joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400eb7e0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x32], r8b
je 0x1400eb813
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax - 0x65]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x31
jb 0x1400eb800
mov byte [rdx + 0x32], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x31]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400eb844
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, Ordinal_50
mov rcx, rbx
call fcn.1400e7f50
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400eb860
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x33], r8b
je 0x1400eb893
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax - 0x65]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x32
jb 0x1400eb880
mov byte [rdx + 0x33], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x32]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400eb8c4
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, reloc.WLDAP32.dll_Ordinal_50
mov rcx, rbx
call fcn.1400e7f50
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400eb8e0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x35], r8b
je 0x1400eb913
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax - 0x65]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x34
jb 0x1400eb900
mov byte [rdx + 0x35], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x34]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400eb944
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, gethostname
mov rcx, rbx
call fcn.1400e7f50
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400eb960
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x36], r8b
je 0x1400eb993
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax - 0x65]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x35
jb 0x1400eb980
mov byte [rdx + 0x36], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x35]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400eb9c4
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, gethostname
mov rcx, rbx
call fcn.1400e7f50
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x1400eb9e0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x3b], r8b
je 0x1400eba13
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax - 0x65]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x3a
jb 0x1400eba00
mov byte [rdx + 0x3b], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x3a]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400eba44
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, Ordinal_60
mov rcx, rbx
call fcn.1400e7f50
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400eba60
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x3c], r8b
je 0x1400eba93
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax - 0x65]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x3b
jb 0x1400eba80
mov byte [rdx + 0x3c], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x3b]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400ebac4
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, Ordinal_60
mov rcx, rbx
call fcn.1400e7f50
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400ebae0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x51], r8b
je 0x1400ebb13
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax - 0x65]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x50
jb 0x1400ebb00
mov byte [rdx + 0x51], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x50]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400ebb44
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, 0x50
mov rcx, rbx
call fcn.1400e7f50
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400ebb60
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x53], r8b
je 0x1400ebb93
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax - 0x65]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x52
jb 0x1400ebb80
mov byte [rdx + 0x53], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x52]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400ebbc4
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, 0x52
mov rcx, rbx
call fcn.1400e7f50
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x1400ebbe0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x57], r8b
je 0x1400ebc13
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax - 0x65]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x56
jb 0x1400ebc00
mov byte [rdx + 0x57], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x56]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400ebc44
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, 0x56
mov rcx, rbx
call fcn.1400e7f50
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400ebc60
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x59], r8b
je 0x1400ebc93
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax - 0x65]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x58
jb 0x1400ebc80
mov byte [rdx + 0x59], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x58]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400ebcc4
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, 0x58
mov rcx, rbx
call fcn.1400e7f50
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400ebce0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x5b], r8b
je 0x1400ebd13
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax - 0x65]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x5a
jb 0x1400ebd00
mov byte [rdx + 0x5b], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x5a]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400ebd44
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, 0x5a
mov rcx, rbx
call fcn.1400e7f50
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400ebd60
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x5c], r8b
je 0x1400ebd93
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax - 0x65]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x5b
jb 0x1400ebd80
mov byte [rdx + 0x5c], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x5b]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400ebdc4
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, 0x5b
mov rcx, rbx
call fcn.1400e7f50
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x1400ebde0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x5e], r8b
je 0x1400ebe13
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax - 0x65]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x5d
jb 0x1400ebe00
mov byte [rdx + 0x5e], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x5d]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400ebe44
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, 0x5d
mov rcx, rbx
call fcn.1400e7f50
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400ebe60
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x62], r8b
je 0x1400ebe93
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax - 0x65]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x61
jb 0x1400ebe80
mov byte [rdx + 0x62], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x61]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400ebec4
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, 0x61
mov rcx, rbx
call fcn.1400e7f50
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400ebee0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x63], r8b
je 0x1400ebf13
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax - 0x65]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x62
jb 0x1400ebf00
mov byte [rdx + 0x63], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x62]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400ebf44
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, 0x62
mov rcx, rbx
call fcn.1400e7f50
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400ebf60
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x64], r8b
je 0x1400ebf93
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax - 0x65]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x63
jb 0x1400ebf80
mov byte [rdx + 0x64], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x63]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400ebfc4
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, 0x63
mov rcx, rbx
call fcn.1400e7f50
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x1400ebfe0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x68], r8b
je 0x1400ec013
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax - 0x65]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x67
jb 0x1400ec000
mov byte [rdx + 0x68], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x67]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400ec044
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, 0x67
mov rcx, rbx
call fcn.1400e7f50
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400ec060
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x69], r8b
je 0x1400ec093
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax - 0x65]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x68
jb 0x1400ec080
mov byte [rdx + 0x69], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x68]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400ec0c4
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, 0x68
mov rcx, rbx
call fcn.1400e7f50
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400ec0e0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x6b], r8b
je 0x1400ec113
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax - 0x65]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x6a
jb 0x1400ec100
mov byte [rdx + 0x6b], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x6a]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400ec144
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, WSAGetLastError
mov rcx, rbx
call fcn.1400e7f50
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400ec160
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x6c], r8b
je 0x1400ec193
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax - 0x65]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x6b
jb 0x1400ec180
mov byte [rdx + 0x6c], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x6b]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400ec1c4
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, WSAGetLastError
mov rcx, rbx
call fcn.1400e7f50
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x1400ec1e0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x6f], r8b
je 0x1400ec213
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax - 0x65]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x6e
jb 0x1400ec200
mov byte [rdx + 0x6f], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x6e]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400ec244
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, WSAStartup
mov rcx, rbx
call fcn.1400e7f50
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400ec260
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x71], r8b
je 0x1400ec293
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax - 0x65]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x70
jb 0x1400ec280
mov byte [rdx + 0x71], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x70]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400ec2c4
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, reloc.WS2_32.dll_WSASetLastError
mov rcx, rbx
call fcn.1400e7f50
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400ec2e0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x73], r8b
je 0x1400ec313
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax - 0x65]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x72
jb 0x1400ec300
mov byte [rdx + 0x73], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x72]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400ec344
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, WSAStartup
mov rcx, rbx
call fcn.1400e7f50
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400ec360
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x75], r8b
je 0x1400ec393
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax - 0x65]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x74
jb 0x1400ec380
mov byte [rdx + 0x75], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x74]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400ec3c4
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, reloc.WS2_32.dll_WSACleanup
mov rcx, rbx
call fcn.1400e7f50
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x1400ec3e0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x77], r8b
je 0x1400ec413
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax - 0x65]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x76
jb 0x1400ec400
mov byte [rdx + 0x77], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x76]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400ec444
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, 0x76
mov rcx, rbx
call fcn.1400e7f50
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400ec460
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x78], r8b
je 0x1400ec493
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax - 0x65]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x77
jb 0x1400ec480
mov byte [rdx + 0x78], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x77]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400ec4c4
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, 0x77
mov rcx, rbx
call fcn.1400e7f50
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400ec4e0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x7c], r8b
je 0x1400ec513
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax - 0x65]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x7b
jb 0x1400ec500
mov byte [rdx + 0x7c], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x7b]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400ec544
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, 0x7b
mov rcx, rbx
call fcn.1400e7f50
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400ec560
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x85], r8b
je 0x1400ec598
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax - 0x65]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x84
jb 0x1400ec580
mov byte [rdx + 0x85], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x84]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400ec5cc
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, 0x84
mov rcx, rbx
call fcn.1400e7f50
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x1400ec5f0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x87], r8b
je 0x1400ec628
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax - 0x65]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x86
jb 0x1400ec610
mov byte [rdx + 0x87], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x86]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400ec65c
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, 0x86
mov rcx, rbx
call fcn.1400e7f50
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400ec680
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x8b], r8b
je 0x1400ec6b8
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax - 0x65]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x8a
jb 0x1400ec6a0
mov byte [rdx + 0x8b], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x8a]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400ec6ec
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, Ordinal_143
mov rcx, rbx
call fcn.1400e7f50
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400ec710
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x8e], r8b
je 0x1400ec748
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax - 0x65]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x8d
jb 0x1400ec730
mov byte [rdx + 0x8e], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x8d]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400ec77c
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, Ordinal_143
mov rcx, rbx
call fcn.1400e7f50
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400ec7a0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x90], r8b
je 0x1400ec7d8
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax - 0x65]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x8f
jb 0x1400ec7c0
mov byte [rdx + 0x90], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x8f]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400ec80c
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, reloc.WLDAP32.dll_Ordinal_143
mov rcx, rbx
call fcn.1400e7f50
mov rax, rbx
add rsp, 0x30
pop rbx
ret