joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1800d8de0
Capabilities:
Get graphical window text

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x370
mov rax, qword [0x180111040]
xor rax, rsp
mov qword [rsp + 0x360], rax
mov rbx, qword [0x1801169e0]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rbx], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rbx + 8], rax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rcx, rax
mov qword [rbx + 0x10], rax
lea rdx, [rsp + 0x20]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [rsp + 0x28]
lea rdx, [rsp + 0x30]
sub eax, dword [rsp + 0x20]
mov r8d, 0x104
mov rcx, qword [rbx + 0x10]
mov dword [rbx + 0x18], eax
mov eax, dword [rsp + 0x2c]
sub eax, dword [rsp + 0x24]
mov dword [rbx + 0x1c], eax
call qword [sym.imp.USER32.dll_GetWindowTextA]
mov rcx, qword [rbx + 0x10]
lea rax, [rsp + 0x30]
mov r8d, 0x104
mov qword [rbx + 0x28], rax
lea rdx, [rsp + 0x140]
call qword [sym.imp.USER32.dll_GetClassNameA]
mov rcx, qword [rbx + 8]
lea rax, [rsp + 0x140]
mov r9d, 0x104
mov qword [rbx + 0x30], rax
lea r8, [rsp + 0x250]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_K32GetModuleFileNameExA]
lea rax, [rsp + 0x250]
mov qword [rbx + 0x38], rax
lea rdx, str.GameData::Init___Process_Window_Info_Established_n
mov rcx, qword [0x1801169d0]
mov r8d, dword [rcx + 0x48]
call fcn.1800d8360
mov rdi, qword [0x1801169f8]
mov rcx, rdi
call fcn.1800d8410
test al, al
je 0x1800d8f50
mov rax, qword [0x18011c4b8]
lea rdx, [0x1800d8a70]
mov r8, rdi
mov rbx, qword [rax + 0x40]
mov rcx, rbx
call fcn.1800cff80
test eax, eax
jne 0x1800d8f04
lea edx, [rax + 1]
mov rcx, rbx
call fcn.1800d0470
mov rax, qword [0x18011c4b8]
lea r8, [rdi + 8]
lea rdx, [fcn.18002a560]
mov rbx, qword [rax + 0x60]
mov rcx, rbx
call fcn.1800cff80
test eax, eax
jne 0x1800d8f31
lea edx, [rax + 1]
mov rcx, rbx
call fcn.1800d0470
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [0x1801169d0]
lea rdx, str.D3D11Window::Hook_Initialized_n
mov r8d, dword [rcx + 0x48]
jmp 0x1800d8f62
mov rcx, qword [0x1801169d0]
lea rdx, str.___D3D11Window::Hook_Failed_to_Initialize_n
mov r8d, dword [rcx + 0x44]
call fcn.1800d8360
lea rcx, str.PalWorld_Win64_Shipping.exe
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, qword [0x180115b58]
lea r8, [0x1801170b0]
add rcx, rax
mov qword [0x180115b50], rax
lea rdx, [0x180026dc0]
mov qword [0x1801170b8], rcx
call fcn.1800cff80
xor eax, eax
xorps xmm0, xmm0
xor ecx, ecx
mov qword [0x180115de0], rax
movups xmmword [0x180115dd0], xmm0
lea edx, [rax + 1]
call fcn.1800d0470
mov rcx, qword [0x1801169d0]
lea rdx, str.Hooking::Hook_Initialized_n
mov r8d, dword [rcx + 0x48]
call fcn.1800d8360
mov rcx, qword [rsp + 0x360]
xor rcx, rsp
call fcn.1800dc090
mov rbx, qword [rsp + 0x380]
add rsp, 0x370
pop rdi
ret
Function at 0x1800012a0
Capabilities:
Access peb ldr_data
Enumerate pe sections

Disassembly:
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x60
mov rax, qword [0x18001b040]
xor rax, rsp
mov qword [rsp + 0x58], rax
mov rsi, qword [0x18001b838]
mov rdi, r8
mov rdx, qword [0x18001be18]
add rsi, 0x1298374
test rdx, rdx
jne 0x1800013a9
mov rax, qword gs:[0x60]
mov qword [rsp + 0x70], rbx
mov dword [rsp + 0x50], 0x7865742e
mov byte [rsp + 0x54], 0x74
mov rbx, qword [rax + 0x10]
movsxd rcx, dword [rbx + 0x3c]
movzx eax, word [rcx + rbx + 0x14]
lea r8, [rcx + rbx]
add rax, 0x18
add r8, rax
movzx eax, word [rcx + rbx + 6]
lea rcx, [rax + rax*4]
lea r11, [r8 + rcx*8]
cmp r8, r11
je 0x180001363
lea r9, [rsp + 0x50]
sub r9, r8
nop word [rax + rax]
lea r10, [r8 + 5]
mov rax, r8
cmp r8, r10
je 0x180001363
nop dword [rax]
movsx edx, byte [r9 + rax]
movzx ecx, byte [rax]
cmp ecx, edx
jne 0x180001356
inc rax
cmp rax, r10
jne 0x180001340
jmp 0x180001363
add r8, 0x28
sub r9, 0x28
cmp r8, r11
jne 0x180001330
mov eax, dword [r8 + 8]
mov ecx, dword [r8 + 0xc]
add rcx, rbx
mov word [rsp + 0x30], 0x26ff
mov rbx, qword [rsp + 0x70]
lea rdx, [rax + rcx]
cmp rax, 2
jb 0x1800013a2
movzx eax, word [rsp + 0x30]
lea r8, [rdx - 2]
nop dword [rax]
cmp ax, word [rcx]
je 0x18000139f
cmp rcx, r8
je 0x1800013a2
inc rcx
jmp 0x180001390
mov rdx, rcx
mov qword [0x18001be18], rdx
xor eax, eax
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x28], rax
xor r9d, r9d
mov qword [rsp + 0x48], rax
mov r8, rdi
lea rax, [rsp + 0x38]
mov qword [rsp + 0x40], rsi
xor edx, edx
mov qword [rsp + 0x20], rax
xor ecx, ecx
call fcn.1800159d0
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.180015a20
mov rsi, qword [rsp + 0x78]
add rsp, 0x60
pop rdi
ret
Function at 0x1800013f0
Capabilities:
Access peb ldr_data
Enumerate pe sections

Disassembly:
push rbp
push rsi
push rdi
push r14
sub rsp, 0x68
mov rax, qword [0x18001b040]
xor rax, rsp
mov qword [rsp + 0x58], rax
mov rax, qword [rcx]
mov rsi, rdx
mov rdx, qword [0x18001be20]
mov rbp, r8
mov rdi, rcx
mov r14, qword [rax + 0x260]
test rdx, rdx
jne 0x1800014f9
mov rax, qword gs:[0x60]
mov qword [rsp + 0x60], rbx
mov dword [rsp + 0x50], 0x7865742e
mov byte [rsp + 0x54], 0x74
mov rbx, qword [rax + 0x10]
movsxd rcx, dword [rbx + 0x3c]
movzx eax, word [rcx + rbx + 0x14]
lea r8, [rcx + rbx]
add rax, 0x18
add r8, rax
movzx eax, word [rcx + rbx + 6]
lea rcx, [rax + rax*4]
lea r11, [r8 + rcx*8]
cmp r8, r11
je 0x1800014b3
lea r9, [rsp + 0x50]
sub r9, r8
nop dword [rax]
lea r10, [r8 + 5]
mov rax, r8
cmp r8, r10
je 0x1800014b3
nop dword [rax]
movsx edx, byte [r9 + rax]
movzx ecx, byte [rax]
cmp ecx, edx
jne 0x1800014a6
inc rax
cmp rax, r10
jne 0x180001490
jmp 0x1800014b3
add r8, 0x28
sub r9, 0x28
cmp r8, r11
jne 0x180001480
mov eax, dword [r8 + 8]
mov ecx, dword [r8 + 0xc]
add rcx, rbx
mov word [rsp + 0x30], 0x26ff
mov rbx, qword [rsp + 0x60]
lea rdx, [rax + rcx]
cmp rax, 2
jb 0x1800014f2
movzx eax, word [rsp + 0x30]
lea r8, [rdx - 2]
nop dword [rax]
cmp ax, word [rcx]
je 0x1800014ef
cmp rcx, r8
je 0x1800014f2
inc rcx
jmp 0x1800014e0
mov rdx, rcx
mov qword [0x18001be20], rdx
xor eax, eax
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x28], rax
xor r9d, r9d
mov qword [rsp + 0x48], rax
mov r8, rbp
lea rax, [rsp + 0x38]
mov qword [rsp + 0x40], r14
mov rdx, rsi
mov qword [rsp + 0x20], rax
mov rcx, rdi
call fcn.1800159d0
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.180015a20
add rsp, 0x68
pop r14
pop rdi
pop rsi
pop rbp
ret
Function at 0x180001550
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x48
xor r8d, r8d
movaps xmmword [rsp + 0x30], xmm6
cmp dword [0x18001b090], 2
mov r10, rdx
jl 0x18000174d
movdqa xmm6, xmmword [0x180018530]
lea rax, [r10 + 0x24]
lea rdx, [rcx + 0x24]
cmp rcx, rax
ja 0x18000158a
cmp rdx, r10
jae 0x18000174d
movaps xmmword [rsp + 0x20], xmm7
movaps xmmword [rsp + 0x10], xmm8
movaps xmmword [rsp], xmm9
movdqa xmm4, xmmword [0x180018570]
lea r9, [rcx + 8]
movdqa xmm7, xmmword [0x180018550]
mov rdx, r10
movdqa xmm5, xmmword [0x180018750]
sub rdx, rcx
movdqa xmm8, xmmword [str.44447777]
movdqa xmm9, xmmword [0x180018560]
nop
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea r9, [r9 + 0x10]
paddd xmm2, xmm6
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm5
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx + r9 - 0x18]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
xorps xmm3, xmm0
movq qword [r9 - 0x18], xmm3
paddd xmm2, xmm6
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx + r9 - 0x10]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xorps xmm3, xmm0
movq qword [r9 - 0x10], xmm3
cmp r8d, 0x10
jl 0x1800015d0
movaps xmm9, xmmword [rsp]
movaps xmm8, xmmword [rsp + 0x10]
movaps xmm7, xmmword [rsp + 0x20]
cmp r8d, 0x13
jge 0x1800017ab
movsxd rax, r8d
sub r10, rcx
lea r9, [rcx + rax*2]
nop word [rax + rax]
mov ecx, r8d
lea r9, [r9 + 2]
mov eax, 0x94f2095
imul r8d
inc r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x37
sub ecx, eax
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x34
sub ecx, eax
add cx, 0x32
xor cx, word [r9 + r10 - 2]
mov word [r9 - 2], cx
cmp r8d, 0x13
jl 0x180001760
movaps xmm6, xmmword [rsp + 0x30]
add rsp, 0x48
ret
Function at 0x1800017c0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x48
xor r9d, r9d
movaps xmmword [rsp + 0x30], xmm6
cmp dword [0x18001b090], 2
mov r10, rdx
jl 0x1800019bf
movdqa xmm6, xmmword [0x180018530]
lea rax, [r10 + 0x3e]
lea rdx, [rcx + 0x3e]
cmp rcx, rax
ja 0x1800017fa
cmp rdx, r10
jae 0x1800019bf
movaps xmmword [rsp + 0x20], xmm7
movaps xmmword [rsp + 0x10], xmm8
movaps xmmword [rsp], xmm9
movdqa xmm4, xmmword [0x180018570]
lea rdx, [rcx + 8]
movdqa xmm7, xmmword [0x180018550]
sub r10, rcx
movdqa xmm5, xmmword [0x180018750]
movdqa xmm8, xmmword [str.44447777]
movdqa xmm9, xmmword [0x180018560]
nop dword [rax + rax]
movd xmm2, r9d
lea eax, [r9 + 4]
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 0x10]
paddd xmm2, xmm6
add r9d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm5
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [r10 + rdx - 0x18]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
xorps xmm3, xmm0
movq qword [rdx - 0x18], xmm3
paddd xmm2, xmm6
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [r10 + rdx - 0x10]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xorps xmm3, xmm0
movq qword [rdx - 0x10], xmm3
cmp r9d, 0x20
jl 0x180001840
movaps xmm9, xmmword [rsp]
movaps xmm8, xmmword [rsp + 0x10]
movaps xmm7, xmmword [rsp + 0x20]
movaps xmm6, xmmword [rsp + 0x30]
add rsp, 0x48
ret
sub r10, rcx
nop dword [rax]
nop word [rax + rax]
mov r8d, r9d
lea rcx, [rcx + 2]
mov eax, 0x94f2095
imul r9d
inc r9d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x37
sub r8d, eax
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x34
sub r8d, eax
add r8w, 0x32
xor r8w, word [rcx + r10 - 2]
mov word [rcx - 2], r8w
cmp r9d, 0x20
jl 0x1800019d0
movaps xmm6, xmmword [rsp + 0x30]
add rsp, 0x48
ret
Function at 0x180001a30
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x48
xor r8d, r8d
movaps xmmword [rsp + 0x30], xmm6
cmp dword [0x18001b090], 2
mov r10, rdx
jl 0x180001c2d
movdqa xmm6, xmmword [0x180018530]
lea rax, [r10 + 0x38]
lea rdx, [rcx + 0x38]
cmp rcx, rax
ja 0x180001a6a
cmp rdx, r10
jae 0x180001c2d
movaps xmmword [rsp + 0x20], xmm7
movaps xmmword [rsp + 0x10], xmm8
movaps xmmword [rsp], xmm9
movdqa xmm4, xmmword [0x180018570]
lea r9, [rcx + 8]
movdqa xmm7, xmmword [0x180018550]
mov rdx, r10
movdqa xmm5, xmmword [0x180018750]
sub rdx, rcx
movdqa xmm8, xmmword [str.44447777]
movdqa xmm9, xmmword [0x180018560]
nop
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea r9, [r9 + 0x10]
paddd xmm2, xmm6
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm5
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx + r9 - 0x18]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
xorps xmm3, xmm0
movq qword [r9 - 0x18], xmm3
paddd xmm2, xmm6
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx + r9 - 0x10]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xorps xmm3, xmm0
movq qword [r9 - 0x10], xmm3
cmp r8d, 0x18
jl 0x180001ab0
movaps xmm9, xmmword [rsp]
movaps xmm8, xmmword [rsp + 0x10]
movaps xmm7, xmmword [rsp + 0x20]
cmp r8d, 0x1d
jge 0x180001c8b
movsxd rax, r8d
sub r10, rcx
lea r9, [rcx + rax*2]
nop word [rax + rax]
mov ecx, r8d
lea r9, [r9 + 2]
mov eax, 0x94f2095
imul r8d
inc r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x37
sub ecx, eax
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x34
sub ecx, eax
add cx, 0x32
xor cx, word [r9 + r10 - 2]
mov word [r9 - 2], cx
cmp r8d, 0x1d
jl 0x180001c40
movaps xmm6, xmmword [rsp + 0x30]
add rsp, 0x48
ret
Function at 0x180001d50
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x48
xor r8d, r8d
movaps xmmword [rsp + 0x30], xmm6
cmp dword [0x18001b090], 2
mov r10, rdx
jl 0x180001f4d
movdqa xmm6, xmmword [0x180018530]
lea rax, [r10 + 0x30]
lea rdx, [rcx + 0x30]
cmp rcx, rax
ja 0x180001d8a
cmp rdx, r10
jae 0x180001f4d
movaps xmmword [rsp + 0x20], xmm7
movaps xmmword [rsp + 0x10], xmm8
movaps xmmword [rsp], xmm9
movdqa xmm4, xmmword [0x180018570]
lea r9, [rcx + 8]
movdqa xmm7, xmmword [0x180018550]
mov rdx, r10
movdqa xmm5, xmmword [0x180018750]
sub rdx, rcx
movdqa xmm8, xmmword [str.44447777]
movdqa xmm9, xmmword [0x180018560]
nop
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea r9, [r9 + 0x10]
paddd xmm2, xmm6
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm5
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx + r9 - 0x18]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
xorps xmm3, xmm0
movq qword [r9 - 0x18], xmm3
paddd xmm2, xmm6
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx + r9 - 0x10]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xorps xmm3, xmm0
movq qword [r9 - 0x10], xmm3
cmp r8d, 0x18
jl 0x180001dd0
movaps xmm9, xmmword [rsp]
movaps xmm8, xmmword [rsp + 0x10]
movaps xmm7, xmmword [rsp + 0x20]
cmp r8d, 0x19
jge 0x180001fab
movsxd rax, r8d
sub r10, rcx
lea r9, [rcx + rax*2]
nop word [rax + rax]
mov ecx, r8d
lea r9, [r9 + 2]
mov eax, 0x94f2095
imul r8d
inc r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x37
sub ecx, eax
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x34
sub ecx, eax
add cx, 0x32
xor cx, word [r9 + r10 - 2]
mov word [r9 - 2], cx
cmp r8d, 0x19
jl 0x180001f60
movaps xmm6, xmmword [rsp + 0x30]
add rsp, 0x48
ret
Function at 0x1800020b0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x48
xor r8d, r8d
movaps xmmword [rsp + 0x30], xmm6
cmp dword [0x18001b090], 2
mov r10, rdx
jl 0x1800022ad
movdqa xmm6, xmmword [0x180018530]
lea rax, [r10 + 0x40]
lea rdx, [rcx + 0x40]
cmp rcx, rax
ja 0x1800020ea
cmp rdx, r10
jae 0x1800022ad
movaps xmmword [rsp + 0x20], xmm7
movaps xmmword [rsp + 0x10], xmm8
movaps xmmword [rsp], xmm9
movdqa xmm4, xmmword [0x180018570]
lea r9, [rcx + 8]
movdqa xmm7, xmmword [0x180018550]
mov rdx, r10
movdqa xmm5, xmmword [0x180018750]
sub rdx, rcx
movdqa xmm8, xmmword [str.44447777]
movdqa xmm9, xmmword [0x180018560]
nop
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea r9, [r9 + 0x10]
paddd xmm2, xmm6
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm5
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx + r9 - 0x18]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
xorps xmm3, xmm0
movq qword [r9 - 0x18], xmm3
paddd xmm2, xmm6
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx + r9 - 0x10]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xorps xmm3, xmm0
movq qword [r9 - 0x10], xmm3
cmp r8d, 0x20
jl 0x180002130
movaps xmm9, xmmword [rsp]
movaps xmm8, xmmword [rsp + 0x10]
movaps xmm7, xmmword [rsp + 0x20]
cmp r8d, 0x21
jge 0x18000230b
movsxd rax, r8d
sub r10, rcx
lea r9, [rcx + rax*2]
nop word [rax + rax]
mov ecx, r8d
lea r9, [r9 + 2]
mov eax, 0x94f2095
imul r8d
inc r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x37
sub ecx, eax
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x34
sub ecx, eax
add cx, 0x32
xor cx, word [r9 + r10 - 2]
mov word [r9 - 2], cx
cmp r8d, 0x21
jl 0x1800022c0
movaps xmm6, xmmword [rsp + 0x30]
add rsp, 0x48
ret
Function at 0x180002480
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x48
xor r8d, r8d
movaps xmmword [rsp + 0x30], xmm6
cmp dword [0x18001b090], 2
mov r10, rdx
jl 0x18000267d
movdqa xmm6, xmmword [0x180018530]
lea rax, [r10 + 0x32]
lea rdx, [rcx + 0x32]
cmp rcx, rax
ja 0x1800024ba
cmp rdx, r10
jae 0x18000267d
movaps xmmword [rsp + 0x20], xmm7
movaps xmmword [rsp + 0x10], xmm8
movaps xmmword [rsp], xmm9
movdqa xmm4, xmmword [0x180018570]
lea r9, [rcx + 8]
movdqa xmm7, xmmword [0x180018550]
mov rdx, r10
movdqa xmm5, xmmword [0x180018750]
sub rdx, rcx
movdqa xmm8, xmmword [str.44447777]
movdqa xmm9, xmmword [0x180018560]
nop
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea r9, [r9 + 0x10]
paddd xmm2, xmm6
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm5
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx + r9 - 0x18]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
xorps xmm3, xmm0
movq qword [r9 - 0x18], xmm3
paddd xmm2, xmm6
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx + r9 - 0x10]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xorps xmm3, xmm0
movq qword [r9 - 0x10], xmm3
cmp r8d, 0x18
jl 0x180002500
movaps xmm9, xmmword [rsp]
movaps xmm8, xmmword [rsp + 0x10]
movaps xmm7, xmmword [rsp + 0x20]
cmp r8d, 0x1a
jge 0x1800026db
movsxd rax, r8d
sub r10, rcx
lea r9, [rcx + rax*2]
nop word [rax + rax]
mov ecx, r8d
lea r9, [r9 + 2]
mov eax, 0x94f2095
imul r8d
inc r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x37
sub ecx, eax
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x34
sub ecx, eax
add cx, 0x32
xor cx, word [r9 + r10 - 2]
mov word [r9 - 2], cx
cmp r8d, 0x1a
jl 0x180002690
movaps xmm6, xmmword [rsp + 0x30]
add rsp, 0x48
ret