joyce8/EMBER2024-capa huggingface dataset:
Function at 0x18018ac90
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xb0], 0
mov r8, rcx
je 0x18018ae08
xor eax, eax
cmp dword [0x1801a9090], 5
jl 0x18018adcf
movdqa xmm2, xmmword [0x1801a2bd0]
mov edx, 4
movdqa xmm3, xmmword [0x1801a2c20]
add rcx, 8
movdqa xmm4, xmmword [0x1801a41b0]
movdqa xmm5, xmmword [0x1801a2c40]
nop dword [rax + rax]
lea rax, [rdx - 4]
movq xmm0, rax
lea rcx, [rcx + 0x10]
punpcklqdq xmm0, xmm0
lea rax, [rdx - 2]
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm0, xmm4, xmm0
pshufb xmm0, xmm5
pmovsxbw xmm1, xmm0
movd xmm0, dword [rcx - 0x18]
xorps xmm1, xmm0
movq xmm0, rax
punpcklqdq xmm0, xmm0
lea rax, [rdx + 2]
paddq xmm0, xmm2
movd dword [rcx - 0x18], xmm1
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm0, xmm4, xmm0
pshufb xmm0, xmm5
pmovsxbw xmm1, xmm0
movd xmm0, dword [rcx - 0x14]
xorps xmm1, xmm0
movq xmm0, rdx
punpcklqdq xmm0, xmm0
add rdx, 8
paddq xmm0, xmm2
movd dword [rcx - 0x14], xmm1
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm0, xmm4, xmm0
pshufb xmm0, xmm5
pmovsxbw xmm1, xmm0
movd xmm0, dword [rcx - 0x10]
xorps xmm1, xmm0
movq xmm0, rax
punpcklqdq xmm0, xmm0
lea rax, [rdx - 4]
movd dword [rcx - 0x10], xmm1
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm0, xmm4, xmm0
pshufb xmm0, xmm5
pmovsxbw xmm1, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm1, xmm0
movd dword [rcx - 0xc], xmm1
cmp rax, 0x58
jb 0x18018ace0
mov byte [r8 + 0xb0], 0
ret
movabs r9, 0xafe3cf337f237de1
nop dword [rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
movsx ecx, dl
xor word [r8 + rax*2], cx
inc rax
cmp rax, 0x58
jb 0x18018ade0
mov byte [r8 + 0xb0], 0
ret
Function at 0x18018ae10
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x14], 0
mov r8, rcx
je 0x18018af81
xor eax, eax
cmp dword [0x1801a9090], 5
jl 0x18018af4f
movdqa xmm2, xmmword [0x1801a2bd0]
lea rdx, [rcx + 4]
movdqa xmm3, xmmword [0x1801a2c20]
mov r9, 0xfffffffffffffffe
movdqa xmm4, xmmword [0x1801a3e10]
sub r9, rcx
movdqa xmm5, xmmword [0x1801a2c40]
mov r10d, 2
sub r10, rcx
movzx ecx, word [rdx - 4]
movq xmm0, rax
punpcklqdq xmm0, xmm0
add rax, 8
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 4], cx
lea rcx, [r9 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx - 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 2], cx
mov rcx, rdx
sub rcx, r8
movq xmm0, rcx
movzx ecx, word [rdx]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx], cx
lea rcx, [r10 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx + 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx + 2], cx
add rdx, 8
cmp rax, 0x10
jb 0x18018ae63
cmp rax, 0x14
jae 0x18018af7c
movabs r9, 0x89dd65ef49e19bb9
nop dword [rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [r8 + rax], dl
inc rax
cmp rax, 0x14
jb 0x18018af60
mov byte [r8 + 0x14], 0
ret
Function at 0x18018af90
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x12], 0
mov r8, rcx
je 0x18018b101
xor eax, eax
cmp dword [0x1801a9090], 5
jl 0x18018b0cf
movdqa xmm2, xmmword [0x1801a2bd0]
lea rdx, [rcx + 4]
movdqa xmm3, xmmword [0x1801a2c20]
mov r9, 0xfffffffffffffffe
movdqa xmm4, xmmword [0x1801a3e10]
sub r9, rcx
movdqa xmm5, xmmword [0x1801a2c40]
mov r10d, 2
sub r10, rcx
movzx ecx, word [rdx - 4]
movq xmm0, rax
punpcklqdq xmm0, xmm0
add rax, 8
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 4], cx
lea rcx, [r9 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx - 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 2], cx
mov rcx, rdx
sub rcx, r8
movq xmm0, rcx
movzx ecx, word [rdx]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx], cx
lea rcx, [r10 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx + 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx + 2], cx
add rdx, 8
cmp rax, 0x10
jb 0x18018afe3
cmp rax, 0x12
jae 0x18018b0fc
movabs r9, 0x89dd65ef49e19bb9
nop dword [rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [r8 + rax], dl
inc rax
cmp rax, 0x12
jb 0x18018b0e0
mov byte [r8 + 0x12], 0
ret
Function at 0x18018b110
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x17], 0
mov r8, rcx
je 0x18018b281
xor eax, eax
cmp dword [0x1801a9090], 5
jl 0x18018b24f
movdqa xmm2, xmmword [0x1801a2bd0]
lea rdx, [rcx + 4]
movdqa xmm3, xmmword [0x1801a2c20]
mov r9, 0xfffffffffffffffe
movdqa xmm4, xmmword [0x1801a3d90]
sub r9, rcx
movdqa xmm5, xmmword [0x1801a2c40]
mov r10d, 2
sub r10, rcx
movzx ecx, word [rdx - 4]
movq xmm0, rax
punpcklqdq xmm0, xmm0
add rax, 8
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 4], cx
lea rcx, [r9 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx - 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 2], cx
mov rcx, rdx
sub rcx, r8
movq xmm0, rcx
movzx ecx, word [rdx]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx], cx
lea rcx, [r10 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx + 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx + 2], cx
add rdx, 8
cmp rax, 0x10
jb 0x18018b163
cmp rax, 0x17
jae 0x18018b27c
movabs r9, 0x855bab1b599d19f5
nop dword [rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [r8 + rax], dl
inc rax
cmp rax, 0x17
jb 0x18018b260
mov byte [r8 + 0x17], 0
ret
Function at 0x18018b290
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x1e], 0
mov r8, rcx
je 0x18018b401
xor eax, eax
cmp dword [0x1801a9090], 5
jl 0x18018b3cf
movdqa xmm2, xmmword [0x1801a2bd0]
lea rdx, [rcx + 4]
movdqa xmm3, xmmword [0x1801a2c20]
mov r9, 0xfffffffffffffffe
movdqa xmm4, xmmword [0x1801a3f90]
sub r9, rcx
movdqa xmm5, xmmword [0x1801a2c40]
mov r10d, 2
sub r10, rcx
movzx ecx, word [rdx - 4]
movq xmm0, rax
punpcklqdq xmm0, xmm0
add rax, 8
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 4], cx
lea rcx, [r9 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx - 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 2], cx
mov rcx, rdx
sub rcx, r8
movq xmm0, rcx
movzx ecx, word [rdx]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx], cx
lea rcx, [r10 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx + 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx + 2], cx
add rdx, 8
cmp rax, 0x18
jb 0x18018b2e3
cmp rax, 0x1e
jae 0x18018b3fc
movabs r9, 0x99c9b36339a13991
nop dword [rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [r8 + rax], dl
inc rax
cmp rax, 0x1e
jb 0x18018b3e0
mov byte [r8 + 0x1e], 0
ret
Function at 0x18018b410
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x15], 0
mov r8, rcx
je 0x18018b581
xor eax, eax
cmp dword [0x1801a9090], 5
jl 0x18018b54f
movdqa xmm2, xmmword [0x1801a2bd0]
lea rdx, [rcx + 4]
movdqa xmm3, xmmword [0x1801a2c20]
mov r9, 0xfffffffffffffffe
movdqa xmm4, xmmword [0x1801a3920]
sub r9, rcx
movdqa xmm5, xmmword [0x1801a2c40]
mov r10d, 2
sub r10, rcx
movzx ecx, word [rdx - 4]
movq xmm0, rax
punpcklqdq xmm0, xmm0
add rax, 8
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 4], cx
lea rcx, [r9 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx - 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 2], cx
mov rcx, rdx
sub rcx, r8
movq xmm0, rcx
movzx ecx, word [rdx]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx], cx
lea rcx, [r10 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx + 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx + 2], cx
add rdx, 8
cmp rax, 0x10
jb 0x18018b463
cmp rax, 0x15
jae 0x18018b57c
movabs r9, 0x652bf3a397759395
nop dword [rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [r8 + rax], dl
inc rax
cmp rax, 0x15
jb 0x18018b560
mov byte [r8 + 0x15], 0
ret
Function at 0x18018b590
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x24], 0
mov r8, rcx
je 0x18018b701
xor eax, eax
cmp dword [0x1801a9090], 5
jl 0x18018b6cf
movdqa xmm2, xmmword [0x1801a2bd0]
lea rdx, [rcx + 4]
movdqa xmm3, xmmword [0x1801a2c20]
mov r9, 0xfffffffffffffffe
movdqa xmm4, xmmword [0x1801a3b20]
sub r9, rcx
movdqa xmm5, xmmword [0x1801a2c40]
mov r10d, 2
sub r10, rcx
movzx ecx, word [rdx - 4]
movq xmm0, rax
punpcklqdq xmm0, xmm0
add rax, 8
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 4], cx
lea rcx, [r9 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx - 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 2], cx
mov rcx, rdx
sub rcx, r8
movq xmm0, rcx
movzx ecx, word [rdx]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx], cx
lea rcx, [r10 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx + 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx + 2], cx
add rdx, 8
cmp rax, 0x20
jb 0x18018b5e3
cmp rax, 0x24
jae 0x18018b6fc
movabs r9, 0x752f016903dba913
nop dword [rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [r8 + rax], dl
inc rax
cmp rax, 0x24
jb 0x18018b6e0
mov byte [r8 + 0x24], 0
ret
Function at 0x18018b710
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x1e], 0
mov r8, rcx
je 0x18018b881
xor eax, eax
cmp dword [0x1801a9090], 5
jl 0x18018b84f
movdqa xmm2, xmmword [0x1801a2bd0]
lea rdx, [rcx + 4]
movdqa xmm3, xmmword [0x1801a2c20]
mov r9, 0xfffffffffffffffe
movdqa xmm4, xmmword [0x1801a3c20]
sub r9, rcx
movdqa xmm5, xmmword [0x1801a2c40]
mov r10d, 2
sub r10, rcx
movzx ecx, word [rdx - 4]
movq xmm0, rax
punpcklqdq xmm0, xmm0
add rax, 8
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 4], cx
lea rcx, [r9 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx - 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 2], cx
mov rcx, rdx
sub rcx, r8
movq xmm0, rcx
movzx ecx, word [rdx]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx], cx
lea rcx, [r10 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx + 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx + 2], cx
add rdx, 8
cmp rax, 0x18
jb 0x18018b763
cmp rax, 0x1e
jae 0x18018b87c
movabs r9, 0x7bfd053919dfe721
nop dword [rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [r8 + rax], dl
inc rax
cmp rax, 0x1e
jb 0x18018b860
mov byte [r8 + 0x1e], 0
ret
Function at 0x18018b890
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x22], 0
mov r8, rcx
je 0x18018ba01
xor eax, eax
cmp dword [0x1801a9090], 5
jl 0x18018b9cf
movdqa xmm2, xmmword [0x1801a2bd0]
lea rdx, [rcx + 4]
movdqa xmm3, xmmword [0x1801a2c20]
mov r9, 0xfffffffffffffffe
movdqa xmm4, xmmword [0x1801a4970]
sub r9, rcx
movdqa xmm5, xmmword [0x1801a2c40]
mov r10d, 2
sub r10, rcx
movzx ecx, word [rdx - 4]
movq xmm0, rax
punpcklqdq xmm0, xmm0
add rax, 8
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 4], cx
lea rcx, [r9 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx - 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 2], cx
mov rcx, rdx
sub rcx, r8
movq xmm0, rcx
movzx ecx, word [rdx]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx], cx
lea rcx, [r10 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx + 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx + 2], cx
add rdx, 8
cmp rax, 0x20
jb 0x18018b8e3
cmp rax, 0x22
jae 0x18018b9fc
movabs r9, 0xfbd30f43b12339e1
nop dword [rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [r8 + rax], dl
inc rax
cmp rax, 0x22
jb 0x18018b9e0
mov byte [r8 + 0x22], 0
ret
Function at 0x18018ba10
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x17], 0
mov r8, rcx
je 0x18018bb81
xor eax, eax
cmp dword [0x1801a9090], 5
jl 0x18018bb4f
movdqa xmm2, xmmword [0x1801a2bd0]
lea rdx, [rcx + 4]
movdqa xmm3, xmmword [0x1801a2c20]
mov r9, 0xfffffffffffffffe
movdqa xmm4, xmmword [0x1801a45a0]
sub r9, rcx
movdqa xmm5, xmmword [0x1801a2c40]
mov r10d, 2
sub r10, rcx
movzx ecx, word [rdx - 4]
movq xmm0, rax
punpcklqdq xmm0, xmm0
add rax, 8
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 4], cx
lea rcx, [r9 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx - 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 2], cx
mov rcx, rdx
sub rcx, r8
movq xmm0, rcx
movzx ecx, word [rdx]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx], cx
lea rcx, [r10 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx + 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx + 2], cx
add rdx, 8
cmp rax, 0x10
jb 0x18018ba63
cmp rax, 0x17
jae 0x18018bb7c
movabs r9, 0xdd3955d9efbff58d
nop dword [rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [r8 + rax], dl
inc rax
cmp rax, 0x17
jb 0x18018bb60
mov byte [r8 + 0x17], 0
ret
Function at 0x18018bb90
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x1e], 0
mov r8, rcx
je 0x18018bd01
xor eax, eax
cmp dword [0x1801a9090], 5
jl 0x18018bccf
movdqa xmm2, xmmword [0x1801a2bd0]
lea rdx, [rcx + 4]
movdqa xmm3, xmmword [0x1801a2c20]
mov r9, 0xfffffffffffffffe
movdqa xmm4, xmmword [0x1801a2d50]
sub r9, rcx
movdqa xmm5, xmmword [0x1801a2c40]
mov r10d, 2
sub r10, rcx
movzx ecx, word [rdx - 4]
movq xmm0, rax
punpcklqdq xmm0, xmm0
add rax, 8
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 4], cx
lea rcx, [r9 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx - 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 2], cx
mov rcx, rdx
sub rcx, r8
movq xmm0, rcx
movzx ecx, word [rdx]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx], cx
lea rcx, [r10 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx + 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx + 2], cx
add rdx, 8
cmp rax, 0x18
jb 0x18018bbe3
cmp rax, 0x1e
jae 0x18018bcfc
movabs r9, 0x7ff8d773dbd4397
nop dword [rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [r8 + rax], dl
inc rax
cmp rax, 0x1e
jb 0x18018bce0
mov byte [r8 + 0x1e], 0
ret
Function at 0x18018bd10
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x1c], 0
mov r8, rcx
je 0x18018be81
xor eax, eax
cmp dword [0x1801a9090], 5
jl 0x18018be4f
movdqa xmm2, xmmword [0x1801a2bd0]
lea rdx, [rcx + 4]
movdqa xmm3, xmmword [0x1801a2c20]
mov r9, 0xfffffffffffffffe
movdqa xmm4, xmmword [0x1801a44b0]
sub r9, rcx
movdqa xmm5, xmmword [0x1801a2c40]
mov r10d, 2
sub r10, rcx
movzx ecx, word [rdx - 4]
movq xmm0, rax
punpcklqdq xmm0, xmm0
add rax, 8
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 4], cx
lea rcx, [r9 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx - 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 2], cx
mov rcx, rdx
sub rcx, r8
movq xmm0, rcx
movzx ecx, word [rdx]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx], cx
lea rcx, [r10 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx + 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx + 2], cx
add rdx, 8
cmp rax, 0x18
jb 0x18018bd63
cmp rax, 0x1c
jae 0x18018be7c
movabs r9, 0xd5b16f5727c90d07
nop dword [rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [r8 + rax], dl
inc rax
cmp rax, 0x1c
jb 0x18018be60
mov byte [r8 + 0x1c], 0
ret
Function at 0x18018be90
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x11], 0
mov r8, rcx
je 0x18018c001
xor eax, eax
cmp dword [0x1801a9090], 5
jl 0x18018bfcf
movdqa xmm2, xmmword [0x1801a2bd0]
lea rdx, [rcx + 4]
movdqa xmm3, xmmword [0x1801a2c20]
mov r9, 0xfffffffffffffffe
movdqa xmm4, xmmword [0x1801a4820]
sub r9, rcx
movdqa xmm5, xmmword [0x1801a2c40]
mov r10d, 2
sub r10, rcx
movzx ecx, word [rdx - 4]
movq xmm0, rax
punpcklqdq xmm0, xmm0
add rax, 8
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 4], cx
lea rcx, [r9 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx - 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 2], cx
mov rcx, rdx
sub rcx, r8
movq xmm0, rcx
movzx ecx, word [rdx]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx], cx
lea rcx, [r10 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx + 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx + 2], cx
add rdx, 8
cmp rax, 0x10
jb 0x18018bee3
cmp rax, 0x11
jae 0x18018bffc
movabs r9, 0xf1e90753b583fb01
nop dword [rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [r8 + rax], dl
inc rax
cmp rax, 0x11
jb 0x18018bfe0
mov byte [r8 + 0x11], 0
ret
Function at 0x18018c010
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x19], 0
mov r8, rcx
je 0x18018c181
xor eax, eax
cmp dword [0x1801a9090], 5
jl 0x18018c14f
movdqa xmm2, xmmword [0x1801a2bd0]
lea rdx, [rcx + 4]
movdqa xmm3, xmmword [0x1801a2c20]
mov r9, 0xfffffffffffffffe
movdqa xmm4, xmmword [0x1801a3120]
sub r9, rcx
movdqa xmm5, xmmword [0x1801a2c40]
mov r10d, 2
sub r10, rcx
movzx ecx, word [rdx - 4]
movq xmm0, rax
punpcklqdq xmm0, xmm0
add rax, 8
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 4], cx
lea rcx, [r9 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx - 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 2], cx
mov rcx, rdx
sub rcx, r8
movq xmm0, rcx
movzx ecx, word [rdx]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx], cx
lea rcx, [r10 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx + 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx + 2], cx
add rdx, 8
cmp rax, 0x18
jb 0x18018c063
cmp rax, 0x19
jae 0x18018c17c
movabs r9, 0x235f575351cb8319
nop dword [rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [r8 + rax], dl
inc rax
cmp rax, 0x19
jb 0x18018c160
mov byte [r8 + 0x19], 0
ret
Function at 0x18018c190
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x19], 0
mov r8, rcx
je 0x18018c301
xor eax, eax
cmp dword [0x1801a9090], 5
jl 0x18018c2cf
movdqa xmm2, xmmword [0x1801a2bd0]
lea rdx, [rcx + 4]
movdqa xmm3, xmmword [0x1801a2c20]
mov r9, 0xfffffffffffffffe
movdqa xmm4, xmmword [0x1801a4850]
sub r9, rcx
movdqa xmm5, xmmword [0x1801a2c40]
mov r10d, 2
sub r10, rcx
movzx ecx, word [rdx - 4]
movq xmm0, rax
punpcklqdq xmm0, xmm0
add rax, 8
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 4], cx
lea rcx, [r9 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx - 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 2], cx
mov rcx, rdx
sub rcx, r8
movq xmm0, rcx
movzx ecx, word [rdx]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx], cx
lea rcx, [r10 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx + 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx + 2], cx
add rdx, 8
cmp rax, 0x18
jb 0x18018c1e3
cmp rax, 0x19
jae 0x18018c2fc
movabs r9, 0xf34995d9c52d9dfd
nop dword [rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [r8 + rax], dl
inc rax
cmp rax, 0x19
jb 0x18018c2e0
mov byte [r8 + 0x19], 0
ret