb8
mov rsi, rdx
mov rdx, qword [0x180028250]
test rdx, rdx
jne 0x180018950
lea rdx, [rsp + 0x32]
movaps xmm0, xmmword [0x180023e40]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180023e50]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [str._8__61:]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [0x180023e70]
movaps xmmword [rdx + 0x2e], xmm0
mov word [rdx + 0x3e], 0x5f
mov word [rdx + 0x7e], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x30], 0x5f
inc rax
cmp rax, 0x40
jne 0x180018922
mov word [rsp + 0xb0], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov rdx, rax
mov qword [0x180028250], rax
test rsi, rsi
je 0x18001898b
mov rax, qword [rsi]
mov rax, qword [rax + 0x270]
lea rcx, [rsp + 0x30]
mov qword [rcx], rax
mov qword [rcx + 8], 0
mov qword [rsp + 0x20], rcx
lea rdi, [rsp + 0x2c]
mov rcx, rsi
mov r8, rdi
xor r9d, r9d
call fcn.180020390
mov eax, dword [rdi]
jmp 0x18001898b
add rsp, 0xb8
pop rdi
pop rsi
ret
Function at 0x180018996
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
sub rsp, 0xa8
mov rsi, rdx
mov rdx, qword [0x180028258]
test rdx, rdx
jne 0x180018a22
lea rdx, [rsp + 0x32]
movaps xmm0, xmmword [0x180023e80]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180023e90]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180023ea0]
movaps xmmword [rdx + 0x1e], xmm0
movabs rax, 0x3000600290018
mov qword [rdx + 0x2e], rax
mov dword [rdx + 0x36], 0x6a001a
mov word [rdx + 0x72], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x30], 0x6a
inc rax
cmp rax, 0x3a
jne 0x1800189f4
mov word [rsp + 0xa4], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov rdx, rax
mov qword [0x180028258], rax
test rsi, rsi
je 0x180018a5d
mov rax, qword [rsi]
mov rax, qword [rax + 0x270]
lea rcx, [rsp + 0x30]
mov qword [rcx], rax
mov qword [rcx + 8], 0
mov qword [rsp + 0x20], rcx
lea rdi, [rsp + 0x2c]
mov rcx, rsi
mov r8, rdi
xor r9d, r9d
call fcn.180020390
mov eax, dword [rdi]
jmp 0x180018a5d
add rsp, 0xa8
pop rdi
pop rsi
ret

Function at 0x180018a68
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
sub rsp, 0xe8
mov rdi, r8
mov rsi, rdx
mov rdx, qword [0x180028260]
test rdx, rdx
jne 0x180018b0f
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [str.J_f_8_]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180023ec0]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [str.8_____]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [0x180023ee0]
movaps xmmword [rdx + 0x2e], xmm0
movabs rax, 0x23003e002b0029
mov qword [rdx + 0x3e], rax
mov dword [rdx + 0x46], 0x240025
mov word [rdx + 0x4a], 0x4a
mov word [rdx + 0x96], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x4a
inc rax
cmp rax, 0x4c
jne 0x180018ae1
mov word [rsp + 0xd8], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov rdx, rax
mov qword [0x180028260], rax
xorps xmm0, xmm0
movaps xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 0
test rdi, rdi
je 0x180018b54
mov rax, qword [rdi]
mov rax, qword [rax + 0x270]
lea rcx, [rsp + 0x30]
mov qword [rcx], rax
mov qword [rcx + 8], 0
mov qword [rsp + 0x20], rcx
lea r8, [rsp + 0x40]
mov rcx, rdi
xor r9d, r9d
call fcn.180020390
mov rax, qword [rsp + 0x50]
mov qword [rsi + 0x10], rax
movaps xmm0, xmmword [rsp + 0x40]
movups xmmword [rsi], xmm0
mov rax, rsi
add rsp, 0xe8
pop rdi
pop rsi
ret
Function at 0x180018dfe
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
sub rsp, 0x108
mov rsi, rdx
mov rdx, qword [0x180028280]
test rdx, rdx
jne 0x180018eae
lea rdx, [rsp + 0x32]
movaps xmm0, xmmword [0x180023f80]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180023f90]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180023fa0]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [0x180023fb0]
movaps xmmword [rdx + 0x2e], xmm0
movaps xmm0, xmmword [0x180023fc0]
movaps xmmword [rdx + 0x3e], xmm0
movaps xmm0, xmmword [0x180023fd0]
movaps xmmword [rdx + 0x4e], xmm0
mov dword [rdx + 0x5e], 0x740075
mov word [rdx + 0x62], 0x1a
mov word [rdx + 0xc6], 0
mov eax, 1
movzx ecx, word [rdx - 2]
xor word [rsp + rax*2 + 0x30], cx
inc rax
cmp rax, 0x64
jne 0x180018e80
mov word [rsp + 0xf8], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov rdx, rax
mov qword [0x180028280], rax
test rsi, rsi
je 0x180018eed
mov rax, qword [rsi]
mov rax, qword [rax + 0x270]
lea rcx, [rsp + 0x30]
mov qword [rcx], rax
mov qword [rcx + 8], 0
mov qword [rsp + 0x20], rcx
lea rdi, [rsp + 0x2f]
mov rcx, rsi
mov r8, rdi
xor r9d, r9d
call fcn.180020390
cmp byte [rdi], 0
setne al
jmp 0x180018eed
and al, 1
add rsp, 0x108
pop rdi
pop rsi
ret

Function at 0x180018efa
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0xb0
mov rdi, r8
mov rsi, rdx
mov rdx, qword [0x180028288]
test rdx, rdx
jne 0x180018f89
lea rdx, [rsp + 0x32]
movaps xmm0, xmmword [0x180023fe0]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180023ff0]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180024000]
movaps xmmword [rdx + 0x1e], xmm0
movabs rax, 0x4600470041005c
mov qword [rdx + 0x2e], rax
mov word [rdx + 0x36], 0x28
mov word [rdx + 0x6e], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x30], 0x28
inc rax
cmp rax, 0x38
jne 0x180018f5b
mov word [rsp + 0xa0], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov rdx, rax
mov qword [0x180028288], rax
test rdi, rdi
je 0x180018fc4
mov rax, qword [rdi]
mov rax, qword [rax + 0x270]
lea rcx, [rsp + 0x30]
mov qword [rcx], rax
mov qword [rcx + 8], 0
mov qword [rsp + 0x20], rcx
lea rbx, [rsp + 0x2f]
mov rcx, rdi
mov r8, rbx
xor r9d, r9d
call fcn.180020390
mov al, byte [rbx]
jmp 0x180018fc4
mov byte [rsi], al
mov rax, rsi
add rsp, 0xb0
pop rbx
pop rdi
pop rsi
ret

Function at 0x1800191ba
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0xc8
cmp qword [0x1800282a8], 0
jne 0x180019254
lea rdx, [rsp + 0x22]
movaps xmm0, xmmword [0x1800240d0]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x1800240e0]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x1800240f0]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [0x180024100]
movaps xmmword [rdx + 0x2e], xmm0
movabs rax, 0xd0017003b000a
mov qword [rdx + 0x3e], rax
mov dword [rdx + 0x46], 0xc0016
mov word [rdx + 0x4a], pe_nt_image_headers64
mov word [rdx + 0x96], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x20], 0x78
inc rax
cmp rax, 0x4c
jne 0x180019229
mov word [rsp + 0xb8], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov qword [0x1800282a8], rax
add rsp, 0xc8
ret
Function at 0x18001925c
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
sub rsp, 0xc8
mov rsi, rdx
mov rdx, qword [0x1800282b0]
test rdx, rdx
jne 0x1800192f9
lea rdx, [rsp + 0x32]
movaps xmm0, xmmword [str._xQLJnW_UKN]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180024120]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180024130]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [0x180024140]
movaps xmmword [rdx + 0x2e], xmm0
movabs rax, 0x5000510057004a
mov qword [rdx + 0x3e], rax
mov word [rdx + 0x46], 0x3e
mov word [rdx + 0x8e], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x30], 0x3e
inc rax
cmp rax, 0x48
jne 0x1800192cb
mov word [rsp + 0xc0], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov rdx, rax
mov qword [0x1800282b0], rax
test rsi, rsi
je 0x180019335
mov rax, qword [rsi]
mov rax, qword [rax + 0x270]
lea rcx, [rsp + 0x30]
mov qword [rcx], rax
mov qword [rcx + 8], 0
mov qword [rsp + 0x20], rcx
lea rdi, [rsp + 0x28]
mov rcx, rsi
mov r8, rdi
xor r9d, r9d
call fcn.180020390
mov rax, qword [rdi]
jmp 0x180019335
add rsp, 0xc8
pop rdi
pop rsi
ret

Function at 0x1800195d0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
sub rsp, 0xa8
mov rsi, rdx
mov rdx, qword [0x1800282d0]
test rdx, rdx
jne 0x180019655
lea rdx, [rsp + 0x32]
movaps xmm0, xmmword [0x1800241f0]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180024200]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180024210]
movaps xmmword [rdx + 0x1e], xmm0
movabs rax, 0x11006300740078
mov qword [rdx + 0x2e], rax
mov word [rdx + 0x6a], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x30], 0x11
inc rax
cmp rax, 0x36
jne 0x180019627
mov word [rsp + 0x9c], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov rdx, rax
mov qword [0x1800282d0], rax
test rsi, rsi
je 0x180019690
mov rax, qword [rsi]
mov rax, qword [rax + 0x270]
lea rcx, [rsp + 0x30]
mov qword [rcx], rax
mov qword [rcx + 8], 0
mov qword [rsp + 0x20], rcx
lea rdi, [rsp + 0x2f]
mov rcx, rsi
mov r8, rdi
xor r9d, r9d
call fcn.180020390
mov al, byte [rdi]
jmp 0x180019690
add rsp, 0xa8
pop rdi
pop rsi
ret

Function at 0x18001969a
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
sub rsp, 0xb8
mov rsi, rdx
mov rdx, qword [0x1800282d8]
test rdx, rdx
jne 0x18001971c
lea rdx, [rsp + 0x32]
movaps xmm0, xmmword [0x180024220]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180024230]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180024240]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [0x180024250]
movaps xmmword [rdx + 0x2e], xmm0
mov word [rdx + 0x7a], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x30], 0x68
inc rax
cmp rax, 0x3e
jne 0x1800196ee
mov word [rsp + 0xac], 0
lea rcx, [0x180027d40]
call fcn.180003f18
mov rdx, rax
mov qword [0x1800282d8], rax
test rsi, rsi
je 0x180019757
mov rax, qword [rsi]
mov rax, qword [rax + 0x270]
lea rcx, [rsp + 0x30]
mov qword [rcx], rax
mov qword [rcx + 8], 0
mov qword [rsp + 0x20], rcx
lea rdi, [rsp + 0x2f]
mov rcx, rsi
mov r8, rdi
xor r9d, r9d
call fcn.180020390
mov al, byte [rdi]
jmp 0x180019757
add rsp, 0xb8
pop rdi
pop rsi
ret