joyce8/EMBER2024-capa huggingface dataset:
Function at 0x18000fbd0
Capabilities:
Resume thread
Suspend thread

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x500
mov rax, qword [0x1800523b0]
xor rax, rsp
mov qword [rsp + 0x4f0], rax
mov ebp, r8d
mov rsi, rdx
mov r8d, ecx
mov ecx, 0x1fffff
xor edx, edx
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov rbx, rax
lea rcx, [rax - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x18000fc94
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SuspendThread]
mov rcx, rbx
cmp eax, 0xffffffff
je 0x18000fc8c
mov dword [rsp + 0x50], 0x100001
xor edi, edi
jmp 0x18000fc78
cmp qword [rsp + 0x118], rsi
jb 0x18000fc94
lea rax, [rsi + rbp]
cmp qword [rsp + 0x118], rax
jae 0x18000fc94
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ResumeThread]
cmp edi, 3
jge 0x18000fc89
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SuspendThread]
inc edi
mov rcx, rbx
lea rdx, [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetThreadContext]
test eax, eax
jne 0x18000fc39
jmp 0x18000fc94
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor ebx, ebx
mov rax, rbx
mov rcx, qword [rsp + 0x4f0]
xor rcx, rsp
call fcn.180010060
lea r11, [rsp + 0x500]
mov rbx, qword [r11 + 0x18]
mov rbp, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rdi
ret

Function at 0x18000fe74
Capabilities:
Get system information on windows

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rbp
mov qword [r11 + 0x18], rsi
mov qword [r11 + 0x20], rdi
push r14
sub rsp, 0x80
xor edi, edi
cmp dword [0x180053974], 0x40
jae 0x18000ffa4
lea rbx, [rcx + rdx]
add rcx, r8
mov rbp, 0xfffffffffff80000
lea rax, [rcx + 0x7ff80000]
cmp rcx, 0xffffffff80000000
lea r8d, [rdi + 0x2c]
cmovb rbp, rax
and dword [rsp + 0x50], edi
lea rcx, [r11 - 0x34]
xor edx, edx
call fcn.180010a00
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, 0x80000000
lea rsi, [rbx - 0x7fff0000]
cmp rbx, rax
lea r14d, [rdi + 1]
cmovb rsi, r14
cmp rsi, rbp
jae 0x18000ffa4
lea rdx, [rsp + 0x20]
mov r8d, 0x30
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
test rax, rax
je 0x18000ff74
cmp dword [rsp + 0x40], 0x10000
jne 0x18000ff62
mov rax, qword [rsp + 0x38]
cmp rax, 0x78
jb 0x18000ff67
mov edx, dword [rsp + 0x78]
mov ecx, edx
cmp rax, rdx
jb 0x18000ff67
lea eax, [rdx - 1]
xor edx, edx
mov r8d, 0x3000
add rax, rsi
div rcx
mov edx, 0x78
lea r9d, [rdx - 0x58]
imul rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rdi, rax
test rax, rax
jne 0x18000ff79
mov rax, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x20]
add rsi, rax
cmp rsi, rbp
jb 0x18000fefd
test rdi, rdi
je 0x18000ffa4
lea rdx, [0x1800539d0]
xor eax, eax
mov rcx, rdx
cmp qword [rcx], 0
je 0x18000ff99
add eax, r14d
add rcx, 8
cmp eax, 0x40
jb 0x18000ff85
jmp 0x18000ffa4
add dword [0x180053974], r14d
mov qword [rdx + rax*8], rdi
lea r11, [rsp + 0x80]
mov rax, rdi
mov rbx, qword [r11 + 0x10]
mov rbp, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop r14
ret
Function at 0x1400510d0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xb], 0
mov rdx, rcx
je 0x1400511e3
movzx eax, word [rcx]
movdqa xmm3, xmmword [0x140d64eb0]
movdqa xmm2, xmmword [0x140d625b0]
movq xmm1, qword [0x140d623f0]
paddd xmm1, xmm3
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
movq xmm1, qword [0x140d62400]
paddd xmm1, xmm3
mov word [rcx], ax
movzx eax, word [rcx + 2]
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
movq xmm1, qword [0x140d62410]
paddd xmm1, xmm3
mov word [rcx + 2], ax
movzx eax, word [rcx + 4]
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
movq xmm1, qword [0x140d62420]
paddd xmm1, xmm3
mov word [rcx + 4], ax
movzx eax, word [rcx + 6]
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
mov word [rcx + 6], ax
mov eax, 8
nop dword [rax]
lea ecx, [rax - 0x6e]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0xa
jb 0x1400511d0
mov byte [rdx + 0xb], 0
mov rax, rdx
ret

Function at 0x1400511f0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x10], 0
mov rdx, rcx
je 0x140051303
movzx eax, word [rcx]
movdqa xmm3, xmmword [0x140d64eb0]
movdqa xmm2, xmmword [0x140d625b0]
movq xmm1, qword [0x140d623f0]
paddd xmm1, xmm3
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
movq xmm1, qword [0x140d62400]
paddd xmm1, xmm3
mov word [rcx], ax
movzx eax, word [rcx + 2]
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
movq xmm1, qword [0x140d62410]
paddd xmm1, xmm3
mov word [rcx + 2], ax
movzx eax, word [rcx + 4]
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
movq xmm1, qword [0x140d62420]
paddd xmm1, xmm3
mov word [rcx + 4], ax
movzx eax, word [rcx + 6]
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
mov word [rcx + 6], ax
mov eax, 8
nop dword [rax]
lea ecx, [rax - 0x6e]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0xf
jb 0x1400512f0
mov byte [rdx + 0x10], 0
mov rax, rdx
ret
Function at 0x140051310
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xe], 0
mov rdx, rcx
je 0x140051423
movzx eax, word [rcx]
movdqa xmm3, xmmword [0x140d64eb0]
movdqa xmm2, xmmword [0x140d625b0]
movq xmm1, qword [0x140d623f0]
paddd xmm1, xmm3
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
movq xmm1, qword [0x140d62400]
paddd xmm1, xmm3
mov word [rcx], ax
movzx eax, word [rcx + 2]
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
movq xmm1, qword [0x140d62410]
paddd xmm1, xmm3
mov word [rcx + 2], ax
movzx eax, word [rcx + 4]
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
movq xmm1, qword [0x140d62420]
paddd xmm1, xmm3
mov word [rcx + 4], ax
movzx eax, word [rcx + 6]
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
mov word [rcx + 6], ax
mov eax, 8
nop dword [rax]
lea ecx, [rax - 0x6e]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0xd
jb 0x140051410
mov byte [rdx + 0xe], 0
mov rax, rdx
ret

Function at 0x140051490
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xd], 0
mov rdx, rcx
je 0x1400515a3
movzx eax, word [rcx]
movdqa xmm3, xmmword [0x140d64eb0]
movdqa xmm2, xmmword [0x140d625b0]
movq xmm1, qword [0x140d623f0]
paddd xmm1, xmm3
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
movq xmm1, qword [0x140d62400]
paddd xmm1, xmm3
mov word [rcx], ax
movzx eax, word [rcx + 2]
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
movq xmm1, qword [0x140d62410]
paddd xmm1, xmm3
mov word [rcx + 2], ax
movzx eax, word [rcx + 4]
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
movq xmm1, qword [0x140d62420]
paddd xmm1, xmm3
mov word [rcx + 4], ax
movzx eax, word [rcx + 6]
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
mov word [rcx + 6], ax
mov eax, 8
nop dword [rax]
lea ecx, [rax - 0x6e]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0xc
jb 0x140051590
mov byte [rdx + 0xd], 0
mov rax, rdx
ret
Function at 0x1400515b0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xf], 0
mov rdx, rcx
je 0x1400516c3
movzx eax, word [rcx]
movdqa xmm3, xmmword [0x140d64eb0]
movdqa xmm2, xmmword [0x140d625b0]
movq xmm1, qword [0x140d623f0]
paddd xmm1, xmm3
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
movq xmm1, qword [0x140d62400]
paddd xmm1, xmm3
mov word [rcx], ax
movzx eax, word [rcx + 2]
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
movq xmm1, qword [0x140d62410]
paddd xmm1, xmm3
mov word [rcx + 2], ax
movzx eax, word [rcx + 4]
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
movq xmm1, qword [0x140d62420]
paddd xmm1, xmm3
mov word [rcx + 4], ax
movzx eax, word [rcx + 6]
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
mov word [rcx + 6], ax
mov eax, 8
nop dword [rax]
lea ecx, [rax - 0x6e]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0xe
jb 0x1400516b0
mov byte [rdx + 0xf], 0
mov rax, rdx
ret

Function at 0x140051840
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 7], 0
je 0x1400518b3
movdqa xmm2, xmmword [0x140d62440]
xor edx, edx
movdqa xmm3, xmmword [0x140d64eb0]
movdqa xmm4, xmmword [0x140d625b0]
movzx eax, word [rcx + rdx]
movq xmm0, rdx
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
mov word [rcx + rdx], ax
add rdx, 2
cmp rdx, 6
jb 0x140051860
mov byte [rcx + 7], 0
mov rax, rcx
ret
Function at 0x140062270
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
cmp byte [rcx + 0x21], 0
je 0x140062402
movdqa xmm2, xmmword [0x140d62440]
lea r10, [rcx + 4]
movdqa xmm3, xmmword [0x140d64eb0]
mov r8, 0xfffffffffffffffe
movdqa xmm4, xmmword [0x140d625b0]
mov r9d, 2
sub r8, rcx
sub r9, rcx
mov rdx, 0xfffffffffffffffc
sub rdx, rcx
nop dword [rax]
nop word [rax + rax]
lea rax, [rdx + r10]
movq xmm0, rax
movzx eax, word [r10 - 4]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
mov word [r10 - 4], ax
lea rax, [r8 + r10]
movq xmm0, rax
movzx eax, word [r10 - 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
mov word [r10 - 2], ax
mov rax, r10
sub rax, rcx
movq xmm0, rax
movzx eax, word [r10]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
mov word [r10], ax
lea rax, [r9 + r10]
movq xmm0, rax
movzx eax, word [r10 + 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
mov word [r10 + 2], ax
add r10, 8
lea rax, [rdx + r10]
cmp rax, 0x20
jb 0x1400622c0
mov byte [rcx + 0x21], 0
ret
Function at 0x140062410
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x1f], 0
mov rdx, rcx
je 0x1400625a3
movdqa xmm2, xmmword [0x140d62440]
lea r10, [rcx + 4]
movdqa xmm3, xmmword [0x140d64eb0]
mov r8, 0xfffffffffffffffe
movdqa xmm4, xmmword [0x140d625b0]
sub r8, rcx
xor eax, eax
mov r9d, 2
sub r9, rcx
nop
movzx ecx, word [r10 - 4]
movq xmm0, rax
punpcklqdq xmm0, xmm0
add rax, 8
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10 - 4], cx
lea rcx, [r8 + r10]
movq xmm0, rcx
movzx ecx, word [r10 - 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10 - 2], cx
mov rcx, r10
sub rcx, rdx
movq xmm0, rcx
movzx ecx, word [r10]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10], cx
lea rcx, [r9 + r10]
movq xmm0, rcx
movzx ecx, word [r10 + 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10 + 2], cx
add r10, 8
cmp rax, 0x18
jb 0x140062450
cmp rax, 0x1e
jae 0x14006259f
lea ecx, [rax - 0x6e]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x1e
jb 0x140062590
mov byte [rdx + 0x1f], 0
ret
Function at 0x1400625b0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x18], 0
mov rdx, rcx
je 0x140062743
movdqa xmm2, xmmword [0x140d62440]
lea r10, [rcx + 4]
movdqa xmm3, xmmword [0x140d64eb0]
mov r8, 0xfffffffffffffffe
movdqa xmm4, xmmword [0x140d625b0]
sub r8, rcx
xor eax, eax
mov r9d, 2
sub r9, rcx
nop
movzx ecx, word [r10 - 4]
movq xmm0, rax
punpcklqdq xmm0, xmm0
add rax, 8
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10 - 4], cx
lea rcx, [r8 + r10]
movq xmm0, rcx
movzx ecx, word [r10 - 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10 - 2], cx
mov rcx, r10
sub rcx, rdx
movq xmm0, rcx
movzx ecx, word [r10]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10], cx
lea rcx, [r9 + r10]
movq xmm0, rcx
movzx ecx, word [r10 + 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10 + 2], cx
add r10, 8
cmp rax, 0x10
jb 0x1400625f0
cmp rax, 0x17
jae 0x14006273f
lea ecx, [rax - 0x6e]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x17
jb 0x140062730
mov byte [rdx + 0x18], 0
ret
Function at 0x140062750
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x1a], 0
mov rdx, rcx
je 0x1400628e3
movdqa xmm2, xmmword [0x140d62440]
lea r10, [rcx + 4]
movdqa xmm3, xmmword [0x140d64eb0]
mov r8, 0xfffffffffffffffe
movdqa xmm4, xmmword [0x140d625b0]
sub r8, rcx
xor eax, eax
mov r9d, 2
sub r9, rcx
nop
movzx ecx, word [r10 - 4]
movq xmm0, rax
punpcklqdq xmm0, xmm0
add rax, 8
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10 - 4], cx
lea rcx, [r8 + r10]
movq xmm0, rcx
movzx ecx, word [r10 - 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10 - 2], cx
mov rcx, r10
sub rcx, rdx
movq xmm0, rcx
movzx ecx, word [r10]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10], cx
lea rcx, [r9 + r10]
movq xmm0, rcx
movzx ecx, word [r10 + 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10 + 2], cx
add r10, 8
cmp rax, 0x18
jb 0x140062790
cmp rax, 0x19
jae 0x1400628df
lea ecx, [rax - 0x6e]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x19
jb 0x1400628d0
mov byte [rdx + 0x1a], 0
ret

Function at 0x1400628f0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 7], 0
je 0x140062963
movdqa xmm2, xmmword [0x140d62440]
xor edx, edx
movdqa xmm3, xmmword [0x140d64eb0]
movdqa xmm4, xmmword [0x140d625b0]
movzx eax, word [rcx + rdx]
movq xmm0, rdx
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
mov word [rcx + rdx], ax
add rdx, 2
cmp rdx, 6
jb 0x140062910
mov byte [rcx + 7], 0
ret
Function at 0x140062970
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x1b], 0
mov rdx, rcx
je 0x140062b03
movdqa xmm2, xmmword [0x140d62440]
lea r10, [rcx + 4]
movdqa xmm3, xmmword [0x140d64eb0]
mov r8, 0xfffffffffffffffe
movdqa xmm4, xmmword [0x140d625b0]
sub r8, rcx
xor eax, eax
mov r9d, 2
sub r9, rcx
nop
movzx ecx, word [r10 - 4]
movq xmm0, rax
punpcklqdq xmm0, xmm0
add rax, 8
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10 - 4], cx
lea rcx, [r8 + r10]
movq xmm0, rcx
movzx ecx, word [r10 - 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10 - 2], cx
mov rcx, r10
sub rcx, rdx
movq xmm0, rcx
movzx ecx, word [r10]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10], cx
lea rcx, [r9 + r10]
movq xmm0, rcx
movzx ecx, word [r10 + 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10 + 2], cx
add r10, 8
cmp rax, 0x18
jb 0x1400629b0
cmp rax, 0x1a
jae 0x140062aff
lea ecx, [rax - 0x6e]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x1a
jb 0x140062af0
mov byte [rdx + 0x1b], 0
ret
Function at 0x140062b10
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x16], 0
mov rdx, rcx
je 0x140062ca3
movdqa xmm2, xmmword [0x140d62440]
lea r10, [rcx + 4]
movdqa xmm3, xmmword [0x140d64eb0]
mov r8, 0xfffffffffffffffe
movdqa xmm4, xmmword [0x140d625b0]
sub r8, rcx
xor eax, eax
mov r9d, 2
sub r9, rcx
nop
movzx ecx, word [r10 - 4]
movq xmm0, rax
punpcklqdq xmm0, xmm0
add rax, 8
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10 - 4], cx
lea rcx, [r8 + r10]
movq xmm0, rcx
movzx ecx, word [r10 - 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10 - 2], cx
mov rcx, r10
sub rcx, rdx
movq xmm0, rcx
movzx ecx, word [r10]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10], cx
lea rcx, [r9 + r10]
movq xmm0, rcx
movzx ecx, word [r10 + 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10 + 2], cx
add r10, 8
cmp rax, 0x10
jb 0x140062b50
cmp rax, 0x15
jae 0x140062c9f
lea ecx, [rax - 0x6e]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x15
jb 0x140062c90
mov byte [rdx + 0x16], 0
ret
Function at 0x140062cb0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x14], 0
mov rdx, rcx
je 0x140062e43
movdqa xmm2, xmmword [0x140d62440]
lea r10, [rcx + 4]
movdqa xmm3, xmmword [0x140d64eb0]
mov r8, 0xfffffffffffffffe
movdqa xmm4, xmmword [0x140d625b0]
sub r8, rcx
xor eax, eax
mov r9d, 2
sub r9, rcx
nop
movzx ecx, word [r10 - 4]
movq xmm0, rax
punpcklqdq xmm0, xmm0
add rax, 8
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10 - 4], cx
lea rcx, [r8 + r10]
movq xmm0, rcx
movzx ecx, word [r10 - 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10 - 2], cx
mov rcx, r10
sub rcx, rdx
movq xmm0, rcx
movzx ecx, word [r10]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10], cx
lea rcx, [r9 + r10]
movq xmm0, rcx
movzx ecx, word [r10 + 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10 + 2], cx
add r10, 8
cmp rax, 0x10
jb 0x140062cf0
cmp rax, 0x13
jae 0x140062e3f
lea ecx, [rax - 0x6e]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x13
jb 0x140062e30
mov byte [rdx + 0x14], 0
ret