joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14001b200
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 9], 0
je 0x14001b223
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 8
jb 0x14001b210
mov byte [rcx + 9], 0
mov rax, rcx
ret

Function at 0x14001b230
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 6], 0
je 0x14001b253
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 5
jb 0x14001b240
mov byte [rcx + 6], 0
mov rax, rcx
ret

Function at 0x14001b260
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xb], 0
je 0x14001b283
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xa
jb 0x14001b270
mov byte [rcx + 0xb], 0
mov rax, rcx
ret

Function at 0x14001b290
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x10], 0
je 0x14001b2b3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xf
jb 0x14001b2a0
mov byte [rcx + 0x10], 0
mov rax, rcx
ret

Function at 0x14001b2c0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xe], 0
je 0x14001b2e3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xd
jb 0x14001b2d0
mov byte [rcx + 0xe], 0
mov rax, rcx
ret

Function at 0x14001b2f0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x13], 0
je 0x14001b313
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x12
jb 0x14001b300
mov byte [rcx + 0x13], 0
mov rax, rcx
ret

Function at 0x14001b320
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xa], 0
je 0x14001b343
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 9
jb 0x14001b330
mov byte [rcx + 0xa], 0
mov rax, rcx
ret

Function at 0x14001b350
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xd], 0
je 0x14001b373
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xc
jb 0x14001b360
mov byte [rcx + 0xd], 0
mov rax, rcx
ret

Function at 0x14001b380
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xf], 0
je 0x14001b3a3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xe
jb 0x14001b390
mov byte [rcx + 0xf], 0
mov rax, rcx
ret

Function at 0x14001b3b0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 8], 0
je 0x14001b3d3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 7
jb 0x14001b3c0
mov byte [rcx + 8], 0
mov rax, rcx
ret

Function at 0x14001b3e0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x12], 0
je 0x14001b403
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x11
jb 0x14001b3f0
mov byte [rcx + 0x12], 0
mov rax, rcx
ret
Function at 0x14001b410
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xc], 0
je 0x14001b433
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xb
jb 0x14001b420
mov byte [rcx + 0xc], 0
mov rax, rcx
ret

Function at 0x14001b440
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x11], 0
je 0x14001b463
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x10
jb 0x14001b450
mov byte [rcx + 0x11], 0
mov rax, rcx
ret

Function at 0x14001b470
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x19], 0
je 0x14001b493
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x18
jb 0x14001b480
mov byte [rcx + 0x19], 0
mov rax, rcx
ret

Function at 0x14001b4a0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x15], 0
je 0x14001b4c3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x14
jb 0x14001b4b0
mov byte [rcx + 0x15], 0
mov rax, rcx
ret

Function at 0x14001b4d0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x17], 0
je 0x14001b4f3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x16
jb 0x14001b4e0
mov byte [rcx + 0x17], 0
mov rax, rcx
ret

Function at 0x14001b500
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x14], 0
je 0x14001b523
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x13
jb 0x14001b510
mov byte [rcx + 0x14], 0
mov rax, rcx
ret

Function at 0x14001b530
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x16], 0
je 0x14001b553
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x15
jb 0x14001b540
mov byte [rcx + 0x16], 0
mov rax, rcx
ret

Function at 0x14001b560
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x1b], 0
je 0x14001b583
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x1a
jb 0x14001b570
mov byte [rcx + 0x1b], 0
mov rax, rcx
ret

Function at 0x14001b590
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 7], 0
je 0x14001b5b3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 6
jb 0x14001b5a0
mov byte [rcx + 7], 0
mov rax, rcx
ret

Function at 0x14001b5c0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x1a], 0
je 0x14001b5e3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x19
jb 0x14001b5d0
mov byte [rcx + 0x1a], 0
mov rax, rcx
ret

Function at 0x14001b5f0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x18], 0
je 0x14001b613
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x17
jb 0x14001b600
mov byte [rcx + 0x18], 0
mov rax, rcx
ret
Function at 0x14001b620
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x1f], 0
je 0x14001b643
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x1e
jb 0x14001b630
mov byte [rcx + 0x1f], 0
mov rax, rcx
ret

Function at 0x14001b650
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x21], 0
je 0x14001b673
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x20
jb 0x14001b660
mov byte [rcx + 0x21], 0
mov rax, rcx
ret

Function at 0x14002c160
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x21], 0
je 0x14002c183
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x20
jb 0x14002c170
mov byte [rcx + 0x21], 0
ret

Function at 0x14002c190
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x1f], 0
je 0x14002c1b3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x1e
jb 0x14002c1a0
mov byte [rcx + 0x1f], 0
ret

Function at 0x14002c1c0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x18], 0
je 0x14002c1e3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x17
jb 0x14002c1d0
mov byte [rcx + 0x18], 0
ret

Function at 0x14002c1f0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x1a], 0
je 0x14002c213
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x19
jb 0x14002c200
mov byte [rcx + 0x1a], 0
ret

Function at 0x14002c220
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 7], 0
je 0x14002c243
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 6
jb 0x14002c230
mov byte [rcx + 7], 0
ret

Function at 0x14002c250
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x1b], 0
je 0x14002c273
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x1a
jb 0x14002c260
mov byte [rcx + 0x1b], 0
ret

Function at 0x14002c280
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x16], 0
je 0x14002c2a3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x15
jb 0x14002c290
mov byte [rcx + 0x16], 0
ret

Function at 0x14002c2b0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x14], 0
je 0x14002c2d3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x13
jb 0x14002c2c0
mov byte [rcx + 0x14], 0
ret

Function at 0x14002c2e0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x17], 0
je 0x14002c303
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x16
jb 0x14002c2f0
mov byte [rcx + 0x17], 0
ret

Function at 0x14002c310
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x15], 0
je 0x14002c333
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x14
jb 0x14002c320
mov byte [rcx + 0x15], 0
ret
Function at 0x14002c340
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x19], 0
je 0x14002c363
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x18
jb 0x14002c350
mov byte [rcx + 0x19], 0
ret

Function at 0x14002c370
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x11], 0
je 0x14002c393
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x10
jb 0x14002c380
mov byte [rcx + 0x11], 0
ret

Function at 0x14002c3a0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xc], 0
je 0x14002c3c3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xb
jb 0x14002c3b0
mov byte [rcx + 0xc], 0
ret

Function at 0x14002c3d0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x12], 0
je 0x14002c3f3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x11
jb 0x14002c3e0
mov byte [rcx + 0x12], 0
ret

Function at 0x14002c400
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 8], 0
je 0x14002c423
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 7
jb 0x14002c410
mov byte [rcx + 8], 0
ret

Function at 0x14002c430
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xf], 0
je 0x14002c453
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xe
jb 0x14002c440
mov byte [rcx + 0xf], 0
ret

Function at 0x14002c460
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xd], 0
je 0x14002c483
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xc
jb 0x14002c470
mov byte [rcx + 0xd], 0
ret

Function at 0x14002c490
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xa], 0
je 0x14002c4b3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 9
jb 0x14002c4a0
mov byte [rcx + 0xa], 0
ret

Function at 0x14002c4c0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x13], 0
je 0x14002c4e3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x12
jb 0x14002c4d0
mov byte [rcx + 0x13], 0
ret

Function at 0x14002c4f0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xe], 0
je 0x14002c513
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xd
jb 0x14002c500
mov byte [rcx + 0xe], 0
ret

Function at 0x14002c520
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x10], 0
je 0x14002c543
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xf
jb 0x14002c530
mov byte [rcx + 0x10], 0
ret

Function at 0x14002c550
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xb], 0
je 0x14002c573
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xa
jb 0x14002c560
mov byte [rcx + 0xb], 0
ret
Function at 0x14002c580
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 6], 0
je 0x14002c5a3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 5
jb 0x14002c590
mov byte [rcx + 6], 0
ret

Function at 0x14002c5b0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 9], 0
je 0x14002c5d3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x7f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 8
jb 0x14002c5c0
mov byte [rcx + 9], 0
ret

Function at 0x14002cfa0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x20
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rcx + r8], 0
jne 0x14002cfb0
mov rdx, rcx
lea rbx, [0x141279500]
mov rcx, rbx
call fcn.14002c840
mov rdx, qword [0x141279510]
xor ecx, ecx
mov qword [0x141280700], rdx
test rdx, rdx
je 0x14002d000
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
mov rax, rbx
cmovae rax, qword [0x141279500]
xor byte [rax + rcx], 0x35
inc rcx
cmp rcx, rdx
jb 0x14002cfe1
add rsp, 0x20
pop rbx
ret

Function at 0x14002d010
Capabilities:
Encode data using xor
Read .ini file

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r14
sub rsp, 0x70
mov rax, qword [0x140ce2080]
xor rax, rsp
mov qword [rsp + 0x60], rax
xor ebx, ebx
lea r14, [0x141279500]
mov rbp, rdx
mov rsi, rcx
mov rdx, qword [0x141280700]
mov ecx, ebx
test rdx, rdx
je 0x14002d06f
nop word [rax + rax]
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
mov rax, r14
cmovae rax, qword [0x141279500]
xor byte [rax + rcx], 0x35
inc rcx
cmp rcx, rdx
jb 0x14002d050
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
lea rcx, [rsp + 0x30]
xorps xmm0, xmm0
mov rdi, r14
cmovae rdi, qword [0x141279500]
mov edx, r8d
movups xmmword [rsp + 0x50], xmm0
call fcn.14000eb30
cmp qword [rax + 0x18], 0x10
jb 0x14002d0a1
mov rax, qword [rax]
mov qword [rsp + 0x28], rdi
lea r9, [rsp + 0x50]
mov r8, rax
mov dword [rsp + 0x20], reloc.WS2_32.dll_recv
mov rdx, rbp
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea rcx, [rsp + 0x30]
call fcn.14002c7e0
mov rcx, qword [0x141280700]
test rcx, rcx
je 0x14002d0ff
nop dword [rax + rax]
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
mov rax, r14
cmovae rax, qword [0x141279500]
xor byte [rax + rbx], 0x35
inc rbx
cmp rbx, rcx
jb 0x14002d0e0
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.1401308a0
add rsp, 0x70
pop r14
pop rdi
pop rsi
pop rbp
pop rbx
ret
Function at 0x14002d130
Capabilities:
Encode data using xor
Read .ini file

Disassembly:
push rbx
push rsi
push rdi
sub rsp, 0x50
mov rax, qword [0x140ce2080]
xor rax, rsp
mov qword [rsp + 0x48], rax
mov rdi, r9
mov r11, r8
mov r10, rdx
mov rbx, rcx
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x30], r9
xor ecx, ecx
lea rsi, [0x141279500]
mov rdx, qword [0x141280700]
test rdx, rdx
je 0x14002d191
mov rax, rsi
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae rax, qword [0x141279500]
xor byte [rax + rcx], 0x35
inc rcx
cmp rcx, rdx
jb 0x14002d172
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov rax, rsi
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae rax, qword [0x141279500]
mov r8, rdi
cmp qword [r9 + 0x18], 0x10
jb 0x14002d1b9
mov r8, qword [r9]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], reloc.WS2_32.dll_recv
lea r9, [rsp + 0x38]
mov rdx, r11
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
xor ecx, ecx
mov rdx, qword [0x141280700]
test rdx, rdx
je 0x14002d204
mov rax, rsi
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae rax, qword [0x141279500]
xor byte [rax + rcx], 0x35
inc rcx
cmp rcx, rdx
jb 0x14002d1e5
mov qword [rbx], 0
mov qword [rbx + 0x10], 0
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
lea rax, [rsp + 0x38]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14002d230
lea rdx, [rsp + 0x38]
mov rcx, rbx
call fcn.14002c840
nop
mov rcx, rdi
call fcn.14002c7e0
mov rax, rbx
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.1401308a0
add rsp, 0x50
pop rdi
pop rsi
pop rbx
ret
Function at 0x14002d270
Capabilities:
Encode data using xor
Read .ini file

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r14
push r15
sub rsp, 0x80
movaps xmmword [rsp + 0x70], xmm6
mov rax, qword [0x140ce2080]
xor rax, rsp
mov qword [rsp + 0x60], rax
xor esi, esi
lea r15, [0x141279500]
mov r14, rdx
mov rbp, rcx
mov rdx, qword [0x141280700]
mov ecx, esi
test rdx, rdx
je 0x14002d2d3
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
mov rax, r15
cmovae rax, qword [0x141279500]
xor byte [rax + rcx], 0x35
inc rcx
cmp rcx, rdx
jb 0x14002d2b4
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
lea rcx, [0x140cbfe9c]
xorps xmm6, xmm6
xorps xmm0, xmm0
cvtss2sd xmm6, xmm2
mov rdi, r15
cmovae rdi, qword [0x141279500]
movups xmmword [rsp + 0x50], xmm0
movaps xmm1, xmm6
movq rdx, xmm6
call fcn.14002cf40
movdqa xmm0, xmmword [0x140cc4310]
lea rcx, [rsp + 0x30]
movsxd rbx, eax
mov rdx, rbx
mov qword [rsp + 0x30], rsi
movdqu xmmword [rsp + 0x40], xmm0
call fcn.14002d720
cmp qword [rsp + 0x48], 0x10
lea rcx, [rsp + 0x30]
lea rdx, [rbx + 1]
movaps xmm3, xmm6
cmovae rcx, qword [rsp + 0x30]
lea r8, [0x140cbfe9c]
movq r9, xmm6
call fcn.14002cee0
cmp qword [rsp + 0x48], 0x10
lea r8, [rsp + 0x30]
mov qword [rsp + 0x28], rdi
lea r9, [rsp + 0x50]
cmovae r8, qword [rsp + 0x30]
mov rdx, r14
mov rcx, rbp
mov dword [rsp + 0x20], reloc.WS2_32.dll_recv
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea rcx, [rsp + 0x30]
call fcn.14002c7e0
mov rcx, qword [0x141280700]
test rcx, rcx
je 0x14002d3bf
nop word [rax + rax]
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
mov rax, r15
cmovae rax, qword [0x141279500]
xor byte [rax + rsi], 0x35
inc rsi
cmp rsi, rcx
jb 0x14002d3a0
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atof]
cvtsd2ss xmm0, xmm0
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.1401308a0
mov rbx, qword [rsp + 0xc8]
movaps xmm6, xmmword [rsp + 0x70]
add rsp, 0x80
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret

Function at 0x14002d400
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
sub rsp, 0x50
mov rax, qword [0x140ce2080]
xor rax, rsp
mov qword [rsp + 0x40], rax
mov rsi, rdx
mov rdi, rcx
mov edx, r8d
lea rcx, [rsp + 0x20]
call fcn.14000eb30
mov rdx, qword [0x141280700]
lea rbp, [0x141279500]
xor ebx, ebx
mov ecx, ebx
test rdx, rdx
je 0x14002d464
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
mov rax, rbp
cmovae rax, qword [0x141279500]
xor byte [rax + rcx], 0x35
inc rcx
cmp rcx, rdx
jb 0x14002d445
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
lea r8, [rsp + 0x20]
mov r9, rbp
mov rdx, rsi
cmovae r9, qword [0x141279500]
mov rcx, rdi
cmp qword [rsp + 0x38], 0x10
cmovae r8, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov rcx, qword [0x141280700]
test rcx, rcx
je 0x14002d4bf
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
mov rax, rbp
cmovae rax, qword [0x141279500]
xor byte [rax + rbx], 0x35
inc rbx
cmp rbx, rcx
jb 0x14002d4a0
lea rcx, [rsp + 0x20]
call fcn.14002c7e0
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.1401308a0
mov rbx, qword [rsp + 0x80]
add rsp, 0x50
pop rdi
pop rsi
pop rbp
ret
Function at 0x14002d4f0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
sub rsp, 0x60
movaps xmmword [rsp + 0x50], xmm6
mov rax, qword [0x140ce2080]
xor rax, rsp
mov qword [rsp + 0x40], rax
xorps xmm6, xmm6
mov rbp, rdx
cvtss2sd xmm6, xmm2
mov rsi, rcx
lea rcx, [0x140cbfe9c]
movaps xmm1, xmm6
movq rdx, xmm6
call fcn.14002cf40
movdqa xmm0, xmmword [0x140cc4310]
lea rcx, [rsp + 0x20]
movsxd rbx, eax
xor edi, edi
mov rdx, rbx
mov qword [rsp + 0x20], rdi
movdqu xmmword [rsp + 0x30], xmm0
call fcn.14002d720
cmp qword [rsp + 0x38], 0x10
lea rcx, [rsp + 0x20]
lea rdx, [rbx + 1]
movaps xmm3, xmm6
cmovae rcx, qword [rsp + 0x20]
lea r8, [0x140cbfe9c]
movq r9, xmm6
call fcn.14002cee0
mov rdx, qword [0x141280700]
lea rbx, [0x141279500]
mov ecx, edi
test rdx, rdx
je 0x14002d5b3
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
mov rax, rbx
cmovae rax, qword [0x141279500]
xor byte [rax + rcx], 0x35
inc rcx
cmp rcx, rdx
jb 0x14002d594
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
lea r8, [rsp + 0x20]
mov r9, rbx
mov rdx, rbp
cmovae r9, qword [0x141279500]
mov rcx, rsi
cmp qword [rsp + 0x38], 0x10
cmovae r8, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov rcx, qword [0x141280700]
test rcx, rcx
je 0x14002d60f
nop
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
mov rax, rbx
cmovae rax, qword [0x141279500]
xor byte [rax + rdi], 0x35
inc rdi
cmp rdi, rcx
jb 0x14002d5f0
lea rcx, [rsp + 0x20]
call fcn.14002c7e0
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.1401308a0
mov rbx, qword [rsp + 0x98]
movaps xmm6, xmmword [rsp + 0x50]
add rsp, 0x60
pop rdi
pop rsi
pop rbp
ret

Function at 0x14002d640
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rsi
push rdi
sub rsp, 0x20
xor ebx, ebx
lea rsi, [0x141279500]
mov r11, rdx
mov r10, rcx
mov rdx, qword [0x141280700]
mov rdi, r8
mov ecx, ebx
test rdx, rdx
je 0x14002d68f
nop dword [rax + rax]
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
mov rax, rsi
cmovae rax, qword [0x141279500]
xor byte [rax + rcx], 0x35
inc rcx
cmp rcx, rdx
jb 0x14002d670
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
mov r9, rsi
cmovae r9, qword [0x141279500]
cmp qword [r8 + 0x18], 0x10
jb 0x14002d6ac
mov r8, qword [r8]
mov rdx, r11
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov rdx, qword [0x141280700]
test rdx, rdx
je 0x14002d6e3
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
mov rax, rsi
cmovae rax, qword [0x141279500]
xor byte [rax + rbx], 0x35
inc rbx
cmp rbx, rdx
jb 0x14002d6c4
mov rcx, rdi
add rsp, 0x20
pop rdi
pop rsi
pop rbx
jmp fcn.14002c7e0

Function at 0x140031e30
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 5], 0
je 0x140031e53
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x2e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 4
jb 0x140031e40
mov byte [rcx + 5], 0
mov rax, rcx
ret

Function at 0x140031e60
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xe], 0
je 0x140031e85
xor eax, eax
mov r8d, 0x3dd2
nop
lea edx, [r8 + rax]
xor word [rcx + rax*2], dx
inc rax
cmp rax, 6
jb 0x140031e70
mov byte [rcx + 0xe], 0
mov rax, rcx
ret
Function at 0x140031ed0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 4], 0
je 0x140031ef3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x2e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 3
jb 0x140031ee0
mov byte [rcx + 4], 0
mov rax, rcx
ret

Function at 0x140032350
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 4], 0
je 0x140032373
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x2e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 3
jb 0x140032360
mov byte [rcx + 4], 0
ret

Function at 0x140032390
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 5], 0
je 0x1400323b3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x2e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 4
jb 0x1400323a0
mov byte [rcx + 5], 0
ret