joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140006a40
Capabilities:
Check if file exists

Disassembly:
push r15
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
cmp qword [rcx], rdx
je 0x140006ab4
mov rdi, rdx
mov rsi, rcx
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r14d, eax
mov rcx, rsi
call fcn.140006ad0
lea rax, [rdi + 1]
cmp rax, 2
jb case.default.0x140006aad
mov qword [rsi], rdi
call fcn.140006670
mov rbx, rax
mov r15, qword [rsp + 0x58]
call sym.plugin_container.exe_GetHandleVerifier
mov rbp, qword [rax]
mov qword [rsp + 0x20], rbx
mov rcx, rax
mov rdx, rdi
mov r8, rsi
mov r9, r15
call qword [rbp + 8]
mov ecx, r14d
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
pop r15
jmp qword [sym.imp.KERNEL32.dll_SetLastError]
nop
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
pop r15
ret
or byte [rcx + rdi], ch
jo 0x140078bfa
out 0xff, eax
sbb dword [rdi], edi
invalid
and byte [rax - 0x36], ah
mov al, 0x52
cmp esi, dword [rcx + 0x72]
out dx, eax
out dx, eax
jbe 0x140078c62
fld xword [rsi + rdx*2]
xchg ecx, eax
retf 0xb053
invalid
jge 0x140078c84
sbb dword [rdi - 0x445bb97], 0xffffffd3
invalid

Function at 0x140006b40
Capabilities:
Generate random numbers via rtlgenrandom

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x140
mov rax, qword [0x14003f010]
xor rax, rsp
mov qword [rsp + 0x138], rax
test rdx, rdx
je 0x140006bd0
mov rsi, rdx
mov rdi, rcx
mov r13d, 0xffffffff
lea r14, str.z:_task_1579288126_build_src_security_sandbox_chromium_base_rand_util_win.cc
lea r15, str.success
lea r12, [rsp + 0x28]
jmp 0x140006b98
add rdi, rbx
sub rsi, rbx
je 0x140006bd0
cmp rsi, r13
mov ebx, 0xffffffff
cmovb rbx, rsi
mov rcx, rdi
mov edx, ebx
call sub.ADVAPI32.dll_SystemFunction036
test al, al
jne 0x140006b90
mov rcx, r12
mov rdx, r14
mov r8d, 0x20
mov r9, r15
call fcn.1400016f0
mov rcx, r12
call fcn.1400017f0
jmp 0x140006b90
mov rcx, qword [rsp + 0x138]
xor rcx, rsp
call fcn.1400365a0
nop
add rsp, 0x140
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x1800012a0
Capabilities:
Access peb ldr_data
Enumerate pe sections

Disassembly:
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x60
mov rax, qword [0x18001b040]
xor rax, rsp
mov qword [rsp + 0x58], rax
mov rsi, qword [0x18001b838]
mov rdi, r8
mov rdx, qword [0x18001be00]
add rsi, 0x1639504
test rdx, rdx
jne 0x1800013a9
mov rax, qword gs:[0x60]
mov qword [rsp + 0x70], rbx
mov dword [rsp + 0x50], 0x7865742e
mov byte [rsp + 0x54], 0x74
mov rbx, qword [rax + 0x10]
movsxd rcx, dword [rbx + 0x3c]
movzx eax, word [rcx + rbx + 0x14]
lea r8, [rcx + rbx]
add rax, 0x18
add r8, rax
movzx eax, word [rcx + rbx + 6]
lea rcx, [rax + rax*4]
lea r11, [r8 + rcx*8]
cmp r8, r11
je 0x180001363
lea r9, [rsp + 0x50]
sub r9, r8
nop word [rax + rax]
lea r10, [r8 + 5]
mov rax, r8
cmp r8, r10
je 0x180001363
nop dword [rax]
movsx edx, byte [r9 + rax]
movzx ecx, byte [rax]
cmp ecx, edx
jne 0x180001356
inc rax
cmp rax, r10
jne 0x180001340
jmp 0x180001363
add r8, 0x28
sub r9, 0x28
cmp r8, r11
jne 0x180001330
mov eax, dword [r8 + 8]
mov ecx, dword [r8 + 0xc]
add rcx, rbx
mov word [rsp + 0x30], 0x26ff
mov rbx, qword [rsp + 0x70]
lea rdx, [rax + rcx]
cmp rax, 2
jb 0x1800013a2
movzx eax, word [rsp + 0x30]
lea r8, [rdx - 2]
nop dword [rax]
cmp ax, word [rcx]
je 0x18000139f
cmp rcx, r8
je 0x1800013a2
inc rcx
jmp 0x180001390
mov rdx, rcx
mov qword [0x18001be00], rdx
xor eax, eax
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x28], rax
xor r9d, r9d
mov qword [rsp + 0x48], rax
mov r8, rdi
lea rax, [rsp + 0x38]
mov qword [rsp + 0x40], rsi
xor edx, edx
mov qword [rsp + 0x20], rax
xor ecx, ecx
call fcn.180015b10
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.180015b60
mov rsi, qword [rsp + 0x78]
add rsp, 0x60
pop rdi
ret
Function at 0x1800013f0
Capabilities:
Access peb ldr_data
Enumerate pe sections

Disassembly:
push rbp
push rsi
push rdi
push r14
sub rsp, 0x68
mov rax, qword [0x18001b040]
xor rax, rsp
mov qword [rsp + 0x58], rax
mov rax, qword [rcx]
mov rsi, rdx
mov rdx, qword [0x18001be08]
mov rbp, r8
mov rdi, rcx
mov r14, qword [rax + 0x260]
test rdx, rdx
jne 0x1800014f9
mov rax, qword gs:[0x60]
mov qword [rsp + 0x60], rbx
mov dword [rsp + 0x50], 0x7865742e
mov byte [rsp + 0x54], 0x74
mov rbx, qword [rax + 0x10]
movsxd rcx, dword [rbx + 0x3c]
movzx eax, word [rcx + rbx + 0x14]
lea r8, [rcx + rbx]
add rax, 0x18
add r8, rax
movzx eax, word [rcx + rbx + 6]
lea rcx, [rax + rax*4]
lea r11, [r8 + rcx*8]
cmp r8, r11
je 0x1800014b3
lea r9, [rsp + 0x50]
sub r9, r8
nop dword [rax]
lea r10, [r8 + 5]
mov rax, r8
cmp r8, r10
je 0x1800014b3
nop dword [rax]
movsx edx, byte [r9 + rax]
movzx ecx, byte [rax]
cmp ecx, edx
jne 0x1800014a6
inc rax
cmp rax, r10
jne 0x180001490
jmp 0x1800014b3
add r8, 0x28
sub r9, 0x28
cmp r8, r11
jne 0x180001480
mov eax, dword [r8 + 8]
mov ecx, dword [r8 + 0xc]
add rcx, rbx
mov word [rsp + 0x30], 0x26ff
mov rbx, qword [rsp + 0x60]
lea rdx, [rax + rcx]
cmp rax, 2
jb 0x1800014f2
movzx eax, word [rsp + 0x30]
lea r8, [rdx - 2]
nop dword [rax]
cmp ax, word [rcx]
je 0x1800014ef
cmp rcx, r8
je 0x1800014f2
inc rcx
jmp 0x1800014e0
mov rdx, rcx
mov qword [0x18001be08], rdx
xor eax, eax
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x28], rax
xor r9d, r9d
mov qword [rsp + 0x48], rax
mov r8, rbp
lea rax, [rsp + 0x38]
mov qword [rsp + 0x40], r14
mov rdx, rsi
mov qword [rsp + 0x20], rax
mov rcx, rdi
call fcn.180015b10
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.180015b60
add rsp, 0x68
pop r14
pop rdi
pop rsi
pop rbp
ret
Function at 0x180001550
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x48
xor r8d, r8d
movaps xmmword [rsp + 0x30], xmm6
cmp dword [0x18001b090], 2
mov r10, rdx
jl 0x18000174d
movdqa xmm6, xmmword [0x180018520]
lea rax, [r10 + 0x24]
lea rdx, [rcx + 0x24]
cmp rcx, rax
ja 0x18000158a
cmp rdx, r10
jae 0x18000174d
movaps xmmword [rsp + 0x20], xmm7
movaps xmmword [rsp + 0x10], xmm8
movaps xmmword [rsp], xmm9
movdqa xmm4, xmmword [0x180018730]
lea r9, [rcx + 8]
movdqa xmm7, xmmword [0x180018540]
mov rdx, r10
movdqa xmm5, xmmword [0x180018740]
sub rdx, rcx
movdqa xmm8, xmmword [str.22226666]
movdqa xmm9, xmmword [0x180018550]
nop
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea r9, [r9 + 0x10]
paddd xmm2, xmm6
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm5
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx + r9 - 0x18]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
xorps xmm3, xmm0
movq qword [r9 - 0x18], xmm3
paddd xmm2, xmm6
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx + r9 - 0x10]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xorps xmm3, xmm0
movq qword [r9 - 0x10], xmm3
cmp r8d, 0x10
jl 0x1800015d0
movaps xmm9, xmmword [rsp]
movaps xmm8, xmmword [rsp + 0x10]
movaps xmm7, xmmword [rsp + 0x20]
cmp r8d, 0x13
jge 0x1800017ac
movsxd rax, r8d
sub r10, rcx
lea r9, [rcx + rax*2]
nop word [rax + rax]
mov ecx, r8d
lea r9, [r9 + 2]
mov eax, 0x4bda12f7
imul r8d
inc r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x36
sub ecx, eax
mov eax, 0x51eb851f
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x32
sub ecx, eax
add cx, 0x34
xor cx, word [r9 + r10 - 2]
mov word [r9 - 2], cx
cmp r8d, 0x13
jl 0x180001760
movaps xmm6, xmmword [rsp + 0x30]
add rsp, 0x48
ret
Function at 0x1800017c0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x48
xor r9d, r9d
movaps xmmword [rsp + 0x30], xmm6
cmp dword [0x18001b090], 2
mov r10, rdx
jl 0x1800019bf
movdqa xmm6, xmmword [0x180018520]
lea rax, [r10 + 0x3e]
lea rdx, [rcx + 0x3e]
cmp rcx, rax
ja 0x1800017fa
cmp rdx, r10
jae 0x1800019bf
movaps xmmword [rsp + 0x20], xmm7
movaps xmmword [rsp + 0x10], xmm8
movaps xmmword [rsp], xmm9
movdqa xmm4, xmmword [0x180018730]
lea rdx, [rcx + 8]
movdqa xmm7, xmmword [0x180018540]
sub r10, rcx
movdqa xmm5, xmmword [0x180018740]
movdqa xmm8, xmmword [str.22226666]
movdqa xmm9, xmmword [0x180018550]
nop dword [rax + rax]
movd xmm2, r9d
lea eax, [r9 + 4]
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 0x10]
paddd xmm2, xmm6
add r9d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm5
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [r10 + rdx - 0x18]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
xorps xmm3, xmm0
movq qword [rdx - 0x18], xmm3
paddd xmm2, xmm6
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [r10 + rdx - 0x10]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xorps xmm3, xmm0
movq qword [rdx - 0x10], xmm3
cmp r9d, 0x20
jl 0x180001840
movaps xmm9, xmmword [rsp]
movaps xmm8, xmmword [rsp + 0x10]
movaps xmm7, xmmword [rsp + 0x20]
movaps xmm6, xmmword [rsp + 0x30]
add rsp, 0x48
ret
sub r10, rcx
nop dword [rax]
nop word [rax + rax]
mov r8d, r9d
lea rcx, [rcx + 2]
mov eax, 0x4bda12f7
imul r9d
inc r9d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x36
sub r8d, eax
mov eax, 0x51eb851f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x32
sub r8d, eax
add r8w, 0x34
xor r8w, word [rcx + r10 - 2]
mov word [rcx - 2], r8w
cmp r9d, 0x20
jl 0x1800019d0
movaps xmm6, xmmword [rsp + 0x30]
add rsp, 0x48
ret
Function at 0x180001a30
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x48
xor r8d, r8d
movaps xmmword [rsp + 0x30], xmm6
cmp dword [0x18001b090], 2
mov r10, rdx
jl 0x180001c2d
movdqa xmm6, xmmword [0x180018520]
lea rax, [r10 + 0x38]
lea rdx, [rcx + 0x38]
cmp rcx, rax
ja 0x180001a6a
cmp rdx, r10
jae 0x180001c2d
movaps xmmword [rsp + 0x20], xmm7
movaps xmmword [rsp + 0x10], xmm8
movaps xmmword [rsp], xmm9
movdqa xmm4, xmmword [0x180018730]
lea r9, [rcx + 8]
movdqa xmm7, xmmword [0x180018540]
mov rdx, r10
movdqa xmm5, xmmword [0x180018740]
sub rdx, rcx
movdqa xmm8, xmmword [str.22226666]
movdqa xmm9, xmmword [0x180018550]
nop
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea r9, [r9 + 0x10]
paddd xmm2, xmm6
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm5
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx + r9 - 0x18]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
xorps xmm3, xmm0
movq qword [r9 - 0x18], xmm3
paddd xmm2, xmm6
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx + r9 - 0x10]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xorps xmm3, xmm0
movq qword [r9 - 0x10], xmm3
cmp r8d, 0x18
jl 0x180001ab0
movaps xmm9, xmmword [rsp]
movaps xmm8, xmmword [rsp + 0x10]
movaps xmm7, xmmword [rsp + 0x20]
cmp r8d, 0x1d
jge 0x180001c8c
movsxd rax, r8d
sub r10, rcx
lea r9, [rcx + rax*2]
nop word [rax + rax]
mov ecx, r8d
lea r9, [r9 + 2]
mov eax, 0x4bda12f7
imul r8d
inc r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x36
sub ecx, eax
mov eax, 0x51eb851f
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x32
sub ecx, eax
add cx, 0x34
xor cx, word [r9 + r10 - 2]
mov word [r9 - 2], cx
cmp r8d, 0x1d
jl 0x180001c40
movaps xmm6, xmmword [rsp + 0x30]
add rsp, 0x48
ret
Function at 0x180001d50
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x48
xor r8d, r8d
movaps xmmword [rsp + 0x30], xmm6
cmp dword [0x18001b090], 2
mov r10, rdx
jl 0x180001f4d
movdqa xmm6, xmmword [0x180018520]
lea rax, [r10 + 0x30]
lea rdx, [rcx + 0x30]
cmp rcx, rax
ja 0x180001d8a
cmp rdx, r10
jae 0x180001f4d
movaps xmmword [rsp + 0x20], xmm7
movaps xmmword [rsp + 0x10], xmm8
movaps xmmword [rsp], xmm9
movdqa xmm4, xmmword [0x180018730]
lea r9, [rcx + 8]
movdqa xmm7, xmmword [0x180018540]
mov rdx, r10
movdqa xmm5, xmmword [0x180018740]
sub rdx, rcx
movdqa xmm8, xmmword [str.22226666]
movdqa xmm9, xmmword [0x180018550]
nop
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea r9, [r9 + 0x10]
paddd xmm2, xmm6
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm5
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx + r9 - 0x18]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
xorps xmm3, xmm0
movq qword [r9 - 0x18], xmm3
paddd xmm2, xmm6
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx + r9 - 0x10]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xorps xmm3, xmm0
movq qword [r9 - 0x10], xmm3
cmp r8d, 0x18
jl 0x180001dd0
movaps xmm9, xmmword [rsp]
movaps xmm8, xmmword [rsp + 0x10]
movaps xmm7, xmmword [rsp + 0x20]
cmp r8d, 0x19
jge 0x180001fac
movsxd rax, r8d
sub r10, rcx
lea r9, [rcx + rax*2]
nop word [rax + rax]
mov ecx, r8d
lea r9, [r9 + 2]
mov eax, 0x4bda12f7
imul r8d
inc r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x36
sub ecx, eax
mov eax, 0x51eb851f
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x32
sub ecx, eax
add cx, 0x34
xor cx, word [r9 + r10 - 2]
mov word [r9 - 2], cx
cmp r8d, 0x19
jl 0x180001f60
movaps xmm6, xmmword [rsp + 0x30]
add rsp, 0x48
ret
Function at 0x1800020b0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x48
xor r8d, r8d
movaps xmmword [rsp + 0x30], xmm6
cmp dword [0x18001b090], 2
mov r10, rdx
jl 0x1800022ad
movdqa xmm6, xmmword [0x180018520]
lea rax, [r10 + 0x40]
lea rdx, [rcx + 0x40]
cmp rcx, rax
ja 0x1800020ea
cmp rdx, r10
jae 0x1800022ad
movaps xmmword [rsp + 0x20], xmm7
movaps xmmword [rsp + 0x10], xmm8
movaps xmmword [rsp], xmm9
movdqa xmm4, xmmword [0x180018730]
lea r9, [rcx + 8]
movdqa xmm7, xmmword [0x180018540]
mov rdx, r10
movdqa xmm5, xmmword [0x180018740]
sub rdx, rcx
movdqa xmm8, xmmword [str.22226666]
movdqa xmm9, xmmword [0x180018550]
nop
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea r9, [r9 + 0x10]
paddd xmm2, xmm6
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm5
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx + r9 - 0x18]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
xorps xmm3, xmm0
movq qword [r9 - 0x18], xmm3
paddd xmm2, xmm6
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx + r9 - 0x10]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xorps xmm3, xmm0
movq qword [r9 - 0x10], xmm3
cmp r8d, 0x20
jl 0x180002130
movaps xmm9, xmmword [rsp]
movaps xmm8, xmmword [rsp + 0x10]
movaps xmm7, xmmword [rsp + 0x20]
cmp r8d, 0x21
jge 0x18000230c
movsxd rax, r8d
sub r10, rcx
lea r9, [rcx + rax*2]
nop word [rax + rax]
mov ecx, r8d
lea r9, [r9 + 2]
mov eax, 0x4bda12f7
imul r8d
inc r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x36
sub ecx, eax
mov eax, 0x51eb851f
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x32
sub ecx, eax
add cx, 0x34
xor cx, word [r9 + r10 - 2]
mov word [r9 - 2], cx
cmp r8d, 0x21
jl 0x1800022c0
movaps xmm6, xmmword [rsp + 0x30]
add rsp, 0x48
ret
Function at 0x180002480
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x48
xor r8d, r8d
movaps xmmword [rsp + 0x30], xmm6
cmp dword [0x18001b090], 2
mov r10, rdx
jl 0x18000267d
movdqa xmm6, xmmword [0x180018520]
lea rax, [r10 + 0x32]
lea rdx, [rcx + 0x32]
cmp rcx, rax
ja 0x1800024ba
cmp rdx, r10
jae 0x18000267d
movaps xmmword [rsp + 0x20], xmm7
movaps xmmword [rsp + 0x10], xmm8
movaps xmmword [rsp], xmm9
movdqa xmm4, xmmword [0x180018730]
lea r9, [rcx + 8]
movdqa xmm7, xmmword [0x180018540]
mov rdx, r10
movdqa xmm5, xmmword [0x180018740]
sub rdx, rcx
movdqa xmm8, xmmword [str.22226666]
movdqa xmm9, xmmword [0x180018550]
nop
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea r9, [r9 + 0x10]
paddd xmm2, xmm6
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm5
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx + r9 - 0x18]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
xorps xmm3, xmm0
movq qword [r9 - 0x18], xmm3
paddd xmm2, xmm6
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx + r9 - 0x10]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xorps xmm3, xmm0
movq qword [r9 - 0x10], xmm3
cmp r8d, 0x18
jl 0x180002500
movaps xmm9, xmmword [rsp]
movaps xmm8, xmmword [rsp + 0x10]
movaps xmm7, xmmword [rsp + 0x20]
cmp r8d, 0x1a
jge 0x1800026dc
movsxd rax, r8d
sub r10, rcx
lea r9, [rcx + rax*2]
nop word [rax + rax]
mov ecx, r8d
lea r9, [r9 + 2]
mov eax, 0x4bda12f7
imul r8d
inc r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x36
sub ecx, eax
mov eax, 0x51eb851f
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x32
sub ecx, eax
add cx, 0x34
xor cx, word [r9 + r10 - 2]
mov word [r9 - 2], cx
cmp r8d, 0x1a
jl 0x180002690
movaps xmm6, xmmword [rsp + 0x30]
add rsp, 0x48
ret