joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140005600
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x17], 0
mov r8, rcx
je 0x140005771
xor eax, eax
cmp dword [0x14000e090], 5
jl 0x14000573f
movdqa xmm2, xmmword [0x14000b550]
lea rdx, [rcx + 4]
movdqa xmm3, xmmword [0x14000b590]
mov r9, 0xfffffffffffffffe
movdqa xmm4, xmmword [0x14000b960]
sub r9, rcx
movdqa xmm5, xmmword [0x14000b5a0]
mov r10d, 2
sub r10, rcx
movzx ecx, word [rdx - 4]
movq xmm0, rax
punpcklqdq xmm0, xmm0
add rax, 8
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 4], cx
lea rcx, [r9 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx - 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 2], cx
mov rcx, rdx
sub rcx, r8
movq xmm0, rcx
movzx ecx, word [rdx]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx], cx
lea rcx, [r10 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx + 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx + 2], cx
add rdx, 8
cmp rax, 0x10
jb 0x140005653
cmp rax, 0x17
jae 0x14000576c
movabs r9, 0xad63ed3d7549b775
nop dword [rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [r8 + rax], dl
inc rax
cmp rax, 0x17
jb 0x140005750
mov byte [r8 + 0x17], 0
ret

Function at 0x140005780
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xc], 0
mov r8, rcx
je 0x1400058d1
xor eax, eax
cmp dword [0x14000e090], 5
jl 0x1400058a3
movzx eax, word [rcx]
movdqa xmm5, xmmword [0x14000b8d0]
movdqa xmm4, xmmword [0x14000b5a0]
movdqa xmm3, xmmword [0x14000b550]
movdqa xmm2, xmmword [0x14000b560]
movdqa xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
pshufb xmm1, xmm4
movd xmm0, eax
xorps xmm1, xmm0
psllq xmm3, 3
movd eax, xmm1
movdqa xmm0, xmm2
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
mov word [rcx], ax
movzx eax, word [rcx + 2]
pshufb xmm1, xmm4
movd xmm0, eax
xorps xmm1, xmm0
psllq xmm2, 3
movdqa xmm0, xmmword [0x14000b570]
movd eax, xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
mov word [rcx + 2], ax
movzx eax, word [rcx + 4]
pshufb xmm1, xmm4
movd xmm0, eax
xorps xmm1, xmm0
movdqa xmm0, xmmword [0x14000b580]
movd eax, xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
mov word [rcx + 4], ax
movzx eax, word [rcx + 6]
pshufb xmm1, xmm4
movd xmm0, eax
xorps xmm1, xmm0
movd eax, xmm1
vpsrlvq xmm1, xmm5, xmm3
pshufb xmm1, xmm4
mov word [rcx + 6], ax
movzx eax, word [rcx + 8]
movd xmm0, eax
xorps xmm1, xmm0
movd eax, xmm1
vpsrlvq xmm1, xmm5, xmm2
pshufb xmm1, xmm4
mov word [rcx + 8], ax
movzx eax, word [rcx + 0xa]
movd xmm0, eax
xorps xmm1, xmm0
movd eax, xmm1
mov word [rcx + 0xa], ax
mov byte [rcx + 0xc], 0
ret
movabs r9, 0x938babc9b5d9db1d
nop dword [rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [r8 + rax], dl
inc rax
cmp rax, 0xc
jb 0x1400058b0
mov byte [r8 + 0xc], 0
ret
Function at 0x1400058e0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x10], 0
mov r8, rcx
je 0x140005a61
xor eax, eax
cmp dword [0x14000e090], 5
jl 0x140005a30
movdqa xmm2, xmmword [0x14000b550]
mov r9, 0xfffffffffffffffe
movdqa xmm3, xmmword [0x14000b590]
mov r10d, 2
movdqa xmm4, xmmword [0x14000b8b0]
sub r9, r8
movdqa xmm5, xmmword [0x14000b5a0]
sub r10, r8
add rcx, 4
mov rdx, 0xfffffffffffffffc
sub rdx, r8
nop dword [rax]
lea rax, [rdx + rcx]
movq xmm0, rax
movzx eax, word [rcx - 4]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, eax
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd eax, xmm1
mov word [rcx - 4], ax
lea rax, [r9 + rcx]
movq xmm0, rax
movzx eax, word [rcx - 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, eax
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd eax, xmm1
mov word [rcx - 2], ax
mov rax, rcx
sub rax, r8
movq xmm0, rax
movzx eax, word [rcx]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, eax
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd eax, xmm1
mov word [rcx], ax
lea rax, [r10 + rcx]
movq xmm0, rax
movzx eax, word [rcx + 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, eax
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd eax, xmm1
mov word [rcx + 2], ax
add rcx, 8
lea rax, [rdx + rcx]
cmp rax, 0x10
jb 0x140005940
mov byte [r8 + 0x10], 0
ret
movabs r9, 0x918db9e1398751e3
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [r8 + rax], dl
inc rax
cmp rax, 0x10
jb 0x140005a40
mov byte [r8 + 0x10], 0
ret
Function at 0x140005a70
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x13], 0
mov r8, rcx
je 0x140005be1
xor eax, eax
cmp dword [0x14000e090], 5
jl 0x140005baf
movdqa xmm2, xmmword [0x14000b550]
lea rdx, [rcx + 4]
movdqa xmm3, xmmword [0x14000b590]
mov r9, 0xfffffffffffffffe
movdqa xmm4, xmmword [0x14000b640]
sub r9, rcx
movdqa xmm5, xmmword [0x14000b5a0]
mov r10d, 2
sub r10, rcx
movzx ecx, word [rdx - 4]
movq xmm0, rax
punpcklqdq xmm0, xmm0
add rax, 8
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 4], cx
lea rcx, [r9 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx - 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 2], cx
mov rcx, rdx
sub rcx, r8
movq xmm0, rcx
movzx ecx, word [rdx]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx], cx
lea rcx, [r10 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx + 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx + 2], cx
add rdx, 8
cmp rax, 0x10
jb 0x140005ac3
cmp rax, 0x13
jae 0x140005bdc
movabs r9, 0x1f25313bb56143eb
nop dword [rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [r8 + rax], dl
inc rax
cmp rax, 0x13
jb 0x140005bc0
mov byte [r8 + 0x13], 0
ret
Function at 0x140005bf0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x13], 0
mov r8, rcx
je 0x140005d61
xor eax, eax
cmp dword [0x14000e090], 5
jl 0x140005d2f
movdqa xmm2, xmmword [0x14000b550]
lea rdx, [rcx + 4]
movdqa xmm3, xmmword [0x14000b590]
mov r9, 0xfffffffffffffffe
movdqa xmm4, xmmword [0x14000b830]
sub r9, rcx
movdqa xmm5, xmmword [0x14000b5a0]
mov r10d, 2
sub r10, rcx
movzx ecx, word [rdx - 4]
movq xmm0, rax
punpcklqdq xmm0, xmm0
add rax, 8
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 4], cx
lea rcx, [r9 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx - 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 2], cx
mov rcx, rdx
sub rcx, r8
movq xmm0, rcx
movzx ecx, word [rdx]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx], cx
lea rcx, [r10 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx + 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx + 2], cx
add rdx, 8
cmp rax, 0x10
jb 0x140005c43
cmp rax, 0x13
jae 0x140005d5c
movabs r9, 0x852de5ddd9dfef83
nop dword [rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [r8 + rax], dl
inc rax
cmp rax, 0x13
jb 0x140005d40
mov byte [r8 + 0x13], 0
ret
Function at 0x140005d70
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x11], 0
mov r8, rcx
je 0x140005ee1
xor eax, eax
cmp dword [0x14000e090], 5
jl 0x140005eaf
movdqa xmm2, xmmword [0x14000b550]
lea rdx, [rcx + 4]
movdqa xmm3, xmmword [0x14000b590]
mov r9, 0xfffffffffffffffe
movdqa xmm4, xmmword [0x14000b6e0]
sub r9, rcx
movdqa xmm5, xmmword [0x14000b5a0]
mov r10d, 2
sub r10, rcx
movzx ecx, word [rdx - 4]
movq xmm0, rax
punpcklqdq xmm0, xmm0
add rax, 8
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 4], cx
lea rcx, [r9 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx - 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 2], cx
mov rcx, rdx
sub rcx, r8
movq xmm0, rcx
movzx ecx, word [rdx]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx], cx
lea rcx, [r10 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx + 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx + 2], cx
add rdx, 8
cmp rax, 0x10
jb 0x140005dc3
cmp rax, 0x11
jae 0x140005edc
movabs r9, 0x4dc13fb38feb1737
nop dword [rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [r8 + rax], dl
inc rax
cmp rax, 0x11
jb 0x140005ec0
mov byte [r8 + 0x11], 0
ret
Function at 0x140005ef0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x12], 0
mov r8, rcx
je 0x140006061
xor eax, eax
cmp dword [0x14000e090], 5
jl 0x14000602f
movdqa xmm2, xmmword [0x14000b550]
lea rdx, [rcx + 4]
movdqa xmm3, xmmword [0x14000b590]
mov r9, 0xfffffffffffffffe
movdqa xmm4, xmmword [0x14000b620]
sub r9, rcx
movdqa xmm5, xmmword [0x14000b5a0]
mov r10d, 2
sub r10, rcx
movzx ecx, word [rdx - 4]
movq xmm0, rax
punpcklqdq xmm0, xmm0
add rax, 8
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 4], cx
lea rcx, [r9 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx - 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 2], cx
mov rcx, rdx
sub rcx, r8
movq xmm0, rcx
movzx ecx, word [rdx]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx], cx
lea rcx, [r10 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx + 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx + 2], cx
add rdx, 8
cmp rax, 0x10
jb 0x140005f43
cmp rax, 0x12
jae 0x14000605c
movabs r9, 0xf6b2b971f8d9361
nop dword [rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [r8 + rax], dl
inc rax
cmp rax, 0x12
jb 0x140006040
mov byte [r8 + 0x12], 0
ret
Function at 0x140006070
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x10], 0
mov r8, rcx
je 0x1400061f1
xor eax, eax
cmp dword [0x14000e090], 5
jl 0x1400061c0
movdqa xmm2, xmmword [0x14000b550]
mov r9, 0xfffffffffffffffe
movdqa xmm3, xmmword [0x14000b590]
mov r10d, 2
movdqa xmm4, xmmword [0x14000b980]
sub r9, r8
movdqa xmm5, xmmword [0x14000b5a0]
sub r10, r8
add rcx, 4
mov rdx, 0xfffffffffffffffc
sub rdx, r8
nop dword [rax]
lea rax, [rdx + rcx]
movq xmm0, rax
movzx eax, word [rcx - 4]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, eax
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd eax, xmm1
mov word [rcx - 4], ax
lea rax, [r9 + rcx]
movq xmm0, rax
movzx eax, word [rcx - 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, eax
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd eax, xmm1
mov word [rcx - 2], ax
mov rax, rcx
sub rax, r8
movq xmm0, rax
movzx eax, word [rcx]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, eax
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd eax, xmm1
mov word [rcx], ax
lea rax, [r10 + rcx]
movq xmm0, rax
movzx eax, word [rcx + 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, eax
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd eax, xmm1
mov word [rcx + 2], ax
add rcx, 8
lea rax, [rdx + rcx]
cmp rax, 0x10
jb 0x1400060d0
mov byte [r8 + 0x10], 0
ret
movabs r9, 0xb129a74f0b2f6bcb
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [r8 + rax], dl
inc rax
cmp rax, 0x10
jb 0x1400061d0
mov byte [r8 + 0x10], 0
ret
Function at 0x140006200
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x12], 0
mov r8, rcx
je 0x140006371
xor eax, eax
cmp dword [0x14000e090], 5
jl 0x14000633f
movdqa xmm2, xmmword [0x14000b550]
lea rdx, [rcx + 4]
movdqa xmm3, xmmword [0x14000b590]
mov r9, 0xfffffffffffffffe
movdqa xmm4, xmmword [0x14000b8a0]
sub r9, rcx
movdqa xmm5, xmmword [0x14000b5a0]
mov r10d, 2
sub r10, rcx
movzx ecx, word [rdx - 4]
movq xmm0, rax
punpcklqdq xmm0, xmm0
add rax, 8
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 4], cx
lea rcx, [r9 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx - 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 2], cx
mov rcx, rdx
sub rcx, r8
movq xmm0, rcx
movzx ecx, word [rdx]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx], cx
lea rcx, [r10 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx + 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx + 2], cx
add rdx, 8
cmp rax, 0x10
jb 0x140006253
cmp rax, 0x12
jae 0x14000636c
movabs r9, 0x8d8f017d7d7f3d23
nop dword [rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [r8 + rax], dl
inc rax
cmp rax, 0x12
jb 0x140006350
mov byte [r8 + 0x12], 0
ret
Function at 0x140006380
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x11], 0
mov r8, rcx
je 0x1400064f1
xor eax, eax
cmp dword [0x14000e090], 5
jl 0x1400064bf
movdqa xmm2, xmmword [0x14000b550]
lea rdx, [rcx + 4]
movdqa xmm3, xmmword [0x14000b590]
mov r9, 0xfffffffffffffffe
movdqa xmm4, xmmword [0x14000b5f0]
sub r9, rcx
movdqa xmm5, xmmword [0x14000b5a0]
mov r10d, 2
sub r10, rcx
movzx ecx, word [rdx - 4]
movq xmm0, rax
punpcklqdq xmm0, xmm0
add rax, 8
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 4], cx
lea rcx, [r9 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx - 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 2], cx
mov rcx, rdx
sub rcx, r8
movq xmm0, rcx
movzx ecx, word [rdx]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx], cx
lea rcx, [r10 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx + 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx + 2], cx
add rdx, 8
cmp rax, 0x10
jb 0x1400063d3
cmp rax, 0x11
jae 0x1400064ec
movabs r9, 0x9592b41c54dfb37
nop dword [rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [r8 + rax], dl
inc rax
cmp rax, 0x11
jb 0x1400064d0
mov byte [r8 + 0x11], 0
ret

Function at 0x140006500
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xc], 0
mov r8, rcx
je 0x140006651
xor eax, eax
cmp dword [0x14000e090], 5
jl 0x140006623
movzx eax, word [rcx]
movdqa xmm5, xmmword [0x14000ba10]
movdqa xmm4, xmmword [0x14000b5a0]
movdqa xmm3, xmmword [0x14000b550]
movdqa xmm2, xmmword [0x14000b560]
movdqa xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
pshufb xmm1, xmm4
movd xmm0, eax
xorps xmm1, xmm0
psllq xmm3, 3
movd eax, xmm1
movdqa xmm0, xmm2
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
mov word [rcx], ax
movzx eax, word [rcx + 2]
pshufb xmm1, xmm4
movd xmm0, eax
xorps xmm1, xmm0
psllq xmm2, 3
movdqa xmm0, xmmword [0x14000b570]
movd eax, xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
mov word [rcx + 2], ax
movzx eax, word [rcx + 4]
pshufb xmm1, xmm4
movd xmm0, eax
xorps xmm1, xmm0
movdqa xmm0, xmmword [0x14000b580]
movd eax, xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
mov word [rcx + 4], ax
movzx eax, word [rcx + 6]
pshufb xmm1, xmm4
movd xmm0, eax
xorps xmm1, xmm0
movd eax, xmm1
vpsrlvq xmm1, xmm5, xmm3
pshufb xmm1, xmm4
mov word [rcx + 6], ax
movzx eax, word [rcx + 8]
movd xmm0, eax
xorps xmm1, xmm0
movd eax, xmm1
vpsrlvq xmm1, xmm5, xmm2
pshufb xmm1, xmm4
mov word [rcx + 8], ax
movzx eax, word [rcx + 0xa]
movd xmm0, eax
xorps xmm1, xmm0
movd eax, xmm1
mov word [rcx + 0xa], ax
mov byte [rcx + 0xc], 0
ret
movabs r9, 0xeb995df1ff715fd1
nop dword [rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [r8 + rax], dl
inc rax
cmp rax, 0xc
jb 0x140006630
mov byte [r8 + 0xc], 0
ret
Function at 0x140006660
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x11], 0
mov r8, rcx
je 0x1400067d1
xor eax, eax
cmp dword [0x14000e090], 5
jl 0x14000679f
movdqa xmm2, xmmword [0x14000b550]
lea rdx, [rcx + 4]
movdqa xmm3, xmmword [0x14000b590]
mov r9, 0xfffffffffffffffe
movdqa xmm4, xmmword [0x14000b900]
sub r9, rcx
movdqa xmm5, xmmword [0x14000b5a0]
mov r10d, 2
sub r10, rcx
movzx ecx, word [rdx - 4]
movq xmm0, rax
punpcklqdq xmm0, xmm0
add rax, 8
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 4], cx
lea rcx, [r9 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx - 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 2], cx
mov rcx, rdx
sub rcx, r8
movq xmm0, rcx
movzx ecx, word [rdx]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx], cx
lea rcx, [r10 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx + 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx + 2], cx
add rdx, 8
cmp rax, 0x10
jb 0x1400066b3
cmp rax, 0x11
jae 0x1400067cc
movabs r9, 0x991135b13b4b4b1b
nop dword [rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [r8 + rax], dl
inc rax
cmp rax, 0x11
jb 0x1400067b0
mov byte [r8 + 0x11], 0
ret

Function at 0x1400067e0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xc], 0
mov r8, rcx
je 0x140006931
xor eax, eax
cmp dword [0x14000e090], 5
jl 0x140006903
movzx eax, word [rcx]
movdqa xmm5, xmmword [0x14000b9d0]
movdqa xmm4, xmmword [0x14000b5a0]
movdqa xmm3, xmmword [0x14000b550]
movdqa xmm2, xmmword [0x14000b560]
movdqa xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
pshufb xmm1, xmm4
movd xmm0, eax
xorps xmm1, xmm0
psllq xmm3, 3
movd eax, xmm1
movdqa xmm0, xmm2
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
mov word [rcx], ax
movzx eax, word [rcx + 2]
pshufb xmm1, xmm4
movd xmm0, eax
xorps xmm1, xmm0
psllq xmm2, 3
movdqa xmm0, xmmword [0x14000b570]
movd eax, xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
mov word [rcx + 2], ax
movzx eax, word [rcx + 4]
pshufb xmm1, xmm4
movd xmm0, eax
xorps xmm1, xmm0
movdqa xmm0, xmmword [0x14000b580]
movd eax, xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
mov word [rcx + 4], ax
movzx eax, word [rcx + 6]
pshufb xmm1, xmm4
movd xmm0, eax
xorps xmm1, xmm0
movd eax, xmm1
vpsrlvq xmm1, xmm5, xmm3
pshufb xmm1, xmm4
mov word [rcx + 6], ax
movzx eax, word [rcx + 8]
movd xmm0, eax
xorps xmm1, xmm0
movd eax, xmm1
vpsrlvq xmm1, xmm5, xmm2
pshufb xmm1, xmm4
mov word [rcx + 8], ax
movzx eax, word [rcx + 0xa]
movd xmm0, eax
xorps xmm1, xmm0
movd eax, xmm1
mov word [rcx + 0xa], ax
mov byte [rcx + 0xc], 0
ret
movabs r9, 0xcb0b4fdb6b4b3b87
nop dword [rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [r8 + rax], dl
inc rax
cmp rax, 0xc
jb 0x140006910
mov byte [r8 + 0xc], 0
ret
Function at 0x140006940
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x15], 0
mov r8, rcx
je 0x140006ab1
xor eax, eax
cmp dword [0x14000e090], 5
jl 0x140006a7f
movdqa xmm2, xmmword [0x14000b550]
lea rdx, [rcx + 4]
movdqa xmm3, xmmword [0x14000b590]
mov r9, 0xfffffffffffffffe
movdqa xmm4, xmmword [0x14000b7d0]
sub r9, rcx
movdqa xmm5, xmmword [0x14000b5a0]
mov r10d, 2
sub r10, rcx
movzx ecx, word [rdx - 4]
movq xmm0, rax
punpcklqdq xmm0, xmm0
add rax, 8
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 4], cx
lea rcx, [r9 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx - 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx - 2], cx
mov rcx, rdx
sub rcx, r8
movq xmm0, rcx
movzx ecx, word [rdx]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx], cx
lea rcx, [r10 + rdx]
movq xmm0, rcx
movzx ecx, word [rdx + 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, ecx
pshufb xmm1, xmm5
xorps xmm1, xmm0
movd ecx, xmm1
mov word [rdx + 2], cx
add rdx, 8
cmp rax, 0x10
jb 0x140006993
cmp rax, 0x15
jae 0x140006aac
movabs r9, 0x779d037fcf83bfcb
nop dword [rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [r8 + rax], dl
inc rax
cmp rax, 0x15
jb 0x140006a90
mov byte [r8 + 0x15], 0
ret