joyce8/EMBER2024-capa huggingface dataset:
Function at 0x180018970
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xe0
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
mov rsi, qword [0x1801773d8]
mov r15, qword [0x1801773e0]
cmp rsi, r15
je 0x180018b41
xor r13d, r13d
movzx ebx, byte [rbp + 0x67]
movss xmm7, dword [0x18012c5d0]
movzx edi, byte [rbp + 0x67]
nop
movsd xmm6, qword [rsi + 0x50]
movss xmm0, dword [0x1801735ec]
cvtps2pd xmm0, xmm0
comisd xmm6, xmm0
jae 0x180018b34
lea rcx, [0x180173350]
call fcn.18005a750
mov r12d, eax
mov dword [rbp + 0x6f], 0x695e12
mov byte [rbp + 0x73], 1
mov rdx, r13
nop word [rax + rax]
lea ecx, [rdx + 0x32]
xor byte [rbp + rdx + 0x6f], cl
inc rdx
cmp rdx, 3
jb 0x180018a00
mov byte [rbp + 0x73], 0
cvttsd2si edx, xmm6
lea rcx, [rbp - 0x19]
call fcn.180014090
mov r14, rax
mov dword [rbp + 0x67], 0x1006812
mov rdx, r13
nop
lea ecx, [rdx + 0x32]
xor byte [rbp + rdx + 0x67], cl
inc rdx
cmp rdx, 2
jb 0x180018a30
mov byte [rbp + 0x6a], 0
mov rdx, qword [rsi + 0x10]
lea rax, [rbp + 0x67]
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rax + rcx], 0
jne 0x180018a53
movabs rax, 0x7fffffffffffffff
sub rax, rdx
cmp rax, rcx
jb 0x180018b66
mov r9, rsi
cmp qword [rsi + 0x18], 0x10
jb 0x180018a7f
mov r9, qword [rsi]
mov qword [rsp + 0x30], rcx
lea rax, [rbp + 0x67]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
mov r8, rsi
movzx edx, bl
lea rcx, [rbp - 0x39]
call fcn.180046950
nop
mov r9, r14
lea r8, [rbp - 0x39]
movzx edx, dil
lea rcx, [rbp - 0x59]
call fcn.180046760
nop
lea rax, [rbp + 0x6f]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x180018ac2
lea rdx, [rbp + 0x6f]
lea rcx, [rbp - 0x59]
call fcn.18003ed70
mov qword [rbp - 0x79], r13
mov qword [rbp - 0x69], r13
mov qword [rbp - 0x61], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x79], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x69], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rsi + 0x48]
mov r9d, r12d
movaps xmm2, xmm7
lea rcx, [rbp - 0x79]
call fcn.180017240
nop
lea rcx, [rbp - 0x59]
call fcn.18003fed0
nop
lea rcx, [rbp - 0x39]
call fcn.18003fed0
nop
lea rcx, [rbp - 0x19]
call fcn.18003fed0
add rsi, 0x58
cmp rsi, r15
jne 0x1800189c0
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x58]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.180014020
nop
int3

Function at 0x180018b70
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 3], 0
je 0x180018b93
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x32]
xor byte [rax + rcx], dl
inc rax
cmp rax, 2
jb 0x180018b80
mov byte [rcx + 3], 0
mov rax, rcx
ret

Function at 0x180018ba0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 4], 0
je 0x180018bc3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x32]
xor byte [rax + rcx], dl
inc rax
cmp rax, 3
jb 0x180018bb0
mov byte [rcx + 4], 0
mov rax, rcx
ret
Function at 0x18001e8b0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
sub rsp, 0x40
mov rsi, rcx
mov rdi, rdx
mov ecx, 3
call fcn.1800b30d0
call fcn.1800b2e00
xor ebx, ebx
mov qword [rsi + 0x18], reloc.WS2_32.dll_ntohs
mov qword [rsi], rbx
mov rbp, rax
mov qword [rsi + 0x10], rbx
mov r8, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x18001e8f2
mov r8, qword [rdi]
mov edx, 0x2712
mov rcx, rbp
call fcn.1800b5ca0
xor r8d, r8d
mov rcx, rbp
lea edx, [r8 + 0x40]
call fcn.1800b5ca0
movdqa xmm0, xmmword [0x18012e0d0]
movdqu xmmword [rsp + 0x20], xmm0
mov word [rsp + 0x30], 0x100
nop dword [rax]
nop word [rax + rax]
lea eax, [rbx + 0x32]
xor byte [rsp + rbx + 0x20], al
inc rbx
cmp rbx, 0x10
jb 0x18001e930
lea r8, [rsp + 0x20]
mov byte [rsp + 0x31], 0
mov edx, 0x2722
mov rcx, rbp
call fcn.1800b5ca0
lea r8, [0x18001e880]
mov edx, 0x4e2b
mov rcx, rbp
call fcn.1800b5ca0
mov r8, rsi
mov edx, 0x2711
mov rcx, rbp
call fcn.1800b5ca0
mov rcx, rbp
call fcn.1800b2ee0
mov rcx, rbp
call fcn.1800b2de0
call fcn.1800b3070
mov rcx, rdi
call fcn.18003fed0
mov rbx, qword [rsp + 0x70]
mov rax, rsi
add rsp, 0x40
pop rdi
pop rsi
pop rbp
ret

Function at 0x18001e9b0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x11], 0
je 0x18001e9d3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x32]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x10
jb 0x18001e9c0
mov byte [rcx + 0x11], 0
mov rax, rcx
ret
Function at 0x180023580
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xb], 0
je 0x1800235a3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x32]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xa
jb 0x180023590
mov byte [rcx + 0xb], 0
mov rax, rcx
ret

Function at 0x1800235b0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xc], 0
je 0x1800235d3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x32]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xb
jb 0x1800235c0
mov byte [rcx + 0xc], 0
mov rax, rcx
ret

Function at 0x1800235e0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x10], 0
je 0x180023603
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x32]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xf
jb 0x1800235f0
mov byte [rcx + 0x10], 0
mov rax, rcx
ret

Function at 0x180023610
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 9], 0
je 0x180023633
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x32]
xor byte [rax + rcx], dl
inc rax
cmp rax, 8
jb 0x180023620
mov byte [rcx + 9], 0
mov rax, rcx
ret
Function at 0x180023d20
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rsi
push rdi
sub rsp, 0x50
mov r9, r8
mov rbx, rdx
mov rdi, rcx
mov qword [rsp + 0x40], rcx
xor esi, esi
cmp byte [r8 + 9], sil
je 0x180023d54
mov eax, esi
lea ecx, [rax + 0x32]
xor byte [r8 + rax], cl
inc rax
cmp rax, 8
jb 0x180023d40
mov byte [r8 + 9], sil
lea rax, [r8 + 8]
mov qword [rsp + 0x20], rsi
movdqa xmm0, xmmword [0x18012c790]
movdqu xmmword [rsp + 0x30], xmm0
mov byte [rsp + 0x20], sil
cmp r9, rax
je 0x180023d89
mov r8d, 8
mov rdx, r9
lea rcx, [rsp + 0x20]
call fcn.18003ff30
nop
mov r9, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0x10
jb 0x180023d97
mov rbx, qword [rbx]
mov r8, rbx
xor edx, edx
lea rcx, [rsp + 0x20]
call fcn.180046650
mov qword [rdi], rsi
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
movups xmm0, xmmword [rax]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rcx, [rsp + 0x20]
call fcn.18003fed0
mov rax, rdi
add rsp, 0x50
pop rdi
pop rsi
pop rbx
ret

Function at 0x180023df0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 9], r8b
je 0x180023e23
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rdx + rcx], al
inc rcx
cmp rcx, 8
jb 0x180023e10
mov byte [rdx + 9], r8b
lea rcx, [rdx + 8]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x180023e4c
mov r8d, 8
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x180023e60
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rsi
push rdi
sub rsp, 0x50
mov r9, r8
mov rbx, rdx
mov rdi, rcx
mov qword [rsp + 0x40], rcx
xor esi, esi
cmp byte [r8 + 0xa], sil
je 0x180023e94
mov eax, esi
lea ecx, [rax + 0x32]
xor byte [r8 + rax], cl
inc rax
cmp rax, 9
jb 0x180023e80
mov byte [r8 + 0xa], sil
lea rax, [r8 + 9]
mov qword [rsp + 0x20], rsi
movdqa xmm0, xmmword [0x18012c790]
movdqu xmmword [rsp + 0x30], xmm0
mov byte [rsp + 0x20], sil
cmp r9, rax
je 0x180023ec9
mov r8d, 9
mov rdx, r9
lea rcx, [rsp + 0x20]
call fcn.18003ff30
nop
mov r9, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0x10
jb 0x180023ed7
mov rbx, qword [rbx]
mov r8, rbx
xor edx, edx
lea rcx, [rsp + 0x20]
call fcn.180046650
mov qword [rdi], rsi
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
movups xmm0, xmmword [rax]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rcx, [rsp + 0x20]
call fcn.18003fed0
mov rax, rdi
add rsp, 0x50
pop rdi
pop rsi
pop rbx
ret
Function at 0x180023f30
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0xa], r8b
je 0x180023f63
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rdx + rcx], al
inc rcx
cmp rcx, 9
jb 0x180023f50
mov byte [rdx + 0xa], r8b
lea rcx, [rdx + 9]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x180023f8c
mov r8d, 9
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x1800241e0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x10]
sub rsp, 0x110
mov rax, qword [0x1801491e0]
xor rax, rsp
mov qword [rbp], rax
mov rsi, r8
mov r12, rdx
mov r13, rcx
mov qword [rbp - 8], r8
xor r15d, r15d
movzx ebx, byte [rsp + 0x40]
movzx edi, byte [rsp + 0x40]
nop dword [rax]
nop dword [rax + rax]
mov dword [rsp + 0x44], 0x140910
mov byte [rsp + 0x48], 1
mov edx, r15d
lea rcx, [rbp - 0x28]
call fcn.180014090
mov r14, rax
mov word [rsp + 0x4c], Ordinal_35
mov byte [rsp + 0x4e], 0
lea rax, [rsp + 0x4c]
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rax + rcx], 0
jne 0x180024264
mov rdx, qword [rsi + 0x10]
movabs rax, 0x7fffffffffffffff
sub rax, rdx
cmp rax, rcx
jb 0x180024428
mov rax, rsi
cmp qword [rsi + 0x18], 0x10
jb 0x180024294
mov rax, qword [rsi]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x4c]
mov r8, rsi
movzx edx, bl
lea rcx, [rbp - 0x48]
call fcn.180046950
nop
mov r9, r14
lea r8, [rbp - 0x48]
movzx edx, dil
lea rcx, [rbp - 0x68]
call fcn.180046760
nop
xor r14d, r14d
cmp byte [rsp + 0x48], r14b
je 0x1800242f5
mov ecx, r14d
nop word [rax + rax]
lea eax, [rcx + 0x32]
xor byte [rsp + rcx + 0x44], al
inc rcx
cmp rcx, 3
jb 0x1800242e0
mov byte [rsp + 0x48], r14b
mov qword [rsp + 0x78], r14
mov qword [rbp - 0x78], r14
mov qword [rbp - 0x70], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x78], 0
mov r8d, 3
lea rdx, [rsp + 0x44]
lea rcx, [rsp + 0x78]
call fcn.18003ff30
nop
lea r8, [rbp - 0x68]
cmp qword [rbp - 0x50], 0x10
cmovae r8, qword [rbp - 0x68]
mov r9, qword [rbp - 0x58]
xor edx, edx
lea rcx, [rsp + 0x78]
call fcn.180046650
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], r14
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x58], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x68], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rcx, [rsp + 0x78]
call fcn.18003fed0
nop
lea rdx, [rsp + 0x58]
cmp qword [rsp + 0x70], 0x10
cmovae rdx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x68]
mov rcx, r13
call fcn.1800499a0
movss xmm1, dword [r12]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___float____ptr64]
mov word [rsp + 0x50], Ordinal_45
mov byte [rsp + 0x52], 0
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.180043850
nop
lea rcx, [rsp + 0x58]
call fcn.18003fed0
nop
lea rcx, [rbp - 0x68]
call fcn.18003fed0
nop
lea rcx, [rbp - 0x48]
call fcn.18003fed0
nop
lea rcx, [rbp - 0x28]
call fcn.18003fed0
inc r15d
add r12, 4
cmp r15d, 4
jl 0x180024230
mov rcx, rsi
call fcn.18003fed0
mov rcx, qword [rbp]
xor rcx, rsp
call fcn.180107c30
mov rbx, qword [rsp + 0x168]
add rsp, 0x110
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.180014020
nop
int3
Function at 0x180024430
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 4], r8b
je 0x180024463
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rdx + rcx], al
inc rcx
cmp rcx, 3
jb 0x180024450
mov byte [rdx + 4], r8b
lea rcx, [rdx + 3]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18002448c
mov r8d, 3
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x18002b2e0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x20
cmp byte [rdx + 0x23], 0
mov rbx, rcx
je 0x18002b306
xor eax, eax
lea r8d, [rax + 0x32]
xor byte [rax + rdx], r8b
inc rax
cmp rax, 0x22
jb 0x18002b2f1
mov byte [rdx + 0x23], 0
call fcn.180043850
mov rax, rbx
add rsp, 0x20
pop rbx
ret

Function at 0x18002b320
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x20
cmp byte [rdx + 0x27], 0
mov rbx, rcx
je 0x18002b346
xor eax, eax
lea r8d, [rax + 0x32]
xor byte [rax + rdx], r8b
inc rax
cmp rax, 0x26
jb 0x18002b331
mov byte [rdx + 0x27], 0
call fcn.180043850
mov rax, rbx
add rsp, 0x20
pop rbx
ret

Function at 0x18002b360
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x27], 0
je 0x18002b383
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x32]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x26
jb 0x18002b370
mov byte [rcx + 0x27], 0
mov rax, rcx
ret
Function at 0x18002b680
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x12], 0
je 0x18002b6a3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x32]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x11
jb 0x18002b690
mov byte [rcx + 0x12], 0
mov rax, rcx
ret
Function at 0x18002ba40
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x13], 0
je 0x18002ba63
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x32]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x12
jb 0x18002ba50
mov byte [rcx + 0x13], 0
mov rax, rcx
ret
Function at 0x18002ca80
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x1c], 0
je 0x18002caa3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x32]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x1b
jb 0x18002ca90
mov byte [rcx + 0x1c], 0
mov rax, rcx
ret

Function at 0x18002cab0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xa], 0
je 0x18002cad3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x32]
xor byte [rax + rcx], dl
inc rax
cmp rax, 9
jb 0x18002cac0
mov byte [rcx + 0xa], 0
mov rax, rcx
ret

Function at 0x18002cae0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x26], r8b
je 0x18002cb13
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rdx + rcx], al
inc rcx
cmp rcx, 0x25
jb 0x18002cb00
mov byte [rdx + 0x26], r8b
lea rcx, [rdx + 0x25]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18002cb3c
mov r8d, Ordinal_41
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x180036f20
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x21], 0
je 0x180036f43
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x32]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x20
jb 0x180036f30
mov byte [rcx + 0x21], 0
mov rax, rcx
ret

Function at 0x180036f50
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 5], 0
je 0x180036f73
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x32]
xor byte [rax + rcx], dl
inc rax
cmp rax, 4
jb 0x180036f60
mov byte [rcx + 5], 0
mov rax, rcx
ret

Function at 0x180036f80
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xd], 0
je 0x180036fa3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x32]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xc
jb 0x180036f90
mov byte [rcx + 0xd], 0
mov rax, rcx
ret

Function at 0x180036fb0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x19], 0
je 0x180036fd3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x32]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x18
jb 0x180036fc0
mov byte [rcx + 0x19], 0
mov rax, rcx
ret

Function at 0x180036fe0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x2b], 0
je 0x180037003
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x32]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x2a
jb 0x180036ff0
mov byte [rcx + 0x2b], 0
mov rax, rcx
ret

Function at 0x180037010
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x34], 0
je 0x180037033
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x32]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x33
jb 0x180037020
mov byte [rcx + 0x34], 0
mov rax, rcx
ret

Function at 0x180037040
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x18], 0
je 0x180037063
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x32]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x17
jb 0x180037050
mov byte [rcx + 0x18], 0
mov rax, rcx
ret

Function at 0x180037070
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xf], 0
je 0x180037093
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x32]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xe
jb 0x180037080
mov byte [rcx + 0xf], 0
mov rax, rcx
ret

Function at 0x1800370a0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xe], 0
je 0x1800370c3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x32]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xd
jb 0x1800370b0
mov byte [rcx + 0xe], 0
mov rax, rcx
ret

Function at 0x1800370d0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x43], 0
je 0x1800370f3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x32]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x42
jb 0x1800370e0
mov byte [rcx + 0x43], 0
mov rax, rcx
ret

Function at 0x180037100
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x24], 0
je 0x180037123
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x32]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x23
jb 0x180037110
mov byte [rcx + 0x24], 0
mov rax, rcx
ret
Function at 0x180037140
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x14], 0
je 0x180037163
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x32]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x13
jb 0x180037150
mov byte [rcx + 0x14], 0
mov rax, rcx
ret

Function at 0x180037170
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x15], 0
je 0x180037193
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x32]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x14
jb 0x180037180
mov byte [rcx + 0x15], 0
mov rax, rcx
ret

Function at 0x1800371a0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x16], 0
je 0x1800371c3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x32]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x15
jb 0x1800371b0
mov byte [rcx + 0x16], 0
mov rax, rcx
ret

Function at 0x1800371d0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x26], 0
je 0x1800371f3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x32]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x25
jb 0x1800371e0
mov byte [rcx + 0x26], 0
mov rax, rcx
ret

Function at 0x180037200
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x17], 0
je 0x180037223
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x32]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x16
jb 0x180037210
mov byte [rcx + 0x17], 0
mov rax, rcx
ret
Function at 0x18003bd10
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x1d], r8b
je 0x18003bd43
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x1c
jb 0x18003bd30
mov byte [rdx + 0x1d], r8b
lea rcx, [rdx + 0x1c]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003bd6c
mov r8d, Ordinal_33
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003bd80
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x38], r8b
je 0x18003bdb3
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x37
jb 0x18003bda0
mov byte [rdx + 0x38], r8b
lea rcx, [rdx + 0x37]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003bddc
mov r8d, gethostname
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003bdf0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x30], r8b
je 0x18003be23
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x2f
jb 0x18003be10
mov byte [rdx + 0x30], r8b
lea rcx, [rdx + 0x2f]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003be4c
mov r8d, Ordinal_50
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003be60
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x32], r8b
je 0x18003be93
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x31
jb 0x18003be80
mov byte [rdx + 0x32], r8b
lea rcx, [rdx + 0x31]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003bebc
mov r8d, Ordinal_50
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003bed0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x20], r8b
je 0x18003bf03
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x1f
jb 0x18003bef0
mov byte [rdx + 0x20], r8b
lea rcx, [rdx + 0x1f]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003bf2c
mov r8d, Ordinal_33
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret