joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400821d0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x70
mov r10, qword [0x14013bad0]
mov ebx, r9d
mov edi, r8d
mov esi, edx
mov rbp, rcx
test r10, r10
je 0x14008220e
mov eax, dword [rsp + 0xa0]
mov dword [rsp + 0x20], eax
call r10
jmp 0x1400823e3
cmp byte [0x140125d6f], 0
movups xmm0, xmmword [0x140125d58]
mov r9, qword [0x14013b728]
movups xmmword [rsp + 0x40], xmm0
mov rax, qword [r9]
movsd xmm0, qword [0x140125d68]
movsd qword [rsp + 0x50], xmm0
mov r10, qword [rax + 8]
je 0x1400823ad
xor ecx, ecx
cmp dword [0x140137c60], 2
jl 0x140082378
movdqa xmm0, xmmword [0x1401266f0]
lea rdx, [rsp + 0x44]
movdqa xmm4, xmmword [0x140126610]
movdqa xmm3, xmmword [0x140126730]
movdqa xmm5, xmmword [0x140126640]
movdqa xmmword [rsp + 0x30], xmm0
mov r8d, dword [rsp + 0x30]
movaps xmmword [rsp + 0x60], xmm6
movdqa xmm6, xmmword [0x1401266c0]
nop
movd xmm2, ecx
lea eax, [rcx + 4]
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 8]
paddd xmm2, xmm4
add ecx, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, r8d
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 0xc]
xorps xmm2, xmm0
movd dword [rdx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, r8d
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 8]
xorps xmm2, xmm0
movd dword [rdx - 8], xmm2
cmp ecx, 0x18
jl 0x140082290
movaps xmm6, xmmword [rsp + 0x60]
jmp 0x1400823ad
lea r8, [rsp + 0x40]
nop dword [rax]
mov eax, 0x51eb851f
lea r8, [r8 + 1]
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x32
movzx eax, cl
inc ecx
sub al, dl
add al, 0x30
xor byte [r8 - 1], al
cmp ecx, 0x18
jl 0x140082380
lea r8, [0x14013bad0]
mov rcx, r9
lea rdx, [rsp + 0x40]
call r10
test al, al
je 0x1400823e1
mov eax, dword [rsp + 0xa0]
mov r9d, ebx
mov r8d, edi
mov dword [rsp + 0x20], eax
mov edx, esi
mov rcx, rbp
call qword [0x14013bad0]
jmp 0x1400823e3
xor eax, eax
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x10]
mov rbp, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x140082400
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rax, qword [0x14013bb20]
mov rbx, rcx
test rax, rax
je 0x14008241d
add rsp, 0x30
pop rbx
jmp rax
mov r9, qword [0x14013b728]
xor ecx, ecx
cmp dword [0x140137c60], 2
movsd xmm0, qword [str.hPYkrSCl_J_]
movsd qword [rsp + 0x20], xmm0
mov rax, qword [r9]
mov r10, qword [rax + 8]
mov eax, dword [0x140125dd8]
mov dword [rsp + 0x28], eax
movzx eax, byte [0x140125ddc]
mov byte [rsp + 0x2c], al
jl 0x140082542
movdqa xmm2, xmmword [0x140126610]
mov ecx, 8
movdqa xmm4, xmmword [0x140126710]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140126670]
psubd xmm2, xmm0
movd xmm0, dword [str.hPYkrSCl_J_]
andps xmm2, xmmword [0x1401266c0]
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1401266f0]
xorps xmm2, xmm0
movd dword [rsp + 0x20], xmm2
movdqa xmm2, xmmword [0x140126620]
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140126670]
psubd xmm2, xmm0
movd xmm0, dword [rsp + 0x24]
andps xmm2, xmmword [0x1401266c0]
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1401266f0]
xorps xmm2, xmm0
movd dword [rsp + 0x24], xmm2
movsxd rax, ecx
lea r8, [rsp + 0x20]
add r8, rax
nop dword [rax]
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, cl
inc ecx
sub al, dl
add al, 0x30
xor byte [r8 - 1], al
cmp ecx, 0xd
jl 0x140082550
lea r8, [0x14013bb20]
mov rcx, r9
lea rdx, [rsp + 0x20]
call r10
test al, al
je 0x1400825a2
mov rcx, rbx
add rsp, 0x30
pop rbx
jmp qword [0x14013bb20]
xor eax, eax
add rsp, 0x30
pop rbx
ret
Function at 0x1400825b0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x30
mov rax, qword [0x14013bb48]
mov ebx, edx
mov rdi, rcx
test rax, rax
jne 0x14008274a
mov r9, qword [0x14013b728]
xor ecx, ecx
cmp dword [0x140137c60], 2
movsd xmm0, qword [0x140125ef8]
movsd qword [rsp + 0x20], xmm0
mov rax, qword [r9]
mov r10, qword [rax + 8]
mov eax, dword [0x140125f00]
mov dword [rsp + 0x28], eax
movzx eax, byte [0x140125f04]
mov byte [rsp + 0x2c], al
jl 0x1400826f4
movdqa xmm2, xmmword [0x140126610]
mov ecx, 8
movdqa xmm4, xmmword [0x140126710]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140126670]
psubd xmm2, xmm0
movd xmm0, dword [0x140125ef8]
andps xmm2, xmmword [0x1401266c0]
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1401266f0]
xorps xmm2, xmm0
movd dword [rsp + 0x20], xmm2
movdqa xmm2, xmmword [0x140126620]
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140126670]
psubd xmm2, xmm0
movd xmm0, dword [rsp + 0x24]
andps xmm2, xmmword [0x1401266c0]
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1401266f0]
xorps xmm2, xmm0
movd dword [rsp + 0x24], xmm2
movsxd rax, ecx
lea r8, [rsp + 0x20]
add r8, rax
nop
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, cl
inc ecx
sub al, dl
add al, 0x30
xor byte [r8 - 1], al
cmp ecx, 0xd
jl 0x140082700
lea r8, [0x14013bb48]
mov rcx, r9
lea rdx, [rsp + 0x20]
call r10
test al, al
je 0x140082751
mov rax, qword [0x14013bb48]
mov edx, ebx
mov rcx, rdi
call rax
mov rbx, qword [rsp + 0x40]
add rsp, 0x30
pop rdi
ret
Function at 0x140082760
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rax, qword [0x14013bb10]
mov rbx, rcx
test rax, rax
je 0x14008277d
add rsp, 0x30
pop rbx
jmp rax
mov r9, qword [0x14013b728]
xor ecx, ecx
cmp dword [0x140137c60], 2
movsd xmm0, qword [str.hf_WSPBhqJiSSJ_]
movsd qword [rsp + 0x20], xmm0
mov rax, qword [r9]
mov r10, qword [rax + 8]
mov eax, dword [0x140125e20]
mov dword [rsp + 0x28], eax
movzx eax, word [0x140125e24]
mov word [rsp + 0x2c], ax
movzx eax, byte [0x140125e26]
mov byte [rsp + 0x2e], al
jl 0x1400828ae
movdqa xmm2, xmmword [0x140126610]
mov ecx, 8
movdqa xmm4, xmmword [0x140126710]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140126670]
psubd xmm2, xmm0
movd xmm0, dword [str.hf_WSPBhqJiSSJ_]
andps xmm2, xmmword [0x1401266c0]
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1401266f0]
xorps xmm2, xmm0
movd dword [rsp + 0x20], xmm2
movdqa xmm2, xmmword [0x140126620]
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140126670]
psubd xmm2, xmm0
movd xmm0, dword [rsp + 0x24]
andps xmm2, xmmword [0x1401266c0]
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1401266f0]
xorps xmm2, xmm0
movd dword [rsp + 0x24], xmm2
movsxd rax, ecx
lea r8, [rsp + 0x20]
add r8, rax
nop dword [rax]
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, cl
inc ecx
sub al, dl
add al, 0x30
xor byte [r8 - 1], al
cmp ecx, 0xf
jl 0x1400828c0
lea r8, [0x14013bb10]
mov rcx, r9
lea rdx, [rsp + 0x20]
call r10
test al, al
je 0x140082912
mov rcx, rbx
add rsp, 0x30
pop rbx
jmp qword [0x14013bb10]
xor eax, eax
add rsp, 0x30
pop rbx
ret
Function at 0x140082920
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x30
mov rax, qword [0x14013bb50]
mov ebx, edx
mov rdi, rcx
test rax, rax
jne 0x140082aba
mov r9, qword [0x14013b728]
xor ecx, ecx
cmp dword [0x140137c60], 2
movsd xmm0, qword [str.hf_WSPBhkQUL_]
movsd qword [rsp + 0x20], xmm0
mov rax, qword [r9]
mov r10, qword [rax + 8]
mov eax, dword [0x140125e30]
mov dword [rsp + 0x28], eax
movzx eax, byte [0x140125e34]
mov byte [rsp + 0x2c], al
jl 0x140082a64
movdqa xmm2, xmmword [0x140126610]
mov ecx, 8
movdqa xmm4, xmmword [0x140126710]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140126670]
psubd xmm2, xmm0
movd xmm0, dword [str.hf_WSPBhkQUL_]
andps xmm2, xmmword [0x1401266c0]
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1401266f0]
xorps xmm2, xmm0
movd dword [rsp + 0x20], xmm2
movdqa xmm2, xmmword [0x140126620]
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140126670]
psubd xmm2, xmm0
movd xmm0, dword [rsp + 0x24]
andps xmm2, xmmword [0x1401266c0]
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1401266f0]
xorps xmm2, xmm0
movd dword [rsp + 0x24], xmm2
movsxd rax, ecx
lea r8, [rsp + 0x20]
add r8, rax
nop
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, cl
inc ecx
sub al, dl
add al, 0x30
xor byte [r8 - 1], al
cmp ecx, 0xd
jl 0x140082a70
lea r8, [0x14013bb50]
mov rcx, r9
lea rdx, [rsp + 0x20]
call r10
test al, al
je 0x140082ac1
mov rax, qword [0x14013bb50]
mov edx, ebx
mov rcx, rdi
call rax
mov rbx, qword [rsp + 0x40]
add rsp, 0x30
pop rdi
ret
Function at 0x140082ad0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x60
mov rax, qword [0x14013bb08]
mov ebx, edx
mov rdi, rcx
test rax, rax
jne 0x140082ccb
cmp byte [0x140125ed3], 0
movups xmm0, xmmword [str.hf_WSPBhW_YPXr9.77_a_3:K]
mov rcx, qword [0x14013b728]
movups xmmword [rsp + 0x30], xmm0
mov rax, qword [rcx]
movsd xmm0, qword [0x140125ec8]
movsd qword [rsp + 0x40], xmm0
mov r10, qword [rax + 8]
mov eax, dword [0x140125ed0]
mov dword [rsp + 0x48], eax
je 0x140082cb1
xor r8d, r8d
cmp dword [0x140137c60], 2
jl 0x140082c70
movdqa xmm0, xmmword [0x1401266f0]
lea rdx, [rsp + 0x34]
movdqa xmm4, xmmword [0x140126610]
movdqa xmm3, xmmword [0x140126710]
movdqa xmm5, xmmword [0x140126670]
movdqa xmmword [rsp + 0x20], xmm0
mov r9d, dword [rsp + 0x20]
movaps xmmword [rsp + 0x50], xmm6
movdqa xmm6, xmmword [0x1401266c0]
nop dword [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 8]
paddd xmm2, xmm4
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, r9d
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 0xc]
xorps xmm2, xmm0
movd dword [rdx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, r9d
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 8]
xorps xmm2, xmm0
movd dword [rdx - 8], xmm2
cmp r8d, 0x18
jl 0x140082b80
movaps xmm6, xmmword [rsp + 0x50]
cmp r8d, 0x1c
jge 0x140082cb1
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, dl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x1c
jl 0x140082c80
lea r8, [0x14013bb08]
lea rdx, [rsp + 0x30]
call r10
test al, al
je 0x140082cd2
mov rax, qword [0x14013bb08]
mov edx, ebx
mov rcx, rdi
call rax
mov rbx, qword [rsp + 0x70]
add rsp, 0x60
pop rdi
ret
Function at 0x140082ce0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x60
mov rax, qword [0x14013bb18]
mov ebx, r8d
mov edi, edx
mov rsi, rcx
test rax, rax
jne 0x140082eeb
cmp byte [0x140125e53], 0
movups xmm0, xmmword [str.hf_WSPBhtXCTIIwK__]
mov rcx, qword [0x14013b728]
movups xmmword [rsp + 0x30], xmm0
mov rax, qword [rcx]
movsd xmm0, qword [0x140125e48]
movsd qword [rsp + 0x40], xmm0
mov r10, qword [rax + 8]
mov eax, dword [0x140125e50]
mov dword [rsp + 0x48], eax
je 0x140082ed1
xor r8d, r8d
cmp dword [0x140137c60], 2
jl 0x140082e90
movdqa xmm0, xmmword [0x1401266f0]
lea rdx, [rsp + 0x34]
movdqa xmm4, xmmword [0x140126610]
movdqa xmm3, xmmword [0x140126710]
movdqa xmm5, xmmword [0x140126670]
movdqa xmmword [rsp + 0x20], xmm0
mov r9d, dword [rsp + 0x20]
movaps xmmword [rsp + 0x50], xmm6
movdqa xmm6, xmmword [0x1401266c0]
nop dword [rax]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 8]
paddd xmm2, xmm4
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, r9d
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 0xc]
xorps xmm2, xmm0
movd dword [rdx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, r9d
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 8]
xorps xmm2, xmm0
movd dword [rdx - 8], xmm2
cmp r8d, 0x18
jl 0x140082da0
movaps xmm6, xmmword [rsp + 0x50]
cmp r8d, 0x1c
jge 0x140082ed1
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, dl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x1c
jl 0x140082ea0
lea r8, [0x14013bb18]
lea rdx, [rsp + 0x30]
call r10
test al, al
je 0x140082ef5
mov rax, qword [0x14013bb18]
mov r8d, ebx
mov edx, edi
mov rcx, rsi
call rax
mov rbx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x78]
add rsp, 0x60
pop rdi
ret
Function at 0x140082f10
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x60
mov rax, qword [0x14013baf0]
mov ebx, r8d
mov edi, edx
mov rsi, rcx
test rax, rax
jne 0x14008310b
movups xmm0, xmmword [0x140125e80]
mov rcx, qword [0x14013b728]
xor r8d, r8d
cmp dword [0x140137c60], 2
movups xmmword [rsp + 0x30], xmm0
mov rax, qword [rcx]
movsd xmm0, qword [0x140125e90]
movsd qword [rsp + 0x40], xmm0
mov r10, qword [rax + 8]
mov eax, dword [0x140125e98]
mov dword [rsp + 0x48], eax
movzx eax, byte [0x140125e9c]
mov byte [rsp + 0x4c], al
jl 0x1400830b1
movdqa xmm0, xmmword [0x1401266f0]
lea rdx, [rsp + 0x34]
movdqa xmm4, xmmword [0x140126610]
movdqa xmm3, xmmword [0x140126710]
movdqa xmm5, xmmword [0x140126670]
movdqa xmmword [rsp + 0x20], xmm0
mov r9d, dword [rsp + 0x20]
movaps xmmword [rsp + 0x50], xmm6
movdqa xmm6, xmmword [0x1401266c0]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 8]
paddd xmm2, xmm4
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, r9d
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 0xc]
xorps xmm2, xmm0
movd dword [rdx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, r9d
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 8]
xorps xmm2, xmm0
movd dword [rdx - 8], xmm2
cmp r8d, 0x18
jl 0x140082fc1
movaps xmm6, xmmword [rsp + 0x50]
cmp r8d, 0x1d
jge 0x1400830f1
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, dl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x1d
jl 0x1400830c0
lea r8, [0x14013baf0]
lea rdx, [rsp + 0x30]
call r10
test al, al
je 0x140083115
mov rax, qword [0x14013baf0]
mov r8d, ebx
mov edx, edi
mov rcx, rsi
call rax
mov rbx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x78]
add rsp, 0x60
pop rdi
ret
Function at 0x140083130
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x60
mov r10, qword [0x14013bb40]
mov ebx, r9d
mov rdi, r8
mov esi, edx
mov ebp, ecx
test r10, r10
je 0x1400831a8
mov eax, dword [rsp + 0xb8]
mov dword [rsp + 0x48], eax
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x38], rax
mov eax, dword [rsp + 0xa0]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x98]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x90]
mov dword [rsp + 0x20], eax
call r10
jmp 0x14008338d
cmp byte [0x140125e15], 0
mov r9, qword [0x14013b728]
movsd xmm0, qword [str.hfWkvDRYM_D]
movsd qword [rsp + 0x50], xmm0
mov rax, qword [r9]
mov r10, qword [rax + 8]
mov eax, dword [0x140125e10]
mov dword [rsp + 0x58], eax
movzx eax, word [0x140125e14]
mov word [rsp + 0x5c], ax
je 0x14008331d
xor ecx, ecx
cmp dword [0x140137c60], 2
jl 0x1400832db
movdqa xmm2, xmmword [0x140126610]
mov ecx, 8
movdqa xmm4, xmmword [0x140126710]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140126670]
psubd xmm2, xmm0
movd xmm0, dword [str.hfWkvDRYM_D]
andps xmm2, xmmword [0x1401266c0]
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1401266f0]
xorps xmm2, xmm0
movd dword [rsp + 0x50], xmm2
movdqa xmm2, xmmword [0x140126620]
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140126670]
psubd xmm2, xmm0
movd xmm0, dword [rsp + 0x54]
andps xmm2, xmmword [0x1401266c0]
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1401266f0]
xorps xmm2, xmm0
movd dword [rsp + 0x54], xmm2
movsxd rax, ecx
lea r8, [rsp + 0x50]
add r8, rax
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, cl
inc ecx
sub al, dl
add al, 0x30
xor byte [r8 - 1], al
cmp ecx, 0xe
jl 0x1400832f0
lea r8, [0x14013bb40]
mov rcx, r9
lea rdx, [rsp + 0x50]
call r10
test al, al
je 0x14008338b
mov eax, dword [rsp + 0xb8]
mov r9d, ebx
mov dword [rsp + 0x48], eax
mov r8, rdi
mov rax, qword [rsp + 0xb0]
mov edx, esi
mov qword [rsp + 0x40], rax
mov ecx, ebp
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x38], rax
mov eax, dword [rsp + 0xa0]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x98]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x90]
mov dword [rsp + 0x20], eax
call qword [0x14013bb40]
jmp 0x14008338d
xor eax, eax
mov rbx, qword [rsp + 0x70]
mov rbp, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x80]
add rsp, 0x60
pop rdi
ret
Function at 0x1400833b0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x50
mov rax, qword [0x14013baf8]
mov rbx, r8
mov edi, edx
mov rsi, rcx
test rax, rax
je 0x1400833e5
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x50
pop rdi
jmp rax
movups xmm0, xmmword [str.hfWkgSPO_UH]
mov r9, qword [0x14013b728]
movups xmmword [rsp + 0x20], xmm0
mov rax, qword [r9]
psrldq xmm0, 0xf
mov r10, qword [rax + 8]
movd eax, xmm0
test al, al
je 0x14008357d
xor ecx, ecx
cmp dword [0x140137c60], 2
jl 0x140083548
movdqa xmm0, xmmword [0x1401266f0]
lea rdx, [rsp + 0x24]
movdqa xmm4, xmmword [0x140126610]
movdqa xmm3, xmmword [0x140126710]
movdqa xmm5, xmmword [0x140126670]
movdqa xmmword [rsp + 0x30], xmm0
mov r8d, dword [rsp + 0x30]
movaps xmmword [rsp + 0x40], xmm6
movdqa xmm6, xmmword [0x1401266c0]
nop dword [rax]
movd xmm2, ecx
lea eax, [rcx + 4]
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 8]
paddd xmm2, xmm4
add ecx, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, r8d
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 0xc]
xorps xmm2, xmm0
movd dword [rdx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, r8d
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 8]
xorps xmm2, xmm0
movd dword [rdx - 8], xmm2
cmp ecx, 0x10
jl 0x140083460
movaps xmm6, xmmword [rsp + 0x40]
jmp 0x14008357d
lea r8, [rsp + 0x20]
nop dword [rax]
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, cl
inc ecx
sub al, dl
add al, 0x30
xor byte [r8 - 1], al
cmp ecx, 0x10
jl 0x140083550
lea r8, [0x14013baf8]
mov rcx, r9
lea rdx, [rsp + 0x20]
call r10
test al, al
je 0x1400835b1
mov r8, rbx
mov edx, edi
mov rcx, rsi
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x50
pop rdi
jmp qword [0x14013baf8]
mov rbx, qword [rsp + 0x60]
xor eax, eax
mov rsi, qword [rsp + 0x68]
add rsp, 0x50
pop rdi
ret