joyce8/EMBER2024-capa huggingface dataset:
Function at 0x180010d60
Capabilities:
Encode data using xor

Disassembly:
push rsi
sub rsp, 0xd0
movaps xmmword [rsp + 0xc0], xmm6
movaps xmm6, xmm1
mov rdx, qword [0x18001a228]
test rdx, rdx
jne 0x180010dfa
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x180017210]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [str.cA_EMeI_dAJZIZbI_NIB_tlNTJBSjFSOkNEUFU_tfSFI]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180017230]
movaps xmmword [rdx + 0x1e], xmm0
movabs rax, 0x5b004900060051
mov qword [rdx + 0x2e], rax
mov dword [rdx + 0x36], 0x460041
mov word [rdx + 0x3a], 0x28
mov word [rdx + 0x76], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x28
inc rax
cmp rax, 0x3c
jne 0x180010dcb
mov word [rsp + 0xb8], 0
lea rcx, [rsp + 0x30]
xor r8d, r8d
call fcn.18000e524
mov rdx, rax
mov qword [0x18001a228], rax
cmp byte [0x18001a238], 1
jne 0x180010e50
mov rcx, qword [0x18001a230]
lea rsi, [rsp + 0x30]
movsd qword [rsi], xmm6
mov rax, qword [0x18001a1c0]
lea r8, [rsp + 0x40]
mov qword [r8], rax
mov qword [r8 + 8], 0
mov qword [rsp + 0x20], r8
mov r8, rsi
xor r9d, r9d
call fcn.180014620
movsd xmm0, qword [rsi + 8]
movaps xmm6, xmmword [rsp + 0xc0]
add rsp, 0xd0
pop rsi
ret
mov byte [0x18001a238], 1
lea rdx, str.Engine.Default__KismetMathLibrary
lea rcx, [rsp + 0x40]
xor r8d, r8d
call fcn.18000e524
mov rcx, rax
mov qword [0x18001a230], rax
mov rdx, qword [0x18001a228]
jmp 0x180010e0a

Function at 0x180010e7e
Capabilities:
Encode data using xor

Disassembly:
push rsi
sub rsp, 0xe0
movaps xmmword [rsp + 0xd0], xmm7
movaps xmmword [rsp + 0xc0], xmm6
movaps xmm6, xmm2
movaps xmm7, xmm1
mov rdx, qword [0x18001a240]
test rdx, rdx
jne 0x180010f13
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x180017240]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180017250]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180017260]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [0x180017270]
movaps xmmword [rdx + 0x2e], xmm0
mov word [rdx + 0x7a], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x27
inc rax
cmp rax, 0x3e
jne 0x180010ee4
mov word [rsp + 0xbc], 0
lea rcx, [rsp + 0x30]
xor r8d, r8d
call fcn.18000e524
mov rdx, rax
mov qword [0x18001a240], rax
cmp byte [0x18001a250], 1
jne 0x180010f76
mov rcx, qword [0x18001a248]
lea rsi, [rsp + 0x40]
movsd qword [rsi], xmm7
movsd qword [rsi + 8], xmm6
mov rax, qword [0x18001a1c0]
lea r8, [rsp + 0x30]
mov qword [r8], rax
mov qword [r8 + 8], 0
mov qword [rsp + 0x20], r8
mov r8, rsi
xor r9d, r9d
call fcn.180014620
movsd xmm0, qword [rsi + 0x10]
movaps xmm6, xmmword [rsp + 0xc0]
movaps xmm7, xmmword [rsp + 0xd0]
add rsp, 0xe0
pop rsi
ret
mov byte [0x18001a250], 1
lea rdx, str.Engine.Default__KismetMathLibrary
lea rcx, [rsp + 0x40]
xor r8d, r8d
call fcn.18000e524
mov rcx, rax
mov qword [0x18001a248], rax
mov rdx, qword [0x18001a240]
jmp 0x180010f23
Function at 0x180010fa8
Capabilities:
Encode data using xor

Disassembly:
push rsi
sub rsp, 0xd0
movaps xmmword [rsp + 0xc0], xmm6
movaps xmm6, xmm1
mov rdx, qword [0x18001a258]
test rdx, rdx
jne 0x180011032
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x180017280]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180017290]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x1800172a0]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [0x1800172b0]
movaps xmmword [rdx + 0x2e], xmm0
mov word [rdx + 0x7a], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 6
inc rax
cmp rax, 0x3e
jne 0x180011003
mov word [rsp + 0xbc], 0
lea rcx, [rsp + 0x30]
xor r8d, r8d
call fcn.18000e524
mov rdx, rax
mov qword [0x18001a258], rax
cmp byte [0x18001a268], 1
jne 0x180011086
mov rcx, qword [0x18001a260]
lea rsi, [rsp + 0x30]
movsd qword [rsi], xmm6
mov rax, qword [0x18001a1c0]
lea r8, [rsp + 0x40]
mov qword [r8], rax
mov qword [r8 + 8], 0
mov qword [rsp + 0x20], r8
mov r8, rsi
xor r9d, r9d
call fcn.180014620
mov eax, dword [rsi + 8]
movaps xmm6, xmmword [rsp + 0xc0]
add rsp, 0xd0
pop rsi
ret
mov byte [0x18001a268], 1
lea rdx, str.Engine.Default__KismetMathLibrary
lea rcx, [rsp + 0x40]
xor r8d, r8d
call fcn.18000e524
mov rcx, rax
mov qword [0x18001a260], rax
mov rdx, qword [0x18001a258]
jmp 0x180011042

Function at 0x1800110b4
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0xf0
mov rsi, r8
mov rdi, rdx
mov rdx, qword [0x18001a270]
test rdx, rdx
jne 0x180011154
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [str.H_r___f]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x1800172d0]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x1800172e0]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [0x1800172f0]
movaps xmmword [rdx + 0x2e], xmm0
movaps xmm0, xmmword [0x180017300]
movaps xmmword [rdx + 0x3e], xmm0
mov dword [rdx + 0x4e], 0x48002d
mov word [rdx + 0xa2], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x48
inc rax
cmp rax, 0x52
jne 0x180011125
mov word [rsp + 0xe4], 0
lea rcx, [rsp + 0x30]
xor r8d, r8d
call fcn.18000e524
mov rdx, rax
mov qword [0x18001a270], rax
cmp byte [0x18001a280], 1
jne 0x1800111bd
mov rcx, qword [0x18001a278]
mov rax, qword [rdi + 0x10]
lea rbx, [rsp + 0x40]
mov qword [rbx + 0x10], rax
movups xmm0, xmmword [rdi]
movaps xmmword [rbx], xmm0
movups xmm0, xmmword [rsi]
movups xmmword [rbx + 0x18], xmm0
mov rax, qword [rsi + 0x10]
mov qword [rbx + 0x28], rax
mov rax, qword [0x18001a1c0]
lea r8, [rsp + 0x30]
mov qword [r8], rax
mov qword [r8 + 8], 0
mov qword [rsp + 0x20], r8
mov r8, rbx
xor r9d, r9d
call fcn.180014620
movsd xmm0, qword [rbx + 0x30]
add rsp, 0xf0
pop rbx
pop rdi
pop rsi
ret
mov byte [0x18001a280], 1
lea rdx, str.Engine.Default__KismetMathLibrary
lea rcx, [rsp + 0x40]
xor r8d, r8d
call fcn.18000e524
mov rcx, rax
mov qword [0x18001a278], rax
mov rdx, qword [0x18001a270]
jmp 0x180011164
Function at 0x1800111ee
Capabilities:
Encode data using xor

Disassembly:
push rsi
sub rsp, 0xd0
movaps xmmword [rsp + 0xc0], xmm6
movaps xmm6, xmm1
mov rdx, qword [0x18001a288]
test rdx, rdx
jne 0x180011288
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x180017310]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180017320]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180017330]
movaps xmmword [rdx + 0x1e], xmm0
movabs rax, 0x140036004b001c
mov qword [rdx + 0x2e], rax
mov dword [rdx + 0x36], 0x110017
mov word [rdx + 0x3a], 0x65
mov word [rdx + 0x76], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x65
inc rax
cmp rax, 0x3c
jne 0x180011259
mov word [rsp + 0xb8], 0
lea rcx, [rsp + 0x30]
xor r8d, r8d
call fcn.18000e524
mov rdx, rax
mov qword [0x18001a288], rax
cmp byte [0x18001a298], 1
jne 0x1800112de
mov rcx, qword [0x18001a290]
lea rsi, [rsp + 0x30]
movsd qword [rsi], xmm6
mov rax, qword [0x18001a1c0]
lea r8, [rsp + 0x40]
mov qword [r8], rax
mov qword [r8 + 8], 0
mov qword [rsp + 0x20], r8
mov r8, rsi
xor r9d, r9d
call fcn.180014620
movsd xmm0, qword [rsi + 8]
movaps xmm6, xmmword [rsp + 0xc0]
add rsp, 0xd0
pop rsi
ret
mov byte [0x18001a298], 1
lea rdx, str.Engine.Default__KismetMathLibrary
lea rcx, [rsp + 0x40]
xor r8d, r8d
call fcn.18000e524
mov rcx, rax
mov qword [0x18001a290], rax
mov rdx, qword [0x18001a288]
jmp 0x180011298
Function at 0x18001130c
Capabilities:
Encode data using xor

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0xf8
mov rdi, r9
mov rbx, r8
mov rsi, rdx
mov rdx, qword [0x18001a2a0]
test rdx, rdx
jne 0x1800113be
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x180017340]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [str.qSIW_Nw_NRvSXH_HC]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180017360]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [0x180017370]
movaps xmmword [rdx + 0x2e], xmm0
movaps xmm0, xmmword [0x180017380]
movaps xmmword [rdx + 0x3e], xmm0
movabs rax, 0x5400550053004e
mov qword [rdx + 0x4e], rax
mov word [rdx + 0x56], 0x3a
mov word [rdx + 0xae], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x3a
inc rax
cmp rax, 0x58
jne 0x18001138f
mov word [rsp + 0xf0], 0
lea rcx, [rsp + 0x30]
xor r8d, r8d
call fcn.18000e524
mov rdx, rax
mov qword [0x18001a2a0], rax
cmp byte [0x18001a2b0], 1
jne 0x180011443
mov rcx, qword [0x18001a2a8]
mov rax, qword [rbx + 0x10]
lea r14, [rsp + 0x40]
mov qword [r14 + 0x10], rax
movups xmm0, xmmword [rbx]
movaps xmmword [r14], xmm0
xorps xmm0, xmm0
movaps xmmword [r14 + 0x30], xmm0
xor eax, eax
mov qword [r14 + 0x40], rax
movups xmm0, xmmword [rdi]
movups xmmword [r14 + 0x18], xmm0
mov r8, qword [rdi + 0x10]
mov qword [r14 + 0x28], r8
mov r8, qword [0x18001a1c0]
lea r9, [rsp + 0x30]
mov qword [r9], r8
mov qword [r9 + 8], rax
mov qword [rsp + 0x20], r9
mov r8, r14
xor r9d, r9d
call fcn.180014620
mov rax, qword [r14 + 0x40]
mov qword [rsi + 0x10], rax
movaps xmm0, xmmword [r14 + 0x30]
movups xmmword [rsi], xmm0
mov rax, rsi
add rsp, 0xf8
pop rbx
pop rdi
pop rsi
pop r14
ret
mov byte [0x18001a2b0], 1
lea rdx, str.Engine.Default__KismetMathLibrary
lea rcx, [rsp + 0x40]
xor r8d, r8d
call fcn.18000e524
mov rcx, rax
mov qword [0x18001a2a8], rax
mov rdx, qword [0x18001a2a0]
jmp 0x1800113ce
Function at 0x180011474
Capabilities:
Encode data using xor

Disassembly:
push rsi
sub rsp, 0xd0
movaps xmmword [rsp + 0xc0], xmm6
movaps xmm6, xmm1
mov rdx, qword [0x18001a2b8]
test rdx, rdx
jne 0x180011508
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x180017390]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x1800173a0]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x1800173b0]
movaps xmmword [rdx + 0x1e], xmm0
movabs rax, 0x22000e00630034
mov qword [rdx + 0x2e], rax
mov dword [rdx + 0x36], 0x4d003e
mov word [rdx + 0x72], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x4d
inc rax
cmp rax, 0x3a
jne 0x1800114d9
mov word [rsp + 0xb4], 0
lea rcx, [rsp + 0x30]
xor r8d, r8d
call fcn.18000e524
mov rdx, rax
mov qword [0x18001a2b8], rax
cmp byte [0x18001a2c8], 1
jne 0x18001155e
mov rcx, qword [0x18001a2c0]
lea rsi, [rsp + 0x30]
movsd qword [rsi], xmm6
mov rax, qword [0x18001a1c0]
lea r8, [rsp + 0x40]
mov qword [r8], rax
mov qword [r8 + 8], 0
mov qword [rsp + 0x20], r8
mov r8, rsi
xor r9d, r9d
call fcn.180014620
movsd xmm0, qword [rsi + 8]
movaps xmm6, xmmword [rsp + 0xc0]
add rsp, 0xd0
pop rsi
ret
mov byte [0x18001a2c8], 1
lea rdx, str.Engine.Default__KismetMathLibrary
lea rcx, [rsp + 0x40]
xor r8d, r8d
call fcn.18000e524
mov rcx, rax
mov qword [0x18001a2c0], rax
mov rdx, qword [0x18001a2b8]
jmp 0x180011518

Function at 0x18001158c
Capabilities:
Encode data using xor

Disassembly:
push rsi
sub rsp, 0xd0
movaps xmmword [rsp + 0xc0], xmm6
movaps xmm6, xmm1
mov rdx, qword [0x18001a2d0]
test rdx, rdx
jne 0x180011620
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x1800173c0]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [str.y_A_WF]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x1800173e0]
movaps xmmword [rdx + 0x1e], xmm0
movabs rax, 0x5b0061001c004b
mov qword [rdx + 0x2e], rax
mov dword [rdx + 0x36], 0x32005c
mov word [rdx + 0x72], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x32
inc rax
cmp rax, 0x3a
jne 0x1800115f1
mov word [rsp + 0xb4], 0
lea rcx, [rsp + 0x30]
xor r8d, r8d
call fcn.18000e524
mov rdx, rax
mov qword [0x18001a2d0], rax
cmp byte [0x18001a2e0], 1
jne 0x180011676
mov rcx, qword [0x18001a2d8]
lea rsi, [rsp + 0x30]
movsd qword [rsi], xmm6
mov rax, qword [0x18001a1c0]
lea r8, [rsp + 0x40]
mov qword [r8], rax
mov qword [r8 + 8], 0
mov qword [rsp + 0x20], r8
mov r8, rsi
xor r9d, r9d
call fcn.180014620
movsd xmm0, qword [rsi + 8]
movaps xmm6, xmmword [rsp + 0xc0]
add rsp, 0xd0
pop rsi
ret
mov byte [0x18001a2e0], 1
lea rdx, str.Engine.Default__KismetMathLibrary
lea rcx, [rsp + 0x40]
xor r8d, r8d
call fcn.18000e524
mov rcx, rax
mov qword [0x18001a2d8], rax
mov rdx, qword [0x18001a2d0]
jmp 0x180011630
Function at 0x1800116a4
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x1c0
mov rsi, r8
mov rdi, rdx
mov rbx, qword [0x18001a2e8]
test rbx, rbx
jne 0x18001174f
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x1800173f0]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180017400]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180017410]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [0x180017420]
movaps xmmword [rdx + 0x2e], xmm0
movaps xmm0, xmmword [0x180017430]
movaps xmmword [rdx + 0x3e], xmm0
movabs rax, 0x7e001b00120019
mov qword [rdx + 0x4e], rax
mov word [rdx + 0xaa], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x7e
inc rax
cmp rax, 0x56
jne 0x180011720
mov word [rsp + 0xec], 0
lea rcx, [rsp + 0x30]
xor r8d, r8d
call fcn.18000e524
mov rbx, rax
mov qword [0x18001a2e8], rax
cmp byte [0x18001a2f8], 1
jne 0x180011830
mov r14, qword [0x18001a2f0]
lea r15, [rsp + 0xb0]
mov r8d, 0x90
mov rcx, r15
xor edx, edx
call fcn.180012b60
xorps xmm0, xmm0
movups xmmword [r15 + 0xc4], xmm0
mov rax, qword [0x180019df8]
mov qword [r15 - 0x70], rax
movups xmm1, xmmword [rdi]
movups xmmword [r15 - 0x68], xmm1
mov rax, qword [rdi + 0x10]
mov qword [r15 - 0x58], rax
mov rax, qword [rsi + 0x10]
mov qword [r15 - 0x40], rax
movups xmm1, xmmword [rsi]
movups xmmword [r15 - 0x50], xmm1
mov word [r15 - 0x38], 0x102
movups xmmword [r15 - 0x30], xmm0
mov byte [r15 - 0x20], 0
mov byte [r15 + 0xd8], 1
movups xmmword [r15 + 0xdc], xmm0
movups xmmword [r15 + 0xec], xmm0
mov dword [r15 + 0xfc], 0
mov rax, qword [0x18001a1c0]
lea rcx, [rsp + 0x30]
mov qword [rcx], rax
mov qword [rcx + 8], 0
mov qword [rsp + 0x20], rcx
lea rsi, [rsp + 0x40]
mov rcx, r14
mov rdx, rbx
mov r8, rsi
xor r9d, r9d
call fcn.180014620
cmp byte [rsi + 0x178], 0
sete al
add rsp, 0x1c0
pop rbx
pop rdi
pop rsi
pop r14
pop r15
ret
mov byte [0x18001a2f8], 1
lea rdx, str.Engine.Default__KismetSystemLibrary
lea rcx, [rsp + 0x40]
xor r8d, r8d
call fcn.18000e524
mov r14, rax
mov qword [0x18001a2f0], rax
mov rbx, qword [0x18001a2e8]
jmp 0x180011763
Function at 0x180011862
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0xd0
mov rdi, r8
mov rsi, rdx
mov rdx, qword [0x18001a300]
test rdx, rdx
jne 0x1800118f9
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x180017440]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180017450]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180017460]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [0x180017470]
movaps xmmword [rdx + 0x2e], xmm0
mov dword [rdx + 0x3e], 0x690061
mov word [rdx + 0x42], 0xc
mov word [rdx + 0x86], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0xc
inc rax
cmp rax, 0x44
jne 0x1800118ca
mov word [rsp + 0xc8], 0
lea rcx, [rsp + 0x30]
xor r8d, r8d
call fcn.18000e524
mov rdx, rax
mov qword [0x18001a300], rax
cmp byte [0x18001a310], 1
jne 0x180011954
mov rcx, qword [0x18001a308]
xorps xmm0, xmm0
lea rbx, [rsp + 0x40]
movups xmmword [rbx + 8], xmm0
mov qword [rbx], rdi
mov rax, qword [0x18001a1c0]
lea r8, [rsp + 0x30]
mov qword [r8], rax
mov qword [r8 + 8], 0
mov qword [rsp + 0x20], r8
mov r8, rbx
xor r9d, r9d
call fcn.180014620
movups xmm0, xmmword [rbx + 8]
movups xmmword [rsi], xmm0
mov rax, rsi
add rsp, 0xd0
pop rbx
pop rdi
pop rsi
ret
mov byte [0x18001a310], 1
lea rdx, str.Engine.Default__KismetSystemLibrary
lea rcx, [rsp + 0x40]
xor r8d, r8d
call fcn.18000e524
mov rcx, rax
mov qword [0x18001a308], rax
mov rdx, qword [0x18001a300]
jmp 0x180011909
Function at 0x180011984
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x100
mov rdi, r8
mov rsi, rdx
mov rdx, qword [0x18001a318]
test rdx, rdx
jne 0x180011a32
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x180017550]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180017560]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180017570]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [0x180017580]
movaps xmmword [rdx + 0x2e], xmm0
movaps xmm0, xmmword [0x180017590]
movaps xmmword [rdx + 0x3e], xmm0
movabs rax, 0x30003c00130032
mov qword [rdx + 0x4e], rax
mov dword [rdx + 0x56], 0x5d0038
mov word [rdx + 0xb2], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x5d
inc rax
cmp rax, 0x5a
jne 0x180011a03
mov word [rsp + 0xf4], 0
lea rcx, [rsp + 0x30]
xor r8d, r8d
call fcn.18000e524
mov rdx, rax
mov qword [0x18001a318], rax
mov rcx, qword [0x18001a320]
test rcx, rcx
jne 0x180011acb
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x1800175a0]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x1800175b0]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x1800175c0]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [str.___81]
movaps xmmword [rdx + 0x2e], xmm0
movabs rax, 0x2f002400370024
mov qword [rdx + 0x3e], rax
mov word [rdx + 0x46], 0x56
mov word [rdx + 0x8e], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x56
inc rax
cmp rax, 0x48
jne 0x180011a95
mov word [rsp + 0xd0], 0
lea rcx, [rsp + 0x30]
xor r8d, r8d
call fcn.18000e524
mov rcx, rax
mov qword [0x18001a320], rax
mov rdx, qword [0x18001a318]
xor eax, eax
lea rbx, [rsp + 0x40]
mov qword [rbx + 0x10], rax
movups xmm0, xmmword [rdi]
movaps xmmword [rbx], xmm0
mov r8, qword [0x18001a1c0]
lea r9, [rsp + 0x30]
mov qword [r9], r8
mov qword [r9 + 8], rax
mov qword [rsp + 0x20], r9
mov r8, rbx
xor r9d, r9d
call fcn.180014620
mov rax, qword [rbx + 0x10]
mov qword [rsi], rax
mov rax, rsi
add rsp, 0x100
pop rbx
pop rdi
pop rsi
ret
Function at 0x180011c32
Capabilities:
Encode data using xor

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xf0
mov rdi, r9
mov rbx, r8
mov rsi, rdx
mov rdx, qword [0x18001a338]
test rdx, rdx
jne 0x180011cdf
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x180017620]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180017630]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180017640]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [0x180017650]
movaps xmmword [rdx + 0x2e], xmm0
movaps xmm0, xmmword [0x180017660]
movaps xmmword [rdx + 0x3e], xmm0
movabs rax, 0x5700230039001e
mov qword [rdx + 0x4e], rax
mov word [rdx + 0xaa], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x57
inc rax
cmp rax, 0x56
jne 0x180011cb0
mov word [rsp + 0xec], 0
lea rcx, [rsp + 0x30]
xor r8d, r8d
call fcn.18000e524
mov rdx, rax
mov qword [0x18001a338], rax
mov r14, qword [rsp + 0x148]
mov ebp, dword [rsp + 0x140]
mov rcx, qword [0x18001a340]
test rcx, rcx
jne 0x180011d87
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x1800173c0]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180017670]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180017680]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [0x180017690]
movaps xmmword [rdx + 0x2e], xmm0
movabs rax, 0x4b004000530040
mov qword [rdx + 0x3e], rax
mov word [rdx + 0x46], 0x32
mov word [rdx + 0x8e], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x32
inc rax
cmp rax, 0x48
jne 0x180011d51
mov word [rsp + 0xd0], 0
lea rcx, [rsp + 0x30]
xor r8d, r8d
call fcn.18000e524
mov rcx, rax
mov qword [0x18001a340], rax
mov rdx, qword [0x18001a338]
movups xmm0, xmmword [rbx]
lea rbx, [rsp + 0x40]
movaps xmmword [rbx], xmm0
movups xmm0, xmmword [rdi]
movaps xmmword [rbx + 0x10], xmm0
mov dword [rbx + 0x20], ebp
xorps xmm0, xmm0
movups xmmword [rbx + 0x38], xmm0
movups xmm0, xmmword [r14]
movups xmmword [rbx + 0x28], xmm0
mov rax, qword [0x18001a1c0]
lea r8, [rsp + 0x30]
mov qword [r8], rax
mov qword [r8 + 8], 0
mov qword [rsp + 0x20], r8
mov r8, rbx
xor r9d, r9d
call fcn.180014620
movups xmm0, xmmword [rbx + 0x38]
movups xmmword [rsi], xmm0
mov rax, rsi
add rsp, 0xf0
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
Function at 0x180011dea
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0xf0
mov rdi, r9
mov rbx, r8
mov rsi, rdx
mov rdx, qword [0x18001a348]
test rdx, rdx
jne 0x180011e8d
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x1800176a0]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x1800176b0]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x1800176c0]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [0x1800176d0]
movaps xmmword [rdx + 0x2e], xmm0
movaps xmm0, xmmword [0x1800176e0]
movaps xmmword [rdx + 0x3e], xmm0
mov dword [rdx + 0x4e], 0x1a0068
mov word [rdx + 0xa2], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x1a
inc rax
cmp rax, 0x52
jne 0x180011e5e
mov word [rsp + 0xe4], 0
lea rcx, [rsp + 0x30]
xor r8d, r8d
call fcn.18000e524
mov rdx, rax
mov qword [0x18001a348], rax
mov rcx, qword [0x18001a350]
test rcx, rcx
jne 0x180011f26
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x1800168d0]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x1800176f0]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180017700]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [0x180017710]
movaps xmmword [rdx + 0x2e], xmm0
movabs rax, 0x66006d007e006d
mov qword [rdx + 0x3e], rax
mov word [rdx + 0x46], 0x1f
mov word [rdx + 0x8e], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x1f
inc rax
cmp rax, 0x48
jne 0x180011ef0
mov word [rsp + 0xd0], 0
lea rcx, [rsp + 0x30]
xor r8d, r8d
call fcn.18000e524
mov rcx, rax
mov qword [0x18001a350], rax
mov rdx, qword [0x18001a348]
movups xmm0, xmmword [rbx]
lea rbx, [rsp + 0x40]
movaps xmmword [rbx], xmm0
xorps xmm0, xmm0
movaps xmmword [rbx + 0x20], xmm0
movups xmm0, xmmword [rdi]
movaps xmmword [rbx + 0x10], xmm0
mov rax, qword [0x18001a1c0]
lea r8, [rsp + 0x30]
mov qword [r8], rax
mov qword [r8 + 8], 0
mov qword [rsp + 0x20], r8
mov r8, rbx
xor r9d, r9d
call fcn.180014620
movaps xmm0, xmmword [rbx + 0x20]
movups xmmword [rsi], xmm0
mov rax, rsi
add rsp, 0xf0
pop rbx
pop rdi
pop rsi
ret
Function at 0x180011f7c
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xd8
mov ebx, r9d
mov rsi, r8
mov rdi, rdx
mov rdx, qword [0x18001a358]
test rdx, rdx
jne 0x180012011
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x180017720]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180017730]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180017740]
movaps xmmword [rdx + 0x1e], xmm0
movabs rax, 0x8000f00070012
mov qword [rdx + 0x2e], rax
mov dword [rdx + 0x36], 0x660015
mov word [rdx + 0x72], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x66
inc rax
cmp rax, 0x3a
jne 0x180011fe2
mov word [rsp + 0xb4], 0
lea rcx, [rsp + 0x30]
xor r8d, r8d
call fcn.18000e524
mov rdx, rax
mov qword [0x18001a358], rax
mov bpl, byte [rsp + 0x120]
mov rcx, qword [0x18001a360]
test rcx, rcx
jne 0x1800120b2
lea rdx, [rsp + 0x42]
movaps xmm0, xmmword [0x180016b10]
movaps xmmword [rdx - 2], xmm0
movaps xmm0, xmmword [0x180017750]
movaps xmmword [rdx + 0xe], xmm0
movaps xmm0, xmmword [0x180017760]
movaps xmmword [rdx + 0x1e], xmm0
movaps xmm0, xmmword [0x180017770]
movaps xmmword [rdx + 0x2e], xmm0
movabs rax, 0x46004d005e004d
mov qword [rdx + 0x3e], rax
mov word [rdx + 0x46], 0x3f
mov word [rdx + 0x8e], 0
mov eax, 1
xor byte [rsp + rax*2 + 0x40], 0x3f
inc rax
cmp rax, 0x48
jne 0x18001207c
mov word [rsp + 0xd0], 0
lea rcx, [rsp + 0x30]
xor r8d, r8d
call fcn.18000e524
mov rcx, rax
mov qword [0x18001a360], rax
mov rdx, qword [0x18001a358]
movups xmm0, xmmword [rdi]
lea rdi, [rsp + 0x40]
movaps xmmword [rdi], xmm0
movups xmm0, xmmword [rsi]
movaps xmmword [rdi + 0x10], xmm0
mov byte [rdi + 0x20], bl
mov byte [rdi + 0x21], bpl
mov rax, qword [0x18001a1c0]
lea r8, [rsp + 0x30]
mov qword [r8], rax
mov qword [r8 + 8], 0
mov qword [rsp + 0x20], r8
mov r8, rdi
xor r9d, r9d
call fcn.180014620
mov al, byte [rdi + 0x22]
add rsp, 0xd8
pop rbx
pop rbp
pop rdi
pop rsi
ret