joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400799c0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x28
xor r8d, r8d
mov r10, rdx
cmp dword [0x14017b090], 2
jl 0x140079b46
movdqa xmm5, xmmword [0x140160460]
lea rax, [r10 + 0x22]
lea rdx, [rcx + 0x22]
cmp rcx, rax
ja 0x1400799f5
cmp rdx, r10
jae 0x140079b46
movaps xmmword [rsp + 0x10], xmm6
movdqa xmm0, xmmword [0x140160560]
lea r9, [rcx + 4]
movdqa xmm4, xmmword [0x140160550]
mov rdx, r10
movdqa xmm6, xmmword [0x140160490]
sub rdx, rcx
movdqa xmmword [rsp], xmm0
mov r11d, dword [rsp]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea r9, [r9 + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
mov eax, r8d
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x140160540]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, r11d
paddb xmm2, xmm0
movd xmm0, dword [rdx + r9 - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [r9 - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, r11d
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140160540]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx + r9 - 8]
xorps xmm2, xmm0
movd dword [r9 - 8], xmm2
cmp r8d, 0x20
jl 0x140079a30
movaps xmm6, xmmword [rsp + 0x10]
cmp eax, 0x23
jge 0x140079b85
movsxd r9, r8d
add r9, rcx
sub r10, rcx
nop
mov eax, 0x94f2095
lea r9, [r9 + 1]
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x3a
xor al, byte [r10 + r9 - 1]
mov byte [r9 - 1], al
cmp r8d, 0x23
jl 0x140079b50
add rsp, 0x28
ret
Function at 0x140079b90
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x28
xor r8d, r8d
mov r10, rdx
cmp dword [0x14017b090], 2
jl 0x140079d16
movdqa xmm5, xmmword [0x140160460]
lea rax, [r10 + 0x1a]
lea rdx, [rcx + 0x1a]
cmp rcx, rax
ja 0x140079bc5
cmp rdx, r10
jae 0x140079d16
movaps xmmword [rsp + 0x10], xmm6
movdqa xmm0, xmmword [0x140160560]
lea r9, [rcx + 4]
movdqa xmm4, xmmword [0x140160550]
mov rdx, r10
movdqa xmm6, xmmword [0x140160490]
sub rdx, rcx
movdqa xmmword [rsp], xmm0
mov r11d, dword [rsp]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea r9, [r9 + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
mov eax, r8d
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x140160540]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, r11d
paddb xmm2, xmm0
movd xmm0, dword [rdx + r9 - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [r9 - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, r11d
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140160540]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx + r9 - 8]
xorps xmm2, xmm0
movd dword [r9 - 8], xmm2
cmp r8d, 0x18
jl 0x140079c00
movaps xmm6, xmmword [rsp + 0x10]
cmp eax, 0x1b
jge 0x140079d55
movsxd r9, r8d
add r9, rcx
sub r10, rcx
nop
mov eax, 0x94f2095
lea r9, [r9 + 1]
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x3a
xor al, byte [r10 + r9 - 1]
mov byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x140079d20
add rsp, 0x28
ret
Function at 0x140079d60
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x28
xor r8d, r8d
mov r10, rdx
cmp dword [0x14017b090], 2
jl 0x140079ee6
movdqa xmm5, xmmword [0x140160460]
lea rax, [r10 + 0x33]
lea rdx, [rcx + 0x33]
cmp rcx, rax
ja 0x140079d95
cmp rdx, r10
jae 0x140079ee6
movaps xmmword [rsp + 0x10], xmm6
movdqa xmm0, xmmword [0x140160560]
lea r9, [rcx + 4]
movdqa xmm4, xmmword [0x140160550]
mov rdx, r10
movdqa xmm6, xmmword [0x140160490]
sub rdx, rcx
movdqa xmmword [rsp], xmm0
mov r11d, dword [rsp]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea r9, [r9 + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
mov eax, r8d
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x140160540]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, r11d
paddb xmm2, xmm0
movd xmm0, dword [rdx + r9 - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [r9 - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, r11d
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140160540]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx + r9 - 8]
xorps xmm2, xmm0
movd dword [r9 - 8], xmm2
cmp r8d, 0x30
jl 0x140079dd0
movaps xmm6, xmmword [rsp + 0x10]
cmp eax, 0x34
jge 0x140079f25
movsxd r9, r8d
add r9, rcx
sub r10, rcx
nop
mov eax, 0x94f2095
lea r9, [r9 + 1]
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x3a
xor al, byte [r10 + r9 - 1]
mov byte [r9 - 1], al
cmp r8d, 0x34
jl 0x140079ef0
add rsp, 0x28
ret
Function at 0x140079f30
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x28
xor r8d, r8d
mov r10, rdx
cmp dword [0x14017b090], 2
jl 0x14007a0b6
movdqa xmm5, xmmword [0x140160460]
lea rax, [r10 + 0x50]
lea rdx, [rcx + 0x50]
cmp rcx, rax
ja 0x140079f65
cmp rdx, r10
jae 0x14007a0b6
movaps xmmword [rsp + 0x10], xmm6
movdqa xmm0, xmmword [0x140160560]
lea r9, [rcx + 4]
movdqa xmm4, xmmword [0x140160550]
mov rdx, r10
movdqa xmm6, xmmword [0x140160490]
sub rdx, rcx
movdqa xmmword [rsp], xmm0
mov r11d, dword [rsp]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea r9, [r9 + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
mov eax, r8d
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x140160540]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, r11d
paddb xmm2, xmm0
movd xmm0, dword [rdx + r9 - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [r9 - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, r11d
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140160540]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx + r9 - 8]
xorps xmm2, xmm0
movd dword [r9 - 8], xmm2
cmp r8d, 0x50
jl 0x140079fa0
movaps xmm6, xmmword [rsp + 0x10]
cmp eax, 0x51
jge 0x14007a0f5
movsxd r9, r8d
add r9, rcx
sub r10, rcx
nop
mov eax, 0x94f2095
lea r9, [r9 + 1]
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x3a
xor al, byte [r10 + r9 - 1]
mov byte [r9 - 1], al
cmp r8d, 0x51
jl 0x14007a0c0
add rsp, 0x28
ret
Function at 0x14007cf90
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x28
xor r8d, r8d
mov r10, rdx
cmp dword [0x14017b090], 2
jl 0x14007d116
movdqa xmm5, xmmword [0x140160460]
lea rax, [r10 + 0x1e]
lea rdx, [rcx + 0x1e]
cmp rcx, rax
ja 0x14007cfc5
cmp rdx, r10
jae 0x14007d116
movaps xmmword [rsp + 0x10], xmm6
movdqa xmm0, xmmword [0x140160560]
lea r9, [rcx + 4]
movdqa xmm4, xmmword [0x140160550]
mov rdx, r10
movdqa xmm6, xmmword [0x140160490]
sub rdx, rcx
movdqa xmmword [rsp], xmm0
mov r11d, dword [rsp]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea r9, [r9 + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
mov eax, r8d
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x140160540]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, r11d
paddb xmm2, xmm0
movd xmm0, dword [rdx + r9 - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [r9 - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, r11d
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140160540]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx + r9 - 8]
xorps xmm2, xmm0
movd dword [r9 - 8], xmm2
cmp r8d, 0x18
jl 0x14007d000
movaps xmm6, xmmword [rsp + 0x10]
cmp eax, 0x1f
jge 0x14007d155
movsxd r9, r8d
add r9, rcx
sub r10, rcx
nop
mov eax, 0x94f2095
lea r9, [r9 + 1]
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x3a
xor al, byte [r10 + r9 - 1]
mov byte [r9 - 1], al
cmp r8d, 0x1f
jl 0x14007d120
add rsp, 0x28
ret
Function at 0x14007d160
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x28
xor r8d, r8d
mov r10, rdx
cmp dword [0x14017b090], 2
jl 0x14007d2e6
movdqa xmm5, xmmword [0x140160460]
lea rax, [r10 + 0x18]
lea rdx, [rcx + 0x18]
cmp rcx, rax
ja 0x14007d195
cmp rdx, r10
jae 0x14007d2e6
movaps xmmword [rsp + 0x10], xmm6
movdqa xmm0, xmmword [0x140160560]
lea r9, [rcx + 4]
movdqa xmm4, xmmword [0x140160550]
mov rdx, r10
movdqa xmm6, xmmword [0x140160490]
sub rdx, rcx
movdqa xmmword [rsp], xmm0
mov r11d, dword [rsp]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea r9, [r9 + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
mov eax, r8d
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x140160540]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, r11d
paddb xmm2, xmm0
movd xmm0, dword [rdx + r9 - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [r9 - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, r11d
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140160540]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx + r9 - 8]
xorps xmm2, xmm0
movd dword [r9 - 8], xmm2
cmp r8d, 0x18
jl 0x14007d1d0
movaps xmm6, xmmword [rsp + 0x10]
cmp eax, 0x19
jge 0x14007d325
movsxd r9, r8d
add r9, rcx
sub r10, rcx
nop
mov eax, 0x94f2095
lea r9, [r9 + 1]
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x3a
xor al, byte [r10 + r9 - 1]
mov byte [r9 - 1], al
cmp r8d, 0x19
jl 0x14007d2f0
add rsp, 0x28
ret
Function at 0x14007d330
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x28
xor r8d, r8d
mov r10, rdx
cmp dword [0x14017b090], 2
jl 0x14007d4b6
movdqa xmm5, xmmword [0x140160460]
lea rax, [r10 + 0x24]
lea rdx, [rcx + 0x24]
cmp rcx, rax
ja 0x14007d365
cmp rdx, r10
jae 0x14007d4b6
movaps xmmword [rsp + 0x10], xmm6
movdqa xmm0, xmmword [0x140160560]
lea r9, [rcx + 4]
movdqa xmm4, xmmword [0x140160550]
mov rdx, r10
movdqa xmm6, xmmword [0x140160490]
sub rdx, rcx
movdqa xmmword [rsp], xmm0
mov r11d, dword [rsp]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea r9, [r9 + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
mov eax, r8d
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x140160540]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, r11d
paddb xmm2, xmm0
movd xmm0, dword [rdx + r9 - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [r9 - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, r11d
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140160540]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx + r9 - 8]
xorps xmm2, xmm0
movd dword [r9 - 8], xmm2
cmp r8d, 0x20
jl 0x14007d3a0
movaps xmm6, xmmword [rsp + 0x10]
cmp eax, 0x25
jge 0x14007d4f5
movsxd r9, r8d
add r9, rcx
sub r10, rcx
nop
mov eax, 0x94f2095
lea r9, [r9 + 1]
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x3a
xor al, byte [r10 + r9 - 1]
mov byte [r9 - 1], al
cmp r8d, 0x25
jl 0x14007d4c0
add rsp, 0x28
ret
Function at 0x14008f850
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x28
xor r8d, r8d
mov r10, rdx
cmp dword [0x14017b090], 2
jl 0x14008f9d6
movdqa xmm5, xmmword [0x140160460]
lea rax, [r10 + 0x65]
lea rdx, [rcx + 0x65]
cmp rcx, rax
ja 0x14008f885
cmp rdx, r10
jae 0x14008f9d6
movaps xmmword [rsp + 0x10], xmm6
movdqa xmm0, xmmword [0x140160560]
lea r9, [rcx + 4]
movdqa xmm4, xmmword [0x140160550]
mov rdx, r10
movdqa xmm6, xmmword [0x140160490]
sub rdx, rcx
movdqa xmmword [rsp], xmm0
mov r11d, dword [rsp]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea r9, [r9 + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
mov eax, r8d
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x140160540]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, r11d
paddb xmm2, xmm0
movd xmm0, dword [rdx + r9 - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [r9 - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, r11d
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140160540]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx + r9 - 8]
xorps xmm2, xmm0
movd dword [r9 - 8], xmm2
cmp r8d, 0x60
jl 0x14008f8c0
movaps xmm6, xmmword [rsp + 0x10]
cmp eax, 0x66
jge 0x14008fa15
movsxd r9, r8d
add r9, rcx
sub r10, rcx
nop
mov eax, 0x94f2095
lea r9, [r9 + 1]
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x3a
xor al, byte [r10 + r9 - 1]
mov byte [r9 - 1], al
cmp r8d, 0x66
jl 0x14008f9e0
add rsp, 0x28
ret
Function at 0x14008fb10
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x28
xor r8d, r8d
mov r10, rdx
cmp dword [0x14017b090], 2
jl 0x14008fc96
movdqa xmm5, xmmword [0x140160460]
lea rax, [r10 + 0x20]
lea rdx, [rcx + 0x20]
cmp rcx, rax
ja 0x14008fb45
cmp rdx, r10
jae 0x14008fc96
movaps xmmword [rsp + 0x10], xmm6
movdqa xmm0, xmmword [0x140160560]
lea r9, [rcx + 4]
movdqa xmm4, xmmword [0x140160550]
mov rdx, r10
movdqa xmm6, xmmword [0x140160490]
sub rdx, rcx
movdqa xmmword [rsp], xmm0
mov r11d, dword [rsp]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea r9, [r9 + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
mov eax, r8d
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x140160540]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, r11d
paddb xmm2, xmm0
movd xmm0, dword [rdx + r9 - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [r9 - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, r11d
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140160540]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx + r9 - 8]
xorps xmm2, xmm0
movd dword [r9 - 8], xmm2
cmp r8d, 0x20
jl 0x14008fb80
movaps xmm6, xmmword [rsp + 0x10]
cmp eax, 0x21
jge 0x14008fcd5
movsxd r9, r8d
add r9, rcx
sub r10, rcx
nop
mov eax, 0x94f2095
lea r9, [r9 + 1]
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x3a
xor al, byte [r10 + r9 - 1]
mov byte [r9 - 1], al
cmp r8d, 0x21
jl 0x14008fca0
add rsp, 0x28
ret
Function at 0x14008ffe0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x28
xor r8d, r8d
mov r10, rdx
cmp dword [0x14017b090], 2
jl 0x140090142
movdqa xmm5, xmmword [0x140160460]
lea rax, [r10 + 0x24]
lea rdx, [rcx + 0x24]
cmp rcx, rax
ja 0x140090015
cmp rdx, r10
jae 0x140090142
movaps xmmword [rsp + 0x10], xmm6
movaps xmmword [rsp], xmm7
movdqa xmm4, xmmword [0x140160550]
lea r9, [rcx + 8]
movdqa xmm6, xmmword [0x140160490]
mov rdx, r10
movdqa xmm7, xmmword [str.::::::::]
sub rdx, rcx
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea r9, [r9 + 0x10]
paddd xmm2, xmm5
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm7
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx + r9 - 0x18]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
xorps xmm3, xmm0
movq qword [r9 - 0x18], xmm3
paddd xmm2, xmm5
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
mov eax, r8d
pmuldq xmm0, xmm4
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm7
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx + r9 - 0x10]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xorps xmm3, xmm0
movq qword [r9 - 0x10], xmm3
cmp r8d, 0x10
jl 0x140090040
movaps xmm7, xmmword [rsp]
movaps xmm6, xmmword [rsp + 0x10]
cmp eax, 0x13
jge 0x14009018a
movsxd rax, r8d
sub r10, rcx
lea r9, [rcx + rax*2]
nop dword [rax]
mov eax, 0x94f2095
lea r9, [r9 + 2]
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x37
movzx eax, r8w
inc r8d
sub ax, cx
add ax, 0x3a
xor ax, word [r9 + r10 - 2]
mov word [r9 - 2], ax
cmp r8d, 0x13
jl 0x140090150
add rsp, 0x28
ret

Function at 0x140091680
Capabilities:
Create thread

Disassembly:
sub rsp, 0x58
cmp byte [0x140218464], 0
jne 0x14009171d
mov ecx, 8
mov byte [0x140218464], 1
call fcn.14011c8ac
lea rcx, [0x14007e030]
mov r9, rax
lea r8, [0x1400ae7b0]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rsp + 0x38]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x30], rax
test rax, rax
je 0x140091709
cmp dword [rsp + 0x38], 0
je 0x1400916fd
movaps xmm0, xmmword [rsp + 0x30]
lea rcx, [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
je 0x14009171d
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rsp + 0x38], 0
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 1
add rsp, 0x58
ret
Function at 0x140092100
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 7], 0
mov r10, rcx
je 0x140092250
xor r8d, r8d
cmp dword [0x14017b090], 2
jl 0x14009220f
movdqa xmm2, xmmword [0x140160460]
mov rax, rcx
movdqa xmm4, xmmword [0x140160550]
movdqa xmm1, xmm2
movdqa xmm3, xmmword [0x140160480]
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140160490]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, dword [rcx]
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x140160540]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x140160560]
xorps xmm2, xmm0
punpckldq xmm1, xmm3
movd dword [rcx], xmm2
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140160490]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, dword [rcx + 4]
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140160540]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x140160560]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
ret
mov r9, r10
nop dword [rax]
nop word [rax + rax]
mov eax, 0x94f2095
lea r9, [r9 + 1]
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x3a
xor byte [r9 - 1], al
cmp r8d, 8
jl 0x140092220
mov rax, r10
ret

Function at 0x140092280
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 3], 0
mov r10, rcx
je 0x140092350
xor r8d, r8d
cmp dword [0x14017b090], 2
jl 0x140092317
movdqa xmm3, xmmword [0x140160460]
mov rax, rcx
movdqa xmm2, xmm3
movdqa xmm0, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x140160550]
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x140160550]
shufps xmm2, xmm0, 0xdd
psrad xmm2, 1
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmmword [0x140160490]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, dword [rcx]
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140160540]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x140160560]
xorps xmm2, xmm0
movd dword [rcx], xmm2
ret
mov r9, r10
nop word [rax + rax]
mov eax, 0x94f2095
lea r9, [r9 + 1]
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x3a
xor byte [r9 - 1], al
cmp r8d, 4
jl 0x140092320
mov rax, r10
ret