joyce8/EMBER2024-capa huggingface dataset:
Function at 0x18003d630
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x17], r8b
je 0x18003d663
mov ecx, r8d
nop dword [rax]
lea eax, [rcx - 0x37]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x16
jb 0x18003d650
mov byte [rdx + 0x17], r8b
lea rcx, [rdx + 0x16]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003d68c
mov r8d, reloc.WLDAP32.dll_Ordinal_22
mov rcx, rbx
call fcn.18003ffa0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003d6a0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x13], r8b
je 0x18003d6d3
mov ecx, r8d
nop dword [rax]
lea eax, [rcx - 0x37]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x12
jb 0x18003d6c0
mov byte [rdx + 0x13], r8b
lea rcx, [rdx + 0x12]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003d6fc
mov r8d, reloc.WS2_32.dll_select
mov rcx, rbx
call fcn.18003ffa0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003d710
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x14], r8b
je 0x18003d743
mov ecx, r8d
nop dword [rax]
lea eax, [rcx - 0x37]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x13
jb 0x18003d730
mov byte [rdx + 0x14], r8b
lea rcx, [rdx + 0x13]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003d76c
mov r8d, reloc.WS2_32.dll_send
mov rcx, rbx
call fcn.18003ffa0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003d780
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0xf], r8b
je 0x18003d7b3
mov ecx, r8d
nop dword [rax]
lea eax, [rcx - 0x37]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0xe
jb 0x18003d7a0
mov byte [rdx + 0xf], r8b
lea rcx, [rdx + 0xe]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003d7dc
mov r8d, recvfrom
mov rcx, rbx
call fcn.18003ffa0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003d810
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x10], r8b
je 0x18003d843
mov ecx, r8d
nop dword [rax]
lea eax, [rcx - 0x37]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0xf
jb 0x18003d830
mov byte [rdx + 0x10], r8b
lea rcx, [rdx + 0xf]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003d86c
mov r8d, reloc.WS2_32.dll_ntohs
mov rcx, rbx
call fcn.18003ffa0
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x18003d880
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0xd], r8b
je 0x18003d8b3
mov ecx, r8d
nop dword [rax]
lea eax, [rcx - 0x37]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0xc
jb 0x18003d8a0
mov byte [rdx + 0xd], r8b
lea rcx, [rdx + 0xc]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003d8dc
mov r8d, recvfrom
mov rcx, rbx
call fcn.18003ffa0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003d8f0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0xe], r8b
je 0x18003d923
mov ecx, r8d
nop dword [rax]
lea eax, [rcx - 0x37]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0xd
jb 0x18003d910
mov byte [rdx + 0xe], r8b
lea rcx, [rdx + 0xd]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003d94c
mov r8d, reloc.WS2_32.dll_listen
mov rcx, rbx
call fcn.18003ffa0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003d960
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x12], r8b
je 0x18003d993
mov ecx, r8d
nop dword [rax]
lea eax, [rcx - 0x37]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x11
jb 0x18003d980
mov byte [rdx + 0x12], r8b
lea rcx, [rdx + 0x11]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003d9bc
mov r8d, reloc.WS2_32.dll_recvfrom
mov rcx, rbx
call fcn.18003ffa0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003d9f0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0xc], r8b
je 0x18003da23
mov ecx, r8d
nop dword [rax]
lea eax, [rcx - 0x37]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0xb
jb 0x18003da10
mov byte [rdx + 0xc], r8b
lea rcx, [rdx + 0xb]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003da4c
mov r8d, ntohs
mov rcx, rbx
call fcn.18003ffa0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003da60
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x11], r8b
je 0x18003da93
mov ecx, r8d
nop dword [rax]
lea eax, [rcx - 0x37]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x10
jb 0x18003da80
mov byte [rdx + 0x11], r8b
lea rcx, [rdx + 0x10]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003dabc
mov r8d, reloc.WS2_32.dll_recv
mov rcx, rbx
call fcn.18003ffa0
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x18003dd60
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0xb], r8b
je 0x18003dd93
mov ecx, r8d
nop dword [rax]
lea eax, [rcx - 0x37]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0xa
jb 0x18003dd80
mov byte [rdx + 0xb], r8b
lea rcx, [rdx + 0xa]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003ddbc
mov r8d, 0xa
mov rcx, rbx
call fcn.18003ffa0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003dfa0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x1e], 0
je 0x18003dfc3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x37]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x1d
jb 0x18003dfb0
mov byte [rcx + 0x1e], 0
ret

Function at 0x18003dfd0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x1e], r8b
je 0x18003e003
mov ecx, r8d
nop dword [rax]
lea eax, [rcx - 0x37]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x1d
jb 0x18003dff0
mov byte [rdx + 0x1e], r8b
lea rcx, [rdx + 0x1d]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003e02c
mov r8d, Ordinal_33
mov rcx, rbx
call fcn.18003ffa0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003e040
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 4], r8b
je 0x18003e073
mov ecx, r8d
nop dword [rax]
lea eax, [rcx - 0x37]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 3
jb 0x18003e060
mov byte [rdx + 4], r8b
lea rcx, [rdx + 3]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003e09c
mov r8d, 3
mov rcx, rbx
call fcn.18003ffa0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003e0b0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x1c], r8b
je 0x18003e0e3
mov ecx, r8d
nop dword [rax]
lea eax, [rcx - 0x37]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x1b
jb 0x18003e0d0
mov byte [rdx + 0x1c], r8b
lea rcx, [rdx + 0x1b]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003e10c
mov r8d, reloc.WLDAP32.dll_Ordinal_27
mov rcx, rbx
call fcn.18003ffa0
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x18003e120
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x1b], r8b
je 0x18003e153
mov ecx, r8d
nop dword [rax]
lea eax, [rcx - 0x37]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x1a
jb 0x18003e140
mov byte [rdx + 0x1b], r8b
lea rcx, [rdx + 0x1a]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003e17c
mov r8d, reloc.WLDAP32.dll_Ordinal_26
mov rcx, rbx
call fcn.18003ffa0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003e190
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 3], r8b
je 0x18003e1c3
mov ecx, r8d
nop dword [rax]
lea eax, [rcx - 0x37]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 2
jb 0x18003e1b0
mov byte [rdx + 3], r8b
lea rcx, [rdx + 2]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003e1ec
mov r8d, 2
mov rcx, rbx
call fcn.18003ffa0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003e200
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 6], r8b
je 0x18003e233
mov ecx, r8d
nop dword [rax]
lea eax, [rcx - 0x37]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 5
jb 0x18003e220
mov byte [rdx + 6], r8b
lea rcx, [rdx + 5]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003e25c
mov r8d, 5
mov rcx, rbx
call fcn.18003ffa0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003e270
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x16], r8b
je 0x18003e2a3
mov ecx, r8d
nop dword [rax]
lea eax, [rcx - 0x37]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x15
jb 0x18003e290
mov byte [rdx + 0x16], r8b
lea rcx, [rdx + 0x15]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003e2cc
mov r8d, reloc.WS2_32.dll_setsockopt
mov rcx, rbx
call fcn.18003ffa0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003e2e0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x15], r8b
je 0x18003e313
mov ecx, r8d
nop dword [rax]
lea eax, [rcx - 0x37]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x14
jb 0x18003e300
mov byte [rdx + 0x15], r8b
lea rcx, [rdx + 0x14]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003e33c
mov r8d, reloc.WS2_32.dll_sendto
mov rcx, rbx
call fcn.18003ffa0
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x18003e970
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 8], r8b
je 0x18003e9a3
mov ecx, r8d
nop dword [rax]
lea eax, [rcx - 0x37]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 7
jb 0x18003e990
mov byte [rdx + 8], r8b
lea rcx, [rdx + 7]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003e9cc
mov r8d, 7
mov rcx, rbx
call fcn.18003ffa0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003e9f0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 7], r8b
je 0x18003ea23
mov ecx, r8d
nop dword [rax]
lea eax, [rcx - 0x37]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 6
jb 0x18003ea10
mov byte [rdx + 7], r8b
lea rcx, [rdx + 6]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003ea4c
mov r8d, 6
mov rcx, rbx
call fcn.18003ffa0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x180043a90
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rsi
push rdi
sub rsp, 0x40
mov rdi, r8
mov rbx, rcx
mov qword [rsp + 0x30], rcx
xor esi, esi
cmp byte [rdx + 8], sil
je 0x180043ac3
mov ecx, esi
nop dword [rax]
lea eax, [rcx - 0x37]
xor byte [rdx + rcx], al
inc rcx
cmp rcx, 7
jb 0x180043ab0
mov byte [rdx + 8], sil
lea rax, [rdx + 7]
mov qword [rbx], rsi
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], sil
cmp rdx, rax
je 0x180043aed
mov r8d, 7
mov rcx, rbx
call fcn.18003ffa0
nop
lea r10, [rbx + 0x20]
mov qword [rsp + 0x20], r10
cmp byte [rdi + 8], 0
je 0x180043b13
mov rcx, rsi
nop
lea eax, [rcx - 0x37]
xor byte [rcx + rdi], al
inc rcx
cmp rcx, 7
jb 0x180043b00
mov byte [rdi + 8], 0
lea r9, [rdi + 7]
mov qword [r10], rsi
mov qword [r10 + 0x10], rsi
mov qword [r10 + 0x18], reloc.WS2_32.dll_ntohs
mov byte [r10], 0
cmp rdi, r9
je 0x180043b41
mov r8d, 7
mov rdx, rdi
mov rcx, r10
call fcn.18003ffa0
nop
mov rax, rbx
add rsp, 0x40
pop rdi
pop rsi
pop rbx
ret
Function at 0x180045da0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x29], r8b
je 0x180045dd3
mov ecx, r8d
nop dword [rax]
lea eax, [rcx - 0x37]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x28
jb 0x180045dc0
mov byte [rdx + 0x29], r8b
lea rcx, [rdx + 0x28]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x180045dfc
mov r8d, Ordinal_45
mov rcx, rbx
call fcn.18003ffa0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x180045e10
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x28], r8b
je 0x180045e43
mov ecx, r8d
nop dword [rax]
lea eax, [rcx - 0x37]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x27
jb 0x180045e30
mov byte [rdx + 0x28], r8b
lea rcx, [rdx + 0x27]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x180045e6c
mov r8d, Ordinal_41
mov rcx, rbx
call fcn.18003ffa0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x180045e80
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x22], r8b
je 0x180045eb3
mov ecx, r8d
nop dword [rax]
lea eax, [rcx - 0x37]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x21
jb 0x180045ea0
mov byte [rdx + 0x22], r8b
lea rcx, [rdx + 0x21]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x180045edc
mov r8d, reloc.WLDAP32.dll_Ordinal_33
mov rcx, rbx
call fcn.18003ffa0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x180045ef0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x24], r8b
je 0x180045f23
mov ecx, r8d
nop dword [rax]
lea eax, [rcx - 0x37]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x23
jb 0x180045f10
mov byte [rdx + 0x24], r8b
lea rcx, [rdx + 0x23]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x180045f4c
mov r8d, reloc.WLDAP32.dll_Ordinal_35
mov rcx, rbx
call fcn.18003ffa0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1800461e0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x23], r8b
je 0x180046213
mov ecx, r8d
nop dword [rax]
lea eax, [rcx - 0x37]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x22
jb 0x180046200
mov byte [rdx + 0x23], r8b
lea rcx, [rdx + 0x22]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18004623c
mov r8d, Ordinal_35
mov rcx, rbx
call fcn.18003ffa0
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x180046300
Capabilities:
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rcx, qword [0x180177520]
xorps xmm0, xmm0
add rcx, 1
mov rbx, qword [0x180177548]
js 0x180046324
cvtsi2ss xmm0, rcx
jmp 0x180046339
mov rax, rcx
and ecx, 1
shr rax, 1
or rax, rcx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
divss xmm0, dword [0x180177510]
call sub.api_ms_win_crt_math_l1_1_0.dll_ceilf
movss xmm1, dword [0x18012c6d0]
xor ecx, ecx
comiss xmm0, xmm1
jb 0x18004636b
subss xmm0, xmm1
comiss xmm0, xmm1
jae 0x18004636b
movabs rax, 0x8000000000000000
mov rcx, rax
cvttss2si rax, xmm0
add rax, rcx
mov ecx, 8
cmp rax, rcx
cmova rcx, rax
cmp rbx, rcx
jae 0x18004639d
cmp rbx, 0x200
jae 0x18004639a
lea rbx, [rbx*8]
cmp rbx, rcx
jae 0x18004639d
mov rbx, rcx
mov rdx, rbx
add rsp, 0x20
pop rbx
jmp 0x180047430
push rdi
sub rsp, 0x20
movabs rax, 0xfffffffffffffff
mov edi, 1
bsr rcx, rax
mov eax, edi
shl rax, cl
cmp rdx, rax
jbe 0x180047461
lea rcx, str.invalid_hash_bucket_count
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea rax, [rdx - 1]
mov qword [rsp + 0x30], rbx
mov rbx, qword [0x180177518]
or rax, rdi
bsr rcx, rax
mov r8, rbx
inc ecx
shl rdi, cl
lea rcx, [0x180177528]
lea rdx, [rdi + rdi]
call fcn.1800401f0
mov rcx, qword [0x180177518]
lea r9, [rdi - 1]
mov qword [0x180177540], r9
mov qword [0x180177548], rdi
mov rcx, qword [rcx]
mov rdx, rcx
cmp rcx, rbx
je 0x1800475e5
mov qword [rsp + 0x40], rsi
movabs rdi, 0x100000001b3
movabs rsi, 0xcbf29ce484222325
movzx eax, byte [rcx + 0x11]
movzx r11d, byte [rcx + 0x10]
mov rdx, qword [rdx]
xor r11, rsi
imul r11, rdi
xor r11, rax
movzx eax, byte [rcx + 0x12]
imul r11, rdi
xor r11, rax
movzx eax, byte [rcx + 0x13]
imul r11, rdi
xor r11, rax
imul r11, rdi
and r11, r9
shl r11, 4
add r11, qword [0x180177528]
mov r10, qword [r11]
cmp r10, rbx
jne 0x180047523
mov qword [r11], rcx
mov qword [r11 + 8], rcx
jmp 0x1800475a6
mov rax, qword [r11 + 8]
mov r9d, dword [rcx + 0x10]
cmp r9d, dword [rax + 0x10]
jne 0x180047560
mov r10, qword [rax]
cmp r10, rcx
je 0x18004755a
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], r10
mov rax, qword [r10 + 8]
mov qword [rax], rcx
mov qword [r10 + 8], r8
mov qword [rdx + 8], r9
mov qword [rcx + 8], rax
mov qword [r11 + 8], rcx
jmp 0x1800475a6
mov r8, rax
cmp r10, rax
je 0x180047582
nop dword [rax + rax]
mov rax, qword [rax + 8]
mov r8, rax
cmp r9d, dword [rax + 0x10]
je 0x1800475ba
cmp r10, rax
jne 0x180047570
mov r10, qword [rcx + 8]
mov qword [r10], rdx
mov r9, qword [rdx + 8]
mov qword [r9], r8
mov rax, qword [r8 + 8]
mov qword [rax], rcx
mov qword [r8 + 8], r9
mov qword [rdx + 8], r10
mov qword [rcx + 8], rax
mov qword [r11], rcx
mov rcx, rdx
cmp rdx, rbx
je 0x1800475e0
mov r9, qword [0x180177540]
jmp 0x1800474d1
mov r10, qword [rax]
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], r10
mov rax, qword [r10 + 8]
mov qword [rax], rcx
mov qword [r10 + 8], r8
mov qword [rdx + 8], r9
mov qword [rcx + 8], rax
jmp 0x1800475a6
mov rsi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x180047430
Capabilities:
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rcx, qword [0x180177520]
xorps xmm0, xmm0
add rcx, 1
mov rbx, qword [0x180177548]
js 0x180046324
cvtsi2ss xmm0, rcx
jmp 0x180046339
mov rax, rcx
and ecx, 1
shr rax, 1
or rax, rcx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
divss xmm0, dword [0x180177510]
call sub.api_ms_win_crt_math_l1_1_0.dll_ceilf
movss xmm1, dword [0x18012c6d0]
xor ecx, ecx
comiss xmm0, xmm1
jb 0x18004636b
subss xmm0, xmm1
comiss xmm0, xmm1
jae 0x18004636b
movabs rax, 0x8000000000000000
mov rcx, rax
cvttss2si rax, xmm0
add rax, rcx
mov ecx, 8
cmp rax, rcx
cmova rcx, rax
cmp rbx, rcx
jae 0x18004639d
cmp rbx, 0x200
jae 0x18004639a
lea rbx, [rbx*8]
cmp rbx, rcx
jae 0x18004639d
mov rbx, rcx
mov rdx, rbx
add rsp, 0x20
pop rbx
jmp 0x180047430
push rdi
sub rsp, 0x20
movabs rax, 0xfffffffffffffff
mov edi, 1
bsr rcx, rax
mov eax, edi
shl rax, cl
cmp rdx, rax
jbe 0x180047461
lea rcx, str.invalid_hash_bucket_count
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea rax, [rdx - 1]
mov qword [rsp + 0x30], rbx
mov rbx, qword [0x180177518]
or rax, rdi
bsr rcx, rax
mov r8, rbx
inc ecx
shl rdi, cl
lea rcx, [0x180177528]
lea rdx, [rdi + rdi]
call fcn.1800401f0
mov rcx, qword [0x180177518]
lea r9, [rdi - 1]
mov qword [0x180177540], r9
mov qword [0x180177548], rdi
mov rcx, qword [rcx]
mov rdx, rcx
cmp rcx, rbx
je 0x1800475e5
mov qword [rsp + 0x40], rsi
movabs rdi, 0x100000001b3
movabs rsi, 0xcbf29ce484222325
movzx eax, byte [rcx + 0x11]
movzx r11d, byte [rcx + 0x10]
mov rdx, qword [rdx]
xor r11, rsi
imul r11, rdi
xor r11, rax
movzx eax, byte [rcx + 0x12]
imul r11, rdi
xor r11, rax
movzx eax, byte [rcx + 0x13]
imul r11, rdi
xor r11, rax
imul r11, rdi
and r11, r9
shl r11, 4
add r11, qword [0x180177528]
mov r10, qword [r11]
cmp r10, rbx
jne 0x180047523
mov qword [r11], rcx
mov qword [r11 + 8], rcx
jmp 0x1800475a6
mov rax, qword [r11 + 8]
mov r9d, dword [rcx + 0x10]
cmp r9d, dword [rax + 0x10]
jne 0x180047560
mov r10, qword [rax]
cmp r10, rcx
je 0x18004755a
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], r10
mov rax, qword [r10 + 8]
mov qword [rax], rcx
mov qword [r10 + 8], r8
mov qword [rdx + 8], r9
mov qword [rcx + 8], rax
mov qword [r11 + 8], rcx
jmp 0x1800475a6
mov r8, rax
cmp r10, rax
je 0x180047582
nop dword [rax + rax]
mov rax, qword [rax + 8]
mov r8, rax
cmp r9d, dword [rax + 0x10]
je 0x1800475ba
cmp r10, rax
jne 0x180047570
mov r10, qword [rcx + 8]
mov qword [r10], rdx
mov r9, qword [rdx + 8]
mov qword [r9], r8
mov rax, qword [r8 + 8]
mov qword [rax], rcx
mov qword [r8 + 8], r9
mov qword [rdx + 8], r10
mov qword [rcx + 8], rax
mov qword [r11], rcx
mov rcx, rdx
cmp rdx, rbx
je 0x1800475e0
mov r9, qword [0x180177540]
jmp 0x1800474d1
mov r10, qword [rax]
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], r10
mov rax, qword [r10 + 8]
mov qword [rax], rcx
mov qword [r10 + 8], r8
mov qword [rdx + 8], r9
mov qword [rcx + 8], rax
jmp 0x1800475a6
mov rsi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret