joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14008c620
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
cmp byte [rcx + 0x1e], 0
mov r8, rcx
je 0x14008c67a
mov r9, rcx
lea rax, [rcx + 1]
not r9
movabs r10, 0x475dc7e7450727df
nop dword [rax]
lea ecx, [rax + r9]
mov rdx, r10
and cl, 7
shl cl, 3
shr rdx, cl
movzx ecx, al
xor byte [rax - 1], dl
sub cl, r8b
and cl, 7
mov rdx, r10
shl cl, 3
shr rdx, cl
xor byte [rax], dl
add rax, 2
lea rcx, [r9 + rax]
cmp rcx, 0x1e
jb 0x14008c640
mov byte [r8 + 0x1e], 0
mov rax, r8
ret

Function at 0x14008c6a0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x11], 0
mov r8, rcx
je 0x14008c6e1
xor eax, eax
movabs r9, 0x279b057fb77f7711
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rax + r8], dl
inc rax
cmp rax, 0x11
jb 0x14008c6c0
mov byte [r8 + 0x11], 0
mov rax, r8
ret

Function at 0x14008c6f0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x10], 0
mov r8, rcx
je 0x14008c731
xor eax, eax
movabs r9, 0x27f725635dfd2709
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rax + r8], dl
inc rax
cmp rax, 0x10
jb 0x14008c710
mov byte [r8 + 0x10], 0
mov rax, r8
ret

Function at 0x14008c740
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
cmp byte [rcx + 0x1e], 0
mov r8, rcx
je 0x14008c79a
mov r9, rcx
lea rax, [rcx + 1]
not r9
movabs r10, 0x27f725635dfd2709
nop dword [rax]
lea ecx, [rax + r9]
mov rdx, r10
and cl, 7
shl cl, 3
shr rdx, cl
movzx ecx, al
xor byte [rax - 1], dl
sub cl, r8b
and cl, 7
mov rdx, r10
shl cl, 3
shr rdx, cl
xor byte [rax], dl
add rax, 2
lea rcx, [r9 + rax]
cmp rcx, 0x1e
jb 0x14008c760
mov byte [r8 + 0x1e], 0
mov rax, r8
ret

Function at 0x14008c7a0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x10], 0
mov r8, rcx
je 0x14008c7e1
xor eax, eax
movabs r9, 0xff2393bb3371b94f
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rax + r8], dl
inc rax
cmp rax, 0x10
jb 0x14008c7c0
mov byte [r8 + 0x10], 0
mov rax, r8
ret

Function at 0x14008c7f0
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
cmp byte [rcx + 0x1c], 0
mov r8, rcx
je 0x14008c84a
mov r9, rcx
lea rax, [rcx + 1]
not r9
movabs r10, 0xff2393bb3371b94f
nop dword [rax]
lea ecx, [rax + r9]
mov rdx, r10
and cl, 7
shl cl, 3
shr rdx, cl
movzx ecx, al
xor byte [rax - 1], dl
sub cl, r8b
and cl, 7
mov rdx, r10
shl cl, 3
shr rdx, cl
xor byte [rax], dl
add rax, 2
lea rcx, [r9 + rax]
cmp rcx, 0x1c
jb 0x14008c810
mov byte [r8 + 0x1c], 0
mov rax, r8
ret

Function at 0x14008c850
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x10], 0
mov r8, rcx
je 0x14008c891
xor eax, eax
movabs r9, 0xf5f16fb5cfc36309
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rax + r8], dl
inc rax
cmp rax, 0x10
jb 0x14008c870
mov byte [r8 + 0x10], 0
mov rax, r8
ret
Function at 0x14008c8a0
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
cmp byte [rcx + 0x24], 0
mov r8, rcx
je 0x14008c8fa
mov r9, rcx
lea rax, [rcx + 1]
not r9
movabs r10, 0xf5f16fb5cfc36309
nop dword [rax]
lea ecx, [rax + r9]
mov rdx, r10
and cl, 7
shl cl, 3
shr rdx, cl
movzx ecx, al
xor byte [rax - 1], dl
sub cl, r8b
and cl, 7
mov rdx, r10
shl cl, 3
shr rdx, cl
xor byte [rax], dl
add rax, 2
lea rcx, [r9 + rax]
cmp rcx, 0x24
jb 0x14008c8c0
mov byte [r8 + 0x24], 0
mov rax, r8
ret

Function at 0x14008c900
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x10], 0
mov r8, rcx
je 0x14008c941
xor eax, eax
movabs r9, 0x990b7363f5eb63eb
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rax + r8], dl
inc rax
cmp rax, 0x10
jb 0x14008c920
mov byte [r8 + 0x10], 0
mov rax, r8
ret

Function at 0x14008c950
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
cmp byte [rcx + 0x24], 0
mov r8, rcx
je 0x14008c9aa
mov r9, rcx
lea rax, [rcx + 1]
not r9
movabs r10, 0x990b7363f5eb63eb
nop dword [rax]
lea ecx, [rax + r9]
mov rdx, r10
and cl, 7
shl cl, 3
shr rdx, cl
movzx ecx, al
xor byte [rax - 1], dl
sub cl, r8b
and cl, 7
mov rdx, r10
shl cl, 3
shr rdx, cl
xor byte [rax], dl
add rax, 2
lea rcx, [r9 + rax]
cmp rcx, 0x24
jb 0x14008c970
mov byte [r8 + 0x24], 0
mov rax, r8
ret

Function at 0x14008c9b0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x10], 0
mov r8, rcx
je 0x14008c9f1
xor eax, eax
movabs r9, 0x35053fb1af4bddef
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rax + r8], dl
inc rax
cmp rax, 0x10
jb 0x14008c9d0
mov byte [r8 + 0x10], 0
mov rax, r8
ret

Function at 0x14008ca00
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x29], 0
mov r8, rcx
je 0x14008ca41
xor eax, eax
movabs r9, 0x35053fb1af4bddef
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rax + r8], dl
inc rax
cmp rax, 0x29
jb 0x14008ca20
mov byte [r8 + 0x29], 0
mov rax, r8
ret

Function at 0x14008cae0
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
cmp byte [rcx + 0x1e], 0
mov r8, rcx
je 0x14008cb3a
mov r9, rcx
lea rax, [rcx + 1]
not r9
movabs r10, 0x65f533ff75874343
nop dword [rax]
lea ecx, [rax + r9]
mov rdx, r10
and cl, 7
shl cl, 3
shr rdx, cl
movzx ecx, al
xor byte [rax - 1], dl
sub cl, r8b
and cl, 7
mov rdx, r10
shl cl, 3
shr rdx, cl
xor byte [rax], dl
add rax, 2
lea rcx, [r9 + rax]
cmp rcx, 0x1e
jb 0x14008cb00
mov byte [r8 + 0x1e], 0
mov rax, r8
ret

Function at 0x14008cc00
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x11], 0
mov r8, rcx
je 0x14008cc41
xor eax, eax
movabs r9, 0xbd0341a38bf9e9a3
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rax + r8], dl
inc rax
cmp rax, 0x11
jb 0x14008cc20
mov byte [r8 + 0x11], 0
mov rax, r8
ret
Function at 0x14008cc50
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x17], 0
mov r8, rcx
je 0x14008cc91
xor eax, eax
movabs r9, 0xc1c7d5c90ddd8905
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rax + r8], dl
inc rax
cmp rax, 0x17
jb 0x14008cc70
mov byte [r8 + 0x17], 0
mov rax, r8
ret

Function at 0x14008cd60
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x11], 0
mov r8, rcx
je 0x14008cda1
xor eax, eax
movabs r9, 0x7b712719015ded43
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rax + r8], dl
inc rax
cmp rax, 0x11
jb 0x14008cd80
mov byte [r8 + 0x11], 0
mov rax, r8
ret

Function at 0x14008cdb0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x17], 0
mov r8, rcx
je 0x14008cdf1
xor eax, eax
movabs r9, 0xcd3b619305b39bb5
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rax + r8], dl
inc rax
cmp rax, 0x17
jb 0x14008cdd0
mov byte [r8 + 0x17], 0
mov rax, r8
ret

Function at 0x14008cec0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x11], 0
mov r8, rcx
je 0x14008cf01
xor eax, eax
movabs r9, 0x2573e1f7d553ffc3
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rax + r8], dl
inc rax
cmp rax, 0x11
jb 0x14008cee0
mov byte [r8 + 0x11], 0
mov rax, r8
ret

Function at 0x14008cfd0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xf], 0
mov r8, rcx
je 0x14008d011
xor eax, eax
movabs r9, 0xad8d816dd1716db7
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rax + r8], dl
inc rax
cmp rax, 0xf
jb 0x14008cff0
mov byte [r8 + 0xf], 0
mov rax, r8
ret

Function at 0x14008d040
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xe], 0
mov r8, rcx
je 0x14008d081
xor eax, eax
movabs r9, 0x1d3b4585a737a54b
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rax + r8], dl
inc rax
cmp rax, 0xe
jb 0x14008d060
mov byte [r8 + 0xe], 0
mov rax, r8
ret

Function at 0x14008d090
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xd], 0
mov r8, rcx
je 0x14008d0d1
xor eax, eax
movabs r9, 0x2301e1d911bfdd55
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rax + r8], dl
inc rax
cmp rax, 0xd
jb 0x14008d0b0
mov byte [r8 + 0xd], 0
mov rax, r8
ret

Function at 0x14008d0e0
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
cmp byte [rcx + 0x1a], 0
mov r8, rcx
je 0x14008d13a
mov r9, rcx
lea rax, [rcx + 1]
not r9
movabs r10, 0xd511831de593efc9
nop dword [rax]
lea ecx, [rax + r9]
mov rdx, r10
and cl, 7
shl cl, 3
shr rdx, cl
movzx ecx, al
xor byte [rax - 1], dl
sub cl, r8b
and cl, 7
mov rdx, r10
shl cl, 3
shr rdx, cl
xor byte [rax], dl
add rax, 2
lea rcx, [r9 + rax]
cmp rcx, 0x1a
jb 0x14008d100
mov byte [r8 + 0x1a], 0
mov rax, r8
ret
Function at 0x14008d140
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xe], 0
mov r8, rcx
je 0x14008d181
xor eax, eax
movabs r9, 0x419729e3a3775fd1
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rax + r8], dl
inc rax
cmp rax, 0xe
jb 0x14008d160
mov byte [r8 + 0xe], 0
mov rax, r8
ret

Function at 0x14008d200
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x12], 0
mov r8, rcx
je 0x14008d241
xor eax, eax
movabs r9, 0x4dbdb1710f41c72d
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rax + r8], dl
inc rax
cmp rax, 0x12
jb 0x14008d220
mov byte [r8 + 0x12], 0
mov rax, r8
ret

Function at 0x14008d290
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x13], 0
mov r8, rcx
je 0x14008d2d1
xor eax, eax
movabs r9, 0x559785638d4bc761
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rax + r8], dl
inc rax
cmp rax, 0x13
jb 0x14008d2b0
mov byte [r8 + 0x13], 0
mov rax, r8
ret

Function at 0x14008d2e0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xf], 0
mov r8, rcx
je 0x14008d321
xor eax, eax
movabs r9, 0xaf0fa703176f13c5
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rax + r8], dl
inc rax
cmp rax, 0xf
jb 0x14008d300
mov byte [r8 + 0xf], 0
mov rax, r8
ret

Function at 0x14008d330
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x10], 0
mov r8, rcx
je 0x14008d371
xor eax, eax
movabs r9, 0xaf0fa703176f13c5
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rax + r8], dl
inc rax
cmp rax, 0x10
jb 0x14008d350
mov byte [r8 + 0x10], 0
mov rax, r8
ret

Function at 0x14008d380
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
mov rdx, rcx
mov qword [rsp + 0x20], rbx
xor r8d, r8d
cmp byte [rcx + 0x3c], r8b
je 0x14008d3c5
mov ecx, r8d
mov r9d, 0x4d2c
nop dword [rax]
nop word [rax + rax]
lea eax, [r9 + rcx]
xor word [rdx + rcx*2], ax
inc rcx
cmp rcx, 0x1d
jb 0x14008d3b0
mov byte [rdx + 0x3c], r8b
lea rcx, [rdx + 0x3a]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], 7
mov word [rbx], r8w
cmp rdx, rcx
je 0x14008d3ef
mov r8d, Ordinal_32
mov rcx, rbx
call fcn.140092bb0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x14008d4f0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xe], 0
mov r8, rcx
je 0x14008d531
xor eax, eax
movabs r9, 0xdd8b6f41adc905bd
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rax + r8], dl
inc rax
cmp rax, 0xe
jb 0x14008d510
mov byte [r8 + 0xe], 0
mov rax, r8
ret

Function at 0x14008d5a0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xc], 0
mov r8, rcx
je 0x14008d5e1
xor eax, eax
movabs r9, 0x8be1b3db439d8707
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rax + r8], dl
inc rax
cmp rax, 0xc
jb 0x14008d5c0
mov byte [r8 + 0xc], 0
mov rax, r8
ret
Function at 0x14008d670
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xc], 0
mov r8, rcx
je 0x14008d6b1
xor eax, eax
movabs r9, 0xd19971f319211d13
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rax + r8], dl
inc rax
cmp rax, 0xc
jb 0x14008d690
mov byte [r8 + 0xc], 0
mov rax, r8
ret

Function at 0x14008d6c0
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
cmp byte [rcx + 0x1a], 0
mov r8, rcx
je 0x14008d71a
mov r9, rcx
lea rax, [rcx + 1]
not r9
movabs r10, 0xd19971f319211d13
nop dword [rax]
lea ecx, [rax + r9]
mov rdx, r10
and cl, 7
shl cl, 3
shr rdx, cl
movzx ecx, al
xor byte [rax - 1], dl
sub cl, r8b
and cl, 7
mov rdx, r10
shl cl, 3
shr rdx, cl
xor byte [rax], dl
add rax, 2
lea rcx, [r9 + rax]
cmp rcx, 0x1a
jb 0x14008d6e0
mov byte [r8 + 0x1a], 0
mov rax, r8
ret

Function at 0x14008d720
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xc], 0
mov r8, rcx
je 0x14008d761
xor eax, eax
movabs r9, 0xff63931d455b090f
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rax + r8], dl
inc rax
cmp rax, 0xc
jb 0x14008d740
mov byte [r8 + 0xc], 0
mov rax, r8
ret

Function at 0x14008d770
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x1d], 0
mov r8, rcx
je 0x14008d7b1
xor eax, eax
movabs r9, 0xff63931d455b090f
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rax + r8], dl
inc rax
cmp rax, 0x1d
jb 0x14008d790
mov byte [r8 + 0x1d], 0
mov rax, r8
ret

Function at 0x14008d9e0
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
cmp byte [rcx + 0x1a], 0
mov r8, rcx
je 0x14008da3a
mov r9, rcx
lea rax, [rcx + 1]
not r9
movabs r10, 0x5b4343cf5fc50937
nop dword [rax]
lea ecx, [rax + r9]
mov rdx, r10
and cl, 7
shl cl, 3
shr rdx, cl
movzx ecx, al
xor byte [rax - 1], dl
sub cl, r8b
and cl, 7
mov rdx, r10
shl cl, 3
shr rdx, cl
xor byte [rax], dl
add rax, 2
lea rcx, [r9 + rax]
cmp rcx, 0x1a
jb 0x14008da00
mov byte [r8 + 0x1a], 0
mov rax, r8
ret

Function at 0x14008da70
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x16], 0
mov r8, rcx
je 0x14008dab1
xor eax, eax
movabs r9, 0x677577dfd7e5f78b
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rax + r8], dl
inc rax
cmp rax, 0x16
jb 0x14008da90
mov byte [r8 + 0x16], 0
mov rax, r8
ret

Function at 0x14008daf0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x19], 0
mov r8, rcx
je 0x14008db31
xor eax, eax
movabs r9, 0x936b2b9bfdbd5ba3
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rax + r8], dl
inc rax
cmp rax, 0x19
jb 0x14008db10
mov byte [r8 + 0x19], 0
mov rax, r8
ret

Function at 0x14008db70
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xc], 0
mov r8, rcx
je 0x14008dbb1
xor eax, eax
movabs r9, 0x3199b915e9252397
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rax + r8], dl
inc rax
cmp rax, 0xc
jb 0x14008db90
mov byte [r8 + 0xc], 0
mov rax, r8
ret
Function at 0x14008ddb0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x31], 0
mov r8, rcx
je 0x14008ddf1
xor eax, eax
movabs r9, 0x697da389155bfb49
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rax + r8], dl
inc rax
cmp rax, 0x31
jb 0x14008ddd0
mov byte [r8 + 0x31], 0
mov rax, r8
ret

Function at 0x14008de30
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
cmp byte [rcx + 0x1a], 0
mov r8, rcx
je 0x14008de8a
mov r9, rcx
lea rax, [rcx + 1]
not r9
movabs r10, 0xbf69bdc78527f125
nop dword [rax]
lea ecx, [rax + r9]
mov rdx, r10
and cl, 7
shl cl, 3
shr rdx, cl
movzx ecx, al
xor byte [rax - 1], dl
sub cl, r8b
and cl, 7
mov rdx, r10
shl cl, 3
shr rdx, cl
xor byte [rax], dl
add rax, 2
lea rcx, [r9 + rax]
cmp rcx, 0x1a
jb 0x14008de50
mov byte [r8 + 0x1a], 0
mov rax, r8
ret

Function at 0x14008dec0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x27], 0
mov r8, rcx
je 0x14008df01
xor eax, eax
movabs r9, 0x35677381c1fdd903
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rax + r8], dl
inc rax
cmp rax, 0x27
jb 0x14008dee0
mov byte [r8 + 0x27], 0
mov rax, r8
ret

Function at 0x14008df50
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x19], 0
mov r8, rcx
je 0x14008df91
xor eax, eax
movabs r9, 0xc7d1450587c5fb6f
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rax + r8], dl
inc rax
cmp rax, 0x19
jb 0x14008df70
mov byte [r8 + 0x19], 0
mov rax, r8
ret

Function at 0x14008dfa0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x21], 0
mov r8, rcx
je 0x14008dfe1
xor eax, eax
movabs r9, 0xff93b563272f2755
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rax + r8], dl
inc rax
cmp rax, 0x21
jb 0x14008dfc0
mov byte [r8 + 0x21], 0
mov rax, r8
ret

Function at 0x14008e050
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
mov rdx, rcx
mov qword [rsp + 0x20], rbx
xor r8d, r8d
cmp byte [rcx + 0x2b], r8b
je 0x14008e083
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x2c]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x2a
jb 0x14008e070
mov byte [rdx + 0x2b], r8b
lea rcx, [rdx + 0x2a]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
cmp rdx, rcx
je 0x14008e0ac
mov r8d, Ordinal_45
mov rcx, rbx
call fcn.140092f40
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x14008e0c0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
mov rdx, rcx
mov qword [rsp + 0x20], rbx
xor r8d, r8d
cmp byte [rcx + 0x16], r8b
je 0x14008e0f3
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x2c]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x15
jb 0x14008e0e0
mov byte [rdx + 0x16], r8b
lea rcx, [rdx + 0x15]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
cmp rdx, rcx
je 0x14008e11c
mov r8d, reloc.WS2_32.dll_setsockopt
mov rcx, rbx
call fcn.140092f40
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x14008e1a0
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
cmp byte [rcx + 0x26], 0
mov r8, rcx
je 0x14008e1fa
mov r9, rcx
lea rax, [rcx + 1]
not r9
movabs r10, 0x7f95d7b9712f3bf7
nop dword [rax]
lea ecx, [rax + r9]
mov rdx, r10
and cl, 7
shl cl, 3
shr rdx, cl
movzx ecx, al
xor byte [rax - 1], dl
sub cl, r8b
and cl, 7
mov rdx, r10
shl cl, 3
shr rdx, cl
xor byte [rax], dl
add rax, 2
lea rcx, [r9 + rax]
cmp rcx, 0x26
jb 0x14008e1c0
mov byte [r8 + 0x26], 0
mov rax, r8
ret

Function at 0x14008e200
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x1f], 0
mov r8, rcx
je 0x14008e241
xor eax, eax
movabs r9, 0xd70ff70fc19fa359
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rax + r8], dl
inc rax
cmp rax, 0x1f
jb 0x14008e220
mov byte [r8 + 0x1f], 0
mov rax, r8
ret

Function at 0x14008e280
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x12], 0
mov r8, rcx
je 0x14008e2c1
xor eax, eax
movabs r9, 0x4d3751375151e75f
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rax + r8], dl
inc rax
cmp rax, 0x12
jb 0x14008e2a0
mov byte [r8 + 0x12], 0
mov rax, r8
ret

Function at 0x14008e2d0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xd], 0
mov r8, rcx
je 0x14008e311
xor eax, eax
movabs r9, 0xa14bff710dddd9b5
nop word [rax + rax]
movzx ecx, al
mov rdx, r9
and cl, 7
shl cl, 3
shr rdx, cl
xor byte [rax + r8], dl
inc rax
cmp rax, 0xd
jb 0x14008e2f0
mov byte [r8 + 0xd], 0
mov rax, r8
ret

Function at 0x14008e320
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
mov rdx, rcx
mov qword [rsp + 0x20], rbx
xor r8d, r8d
cmp byte [rcx + 0xc], r8b
je 0x14008e353
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x2c]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0xb
jb 0x14008e340
mov byte [rdx + 0xc], r8b
lea rcx, [rdx + 0xb]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
cmp rdx, rcx
je 0x14008e37c
mov r8d, ntohs
mov rcx, rbx
call fcn.140092f40
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x14008e390
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
mov rdx, rcx
mov qword [rsp + 0x20], rbx
xor r8d, r8d
cmp byte [rcx + 0x1f], r8b
je 0x14008e3c3
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x2c]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x1e
jb 0x14008e3b0
mov byte [rdx + 0x1f], r8b
lea rcx, [rdx + 0x1e]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
cmp rdx, rcx
je 0x14008e3ec
mov r8d, reloc.WLDAP32.dll_Ordinal_30
mov rcx, rbx
call fcn.140092f40
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x14008e400
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
mov rdx, rcx
mov qword [rsp + 0x20], rbx
xor r8d, r8d
cmp byte [rcx + 0x11], r8b
je 0x14008e433
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x2c]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x10
jb 0x14008e420
mov byte [rdx + 0x11], r8b
lea rcx, [rdx + 0x10]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
cmp rdx, rcx
je 0x14008e45c
mov r8d, reloc.WS2_32.dll_recv
mov rcx, rbx
call fcn.140092f40
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x14008e470
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
mov rdx, rcx
mov qword [rsp + 0x20], rbx
xor r8d, r8d
cmp byte [rcx + 9], r8b
je 0x14008e4a3
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x2c]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 8
jb 0x14008e490
mov byte [rdx + 9], r8b
lea rcx, [rdx + 8]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
cmp rdx, rcx
je 0x14008e4cc
mov r8d, 8
mov rcx, rbx
call fcn.140092f40
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x14008e4e0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
mov rdx, rcx
mov qword [rsp + 0x20], rbx
xor r8d, r8d
cmp byte [rcx + 0xb], r8b
je 0x14008e513
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x2c]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0xa
jb 0x14008e500
mov byte [rdx + 0xb], r8b
lea rcx, [rdx + 0xa]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
cmp rdx, rcx
je 0x14008e53c
mov r8d, 0xa
mov rcx, rbx
call fcn.140092f40
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x14008e550
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
mov rdx, rcx
mov qword [rsp + 0x20], rbx
xor r8d, r8d
cmp byte [rcx + 0x12], r8b
je 0x14008e583
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x2c]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x11
jb 0x14008e570
mov byte [rdx + 0x12], r8b
lea rcx, [rdx + 0x11]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
cmp rdx, rcx
je 0x14008e5ac
mov r8d, reloc.WS2_32.dll_recvfrom
mov rcx, rbx
call fcn.140092f40
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x14008e5c0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
mov rdx, rcx
mov qword [rsp + 0x20], rbx
xor r8d, r8d
cmp byte [rcx + 0x10], r8b
je 0x14008e5f3
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x2c]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0xf
jb 0x14008e5e0
mov byte [rdx + 0x10], r8b
lea rcx, [rdx + 0xf]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
cmp rdx, rcx
je 0x14008e61c
mov r8d, reloc.WS2_32.dll_ntohs
mov rcx, rbx
call fcn.140092f40
mov rax, rbx
add rsp, 0x30
pop rbx
ret