joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140062e50
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x17], 0
mov rdx, rcx
je 0x140062fe3
movdqa xmm2, xmmword [0x140d62440]
lea r10, [rcx + 4]
movdqa xmm3, xmmword [0x140d64eb0]
mov r8, 0xfffffffffffffffe
movdqa xmm4, xmmword [0x140d625b0]
sub r8, rcx
xor eax, eax
mov r9d, 2
sub r9, rcx
nop
movzx ecx, word [r10 - 4]
movq xmm0, rax
punpcklqdq xmm0, xmm0
add rax, 8
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10 - 4], cx
lea rcx, [r8 + r10]
movq xmm0, rcx
movzx ecx, word [r10 - 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10 - 2], cx
mov rcx, r10
sub rcx, rdx
movq xmm0, rcx
movzx ecx, word [r10]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10], cx
lea rcx, [r9 + r10]
movq xmm0, rcx
movzx ecx, word [r10 + 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10 + 2], cx
add r10, 8
cmp rax, 0x10
jb 0x140062e90
cmp rax, 0x16
jae 0x140062fdf
lea ecx, [rax - 0x6e]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x16
jb 0x140062fd0
mov byte [rdx + 0x17], 0
ret
Function at 0x140062ff0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x15], 0
mov rdx, rcx
je 0x140063183
movdqa xmm2, xmmword [0x140d62440]
lea r10, [rcx + 4]
movdqa xmm3, xmmword [0x140d64eb0]
mov r8, 0xfffffffffffffffe
movdqa xmm4, xmmword [0x140d625b0]
sub r8, rcx
xor eax, eax
mov r9d, 2
sub r9, rcx
nop
movzx ecx, word [r10 - 4]
movq xmm0, rax
punpcklqdq xmm0, xmm0
add rax, 8
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10 - 4], cx
lea rcx, [r8 + r10]
movq xmm0, rcx
movzx ecx, word [r10 - 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10 - 2], cx
mov rcx, r10
sub rcx, rdx
movq xmm0, rcx
movzx ecx, word [r10]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10], cx
lea rcx, [r9 + r10]
movq xmm0, rcx
movzx ecx, word [r10 + 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10 + 2], cx
add r10, 8
cmp rax, 0x10
jb 0x140063030
cmp rax, 0x14
jae 0x14006317f
lea ecx, [rax - 0x6e]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x14
jb 0x140063170
mov byte [rdx + 0x15], 0
ret
Function at 0x140063190
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
cmp byte [rcx + 0x19], 0
je 0x140063322
movdqa xmm2, xmmword [0x140d62440]
lea r10, [rcx + 4]
movdqa xmm3, xmmword [0x140d64eb0]
mov r8, 0xfffffffffffffffe
movdqa xmm4, xmmword [0x140d625b0]
mov r9d, 2
sub r8, rcx
sub r9, rcx
mov rdx, 0xfffffffffffffffc
sub rdx, rcx
nop dword [rax]
nop word [rax + rax]
lea rax, [rdx + r10]
movq xmm0, rax
movzx eax, word [r10 - 4]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
mov word [r10 - 4], ax
lea rax, [r8 + r10]
movq xmm0, rax
movzx eax, word [r10 - 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
mov word [r10 - 2], ax
mov rax, r10
sub rax, rcx
movq xmm0, rax
movzx eax, word [r10]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
mov word [r10], ax
lea rax, [r9 + r10]
movq xmm0, rax
movzx eax, word [r10 + 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
mov word [r10 + 2], ax
add r10, 8
lea rax, [rdx + r10]
cmp rax, 0x18
jb 0x1400631e0
mov byte [rcx + 0x19], 0
ret
Function at 0x140063330
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
cmp byte [rcx + 0x11], 0
je 0x1400634c2
movdqa xmm2, xmmword [0x140d62440]
lea r10, [rcx + 4]
movdqa xmm3, xmmword [0x140d64eb0]
mov r8, 0xfffffffffffffffe
movdqa xmm4, xmmword [0x140d625b0]
mov r9d, 2
sub r8, rcx
sub r9, rcx
mov rdx, 0xfffffffffffffffc
sub rdx, rcx
nop dword [rax]
nop word [rax + rax]
lea rax, [rdx + r10]
movq xmm0, rax
movzx eax, word [r10 - 4]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
mov word [r10 - 4], ax
lea rax, [r8 + r10]
movq xmm0, rax
movzx eax, word [r10 - 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
mov word [r10 - 2], ax
mov rax, r10
sub rax, rcx
movq xmm0, rax
movzx eax, word [r10]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
mov word [r10], ax
lea rax, [r9 + r10]
movq xmm0, rax
movzx eax, word [r10 + 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
mov word [r10 + 2], ax
add r10, 8
lea rax, [rdx + r10]
cmp rax, 0x10
jb 0x140063380
mov byte [rcx + 0x11], 0
ret
Function at 0x140063510
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x12], 0
mov rdx, rcx
je 0x1400636a3
movdqa xmm2, xmmword [0x140d62440]
lea r10, [rcx + 4]
movdqa xmm3, xmmword [0x140d64eb0]
mov r8, 0xfffffffffffffffe
movdqa xmm4, xmmword [0x140d625b0]
sub r8, rcx
xor eax, eax
mov r9d, 2
sub r9, rcx
nop
movzx ecx, word [r10 - 4]
movq xmm0, rax
punpcklqdq xmm0, xmm0
add rax, 8
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10 - 4], cx
lea rcx, [r8 + r10]
movq xmm0, rcx
movzx ecx, word [r10 - 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10 - 2], cx
mov rcx, r10
sub rcx, rdx
movq xmm0, rcx
movzx ecx, word [r10]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10], cx
lea rcx, [r9 + r10]
movq xmm0, rcx
movzx ecx, word [r10 + 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10 + 2], cx
add r10, 8
cmp rax, 0x10
jb 0x140063550
cmp rax, 0x11
jae 0x14006369f
lea ecx, [rax - 0x6e]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x11
jb 0x140063690
mov byte [rdx + 0x12], 0
ret
Function at 0x1400636e0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xf], 0
mov rdx, rcx
je 0x1400637f3
movzx eax, word [rcx]
movdqa xmm3, xmmword [0x140d64eb0]
movdqa xmm2, xmmword [0x140d625b0]
movq xmm1, qword [0x140d623f0]
paddd xmm1, xmm3
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
movq xmm1, qword [0x140d62400]
paddd xmm1, xmm3
mov word [rcx], ax
movzx eax, word [rcx + 2]
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
movq xmm1, qword [0x140d62410]
paddd xmm1, xmm3
mov word [rcx + 2], ax
movzx eax, word [rcx + 4]
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
movq xmm1, qword [0x140d62420]
paddd xmm1, xmm3
mov word [rcx + 4], ax
movzx eax, word [rcx + 6]
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
mov word [rcx + 6], ax
mov eax, 8
nop dword [rax]
lea ecx, [rax - 0x6e]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0xe
jb 0x1400637e0
mov byte [rdx + 0xf], 0
ret

Function at 0x140063800
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xd], 0
mov rdx, rcx
je 0x140063913
movzx eax, word [rcx]
movdqa xmm3, xmmword [0x140d64eb0]
movdqa xmm2, xmmword [0x140d625b0]
movq xmm1, qword [0x140d623f0]
paddd xmm1, xmm3
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
movq xmm1, qword [0x140d62400]
paddd xmm1, xmm3
mov word [rcx], ax
movzx eax, word [rcx + 2]
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
movq xmm1, qword [0x140d62410]
paddd xmm1, xmm3
mov word [rcx + 2], ax
movzx eax, word [rcx + 4]
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
movq xmm1, qword [0x140d62420]
paddd xmm1, xmm3
mov word [rcx + 4], ax
movzx eax, word [rcx + 6]
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
mov word [rcx + 6], ax
mov eax, 8
nop dword [rax]
lea ecx, [rax - 0x6e]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0xc
jb 0x140063900
mov byte [rdx + 0xd], 0
ret
Function at 0x140063950
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x13], 0
mov rdx, rcx
je 0x140063ae3
movdqa xmm2, xmmword [0x140d62440]
lea r10, [rcx + 4]
movdqa xmm3, xmmword [0x140d64eb0]
mov r8, 0xfffffffffffffffe
movdqa xmm4, xmmword [0x140d625b0]
sub r8, rcx
xor eax, eax
mov r9d, 2
sub r9, rcx
nop
movzx ecx, word [r10 - 4]
movq xmm0, rax
punpcklqdq xmm0, xmm0
add rax, 8
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10 - 4], cx
lea rcx, [r8 + r10]
movq xmm0, rcx
movzx ecx, word [r10 - 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10 - 2], cx
mov rcx, r10
sub rcx, rdx
movq xmm0, rcx
movzx ecx, word [r10]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10], cx
lea rcx, [r9 + r10]
movq xmm0, rcx
movzx ecx, word [r10 + 2]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
pshufd xmm1, xmm0, 0xd8
movq xmm0, xmm3
paddd xmm1, xmm0
movd xmm0, ecx
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm1
mov word [r10 + 2], cx
add r10, 8
cmp rax, 0x10
jb 0x140063990
cmp rax, 0x12
jae 0x140063adf
lea ecx, [rax - 0x6e]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x12
jb 0x140063ad0
mov byte [rdx + 0x13], 0
ret
Function at 0x140063af0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xe], 0
mov rdx, rcx
je 0x140063c03
movzx eax, word [rcx]
movdqa xmm3, xmmword [0x140d64eb0]
movdqa xmm2, xmmword [0x140d625b0]
movq xmm1, qword [0x140d623f0]
paddd xmm1, xmm3
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
movq xmm1, qword [0x140d62400]
paddd xmm1, xmm3
mov word [rcx], ax
movzx eax, word [rcx + 2]
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
movq xmm1, qword [0x140d62410]
paddd xmm1, xmm3
mov word [rcx + 2], ax
movzx eax, word [rcx + 4]
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
movq xmm1, qword [0x140d62420]
paddd xmm1, xmm3
mov word [rcx + 4], ax
movzx eax, word [rcx + 6]
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
mov word [rcx + 6], ax
mov eax, 8
nop dword [rax]
lea ecx, [rax - 0x6e]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0xd
jb 0x140063bf0
mov byte [rdx + 0xe], 0
ret

Function at 0x140063c10
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x10], 0
mov rdx, rcx
je 0x140063d23
movzx eax, word [rcx]
movdqa xmm3, xmmword [0x140d64eb0]
movdqa xmm2, xmmword [0x140d625b0]
movq xmm1, qword [0x140d623f0]
paddd xmm1, xmm3
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
movq xmm1, qword [0x140d62400]
paddd xmm1, xmm3
mov word [rcx], ax
movzx eax, word [rcx + 2]
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
movq xmm1, qword [0x140d62410]
paddd xmm1, xmm3
mov word [rcx + 2], ax
movzx eax, word [rcx + 4]
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
movq xmm1, qword [0x140d62420]
paddd xmm1, xmm3
mov word [rcx + 4], ax
movzx eax, word [rcx + 6]
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
mov word [rcx + 6], ax
mov eax, 8
nop dword [rax]
lea ecx, [rax - 0x6e]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0xf
jb 0x140063d10
mov byte [rdx + 0x10], 0
ret
Function at 0x140063d30
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xb], 0
mov rdx, rcx
je 0x140063e43
movzx eax, word [rcx]
movdqa xmm3, xmmword [0x140d64eb0]
movdqa xmm2, xmmword [0x140d625b0]
movq xmm1, qword [0x140d623f0]
paddd xmm1, xmm3
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
movq xmm1, qword [0x140d62400]
paddd xmm1, xmm3
mov word [rcx], ax
movzx eax, word [rcx + 2]
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
movq xmm1, qword [0x140d62410]
paddd xmm1, xmm3
mov word [rcx + 2], ax
movzx eax, word [rcx + 4]
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
movq xmm1, qword [0x140d62420]
paddd xmm1, xmm3
mov word [rcx + 4], ax
movzx eax, word [rcx + 6]
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm1
mov word [rcx + 6], ax
mov eax, 8
nop dword [rax]
lea ecx, [rax - 0x6e]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0xa
jb 0x140063e30
mov byte [rdx + 0xb], 0
ret

Function at 0x140064c50
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x20
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rcx + r8], 0
jne 0x140064c60
mov rdx, rcx
lea rbx, [0x1412562a8]
mov rcx, rbx
call fcn.140065310
mov rdx, qword [0x1412562b8]
xor ecx, ecx
mov qword [0x141254c90], rdx
test rdx, rdx
je 0x140064cb0
cmp qword [0x1412562c0], 0xf
mov rax, rbx
cmova rax, qword [0x1412562a8]
xor byte [rax + rcx], 0x35
inc rcx
cmp rcx, rdx
jb 0x140064c91
add rsp, 0x20
pop rbx
ret
Function at 0x140064cc0
Capabilities:
Encode data using xor
Read .ini file

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r14
sub rsp, 0x70
mov rax, qword [0x140d81080]
xor rax, rsp
mov qword [rsp + 0x60], rax
xor ebx, ebx
lea r14, [0x1412562a8]
mov rbp, rdx
mov rsi, rcx
mov rdx, qword [0x141254c90]
mov ecx, ebx
test rdx, rdx
je 0x140064d1f
nop word [rax + rax]
cmp qword [0x1412562c0], 0xf
mov rax, r14
cmova rax, qword [0x1412562a8]
xor byte [rax + rcx], 0x35
inc rcx
cmp rcx, rdx
jb 0x140064d00
cmp qword [0x1412562c0], 0xf
lea rcx, [rsp + 0x30]
xorps xmm0, xmm0
mov rdi, r14
cmova rdi, qword [0x1412562a8]
mov edx, r8d
movups xmmword [rsp + 0x50], xmm0
call fcn.140044ad0
cmp qword [rax + 0x18], 0xf
jbe 0x140064d51
mov rax, qword [rax]
mov qword [rsp + 0x28], rdi
lea r9, [rsp + 0x50]
mov r8, rax
mov dword [rsp + 0x20], reloc.WS2_32.dll_recv
mov rdx, rbp
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea rcx, [rsp + 0x30]
call fcn.1400641b0
mov rcx, qword [0x141254c90]
test rcx, rcx
je 0x140064daf
nop dword [rax + rax]
cmp qword [0x1412562c0], 0xf
mov rax, r14
cmova rax, qword [0x1412562a8]
xor byte [rax + rbx], 0x35
inc rbx
cmp rbx, rcx
jb 0x140064d90
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.14017e360
add rsp, 0x70
pop r14
pop rdi
pop rsi
pop rbp
pop rbx
ret

Function at 0x140064de0
Capabilities:
Encode data using xor
Read .ini file

Disassembly:
push rbx
push rsi
push rdi
sub rsp, 0x60
mov rax, qword [0x140d81080]
xor rax, rsp
mov qword [rsp + 0x50], rax
mov rdi, r9
mov r11, r8
mov r10, rdx
mov rbx, rcx
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x38], r9
xor ecx, ecx
lea rsi, [0x1412562a8]
mov rdx, qword [0x141254c90]
test rdx, rdx
je 0x140064e41
mov rax, rsi
cmp qword [0x1412562c0], 0xf
cmova rax, qword [0x1412562a8]
xor byte [rax + rcx], 0x35
inc rcx
cmp rcx, rdx
jb 0x140064e22
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov rax, rsi
cmp qword [0x1412562c0], 0xf
cmova rax, qword [0x1412562a8]
mov r8, rdi
cmp qword [r9 + 0x18], 0xf
jbe 0x140064e69
mov r8, qword [r9]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], reloc.WS2_32.dll_recv
lea r9, [rsp + 0x40]
mov rdx, r11
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
xor ecx, ecx
mov rdx, qword [0x141254c90]
test rdx, rdx
je 0x140064eb4
mov rax, rsi
cmp qword [0x1412562c0], 0xf
cmova rax, qword [0x1412562a8]
xor byte [rax + rcx], 0x35
inc rcx
cmp rcx, rdx
jb 0x140064e95
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
mov qword [rbx + 0x18], 0
lea rax, [rsp + 0x40]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x140064ed6
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.1400643b0
nop
mov rcx, rdi
call fcn.1400641b0
mov rax, rbx
mov rcx, qword [rsp + 0x50]
xor rcx, rsp
call fcn.14017e360
add rsp, 0x60
pop rdi
pop rsi
pop rbx
ret
Function at 0x140064f10
Capabilities:
Encode data using xor
Read .ini file

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r14
sub rsp, 0x70
mov rax, qword [0x140d81080]
xor rax, rsp
mov qword [rsp + 0x68], rax
xor edi, edi
lea r14, [0x1412562a8]
mov rbp, rdx
mov rsi, rcx
mov rdx, qword [0x141254c90]
mov ecx, edi
test rdx, rdx
je 0x140064f6f
nop word [rax + rax]
cmp qword [0x1412562c0], 0xf
mov rax, r14
cmova rax, qword [0x1412562a8]
xor byte [rax + rcx], 0x35
inc rcx
cmp rcx, rdx
jb 0x140064f50
cmp qword [0x1412562c0], 0xf
lea rcx, [rsp + 0x38]
xorps xmm1, xmm1
xorps xmm0, xmm0
cvtss2sd xmm1, xmm2
mov rbx, r14
cmova rbx, qword [0x1412562a8]
movups xmmword [rsp + 0x58], xmm0
call fcn.140064b00
cmp qword [rsp + 0x50], 0xf
lea r8, [rsp + 0x38]
mov qword [rsp + 0x28], rbx
lea r9, [rsp + 0x58]
cmova r8, qword [rsp + 0x38]
mov rdx, rbp
mov rcx, rsi
mov dword [rsp + 0x20], reloc.WS2_32.dll_recv
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea rcx, [rsp + 0x38]
call fcn.1400641b0
mov rcx, qword [0x141254c90]
test rcx, rcx
je 0x140064fff
cmp qword [0x1412562c0], 0xf
mov rax, r14
cmova rax, qword [0x1412562a8]
xor byte [rax + rdi], 0x35
inc rdi
cmp rdi, rcx
jb 0x140064fe0
lea rcx, [rsp + 0x58]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atof]
cvtsd2ss xmm0, xmm0
mov rcx, qword [rsp + 0x68]
xor rcx, rsp
call fcn.14017e360
add rsp, 0x70
pop r14
pop rdi
pop rsi
pop rbp
pop rbx
ret

Function at 0x140065030
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
sub rsp, 0x50
mov rax, qword [0x140d81080]
xor rax, rsp
mov qword [rsp + 0x40], rax
mov rsi, rdx
mov rdi, rcx
mov edx, r8d
lea rcx, [rsp + 0x20]
call fcn.140044ad0
mov rdx, qword [0x141254c90]
lea rbp, [0x1412562a8]
xor ebx, ebx
mov ecx, ebx
test rdx, rdx
je 0x140065094
cmp qword [0x1412562c0], 0xf
mov rax, rbp
cmova rax, qword [0x1412562a8]
xor byte [rax + rcx], 0x35
inc rcx
cmp rcx, rdx
jb 0x140065075
cmp qword [0x1412562c0], 0xf
lea r8, [rsp + 0x20]
mov r9, rbp
mov rdx, rsi
cmova r9, qword [0x1412562a8]
mov rcx, rdi
cmp qword [rsp + 0x38], 0xf
cmova r8, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov rcx, qword [0x141254c90]
test rcx, rcx
je 0x1400650ef
cmp qword [0x1412562c0], 0xf
mov rax, rbp
cmova rax, qword [0x1412562a8]
xor byte [rax + rbx], 0x35
inc rbx
cmp rbx, rcx
jb 0x1400650d0
lea rcx, [rsp + 0x20]
call fcn.1400641b0
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.14017e360
mov rbx, qword [rsp + 0x80]
add rsp, 0x50
pop rdi
pop rsi
pop rbp
ret