joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400e5fb0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x18
mov r12, rdx
mov esi, r8d
mov qword [rsp + 8], rcx
mov dword [rsp + 4], 0
mov edi, dword [rsp + 4]
mov ebx, 0
mov rbp, qword [rsp + 8]
mov eax, edi
sub eax, 1
cmp edi, 1
cmovle eax, ebx
lea ebx, [rdi + 2]
cmp edi, 5
mov dword [rsp], eax
mov eax, 8
cmovg ebx, eax
xor edi, edi
lea r14d, [rdi - 1]
mov r13d, dword [rsp]
cmp edi, 1
mov eax, 0
lea r11d, [rdi + 2]
cmovle r14d, eax
cmp edi, 5
mov eax, 8
cmovg r11d, eax
xor r10d, r10d
xor r8d, r8d
xor r9d, r9d
cmp r13d, ebx
movsxd r15, r14d
jge 0x1400e6076
mov edx, esi
mov ecx, r14d
imul edx, r13d
sub ecx, r10d
movsxd rdx, edx
add rdx, r15
add rdx, r12
jmp 0x1400e6064
movzx eax, byte [rdx]
add r10d, 1
add rdx, 1
add r9d, eax
imul eax, eax
add r8d, eax
lea eax, [rcx + r10]
cmp r11d, eax
jg 0x1400e6050
add r13d, 1
cmp r13d, ebx
jl 0x1400e6034
imul r8d, r10d
imul r9d, r9d
sub r8d, r9d
cmp r8d, 0xfe
jbe 0x1400e6106
cmp r8d, 0xfff
mov eax, r8d
ja 0x1400e611d
mov rcx, qword [0x140444860]
shr eax, 4
movzx eax, byte [rcx + rax]
shr al, 2
movzx eax, al
mov edx, eax
imul edx, eax
cmp r8d, edx
setb dl
movzx edx, dl
sub eax, edx
lea eax, [rax + rax*8]
xor edx, edx
add edi, 1
add rbp, 2
shl eax, 2
div r10d
mov word [rbp - 2], ax
cmp edi, 8
jne 0x1400e5fff
add dword [rsp + 4], 1
add qword [rsp + 8], 0x10
mov eax, dword [rsp + 4]
cmp eax, 8
jne 0x1400e5fd3
add rsp, 0x18
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, qword [0x140444860]
lea eax, [r8 + 1]
movzx eax, byte [rcx + rax]
sub eax, 1
sar eax, 4
jmp 0x1400e60be
cmp r8d, 0x3fff
ja 0x1400e613e
mov rcx, qword [0x140444860]
shr eax, 6
movzx eax, byte [rcx + rax]
shr al, 1
movzx eax, al
jmp 0x1400e60ae
cmp r8d, 0xffff
ja 0x1400e615a
mov rcx, qword [0x140444860]
shr eax, 8
movzx eax, byte [rcx + rax]
jmp 0x1400e60ae
shr eax, 0x10
mov edx, 0x1f
or eax, 1
bsr eax, eax
xor eax, 0x1f
sub edx, eax
mov eax, r8d
sar edx, 1
lea ecx, [rdx + 2]
shr eax, cl
lea ecx, [rdx + 8]
mov r15d, eax
shr r15d, cl
mov ecx, r15d
mov r15, qword [0x140444860]
movzx ecx, byte [r15 + rcx]
mov r15, qword [0x140442c00]
mov r9, rcx
mov ecx, dword [r15 + rcx*4]
imul rax, rcx
mov ecx, edx
shl r9d, cl
shr rax, 0x20
add eax, r9d
jmp 0x1400e60ae
Function at 0x1401032c0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rdi
push rsi
push rbx
mov r11d, dword [rsp + 0x58]
test r11d, r11d
jle 0x140103346
movsxd rsi, dword [rsp + 0x48]
movsxd rbx, dword [rsp + 0x50]
movsxd r9, r9d
xor r10d, r10d
nop
mov ebp, dword [rdx]
mov edi, dword [r8]
add r10d, 1
mov eax, ebp
or eax, edi
xor edi, ebp
mov ebp, dword [rcx]
and edi, 0xfefefefe
shr edi, 1
sub eax, edi
mov edi, ebp
or edi, eax
xor eax, ebp
and eax, 0xfefefefe
shr eax, 1
sub edi, eax
mov dword [rcx], edi
mov ebp, dword [rdx + 4]
add rdx, rsi
mov edi, dword [r8 + 4]
add r8, rbx
mov eax, ebp
or eax, edi
xor edi, ebp
mov ebp, dword [rcx + 4]
and edi, 0xfefefefe
shr edi, 1
sub eax, edi
mov edi, ebp
or edi, eax
xor eax, ebp
and eax, 0xfefefefe
shr eax, 1
sub edi, eax
mov dword [rcx + 4], edi
add rcx, r9
cmp r11d, r10d
jne 0x1401032e0
pop rbx
pop rsi
pop rdi
pop rbp
ret

Function at 0x1401033c0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x18
mov eax, dword [rsp + 0xb0]
test eax, eax
jle 0x14010356d
movsxd rax, dword [rsp + 0xa8]
movsxd r15, dword [rsp + 0x90]
xor r12d, r12d
movsxd r14, dword [rsp + 0x98]
movsxd r13, dword [rsp + 0xa0]
mov rbp, qword [rsp + 0x80]
mov qword [rsp + 8], rax
movsxd rax, dword [rsp + 0x88]
mov qword [rsp], rax
nop dword [rax + rax]
mov edi, dword [rdx]
mov esi, dword [r8]
mov r10d, dword [r9]
mov eax, dword [rbp]
mov ebx, edi
mov r11d, esi
and edi, 0x3030303
and ebx, 0xfcfcfcfc
and r11d, 0xfcfcfcfc
and esi, 0x3030303
shr ebx, 2
shr r11d, 2
add r11d, ebx
mov ebx, r10d
and r10d, 0x3030303
and ebx, 0xfcfcfcfc
shr ebx, 2
add ebx, r11d
mov r11d, eax
and eax, 0x3030303
and r11d, 0xfcfcfcfc
shr r11d, 2
add r11d, ebx
lea ebx, [rdi + rsi + 0x2020202]
add r10d, ebx
lea ebx, [r10 + rax]
shr ebx, 2
and ebx, 0xf0f0f0f
add r11d, ebx
mov ebx, dword [rcx]
mov eax, r11d
xor r11d, ebx
or eax, ebx
and r11d, 0xfefefefe
shr r11d, 1
sub eax, r11d
mov dword [rcx], eax
mov edi, dword [rdx + 4]
mov esi, dword [r8 + 4]
mov r10d, dword [r9 + 4]
mov eax, dword [rbp + 4]
mov ebx, edi
mov r11d, esi
and ebx, 0xfcfcfcfc
and r11d, 0xfcfcfcfc
shr ebx, 2
shr r11d, 2
add r11d, ebx
mov ebx, r10d
and ebx, 0xfcfcfcfc
shr ebx, 2
add ebx, r11d
mov r11d, eax
and r11d, 0xfcfcfcfc
and edi, 0x3030303
and esi, 0x3030303
shr r11d, 2
and r10d, 0x3030303
and eax, 0x3030303
add r11d, ebx
lea ebx, [rdi + rsi + 0x2020202]
add r12d, 1
add rdx, r15
add r8, r14
add r9, r13
add r10d, ebx
add rbp, qword [rsp + 8]
lea ebx, [r10 + rax]
shr ebx, 2
and ebx, 0xf0f0f0f
add r11d, ebx
mov ebx, dword [rcx + 4]
mov eax, r11d
xor r11d, ebx
or eax, ebx
and r11d, 0xfefefefe
shr r11d, 1
sub eax, r11d
mov dword [rcx + 4], eax
add rcx, qword [rsp]
cmp dword [rsp + 0xb0], r12d
jne 0x140103420
add rsp, 0x18
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x140103580
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rdi
push rsi
push rbx
mov ebx, dword [rsp + 0x58]
test ebx, ebx
jle 0x1401035ed
movsxd rdi, dword [rsp + 0x48]
movsxd rsi, dword [rsp + 0x50]
movsxd r9, r9d
xor r11d, r11d
nop dword [rax]
mov ebp, dword [rdx]
mov eax, dword [r8]
add r11d, 1
mov r10d, ebp
xor r10d, eax
and eax, ebp
and r10d, 0xfefefefe
shr r10d, 1
add eax, r10d
mov dword [rcx], eax
mov ebp, dword [rdx + 4]
add rdx, rdi
mov eax, dword [r8 + 4]
add r8, rsi
mov r10d, ebp
xor r10d, eax
and eax, ebp
and r10d, 0xfefefefe
shr r10d, 1
add eax, r10d
mov dword [rcx + 4], eax
add rcx, r9
cmp ebx, r11d
jne 0x1401035a0
pop rbx
pop rsi
pop rdi
pop rbp
ret
Function at 0x1401d86a0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rdi
push rsi
push rbx
mov r11d, dword [rsp + 0x58]
test r11d, r11d
jle 0x1401d8726
movsxd rsi, dword [rsp + 0x48]
movsxd rbx, dword [rsp + 0x50]
movsxd r9, r9d
xor r10d, r10d
nop
mov ebp, dword [rdx]
mov edi, dword [r8]
add r10d, 1
mov eax, ebp
or eax, edi
xor edi, ebp
mov ebp, dword [rcx]
and edi, 0xfefefefe
shr edi, 1
sub eax, edi
mov edi, ebp
or edi, eax
xor eax, ebp
and eax, 0xfefefefe
shr eax, 1
sub edi, eax
mov dword [rcx], edi
mov ebp, dword [rdx + 4]
add rdx, rsi
mov edi, dword [r8 + 4]
add r8, rbx
mov eax, ebp
or eax, edi
xor edi, ebp
mov ebp, dword [rcx + 4]
and edi, 0xfefefefe
shr edi, 1
sub eax, edi
mov edi, ebp
or edi, eax
xor eax, ebp
and eax, 0xfefefefe
shr eax, 1
sub edi, eax
mov dword [rcx + 4], edi
add rcx, r9
cmp r11d, r10d
jne 0x1401d86c0
pop rbx
pop rsi
pop rdi
pop rbp
ret

Function at 0x1401e2250
Capabilities:
Encode data using xor

Disassembly:
push r12
push rbp
push rdi
push rsi
push rbx
mov ebx, dword [rsp + 0x60]
test ebx, ebx
jle 0x1401e22f6
movsxd rdi, dword [rsp + 0x50]
movsxd rsi, dword [rsp + 0x58]
movsxd r9, r9d
xor r11d, r11d
movabs r10, 0xfffefffefffefffe
nop dword [rax]
mov r12, qword [rdx]
mov rbp, qword [r8]
add r11d, 1
mov rax, r12
or rax, rbp
xor rbp, r12
mov r12, qword [rcx]
and rbp, r10
shr rbp, 1
sub rax, rbp
mov rbp, r12
or rbp, rax
xor rax, r12
and rax, r10
shr rax, 1
sub rbp, rax
mov qword [rcx], rbp
mov r12, qword [rdx + 8]
add rdx, rdi
mov rbp, qword [r8 + 8]
add r8, rsi
mov rax, r12
or rax, rbp
xor rbp, r12
mov r12, qword [rcx + 8]
and rbp, r10
shr rbp, 1
sub rax, rbp
mov rbp, r12
or rbp, rax
xor rax, r12
and rax, r10
shr rax, 1
sub rbp, rax
mov qword [rcx + 8], rbp
add rcx, r9
cmp ebx, r11d
jne 0x1401e2280
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
ret
Function at 0x140200510
Capabilities:
Encode data using xor

Disassembly:
push r13
push r12
push rbp
push rdi
push rsi
push rbx
movsxd r10, dword [rsp + 0x58]
movabs rdi, 0xfffefffefffefffe
lea rbp, [r8 + 0x200]
mov rsi, rdx
mov r11, r8
movsxd r9, r9d
mov rbx, rcx
nop word [rax + rax]
mov r13, qword [rsi]
mov rax, qword [r11]
add r11, 0x20
mov r12, r13
or r12, rax
xor rax, r13
and rax, rdi
shr rax, 1
sub r12, rax
mov qword [rbx], r12
mov r13, qword [rsi + 8]
add rsi, r10
mov rax, qword [r11 - 0x18]
mov r12, r13
or r12, rax
xor rax, r13
and rax, rdi
shr rax, 1
sub r12, rax
mov qword [rbx + 8], r12
add rbx, r9
cmp rbp, r11
jne 0x140200540
lea r11, [r8 + 0x10]
add rdx, 0x10
add rcx, 0x10
add r8, 0x210
movabs rbx, 0xfffefffefffefffe
mov rdi, qword [rdx]
mov rax, qword [r11]
add r11, 0x20
mov rsi, rdi
or rsi, rax
xor rax, rdi
and rax, rbx
shr rax, 1
sub rsi, rax
mov qword [rcx], rsi
mov rdi, qword [rdx + 8]
add rdx, r10
mov rax, qword [r11 - 0x18]
mov rsi, rdi
or rsi, rax
xor rax, rdi
and rax, rbx
shr rax, 1
sub rsi, rax
mov qword [rcx + 8], rsi
add rcx, r9
cmp r8, r11
jne 0x1402005a5
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret
Function at 0x140229190
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x118
xor r14d, r14d
lea r11, [rsp + 0x10]
mov qword [rsp + 8], r11
mov rcx, r11
movzx r10d, byte [rdx]
movzx eax, byte [r8]
add r14d, 1
movzx ebx, byte [rdx + 1]
movzx edi, byte [r8 + 2]
add r11, 0x20
movzx esi, byte [rdx + 3]
movzx ebp, byte [rdx + 5]
movzx r13d, byte [rdx + 6]
movzx r15d, byte [rdx + 7]
sub eax, r10d
movzx r10d, byte [r8 + 1]
sub r10d, ebx
lea ebx, [rax + r10]
sub eax, r10d
movzx r10d, byte [rdx + 2]
sub edi, r10d
movzx r10d, byte [r8 + 3]
sub r10d, esi
movzx esi, byte [rdx + 4]
add rdx, r9
lea r12d, [rdi + r10]
sub edi, r10d
movzx r10d, byte [r8 + 4]
sub r10d, esi
movzx esi, byte [r8 + 5]
sub esi, ebp
lea ebp, [r10 + rsi]
sub r10d, esi
movzx esi, byte [r8 + 6]
sub esi, r13d
movzx r13d, byte [r8 + 7]
add r8, r9
sub r13d, r15d
lea r15d, [rsi + r13]
sub esi, r13d
lea r13d, [rbx + r12]
sub ebx, r12d
lea r12d, [rax + rdi]
sub eax, edi
lea edi, [rbp + r15]
sub ebp, r15d
lea r15d, [r10 + rsi]
sub r10d, esi
lea esi, [r13 + rdi]
sub r13d, edi
mov dword [r11 - 0x10], r13d
mov dword [r11 - 0x20], esi
lea esi, [r12 + r15]
sub r12d, r15d
mov dword [r11 - 0xc], r12d
mov dword [r11 - 0x1c], esi
lea esi, [rbx + rbp]
sub ebx, ebp
mov dword [r11 - 8], ebx
lea ebx, [rax + r10]
sub eax, r10d
mov dword [r11 - 0x18], esi
mov dword [r11 - 4], eax
mov dword [r11 - 0x14], ebx
cmp r14d, 8
jne 0x1402291b3
mov r10, qword [rsp + 8]
xor eax, eax
add r10, 0x20
nop word [rax + rax]
mov r9d, dword [rcx + 0x20]
mov r11d, dword [rcx + 0x60]
mov edx, dword [rcx]
mov ebp, dword [rcx + 0x40]
mov ebx, dword [rcx + 0xa0]
mov edi, dword [rcx + 0xc0]
lea r8d, [rdx + r9]
sub edx, r9d
lea r9d, [rbp + r11]
sub ebp, r11d
mov r11d, dword [rcx + 0x80]
lea esi, [r11 + rbx]
sub r11d, ebx
mov ebx, dword [rcx + 0xe0]
lea r13d, [rdi + rbx]
sub edi, ebx
lea ebx, [r8 + r9]
sub r8d, r9d
lea r9d, [rdx + rbp]
sub edx, ebp
lea r12d, [rsi + r13]
lea ebp, [r11 + rdi]
sub r11d, edi
mov dword [rcx], ebx
sub esi, r13d
mov dword [rcx + 0x20], r9d
lea edi, [rbx + r12]
sub ebx, r12d
mov dword [rcx + 0x80], r12d
mov r12d, ebx
mov dword [rcx + 0xa0], ebp
mov dword [rcx + 0x40], r8d
mov r13d, edi
sar r12d, 0x1f
mov dword [rcx + 0xc0], esi
sar r13d, 0x1f
xor ebx, r12d
mov dword [rcx + 0x60], edx
xor edi, r13d
sub ebx, r12d
mov dword [rcx + 0xe0], r11d
sub edi, r13d
add ebx, edi
lea edi, [r9 + rbp]
sub r9d, ebp
mov ebp, r9d
mov r12d, edi
sar ebp, 0x1f
sar r12d, 0x1f
xor r9d, ebp
xor edi, r12d
sub r9d, ebp
sub edi, r12d
add r9d, edi
add r9d, ebx
lea ebx, [r8 + rsi]
sub r8d, esi
mov esi, r8d
mov edi, ebx
sar esi, 0x1f
sar edi, 0x1f
xor r8d, esi
xor ebx, edi
sub r8d, esi
sub ebx, edi
add r8d, ebx
add rcx, 4
add r8d, r9d
lea r9d, [rdx + r11]
sub edx, r11d
mov r11d, edx
mov ebx, r9d
sar r11d, 0x1f
sar ebx, 0x1f
xor edx, r11d
xor r9d, ebx
sub edx, r11d
sub r9d, ebx
add edx, r9d
add edx, r8d
add eax, edx
cmp r10, rcx
jne 0x1402292b0
add rsp, 0x118
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x1402293f0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x108
lea r14, [rsp + 0x100]
mov r15, rsp
mov r8, rsp
mov rax, rsp
movzx r10d, byte [rdx + 1]
movzx ecx, byte [rdx]
add rax, 0x20
movzx edi, byte [rdx + 2]
movzx esi, byte [rdx + 5]
movzx r12d, byte [rdx + 7]
lea r11d, [rcx + r10]
sub ecx, r10d
movzx r10d, byte [rdx + 3]
lea ebp, [rdi + r10]
sub edi, r10d
movzx r10d, byte [rdx + 4]
lea ebx, [r10 + rsi]
sub r10d, esi
movzx esi, byte [rdx + 6]
add rdx, r9
lea r13d, [rsi + r12]
sub esi, r12d
lea r12d, [r11 + rbp]
sub r11d, ebp
lea ebp, [rcx + rdi]
sub ecx, edi
lea edi, [rbx + r13]
sub ebx, r13d
lea r13d, [r10 + rsi]
sub r10d, esi
lea esi, [r12 + rdi]
sub r12d, edi
mov dword [rax - 0x10], r12d
mov dword [rax - 0x20], esi
lea esi, [rbp + r13]
sub ebp, r13d
mov dword [rax - 0xc], ebp
mov dword [rax - 0x1c], esi
lea esi, [r11 + rbx]
sub r11d, ebx
mov dword [rax - 8], r11d
lea r11d, [rcx + r10]
sub ecx, r10d
mov dword [rax - 0x18], esi
mov dword [rax - 4], ecx
mov dword [rax - 0x14], r11d
cmp r14, rax
jne 0x140229414
lea r9, [r15 + 0x20]
xor eax, eax
nop dword [rax + rax]
mov r10d, dword [r8 + 0x20]
mov r11d, dword [r8 + 0x60]
mov edx, dword [r8]
mov ebp, dword [r8 + 0x40]
mov ebx, dword [r8 + 0xa0]
mov edi, dword [r8 + 0xc0]
lea ecx, [rdx + r10]
sub edx, r10d
lea r10d, [rbp + r11]
sub ebp, r11d
mov r11d, dword [r8 + 0x80]
lea esi, [r11 + rbx]
sub r11d, ebx
mov ebx, dword [r8 + 0xe0]
lea r13d, [rdi + rbx]
sub edi, ebx
lea ebx, [rcx + r10]
sub ecx, r10d
lea r10d, [rdx + rbp]
sub edx, ebp
lea r12d, [rsi + r13]
lea ebp, [r11 + rdi]
sub r11d, edi
mov dword [r8], ebx
sub esi, r13d
mov dword [r8 + 0x20], r10d
lea edi, [rbx + r12]
sub ebx, r12d
mov dword [r8 + 0x80], r12d
mov r12d, ebx
mov dword [r8 + 0xa0], ebp
mov dword [r8 + 0x40], ecx
mov r13d, edi
sar r12d, 0x1f
mov dword [r8 + 0xc0], esi
sar r13d, 0x1f
xor ebx, r12d
mov dword [r8 + 0x60], edx
xor edi, r13d
sub ebx, r12d
mov dword [r8 + 0xe0], r11d
sub edi, r13d
add ebx, edi
lea edi, [r10 + rbp]
sub r10d, ebp
mov ebp, r10d
mov r12d, edi
sar ebp, 0x1f
sar r12d, 0x1f
xor r10d, ebp
xor edi, r12d
sub r10d, ebp
sub edi, r12d
add r10d, edi
add r10d, ebx
lea ebx, [rcx + rsi]
sub ecx, esi
mov esi, ecx
mov edi, ebx
sar esi, 0x1f
sar edi, 0x1f
xor ecx, esi
xor ebx, edi
sub ecx, esi
sub ebx, edi
add ecx, ebx
add r8, 4
add ecx, r10d
lea r10d, [rdx + r11]
sub edx, r11d
mov r11d, edx
mov ebx, r10d
sar r11d, 0x1f
sar ebx, 0x1f
xor edx, r11d
xor r10d, ebx
sub edx, r11d
sub r10d, ebx
add edx, r10d
add edx, ecx
add eax, edx
cmp r9, r8
jne 0x1402294c0
mov edx, dword [rsp + 0x80]
add edx, dword [rsp]
mov ecx, edx
sar ecx, 0x1f
xor edx, ecx
sub edx, ecx
sub eax, edx
add rsp, 0x108
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x140245de0
Capabilities:
Create thread

Disassembly:
push rbx
sub rsp, 0x30
mov rax, qword [rcx + 0x10]
mov rbx, rcx
mov eax, dword [rax + 0x18]
test ah, 0x10
je 0x140245dfd
test dword [rcx + 0x4c], 0x90000
je 0x140245e70
mov r9d, dword [rbx + 0x310]
cmp r9d, 1
jne 0x140245e20
mov dword [rbx + 0x318], 0
xor eax, eax
add rsp, 0x30
pop rbx
ret
test ah, 0x20
jne 0x140245e55
and eax, 0x8000
jne 0x140245eb0
mov dword [rbx + 0x310], 1
mov dword [rbx + 0x318], 0
test al, 1
je 0x140245e14
mov rcx, rbx
add rsp, 0x30
pop rbx
jmp 0x140102870
test byte [rbx + 0x314], 2
je 0x140245e25
cmp r9d, 0x10
mov dword [rbx + 0x318], 2
jg 0x140245eb6
jmp 0x140245ee5
test byte [rcx + 0x51], 0x80
jne 0x140245dfd
mov r9d, dword [rcx + 0x310]
cmp r9d, 1
je 0x140245e0a
test byte [rbx + 0x314], 1
je 0x140245e20
cmp r9d, 0x10
mov dword [rbx + 0x318], 1
jg 0x140245eb6
mov rcx, rbx
add rsp, 0x30
pop rbx
jmp 0x140102870
cmp r9d, 0x10
jle 0x140245ed2
lea r8, str.Application_has_requested__d_threads._Using_a_thread_count_greater_than__d_is_not_recommended._n
mov dword [rsp + 0x20], 0x10
mov edx, 0x18
mov rcx, rbx
call fcn.14036cf30
mov eax, dword [rbx + 0x318]
mov edx, eax
and edx, 2
test edx, edx
je 0x140245e44
mov rcx, rbx
add rsp, 0x30
pop rbx
jmp 0x140246170
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x38
mov esi, dword [rcx + 0x310]
mov rbx, rcx
mov rcx, qword [rcx + 0x10]
call fcn.14011e380
test eax, eax
je 0x140246198
cmp dword [rbx + 0x18], 1
je 0x1402462a3
test esi, esi
je 0x140246264
cmp esi, 1
jle 0x14024624f
mov rbp, qword [rbx + 0x28]
mov ecx, 0x58
call fcn.14036dc50
mov rdi, rax
mov r9d, 0
mov qword [rbp + 0x20], rax
mov rax, qword [rbx + 0x10]
test byte [rax + 0xe0], 0x20
lea rax, [0x140245f20]
cmovne r9, rax
test rdi, rdi
je 0x140246238
lea r8, [0x140245f30]
mov dword [rsp + 0x20], esi
mov rdx, rbx
mov rcx, rdi
call fcn.14037e040
cmp eax, 1
jle 0x140246230
mov dword [rbx + 0x310], eax
lea rax, [0x140245f80]
mov qword [rbx + 0x320], rax
lea rax, [0x140246000]
mov qword [rbx + 0x328], rax
xor eax, eax
add rsp, 0x38
pop rbx
pop rsi
pop rdi
pop rbp
ret
mov rcx, rdi
call fcn.14037df40
mov rax, qword [rbx + 0x28]
lea rcx, [rax + 0x20]
call fcn.14036dc30
mov dword [rbx + 0x310], 1
xor eax, eax
mov dword [rbx + 0x318], 0
add rsp, 0x38
pop rbx
pop rsi
pop rdi
pop rbp
ret
call fcn.140353350
mov edx, dword [rbx + 0x78]
test edx, edx
jne 0x140246290
cmp eax, 1
jle 0x140246245
lea edx, [rax + 1]
cmp eax, 0xf
mov esi, 0x10
cmovle esi, edx
mov dword [rbx + 0x310], esi
jmp 0x1402461a9
lea ecx, [rdx + 0x1e]
add edx, 0xf
cmovs edx, ecx
sar edx, 4
cmp eax, edx
cmovg eax, edx
jmp 0x140246270
cmp dword [rbx + 0x78], 0xaf0
jg 0x140246245
jmp 0x140246198
Function at 0x14025cbf0
Capabilities:
Encode data using xor

Disassembly:
push rdi
push rsi
pcmpeqd mm6, mm6
paddb mm6, mm6
mov rsi, rdx
mov rdi, rcx
lea rax, [r8 + r8]
movq mm0, qword [rsi]
nop dword [rax]
movq mm1, qword [rsi + r8]
movq mm2, qword [rsi + rax]
movq mm4, mm1
movq mm5, mm2
por mm4, mm0
por mm5, mm1
pxor mm0, mm1
pxor mm1, mm2
pand mm0, mm6
pand mm1, mm6
psrlq mm1, 1
psrlq mm0, 1
psubb mm4, mm0
psubb mm5, mm1
movq mm3, qword [rdi]
movq mm0, mm3
por mm0, mm4
pxor mm4, mm3
pand mm4, mm6
psrlq mm4, 1
psubb mm0, mm4
movq mm3, qword [rdi + r8]
movq mm1, mm3
por mm1, mm5
pxor mm5, mm3
pand mm5, mm6
psrlq mm5, 1
psubb mm1, mm5
movq qword [rdi], mm0
movq qword [rdi + r8], mm1
add rsi, rax
add rdi, rax
movq mm1, qword [rsi + r8]
movq mm0, qword [rsi + rax]
movq mm4, mm1
movq mm5, mm0
por mm4, mm2
por mm5, mm1
pxor mm2, mm1
pxor mm1, mm0
pand mm2, mm6
pand mm1, mm6
psrlq mm1, 1
psrlq mm2, 1
psubb mm4, mm2
psubb mm5, mm1
movq mm3, qword [rdi]
movq mm2, mm3
por mm2, mm4
pxor mm4, mm3
pand mm4, mm6
psrlq mm4, 1
psubb mm2, mm4
movq mm3, qword [rdi + r8]
movq mm1, mm3
por mm1, mm5
pxor mm5, mm3
pand mm5, mm6
psrlq mm5, 1
psubb mm1, mm5
movq qword [rdi], mm2
movq qword [rdi + r8], mm1
add rsi, rax
add rdi, rax
sub r9d, 4
jne 0x14025cc08
pop rsi
pop rdi
ret

Function at 0x14025cdc0
Capabilities:
Encode data using xor

Disassembly:
push rdi
push rsi
pxor mm7, mm7
pcmpeqd mm6, mm6
psrlw mm6, 0xf
psllw mm6, 1
mov rsi, rdx
mov rdi, rcx
movq mm0, qword [rsi]
movq mm4, qword [rsi + 1]
movq mm1, mm0
movq mm5, mm4
punpcklbw mm0, mm7
punpcklbw mm4, mm7
punpckhbw mm1, mm7
punpckhbw mm5, mm7
paddusw mm4, mm0
paddusw mm5, mm1
xor rax, rax
add rsi, r8
nop dword [rax + rax]
movq mm0, qword [rsi + rax]
movq mm2, qword [rsi + rax + 1]
movq mm1, mm0
movq mm3, mm2
punpcklbw mm0, mm7
punpcklbw mm2, mm7
punpckhbw mm1, mm7
punpckhbw mm3, mm7
paddusw mm0, mm2
paddusw mm1, mm3
paddusw mm4, mm6
paddusw mm5, mm6
paddusw mm4, mm0
paddusw mm5, mm1
psrlw mm4, 2
psrlw mm5, 2
movq mm3, qword [rdi + rax]
packuswb mm4, mm5
pcmpeqd mm2, mm2
paddb mm2, mm2
movq mm5, mm3
por mm5, mm4
pxor mm4, mm3
pand mm4, mm2
psrlq mm4, 1
psubb mm5, mm4
movq qword [rdi + rax], mm5
add rax, r8
movq mm2, qword [rsi + rax]
movq mm4, qword [rsi + rax + 1]
movq mm3, mm2
movq mm5, mm4
punpcklbw mm2, mm7
punpcklbw mm4, mm7
punpckhbw mm3, mm7
punpckhbw mm5, mm7
paddusw mm4, mm2
paddusw mm5, mm3
paddusw mm0, mm6
paddusw mm1, mm6
paddusw mm0, mm4
paddusw mm1, mm5
psrlw mm0, 2
psrlw mm1, 2
movq mm3, qword [rdi + rax]
packuswb mm0, mm1
pcmpeqd mm2, mm2
paddb mm2, mm2
movq mm1, mm3
por mm1, mm0
pxor mm0, mm3
pand mm0, mm2
psrlq mm0, 1
psubb mm1, mm0
movq qword [rdi + rax], mm1
add rax, r8
sub r9d, 2
jne 0x14025ce00
pop rsi
pop rdi
ret
Function at 0x140261540
Capabilities:
Encode data using xor

Disassembly:
mov r10, qword [rsp + 0x28]
mov r11, qword [rsp + 0x30]
movsxd r10, r10d
movsxd r9, r9d
pcmpeqb mm6, mm6
test r11d, 1
je 0x14026157f
movq mm0, qword [rdx]
movq mm1, qword [r8]
add rdx, r10
add r8, 8
pxor mm0, mm6
pxor mm1, mm6
pavgb mm0, mm1
pxor mm0, mm6
movq qword [rcx], mm0
add rcx, r9
dec r11d
movq mm0, qword [rdx]
add rdx, r10
movq mm1, qword [rdx]
add rdx, r10
movq mm2, qword [r8]
movq mm3, qword [r8 + 8]
pxor mm0, mm6
pxor mm1, mm6
pxor mm2, mm6
pxor mm3, mm6
pavgb mm0, mm2
pavgb mm1, mm3
pxor mm0, mm6
pxor mm1, mm6
movq qword [rcx], mm0
add rcx, r9
movq qword [rcx], mm1
add rcx, r9
movq mm0, qword [rdx]
add rdx, r10
movq mm1, qword [rdx]
add rdx, r10
movq mm2, qword [r8 + 0x10]
movq mm3, qword [r8 + 0x18]
pxor mm0, mm6
pxor mm1, mm6
pxor mm2, mm6
pxor mm3, mm6
pavgb mm0, mm2
pavgb mm1, mm3
pxor mm0, mm6
pxor mm1, mm6
movq qword [rcx], mm0
add rcx, r9
movq qword [rcx], mm1
add rcx, r9
add r8, 0x20
sub r11d, 4
jne 0x14026157f
repz ret

Function at 0x140261600
Capabilities:
Encode data using xor

Disassembly:
mov r10, qword [rsp + 0x28]
mov r11, qword [rsp + 0x30]
movsxd r9, r9d
movsxd r10, r10d
pcmpeqb mm6, mm6
test r11d, 1
je 0x140261658
movq mm0, qword [rdx]
movq mm1, qword [rdx + 8]
movq mm2, qword [r8]
movq mm3, qword [r8 + 8]
pxor mm0, mm6
pxor mm1, mm6
pxor mm2, mm6
pxor mm3, mm6
pavgb mm0, mm2
pavgb mm1, mm3
pxor mm0, mm6
pxor mm1, mm6
add rdx, r10
add r8, 0x10
movq qword [rcx], mm0
movq qword [rcx + 8], mm1
add rcx, r9
dec r11d
movq mm0, qword [rdx]
movq mm1, qword [rdx + 8]
add rdx, r10
movq mm2, qword [r8]
movq mm3, qword [r8 + 8]
pxor mm0, mm6
pxor mm1, mm6
pxor mm2, mm6
pxor mm3, mm6
pavgb mm0, mm2
pavgb mm1, mm3
pxor mm0, mm6
pxor mm1, mm6
movq qword [rcx], mm0
movq qword [rcx + 8], mm1
add rcx, r9
movq mm0, qword [rdx]
movq mm1, qword [rdx + 8]
add rdx, r10
movq mm2, qword [r8 + 0x10]
movq mm3, qword [r8 + 0x18]
pxor mm0, mm6
pxor mm1, mm6
pxor mm2, mm6
pxor mm3, mm6
pavgb mm0, mm2
pavgb mm1, mm3
pxor mm0, mm6
pxor mm1, mm6
movq qword [rcx], mm0
movq qword [rcx + 8], mm1
add rcx, r9
add r8, 0x20
sub r11d, 2
jne 0x140261658
repz ret
Function at 0x1402d01a0
Capabilities:
Encode data using xor

Disassembly:
sub r8d, 2
pxor mm7, mm7
pxor mm6, mm6
movq mm0, qword [rcx]
movq mm1, mm0
psllq mm0, 8
psrlq mm1, 8
psrlq mm0, 8
movq mm2, mm0
movq mm3, mm1
punpcklbw mm0, mm7
punpcklbw mm1, mm7
punpckhbw mm2, mm7
punpckhbw mm3, mm7
psubw mm0, mm1
psubw mm2, mm3
add rcx, rdx
movq mm4, qword [rcx]
movq mm1, mm4
psllq mm4, 8
psrlq mm1, 8
psrlq mm4, 8
movq mm5, mm4
movq mm3, mm1
punpcklbw mm4, mm7
punpcklbw mm1, mm7
punpckhbw mm5, mm7
punpckhbw mm3, mm7
psubw mm4, mm1
psubw mm5, mm3
psubw mm0, mm4
psubw mm2, mm5
pxor mm3, mm3
pxor mm1, mm1
pcmpgtw mm3, mm0
pcmpgtw mm1, mm2
pxor mm0, mm3
pxor mm2, mm1
psubw mm0, mm3
psubw mm2, mm1
paddw mm2, mm0
paddw mm6, mm2
add rcx, rdx
movq mm0, qword [rcx]
movq mm1, mm0
psllq mm0, 8
psrlq mm1, 8
psrlq mm0, 8
movq mm2, mm0
movq mm3, mm1
punpcklbw mm0, mm7
punpcklbw mm1, mm7
punpckhbw mm2, mm7
punpckhbw mm3, mm7
psubw mm0, mm1
psubw mm2, mm3
psubw mm4, mm0
psubw mm5, mm2
pxor mm3, mm3
pxor mm1, mm1
pcmpgtw mm3, mm4
pcmpgtw mm1, mm5
pxor mm4, mm3
pxor mm5, mm1
psubw mm4, mm3
psubw mm5, mm1
paddw mm5, mm4
paddw mm6, mm5
add rcx, rdx
movq mm4, qword [rcx]
movq mm1, mm4
psllq mm4, 8
psrlq mm1, 8
psrlq mm4, 8
movq mm5, mm4
movq mm3, mm1
punpcklbw mm4, mm7
punpcklbw mm1, mm7
punpckhbw mm5, mm7
punpckhbw mm3, mm7
psubw mm4, mm1
psubw mm5, mm3
psubw mm0, mm4
psubw mm2, mm5
pxor mm3, mm3
pxor mm1, mm1
pcmpgtw mm3, mm0
pcmpgtw mm1, mm2
pxor mm0, mm3
pxor mm2, mm1
psubw mm0, mm3
psubw mm2, mm1
paddw mm2, mm0
paddw mm6, mm2
add rcx, rdx
sub r8d, 2
jne 0x1402d0228
movq mm0, mm6
punpcklwd mm0, mm7
punpckhwd mm6, mm7
paddd mm6, mm0
movq mm0, mm6
psrlq mm6, 0x20
paddd mm0, mm6
movd eax, mm0
repz ret