joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140005ae0
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0xf0
mov eax, 0x5a4d
mov rdi, rdx
mov r11, rcx
cmp word [rcx], ax
jne 0x140005c3d
movsxd rax, dword [rcx + 0x3c]
add rax, rcx
cmp dword [rax], 0x4550
jne 0x140005c3d
movups xmm0, xmmword [rax + 0x18]
lea r8, [rsp]
movups xmm1, xmmword [rax + 0x28]
movups xmmword [r8], xmm0
movups xmm0, xmmword [rax + 0x38]
movups xmmword [r8 + 0x10], xmm1
movups xmm1, xmmword [rax + 0x48]
movups xmmword [r8 + 0x20], xmm0
movups xmm0, xmmword [rax + 0x58]
movups xmmword [r8 + 0x30], xmm1
movups xmm1, xmmword [rax + 0x68]
movups xmmword [r8 + 0x40], xmm0
movups xmm0, xmmword [rax + 0x78]
movups xmmword [r8 + 0x50], xmm1
movups xmmword [r8 + 0x60], xmm0
lea r8, [r8 + 0x80]
movups xmm0, xmmword [rax + 0x88]
sub rax, 0xffffffffffffff68
movups xmmword [r8 - 0x10], xmm0
movups xmm1, xmmword [rax]
movups xmm0, xmmword [rax + 0x10]
movups xmmword [r8], xmm1
movups xmm1, xmmword [rax + 0x20]
movups xmmword [r8 + 0x10], xmm0
movups xmm0, xmmword [rax + 0x30]
movups xmmword [r8 + 0x20], xmm1
movups xmm1, xmmword [rax + 0x40]
movups xmmword [r8 + 0x30], xmm0
movups xmm0, xmmword [rax + 0x50]
movups xmmword [r8 + 0x40], xmm1
movups xmm1, xmmword [rax + 0x60]
movups xmmword [r8 + 0x50], xmm0
movups xmmword [r8 + 0x60], xmm1
mov eax, dword [rsp + 0x70]
xor r8d, r8d
add rax, rcx
mov r9d, dword [rax + 0x20]
mov r14d, dword [rax + 0x1c]
add r9, rcx
mov r10d, dword [rax + 0x24]
add r14, rcx
mov esi, dword [rax + 0x14]
add r10, rcx
test esi, esi
je 0x140005c3d
movzx ebp, byte [rdx]
nop word [rax + rax]
movzx eax, word [r10]
mov ecx, dword [r9]
add rcx, r11
mov ebx, dword [r14 + rax*4]
mov rax, rdi
add rbx, r11
test bpl, bpl
je 0x140005c26
nop dword [rax]
movzx edx, byte [rcx]
test dl, dl
je 0x140005c26
cmp byte [rax], dl
jne 0x140005c26
inc rax
inc rcx
cmp byte [rax], 0
jne 0x140005c10
movzx ecx, byte [rcx]
cmp byte [rax], cl
je 0x140005c5d
inc r8d
add r10, 2
add r9, 4
cmp r8d, esi
jb 0x140005bf0
xor eax, eax
lea r11, [rsp + 0xf0]
mov rbx, qword [r11 + 0x10]
mov rbp, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop r14
ret
mov rax, rbx
jmp 0x140005c3f
Function at 0x14000bb10
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x58
mov ecx, 0xe
call fcn.140063ecc
xor edx, edx
lea r11, [0x1400970f0]
cmp dword [0x140097018], 6
mov r10, rax
jl 0x14000bc45
movdqa xmm4, xmmword [0x14008b880]
lea rcx, [0x1400970fd]
add rax, 0xd
cmp r10, rcx
ja 0x14000bb58
cmp rax, r11
jae 0x14000bc45
movaps xmmword [rsp + 0x40], xmm6
movaps xmmword [rsp + 0x30], xmm7
movaps xmmword [rsp + 0x20], xmm8
movdqa xmm5, xmmword [0x14008b920]
mov r8, r10
movdqa xmm6, xmmword [0x14008b900]
sub r8, r11
movdqa xmm7, xmmword [0x14008b8d0]
mov r9d, 2
movdqa xmm8, xmmword [0x14008b8f0]
nop word [rax + rax]
movzx eax, word [r9 + r11 - 2]
lea rcx, [r9 + r11]
movq xmm2, rdx
movdqa xmm0, xmm7
punpcklqdq xmm2, xmm2
paddq xmm2, xmm4
andps xmm0, xmm2
vpmullq xmm1, xmm2, xmm5
paddq xmm1, xmm6
vpsrlvq xmm3, xmm1, xmm0
movd xmm0, eax
movq xmm1, r9
punpcklqdq xmm1, xmm1
paddq xmm1, xmm4
pshufb xmm3, xmm8
xorps xmm3, xmm0
movd eax, xmm3
vpmullq xmm0, xmm1, xmm5
paddq xmm0, xmm6
andps xmm1, xmm7
mov word [r10 + rdx], ax
add rdx, 4
movzx eax, word [r9 + r11]
add r9, 4
vpsrlvq xmm2, xmm0, xmm1
pshufb xmm2, xmm8
movd xmm0, eax
xorps xmm2, xmm0
movd eax, xmm2
mov word [rcx + r8], ax
cmp r9, 0xe
jb 0x14000bba0
movaps xmm8, xmmword [rsp + 0x20]
movaps xmm7, xmmword [rsp + 0x30]
movaps xmm6, xmmword [rsp + 0x40]
cmp rdx, 0xe
jae 0x14000bc88
mov qword [rsp + 0x50], rbx
mov r9, rdx
mov ebx, 0xdbe8981a
imul r9, rbx
add r9, 0x686fbd44
sub r11, r10
lea r8, [rdx + r10]
movzx ecx, dl
and cl, 7
mov rax, r9
shr rax, cl
inc rdx
xor al, byte [r11 + r8]
add r9, rbx
mov byte [r8], al
cmp rdx, 0xe
jb 0x14000bc60
mov rbx, qword [rsp + 0x50]
mov rax, r10
add rsp, 0x58
ret
Function at 0x14000bc90
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x40
mov rbx, rcx
mov ecx, 0x10
call fcn.140063ecc
cmp dword [0x140097018], 6
mov r10, rax
jl 0x14000bdac
movdqa xmm3, xmmword [0x14008b880]
lea rdx, [rbx + 0xf]
add rax, 0xf
cmp r10, rdx
ja 0x14000bcd1
cmp rax, rbx
jae 0x14000bdac
movaps xmmword [rsp + 0x30], xmm6
movaps xmmword [rsp + 0x20], xmm7
movdqa xmm4, xmmword [0x14008b920]
mov r8, rbx
movdqa xmm5, xmmword [0x14008b900]
sub r8, r10
movdqa xmm6, xmmword [0x14008b8d0]
mov edx, 2
movdqa xmm7, xmmword [0x14008b8f0]
nop word [rax + rax]
lea rax, [rdx - 2]
movq xmm2, rdx
movq xmm1, rax
punpcklqdq xmm2, xmm2
movzx eax, word [rbx + rdx - 2]
lea rcx, [r10 + rdx]
punpcklqdq xmm1, xmm1
paddq xmm2, xmm3
paddq xmm1, xmm3
add rdx, 4
vpmullq xmm0, xmm1, xmm4
andps xmm1, xmm6
paddq xmm0, xmm5
vpsrlvq xmm1, xmm0, xmm1
movd xmm0, eax
pshufb xmm1, xmm7
xorps xmm1, xmm0
movd eax, xmm1
vpmullq xmm0, xmm2, xmm4
paddq xmm0, xmm5
andps xmm2, xmm6
mov word [rcx - 2], ax
movzx eax, word [rcx + r8]
vpsrlvq xmm1, xmm0, xmm2
pshufb xmm1, xmm7
movd xmm0, eax
xorps xmm1, xmm0
movd eax, xmm1
mov word [rcx], ax
lea rax, [rdx - 2]
cmp rax, 0x10
jb 0x14000bd10
movaps xmm7, xmmword [rsp + 0x20]
movaps xmm6, xmmword [rsp + 0x30]
mov rax, r10
add rsp, 0x40
pop rbx
ret
sub rbx, r10
mov qword [rsp + 0x50], rdi
xor eax, eax
mov r9d, 0x686fbd44
movabs rdi, 0xe26f93ee4
mov r11d, 0xdbe8981a
nop dword [rax]
lea r8, [rax + r10]
movzx ecx, al
and cl, 7
mov rdx, r9
shr rdx, cl
inc rax
xor dl, byte [rbx + r8]
add r9, r11
mov byte [r8], dl
cmp r9, rdi
jb 0x14000bdd0
mov rdi, qword [rsp + 0x50]
mov rax, r10
add rsp, 0x40
pop rbx
ret
Function at 0x14000be00
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x50
mov rbx, rcx
mov ecx, 0x15
call fcn.140063ecc
xor edx, edx
mov r10, rax
cmp dword [0x140097018], 6
jl 0x14000bf22
movdqa xmm4, xmmword [0x14008b880]
lea rcx, [rbx + 0x14]
add rax, 0x14
cmp r10, rcx
ja 0x14000be43
cmp rax, rbx
jae 0x14000bf22
movaps xmmword [rsp + 0x40], xmm6
movaps xmmword [rsp + 0x30], xmm7
movaps xmmword [rsp + 0x20], xmm8
movdqa xmm5, xmmword [0x14008b920]
mov r8, rbx
movdqa xmm6, xmmword [0x14008b900]
sub r8, r10
movdqa xmm7, xmmword [0x14008b8d0]
mov r9d, 2
movdqa xmm8, xmmword [0x14008b8f0]
movzx eax, word [rbx + r9 - 2]
lea rcx, [r10 + r9]
movq xmm2, rdx
movdqa xmm0, xmm7
punpcklqdq xmm2, xmm2
add rdx, 4
paddq xmm2, xmm4
andps xmm0, xmm2
vpmullq xmm1, xmm2, xmm5
paddq xmm1, xmm6
vpsrlvq xmm3, xmm1, xmm0
movd xmm0, eax
movq xmm1, r9
punpcklqdq xmm1, xmm1
add r9, 4
paddq xmm1, xmm4
pshufb xmm3, xmm8
xorps xmm3, xmm0
movd eax, xmm3
vpmullq xmm0, xmm1, xmm5
paddq xmm0, xmm6
andps xmm1, xmm7
mov word [rcx - 2], ax
movzx eax, word [rcx + r8]
vpsrlvq xmm2, xmm0, xmm1
pshufb xmm2, xmm8
movd xmm0, eax
xorps xmm2, xmm0
movd eax, xmm2
mov word [rcx], ax
cmp r9, 0x16
jb 0x14000be80
movaps xmm8, xmmword [rsp + 0x20]
movaps xmm7, xmmword [rsp + 0x30]
movaps xmm6, xmmword [rsp + 0x40]
cmp rdx, 0x15
jae 0x14000bf63
mov r11d, 0xdbe8981a
mov r9, rdx
imul r9, r11
add r9, 0x686fbd44
sub rbx, r10
nop dword [rax]
lea r8, [rdx + r10]
movzx ecx, dl
and cl, 7
mov rax, r9
shr rax, cl
inc rdx
xor al, byte [rbx + r8]
add r9, r11
mov byte [r8], al
cmp rdx, 0x15
jb 0x14000bf40
mov rax, r10
add rsp, 0x50
pop rbx
ret
Function at 0x14000bf70
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x50
mov rbx, rcx
mov ecx, 0x11
call fcn.140063ecc
xor edx, edx
mov r10, rax
cmp dword [0x140097018], 6
jl 0x14000c092
movdqa xmm4, xmmword [0x14008b880]
lea rcx, [rbx + 0x10]
add rax, 0x10
cmp r10, rcx
ja 0x14000bfb3
cmp rax, rbx
jae 0x14000c092
movaps xmmword [rsp + 0x40], xmm6
movaps xmmword [rsp + 0x30], xmm7
movaps xmmword [rsp + 0x20], xmm8
movdqa xmm5, xmmword [0x14008b920]
mov r8, rbx
movdqa xmm6, xmmword [0x14008b900]
sub r8, r10
movdqa xmm7, xmmword [0x14008b8d0]
mov r9d, 2
movdqa xmm8, xmmword [0x14008b8f0]
movzx eax, word [rbx + r9 - 2]
lea rcx, [r10 + r9]
movq xmm2, rdx
movdqa xmm0, xmm7
punpcklqdq xmm2, xmm2
add rdx, 4
paddq xmm2, xmm4
andps xmm0, xmm2
vpmullq xmm1, xmm2, xmm5
paddq xmm1, xmm6
vpsrlvq xmm3, xmm1, xmm0
movd xmm0, eax
movq xmm1, r9
punpcklqdq xmm1, xmm1
add r9, 4
paddq xmm1, xmm4
pshufb xmm3, xmm8
xorps xmm3, xmm0
movd eax, xmm3
vpmullq xmm0, xmm1, xmm5
paddq xmm0, xmm6
andps xmm1, xmm7
mov word [rcx - 2], ax
movzx eax, word [rcx + r8]
vpsrlvq xmm2, xmm0, xmm1
pshufb xmm2, xmm8
movd xmm0, eax
xorps xmm2, xmm0
movd eax, xmm2
mov word [rcx], ax
cmp r9, 0x12
jb 0x14000bff0
movaps xmm8, xmmword [rsp + 0x20]
movaps xmm7, xmmword [rsp + 0x30]
movaps xmm6, xmmword [rsp + 0x40]
cmp rdx, 0x11
jae 0x14000c0d3
mov r11d, 0xdbe8981a
mov r9, rdx
imul r9, r11
add r9, 0x686fbd44
sub rbx, r10
nop dword [rax]
lea r8, [rdx + r10]
movzx ecx, dl
and cl, 7
mov rax, r9
shr rax, cl
inc rdx
xor al, byte [rbx + r8]
add r9, r11
mov byte [r8], al
cmp rdx, 0x11
jb 0x14000c0b0
mov rax, r10
add rsp, 0x50
pop rbx
ret
Function at 0x14000c0e0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x58
mov ecx, 0x29
call fcn.140063ecc
xor edx, edx
lea r11, [0x140097498]
cmp dword [0x140097018], 6
mov r10, rax
jl 0x14000c215
movdqa xmm4, xmmword [0x14008b880]
lea rcx, [0x1400974c0]
add rax, 0x28
cmp r10, rcx
ja 0x14000c128
cmp rax, r11
jae 0x14000c215
movaps xmmword [rsp + 0x40], xmm6
movaps xmmword [rsp + 0x30], xmm7
movaps xmmword [rsp + 0x20], xmm8
movdqa xmm5, xmmword [0x14008b920]
mov r8, r10
movdqa xmm6, xmmword [0x14008b900]
sub r8, r11
movdqa xmm7, xmmword [0x14008b8d0]
mov r9d, 2
movdqa xmm8, xmmword [0x14008b8f0]
nop word [rax + rax]
movzx eax, word [r9 + r11 - 2]
lea rcx, [r9 + r11]
movq xmm2, rdx
movdqa xmm0, xmm7
punpcklqdq xmm2, xmm2
paddq xmm2, xmm4
andps xmm0, xmm2
vpmullq xmm1, xmm2, xmm5
paddq xmm1, xmm6
vpsrlvq xmm3, xmm1, xmm0
movd xmm0, eax
movq xmm1, r9
punpcklqdq xmm1, xmm1
paddq xmm1, xmm4
pshufb xmm3, xmm8
xorps xmm3, xmm0
movd eax, xmm3
vpmullq xmm0, xmm1, xmm5
paddq xmm0, xmm6
andps xmm1, xmm7
mov word [r10 + rdx], ax
add rdx, 4
movzx eax, word [r9 + r11]
add r9, 4
vpsrlvq xmm2, xmm0, xmm1
pshufb xmm2, xmm8
movd xmm0, eax
xorps xmm2, xmm0
movd eax, xmm2
mov word [rcx + r8], ax
cmp r9, 0x2a
jb 0x14000c170
movaps xmm8, xmmword [rsp + 0x20]
movaps xmm7, xmmword [rsp + 0x30]
movaps xmm6, xmmword [rsp + 0x40]
cmp rdx, 0x29
jae 0x14000c258
mov qword [rsp + 0x50], rbx
mov r9, rdx
mov ebx, 0xdbe8981a
imul r9, rbx
add r9, 0x686fbd44
sub r11, r10
lea r8, [rdx + r10]
movzx ecx, dl
and cl, 7
mov rax, r9
shr rax, cl
inc rdx
xor al, byte [r11 + r8]
add r9, rbx
mov byte [r8], al
cmp rdx, 0x29
jb 0x14000c230
mov rbx, qword [rsp + 0x50]
mov rax, r10
add rsp, 0x58
ret
Function at 0x14000c260
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x58
mov ecx, 0x18
call fcn.140063ecc
xor edx, edx
lea r11, [0x140097480]
cmp dword [0x140097018], 6
mov r10, rax
jl 0x14000c397
movdqa xmm4, xmmword [0x14008b880]
lea rcx, [0x140097497]
add rax, 0x17
cmp r10, rcx
ja 0x14000c2a8
cmp rax, r11
jae 0x14000c397
movaps xmmword [rsp + 0x40], xmm6
movaps xmmword [rsp + 0x30], xmm7
movaps xmmword [rsp + 0x20], xmm8
movdqa xmm5, xmmword [0x14008b920]
mov r8, r10
movdqa xmm6, xmmword [0x14008b900]
sub r8, r11
movdqa xmm7, xmmword [0x14008b8d0]
mov r9d, 2
movdqa xmm8, xmmword [0x14008b8f0]
nop word [rax + rax]
movzx eax, word [r9 + r11 - 2]
lea rcx, [r9 + r11]
movq xmm2, rdx
movdqa xmm0, xmm7
punpcklqdq xmm2, xmm2
paddq xmm2, xmm4
andps xmm0, xmm2
vpmullq xmm1, xmm2, xmm5
paddq xmm1, xmm6
vpsrlvq xmm3, xmm1, xmm0
movd xmm0, eax
movq xmm1, r9
punpcklqdq xmm1, xmm1
paddq xmm1, xmm4
pshufb xmm3, xmm8
xorps xmm3, xmm0
movd eax, xmm3
vpmullq xmm0, xmm1, xmm5
paddq xmm0, xmm6
andps xmm1, xmm7
mov word [r10 + rdx], ax
add rdx, 4
movzx eax, word [r9 + r11]
add r9, 4
vpsrlvq xmm2, xmm0, xmm1
pshufb xmm2, xmm8
movd xmm0, eax
xorps xmm2, xmm0
movd eax, xmm2
mov word [rcx + r8], ax
cmp r9, 0x1a
jb 0x14000c2f0
movaps xmm8, xmmword [rsp + 0x20]
movaps xmm7, xmmword [rsp + 0x30]
movaps xmm6, xmmword [rsp + 0x40]
mov rax, r10
add rsp, 0x58
ret
mov qword [rsp + 0x60], rbx
mov r9d, 0x686fbd44
mov qword [rsp + 0x50], rdi
sub r11, r10
movabs rdi, 0x15063dffb4
mov ebx, 0xdbe8981a
nop dword [rax]
lea r8, [rdx + r10]
movzx ecx, dl
and cl, 7
mov rax, r9
shr rax, cl
inc rdx
xor al, byte [r11 + r8]
add r9, rbx
mov byte [r8], al
cmp r9, rdi
jb 0x14000c3c0
mov rdi, qword [rsp + 0x50]
mov rax, r10
mov rbx, qword [rsp + 0x60]
add rsp, 0x58
ret
Function at 0x14000c400
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x40
mov rbx, rcx
mov ecx, 0x20
call fcn.140063ecc
cmp dword [0x140097018], 6
mov r10, rax
jl 0x14000c51c
movdqa xmm3, xmmword [0x14008b880]
lea rdx, [rbx + 0x1f]
add rax, 0x1f
cmp r10, rdx
ja 0x14000c441
cmp rax, rbx
jae 0x14000c51c
movaps xmmword [rsp + 0x30], xmm6
movaps xmmword [rsp + 0x20], xmm7
movdqa xmm4, xmmword [0x14008b920]
mov r8, rbx
movdqa xmm5, xmmword [0x14008b900]
sub r8, r10
movdqa xmm6, xmmword [0x14008b8d0]
mov edx, 2
movdqa xmm7, xmmword [0x14008b8f0]
nop word [rax + rax]
lea rax, [rdx - 2]
movq xmm2, rdx
movq xmm1, rax
punpcklqdq xmm2, xmm2
movzx eax, word [rbx + rdx - 2]
lea rcx, [r10 + rdx]
punpcklqdq xmm1, xmm1
paddq xmm2, xmm3
paddq xmm1, xmm3
add rdx, 4
vpmullq xmm0, xmm1, xmm4
andps xmm1, xmm6
paddq xmm0, xmm5
vpsrlvq xmm1, xmm0, xmm1
movd xmm0, eax
pshufb xmm1, xmm7
xorps xmm1, xmm0
movd eax, xmm1
vpmullq xmm0, xmm2, xmm4
paddq xmm0, xmm5
andps xmm2, xmm6
mov word [rcx - 2], ax
movzx eax, word [rcx + r8]
vpsrlvq xmm1, xmm0, xmm2
pshufb xmm1, xmm7
movd xmm0, eax
xorps xmm1, xmm0
movd eax, xmm1
mov word [rcx], ax
lea rax, [rdx - 2]
cmp rax, 0x20
jb 0x14000c480
movaps xmm7, xmmword [rsp + 0x20]
movaps xmm6, xmmword [rsp + 0x30]
mov rax, r10
add rsp, 0x40
pop rbx
ret
sub rbx, r10
mov qword [rsp + 0x50], rdi
xor eax, eax
mov r9d, 0x686fbd44
movabs rdi, 0x1be582c084
mov r11d, 0xdbe8981a
nop dword [rax]
lea r8, [rax + r10]
movzx ecx, al
and cl, 7
mov rdx, r9
shr rdx, cl
inc rax
xor dl, byte [rbx + r8]
add r9, r11
mov byte [r8], dl
cmp r9, rdi
jb 0x14000c540
mov rdi, qword [rsp + 0x50]
mov rax, r10
add rsp, 0x40
pop rbx
ret
Function at 0x14000c570
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x40
mov rbx, rcx
mov ecx, 0x24
call fcn.140063ecc
cmp dword [0x140097018], 6
mov r10, rax
jl 0x14000c68c
movdqa xmm3, xmmword [0x14008b880]
lea rdx, [rbx + 0x23]
add rax, 0x23
cmp r10, rdx
ja 0x14000c5b1
cmp rax, rbx
jae 0x14000c68c
movaps xmmword [rsp + 0x30], xmm6
movaps xmmword [rsp + 0x20], xmm7
movdqa xmm4, xmmword [0x14008b920]
mov r8, rbx
movdqa xmm5, xmmword [0x14008b900]
sub r8, r10
movdqa xmm6, xmmword [0x14008b8d0]
mov edx, 2
movdqa xmm7, xmmword [0x14008b8f0]
nop word [rax + rax]
lea rax, [rdx - 2]
movq xmm2, rdx
movq xmm1, rax
punpcklqdq xmm2, xmm2
movzx eax, word [rbx + rdx - 2]
lea rcx, [r10 + rdx]
punpcklqdq xmm1, xmm1
paddq xmm2, xmm3
paddq xmm1, xmm3
add rdx, 4
vpmullq xmm0, xmm1, xmm4
andps xmm1, xmm6
paddq xmm0, xmm5
vpsrlvq xmm1, xmm0, xmm1
movd xmm0, eax
pshufb xmm1, xmm7
xorps xmm1, xmm0
movd eax, xmm1
vpmullq xmm0, xmm2, xmm4
paddq xmm0, xmm5
andps xmm2, xmm6
mov word [rcx - 2], ax
movzx eax, word [rcx + r8]
vpsrlvq xmm1, xmm0, xmm2
pshufb xmm1, xmm7
movd xmm0, eax
xorps xmm1, xmm0
movd eax, xmm1
mov word [rcx], ax
lea rax, [rdx - 2]
cmp rax, 0x24
jb 0x14000c5f0
movaps xmm7, xmmword [rsp + 0x20]
movaps xmm6, xmmword [rsp + 0x30]
mov rax, r10
add rsp, 0x40
pop rbx
ret
sub rbx, r10
mov qword [rsp + 0x50], rdi
xor eax, eax
mov r9d, 0x686fbd44
movabs rdi, 0x1f552520ec
mov r11d, 0xdbe8981a
nop dword [rax]
lea r8, [rax + r10]
movzx ecx, al
and cl, 7
mov rdx, r9
shr rdx, cl
inc rax
xor dl, byte [rbx + r8]
add r9, r11
mov byte [r8], dl
cmp r9, rdi
jb 0x14000c6b0
mov rdi, qword [rsp + 0x50]
mov rax, r10
add rsp, 0x40
pop rbx
ret
Function at 0x14000c6e0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x58
mov ecx, 0x13
call fcn.140063ecc
xor edx, edx
lea r11, [0x140097430]
cmp dword [0x140097018], 6
mov r10, rax
jl 0x14000c815
movdqa xmm4, xmmword [0x14008b880]
lea rcx, [0x140097442]
add rax, 0x12
cmp r10, rcx
ja 0x14000c728
cmp rax, r11
jae 0x14000c815
movaps xmmword [rsp + 0x40], xmm6
movaps xmmword [rsp + 0x30], xmm7
movaps xmmword [rsp + 0x20], xmm8
movdqa xmm5, xmmword [0x14008b920]
mov r8, r10
movdqa xmm6, xmmword [0x14008b900]
sub r8, r11
movdqa xmm7, xmmword [0x14008b8d0]
mov r9d, 2
movdqa xmm8, xmmword [0x14008b8f0]
nop word [rax + rax]
movzx eax, word [r9 + r11 - 2]
lea rcx, [r9 + r11]
movq xmm2, rdx
movdqa xmm0, xmm7
punpcklqdq xmm2, xmm2
paddq xmm2, xmm4
andps xmm0, xmm2
vpmullq xmm1, xmm2, xmm5
paddq xmm1, xmm6
vpsrlvq xmm3, xmm1, xmm0
movd xmm0, eax
movq xmm1, r9
punpcklqdq xmm1, xmm1
paddq xmm1, xmm4
pshufb xmm3, xmm8
xorps xmm3, xmm0
movd eax, xmm3
vpmullq xmm0, xmm1, xmm5
paddq xmm0, xmm6
andps xmm1, xmm7
mov word [r10 + rdx], ax
add rdx, 4
movzx eax, word [r9 + r11]
add r9, 4
vpsrlvq xmm2, xmm0, xmm1
pshufb xmm2, xmm8
movd xmm0, eax
xorps xmm2, xmm0
movd eax, xmm2
mov word [rcx + r8], ax
cmp r9, 0x12
jb 0x14000c770
movaps xmm8, xmmword [rsp + 0x20]
movaps xmm7, xmmword [rsp + 0x30]
movaps xmm6, xmmword [rsp + 0x40]
cmp rdx, 0x13
jae 0x14000c858
mov qword [rsp + 0x50], rbx
mov r9, rdx
mov ebx, 0xdbe8981a
imul r9, rbx
add r9, 0x686fbd44
sub r11, r10
lea r8, [rdx + r10]
movzx ecx, dl
and cl, 7
mov rax, r9
shr rax, cl
inc rdx
xor al, byte [r11 + r8]
add r9, rbx
mov byte [r8], al
cmp rdx, 0x13
jb 0x14000c830
mov rbx, qword [rsp + 0x50]
mov rax, r10
add rsp, 0x58
ret
Function at 0x14000c860
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x58
mov ecx, 0x14
call fcn.140063ecc
xor edx, edx
lea r11, [0x1400974e8]
cmp dword [0x140097018], 6
mov r10, rax
jl 0x14000c997
movdqa xmm4, xmmword [0x14008b880]
lea rcx, [0x1400974fb]
add rax, 0x13
cmp r10, rcx
ja 0x14000c8a8
cmp rax, r11
jae 0x14000c997
movaps xmmword [rsp + 0x40], xmm6
movaps xmmword [rsp + 0x30], xmm7
movaps xmmword [rsp + 0x20], xmm8
movdqa xmm5, xmmword [0x14008b920]
mov r8, r10
movdqa xmm6, xmmword [0x14008b900]
sub r8, r11
movdqa xmm7, xmmword [0x14008b8d0]
mov r9d, 2
movdqa xmm8, xmmword [0x14008b8f0]
nop word [rax + rax]
movzx eax, word [r9 + r11 - 2]
lea rcx, [r9 + r11]
movq xmm2, rdx
movdqa xmm0, xmm7
punpcklqdq xmm2, xmm2
paddq xmm2, xmm4
andps xmm0, xmm2
vpmullq xmm1, xmm2, xmm5
paddq xmm1, xmm6
vpsrlvq xmm3, xmm1, xmm0
movd xmm0, eax
movq xmm1, r9
punpcklqdq xmm1, xmm1
paddq xmm1, xmm4
pshufb xmm3, xmm8
xorps xmm3, xmm0
movd eax, xmm3
vpmullq xmm0, xmm1, xmm5
paddq xmm0, xmm6
andps xmm1, xmm7
mov word [r10 + rdx], ax
add rdx, 4
movzx eax, word [r9 + r11]
add r9, 4
vpsrlvq xmm2, xmm0, xmm1
pshufb xmm2, xmm8
movd xmm0, eax
xorps xmm2, xmm0
movd eax, xmm2
mov word [rcx + r8], ax
cmp r9, 0x16
jb 0x14000c8f0
movaps xmm8, xmmword [rsp + 0x20]
movaps xmm7, xmmword [rsp + 0x30]
movaps xmm6, xmmword [rsp + 0x40]
mov rax, r10
add rsp, 0x58
ret
mov qword [rsp + 0x60], rbx
mov r9d, 0x686fbd44
mov qword [rsp + 0x50], rdi
sub r11, r10
movabs rdi, 0x11969b9f4c
mov ebx, 0xdbe8981a
nop dword [rax]
lea r8, [rdx + r10]
movzx ecx, dl
and cl, 7
mov rax, r9
shr rax, cl
inc rdx
xor al, byte [r11 + r8]
add r9, rbx
mov byte [r8], al
cmp r9, rdi
jb 0x14000c9c0
mov rdi, qword [rsp + 0x50]
mov rax, r10
mov rbx, qword [rsp + 0x60]
add rsp, 0x58
ret
Function at 0x14000ca00
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x50
mov rbx, rcx
mov ecx, 0xf
call fcn.140063ecc
xor edx, edx
mov r10, rax
cmp dword [0x140097018], 6
jl 0x14000cb22
movdqa xmm4, xmmword [0x14008b880]
lea rcx, [rbx + 0xe]
add rax, 0xe
cmp r10, rcx
ja 0x14000ca43
cmp rax, rbx
jae 0x14000cb22
movaps xmmword [rsp + 0x40], xmm6
movaps xmmword [rsp + 0x30], xmm7
movaps xmmword [rsp + 0x20], xmm8
movdqa xmm5, xmmword [0x14008b920]
mov r8, rbx
movdqa xmm6, xmmword [0x14008b900]
sub r8, r10
movdqa xmm7, xmmword [0x14008b8d0]
mov r9d, 2
movdqa xmm8, xmmword [0x14008b8f0]
movzx eax, word [rbx + r9 - 2]
lea rcx, [r10 + r9]
movq xmm2, rdx
movdqa xmm0, xmm7
punpcklqdq xmm2, xmm2
add rdx, 4
paddq xmm2, xmm4
andps xmm0, xmm2
vpmullq xmm1, xmm2, xmm5
paddq xmm1, xmm6
vpsrlvq xmm3, xmm1, xmm0
movd xmm0, eax
movq xmm1, r9
punpcklqdq xmm1, xmm1
add r9, 4
paddq xmm1, xmm4
pshufb xmm3, xmm8
xorps xmm3, xmm0
movd eax, xmm3
vpmullq xmm0, xmm1, xmm5
paddq xmm0, xmm6
andps xmm1, xmm7
mov word [rcx - 2], ax
movzx eax, word [rcx + r8]
vpsrlvq xmm2, xmm0, xmm1
pshufb xmm2, xmm8
movd xmm0, eax
xorps xmm2, xmm0
movd eax, xmm2
mov word [rcx], ax
cmp r9, 0xe
jb 0x14000ca80
movaps xmm8, xmmword [rsp + 0x20]
movaps xmm7, xmmword [rsp + 0x30]
movaps xmm6, xmmword [rsp + 0x40]
cmp rdx, 0xf
jae 0x14000cb63
mov r11d, 0xdbe8981a
mov r9, rdx
imul r9, r11
add r9, 0x686fbd44
sub rbx, r10
nop dword [rax]
lea r8, [rdx + r10]
movzx ecx, dl
and cl, 7
mov rax, r9
shr rax, cl
inc rdx
xor al, byte [rbx + r8]
add r9, r11
mov byte [r8], al
cmp rdx, 0xf
jb 0x14000cb40
mov rax, r10
add rsp, 0x50
pop rbx
ret
Function at 0x14000cb70
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov ecx, 0xc
call fcn.140063ecc
cmp dword [0x140097018], 6
mov r10, rax
jl 0x14000ccb4
add rax, 0xb
lea rdx, [rbx + 0xb]
cmp r10, rdx
ja 0x14000cba9
cmp rax, rbx
jae 0x14000ccb4
movdqa xmm4, xmmword [0x14008b8f0]
movdqa xmm0, xmmword [0x14008b940]
vpsrlvq xmm1, xmm0, xmmword [0x14008b880]
movzx eax, word [rbx]
pshufb xmm1, xmm4
movd xmm0, eax
xorps xmm1, xmm0
movdqa xmm0, xmmword [0x14008b960]
movd eax, xmm1
vpsrlvq xmm1, xmm0, xmmword [0x14008b8a0]
pshufb xmm1, xmm4
mov word [r10], ax
movzx eax, word [rbx + 2]
movd xmm0, eax
xorps xmm1, xmm0
movdqa xmm0, xmmword [0x14008b980]
movd eax, xmm1
vpsrlvq xmm1, xmm0, xmmword [0x14008b8b0]
pshufb xmm1, xmm4
mov word [r10 + 2], ax
movzx eax, word [rbx + 4]
movd xmm0, eax
xorps xmm1, xmm0
movdqa xmm0, xmmword [0x14008b9a0]
movd eax, xmm1
vpsrlvq xmm1, xmm0, xmmword [0x14008b8c0]
pshufb xmm1, xmm4
mov word [r10 + 4], ax
movzx eax, word [rbx + 6]
movd xmm0, eax
xorps xmm1, xmm0
movdqa xmm0, xmmword [0x14008b9d0]
movd eax, xmm1
vpsrlvq xmm1, xmm0, xmmword [0x14008b880]
pshufb xmm1, xmm4
mov word [r10 + 6], ax
movzx eax, word [rbx + 8]
movd xmm0, eax
xorps xmm1, xmm0
movdqa xmm0, xmmword [0x14008b9e0]
movd eax, xmm1
vpsrlvq xmm1, xmm0, xmmword [0x14008b8a0]
pshufb xmm1, xmm4
mov word [r10 + 8], ax
movzx eax, word [rbx + 0xa]
movd xmm0, eax
xorps xmm1, xmm0
movd eax, xmm1
mov word [r10 + 0xa], ax
mov rax, r10
add rsp, 0x20
pop rbx
ret
sub rbx, r10
mov qword [rsp + 0x30], rdi
xor eax, eax
mov r9d, 0x686fbd44
movabs rdi, 0xab756de7c
mov r11d, 0xdbe8981a
nop dword [rax]
nop dword [rax + rax]
lea r8, [rax + r10]
movzx ecx, al
and cl, 7
mov rdx, r9
shr rdx, cl
inc rax
xor dl, byte [r8 + rbx]
add r9, r11
mov byte [r8], dl
cmp r9, rdi
jb 0x14000cce0
mov rdi, qword [rsp + 0x30]
mov rax, r10
add rsp, 0x20
pop rbx
ret