joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400c4e80
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x32], r8b
je 0x1400c4eb3
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax + 0x62]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x31
jb 0x1400c4ea0
mov byte [rdx + 0x32], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x31]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400c4ee4
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, Ordinal_50
mov rcx, rbx
call fcn.1400c00a0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400c4f00
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x33], r8b
je 0x1400c4f33
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax + 0x62]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x32
jb 0x1400c4f20
mov byte [rdx + 0x33], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x32]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400c4f64
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, reloc.WLDAP32.dll_Ordinal_50
mov rcx, rbx
call fcn.1400c00a0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400c4f80
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x35], r8b
je 0x1400c4fb3
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax + 0x62]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x34
jb 0x1400c4fa0
mov byte [rdx + 0x35], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x34]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400c4fe4
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, gethostname
mov rcx, rbx
call fcn.1400c00a0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400c5000
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x36], r8b
je 0x1400c5033
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax + 0x62]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x35
jb 0x1400c5020
mov byte [rdx + 0x36], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x35]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400c5064
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, gethostname
mov rcx, rbx
call fcn.1400c00a0
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x1400c5080
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x3b], r8b
je 0x1400c50b3
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax + 0x62]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x3a
jb 0x1400c50a0
mov byte [rdx + 0x3b], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x3a]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400c50e4
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, Ordinal_60
mov rcx, rbx
call fcn.1400c00a0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400c5100
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x3c], r8b
je 0x1400c5133
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax + 0x62]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x3b
jb 0x1400c5120
mov byte [rdx + 0x3c], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x3b]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400c5164
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, Ordinal_60
mov rcx, rbx
call fcn.1400c00a0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400c5180
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x51], r8b
je 0x1400c51b3
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax + 0x62]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x50
jb 0x1400c51a0
mov byte [rdx + 0x51], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x50]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400c51e4
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, 0x50
mov rcx, rbx
call fcn.1400c00a0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400c5200
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x53], r8b
je 0x1400c5233
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax + 0x62]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x52
jb 0x1400c5220
mov byte [rdx + 0x53], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x52]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400c5264
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, 0x52
mov rcx, rbx
call fcn.1400c00a0
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x1400c5280
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x57], r8b
je 0x1400c52b3
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax + 0x62]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x56
jb 0x1400c52a0
mov byte [rdx + 0x57], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x56]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400c52e4
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, 0x56
mov rcx, rbx
call fcn.1400c00a0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400c5300
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x59], r8b
je 0x1400c5333
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax + 0x62]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x58
jb 0x1400c5320
mov byte [rdx + 0x59], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x58]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400c5364
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, 0x58
mov rcx, rbx
call fcn.1400c00a0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400c5380
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x5b], r8b
je 0x1400c53b3
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax + 0x62]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x5a
jb 0x1400c53a0
mov byte [rdx + 0x5b], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x5a]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400c53e4
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, 0x5a
mov rcx, rbx
call fcn.1400c00a0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400c5400
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x5c], r8b
je 0x1400c5433
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax + 0x62]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x5b
jb 0x1400c5420
mov byte [rdx + 0x5c], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x5b]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400c5464
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, 0x5b
mov rcx, rbx
call fcn.1400c00a0
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x1400c5480
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x5e], r8b
je 0x1400c54b3
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax + 0x62]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x5d
jb 0x1400c54a0
mov byte [rdx + 0x5e], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x5d]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400c54e4
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, 0x5d
mov rcx, rbx
call fcn.1400c00a0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400c5500
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x62], r8b
je 0x1400c5533
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax + 0x62]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x61
jb 0x1400c5520
mov byte [rdx + 0x62], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x61]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400c5564
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, 0x61
mov rcx, rbx
call fcn.1400c00a0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400c5580
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x63], r8b
je 0x1400c55b3
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax + 0x62]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x62
jb 0x1400c55a0
mov byte [rdx + 0x63], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x62]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400c55e4
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, 0x62
mov rcx, rbx
call fcn.1400c00a0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400c5600
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x64], r8b
je 0x1400c5633
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax + 0x62]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x63
jb 0x1400c5620
mov byte [rdx + 0x64], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x63]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400c5664
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, 0x63
mov rcx, rbx
call fcn.1400c00a0
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x1400c5680
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x68], r8b
je 0x1400c56b3
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax + 0x62]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x67
jb 0x1400c56a0
mov byte [rdx + 0x68], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x67]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400c56e4
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, 0x67
mov rcx, rbx
call fcn.1400c00a0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400c5700
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x69], r8b
je 0x1400c5733
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax + 0x62]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x68
jb 0x1400c5720
mov byte [rdx + 0x69], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x68]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400c5764
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, 0x68
mov rcx, rbx
call fcn.1400c00a0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400c5780
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x6b], r8b
je 0x1400c57b3
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax + 0x62]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x6a
jb 0x1400c57a0
mov byte [rdx + 0x6b], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x6a]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400c57e4
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, WSAGetLastError
mov rcx, rbx
call fcn.1400c00a0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400c5800
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x6c], r8b
je 0x1400c5833
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax + 0x62]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x6b
jb 0x1400c5820
mov byte [rdx + 0x6c], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x6b]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400c5864
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, WSAGetLastError
mov rcx, rbx
call fcn.1400c00a0
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x1400c5880
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x6f], r8b
je 0x1400c58b3
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax + 0x62]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x6e
jb 0x1400c58a0
mov byte [rdx + 0x6f], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x6e]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400c58e4
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, WSAStartup
mov rcx, rbx
call fcn.1400c00a0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400c5900
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x71], r8b
je 0x1400c5933
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax + 0x62]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x70
jb 0x1400c5920
mov byte [rdx + 0x71], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x70]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400c5964
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, reloc.WS2_32.dll_WSASetLastError
mov rcx, rbx
call fcn.1400c00a0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400c5980
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x73], r8b
je 0x1400c59b3
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax + 0x62]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x72
jb 0x1400c59a0
mov byte [rdx + 0x73], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x72]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400c59e4
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, WSAStartup
mov rcx, rbx
call fcn.1400c00a0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400c5a00
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x75], r8b
je 0x1400c5a33
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax + 0x62]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x74
jb 0x1400c5a20
mov byte [rdx + 0x75], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x74]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400c5a64
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, reloc.WS2_32.dll_WSACleanup
mov rcx, rbx
call fcn.1400c00a0
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x1400c5a80
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x77], r8b
je 0x1400c5ab3
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax + 0x62]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x76
jb 0x1400c5aa0
mov byte [rdx + 0x77], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x76]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400c5ae4
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, 0x76
mov rcx, rbx
call fcn.1400c00a0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400c5b00
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x78], r8b
je 0x1400c5b33
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax + 0x62]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x77
jb 0x1400c5b20
mov byte [rdx + 0x78], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x77]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400c5b64
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, 0x77
mov rcx, rbx
call fcn.1400c00a0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400c5b80
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x7c], r8b
je 0x1400c5bb3
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax + 0x62]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x7b
jb 0x1400c5ba0
mov byte [rdx + 0x7c], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x7b]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400c5be4
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, 0x7b
mov rcx, rbx
call fcn.1400c00a0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400c5c00
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x85], r8b
je 0x1400c5c38
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax + 0x62]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x84
jb 0x1400c5c20
mov byte [rdx + 0x85], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x84]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400c5c6c
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, 0x84
mov rcx, rbx
call fcn.1400c00a0
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x1400c5c90
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x87], r8b
je 0x1400c5cc8
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax + 0x62]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x86
jb 0x1400c5cb0
mov byte [rdx + 0x87], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x86]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400c5cfc
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, 0x86
mov rcx, rbx
call fcn.1400c00a0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400c5d20
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x8b], r8b
je 0x1400c5d58
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax + 0x62]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x8a
jb 0x1400c5d40
mov byte [rdx + 0x8b], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x8a]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400c5d8c
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, Ordinal_143
mov rcx, rbx
call fcn.1400c00a0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400c5db0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x8e], r8b
je 0x1400c5de8
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax + 0x62]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x8d
jb 0x1400c5dd0
mov byte [rdx + 0x8e], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x8d]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400c5e1c
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, Ordinal_143
mov rcx, rbx
call fcn.1400c00a0
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x1400c5e40
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor r8d, r8d
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x90], r8b
je 0x1400c5e78
mov eax, r8d
nop dword [rax + rax]
lea ecx, [rax + 0x62]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x8f
jb 0x1400c5e60
mov byte [rdx + 0x90], r8b
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
lea rax, [rdx + 0x8f]
mov qword [rbx + 0x10], r8
mov qword [rbx + 0x18], r8
cmp rdx, rax
jne 0x1400c5eac
mov qword [rbx + 0x10], r8
mov rax, rbx
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r8b
add rsp, 0x30
pop rbx
ret
mov r8d, reloc.WLDAP32.dll_Ordinal_143
mov rcx, rbx
call fcn.1400c00a0
mov rax, rbx
add rsp, 0x30
pop rbx
ret