joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4294f0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
movups xmm0, xmmword [0x4d7624]
push esi
mov esi, ecx
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 4], esi
movups xmm0, xmmword [0x4d7634]
pextrw eax, xmm0, 7
movups xmmword [ebp - 0x18], xmm0
test ax, ax
je 0x429670
xor ecx, ecx
cmp dword [0x4ec530], 2
jl 0x429640
movaps xmm4, xmmword [0x4d8010]
movaps xmm3, xmmword [0x4d8100]
movaps xmm5, xmmword [0x4d8040]
movaps xmm6, xmmword [0x4d80e0]
nop dword [eax + eax]
movd xmm0, ecx
lea eax, [ecx + 4]
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm6
paddw xmm1, xmm0
movq xmm0, qword [ebp + ecx*2 - 0x28]
xorps xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movq qword [ebp + ecx*2 - 0x28], xmm1
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm6
paddw xmm1, xmm0
movq xmm0, qword [ebp + ecx*2 - 0x20]
xorps xmm1, xmm0
movq qword [ebp + ecx*2 - 0x20], xmm1
add ecx, 8
cmp ecx, 0x10
jl 0x429550
jmp 0x429670
mov eax, 0x24924925
mul ecx
mov eax, ecx
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
lea edx, [eax*8]
sub edx, eax
mov eax, ecx
shl edx, 3
sub eax, edx
add eax, 0x32
xor word [ebp + ecx*2 - 0x28], ax
inc ecx
cmp ecx, 0x10
jl 0x429640
xorps xmm0, xmm0
lea ecx, [ebp - 0x28]
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
lea edx, [ecx + 2]
mov dword [esi + 0x14], 0
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x429690
sub ecx, edx
lea eax, [ebp - 0x28]
sar ecx, 1
push ecx
push eax
mov ecx, esi
call fcn.00422c50
mov eax, esi
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x4296c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
cmp word [0x4d7c1e], 0
movups xmm0, xmmword [0x4d7c04]
mov eax, dword [0x4d7c1c]
push esi
movups xmmword [ebp - 0x24], xmm0
mov esi, ecx
mov dword [ebp - 0xc], eax
movq xmm0, qword [0x4d7c14]
mov dword [ebp - 4], esi
movq qword [ebp - 0x14], xmm0
je 0x429821
xor ecx, ecx
cmp dword [0x4ec530], 2
jl 0x4297f0
movaps xmm2, xmmword [0x4d8010]
mov eax, 0x4d7c04
movaps xmm3, xmmword [0x4d8100]
movaps xmm1, xmm2
punpckldq xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
mov ecx, 8
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x4d8040]
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
movaps xmm2, xmmword [0x4d8020]
pshuflw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
paddw xmm1, xmmword [0x4d80e0]
movq xmm0, qword [eax]
xorps xmm1, xmm0
movaps xmm0, xmm2
movq qword [ebp - 0x24], xmm1
movaps xmm1, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x4d8040]
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
movq xmm0, qword [ebp - 0x1c]
paddw xmm1, xmmword [0x4d80e0]
xorps xmm1, xmm0
movq qword [ebp - 0x1c], xmm1
nop dword [eax + eax]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, ecx
shl edx, 3
sub eax, edx
add eax, 0x32
xor word [ebp + ecx*2 - 0x24], ax
inc ecx
cmp ecx, 0xe
jl 0x4297f0
xorps xmm0, xmm0
lea ecx, [ebp - 0x24]
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
lea edx, [ecx + 2]
mov dword [esi + 0x14], 0
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x429840
sub ecx, edx
lea eax, [ebp - 0x24]
sar ecx, 1
push ecx
push eax
mov ecx, esi
call fcn.00422c50
mov eax, esi
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x429870
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
movups xmm0, xmmword [str.w_FxCHerKWxpK0Aw__FeXMenRWxmZ_AqVcZDdz_lSOUZ2o__EqVpZXRdz_]
push esi
mov esi, ecx
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 4], esi
movups xmm0, xmmword [0x4d7614]
pextrw eax, xmm0, 7
movups xmmword [ebp - 0x18], xmm0
test ax, ax
je 0x4299f0
xor ecx, ecx
cmp dword [0x4ec530], 2
jl 0x4299c0
movaps xmm4, xmmword [0x4d8010]
movaps xmm3, xmmword [0x4d8100]
movaps xmm5, xmmword [0x4d8040]
movaps xmm6, xmmword [0x4d80e0]
nop dword [eax + eax]
movd xmm0, ecx
lea eax, [ecx + 4]
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm6
paddw xmm1, xmm0
movq xmm0, qword [ebp + ecx*2 - 0x28]
xorps xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movq qword [ebp + ecx*2 - 0x28], xmm1
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm6
paddw xmm1, xmm0
movq xmm0, qword [ebp + ecx*2 - 0x20]
xorps xmm1, xmm0
movq qword [ebp + ecx*2 - 0x20], xmm1
add ecx, 8
cmp ecx, 0x10
jl 0x4298d0
jmp 0x4299f0
mov eax, 0x24924925
mul ecx
mov eax, ecx
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
lea edx, [eax*8]
sub edx, eax
mov eax, ecx
shl edx, 3
sub eax, edx
add eax, 0x32
xor word [ebp + ecx*2 - 0x28], ax
inc ecx
cmp ecx, 0x10
jl 0x4299c0
xorps xmm0, xmm0
lea ecx, [ebp - 0x28]
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
lea edx, [ecx + 2]
mov dword [esi + 0x14], 0
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x429a10
sub ecx, edx
lea eax, [ebp - 0x28]
sar ecx, 1
push ecx
push eax
mov ecx, esi
call fcn.00422c50
mov eax, esi
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x429a40
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
movups xmm0, xmmword [str.qVpTBVdz_]
mov eax, dword [0x4d7368]
push esi
movups xmmword [ebp - 0x2c], xmm0
mov esi, ecx
xor ecx, ecx
cmp dword [0x4ec530], 2
movups xmm0, xmmword [0x4d7358]
mov dword [ebp - 4], esi
mov dword [ebp - 0xc], eax
movups xmmword [ebp - 0x1c], xmm0
jl 0x429b90
movaps xmm4, xmmword [0x4d8010]
movaps xmm3, xmmword [0x4d8100]
movaps xmm5, xmmword [0x4d8040]
movaps xmm6, xmmword [0x4d80e0]
nop word [eax + eax]
movd xmm0, ecx
lea eax, [ecx + 4]
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm6
paddw xmm1, xmm0
movq xmm0, qword [ebp + ecx*2 - 0x2c]
xorps xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movq qword [ebp + ecx*2 - 0x2c], xmm1
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm6
paddw xmm1, xmm0
movq xmm0, qword [ebp + ecx*2 - 0x24]
xorps xmm1, xmm0
movq qword [ebp + ecx*2 - 0x24], xmm1
add ecx, 8
cmp ecx, 0x10
jl 0x429aa0
cmp ecx, 0x12
jge 0x429bc1
nop
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, ecx
shl edx, 3
sub eax, edx
add eax, 0x32
xor word [ebp + ecx*2 - 0x2c], ax
inc ecx
cmp ecx, 0x12
jl 0x429b90
xorps xmm0, xmm0
lea ecx, [ebp - 0x2c]
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
lea edx, [ecx + 2]
mov dword [esi + 0x14], 0
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x429be0
sub ecx, edx
lea eax, [ebp - 0x2c]
sar ecx, 1
push ecx
push eax
mov ecx, esi
call fcn.00422c50
mov eax, esi
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x429c10
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
movups xmm0, xmmword [0x4d7408]
mov eax, dword [0x4d7428]
push esi
movups xmmword [ebp - 0x30], xmm0
mov esi, ecx
mov dword [ebp - 0x10], eax
movups xmm0, xmmword [0x4d7418]
mov ax, word [0x4d742c]
xor ecx, ecx
cmp dword [0x4ec530], 2
mov dword [ebp - 4], esi
movups xmmword [ebp - 0x20], xmm0
mov word [ebp - 0xc], ax
jl 0x429d60
movaps xmm4, xmmword [0x4d8010]
movaps xmm3, xmmword [0x4d8100]
movaps xmm5, xmmword [0x4d8040]
movaps xmm6, xmmword [0x4d80e0]
nop
movd xmm0, ecx
lea eax, [ecx + 4]
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm6
paddw xmm1, xmm0
movq xmm0, qword [ebp + ecx*2 - 0x30]
xorps xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movq qword [ebp + ecx*2 - 0x30], xmm1
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm6
paddw xmm1, xmm0
movq xmm0, qword [ebp + ecx*2 - 0x28]
xorps xmm1, xmm0
movq qword [ebp + ecx*2 - 0x28], xmm1
add ecx, 8
cmp ecx, 0x10
jl 0x429c70
cmp ecx, 0x13
jge 0x429d91
nop
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, ecx
shl edx, 3
sub eax, edx
add eax, 0x32
xor word [ebp + ecx*2 - 0x30], ax
inc ecx
cmp ecx, 0x13
jl 0x429d60
xorps xmm0, xmm0
lea ecx, [ebp - 0x30]
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
lea edx, [ecx + 2]
mov dword [esi + 0x14], 0
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x429db0
sub ecx, edx
lea eax, [ebp - 0x30]
sar ecx, 1
push ecx
push eax
mov ecx, esi
call fcn.00422c50
mov eax, esi
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x429de0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
movups xmm0, xmmword [0x4d766c]
mov eax, dword [0x4d768c]
push esi
movups xmmword [ebp - 0x30], xmm0
mov esi, ecx
mov dword [ebp - 0x10], eax
movups xmm0, xmmword [0x4d767c]
mov ax, word [0x4d7690]
xor ecx, ecx
cmp dword [0x4ec530], 2
mov dword [ebp - 4], esi
movups xmmword [ebp - 0x20], xmm0
mov word [ebp - 0xc], ax
jl 0x429f30
movaps xmm4, xmmword [0x4d8010]
movaps xmm3, xmmword [0x4d8100]
movaps xmm5, xmmword [0x4d8040]
movaps xmm6, xmmword [0x4d80e0]
nop
movd xmm0, ecx
lea eax, [ecx + 4]
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm6
paddw xmm1, xmm0
movq xmm0, qword [ebp + ecx*2 - 0x30]
xorps xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movq qword [ebp + ecx*2 - 0x30], xmm1
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm6
paddw xmm1, xmm0
movq xmm0, qword [ebp + ecx*2 - 0x28]
xorps xmm1, xmm0
movq qword [ebp + ecx*2 - 0x28], xmm1
add ecx, 8
cmp ecx, 0x10
jl 0x429e40
cmp ecx, 0x13
jge 0x429f61
nop
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, ecx
shl edx, 3
sub eax, edx
add eax, 0x32
xor word [ebp + ecx*2 - 0x30], ax
inc ecx
cmp ecx, 0x13
jl 0x429f30
xorps xmm0, xmm0
lea ecx, [ebp - 0x30]
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
lea edx, [ecx + 2]
mov dword [esi + 0x14], 0
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x429f80
sub ecx, edx
lea eax, [ebp - 0x30]
sar ecx, 1
push ecx
push eax
mov ecx, esi
call fcn.00422c50
mov eax, esi
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x429fc0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
movups xmm0, xmmword [0x4d7644]
push esi
mov esi, ecx
xor ecx, ecx
cmp dword [0x4ec530], 2
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 4], esi
movups xmm0, xmmword [0x4d7654]
movups xmmword [ebp - 0x20], xmm0
movq xmm0, qword [0x4d7664]
movq qword [ebp - 0x10], xmm0
jl 0x42a110
movaps xmm4, xmmword [0x4d8010]
movaps xmm3, xmmword [0x4d8100]
movaps xmm5, xmmword [0x4d8040]
movaps xmm6, xmmword [0x4d80e0]
nop word [eax + eax]
movd xmm0, ecx
lea eax, [ecx + 4]
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm6
paddw xmm1, xmm0
movq xmm0, qword [ebp + ecx*2 - 0x30]
xorps xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movq qword [ebp + ecx*2 - 0x30], xmm1
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm6
paddw xmm1, xmm0
movq xmm0, qword [ebp + ecx*2 - 0x28]
xorps xmm1, xmm0
movq qword [ebp + ecx*2 - 0x28], xmm1
add ecx, 8
cmp ecx, 0x10
jl 0x42a020
cmp ecx, 0x14
jge 0x42a141
nop
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, ecx
shl edx, 3
sub eax, edx
add eax, 0x32
xor word [ebp + ecx*2 - 0x30], ax
inc ecx
cmp ecx, 0x14
jl 0x42a110
xorps xmm0, xmm0
lea ecx, [ebp - 0x30]
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
lea edx, [ecx + 2]
mov dword [esi + 0x14], 0
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42a160
sub ecx, edx
lea eax, [ebp - 0x30]
sar ecx, 1
push ecx
push eax
mov ecx, esi
call fcn.00422c50
mov eax, esi
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x42a190
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
movups xmm0, xmmword [0x4d7390]
push esi
mov esi, ecx
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 4], esi
movups xmm0, xmmword [0x4d73a0]
pextrw eax, xmm0, 7
movups xmmword [ebp - 0x18], xmm0
test ax, ax
je 0x42a310
xor ecx, ecx
cmp dword [0x4ec530], 2
jl 0x42a2e0
movaps xmm4, xmmword [0x4d8010]
movaps xmm3, xmmword [0x4d8100]
movaps xmm5, xmmword [0x4d8040]
movaps xmm6, xmmword [0x4d80e0]
nop dword [eax + eax]
movd xmm0, ecx
lea eax, [ecx + 4]
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm6
paddw xmm1, xmm0
movq xmm0, qword [ebp + ecx*2 - 0x28]
xorps xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movq qword [ebp + ecx*2 - 0x28], xmm1
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm6
paddw xmm1, xmm0
movq xmm0, qword [ebp + ecx*2 - 0x20]
xorps xmm1, xmm0
movq qword [ebp + ecx*2 - 0x20], xmm1
add ecx, 8
cmp ecx, 0x10
jl 0x42a1f0
jmp 0x42a310
mov eax, 0x24924925
mul ecx
mov eax, ecx
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
lea edx, [eax*8]
sub edx, eax
mov eax, ecx
shl edx, 3
sub eax, edx
add eax, 0x32
xor word [ebp + ecx*2 - 0x28], ax
inc ecx
cmp ecx, 0x10
jl 0x42a2e0
xorps xmm0, xmm0
lea ecx, [ebp - 0x28]
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
lea edx, [ecx + 2]
mov dword [esi + 0x14], 0
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42a330
sub ecx, edx
lea eax, [ebp - 0x28]
sar ecx, 1
push ecx
push eax
mov ecx, esi
call fcn.00422c50
mov eax, esi
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x42c050
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
mov eax, dword fs:[0x2c]
push esi
mov esi, ecx
mov dword [ebp - 4], esi
mov ecx, dword [eax]
mov eax, dword [0x4ed6f8]
mov dword [ebp - 4], esi
cmp eax, dword [ecx + 4]
jle 0x42c0ca
push 0x4ed6f8
call fcn.0045c54c
add esp, 4
cmp dword [0x4ed6f8], 0xffffffff
jne 0x42c0ca
xorps xmm0, xmm0
mov dword [0x4ed724], 0
xor eax, eax
mov dword [0x4ed728], 7
movups xmmword [0x4ed714], xmm0
push 0x4bb580
mov word [0x4ed714], ax
call fcn.0045c930
add esp, 4
push 0x4ed6f8
call fcn.0045c4fb
add esp, 4
mov edx, dword [0x4ed728]
mov ecx, dword [0x4ed714]
cmp edx, 7
jbe 0x42c0df
test ecx, ecx
je 0x42c106
cmp edx, 7
mov eax, 0x4ed714
cmova eax, ecx
cmp word [eax], 0
je 0x42c106
cmp edx, 7
mov eax, 0x4ed714
cmova eax, ecx
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x42c14f
lea ecx, [ebp - 0x20]
call fcn.0042ec30
push eax
mov ecx, 0x4ed714
call fcn.004226f0
mov ecx, dword [ebp - 0xc]
cmp ecx, 7
jbe 0x42c14f
mov edx, dword [ebp - 0x20]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42c145
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42c162
push ecx
push edx
call fcn.0045c945
add esp, 8
push 0x4ed714
mov ecx, esi
call fcn.004019f0
mov eax, esi
pop esi
mov esp, ebp
pop ebp
ret
call fcn.00483c3a
int3

Function at 0x42c170
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
mov eax, dword fs:[0x2c]
push esi
mov esi, ecx
mov dword [ebp - 4], esi
mov ecx, dword [eax]
mov eax, dword [0x4ed6f4]
mov dword [ebp - 4], esi
cmp eax, dword [ecx + 4]
jle 0x42c1ea
push 0x4ed6f4
call fcn.0045c54c
add esp, 4
cmp dword [0x4ed6f4], 0xffffffff
jne 0x42c1ea
xorps xmm0, xmm0
mov dword [0x4ed70c], 0
xor eax, eax
mov dword [0x4ed710], 7
movups xmmword [0x4ed6fc], xmm0
push 0x4bb5e0
mov word [0x4ed6fc], ax
call fcn.0045c930
add esp, 4
push 0x4ed6f4
call fcn.0045c4fb
add esp, 4
mov edx, dword [0x4ed710]
mov ecx, dword [0x4ed6fc]
cmp edx, 7
jbe 0x42c1ff
test ecx, ecx
je 0x42c226
cmp edx, 7
mov eax, 0x4ed6fc
cmova eax, ecx
cmp word [eax], 0
je 0x42c226
cmp edx, 7
mov eax, 0x4ed6fc
cmova eax, ecx
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x42c26f
lea ecx, [ebp - 0x20]
call fcn.0042ee50
push eax
mov ecx, 0x4ed6fc
call fcn.004226f0
mov ecx, dword [ebp - 0xc]
cmp ecx, 7
jbe 0x42c26f
mov edx, dword [ebp - 0x20]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42c265
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42c282
push ecx
push edx
call fcn.0045c945
add esp, 8
push 0x4ed6fc
mov ecx, esi
call fcn.004019f0
mov eax, esi
pop esi
mov esp, ebp
pop ebp
ret
call fcn.00483c3a
int3
Function at 0x42c290
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
mov eax, dword fs:[0x2c]
push esi
mov esi, ecx
mov dword [ebp - 4], esi
mov ecx, dword [eax]
mov eax, dword [0x4ed6f0]
mov dword [ebp - 4], esi
cmp eax, dword [ecx + 4]
jle 0x42c30a
push 0x4ed6f0
call fcn.0045c54c
add esp, 4
cmp dword [0x4ed6f0], 0xffffffff
jne 0x42c30a
xorps xmm0, xmm0
mov dword [0x4ed73c], 0
xor eax, eax
mov dword [0x4ed740], 7
movups xmmword [0x4ed72c], xmm0
push 0x4bb640
mov word [0x4ed72c], ax
call fcn.0045c930
add esp, 4
push 0x4ed6f0
call fcn.0045c4fb
add esp, 4
mov edx, dword [0x4ed740]
mov ecx, dword [0x4ed72c]
cmp edx, 7
jbe 0x42c31f
test ecx, ecx
je 0x42c346
cmp edx, 7
mov eax, 0x4ed72c
cmova eax, ecx
cmp word [eax], 0
je 0x42c346
cmp edx, 7
mov eax, 0x4ed72c
cmova eax, ecx
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x42c38f
lea ecx, [ebp - 0x20]
call fcn.0042f070
push eax
mov ecx, 0x4ed72c
call fcn.004226f0
mov ecx, dword [ebp - 0xc]
cmp ecx, 7
jbe 0x42c38f
mov edx, dword [ebp - 0x20]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42c385
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42c3a2
push ecx
push edx
call fcn.0045c945
add esp, 8
push 0x4ed72c
mov ecx, esi
call fcn.004019f0
mov eax, esi
pop esi
mov esp, ebp
pop ebp
ret
call fcn.00483c3a
int3