joyce8/EMBER2024-capa huggingface dataset:
Function at 0x18002a620
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x78
mov rax, qword [0x18020ba30]
test rax, rax
jne 0x18002a86a
movups xmm0, xmmword [0x1800e9120]
movzx eax, byte [0x1800e9130]
xor ecx, ecx
cmp dword [0x18010c088], 2
movups xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x50], al
jl 0x18002a799
movdqa xmm0, xmmword [0x1800fac90]
lea rdx, [rsp + 0x44]
movdqa xmm5, xmmword [0x1800fab00]
movdqa xmm4, xmmword [0x1800fad20]
movdqa xmmword [rsp + 0x20], xmm0
mov r8d, dword [rsp + 0x20]
movaps xmmword [rsp + 0x60], xmm6
movdqa xmm6, xmmword [0x1800fab80]
nop
movd xmm2, ecx
lea eax, [rcx + 4]
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add ecx, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1800fac70]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rdx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, r8d
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1800fac70]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 8]
xorps xmm2, xmm0
movd dword [rdx - 8], xmm2
cmp ecx, 0x10
jl 0x18002a690
movaps xmm6, xmmword [rsp + 0x60]
cmp ecx, 0x11
jge 0x18002a7dd
movsxd rax, ecx
lea r8, [rsp + 0x40]
add r8, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, cl
inc ecx
sub al, dl
add al, 0x31
xor byte [r8 - 1], al
cmp ecx, 0x11
jl 0x18002a7b0
xorps xmm0, xmm0
lea rax, [rsp + 0x40]
xorps xmm1, xmm1
mov r8, 0xffffffffffffffff
movups xmmword [rsp + 0x20], xmm0
movdqu xmmword [rsp + 0x30], xmm1
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x18002a800
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.1800140a0
lea rcx, [rsp + 0x20]
call fcn.18002c590
mov rdx, qword [rsp + 0x38]
mov qword [0x18020ba30], rax
cmp rdx, 0xf
jbe 0x18002a86a
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002a85e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002a86f
call fcn.1800b4d3c
mov rax, qword [0x18020ba30]
add rsp, 0x78
ret
call fcn.1800bbacc
int3
Function at 0x18002a880
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x78
mov rax, qword [0x18020ba28]
test rax, rax
jne 0x18002aada
movzx eax, word [0x1800e90c0]
xor ecx, ecx
cmp dword [0x18010c088], 2
movups xmm0, xmmword [0x1800e90b0]
mov word [rsp + 0x50], ax
movzx eax, byte [0x1800e90c2]
mov byte [rsp + 0x52], al
movups xmmword [rsp + 0x40], xmm0
jl 0x18002aa09
movdqa xmm0, xmmword [0x1800fac90]
lea rdx, [rsp + 0x44]
movdqa xmm5, xmmword [0x1800fab00]
movdqa xmm4, xmmword [0x1800fad20]
movdqa xmmword [rsp + 0x20], xmm0
mov r8d, dword [rsp + 0x20]
movaps xmmword [rsp + 0x60], xmm6
movdqa xmm6, xmmword [0x1800fab80]
nop dword [rax + rax]
movd xmm2, ecx
lea eax, [rcx + 4]
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add ecx, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1800fac70]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rdx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, r8d
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1800fac70]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 8]
xorps xmm2, xmm0
movd dword [rdx - 8], xmm2
cmp ecx, 0x10
jl 0x18002a900
movaps xmm6, xmmword [rsp + 0x60]
cmp ecx, 0x13
jge 0x18002aa4d
movsxd rax, ecx
lea r8, [rsp + 0x40]
add r8, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, cl
inc ecx
sub al, dl
add al, 0x31
xor byte [r8 - 1], al
cmp ecx, 0x13
jl 0x18002aa20
xorps xmm0, xmm0
lea rax, [rsp + 0x40]
xorps xmm1, xmm1
mov r8, 0xffffffffffffffff
movups xmmword [rsp + 0x20], xmm0
movdqu xmmword [rsp + 0x30], xmm1
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x18002aa70
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.1800140a0
lea rcx, [rsp + 0x20]
call fcn.18002c590
mov rdx, qword [rsp + 0x38]
mov qword [0x18020ba28], rax
cmp rdx, 0xf
jbe 0x18002aada
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002aace
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002aadf
call fcn.1800b4d3c
mov rax, qword [0x18020ba28]
add rsp, 0x78
ret
call fcn.1800bbacc
int3
Function at 0x18002aca0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x68
mov rax, qword [0x18020b8b0]
test rax, rax
jne 0x18002aeea
movups xmm0, xmmword [str.vSQEZVAjNZHT_L_t_A_G]
movups xmmword [rsp + 0x20], xmm0
psrldq xmm0, 0xf
movd eax, xmm0
test al, al
je 0x18002ae5d
xor ecx, ecx
cmp dword [0x18010c088], 2
jl 0x18002ae26
movdqa xmm0, xmmword [0x1800fac90]
lea rdx, [rsp + 0x24]
movdqa xmm5, xmmword [0x1800fab00]
movdqa xmm4, xmmword [0x1800fad20]
movdqa xmmword [rsp + 0x30], xmm0
mov r8d, dword [rsp + 0x30]
movaps xmmword [rsp + 0x50], xmm6
movdqa xmm6, xmmword [0x1800fab80]
nop word [rax + rax]
movd xmm2, ecx
lea eax, [rcx + 4]
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add ecx, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1800fac70]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rdx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, r8d
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1800fac70]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 8]
xorps xmm2, xmm0
movd dword [rdx - 8], xmm2
cmp ecx, 0x10
jl 0x18002ad20
movaps xmm6, xmmword [rsp + 0x50]
jmp 0x18002ae5d
lea r8, [rsp + 0x20]
nop dword [rax + rax]
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, cl
inc ecx
sub al, dl
add al, 0x31
xor byte [r8 - 1], al
cmp ecx, 0x10
jl 0x18002ae30
xorps xmm0, xmm0
lea rax, [rsp + 0x20]
xorps xmm1, xmm1
mov r8, 0xffffffffffffffff
movups xmmword [rsp + 0x30], xmm0
movdqu xmmword [rsp + 0x40], xmm1
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x18002ae80
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x30]
call fcn.1800140a0
lea rcx, [rsp + 0x30]
call fcn.18002c590
mov rdx, qword [rsp + 0x48]
mov qword [0x18020b8b0], rax
cmp rdx, 0xf
jbe 0x18002aeea
mov rcx, qword [rsp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002aede
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002aeef
call fcn.1800b4d3c
mov rax, qword [0x18020b8b0]
add rsp, 0x68
ret
call fcn.1800bbacc
int3
Function at 0x18002af00
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x78
mov rax, qword [0x18020b8d0]
test rax, rax
jne 0x18002b15a
cmp byte [0x1800e90db], 0
movups xmm0, xmmword [str.z__YPBdAJNQqW_2_0:D]
mov eax, dword [0x1800e90d8]
mov dword [rsp + 0x50], eax
movups xmmword [rsp + 0x40], xmm0
je 0x18002b0cd
xor ecx, ecx
cmp dword [0x18010c088], 2
jl 0x18002b089
movdqa xmm0, xmmword [0x1800fac90]
lea rdx, [rsp + 0x44]
movdqa xmm5, xmmword [0x1800fab00]
movdqa xmm4, xmmword [0x1800fad20]
movdqa xmmword [rsp + 0x20], xmm0
mov r8d, dword [rsp + 0x20]
movaps xmmword [rsp + 0x60], xmm6
movdqa xmm6, xmmword [0x1800fab80]
nop dword [rax + rax]
movd xmm2, ecx
lea eax, [rcx + 4]
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add ecx, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1800fac70]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rdx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, r8d
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1800fac70]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 8]
xorps xmm2, xmm0
movd dword [rdx - 8], xmm2
cmp ecx, 0x10
jl 0x18002af80
movaps xmm6, xmmword [rsp + 0x60]
cmp ecx, 0x14
jge 0x18002b0cd
movsxd rax, ecx
lea r8, [rsp + 0x40]
add r8, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, cl
inc ecx
sub al, dl
add al, 0x31
xor byte [r8 - 1], al
cmp ecx, 0x14
jl 0x18002b0a0
xorps xmm0, xmm0
lea rax, [rsp + 0x40]
xorps xmm1, xmm1
mov r8, 0xffffffffffffffff
movups xmmword [rsp + 0x20], xmm0
movdqu xmmword [rsp + 0x30], xmm1
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x18002b0f0
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.1800140a0
lea rcx, [rsp + 0x20]
call fcn.18002c590
mov rdx, qword [rsp + 0x38]
mov qword [0x18020b8d0], rax
cmp rdx, 0xf
jbe 0x18002b15a
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002b14e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002b15f
call fcn.1800b4d3c
mov rax, qword [0x18020b8d0]
add rsp, 0x78
ret
call fcn.1800bbacc
int3
Function at 0x18002b170
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x78
mov rax, qword [0x18020b8a8]
test rax, rax
jne 0x18002b3da
cmp byte [0x1800e911d], 0
mov eax, dword [0x1800e9118]
movups xmm0, xmmword [0x1800e9108]
mov dword [rsp + 0x50], eax
movzx eax, word [0x1800e911c]
movups xmmword [rsp + 0x40], xmm0
mov word [rsp + 0x54], ax
je 0x18002b34d
xor ecx, ecx
cmp dword [0x18010c088], 2
jl 0x18002b309
movdqa xmm0, xmmword [0x1800fac90]
lea rdx, [rsp + 0x44]
movdqa xmm5, xmmword [0x1800fab00]
movdqa xmm4, xmmword [0x1800fad20]
movdqa xmmword [rsp + 0x20], xmm0
mov r8d, dword [rsp + 0x20]
movaps xmmword [rsp + 0x60], xmm6
movdqa xmm6, xmmword [0x1800fab80]
nop word [rax + rax]
movd xmm2, ecx
lea eax, [rcx + 4]
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add ecx, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1800fac70]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rdx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, r8d
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1800fac70]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 8]
xorps xmm2, xmm0
movd dword [rdx - 8], xmm2
cmp ecx, 0x10
jl 0x18002b200
movaps xmm6, xmmword [rsp + 0x60]
cmp ecx, 0x16
jge 0x18002b34d
movsxd rax, ecx
lea r8, [rsp + 0x40]
add r8, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, cl
inc ecx
sub al, dl
add al, 0x31
xor byte [r8 - 1], al
cmp ecx, 0x16
jl 0x18002b320
xorps xmm0, xmm0
lea rax, [rsp + 0x40]
xorps xmm1, xmm1
mov r8, 0xffffffffffffffff
movups xmmword [rsp + 0x20], xmm0
movdqu xmmword [rsp + 0x30], xmm1
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x18002b370
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.1800140a0
lea rcx, [rsp + 0x20]
call fcn.18002c590
mov rdx, qword [rsp + 0x38]
mov qword [0x18020b8a8], rax
cmp rdx, 0xf
jbe 0x18002b3da
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002b3ce
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002b3df
call fcn.1800b4d3c
mov rax, qword [0x18020b8a8]
add rsp, 0x78
ret
call fcn.1800bbacc
int3
Function at 0x18002b3f0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x78
mov rax, qword [0x18020b8a0]
test rax, rax
jne 0x18002b64a
cmp byte [0x1800e91c1], 0
movups xmm0, xmmword [0x1800e91b0]
movzx eax, word [0x1800e91c0]
mov word [rsp + 0x50], ax
movups xmmword [rsp + 0x40], xmm0
je 0x18002b5bd
xor ecx, ecx
cmp dword [0x18010c088], 2
jl 0x18002b579
movdqa xmm0, xmmword [0x1800fac90]
lea rdx, [rsp + 0x44]
movdqa xmm5, xmmword [0x1800fab00]
movdqa xmm4, xmmword [0x1800fad20]
movdqa xmmword [rsp + 0x20], xmm0
mov r8d, dword [rsp + 0x20]
movaps xmmword [rsp + 0x60], xmm6
movdqa xmm6, xmmword [0x1800fab80]
nop dword [rax]
movd xmm2, ecx
lea eax, [rcx + 4]
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add ecx, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1800fac70]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rdx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, r8d
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1800fac70]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 8]
xorps xmm2, xmm0
movd dword [rdx - 8], xmm2
cmp ecx, 0x10
jl 0x18002b470
movaps xmm6, xmmword [rsp + 0x60]
cmp ecx, 0x12
jge 0x18002b5bd
movsxd rax, ecx
lea r8, [rsp + 0x40]
add r8, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, cl
inc ecx
sub al, dl
add al, 0x31
xor byte [r8 - 1], al
cmp ecx, 0x12
jl 0x18002b590
xorps xmm0, xmm0
lea rax, [rsp + 0x40]
xorps xmm1, xmm1
mov r8, 0xffffffffffffffff
movups xmmword [rsp + 0x20], xmm0
movdqu xmmword [rsp + 0x30], xmm1
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x18002b5e0
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.1800140a0
lea rcx, [rsp + 0x20]
call fcn.18002c590
mov rdx, qword [rsp + 0x38]
mov qword [0x18020b8a0], rax
cmp rdx, 0xf
jbe 0x18002b64a
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002b63e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002b64f
call fcn.1800b4d3c
mov rax, qword [0x18020b8a0]
add rsp, 0x78
ret
call fcn.1800bbacc
int3
Function at 0x18002b740
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x78
mov rax, qword [0x18020ba38]
test rax, rax
jne 0x18002b99a
cmp byte [0x1800e91a9], 0
movups xmm0, xmmword [0x1800e9198]
movzx eax, word [0x1800e91a8]
mov word [rsp + 0x50], ax
movups xmmword [rsp + 0x40], xmm0
je 0x18002b90d
xor ecx, ecx
cmp dword [0x18010c088], 2
jl 0x18002b8c9
movdqa xmm0, xmmword [0x1800fac90]
lea rdx, [rsp + 0x44]
movdqa xmm5, xmmword [0x1800fab00]
movdqa xmm4, xmmword [0x1800fad20]
movdqa xmmword [rsp + 0x20], xmm0
mov r8d, dword [rsp + 0x20]
movaps xmmword [rsp + 0x60], xmm6
movdqa xmm6, xmmword [0x1800fab80]
nop dword [rax]
movd xmm2, ecx
lea eax, [rcx + 4]
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add ecx, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1800fac70]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rdx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, r8d
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1800fac70]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 8]
xorps xmm2, xmm0
movd dword [rdx - 8], xmm2
cmp ecx, 0x10
jl 0x18002b7c0
movaps xmm6, xmmword [rsp + 0x60]
cmp ecx, 0x12
jge 0x18002b90d
movsxd rax, ecx
lea r8, [rsp + 0x40]
add r8, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x4bda12f7
lea r8, [r8 + 1]
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x36
movzx eax, cl
inc ecx
sub al, dl
add al, 0x31
xor byte [r8 - 1], al
cmp ecx, 0x12
jl 0x18002b8e0
xorps xmm0, xmm0
lea rax, [rsp + 0x40]
xorps xmm1, xmm1
mov r8, 0xffffffffffffffff
movups xmmword [rsp + 0x20], xmm0
movdqu xmmword [rsp + 0x30], xmm1
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x18002b930
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.1800140a0
lea rcx, [rsp + 0x20]
call fcn.18002c590
mov rdx, qword [rsp + 0x38]
mov qword [0x18020ba38], rax
cmp rdx, 0xf
jbe 0x18002b99a
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002b98e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002b99f
call fcn.1800b4d3c
mov rax, qword [0x18020ba38]
add rsp, 0x78
ret
call fcn.1800bbacc
int3
Function at 0x18002c870
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x88
mov rax, qword [0x18020bae8]
test rax, rax
jne 0x18002cada
mov eax, dword [0x1800e9320]
xor ecx, ecx
cmp dword [0x18010c088], 2
movups xmm0, xmmword [0x1800e9300]
mov dword [rsp + 0x60], eax
movups xmm1, xmmword [0x1800e9310]
movzx eax, byte [0x1800e9324]
movups xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x64], al
movups xmmword [rsp + 0x50], xmm1
jl 0x18002ca09
movdqa xmm0, xmmword [0x1800fac90]
lea rdx, [rsp + 0x44]
movdqa xmm5, xmmword [0x1800fab00]
movdqa xmm4, xmmword [0x1800fac80]
movdqa xmmword [rsp + 0x20], xmm0
mov r8d, dword [rsp + 0x20]
movaps xmmword [rsp + 0x70], xmm6
movdqa xmm6, xmmword [0x1800fab90]
nop dword [rax + rax]
movd xmm2, ecx
lea eax, [rcx + 4]
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add ecx, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1800fac70]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rdx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, r8d
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1800fac70]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 8]
xorps xmm2, xmm0
movd dword [rdx - 8], xmm2
cmp ecx, 0x20
jl 0x18002c900
movaps xmm6, xmmword [rsp + 0x70]
cmp ecx, 0x25
jge 0x18002ca4c
movsxd rax, ecx
lea r8, [rsp + 0x40]
add r8, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x94f2095
lea r8, [r8 + 1]
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x37
movzx eax, cl
inc ecx
sub al, dl
add al, 0x31
xor byte [r8 - 1], al
cmp ecx, 0x25
jl 0x18002ca20
xorps xmm0, xmm0
lea rax, [rsp + 0x40]
xorps xmm1, xmm1
mov r8, 0xffffffffffffffff
movups xmmword [rsp + 0x20], xmm0
movdqu xmmword [rsp + 0x30], xmm1
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x18002ca70
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.1800140a0
lea rcx, [rsp + 0x20]
call fcn.18002ee60
mov rdx, qword [rsp + 0x38]
mov qword [0x18020bae8], rax
cmp rdx, 0xf
jbe 0x18002cada
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002cace
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002cae2
call fcn.1800b4d3c
mov rax, qword [0x18020bae8]
add rsp, 0x88
ret
call fcn.1800bbacc
int3