joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1800059b0
Capabilities:
Encode data using xor

Disassembly:
mov r11, rsp
push rbx
sub rsp, 0xd0
mov rax, qword [0x180017010]
xor rax, rsp
mov qword [rsp + 0x88], rax
movups xmm0, xmmword [rdx]
mov rbx, qword [0x18001b638]
xor eax, eax
movups xmm1, xmmword [r8]
mov dword [rsp + 0x42], eax
mov word [rsp + 0x46], ax
mov rax, qword [0x18001b820]
mov word [rsp + 0x40], 0
movups xmmword [rsp + 0x20], xmm0
movups xmmword [rsp + 0x30], xmm1
test rax, rax
jne 0x180005c35
movups xmm0, xmmword [0x180013dc0]
movzx eax, word [0x180013df8]
xor ecx, ecx
cmp dword [0x180017020], 2
movups xmm1, xmmword [0x180013dd0]
movups xmmword [rsp + 0x48], xmm0
movups xmm0, xmmword [0x180013de0]
movups xmmword [rsp + 0x58], xmm1
movups xmmword [rsp + 0x68], xmm0
movsd xmm0, qword [0x180013df0]
movsd qword [rsp + 0x78], xmm0
mov word [r11 - 0x58], ax
jl 0x180005bc6
movdqa xmm5, xmmword [0x180014920]
lea rdx, [rsp + 0x48]
movdqa xmm4, xmmword [0x180014a80]
mov eax, 5
movaps xmmword [r11 - 0x18], xmm6
movaps xmmword [r11 - 0x28], xmm7
movdqa xmm7, xmmword [str.9999]
movaps xmmword [r11 - 0x38], xmm8
movd xmm6, eax
mov eax, 0x1f
movaps xmmword [r11 - 0x48], xmm9
movdqa xmm9, xmmword [0x180014940]
movd xmm8, eax
nop dword [rax]
nop word [rax + rax]
movd xmm2, ecx
lea eax, [rcx + 4]
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 0x10]
paddd xmm2, xmm5
add ecx, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx - 0x10]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
xorps xmm3, xmm0
movq qword [rdx - 0x10], xmm3
paddd xmm2, xmm5
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx - 8]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xorps xmm3, xmm0
movq qword [rdx - 8], xmm3
cmp ecx, 0x18
jl 0x180005ab0
movaps xmm9, xmmword [rsp + 0x90]
movaps xmm8, xmmword [rsp + 0xa0]
movaps xmm7, xmmword [rsp + 0xb0]
movaps xmm6, xmmword [rsp + 0xc0]
cmp ecx, 0x1d
jge 0x180005c13
movsxd rax, ecx
lea r8, [rsp + 0x48]
lea r8, [r8 + rax*2]
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8fb823ef
lea r8, [r8 + 2]
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul edx, eax, 0x39
movzx eax, cx
inc ecx
sub ax, dx
add ax, 0x38
xor word [r8 - 2], ax
cmp ecx, 0x1d
jl 0x180005be0
mov rax, qword [0x1800178f0]
lea r8, [rsp + 0x48]
add rax, 0x10061f0
xor r9d, r9d
xor edx, edx
xor ecx, ecx
call rax
mov qword [0x18001b820], rax
mov r9, qword [rbx]
lea r8, [rsp + 0x20]
mov rdx, rax
mov rcx, rbx
call qword [r9 + 0x268]
movzx eax, byte [rsp + 0x42]
mov rcx, qword [rsp + 0x88]
xor rcx, rsp
call fcn.180011d70
add rsp, 0xd0
pop rbx
ret
Function at 0x180005c70
Capabilities:
Encode data using xor

Disassembly:
mov r11, rsp
push rbx
sub rsp, 0xd0
mov rax, qword [0x180017010]
xor rax, rsp
mov qword [rsp + 0x88], rax
movups xmm0, xmmword [rdx]
mov rbx, qword [0x18001b658]
xor eax, eax
mov qword [rsp + 0x40], rax
mov rax, qword [0x18001b858]
movups xmmword [rsp + 0x20], xmm0
movups xmm0, xmmword [r8]
movups xmmword [rsp + 0x30], xmm0
test rax, rax
jne 0x180005eea
movups xmm0, xmmword [0x180014090]
movzx eax, word [0x1800140c8]
xor r8d, r8d
cmp dword [0x180017020], 2
movups xmm1, xmmword [0x1800140a0]
movups xmmword [rsp + 0x48], xmm0
movups xmm0, xmmword [0x1800140b0]
movups xmmword [rsp + 0x58], xmm1
movups xmmword [rsp + 0x68], xmm0
movsd xmm0, qword [0x1800140c0]
movsd qword [rsp + 0x78], xmm0
mov word [r11 - 0x58], ax
jl 0x180005e7b
movdqa xmm5, xmmword [0x180014920]
lea rcx, [rsp + 0x48]
movdqa xmm4, xmmword [0x180014a80]
mov eax, 5
movaps xmmword [r11 - 0x18], xmm6
movaps xmmword [r11 - 0x28], xmm7
movdqa xmm7, xmmword [str.9999]
movaps xmmword [r11 - 0x38], xmm8
movd xmm6, eax
mov eax, 0x1f
movaps xmmword [r11 - 0x48], xmm9
movdqa xmm9, xmmword [0x180014940]
movd xmm8, eax
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 0x10]
paddd xmm2, xmm5
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rcx - 0x10]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
xorps xmm3, xmm0
movq qword [rcx - 0x10], xmm3
paddd xmm2, xmm5
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rcx - 8]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xorps xmm3, xmm0
movq qword [rcx - 8], xmm3
cmp r8d, 0x18
jl 0x180005d60
movaps xmm9, xmmword [rsp + 0x90]
movaps xmm8, xmmword [rsp + 0xa0]
movaps xmm7, xmmword [rsp + 0xb0]
movaps xmm6, xmmword [rsp + 0xc0]
cmp r8d, 0x1d
jge 0x180005ec8
movsxd rax, r8d
lea r9, [rsp + 0x48]
lea r9, [r9 + rax*2]
nop word [rax + rax]
mov eax, 0x8fb823ef
lea r9, [r9 + 2]
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x39
movzx eax, r8w
inc r8d
sub ax, cx
add ax, 0x38
xor word [r9 - 2], ax
cmp r8d, 0x1d
jl 0x180005e90
mov rax, qword [0x1800178f0]
lea r8, [rsp + 0x48]
add rax, 0x10061f0
xor r9d, r9d
xor edx, edx
xor ecx, ecx
call rax
mov qword [0x18001b858], rax
mov r9, qword [rbx]
lea r8, [rsp + 0x20]
mov rdx, rax
mov rcx, rbx
call qword [r9 + 0x268]
movsd xmm0, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x88]
xor rcx, rsp
call fcn.180011d70
add rsp, 0xd0
pop rbx
ret
Function at 0x180005f20
Capabilities:
Encode data using xor

Disassembly:
mov r11, rsp
push rbx
sub rsp, 0xb0
mov rax, qword [0x180017010]
xor rax, rsp
mov qword [rsp + 0x60], rax
mov rbx, qword [0x18001b658]
xor eax, eax
mov qword [rsp + 0x28], rax
mov rax, qword [0x18001b748]
movsd qword [rsp + 0x20], xmm1
test rax, rax
jne 0x18000617a
movups xmm0, xmmword [0x180013e00]
mov eax, dword [0x180013e28]
xor r8d, r8d
cmp dword [0x180017020], 2
movups xmm1, xmmword [0x180013e10]
mov dword [rsp + 0x58], eax
movups xmmword [rsp + 0x30], xmm0
movsd xmm0, qword [0x180013e20]
movsd qword [rsp + 0x50], xmm0
movups xmmword [rsp + 0x40], xmm1
jl 0x180006108
movdqa xmm5, xmmword [0x180014920]
lea rcx, [rsp + 0x30]
movdqa xmm4, xmmword [0x180014a80]
mov eax, 5
movaps xmmword [r11 - 0x18], xmm6
movaps xmmword [r11 - 0x28], xmm7
movdqa xmm7, xmmword [str.9999]
movaps xmmword [r11 - 0x38], xmm8
movd xmm6, eax
mov eax, 0x1f
movaps xmmword [r11 - 0x48], xmm9
movdqa xmm9, xmmword [0x180014940]
movd xmm8, eax
nop dword [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 0x10]
paddd xmm2, xmm5
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rcx - 0x10]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
xorps xmm3, xmm0
movq qword [rcx - 0x10], xmm3
paddd xmm2, xmm5
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rcx - 8]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xorps xmm3, xmm0
movq qword [rcx - 8], xmm3
cmp r8d, 0x10
jl 0x180005ff0
movaps xmm9, xmmword [rsp + 0x70]
movaps xmm8, xmmword [rsp + 0x80]
movaps xmm7, xmmword [rsp + 0x90]
movaps xmm6, xmmword [rsp + 0xa0]
cmp r8d, 0x16
jge 0x180006158
movsxd rax, r8d
lea r9, [rsp + 0x30]
lea r9, [r9 + rax*2]
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x8fb823ef
lea r9, [r9 + 2]
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x39
movzx eax, r8w
inc r8d
sub ax, cx
add ax, 0x38
xor word [r9 - 2], ax
cmp r8d, 0x16
jl 0x180006120
mov rax, qword [0x1800178f0]
lea r8, [rsp + 0x30]
add rax, 0x10061f0
xor r9d, r9d
xor edx, edx
xor ecx, ecx
call rax
mov qword [0x18001b748], rax
mov r9, qword [rbx]
lea r8, [rsp + 0x20]
mov rdx, rax
mov rcx, rbx
call qword [r9 + 0x268]
movsd xmm0, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.180011d70
add rsp, 0xb0
pop rbx
ret
Function at 0x1800061b0
Capabilities:
Encode data using xor

Disassembly:
mov r11, rsp
push rbx
sub rsp, 0xb0
mov rax, qword [0x180017010]
xor rax, rsp
mov qword [rsp + 0x60], rax
mov rbx, qword [0x18001b658]
xor eax, eax
mov qword [rsp + 0x28], rax
mov rax, qword [0x18001b7e0]
movsd qword [rsp + 0x20], xmm1
test rax, rax
jne 0x18000640a
movups xmm0, xmmword [0x180013d10]
mov eax, dword [0x180013d38]
xor r8d, r8d
cmp dword [0x180017020], 2
movups xmm1, xmmword [0x180013d20]
mov dword [rsp + 0x58], eax
movups xmmword [rsp + 0x30], xmm0
movsd xmm0, qword [0x180013d30]
movsd qword [rsp + 0x50], xmm0
movups xmmword [rsp + 0x40], xmm1
jl 0x180006398
movdqa xmm5, xmmword [0x180014920]
lea rcx, [rsp + 0x30]
movdqa xmm4, xmmword [0x180014a80]
mov eax, 5
movaps xmmword [r11 - 0x18], xmm6
movaps xmmword [r11 - 0x28], xmm7
movdqa xmm7, xmmword [str.9999]
movaps xmmword [r11 - 0x38], xmm8
movd xmm6, eax
mov eax, 0x1f
movaps xmmword [r11 - 0x48], xmm9
movdqa xmm9, xmmword [0x180014940]
movd xmm8, eax
nop dword [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 0x10]
paddd xmm2, xmm5
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rcx - 0x10]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
xorps xmm3, xmm0
movq qword [rcx - 0x10], xmm3
paddd xmm2, xmm5
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rcx - 8]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xorps xmm3, xmm0
movq qword [rcx - 8], xmm3
cmp r8d, 0x10
jl 0x180006280
movaps xmm9, xmmword [rsp + 0x70]
movaps xmm8, xmmword [rsp + 0x80]
movaps xmm7, xmmword [rsp + 0x90]
movaps xmm6, xmmword [rsp + 0xa0]
cmp r8d, 0x16
jge 0x1800063e8
movsxd rax, r8d
lea r9, [rsp + 0x30]
lea r9, [r9 + rax*2]
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x8fb823ef
lea r9, [r9 + 2]
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x39
movzx eax, r8w
inc r8d
sub ax, cx
add ax, 0x38
xor word [r9 - 2], ax
cmp r8d, 0x16
jl 0x1800063b0
mov rax, qword [0x1800178f0]
lea r8, [rsp + 0x30]
add rax, 0x10061f0
xor r9d, r9d
xor edx, edx
xor ecx, ecx
call rax
mov qword [0x18001b7e0], rax
mov r9, qword [rbx]
lea r8, [rsp + 0x20]
mov rdx, rax
mov rcx, rbx
call qword [r9 + 0x268]
movsd xmm0, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.180011d70
add rsp, 0xb0
pop rbx
ret
Function at 0x180006440
Capabilities:
Encode data using xor

Disassembly:
mov r11, rsp
push rbx
sub rsp, 0xb0
mov rax, qword [0x180017010]
xor rax, rsp
mov qword [rsp + 0x68], rax
mov rbx, qword [0x18001b658]
xor eax, eax
mov qword [rsp + 0x30], rax
mov rax, qword [0x18001b740]
movsd qword [rsp + 0x20], xmm1
movsd qword [rsp + 0x28], xmm2
test rax, rax
jne 0x18000668a
movups xmm0, xmmword [0x180013ed0]
xor r8d, r8d
cmp dword [0x180017020], 2
movups xmm1, xmmword [0x180013ee0]
movups xmmword [rsp + 0x38], xmm0
movups xmm0, xmmword [0x180013ef0]
movups xmmword [rsp + 0x48], xmm1
movups xmmword [rsp + 0x58], xmm0
jl 0x180006624
movdqa xmm5, xmmword [0x180014920]
lea rcx, [r11 - 0x80]
movdqa xmm4, xmmword [0x180014a80]
mov eax, 5
movaps xmmword [r11 - 0x18], xmm6
movaps xmmword [r11 - 0x28], xmm7
movdqa xmm7, xmmword [str.9999]
movaps xmmword [r11 - 0x38], xmm8
movd xmm6, eax
mov eax, 0x1f
movaps xmmword [r11 - 0x48], xmm9
movdqa xmm9, xmmword [0x180014940]
movd xmm8, eax
nop dword [rax]
nop dword [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 0x10]
paddd xmm2, xmm5
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rcx - 0x10]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
xorps xmm3, xmm0
movq qword [rcx - 0x10], xmm3
paddd xmm2, xmm5
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rcx - 8]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xorps xmm3, xmm0
movq qword [rcx - 8], xmm3
cmp r8d, 0x18
jl 0x180006510
movaps xmm9, xmmword [rsp + 0x70]
movaps xmm8, xmmword [rsp + 0x80]
movaps xmm7, xmmword [rsp + 0x90]
movaps xmm6, xmmword [rsp + 0xa0]
jmp 0x180006668
lea r9, [rsp + 0x38]
nop dword [rax]
mov eax, 0x8fb823ef
lea r9, [r9 + 2]
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x39
movzx eax, r8w
inc r8d
sub ax, cx
add ax, 0x38
xor word [r9 - 2], ax
cmp r8d, 0x18
jl 0x180006630
mov rax, qword [0x1800178f0]
lea r8, [rsp + 0x38]
add rax, 0x10061f0
xor r9d, r9d
xor edx, edx
xor ecx, ecx
call rax
mov qword [0x18001b740], rax
mov r9, qword [rbx]
lea r8, [rsp + 0x20]
mov rdx, rax
mov rcx, rbx
call qword [r9 + 0x268]
movsd xmm0, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x68]
xor rcx, rsp
call fcn.180011d70
add rsp, 0xb0
pop rbx
ret
Function at 0x1800087a0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x20
mov rax, qword gs:[0x60]
mov r14, rcx
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rdx, dword [r10 + 0x3c]
mov edi, dword [rdx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x180008847
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x180008847
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xbaca360
lea rcx, [rbx + r9*4]
mov ecx, dword [rcx + r10]
add rcx, r10
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x180008842
nop
movsx edx, dl
lea rcx, [rcx + 1]
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx - 1]
test dl, dl
jne 0x180008820
cmp r8d, 0x3d29bb2e
je 0x18000884c
test r9d, r9d
jne 0x180008800
mov rax, qword [rax]
jmp 0x1800087d0
mov eax, dword [rdi + 0x24]
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
mov rcx, r14
add rdx, r10
call rdx
mov rcx, 0xffffffffffffffff
lea rbp, [rax + 1]
mov eax, 2
mul rbp
cmovo rax, rcx
mov rcx, rax
call fcn.180012154
mov rcx, qword gs:[0x60]
mov rsi, rax
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop dword [rax + rax]
mov r10, qword [rcx + 0x30]
movsxd rdx, dword [r10 + 0x3c]
mov r11d, dword [rdx + r10 + 0x88]
add r11, r10
cmp r11, r10
je 0x180008917
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x180008917
mov edi, dword [r11 + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0x12687aaa
lea rax, [rdi + r9*4]
mov edx, dword [rax + r10]
add rdx, r10
movzx eax, byte [rdx]
inc rdx
test al, al
je 0x180008912
nop
movsx eax, al
lea rdx, [rdx + 1]
xor eax, r8d
imul r8d, eax, 0x1000193
movzx eax, byte [rdx - 1]
test al, al
jne 0x1800088f0
cmp r8d, 0xf6e7991e
je 0x18000891c
test r9d, r9d
jne 0x1800088d0
mov rcx, qword [rcx]
jmp 0x1800088a0
mov ecx, dword [r11 + 0x24]
mov r8, rbp
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
mov rdx, r14
add rax, r10
mov rcx, rsi
call rax
mov rbx, qword [rsp + 0x30]
mov rax, rsi
mov rsi, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x48]
add rsp, 0x20
pop r14
ret
Function at 0x180008960
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x20
mov rax, qword gs:[0x60]
mov rsi, rcx
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rdx, dword [r10 + 0x3c]
mov ebx, dword [rdx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x180008a07
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x180008a07
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x9650d60a
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x180008a02
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x1800089e0
cmp r8d, 0x29ab14be
je 0x180008a0c
test r9d, r9d
jne 0x1800089c0
mov rax, qword [rax]
jmp 0x180008990
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
lea rcx, [rsp + 0x30]
add rax, r10
call rax
movd xmm0, dword [rsp + 0x30]
mov rax, rsi
movd xmm2, dword [rsp + 0x34]
mov rbx, qword [rsp + 0x38]
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm2, xmm2
cvtps2pd xmm1, xmm0
cvtps2pd xmm0, xmm2
movsd qword [rsi], xmm1
movsd qword [rsi + 8], xmm0
mov rsi, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
ret
Function at 0x18000adc0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
sub rsp, 0x98
movsd xmm1, qword [rdx + 0x10]
lea r8, [rax - 0x68]
movaps xmmword [rax - 0x18], xmm6
xorps xmm0, xmm0
movaps xmmword [rax - 0x28], xmm7
movaps xmm6, xmm3
mulss xmm6, dword [0x1800147e8]
movaps xmm7, xmm2
mulss xmm7, dword [0x1800147e8]
movups xmmword [rax - 0x68], xmm0
movups xmm0, xmmword [rdx]
lea rdx, [rax - 0x58]
movaps xmmword [rax - 0x38], xmm8
movss xmm8, dword [0x180017054]
movaps xmmword [rax - 0x58], xmm0
movsd qword [rax - 0x48], xmm1
call fcn.1800030e0
test al, al
je 0x18000afab
movups xmm1, xmmword [rsp + 0x30]
xorps xmm0, xmm0
ucomisd xmm1, xmm0
jp 0x18000ae37
je 0x18000afab
movaps xmm2, xmm1
unpckhpd xmm2, xmm1
ucomisd xmm2, xmm0
jp 0x18000ae4a
je 0x18000afab
xorps xmm0, xmm0
mov qword [rsp + 0xa0], rbx
cvtss2sd xmm0, xmm7
mov qword [rsp + 0xa8], rbp
mov qword [rsp + 0xb0], rsi
mov qword [rsp + 0x90], rdi
xorps xmm3, xmm3
subsd xmm1, xmm0
xorps xmm0, xmm0
cvtss2sd xmm0, xmm6
cvtsd2ss xmm3, xmm1
subsd xmm2, xmm0
xorps xmm1, xmm1
movss xmm0, dword [0x180014a70]
divss xmm3, xmm8
cvtsd2ss xmm1, xmm2
comiss xmm3, xmm7
divss xmm1, xmm8
ja 0x18000aeac
xorps xmm7, xmm0
maxss xmm7, xmm3
comiss xmm1, xmm6
ja 0x18000aeb8
xorps xmm6, xmm0
maxss xmm6, xmm1
mov rax, qword gs:[0x60]
cvttss2si rsi, xmm6
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
cvttss2si rbp, xmm7
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x18000af57
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x18000af57
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x57e20eb3
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x18000af52
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x18000af30
cmp r8d, 0xa198a8a9
je 0x18000af5c
test r9d, r9d
jne 0x18000af10
mov rax, qword [rax]
jmp 0x18000aee0
mov ecx, dword [rbx + 0x24]
mov r8d, esi
add rcx, r10
mov qword [rsp + 0x20], 0
mov edx, ebp
movzx r9d, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + r9*4]
xor r9d, r9d
add rax, r10
lea ecx, [r9 + 1]
call rax
mov rdi, qword [rsp + 0x90]
mov rsi, qword [rsp + 0xb0]
mov rbp, qword [rsp + 0xa8]
mov rbx, qword [rsp + 0xa0]
movaps xmm6, xmmword [rsp + 0x80]
movaps xmm7, xmmword [rsp + 0x70]
movaps xmm8, xmmword [rsp + 0x60]
add rsp, 0x98
ret
Function at 0x140d6e058
Capabilities:
Decompress data using aplib

Disassembly:
call 0x140d6e1df
push r10
mov r10, rsp
push r10
mov rsi, qword [r10 + 0x10]
mov rdi, qword [r10 + 0x20]
cld
mov dl, 0x80
mov al, byte [rsi]
inc rsi
mov byte [rdi], al
inc rdi
mov ebx, 2
add dl, dl
jne 0x140d6e089
mov dl, byte [rsi]
inc rsi
adc dl, dl
jae 0x140d6e06f
add dl, dl
jne 0x140d6e096
mov dl, byte [rsi]
inc rsi
adc dl, dl
jae 0x140d6e0f6
xor eax, eax
add dl, dl
jne 0x140d6e0a5
mov dl, byte [rsi]
inc rsi
adc dl, dl
jae 0x140d6e1ad
add dl, dl
jne 0x140d6e0b6
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc eax, eax
add dl, dl
jne 0x140d6e0c3
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc eax, eax
add dl, dl
jne 0x140d6e0d0
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc eax, eax
add dl, dl
jne 0x140d6e0dd
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc eax, eax
je 0x140d6e0ea
push rdi
mov eax, eax
sub rdi, rax
mov al, byte [rdi]
pop rdi
mov byte [rdi], al
inc rdi
mov ebx, 2
jmp 0x140d6e07e
mov eax, 1
add dl, dl
jne 0x140d6e106
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc eax, eax
add dl, dl
jne 0x140d6e113
mov dl, byte [rsi]
inc rsi
adc dl, dl
jb 0x140d6e0fb
sub eax, ebx
mov ebx, 1
jne 0x140d6e14c
mov ecx, 1
add dl, dl
jne 0x140d6e12e
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc ecx, ecx
add dl, dl
jne 0x140d6e13b
mov dl, byte [rsi]
inc rsi
adc dl, dl
jb 0x140d6e123
push rsi
mov rsi, rdi
sub rsi, rbp
rep movsb byte [rdi], byte [rsi]
pop rsi
jmp 0x140d6e07e
dec eax
shl eax, 8
mov al, byte [rsi]
inc rsi
mov ebp, eax
mov ecx, 1
add dl, dl
jne 0x140d6e168
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc ecx, ecx
add dl, dl
jne 0x140d6e175
mov dl, byte [rsi]
inc rsi
adc dl, dl
jb 0x140d6e15d
cmp eax, 0x7d00
jae 0x140d6e19b
cmp eax, 0x500
jb 0x140d6e196
inc ecx
push rsi
mov rsi, rdi
sub rsi, rax
rep movsb byte [rdi], byte [rsi]
pop rsi
jmp 0x140d6e07e
cmp eax, 0x7f
ja 0x140d6e19e
add ecx, 2
push rsi
mov rsi, rdi
sub rsi, rax
rep movsb byte [rdi], byte [rsi]
pop rsi
jmp 0x140d6e07e
mov al, byte [rsi]
inc rsi
xor ecx, ecx
shr al, 1
je 0x140d6e1d2
adc ecx, 2
mov ebp, eax
push rsi
mov rsi, rdi
sub rsi, rax
rep movsb byte [rdi], byte [rsi]
pop rsi
mov ebx, 1
jmp 0x140d6e07e
pop r10
sub rdi, qword [r10 + 0x20]
mov eax, edi
pop r10
ret 0x20