joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140027670
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x40
mov rax, qword gs:[0x58]
mov rbx, rdx
mov edx, 4
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x1400c8c20], eax
jle 0x14002784a
lea rcx, [0x1400c8c20]
call fcn.1400bb6bc
cmp dword [0x1400c8c20], 0xffffffff
jne 0x14002784a
xor r9d, r9d
lea r10, [0x140000000]
cmp dword [0x1400c4098], 2
xorps xmm0, xmm0
movups xmmword [0x1400c9140], xmm0
jl 0x1400277fb
movdqa xmm5, xmmword [0x1400bee80]
mov ecx, r9d
movdqa xmm4, xmmword [0x1400beef0]
movaps xmmword [rsp + 0x30], xmm6
movdqa xmm6, xmmword [0x1400beeb0]
movaps xmmword [rsp + 0x20], xmm7
movdqa xmm7, xmmword [0x1400beec0]
movd xmm2, r9d
lea eax, [r9 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm5
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
add r9d, 8
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
pmulld xmm0, xmm6
psubd xmm2, xmm0
movd xmm0, dword [rcx + r10 + 0xbe9e8]
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx + r10 + 0xc9138], xmm2
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
movd xmm0, dword [rcx + r10 + 0xbe9ec]
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
xorps xmm3, xmm0
movd dword [rcx + r10 + 0xc913c], xmm3
cmp r9d, 0x10
jl 0x140027700
movaps xmm7, xmmword [rsp + 0x20]
movaps xmm6, xmmword [rsp + 0x30]
jmp 0x14002783e
mov r8d, r9d
nop
mov eax, 0x8fb823ef
lea r9, [r9 + 1]
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
inc r8d
sub al, cl
xor al, byte [r9 + r10 + 0xbe9ef]
mov byte [r9 + r10 + 0xc913f], al
cmp r8d, 0x10
jl 0x140027800
lea rcx, [0x1400c8c20]
call fcn.1400bb650
movups xmm0, xmmword [0x1400c9140]
mov rax, rbx
movups xmmword [rbx], xmm0
add rsp, 0x40
pop rbx
ret
Function at 0x140027860
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x20
mov rax, qword gs:[0x58]
mov rbx, rdx
mov edx, 4
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x1400ca128], eax
jle 0x140027a05
lea rcx, [0x1400ca128]
call fcn.1400bb6bc
cmp dword [0x1400ca128], 0xffffffff
jne 0x140027a05
xor eax, eax
xor ecx, ecx
cmp dword [0x1400c4098], 2
mov qword [0x1400c7938], rax
mov dword [0x1400c7940], eax
mov word [0x1400c7944], ax
jl 0x1400279b2
movdqa xmm2, xmmword [0x1400bee80]
mov ecx, 8
movdqa xmm4, xmmword [0x1400beee0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400beea0]
psubd xmm2, xmm0
movd xmm0, dword [str.EncodePointer]
andps xmm2, xmmword [0x1400beec0]
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1400beed0]
xorps xmm2, xmm0
movd dword [0x1400c7938], xmm2
movdqa xmm2, xmmword [0x1400bee90]
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400beea0]
psubd xmm2, xmm0
movd xmm0, dword [0x1400be92c]
andps xmm2, xmmword [0x1400beec0]
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1400beed0]
xorps xmm2, xmm0
movd dword [0x1400c793c], xmm2
movsxd r8, ecx
lea r9, [0x140000000]
nop dword [rax]
mov eax, 0x4ec4ec4f
lea r8, [r8 + 1]
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x34
movzx eax, cl
inc ecx
sub al, dl
add al, 0x38
xor al, byte [r8 + r9 + 0xbe927]
mov byte [r8 + r9 + 0xc7937], al
cmp ecx, 0xe
jl 0x1400279c0
lea rcx, [0x1400ca128]
call fcn.1400bb650
mov eax, dword [0x1400c7940]
movsd xmm0, qword [0x1400c7938]
movsd qword [rbx], xmm0
mov dword [rbx + 8], eax
movzx eax, word [0x1400c7944]
mov word [rbx + 0xc], ax
mov rax, rbx
add rsp, 0x20
pop rbx
ret
Function at 0x140027a30
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x20
mov rax, qword gs:[0x58]
mov rbx, rdx
mov edx, 4
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x1400ca768], eax
jle 0x140027bd5
lea rcx, [0x1400ca768]
call fcn.1400bb6bc
cmp dword [0x1400ca768], 0xffffffff
jne 0x140027bd5
xor eax, eax
xor ecx, ecx
cmp dword [0x1400c4098], 2
mov qword [0x1400c94a8], rax
mov dword [0x1400c94b0], eax
mov byte [0x1400c94b4], al
jl 0x140027b81
movdqa xmm2, xmmword [0x1400bee80]
mov ecx, 8
movdqa xmm4, xmmword [0x1400beee0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400beea0]
psubd xmm2, xmm0
movd xmm0, dword [str.kernel32.dll]
andps xmm2, xmmword [0x1400beec0]
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1400beed0]
xorps xmm2, xmm0
movd dword [0x1400c94a8], xmm2
movdqa xmm2, xmmword [0x1400bee90]
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400beea0]
psubd xmm2, xmm0
movd xmm0, dword [0x1400be93c]
andps xmm2, xmmword [0x1400beec0]
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1400beed0]
xorps xmm2, xmm0
movd dword [0x1400c94ac], xmm2
movsxd r8, ecx
lea r9, [0x140000000]
nop dword [rax + rax]
mov eax, 0x4ec4ec4f
lea r8, [r8 + 1]
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x34
movzx eax, cl
inc ecx
sub al, dl
add al, 0x38
xor al, byte [r8 + r9 + 0xbe937]
mov byte [r8 + r9 + 0xc94a7], al
cmp ecx, 0xd
jl 0x140027b90
lea rcx, [0x1400ca768]
call fcn.1400bb650
mov eax, dword [0x1400c94b0]
movsd xmm0, qword [0x1400c94a8]
movsd qword [rbx], xmm0
mov dword [rbx + 8], eax
movzx eax, byte [0x1400c94b4]
mov byte [rbx + 0xc], al
mov rax, rbx
add rsp, 0x20
pop rbx
ret
Function at 0x140027c00
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x20
mov rax, qword gs:[0x58]
mov rbx, rdx
mov edx, 4
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x1400c7a28], eax
jle 0x140027d9a
lea rcx, [0x1400c7a28]
call fcn.1400bb6bc
cmp dword [0x1400c7a28], 0xffffffff
jne 0x140027d9a
xor eax, eax
xor r9d, r9d
cmp dword [0x1400c4098], 2
mov qword [0x1400c9530], rax
jl 0x140027d3b
movdqa xmm2, xmmword [0x1400bee80]
movdqa xmm4, xmmword [0x1400beef0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400beeb0]
psubd xmm2, xmm0
movd xmm0, dword [str.ret2er2]
andps xmm2, xmmword [0x1400beec0]
packuswb xmm2, xmm2
packuswb xmm2, xmm2
xorps xmm2, xmm0
movd dword [0x1400c9530], xmm2
movdqa xmm2, xmmword [0x1400bee90]
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400beeb0]
psubd xmm2, xmm0
movd xmm0, dword [0x1400bea04]
andps xmm2, xmmword [0x1400beec0]
packuswb xmm2, xmm2
packuswb xmm2, xmm2
xorps xmm2, xmm0
movd dword [0x1400c9534], xmm2
jmp 0x140027d8e
mov r8d, r9d
lea r10, [0x140000000]
nop word [rax + rax]
mov eax, 0x8fb823ef
lea r9, [r9 + 1]
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
inc r8d
sub al, cl
xor al, byte [r9 + r10 + 0xbe9ff]
mov byte [r9 + r10 + 0xc952f], al
cmp r8d, 8
jl 0x140027d50
lea rcx, [0x1400c7a28]
call fcn.1400bb650
mov rax, qword [0x1400c9530]
mov qword [rbx], rax
mov rax, rbx
add rsp, 0x20
pop rbx
ret
Function at 0x140027f40
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x20
mov rax, qword gs:[0x58]
mov rbx, rdx
mov edx, 4
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x1400c95a0], eax
jle 0x1400280e5
lea rcx, [0x1400c95a0]
call fcn.1400bb6bc
cmp dword [0x1400c95a0], 0xffffffff
jne 0x1400280e5
xor eax, eax
xor ecx, ecx
cmp dword [0x1400c4098], 2
mov qword [0x1400c74a8], rax
mov dword [0x1400c74b0], eax
mov byte [0x1400c74b4], al
jl 0x140028089
movdqa xmm2, xmmword [0x1400bee80]
mov ecx, 8
movdqa xmm4, xmmword [0x1400beef0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400beeb0]
psubd xmm2, xmm0
movd xmm0, dword [str.kernel32.dll]
andps xmm2, xmmword [0x1400beec0]
packuswb xmm2, xmm2
packuswb xmm2, xmm2
xorps xmm2, xmm0
movd dword [0x1400c74a8], xmm2
movdqa xmm2, xmmword [0x1400bee90]
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400beeb0]
psubd xmm2, xmm0
movd xmm0, dword [0x1400be93c]
andps xmm2, xmmword [0x1400beec0]
packuswb xmm2, xmm2
packuswb xmm2, xmm2
xorps xmm2, xmm0
movd dword [0x1400c74ac], xmm2
movsxd r8, ecx
lea r9, [0x140000000]
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8fb823ef
lea r8, [r8 + 1]
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x39
movzx eax, cl
inc ecx
sub al, dl
xor al, byte [r8 + r9 + 0xbe937]
mov byte [r8 + r9 + 0xc74a7], al
cmp ecx, 0xd
jl 0x1400280a0
lea rcx, [0x1400c95a0]
call fcn.1400bb650
mov eax, dword [0x1400c74b0]
movsd xmm0, qword [0x1400c74a8]
movsd qword [rbx], xmm0
mov dword [rbx + 8], eax
movzx eax, byte [0x1400c74b4]
mov byte [rbx + 0xc], al
mov rax, rbx
add rsp, 0x20
pop rbx
ret
Function at 0x140028110
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x20
mov rax, qword gs:[0x58]
mov rbx, rdx
mov edx, 4
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x1400c9060], eax
jle 0x1400282b5
lea rcx, [0x1400c9060]
call fcn.1400bb6bc
cmp dword [0x1400c9060], 0xffffffff
jne 0x1400282b5
xor eax, eax
xor ecx, ecx
cmp dword [0x1400c4098], 2
mov qword [0x1400c7790], rax
mov dword [0x1400c7798], eax
mov word [0x1400c779c], ax
jl 0x140028262
movdqa xmm2, xmmword [0x1400bee80]
mov ecx, 8
movdqa xmm4, xmmword [0x1400beee0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400beea0]
psubd xmm2, xmm0
movd xmm0, dword [str.EncodePointer]
andps xmm2, xmmword [0x1400beec0]
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1400beed0]
xorps xmm2, xmm0
movd dword [0x1400c7790], xmm2
movdqa xmm2, xmmword [0x1400bee90]
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400beea0]
psubd xmm2, xmm0
movd xmm0, dword [0x1400be92c]
andps xmm2, xmmword [0x1400beec0]
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1400beed0]
xorps xmm2, xmm0
movd dword [0x1400c7794], xmm2
movsxd r8, ecx
lea r9, [0x140000000]
nop dword [rax]
mov eax, 0x4ec4ec4f
lea r8, [r8 + 1]
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x34
movzx eax, cl
inc ecx
sub al, dl
add al, 0x38
xor al, byte [r8 + r9 + 0xbe927]
mov byte [r8 + r9 + 0xc778f], al
cmp ecx, 0xe
jl 0x140028270
lea rcx, [0x1400c9060]
call fcn.1400bb650
mov eax, dword [0x1400c7798]
movsd xmm0, qword [0x1400c7790]
movsd qword [rbx], xmm0
mov dword [rbx + 8], eax
movzx eax, word [0x1400c779c]
mov word [rbx + 0xc], ax
mov rax, rbx
add rsp, 0x20
pop rbx
ret
Function at 0x1400282e0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x20
mov rax, qword gs:[0x58]
mov rbx, rdx
mov edx, 4
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x1400ca398], eax
jle 0x140028485
lea rcx, [0x1400ca398]
call fcn.1400bb6bc
cmp dword [0x1400ca398], 0xffffffff
jne 0x140028485
xor eax, eax
xor ecx, ecx
cmp dword [0x1400c4098], 2
mov qword [0x1400c9040], rax
mov dword [0x1400c9048], eax
mov byte [0x1400c904c], al
jl 0x140028431
movdqa xmm2, xmmword [0x1400bee80]
mov ecx, 8
movdqa xmm4, xmmword [0x1400beee0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400beea0]
psubd xmm2, xmm0
movd xmm0, dword [str.kernel32.dll]
andps xmm2, xmmword [0x1400beec0]
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1400beed0]
xorps xmm2, xmm0
movd dword [0x1400c9040], xmm2
movdqa xmm2, xmmword [0x1400bee90]
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400beea0]
psubd xmm2, xmm0
movd xmm0, dword [0x1400be93c]
andps xmm2, xmmword [0x1400beec0]
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1400beed0]
xorps xmm2, xmm0
movd dword [0x1400c9044], xmm2
movsxd r8, ecx
lea r9, [0x140000000]
nop dword [rax + rax]
mov eax, 0x4ec4ec4f
lea r8, [r8 + 1]
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x34
movzx eax, cl
inc ecx
sub al, dl
add al, 0x38
xor al, byte [r8 + r9 + 0xbe937]
mov byte [r8 + r9 + 0xc903f], al
cmp ecx, 0xd
jl 0x140028440
lea rcx, [0x1400ca398]
call fcn.1400bb650
mov eax, dword [0x1400c9048]
movsd xmm0, qword [0x1400c9040]
movsd qword [rbx], xmm0
mov dword [rbx + 8], eax
movzx eax, byte [0x1400c904c]
mov byte [rbx + 0xc], al
mov rax, rbx
add rsp, 0x20
pop rbx
ret
Function at 0x140028660
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x20
mov rax, qword gs:[0x58]
mov rbx, rdx
mov edx, 4
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x1400ca054], eax
jle 0x140028805
lea rcx, [0x1400ca054]
call fcn.1400bb6bc
cmp dword [0x1400ca054], 0xffffffff
jne 0x140028805
xor eax, eax
xor ecx, ecx
cmp dword [0x1400c4098], 2
mov qword [0x1400c8730], rax
mov dword [0x1400c8738], eax
mov word [0x1400c873c], ax
mov byte [0x1400c873e], al
jl 0x1400287b0
movdqa xmm2, xmmword [0x1400bee80]
mov ecx, 8
movdqa xmm4, xmmword [0x1400beef0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400beeb0]
psubd xmm2, xmm0
movd xmm0, dword [str.cx22wxc2wxcwxc]
andps xmm2, xmmword [0x1400beec0]
packuswb xmm2, xmm2
packuswb xmm2, xmm2
xorps xmm2, xmm0
movd dword [0x1400c8730], xmm2
movdqa xmm2, xmmword [0x1400bee90]
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400beeb0]
psubd xmm2, xmm0
movd xmm0, dword [0x1400be90c]
andps xmm2, xmmword [0x1400beec0]
packuswb xmm2, xmm2
packuswb xmm2, xmm2
xorps xmm2, xmm0
movd dword [0x1400c8734], xmm2
movsxd r8, ecx
lea r9, [0x140000000]
nop word [rax + rax]
mov eax, 0x8fb823ef
lea r8, [r8 + 1]
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x39
movzx eax, cl
inc ecx
sub al, dl
xor al, byte [r8 + r9 + 0xbe907]
mov byte [r8 + r9 + 0xc872f], al
cmp ecx, 0xf
jl 0x1400287c0
lea rcx, [0x1400ca054]
call fcn.1400bb650
mov eax, dword [0x1400c8738]
movsd xmm0, qword [0x1400c8730]
movsd qword [rbx], xmm0
mov dword [rbx + 8], eax
movzx eax, word [0x1400c873c]
mov word [rbx + 0xc], ax
movzx eax, byte [0x1400c873e]
mov byte [rbx + 0xe], al
mov rax, rbx
add rsp, 0x20
pop rbx
ret
Function at 0x1400288e0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x20
mov rax, qword gs:[0x58]
mov rbx, rdx
mov edx, 4
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x1400ca7dc], eax
jle 0x140028a85
lea rcx, [0x1400ca7dc]
call fcn.1400bb6bc
cmp dword [0x1400ca7dc], 0xffffffff
jne 0x140028a85
xor eax, eax
xor ecx, ecx
cmp dword [0x1400c4098], 2
mov qword [0x1400c5fd8], rax
mov dword [0x1400c5fe0], eax
mov word [0x1400c5fe4], ax
jl 0x140028a32
movdqa xmm2, xmmword [0x1400bee80]
mov ecx, 8
movdqa xmm4, xmmword [0x1400beee0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400beea0]
psubd xmm2, xmm0
movd xmm0, dword [str.EncodePointer]
andps xmm2, xmmword [0x1400beec0]
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1400beed0]
xorps xmm2, xmm0
movd dword [0x1400c5fd8], xmm2
movdqa xmm2, xmmword [0x1400bee90]
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400beea0]
psubd xmm2, xmm0
movd xmm0, dword [0x1400be92c]
andps xmm2, xmmword [0x1400beec0]
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1400beed0]
xorps xmm2, xmm0
movd dword [0x1400c5fdc], xmm2
movsxd r8, ecx
lea r9, [0x140000000]
nop dword [rax]
mov eax, 0x4ec4ec4f
lea r8, [r8 + 1]
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x34
movzx eax, cl
inc ecx
sub al, dl
add al, 0x38
xor al, byte [r8 + r9 + 0xbe927]
mov byte [r8 + r9 + 0xc5fd7], al
cmp ecx, 0xe
jl 0x140028a40
lea rcx, [0x1400ca7dc]
call fcn.1400bb650
mov eax, dword [0x1400c5fe0]
movsd xmm0, qword [0x1400c5fd8]
movsd qword [rbx], xmm0
mov dword [rbx + 8], eax
movzx eax, word [0x1400c5fe4]
mov word [rbx + 0xc], ax
mov rax, rbx
add rsp, 0x20
pop rbx
ret
Function at 0x140028ab0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x20
mov rax, qword gs:[0x58]
mov rbx, rdx
mov edx, 4
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x1400c9e64], eax
jle 0x140028c55
lea rcx, [0x1400c9e64]
call fcn.1400bb6bc
cmp dword [0x1400c9e64], 0xffffffff
jne 0x140028c55
xor eax, eax
xor ecx, ecx
cmp dword [0x1400c4098], 2
mov qword [0x1400c7440], rax
mov dword [0x1400c7448], eax
mov byte [0x1400c744c], al
jl 0x140028c01
movdqa xmm2, xmmword [0x1400bee80]
mov ecx, 8
movdqa xmm4, xmmword [0x1400beee0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400beea0]
psubd xmm2, xmm0
movd xmm0, dword [str.kernel32.dll]
andps xmm2, xmmword [0x1400beec0]
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1400beed0]
xorps xmm2, xmm0
movd dword [0x1400c7440], xmm2
movdqa xmm2, xmmword [0x1400bee90]
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400beea0]
psubd xmm2, xmm0
movd xmm0, dword [0x1400be93c]
andps xmm2, xmmword [0x1400beec0]
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1400beed0]
xorps xmm2, xmm0
movd dword [0x1400c7444], xmm2
movsxd r8, ecx
lea r9, [0x140000000]
nop dword [rax + rax]
mov eax, 0x4ec4ec4f
lea r8, [r8 + 1]
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x34
movzx eax, cl
inc ecx
sub al, dl
add al, 0x38
xor al, byte [r8 + r9 + 0xbe937]
mov byte [r8 + r9 + 0xc743f], al
cmp ecx, 0xd
jl 0x140028c10
lea rcx, [0x1400c9e64]
call fcn.1400bb650
mov eax, dword [0x1400c7448]
movsd xmm0, qword [0x1400c7440]
movsd qword [rbx], xmm0
mov dword [rbx + 8], eax
movzx eax, byte [0x1400c744c]
mov byte [rbx + 0xc], al
mov rax, rbx
add rsp, 0x20
pop rbx
ret
Function at 0x140028c80
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x40
mov rax, qword gs:[0x58]
mov rbx, rdx
mov edx, 4
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x1400c4cf4], eax
jle 0x140028e65
lea rcx, [0x1400c4cf4]
call fcn.1400bb6bc
cmp dword [0x1400c4cf4], 0xffffffff
jne 0x140028e65
xor eax, eax
lea r9, [0x140000000]
xor ecx, ecx
mov dword [0x1400c80a8], eax
cmp dword [0x1400c4098], 2
xorps xmm0, xmm0
movups xmmword [0x1400c8098], xmm0
mov word [0x1400c80ac], ax
jl 0x140028e1c
movdqa xmm5, xmmword [0x1400bee80]
mov edx, ecx
movdqa xmm4, xmmword [0x1400beef0]
movaps xmmword [rsp + 0x30], xmm6
movdqa xmm6, xmmword [0x1400beeb0]
movaps xmmword [rsp + 0x20], xmm7
movdqa xmm7, xmmword [0x1400beec0]
nop dword [rax]
lea eax, [rcx + 4]
movd xmm2, ecx
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm5
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
add ecx, 8
pmuldq xmm0, xmm4
mov eax, ecx
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
pmulld xmm0, xmm6
psubd xmm2, xmm0
movd xmm0, dword [rdx + r9 + 0xbe940]
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rdx + r9 + 0xc8090], xmm2
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
movd xmm0, dword [rdx + r9 + 0xbe944]
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
xorps xmm3, xmm0
movd dword [rdx + r9 + 0xc8094], xmm3
cmp ecx, 0x10
jl 0x140028d20
movaps xmm7, xmmword [rsp + 0x20]
movaps xmm6, xmmword [rsp + 0x30]
cmp eax, 0x16
jge 0x140028e59
movsxd r8, ecx
nop
mov eax, 0x8fb823ef
lea r8, [r8 + 1]
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x39
movzx eax, cl
inc ecx
sub al, dl
xor al, byte [r8 + r9 + 0xbe947]
mov byte [r8 + r9 + 0xc8097], al
cmp ecx, 0x16
jl 0x140028e20
lea rcx, [0x1400c4cf4]
call fcn.1400bb650
mov eax, dword [0x1400c80a8]
movups xmm0, xmmword [0x1400c8098]
movups xmmword [rbx], xmm0
mov dword [rbx + 0x10], eax
movzx eax, word [0x1400c80ac]
mov word [rbx + 0x14], ax
mov rax, rbx
add rsp, 0x40
pop rbx
ret