joyce8/EMBER2024-capa huggingface dataset:
Function at 0x18003bf40
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x18], r8b
je 0x18003bf73
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x17
jb 0x18003bf60
mov byte [rdx + 0x18], r8b
lea rcx, [rdx + 0x17]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003bf9c
mov r8d, reloc.WS2_32.dll_socket
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003bfb0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x19], r8b
je 0x18003bfe3
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x18
jb 0x18003bfd0
mov byte [rdx + 0x19], r8b
lea rcx, [rdx + 0x18]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003c00c
mov r8d, Ordinal_27
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003c0e0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x27], r8b
je 0x18003c113
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x26
jb 0x18003c100
mov byte [rdx + 0x27], r8b
lea rcx, [rdx + 0x26]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003c13c
mov r8d, Ordinal_41
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003c150
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x23], 0
je 0x18003c173
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x32]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x22
jb 0x18003c160
mov byte [rcx + 0x23], 0
ret

Function at 0x18003c180
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x1f], 0
je 0x18003c1a3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x32]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x1e
jb 0x18003c190
mov byte [rcx + 0x1f], 0
ret

Function at 0x18003c1b0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x1f], r8b
je 0x18003c1e3
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x1e
jb 0x18003c1d0
mov byte [rdx + 0x1f], r8b
lea rcx, [rdx + 0x1e]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003c20c
mov r8d, reloc.WLDAP32.dll_Ordinal_30
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x18003c220
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x1f], r8b
je 0x18003c253
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rdx + rcx], al
inc rcx
cmp rcx, 0x1e
jb 0x18003c240
mov byte [rdx + 0x1f], r8b
lea rcx, [rdx + 0x1e]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003c27c
mov r8d, reloc.WLDAP32.dll_Ordinal_30
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003c2b0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x1a], 0
je 0x18003c2d3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x32]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x19
jb 0x18003c2c0
mov byte [rcx + 0x1a], 0
ret

Function at 0x18003c2e0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x1a], r8b
je 0x18003c313
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x19
jb 0x18003c300
mov byte [rdx + 0x1a], r8b
lea rcx, [rdx + 0x19]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003c33c
mov r8d, Ordinal_27
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003c350
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x2b], r8b
je 0x18003c383
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x2a
jb 0x18003c370
mov byte [rdx + 0x2b], r8b
lea rcx, [rdx + 0x2a]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003c3ac
mov r8d, Ordinal_45
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003c530
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x21], 0
je 0x18003c553
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x32]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x20
jb 0x18003c540
mov byte [rcx + 0x21], 0
ret

Function at 0x18003c560
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x21], r8b
je 0x18003c593
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x20
jb 0x18003c580
mov byte [rdx + 0x21], r8b
lea rcx, [rdx + 0x20]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003c5bc
mov r8d, reloc.WLDAP32.dll_Ordinal_32
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x18003d4b0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 5], r8b
je 0x18003d4e3
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 4
jb 0x18003d4d0
mov byte [rdx + 5], r8b
lea rcx, [rdx + 4]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003d50c
mov r8d, 4
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003d5c0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x17], r8b
je 0x18003d5f3
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x16
jb 0x18003d5e0
mov byte [rdx + 0x17], r8b
lea rcx, [rdx + 0x16]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003d61c
mov r8d, reloc.WLDAP32.dll_Ordinal_22
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003d630
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x13], r8b
je 0x18003d663
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x12
jb 0x18003d650
mov byte [rdx + 0x13], r8b
lea rcx, [rdx + 0x12]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003d68c
mov r8d, reloc.WS2_32.dll_select
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003d6a0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x14], r8b
je 0x18003d6d3
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x13
jb 0x18003d6c0
mov byte [rdx + 0x14], r8b
lea rcx, [rdx + 0x13]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003d6fc
mov r8d, reloc.WS2_32.dll_send
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003d710
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0xf], r8b
je 0x18003d743
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0xe
jb 0x18003d730
mov byte [rdx + 0xf], r8b
lea rcx, [rdx + 0xe]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003d76c
mov r8d, recvfrom
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x18003d7a0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x10], r8b
je 0x18003d7d3
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0xf
jb 0x18003d7c0
mov byte [rdx + 0x10], r8b
lea rcx, [rdx + 0xf]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003d7fc
mov r8d, reloc.WS2_32.dll_ntohs
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003d810
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0xd], r8b
je 0x18003d843
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0xc
jb 0x18003d830
mov byte [rdx + 0xd], r8b
lea rcx, [rdx + 0xc]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003d86c
mov r8d, recvfrom
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003d880
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0xe], r8b
je 0x18003d8b3
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0xd
jb 0x18003d8a0
mov byte [rdx + 0xe], r8b
lea rcx, [rdx + 0xd]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003d8dc
mov r8d, reloc.WS2_32.dll_listen
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003d8f0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x12], r8b
je 0x18003d923
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x11
jb 0x18003d910
mov byte [rdx + 0x12], r8b
lea rcx, [rdx + 0x11]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003d94c
mov r8d, reloc.WS2_32.dll_recvfrom
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003d980
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0xc], r8b
je 0x18003d9b3
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0xb
jb 0x18003d9a0
mov byte [rdx + 0xc], r8b
lea rcx, [rdx + 0xb]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003d9dc
mov r8d, ntohs
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x18003d9f0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x11], r8b
je 0x18003da23
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x10
jb 0x18003da10
mov byte [rdx + 0x11], r8b
lea rcx, [rdx + 0x10]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003da4c
mov r8d, reloc.WS2_32.dll_recv
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003dcf0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0xb], r8b
je 0x18003dd23
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0xa
jb 0x18003dd10
mov byte [rdx + 0xb], r8b
lea rcx, [rdx + 0xa]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003dd4c
mov r8d, 0xa
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003df30
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x1e], 0
je 0x18003df53
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x32]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x1d
jb 0x18003df40
mov byte [rcx + 0x1e], 0
ret

Function at 0x18003df60
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x1e], r8b
je 0x18003df93
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x1d
jb 0x18003df80
mov byte [rdx + 0x1e], r8b
lea rcx, [rdx + 0x1d]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003dfbc
mov r8d, Ordinal_33
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003dfd0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 4], r8b
je 0x18003e003
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 3
jb 0x18003dff0
mov byte [rdx + 4], r8b
lea rcx, [rdx + 3]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003e02c
mov r8d, 3
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x18003e040
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x1c], r8b
je 0x18003e073
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x1b
jb 0x18003e060
mov byte [rdx + 0x1c], r8b
lea rcx, [rdx + 0x1b]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003e09c
mov r8d, reloc.WLDAP32.dll_Ordinal_27
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003e0b0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x1b], r8b
je 0x18003e0e3
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x1a
jb 0x18003e0d0
mov byte [rdx + 0x1b], r8b
lea rcx, [rdx + 0x1a]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003e10c
mov r8d, reloc.WLDAP32.dll_Ordinal_26
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003e120
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 3], r8b
je 0x18003e153
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 2
jb 0x18003e140
mov byte [rdx + 3], r8b
lea rcx, [rdx + 2]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003e17c
mov r8d, 2
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003e190
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 6], r8b
je 0x18003e1c3
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 5
jb 0x18003e1b0
mov byte [rdx + 6], r8b
lea rcx, [rdx + 5]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003e1ec
mov r8d, 5
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003e200
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x16], r8b
je 0x18003e233
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x15
jb 0x18003e220
mov byte [rdx + 0x16], r8b
lea rcx, [rdx + 0x15]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003e25c
mov r8d, reloc.WS2_32.dll_setsockopt
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x18003e270
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x15], r8b
je 0x18003e2a3
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x14
jb 0x18003e290
mov byte [rdx + 0x15], r8b
lea rcx, [rdx + 0x14]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003e2cc
mov r8d, reloc.WS2_32.dll_sendto
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003e900
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 8], r8b
je 0x18003e933
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 7
jb 0x18003e920
mov byte [rdx + 8], r8b
lea rcx, [rdx + 7]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003e95c
mov r8d, 7
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x18003e980
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 7], r8b
je 0x18003e9b3
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 6
jb 0x18003e9a0
mov byte [rdx + 7], r8b
lea rcx, [rdx + 6]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x18003e9dc
mov r8d, 6
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x180043a20
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rsi
push rdi
sub rsp, 0x40
mov rdi, r8
mov rbx, rcx
mov qword [rsp + 0x30], rcx
xor esi, esi
cmp byte [rdx + 8], sil
je 0x180043a53
mov ecx, esi
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rdx + rcx], al
inc rcx
cmp rcx, 7
jb 0x180043a40
mov byte [rdx + 8], sil
lea rax, [rdx + 7]
mov qword [rbx], rsi
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], sil
cmp rdx, rax
je 0x180043a7d
mov r8d, 7
mov rcx, rbx
call fcn.18003ff30
nop
lea r10, [rbx + 0x20]
mov qword [rsp + 0x20], r10
cmp byte [rdi + 8], 0
je 0x180043aa3
mov rcx, rsi
nop
lea eax, [rcx + 0x32]
xor byte [rcx + rdi], al
inc rcx
cmp rcx, 7
jb 0x180043a90
mov byte [rdi + 8], 0
lea r9, [rdi + 7]
mov qword [r10], rsi
mov qword [r10 + 0x10], rsi
mov qword [r10 + 0x18], reloc.WS2_32.dll_ntohs
mov byte [r10], 0
cmp rdi, r9
je 0x180043ad1
mov r8d, 7
mov rdx, rdi
mov rcx, r10
call fcn.18003ff30
nop
mov rax, rbx
add rsp, 0x40
pop rdi
pop rsi
pop rbx
ret
Function at 0x180045d30
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x29], r8b
je 0x180045d63
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x28
jb 0x180045d50
mov byte [rdx + 0x29], r8b
lea rcx, [rdx + 0x28]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x180045d8c
mov r8d, Ordinal_45
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x180045da0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x28], r8b
je 0x180045dd3
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x27
jb 0x180045dc0
mov byte [rdx + 0x28], r8b
lea rcx, [rdx + 0x27]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x180045dfc
mov r8d, Ordinal_41
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x180045e10
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x22], r8b
je 0x180045e43
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x21
jb 0x180045e30
mov byte [rdx + 0x22], r8b
lea rcx, [rdx + 0x21]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x180045e6c
mov r8d, reloc.WLDAP32.dll_Ordinal_33
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x180045e80
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x24], r8b
je 0x180045eb3
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x23
jb 0x180045ea0
mov byte [rdx + 0x24], r8b
lea rcx, [rdx + 0x23]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x180045edc
mov r8d, reloc.WLDAP32.dll_Ordinal_35
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x180046170
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
xor r8d, r8d
mov rdx, rcx
mov qword [rsp + 0x20], rbx
cmp byte [rcx + 0x23], r8b
je 0x1800461a3
mov ecx, r8d
nop dword [rax]
lea eax, [rcx + 0x32]
xor byte [rcx + rdx], al
inc rcx
cmp rcx, 0x22
jb 0x180046190
mov byte [rdx + 0x23], r8b
lea rcx, [rdx + 0x22]
mov qword [rbx], r8
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
cmp rdx, rcx
je 0x1800461cc
mov r8d, Ordinal_35
mov rcx, rbx
call fcn.18003ff30
mov rax, rbx
add rsp, 0x30
pop rbx
ret