joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14007ab90
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x60
mov rax, qword [0x14013b838]
mov ebx, edx
mov rdi, rcx
test rax, rax
jne 0x14007ad8e
cmp byte [0x1401258f1], 0
mov rcx, qword [0x14013b728]
movups xmm0, xmmword [str.ha_SwWEgj_OnPX_A]
mov rax, qword [rcx]
movups xmmword [rsp + 0x30], xmm0
mov r10, qword [rax + 8]
movzx eax, word [0x1401258f0]
mov word [rsp + 0x40], ax
je 0x14007ad74
xor r8d, r8d
cmp dword [0x140137c60], 2
jl 0x14007ad28
movdqa xmm0, xmmword [0x1401266f0]
lea rdx, [rsp + 0x34]
movdqa xmm4, xmmword [0x140126610]
movdqa xmm3, xmmword [0x140126760]
movdqa xmm5, xmmword [0x1401266b0]
movdqa xmmword [rsp + 0x20], xmm0
mov r9d, dword [rsp + 0x20]
movaps xmmword [rsp + 0x50], xmm6
movdqa xmm6, xmmword [0x1401266c0]
nop
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 8]
paddd xmm2, xmm4
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, r9d
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 0xc]
xorps xmm2, xmm0
movd dword [rdx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, r9d
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 8]
xorps xmm2, xmm0
movd dword [rdx - 8], xmm2
cmp r8d, 0x10
jl 0x14007ac30
movaps xmm6, xmmword [rsp + 0x50]
cmp r8d, 0x12
jge 0x14007ad74
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
lea r9, [r9 + 1]
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x3a
movzx eax, r8b
inc r8d
sub al, dl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x12
jl 0x14007ad40
lea r8, [0x14013b838]
lea rdx, [rsp + 0x30]
call r10
test al, al
je 0x14007ad95
mov rax, qword [0x14013b838]
mov edx, ebx
mov rcx, rdi
call rax
mov rbx, qword [rsp + 0x70]
add rsp, 0x60
pop rdi
ret
Function at 0x14007ada0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x60
mov rax, qword [0x14013b7f8]
mov rbx, rdx
mov rdi, rcx
test rax, rax
jne 0x14007afae
cmp byte [0x1401258b5], 0
mov rcx, qword [0x14013b728]
movups xmm0, xmmword [str.ha_SwWEgj_OuP_X__r___E]
mov rax, qword [rcx]
movups xmmword [rsp + 0x30], xmm0
mov r10, qword [rax + 8]
mov eax, dword [0x1401258b0]
mov dword [rsp + 0x40], eax
movzx eax, word [0x1401258b4]
mov word [rsp + 0x44], ax
je 0x14007af94
xor r8d, r8d
cmp dword [0x140137c60], 2
jl 0x14007af48
movdqa xmm0, xmmword [0x1401266f0]
lea rdx, [rsp + 0x34]
movdqa xmm4, xmmword [0x140126610]
movdqa xmm3, xmmword [0x140126760]
movdqa xmm5, xmmword [0x1401266b0]
movdqa xmmword [rsp + 0x20], xmm0
mov r9d, dword [rsp + 0x20]
movaps xmmword [rsp + 0x50], xmm6
movdqa xmm6, xmmword [0x1401266c0]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 8]
paddd xmm2, xmm4
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, r9d
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 0xc]
xorps xmm2, xmm0
movd dword [rdx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, r9d
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 8]
xorps xmm2, xmm0
movd dword [rdx - 8], xmm2
cmp r8d, 0x10
jl 0x14007ae50
movaps xmm6, xmmword [rsp + 0x50]
cmp r8d, 0x16
jge 0x14007af94
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
lea r9, [r9 + 1]
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x3a
movzx eax, r8b
inc r8d
sub al, dl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x16
jl 0x14007af60
lea r8, [0x14013b7f8]
lea rdx, [rsp + 0x30]
call r10
test al, al
je 0x14007afb6
mov rax, qword [0x14013b7f8]
mov rdx, rbx
mov rcx, rdi
call rax
mov rbx, qword [rsp + 0x70]
add rsp, 0x60
pop rdi
ret
Function at 0x14007afd0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x50
mov rax, qword [0x14013b7d8]
mov ebx, edx
mov rdi, rcx
test rax, rax
jne 0x14007b1bc
movups xmm0, xmmword [0x140125970]
mov r9, qword [0x14013b728]
movups xmmword [rsp + 0x20], xmm0
mov rax, qword [r9]
psrldq xmm0, 0xf
mov r10, qword [rax + 8]
movd eax, xmm0
test al, al
je 0x14007b19f
xor ecx, ecx
cmp dword [0x140137c60], 2
jl 0x14007b160
movdqa xmm0, xmmword [0x1401266f0]
lea rdx, [rsp + 0x24]
movdqa xmm4, xmmword [0x140126610]
movdqa xmm3, xmmword [0x140126760]
movdqa xmm5, xmmword [0x1401266b0]
movdqa xmmword [rsp + 0x30], xmm0
mov r8d, dword [rsp + 0x30]
movaps xmmword [rsp + 0x40], xmm6
movdqa xmm6, xmmword [0x1401266c0]
nop word [rax + rax]
movd xmm2, ecx
lea eax, [rcx + 4]
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 8]
paddd xmm2, xmm4
add ecx, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, r8d
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 0xc]
xorps xmm2, xmm0
movd dword [rdx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, r8d
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 8]
xorps xmm2, xmm0
movd dword [rdx - 8], xmm2
cmp ecx, 0x10
jl 0x14007b070
movaps xmm6, xmmword [rsp + 0x40]
jmp 0x14007b19f
lea r8, [rsp + 0x20]
nop word [rax + rax]
mov eax, 0x8d3dcb09
lea r8, [r8 + 1]
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x3a
movzx eax, cl
inc ecx
sub al, dl
add al, 0x30
xor byte [r8 - 1], al
cmp ecx, 0x10
jl 0x14007b170
lea r8, [0x14013b7d8]
mov rcx, r9
lea rdx, [rsp + 0x20]
call r10
test al, al
je 0x14007b1c3
mov rax, qword [0x14013b7d8]
mov edx, ebx
mov rcx, rdi
call rax
mov rbx, qword [rsp + 0x60]
add rsp, 0x50
pop rdi
ret
Function at 0x14007b1d0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x60
mov rax, qword [0x14013b808]
mov ebx, edx
mov rdi, rcx
test rax, rax
jne 0x14007b3be
mov rcx, qword [0x14013b728]
xor r8d, r8d
cmp dword [0x140137c60], 2
movups xmm0, xmmword [str.hbpRFje_WNxNHIQQ_]
mov rax, qword [rcx]
movups xmmword [rsp + 0x30], xmm0
mov r10, qword [rax + 8]
movzx eax, byte [0x140125928]
mov byte [rsp + 0x40], al
jl 0x14007b359
movdqa xmm0, xmmword [0x1401266f0]
lea rdx, [rsp + 0x34]
movdqa xmm4, xmmword [0x140126610]
movdqa xmm3, xmmword [0x140126760]
movdqa xmm5, xmmword [0x1401266b0]
movdqa xmmword [rsp + 0x20], xmm0
mov r9d, dword [rsp + 0x20]
movaps xmmword [rsp + 0x50], xmm6
movdqa xmm6, xmmword [0x1401266c0]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 8]
paddd xmm2, xmm4
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, r9d
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 0xc]
xorps xmm2, xmm0
movd dword [rdx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, r9d
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 8]
xorps xmm2, xmm0
movd dword [rdx - 8], xmm2
cmp r8d, 0x10
jl 0x14007b261
movaps xmm6, xmmword [rsp + 0x50]
cmp r8d, 0x11
jge 0x14007b3a4
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x8d3dcb09
lea r9, [r9 + 1]
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x3a
movzx eax, r8b
inc r8d
sub al, dl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x11
jl 0x14007b370
lea r8, [0x14013b808]
lea rdx, [rsp + 0x30]
call r10
test al, al
je 0x14007b3c5
mov rax, qword [0x14013b808]
mov edx, ebx
mov rcx, rdi
call rax
mov rbx, qword [rsp + 0x70]
add rsp, 0x60
pop rdi
ret
Function at 0x14007b3d0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x60
mov rax, qword [0x14013b7e8]
mov rbx, rcx
test rax, rax
je 0x14007b3ed
add rsp, 0x60
pop rbx
jmp rax
cmp byte [0x14012587d], 0
mov rcx, qword [0x14013b728]
movups xmm0, xmmword [str.hbpRFjqRLOOHRPl__6E]
mov rax, qword [rcx]
movups xmmword [rsp + 0x30], xmm0
mov r10, qword [rax + 8]
mov eax, dword [0x140125878]
mov dword [rsp + 0x40], eax
movzx eax, word [0x14012587c]
mov word [rsp + 0x44], ax
je 0x14007b5c4
xor r8d, r8d
cmp dword [0x140137c60], 2
jl 0x14007b578
movdqa xmm0, xmmword [0x1401266f0]
lea rdx, [rsp + 0x34]
movdqa xmm4, xmmword [0x140126610]
movdqa xmm3, xmmword [0x140126760]
movdqa xmm5, xmmword [0x1401266b0]
movdqa xmmword [rsp + 0x20], xmm0
mov r9d, dword [rsp + 0x20]
movaps xmmword [rsp + 0x50], xmm6
movdqa xmm6, xmmword [0x1401266c0]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 8]
paddd xmm2, xmm4
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, r9d
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 0xc]
xorps xmm2, xmm0
movd dword [rdx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, r9d
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 8]
xorps xmm2, xmm0
movd dword [rdx - 8], xmm2
cmp r8d, 0x10
jl 0x14007b480
movaps xmm6, xmmword [rsp + 0x50]
cmp r8d, 0x16
jge 0x14007b5c4
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
lea r9, [r9 + 1]
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x3a
movzx eax, r8b
inc r8d
sub al, dl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x16
jl 0x14007b590
lea r8, [0x14013b7e8]
lea rdx, [rsp + 0x30]
call r10
test al, al
je 0x14007b5e6
mov rcx, rbx
add rsp, 0x60
pop rbx
jmp qword [0x14013b7e8]
xor eax, eax
add rsp, 0x60
pop rbx
ret
Function at 0x14007b5f0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x70
mov r10, qword [0x14013b810]
mov ebx, r9d
mov edi, r8d
mov esi, edx
mov ebp, ecx
test r10, r10
je 0x14007b63c
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x20], rax
call r10
jmp 0x14007b835
mov rcx, qword [0x14013b728]
xor r8d, r8d
cmp dword [0x140137c60], 2
movups xmm0, xmmword [0x1401258c8]
mov rax, qword [rcx]
movups xmmword [rsp + 0x40], xmm0
mov r10, qword [rax + 8]
movzx eax, byte [0x1401258d8]
mov byte [rsp + 0x50], al
jl 0x14007b7a8
movdqa xmm0, xmmword [0x1401266f0]
lea rdx, [rsp + 0x44]
movdqa xmm4, xmmword [0x140126610]
movdqa xmm3, xmmword [0x140126760]
movdqa xmm5, xmmword [0x1401266b0]
movdqa xmmword [rsp + 0x30], xmm0
mov r9d, dword [rsp + 0x30]
movaps xmmword [rsp + 0x60], xmm6
movdqa xmm6, xmmword [0x1401266c0]
nop
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 8]
paddd xmm2, xmm4
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, r9d
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 0xc]
xorps xmm2, xmm0
movd dword [rdx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, r9d
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 8]
xorps xmm2, xmm0
movd dword [rdx - 8], xmm2
cmp r8d, 0x10
jl 0x14007b6b0
movaps xmm6, xmmword [rsp + 0x60]
cmp r8d, 0x11
jge 0x14007b7f4
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
lea r9, [r9 + 1]
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x3a
movzx eax, r8b
inc r8d
sub al, dl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x11
jl 0x14007b7c0
lea r8, [0x14013b810]
lea rdx, [rsp + 0x40]
call r10
test al, al
je 0x14007b833
mov rax, qword [rsp + 0xa8]
mov r9d, ebx
mov qword [rsp + 0x28], rax
mov r8d, edi
mov rax, qword [rsp + 0xa0]
mov edx, esi
mov ecx, ebp
mov qword [rsp + 0x20], rax
call qword [0x14013b810]
jmp 0x14007b835
xor eax, eax
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x10]
mov rbp, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x14007b850
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x60
mov rax, qword [0x14013b800]
mov ebx, edx
mov rdi, rcx
test rax, rax
jne 0x14007ba6e
movups xmm0, xmmword [str.heWK_y_YSf]
mov rcx, qword [0x14013b728]
xor r8d, r8d
cmp dword [0x140137c60], 2
movups xmmword [rsp + 0x30], xmm0
mov rax, qword [rcx]
movsd xmm0, qword [0x140125890]
movsd qword [rsp + 0x40], xmm0
mov r10, qword [rax + 8]
mov eax, dword [0x140125898]
mov dword [rsp + 0x48], eax
movzx eax, word [0x14012589c]
mov word [rsp + 0x4c], ax
movzx eax, byte [0x14012589e]
mov byte [rsp + 0x4e], al
jl 0x14007ba08
movdqa xmm0, xmmword [0x1401266f0]
lea rdx, [rsp + 0x34]
movdqa xmm4, xmmword [0x140126610]
movdqa xmm3, xmmword [0x140126760]
movdqa xmm5, xmmword [0x1401266b0]
movdqa xmmword [rsp + 0x20], xmm0
mov r9d, dword [rsp + 0x20]
movaps xmmword [rsp + 0x50], xmm6
movdqa xmm6, xmmword [0x1401266c0]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 8]
paddd xmm2, xmm4
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, r9d
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 0xc]
xorps xmm2, xmm0
movd dword [rdx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, r9d
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 8]
xorps xmm2, xmm0
movd dword [rdx - 8], xmm2
cmp r8d, 0x18
jl 0x14007b910
movaps xmm6, xmmword [rsp + 0x50]
cmp r8d, 0x1f
jge 0x14007ba54
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
lea r9, [r9 + 1]
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x3a
movzx eax, r8b
inc r8d
sub al, dl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x1f
jl 0x14007ba20
lea r8, [0x14013b800]
lea rdx, [rsp + 0x30]
call r10
test al, al
je 0x14007ba75
mov rax, qword [0x14013b800]
mov edx, ebx
mov rcx, rdi
call rax
mov rbx, qword [rsp + 0x70]
add rsp, 0x60
pop rdi
ret
Function at 0x14007ba80
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x60
mov rax, qword [0x14013b840]
mov ebx, edx
mov rdi, rcx
test rax, rax
jne 0x14007bc9e
cmp byte [0x14012599d], 0
movups xmm0, xmmword [0x140125980]
mov rcx, qword [0x14013b728]
movups xmmword [rsp + 0x30], xmm0
mov rax, qword [rcx]
movsd xmm0, qword [0x140125990]
movsd qword [rsp + 0x40], xmm0
mov r10, qword [rax + 8]
mov eax, dword [0x140125998]
mov dword [rsp + 0x48], eax
movzx eax, word [0x14012599c]
mov word [rsp + 0x4c], ax
je 0x14007bc84
xor r8d, r8d
cmp dword [0x140137c60], 2
jl 0x14007bc38
movdqa xmm0, xmmword [0x1401266f0]
lea rdx, [rsp + 0x34]
movdqa xmm4, xmmword [0x140126610]
movdqa xmm3, xmmword [0x140126760]
movdqa xmm5, xmmword [0x1401266b0]
movdqa xmmword [rsp + 0x20], xmm0
mov r9d, dword [rsp + 0x20]
movaps xmmword [rsp + 0x50], xmm6
movdqa xmm6, xmmword [0x1401266c0]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 8]
paddd xmm2, xmm4
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, r9d
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 0xc]
xorps xmm2, xmm0
movd dword [rdx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, r9d
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 8]
xorps xmm2, xmm0
movd dword [rdx - 8], xmm2
cmp r8d, 0x18
jl 0x14007bb40
movaps xmm6, xmmword [rsp + 0x50]
cmp r8d, 0x1e
jge 0x14007bc84
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
lea r9, [r9 + 1]
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x3a
movzx eax, r8b
inc r8d
sub al, dl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x1e
jl 0x14007bc50
lea r8, [0x14013b840]
lea rdx, [rsp + 0x30]
call r10
test al, al
je 0x14007bca5
mov rax, qword [0x14013b840]
mov edx, ebx
mov rcx, rdi
call rax
mov rbx, qword [rsp + 0x70]
add rsp, 0x60
pop rdi
ret
Function at 0x14007bcb0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x60
mov rax, qword [0x14013b818]
mov ebx, edx
mov rdi, rcx
test rax, rax
jne 0x14007bebe
movups xmm0, xmmword [str.heWK_y_YSfiHi_G4]
mov rcx, qword [0x14013b728]
xor r8d, r8d
cmp dword [0x140137c60], 2
movups xmmword [rsp + 0x30], xmm0
mov rax, qword [rcx]
movsd xmm0, qword [0x140125940]
movsd qword [rsp + 0x40], xmm0
mov r10, qword [rax + 8]
movzx eax, word [0x140125948]
mov word [rsp + 0x48], ax
movzx eax, byte [0x14012594a]
mov byte [rsp + 0x4a], al
jl 0x14007be58
movdqa xmm0, xmmword [0x1401266f0]
lea rdx, [rsp + 0x34]
movdqa xmm4, xmmword [0x140126610]
movdqa xmm3, xmmword [0x140126760]
movdqa xmm5, xmmword [0x1401266b0]
movdqa xmmword [rsp + 0x20], xmm0
mov r9d, dword [rsp + 0x20]
movaps xmmword [rsp + 0x50], xmm6
movdqa xmm6, xmmword [0x1401266c0]
nop dword [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 8]
paddd xmm2, xmm4
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, r9d
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 0xc]
xorps xmm2, xmm0
movd dword [rdx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, r9d
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 8]
xorps xmm2, xmm0
movd dword [rdx - 8], xmm2
cmp r8d, 0x18
jl 0x14007bd60
movaps xmm6, xmmword [rsp + 0x50]
cmp r8d, 0x1b
jge 0x14007bea4
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
lea r9, [r9 + 1]
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x3a
movzx eax, r8b
inc r8d
sub al, dl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x14007be70
lea r8, [0x14013b818]
lea rdx, [rsp + 0x30]
call r10
test al, al
je 0x14007bec5
mov rax, qword [0x14013b818]
mov edx, ebx
mov rcx, rdi
call rax
mov rbx, qword [rsp + 0x70]
add rsp, 0x60
pop rdi
ret