joyce8/EMBER2024-capa huggingface dataset:
Function at 0x180002e70
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x28
xor r8d, r8d
movaps xmmword [rsp + 0x10], xmm6
cmp dword [0x18001f090], 2
mov r10, rdx
jl 0x18000304d
movdqa xmm6, xmmword [0x18001c940]
lea rax, [r10 + 0x48]
lea rdx, [rcx + 0x48]
cmp rcx, rax
ja 0x180002eaa
cmp rdx, r10
jae 0x18000304d
movaps xmmword [rsp], xmm7
movdqa xmm4, xmmword [0x18001cb60]
lea r9, [rcx + 8]
movdqa xmm5, xmmword [str.3333]
mov rdx, r10
movdqa xmm7, xmmword [0x18001c960]
sub rdx, rcx
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea r9, [r9 + 0x10]
paddd xmm2, xmm6
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm7
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx + r9 - 0x18]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
movd xmm2, eax
xorps xmm3, xmm0
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movq qword [r9 - 0x18], xmm3
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm7
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx + r9 - 0x10]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xorps xmm3, xmm0
movq qword [r9 - 0x10], xmm3
cmp r8d, 0x20
jl 0x180002ed0
movaps xmm7, xmmword [rsp]
cmp r8d, 0x25
jge 0x1800030b1
movsxd rax, r8d
sub r10, rcx
lea r9, [rcx + rax*2]
nop word [rax + rax]
mov ecx, r8d
lea r9, [r9 + 2]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
inc r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x33
sub ecx, eax
mov eax, 0xa0a0a0a1
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x33
sub ecx, eax
add cx, 0x33
xor cx, word [r9 + r10 - 2]
mov word [r9 - 2], cx
cmp r8d, 0x25
jl 0x180003060
movaps xmm6, xmmword [rsp + 0x10]
add rsp, 0x28
ret
Function at 0x1800030c0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x28
xor r8d, r8d
movaps xmmword [rsp + 0x10], xmm6
cmp dword [0x18001f090], 2
mov r10, rdx
mov r9, rcx
jl 0x18000329f
movdqa xmm6, xmmword [0x18001c940]
lea rax, [rdx + 0x1e]
add rcx, 0x1e
cmp r9, rax
ja 0x1800030fd
cmp rcx, rdx
jae 0x18000329f
movaps xmmword [rsp], xmm7
movdqa xmm4, xmmword [0x18001cb60]
lea rcx, [r9 + 8]
movdqa xmm5, xmmword [str.3333]
sub r10, r9
movdqa xmm7, xmmword [0x18001c960]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 0x10]
paddd xmm2, xmm6
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm7
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [r10 + rcx - 0x18]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
movd xmm2, eax
xorps xmm3, xmm0
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movq qword [rcx - 0x18], xmm3
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm7
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [r10 + rcx - 0x10]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xorps xmm3, xmm0
movq qword [rcx - 0x10], xmm3
cmp r8d, 0x10
jl 0x180003120
movaps xmm7, xmmword [rsp]
movaps xmm6, xmmword [rsp + 0x10]
add rsp, 0x28
ret
sub r10, r9
nop dword [rax]
nop word [rax + rax]
mov ecx, r8d
lea r9, [r9 + 2]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
inc r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x33
sub ecx, eax
mov eax, 0xa0a0a0a1
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x33
sub ecx, eax
add cx, 0x33
xor cx, word [r9 + r10 - 2]
mov word [r9 - 2], cx
cmp r8d, 0x10
jl 0x1800032b0
movaps xmm6, xmmword [rsp + 0x10]
add rsp, 0x28
ret
Function at 0x180003310
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x28
xor r8d, r8d
movaps xmmword [rsp + 0x10], xmm6
cmp dword [0x18001f090], 2
mov r10, rdx
jl 0x1800034ed
movdqa xmm6, xmmword [0x18001c940]
lea rax, [r10 + 0x20]
lea rdx, [rcx + 0x20]
cmp rcx, rax
ja 0x18000334a
cmp rdx, r10
jae 0x1800034ed
movaps xmmword [rsp], xmm7
movdqa xmm4, xmmword [0x18001cb60]
lea r9, [rcx + 8]
movdqa xmm5, xmmword [str.3333]
mov rdx, r10
movdqa xmm7, xmmword [0x18001c960]
sub rdx, rcx
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea r9, [r9 + 0x10]
paddd xmm2, xmm6
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm7
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx + r9 - 0x18]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
movd xmm2, eax
xorps xmm3, xmm0
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movq qword [r9 - 0x18], xmm3
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm7
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx + r9 - 0x10]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xorps xmm3, xmm0
movq qword [r9 - 0x10], xmm3
cmp r8d, 0x10
jl 0x180003370
movaps xmm7, xmmword [rsp]
cmp r8d, 0x11
jge 0x180003551
movsxd rax, r8d
sub r10, rcx
lea r9, [rcx + rax*2]
nop word [rax + rax]
mov ecx, r8d
lea r9, [r9 + 2]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
inc r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x33
sub ecx, eax
mov eax, 0xa0a0a0a1
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x33
sub ecx, eax
add cx, 0x33
xor cx, word [r9 + r10 - 2]
mov word [r9 - 2], cx
cmp r8d, 0x11
jl 0x180003500
movaps xmm6, xmmword [rsp + 0x10]
add rsp, 0x28
ret
Function at 0x180003610
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x28
xor r8d, r8d
movaps xmmword [rsp + 0x10], xmm6
cmp dword [0x18001f090], 2
mov r10, rdx
jl 0x1800037ed
movdqa xmm6, xmmword [0x18001c940]
lea rax, [r10 + 0x4c]
lea rdx, [rcx + 0x4c]
cmp rcx, rax
ja 0x18000364a
cmp rdx, r10
jae 0x1800037ed
movaps xmmword [rsp], xmm7
movdqa xmm4, xmmword [0x18001cb60]
lea r9, [rcx + 8]
movdqa xmm5, xmmword [str.3333]
mov rdx, r10
movdqa xmm7, xmmword [0x18001c960]
sub rdx, rcx
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea r9, [r9 + 0x10]
paddd xmm2, xmm6
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm7
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx + r9 - 0x18]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
movd xmm2, eax
xorps xmm3, xmm0
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movq qword [r9 - 0x18], xmm3
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm7
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx + r9 - 0x10]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xorps xmm3, xmm0
movq qword [r9 - 0x10], xmm3
cmp r8d, 0x20
jl 0x180003670
movaps xmm7, xmmword [rsp]
cmp r8d, 0x27
jge 0x180003851
movsxd rax, r8d
sub r10, rcx
lea r9, [rcx + rax*2]
nop word [rax + rax]
mov ecx, r8d
lea r9, [r9 + 2]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
inc r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x33
sub ecx, eax
mov eax, 0xa0a0a0a1
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x33
sub ecx, eax
add cx, 0x33
xor cx, word [r9 + r10 - 2]
mov word [r9 - 2], cx
cmp r8d, 0x27
jl 0x180003800
movaps xmm6, xmmword [rsp + 0x10]
add rsp, 0x28
ret
Function at 0x180003a40
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x28
xor r8d, r8d
movaps xmmword [rsp + 0x10], xmm6
cmp dword [0x18001f090], 2
mov r10, rdx
jl 0x180003c1d
movdqa xmm6, xmmword [0x18001c940]
lea rax, [r10 + 0x5a]
lea rdx, [rcx + 0x5a]
cmp rcx, rax
ja 0x180003a7a
cmp rdx, r10
jae 0x180003c1d
movaps xmmword [rsp], xmm7
movdqa xmm4, xmmword [0x18001cb60]
lea r9, [rcx + 8]
movdqa xmm5, xmmword [str.3333]
mov rdx, r10
movdqa xmm7, xmmword [0x18001c960]
sub rdx, rcx
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea r9, [r9 + 0x10]
paddd xmm2, xmm6
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm7
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx + r9 - 0x18]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
movd xmm2, eax
xorps xmm3, xmm0
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movq qword [r9 - 0x18], xmm3
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm7
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx + r9 - 0x10]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xorps xmm3, xmm0
movq qword [r9 - 0x10], xmm3
cmp r8d, 0x28
jl 0x180003aa0
movaps xmm7, xmmword [rsp]
cmp r8d, 0x2e
jge 0x180003c81
movsxd rax, r8d
sub r10, rcx
lea r9, [rcx + rax*2]
nop word [rax + rax]
mov ecx, r8d
lea r9, [r9 + 2]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
inc r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x33
sub ecx, eax
mov eax, 0xa0a0a0a1
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x33
sub ecx, eax
add cx, 0x33
xor cx, word [r9 + r10 - 2]
mov word [r9 - 2], cx
cmp r8d, 0x2e
jl 0x180003c30
movaps xmm6, xmmword [rsp + 0x10]
add rsp, 0x28
ret
Function at 0x180003d80
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x28
xor r8d, r8d
movaps xmmword [rsp + 0x10], xmm6
cmp dword [0x18001f090], 2
mov r10, rdx
jl 0x180003f5d
movdqa xmm6, xmmword [0x18001c940]
lea rax, [r10 + 0x42]
lea rdx, [rcx + 0x42]
cmp rcx, rax
ja 0x180003dba
cmp rdx, r10
jae 0x180003f5d
movaps xmmword [rsp], xmm7
movdqa xmm4, xmmword [0x18001cb60]
lea r9, [rcx + 8]
movdqa xmm5, xmmword [str.3333]
mov rdx, r10
movdqa xmm7, xmmword [0x18001c960]
sub rdx, rcx
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea r9, [r9 + 0x10]
paddd xmm2, xmm6
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm7
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx + r9 - 0x18]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
movd xmm2, eax
xorps xmm3, xmm0
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movq qword [r9 - 0x18], xmm3
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm7
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx + r9 - 0x10]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xorps xmm3, xmm0
movq qword [r9 - 0x10], xmm3
cmp r8d, 0x20
jl 0x180003de0
movaps xmm7, xmmword [rsp]
cmp r8d, 0x22
jge 0x180003fc1
movsxd rax, r8d
sub r10, rcx
lea r9, [rcx + rax*2]
nop word [rax + rax]
mov ecx, r8d
lea r9, [r9 + 2]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
inc r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x33
sub ecx, eax
mov eax, 0xa0a0a0a1
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x33
sub ecx, eax
add cx, 0x33
xor cx, word [r9 + r10 - 2]
mov word [r9 - 2], cx
cmp r8d, 0x22
jl 0x180003f70
movaps xmm6, xmmword [rsp + 0x10]
add rsp, 0x28
ret
Function at 0x180003fd0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x28
xor r8d, r8d
movaps xmmword [rsp + 0x10], xmm6
cmp dword [0x18001f090], 2
mov r10, rdx
jl 0x1800041ad
movdqa xmm6, xmmword [0x18001c940]
lea rax, [r10 + 0x3c]
lea rdx, [rcx + 0x3c]
cmp rcx, rax
ja 0x18000400a
cmp rdx, r10
jae 0x1800041ad
movaps xmmword [rsp], xmm7
movdqa xmm4, xmmword [0x18001cb60]
lea r9, [rcx + 8]
movdqa xmm5, xmmword [str.3333]
mov rdx, r10
movdqa xmm7, xmmword [0x18001c960]
sub rdx, rcx
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea r9, [r9 + 0x10]
paddd xmm2, xmm6
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm7
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx + r9 - 0x18]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
movd xmm2, eax
xorps xmm3, xmm0
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movq qword [r9 - 0x18], xmm3
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm7
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx + r9 - 0x10]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xorps xmm3, xmm0
movq qword [r9 - 0x10], xmm3
cmp r8d, 0x18
jl 0x180004030
movaps xmm7, xmmword [rsp]
cmp r8d, 0x1f
jge 0x180004211
movsxd rax, r8d
sub r10, rcx
lea r9, [rcx + rax*2]
nop word [rax + rax]
mov ecx, r8d
lea r9, [r9 + 2]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
inc r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x33
sub ecx, eax
mov eax, 0xa0a0a0a1
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x33
sub ecx, eax
add cx, 0x33
xor cx, word [r9 + r10 - 2]
mov word [r9 - 2], cx
cmp r8d, 0x1f
jl 0x1800041c0
movaps xmm6, xmmword [rsp + 0x10]
add rsp, 0x28
ret
Function at 0x180004220
Capabilities:
Access peb ldr_data
Enumerate pe sections

Disassembly:
push rbp
push rsi
push rdi
push r14
sub rsp, 0x88
mov rax, qword [0x18001f040]
xor rax, rsp
mov qword [rsp + 0x78], rax
mov r14, qword [0x18001f7e0]
mov rsi, rdx
mov rdx, qword [0x18001fe50]
mov rdi, r9
mov rbp, r8
test rdx, rdx
jne 0x180004329
mov rax, qword gs:[0x60]
mov qword [rsp + 0x80], rbx
mov dword [rsp + 0x70], 0x7865742e
mov byte [rsp + 0x74], 0x74
mov rbx, qword [rax + 0x10]
movsxd rcx, dword [rbx + 0x3c]
movzx eax, word [rcx + rbx + 0x14]
lea r8, [rcx + rbx]
add rax, 0x18
add r8, rax
movzx eax, word [rcx + rbx + 6]
lea rcx, [rax + rax*4]
lea r11, [r8 + rcx*8]
cmp r8, r11
je 0x1800042e3
lea r9, [rsp + 0x70]
sub r9, r8
nop dword [rax]
lea r10, [r8 + 5]
mov rax, r8
cmp r8, r10
je 0x1800042e3
nop dword [rax]
movsx edx, byte [r9 + rax]
movzx ecx, byte [rax]
cmp ecx, edx
jne 0x1800042d6
inc rax
cmp rax, r10
jne 0x1800042c0
jmp 0x1800042e3
add r8, 0x28
sub r9, 0x28
cmp r8, r11
jne 0x1800042b0
mov eax, dword [r8 + 8]
mov ecx, dword [r8 + 0xc]
add rcx, rbx
mov word [rsp + 0x30], 0x26ff
mov rbx, qword [rsp + 0x80]
lea rdx, [rax + rcx]
cmp rax, 2
jb 0x180004322
movzx eax, word [rsp + 0x30]
lea r8, [rdx - 2]
cmp ax, word [rcx]
je 0x18000431f
cmp rcx, r8
je 0x180004322
inc rcx
jmp 0x180004310
mov rdx, rcx
mov qword [0x18001fe50], rdx
movups xmm0, xmmword [rdi]
lea r8, [rsp + 0x50]
xor eax, eax
movsd xmm1, qword [rdi + 0x10]
xor r9d, r9d
mov qword [rsp + 0x28], rax
mov rcx, rsi
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x38], rdx
mov rdx, rbp
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x40], r14
movaps xmmword [rsp + 0x50], xmm0
movsd qword [rsp + 0x60], xmm1
call fcn.180019c40
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.180019c90
add rsp, 0x88
pop r14
pop rdi
pop rsi
pop rbp
ret
Function at 0x180004390
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x28
xor r8d, r8d
movaps xmmword [rsp + 0x10], xmm6
cmp dword [0x18001f090], 2
mov r10, rdx
jl 0x18000456d
movdqa xmm6, xmmword [0x18001c940]
lea rax, [r10 + 0x4a]
lea rdx, [rcx + 0x4a]
cmp rcx, rax
ja 0x1800043ca
cmp rdx, r10
jae 0x18000456d
movaps xmmword [rsp], xmm7
movdqa xmm4, xmmword [0x18001cb60]
lea r9, [rcx + 8]
movdqa xmm5, xmmword [str.3333]
mov rdx, r10
movdqa xmm7, xmmword [0x18001c960]
sub rdx, rcx
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea r9, [r9 + 0x10]
paddd xmm2, xmm6
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm7
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx + r9 - 0x18]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
movd xmm2, eax
xorps xmm3, xmm0
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movq qword [r9 - 0x18], xmm3
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm7
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx + r9 - 0x10]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xorps xmm3, xmm0
movq qword [r9 - 0x10], xmm3
cmp r8d, 0x20
jl 0x1800043f0
movaps xmm7, xmmword [rsp]
cmp r8d, 0x26
jge 0x1800045d1
movsxd rax, r8d
sub r10, rcx
lea r9, [rcx + rax*2]
nop word [rax + rax]
mov ecx, r8d
lea r9, [r9 + 2]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
inc r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x33
sub ecx, eax
mov eax, 0xa0a0a0a1
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x33
sub ecx, eax
add cx, 0x33
xor cx, word [r9 + r10 - 2]
mov word [r9 - 2], cx
cmp r8d, 0x26
jl 0x180004580
movaps xmm6, xmmword [rsp + 0x10]
add rsp, 0x28
ret