joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140016820
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x18
cmp byte [rcx + 0x1a], 0
mov r8, rcx
je 0x140016986
xor eax, eax
cmp dword [0x140044090], 5
jl 0x140016945
movdqa xmm5, xmmword [0x14003dc00]
mov eax, recv
movdqa xmm4, xmmword [0x14003d9c0]
movdqa xmm3, xmmword [0x14003d940]
movdqa xmm2, xmmword [0x14003d960]
movdqa xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx]
pshufb xmm1, xmm4
movaps xmmword [rsp], xmm6
movdqa xmm6, xmmword [0x14003d9d0]
andps xmm1, xmm6
psllq xmm3, 3
xorps xmm1, xmm0
movdqa xmm0, xmm2
movd dword [rcx], xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx + 4]
pshufb xmm1, xmm4
psllq xmm2, 3
andps xmm1, xmm6
xorps xmm1, xmm0
movdqa xmm0, xmmword [reloc.WS2_32.dll_connect]
movd dword [rcx + 4], xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx + 8]
pshufb xmm1, xmm4
andps xmm1, xmm6
xorps xmm1, xmm0
movdqa xmm0, xmmword [0x14003d990]
movd dword [rcx + 8], xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx + 0xc]
pshufb xmm1, xmm4
andps xmm1, xmm6
xorps xmm1, xmm0
movd dword [rcx + 0xc], xmm1
movd xmm0, dword [rcx + 0x10]
vpsrlvq xmm1, xmm5, xmm3
pshufb xmm1, xmm4
andps xmm1, xmm6
xorps xmm1, xmm0
movd dword [rcx + 0x10], xmm1
movd xmm0, dword [rcx + 0x14]
vpsrlvq xmm1, xmm5, xmm2
pshufb xmm1, xmm4
andps xmm1, xmm6
movaps xmm6, xmmword [rsp]
xorps xmm1, xmm0
movd dword [rcx + 0x14], xmm1
movabs r9, 0x6dc5813d678f5b13
mov r10d, 0xff
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
and dx, r10w
xor word [r8 + rax*2], dx
inc rax
cmp rax, 0xd
jb 0x140016960
mov byte [r8 + 0x1a], 0
add rsp, 0x18
ret
Function at 0x140016ab0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x18
cmp byte [rcx + 0x2e], 0
mov r8, rcx
je 0x140016c46
xor eax, eax
cmp dword [0x140044090], 5
jl 0x140016c08
movdqa xmm0, xmmword [0x14003d9d0]
lea rdx, [rcx + 8]
movdqa xmm2, xmmword [0x14003d940]
movdqa xmm3, xmmword [0x14003d9a0]
movdqa xmm4, xmmword [0x14003db70]
movdqa xmm5, xmmword [0x14003d9c0]
movdqa xmmword [rsp], xmm0
mov r9d, dword [rsp]
nop word [rax + rax]
lea rcx, [rax + 2]
movq xmm0, rax
punpcklqdq xmm0, xmm0
lea rdx, [rdx + 0x10]
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
pshufb xmm1, xmm5
movd xmm0, r9d
andps xmm1, xmm0
movd xmm0, dword [rdx - 0x18]
xorps xmm1, xmm0
movq xmm0, rcx
punpcklqdq xmm0, xmm0
lea rcx, [rax + 4]
movd dword [rdx - 0x18], xmm1
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
pshufb xmm1, xmm5
movd xmm0, r9d
andps xmm1, xmm0
movd xmm0, dword [rdx - 0x14]
xorps xmm1, xmm0
movq xmm0, rcx
movd dword [rdx - 0x14], xmm1
lea rcx, [rax + 6]
punpcklqdq xmm0, xmm0
add rax, 8
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
pshufb xmm1, xmm5
movd xmm0, r9d
andps xmm1, xmm0
movd xmm0, dword [rdx - 0x10]
xorps xmm1, xmm0
movq xmm0, rcx
movd dword [rdx - 0x10], xmm1
lea rcx, [rax + 4]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, r9d
pshufb xmm1, xmm5
andps xmm1, xmm0
movd xmm0, dword [rdx - 0xc]
xorps xmm1, xmm0
movd dword [rdx - 0xc], xmm1
cmp rcx, 0x14
jb 0x140016b10
cmp rax, 0x17
jae 0x140016c41
movabs r9, 0x49bd3f75f7212955
mov r10d, 0xff
nop dword [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
and dx, r10w
xor word [r8 + rax*2], dx
inc rax
cmp rax, 0x17
jb 0x140016c20
mov byte [r8 + 0x2e], 0
add rsp, 0x18
ret
Function at 0x140016c50
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x18
cmp byte [rcx + 0x20], 0
mov r8, rcx
je 0x140016de6
xor eax, eax
cmp dword [0x140044090], 5
jl 0x140016dac
movdqa xmm0, xmmword [0x14003d9d0]
mov edx, 4
movdqa xmm2, xmmword [0x14003d940]
add rcx, 8
movdqa xmm3, xmmword [0x14003d9a0]
movdqa xmm4, xmmword [0x14003db80]
movdqa xmm5, xmmword [0x14003d9c0]
movdqa xmmword [rsp], xmm0
mov r9d, dword [rsp]
nop word [rax + rax]
lea rax, [rdx - 4]
movq xmm0, rax
lea rcx, [rcx + 0x10]
punpcklqdq xmm0, xmm0
lea rax, [rdx - 2]
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
pshufb xmm1, xmm5
movd xmm0, r9d
andps xmm1, xmm0
movd xmm0, dword [rcx - 0x18]
xorps xmm1, xmm0
movq xmm0, rax
punpcklqdq xmm0, xmm0
lea rax, [rdx + 2]
movd dword [rcx - 0x18], xmm1
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
pshufb xmm1, xmm5
movd xmm0, r9d
andps xmm1, xmm0
movd xmm0, dword [rcx - 0x14]
xorps xmm1, xmm0
movq xmm0, rdx
movd dword [rcx - 0x14], xmm1
add rdx, 8
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
pshufb xmm1, xmm5
movd xmm0, r9d
andps xmm1, xmm0
movd xmm0, dword [rcx - 0x10]
xorps xmm1, xmm0
movq xmm0, rax
movd dword [rcx - 0x10], xmm1
lea rax, [rdx - 4]
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
movd xmm0, r9d
pshufb xmm1, xmm5
andps xmm1, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm1, xmm0
movd dword [rcx - 0xc], xmm1
cmp rax, 0x10
jb 0x140016cb0
mov byte [r8 + 0x20], 0
add rsp, 0x18
ret
movabs r9, 0x4b736979ed59d529
mov r10d, 0xff
nop dword [rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
and dx, r10w
xor word [r8 + rax*2], dx
inc rax
cmp rax, 0x10
jb 0x140016dc0
mov byte [r8 + 0x20], 0
add rsp, 0x18
ret
Function at 0x140016f10
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x18
cmp byte [rcx + 0x1a], 0
mov r8, rcx
je 0x140017076
xor eax, eax
cmp dword [0x140044090], 5
jl 0x140017035
movdqa xmm5, xmmword [0x14003db20]
mov eax, recv
movdqa xmm4, xmmword [0x14003d9c0]
movdqa xmm3, xmmword [0x14003d940]
movdqa xmm2, xmmword [0x14003d960]
movdqa xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx]
pshufb xmm1, xmm4
movaps xmmword [rsp], xmm6
movdqa xmm6, xmmword [0x14003d9d0]
andps xmm1, xmm6
psllq xmm3, 3
xorps xmm1, xmm0
movdqa xmm0, xmm2
movd dword [rcx], xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx + 4]
pshufb xmm1, xmm4
psllq xmm2, 3
andps xmm1, xmm6
xorps xmm1, xmm0
movdqa xmm0, xmmword [reloc.WS2_32.dll_connect]
movd dword [rcx + 4], xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx + 8]
pshufb xmm1, xmm4
andps xmm1, xmm6
xorps xmm1, xmm0
movdqa xmm0, xmmword [0x14003d990]
movd dword [rcx + 8], xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx + 0xc]
pshufb xmm1, xmm4
andps xmm1, xmm6
xorps xmm1, xmm0
movd dword [rcx + 0xc], xmm1
movd xmm0, dword [rcx + 0x10]
vpsrlvq xmm1, xmm5, xmm3
pshufb xmm1, xmm4
andps xmm1, xmm6
xorps xmm1, xmm0
movd dword [rcx + 0x10], xmm1
movd xmm0, dword [rcx + 0x14]
vpsrlvq xmm1, xmm5, xmm2
pshufb xmm1, xmm4
andps xmm1, xmm6
movaps xmm6, xmmword [rsp]
xorps xmm1, xmm0
movd dword [rcx + 0x14], xmm1
movabs r9, 0x3d41532d4bf90967
mov r10d, 0xff
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
and dx, r10w
xor word [r8 + rax*2], dx
inc rax
cmp rax, 0xd
jb 0x140017050
mov byte [r8 + 0x1a], 0
add rsp, 0x18
ret
Function at 0x1400172c0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x18
cmp byte [rcx + 0x18], 0
mov r8, rcx
je 0x140017426
xor eax, eax
cmp dword [0x140044090], 5
jl 0x1400173e8
movdqa xmm5, xmmword [0x14003da20]
movdqa xmm4, xmmword [0x14003d9c0]
movdqa xmm3, xmmword [0x14003d940]
movdqa xmm2, xmmword [0x14003d960]
movdqa xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx]
pshufb xmm1, xmm4
movaps xmmword [rsp], xmm6
movdqa xmm6, xmmword [0x14003d9d0]
andps xmm1, xmm6
psllq xmm3, 3
xorps xmm1, xmm0
movdqa xmm0, xmm2
movd dword [rcx], xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx + 4]
pshufb xmm1, xmm4
psllq xmm2, 3
andps xmm1, xmm6
xorps xmm1, xmm0
movdqa xmm0, xmmword [reloc.WS2_32.dll_connect]
movd dword [rcx + 4], xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx + 8]
pshufb xmm1, xmm4
andps xmm1, xmm6
xorps xmm1, xmm0
movdqa xmm0, xmmword [0x14003d990]
movd dword [rcx + 8], xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx + 0xc]
pshufb xmm1, xmm4
andps xmm1, xmm6
xorps xmm1, xmm0
movd dword [rcx + 0xc], xmm1
movd xmm0, dword [rcx + 0x10]
vpsrlvq xmm1, xmm5, xmm3
pshufb xmm1, xmm4
andps xmm1, xmm6
xorps xmm1, xmm0
movd dword [rcx + 0x10], xmm1
movd xmm0, dword [rcx + 0x14]
vpsrlvq xmm1, xmm5, xmm2
pshufb xmm1, xmm4
andps xmm1, xmm6
movaps xmm6, xmmword [rsp]
xorps xmm1, xmm0
movd dword [rcx + 0x14], xmm1
mov byte [rcx + 0x18], al
add rsp, 0x18
ret
movabs r9, 0xd672f057b4949a5
mov r10d, 0xff
nop dword [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
and dx, r10w
xor word [r8 + rax*2], dx
inc rax
cmp rax, 0xc
jb 0x140017400
mov byte [r8 + 0x18], 0
add rsp, 0x18
ret
Function at 0x140017570
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x18
cmp byte [rcx + 0x18], 0
mov r8, rcx
je 0x1400176d6
xor eax, eax
cmp dword [0x140044090], 5
jl 0x140017698
movdqa xmm5, xmmword [0x14003dbe0]
movdqa xmm4, xmmword [0x14003d9c0]
movdqa xmm3, xmmword [0x14003d940]
movdqa xmm2, xmmword [0x14003d960]
movdqa xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx]
pshufb xmm1, xmm4
movaps xmmword [rsp], xmm6
movdqa xmm6, xmmword [0x14003d9d0]
andps xmm1, xmm6
psllq xmm3, 3
xorps xmm1, xmm0
movdqa xmm0, xmm2
movd dword [rcx], xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx + 4]
pshufb xmm1, xmm4
psllq xmm2, 3
andps xmm1, xmm6
xorps xmm1, xmm0
movdqa xmm0, xmmword [reloc.WS2_32.dll_connect]
movd dword [rcx + 4], xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx + 8]
pshufb xmm1, xmm4
andps xmm1, xmm6
xorps xmm1, xmm0
movdqa xmm0, xmmword [0x14003d990]
movd dword [rcx + 8], xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx + 0xc]
pshufb xmm1, xmm4
andps xmm1, xmm6
xorps xmm1, xmm0
movd dword [rcx + 0xc], xmm1
movd xmm0, dword [rcx + 0x10]
vpsrlvq xmm1, xmm5, xmm3
pshufb xmm1, xmm4
andps xmm1, xmm6
xorps xmm1, xmm0
movd dword [rcx + 0x10], xmm1
movd xmm0, dword [rcx + 0x14]
vpsrlvq xmm1, xmm5, xmm2
pshufb xmm1, xmm4
andps xmm1, xmm6
movaps xmm6, xmmword [rsp]
xorps xmm1, xmm0
movd dword [rcx + 0x14], xmm1
mov byte [rcx + 0x18], al
add rsp, 0x18
ret
movabs r9, 0x65f3a3619551270b
mov r10d, 0xff
nop dword [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
and dx, r10w
xor word [r8 + rax*2], dx
inc rax
cmp rax, 0xc
jb 0x1400176b0
mov byte [r8 + 0x18], 0
add rsp, 0x18
ret
Function at 0x1400176e0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x18
cmp byte [rcx + 0x18], 0
mov r8, rcx
je 0x140017846
xor eax, eax
cmp dword [0x140044090], 5
jl 0x140017808
movdqa xmm5, xmmword [0x14003dae0]
movdqa xmm4, xmmword [0x14003d9c0]
movdqa xmm3, xmmword [0x14003d940]
movdqa xmm2, xmmword [0x14003d960]
movdqa xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx]
pshufb xmm1, xmm4
movaps xmmword [rsp], xmm6
movdqa xmm6, xmmword [0x14003d9d0]
andps xmm1, xmm6
psllq xmm3, 3
xorps xmm1, xmm0
movdqa xmm0, xmm2
movd dword [rcx], xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx + 4]
pshufb xmm1, xmm4
psllq xmm2, 3
andps xmm1, xmm6
xorps xmm1, xmm0
movdqa xmm0, xmmword [reloc.WS2_32.dll_connect]
movd dword [rcx + 4], xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx + 8]
pshufb xmm1, xmm4
andps xmm1, xmm6
xorps xmm1, xmm0
movdqa xmm0, xmmword [0x14003d990]
movd dword [rcx + 8], xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx + 0xc]
pshufb xmm1, xmm4
andps xmm1, xmm6
xorps xmm1, xmm0
movd dword [rcx + 0xc], xmm1
movd xmm0, dword [rcx + 0x10]
vpsrlvq xmm1, xmm5, xmm3
pshufb xmm1, xmm4
andps xmm1, xmm6
xorps xmm1, xmm0
movd dword [rcx + 0x10], xmm1
movd xmm0, dword [rcx + 0x14]
vpsrlvq xmm1, xmm5, xmm2
pshufb xmm1, xmm4
andps xmm1, xmm6
movaps xmm6, xmmword [rsp]
xorps xmm1, xmm0
movd dword [rcx + 0x14], xmm1
mov byte [rcx + 0x18], al
add rsp, 0x18
ret
movabs r9, 0x27ada77def277b71
mov r10d, 0xff
nop dword [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
and dx, r10w
xor word [r8 + rax*2], dx
inc rax
cmp rax, 0xc
jb 0x140017820
mov byte [r8 + 0x18], 0
add rsp, 0x18
ret
Function at 0x140017970
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x18
cmp byte [rcx + 0x1a], 0
mov r8, rcx
je 0x140017ad6
xor eax, eax
cmp dword [0x140044090], 5
jl 0x140017a95
movdqa xmm5, xmmword [0x14003dcf0]
mov eax, recv
movdqa xmm4, xmmword [0x14003d9c0]
movdqa xmm3, xmmword [0x14003d940]
movdqa xmm2, xmmword [0x14003d960]
movdqa xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx]
pshufb xmm1, xmm4
movaps xmmword [rsp], xmm6
movdqa xmm6, xmmword [0x14003d9d0]
andps xmm1, xmm6
psllq xmm3, 3
xorps xmm1, xmm0
movdqa xmm0, xmm2
movd dword [rcx], xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx + 4]
pshufb xmm1, xmm4
psllq xmm2, 3
andps xmm1, xmm6
xorps xmm1, xmm0
movdqa xmm0, xmmword [reloc.WS2_32.dll_connect]
movd dword [rcx + 4], xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx + 8]
pshufb xmm1, xmm4
andps xmm1, xmm6
xorps xmm1, xmm0
movdqa xmm0, xmmword [0x14003d990]
movd dword [rcx + 8], xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx + 0xc]
pshufb xmm1, xmm4
andps xmm1, xmm6
xorps xmm1, xmm0
movd dword [rcx + 0xc], xmm1
movd xmm0, dword [rcx + 0x10]
vpsrlvq xmm1, xmm5, xmm3
pshufb xmm1, xmm4
andps xmm1, xmm6
xorps xmm1, xmm0
movd dword [rcx + 0x10], xmm1
movd xmm0, dword [rcx + 0x14]
vpsrlvq xmm1, xmm5, xmm2
pshufb xmm1, xmm4
andps xmm1, xmm6
movaps xmm6, xmmword [rsp]
xorps xmm1, xmm0
movd dword [rcx + 0x14], xmm1
movabs r9, 0xabcb91c1b3e91597
mov r10d, 0xff
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
and dx, r10w
xor word [r8 + rax*2], dx
inc rax
cmp rax, 0xd
jb 0x140017ab0
mov byte [r8 + 0x1a], 0
add rsp, 0x18
ret
Function at 0x140017ae0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x18
cmp byte [rcx + 0x1a], 0
mov r8, rcx
je 0x140017c46
xor eax, eax
cmp dword [0x140044090], 5
jl 0x140017c05
movdqa xmm5, xmmword [0x14003de00]
mov eax, recv
movdqa xmm4, xmmword [0x14003d9c0]
movdqa xmm3, xmmword [0x14003d940]
movdqa xmm2, xmmword [0x14003d960]
movdqa xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx]
pshufb xmm1, xmm4
movaps xmmword [rsp], xmm6
movdqa xmm6, xmmword [0x14003d9d0]
andps xmm1, xmm6
psllq xmm3, 3
xorps xmm1, xmm0
movdqa xmm0, xmm2
movd dword [rcx], xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx + 4]
pshufb xmm1, xmm4
psllq xmm2, 3
andps xmm1, xmm6
xorps xmm1, xmm0
movdqa xmm0, xmmword [reloc.WS2_32.dll_connect]
movd dword [rcx + 4], xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx + 8]
pshufb xmm1, xmm4
andps xmm1, xmm6
xorps xmm1, xmm0
movdqa xmm0, xmmword [0x14003d990]
movd dword [rcx + 8], xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx + 0xc]
pshufb xmm1, xmm4
andps xmm1, xmm6
xorps xmm1, xmm0
movd dword [rcx + 0xc], xmm1
movd xmm0, dword [rcx + 0x10]
vpsrlvq xmm1, xmm5, xmm3
pshufb xmm1, xmm4
andps xmm1, xmm6
xorps xmm1, xmm0
movd dword [rcx + 0x10], xmm1
movd xmm0, dword [rcx + 0x14]
vpsrlvq xmm1, xmm5, xmm2
pshufb xmm1, xmm4
andps xmm1, xmm6
movaps xmm6, xmmword [rsp]
xorps xmm1, xmm0
movd dword [rcx + 0x14], xmm1
movabs r9, 0xe793a5b9bb913b9f
mov r10d, 0xff
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
and dx, r10w
xor word [r8 + rax*2], dx
inc rax
cmp rax, 0xd
jb 0x140017c20
mov byte [r8 + 0x1a], 0
add rsp, 0x18
ret
Function at 0x140017c50
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x18
cmp byte [rcx + 0x18], 0
mov r8, rcx
je 0x140017db6
xor eax, eax
cmp dword [0x140044090], 5
jl 0x140017d78
movdqa xmm5, xmmword [0x14003dc50]
movdqa xmm4, xmmword [0x14003d9c0]
movdqa xmm3, xmmword [0x14003d940]
movdqa xmm2, xmmword [0x14003d960]
movdqa xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx]
pshufb xmm1, xmm4
movaps xmmword [rsp], xmm6
movdqa xmm6, xmmword [0x14003d9d0]
andps xmm1, xmm6
psllq xmm3, 3
xorps xmm1, xmm0
movdqa xmm0, xmm2
movd dword [rcx], xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx + 4]
pshufb xmm1, xmm4
psllq xmm2, 3
andps xmm1, xmm6
xorps xmm1, xmm0
movdqa xmm0, xmmword [reloc.WS2_32.dll_connect]
movd dword [rcx + 4], xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx + 8]
pshufb xmm1, xmm4
andps xmm1, xmm6
xorps xmm1, xmm0
movdqa xmm0, xmmword [0x14003d990]
movd dword [rcx + 8], xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx + 0xc]
pshufb xmm1, xmm4
andps xmm1, xmm6
xorps xmm1, xmm0
movd dword [rcx + 0xc], xmm1
movd xmm0, dword [rcx + 0x10]
vpsrlvq xmm1, xmm5, xmm3
pshufb xmm1, xmm4
andps xmm1, xmm6
xorps xmm1, xmm0
movd dword [rcx + 0x10], xmm1
movd xmm0, dword [rcx + 0x14]
vpsrlvq xmm1, xmm5, xmm2
pshufb xmm1, xmm4
andps xmm1, xmm6
movaps xmm6, xmmword [rsp]
xorps xmm1, xmm0
movd dword [rcx + 0x14], xmm1
mov byte [rcx + 0x18], al
add rsp, 0x18
ret
movabs r9, 0x773f0129dddf7719
mov r10d, 0xff
nop dword [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
and dx, r10w
xor word [r8 + rax*2], dx
inc rax
cmp rax, 0xc
jb 0x140017d90
mov byte [r8 + 0x18], 0
add rsp, 0x18
ret
Function at 0x140017dc0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x18
cmp byte [rcx + 0x18], 0
mov r8, rcx
je 0x140017f26
xor eax, eax
cmp dword [0x140044090], 5
jl 0x140017ee8
movdqa xmm5, xmmword [0x14003de30]
movdqa xmm4, xmmword [0x14003d9c0]
movdqa xmm3, xmmword [0x14003d940]
movdqa xmm2, xmmword [0x14003d960]
movdqa xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx]
pshufb xmm1, xmm4
movaps xmmword [rsp], xmm6
movdqa xmm6, xmmword [0x14003d9d0]
andps xmm1, xmm6
psllq xmm3, 3
xorps xmm1, xmm0
movdqa xmm0, xmm2
movd dword [rcx], xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx + 4]
pshufb xmm1, xmm4
psllq xmm2, 3
andps xmm1, xmm6
xorps xmm1, xmm0
movdqa xmm0, xmmword [reloc.WS2_32.dll_connect]
movd dword [rcx + 4], xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx + 8]
pshufb xmm1, xmm4
andps xmm1, xmm6
xorps xmm1, xmm0
movdqa xmm0, xmmword [0x14003d990]
movd dword [rcx + 8], xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx + 0xc]
pshufb xmm1, xmm4
andps xmm1, xmm6
xorps xmm1, xmm0
movd dword [rcx + 0xc], xmm1
movd xmm0, dword [rcx + 0x10]
vpsrlvq xmm1, xmm5, xmm3
pshufb xmm1, xmm4
andps xmm1, xmm6
xorps xmm1, xmm0
movd dword [rcx + 0x10], xmm1
movd xmm0, dword [rcx + 0x14]
vpsrlvq xmm1, xmm5, xmm2
pshufb xmm1, xmm4
andps xmm1, xmm6
movaps xmm6, xmmword [rsp]
xorps xmm1, xmm0
movd dword [rcx + 0x14], xmm1
mov byte [rcx + 0x18], al
add rsp, 0x18
ret
movabs r9, 0xf3d721dd83fbbdcd
mov r10d, 0xff
nop dword [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
and dx, r10w
xor word [r8 + rax*2], dx
inc rax
cmp rax, 0xc
jb 0x140017f00
mov byte [r8 + 0x18], 0
add rsp, 0x18
ret
Function at 0x140018050
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x18
cmp byte [rcx + 0x18], 0
mov r8, rcx
je 0x1400181b6
xor eax, eax
cmp dword [0x140044090], 5
jl 0x140018178
movdqa xmm5, xmmword [0x14003da60]
movdqa xmm4, xmmword [0x14003d9c0]
movdqa xmm3, xmmword [0x14003d940]
movdqa xmm2, xmmword [0x14003d960]
movdqa xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx]
pshufb xmm1, xmm4
movaps xmmword [rsp], xmm6
movdqa xmm6, xmmword [0x14003d9d0]
andps xmm1, xmm6
psllq xmm3, 3
xorps xmm1, xmm0
movdqa xmm0, xmm2
movd dword [rcx], xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx + 4]
pshufb xmm1, xmm4
psllq xmm2, 3
andps xmm1, xmm6
xorps xmm1, xmm0
movdqa xmm0, xmmword [reloc.WS2_32.dll_connect]
movd dword [rcx + 4], xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx + 8]
pshufb xmm1, xmm4
andps xmm1, xmm6
xorps xmm1, xmm0
movdqa xmm0, xmmword [0x14003d990]
movd dword [rcx + 8], xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx + 0xc]
pshufb xmm1, xmm4
andps xmm1, xmm6
xorps xmm1, xmm0
movd dword [rcx + 0xc], xmm1
movd xmm0, dword [rcx + 0x10]
vpsrlvq xmm1, xmm5, xmm3
pshufb xmm1, xmm4
andps xmm1, xmm6
xorps xmm1, xmm0
movd dword [rcx + 0x10], xmm1
movd xmm0, dword [rcx + 0x14]
vpsrlvq xmm1, xmm5, xmm2
pshufb xmm1, xmm4
andps xmm1, xmm6
movaps xmm6, xmmword [rsp]
xorps xmm1, xmm0
movd dword [rcx + 0x14], xmm1
mov byte [rcx + 0x18], al
add rsp, 0x18
ret
movabs r9, 0x151db3d98b8d6531
mov r10d, 0xff
nop dword [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
and dx, r10w
xor word [r8 + rax*2], dx
inc rax
cmp rax, 0xc
jb 0x140018190
mov byte [r8 + 0x18], 0
add rsp, 0x18
ret
Function at 0x1400181c0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x18
cmp byte [rcx + 0x18], 0
mov r8, rcx
je 0x140018326
xor eax, eax
cmp dword [0x140044090], 5
jl 0x1400182e8
movdqa xmm5, xmmword [0x14003ddb0]
movdqa xmm4, xmmword [0x14003d9c0]
movdqa xmm3, xmmword [0x14003d940]
movdqa xmm2, xmmword [0x14003d960]
movdqa xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx]
pshufb xmm1, xmm4
movaps xmmword [rsp], xmm6
movdqa xmm6, xmmword [0x14003d9d0]
andps xmm1, xmm6
psllq xmm3, 3
xorps xmm1, xmm0
movdqa xmm0, xmm2
movd dword [rcx], xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx + 4]
pshufb xmm1, xmm4
psllq xmm2, 3
andps xmm1, xmm6
xorps xmm1, xmm0
movdqa xmm0, xmmword [reloc.WS2_32.dll_connect]
movd dword [rcx + 4], xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx + 8]
pshufb xmm1, xmm4
andps xmm1, xmm6
xorps xmm1, xmm0
movdqa xmm0, xmmword [0x14003d990]
movd dword [rcx + 8], xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx + 0xc]
pshufb xmm1, xmm4
andps xmm1, xmm6
xorps xmm1, xmm0
movd dword [rcx + 0xc], xmm1
movd xmm0, dword [rcx + 0x10]
vpsrlvq xmm1, xmm5, xmm3
pshufb xmm1, xmm4
andps xmm1, xmm6
xorps xmm1, xmm0
movd dword [rcx + 0x10], xmm1
movd xmm0, dword [rcx + 0x14]
vpsrlvq xmm1, xmm5, xmm2
pshufb xmm1, xmm4
andps xmm1, xmm6
movaps xmm6, xmmword [rsp]
xorps xmm1, xmm0
movd dword [rcx + 0x14], xmm1
mov byte [rcx + 0x18], al
add rsp, 0x18
ret
movabs r9, 0xd11d632705f38f73
mov r10d, 0xff
nop dword [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
and dx, r10w
xor word [r8 + rax*2], dx
inc rax
cmp rax, 0xc
jb 0x140018300
mov byte [r8 + 0x18], 0
add rsp, 0x18
ret
Function at 0x140018330
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x18
cmp byte [rcx + 0x18], 0
mov r8, rcx
je 0x140018496
xor eax, eax
cmp dword [0x140044090], 5
jl 0x140018458
movdqa xmm5, xmmword [0x14003db50]
movdqa xmm4, xmmword [0x14003d9c0]
movdqa xmm3, xmmword [0x14003d940]
movdqa xmm2, xmmword [0x14003d960]
movdqa xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx]
pshufb xmm1, xmm4
movaps xmmword [rsp], xmm6
movdqa xmm6, xmmword [0x14003d9d0]
andps xmm1, xmm6
psllq xmm3, 3
xorps xmm1, xmm0
movdqa xmm0, xmm2
movd dword [rcx], xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx + 4]
pshufb xmm1, xmm4
psllq xmm2, 3
andps xmm1, xmm6
xorps xmm1, xmm0
movdqa xmm0, xmmword [reloc.WS2_32.dll_connect]
movd dword [rcx + 4], xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx + 8]
pshufb xmm1, xmm4
andps xmm1, xmm6
xorps xmm1, xmm0
movdqa xmm0, xmmword [0x14003d990]
movd dword [rcx + 8], xmm1
psllq xmm0, 3
vpsrlvq xmm1, xmm5, xmm0
movd xmm0, dword [rcx + 0xc]
pshufb xmm1, xmm4
andps xmm1, xmm6
xorps xmm1, xmm0
movd dword [rcx + 0xc], xmm1
movd xmm0, dword [rcx + 0x10]
vpsrlvq xmm1, xmm5, xmm3
pshufb xmm1, xmm4
andps xmm1, xmm6
xorps xmm1, xmm0
movd dword [rcx + 0x10], xmm1
movd xmm0, dword [rcx + 0x14]
vpsrlvq xmm1, xmm5, xmm2
pshufb xmm1, xmm4
andps xmm1, xmm6
movaps xmm6, xmmword [rsp]
xorps xmm1, xmm0
movd dword [rcx + 0x14], xmm1
mov byte [rcx + 0x18], al
add rsp, 0x18
ret
movabs r9, 0x4529a72fe73125d9
mov r10d, 0xff
nop dword [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
and dx, r10w
xor word [r8 + rax*2], dx
inc rax
cmp rax, 0xc
jb 0x140018470
mov byte [r8 + 0x18], 0
add rsp, 0x18
ret