joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1401129f0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403751a0], 1
je 0x140112a5c
mov r9, rdx
mov ecx, 0x18
xor r10d, r10d
movabs r11, 0xaaaaaaaaaaaaaaab
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 1
and rdx, 0xfffffffffffffff8
lea rax, [rdx + rdx*2]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x18], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x25
jne 0x140112a20
mov dword [0x1403751a0], 1
add rsp, 8
pop rsi
ret

Function at 0x140112a70
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403751bc], 1
je 0x140112ad6
mov r9, rdx
mov ecx, 0x1b
xor r10d, r10d
movabs r11, 0x97b425ed097b425f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe5
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1b], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x31
jne 0x140112aa0
mov dword [0x1403751bc], 1
add rsp, 8
pop rsi
ret

Function at 0x140112ae0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403751d4], 1
je 0x140112b39
mov r9, rdx
xor ecx, ecx
movabs r10, 0xf0f0f0f0f0f0f0f1
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
mov eax, edx
shl eax, 4
add eax, edx
movzx r11d, byte [r8 + rcx + 0x11]
mov edx, ecx
sub edx, eax
movsxd rax, edx
xor r11b, byte [r8 + rax]
mov byte [r9 + rcx], r11b
add rcx, 1
cmp ecx, 0x12
jne 0x140112b00
mov dword [0x1403751d4], 1
pop rax
ret

Function at 0x140112b40
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403751ec], 1
je 0x140112b76
xor ecx, ecx
nop dword [rax]
movzx r9d, byte [r8 + rcx + 0x10]
mov eax, ecx
and eax, 0xf
xor r9b, byte [r8 + rax]
mov byte [rdx + rcx], r9b
add rcx, 1
cmp ecx, 0x11
jne 0x140112b50
mov dword [0x1403751ec], 1
pop rax
ret

Function at 0x140112b80
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403751f8], 1
je 0x140112bec
mov r9, rdx
mov ecx, 0x18
xor r10d, r10d
movabs r11, 0xaaaaaaaaaaaaaaab
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 1
and rdx, 0xfffffffffffffff8
lea rax, [rdx + rdx*2]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x18], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x20
jne 0x140112bb0
mov dword [0x1403751f8], 1
add rsp, 8
pop rsi
ret

Function at 0x140112c00
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375204], 1
je 0x140112c66
mov r9, rdx
mov ecx, 0x1a
xor r10d, r10d
movabs r11, 0x4ec4ec4ec4ec4ec5
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
imul rax, rdx, 0xffffffffffffffe6
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1a], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x20
jne 0x140112c30
mov dword [0x140375204], 1
add rsp, 8
pop rsi
ret
Function at 0x140112c70
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375214], 1
je 0x140112cd6
mov r9, rdx
mov ecx, 0x1e
xor r10d, r10d
movabs r11, 0x8888888888888889
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe2
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1e], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x27
jne 0x140112ca0
mov dword [0x140375214], 1
add rsp, 8
pop rsi
ret

Function at 0x140112ce0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375228], 1
je 0x140112d49
mov r9, rdx
mov ecx, 0x1c
xor r10d, r10d
movabs r11, 0x4924924924924925
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
shr rax, 2
mul r11
shr rdx, 1
imul rax, rdx, 0xffffffffffffffe4
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1c], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x29
jne 0x140112d10
mov dword [0x140375228], 1
add rsp, 8
pop rsi
ret

Function at 0x140112d50
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037523c], 1
je 0x140112dc2
mov r9, rdx
mov ecx, 0x1d
xor r10d, r10d
movabs r11, 0x1a7b9611a7b9611b
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe3
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1d], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x2a
jne 0x140112d80
mov dword [0x14037523c], 1
add rsp, 8
pop rsi
ret

Function at 0x140112dd0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375250], 1
je 0x140112e39
mov r9, rdx
mov ecx, 0x1c
xor r10d, r10d
movabs r11, 0x4924924924924925
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
shr rax, 2
mul r11
shr rdx, 1
imul rax, rdx, 0xffffffffffffffe4
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1c], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x2b
jne 0x140112e00
mov dword [0x140375250], 1
add rsp, 8
pop rsi
ret

Function at 0x140112e40
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037525c], 1
je 0x140112eb8
mov r9, rdx
mov ecx, 0x1f
xor r10d, r10d
movabs r11, 0x842108421084211
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
mov rdx, rax
shl rdx, 5
sub rax, rdx
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1f], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x26
jne 0x140112e70
mov dword [0x14037525c], 1
add rsp, 8
pop rsi
ret
Function at 0x140112ec0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375264], 1
je 0x140112f26
mov r9, rdx
mov ecx, 0x1b
xor r10d, r10d
movabs r11, 0x97b425ed097b425f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe5
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1b], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1f
jne 0x140112ef0
mov dword [0x140375264], 1
add rsp, 8
pop rsi
ret

Function at 0x140112f30
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375274], 1
je 0x140112f96
mov r9, rdx
mov ecx, reloc.WS2_32.dll_send
xor r10d, r10d
movabs r11, 0xd79435e50d79435f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x13], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1e
jne 0x140112f60
mov dword [0x140375274], 1
add rsp, 8
pop rsi
ret

Function at 0x140112fa0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375280], 1
je 0x140113006
mov r9, rdx
mov ecx, 0x1b
xor r10d, r10d
movabs r11, 0x97b425ed097b425f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe5
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1b], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x23
jne 0x140112fd0
mov dword [0x140375280], 1
add rsp, 8
pop rsi
ret

Function at 0x140113010
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037528c], 1
je 0x140113082
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x8618618618618619
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffeb
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x15], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1d
jne 0x140113040
mov dword [0x14037528c], 1
add rsp, 8
pop rsi
ret

Function at 0x140113090
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037529c], 1
je 0x1401130fd
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0xcccccccccccccccd
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
and rdx, 0xfffffffffffffffc
lea rax, [rdx + rdx*4]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x14], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x20
jne 0x1401130c0
mov dword [0x14037529c], 1
add rsp, 8
pop rsi
ret
Function at 0x140113110
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403752a4], 1
je 0x140113182
mov r9, rdx
mov ecx, reloc.WS2_32.dll_socket
xor r10d, r10d
movabs r11, 0x642c8590b21642c9
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe9
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x17], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1b
jne 0x140113140
mov dword [0x1403752a4], 1
add rsp, 8
pop rsi
ret

Function at 0x140113190
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403752b0], 1
je 0x1401131f9
mov r9, rdx
mov ecx, 0x1c
xor r10d, r10d
movabs r11, 0x4924924924924925
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
shr rax, 2
mul r11
shr rdx, 1
imul rax, rdx, 0xffffffffffffffe4
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1c], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x21
jne 0x1401131c0
mov dword [0x1403752b0], 1
add rsp, 8
pop rsi
ret

Function at 0x140113200
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403752e0], 1
je 0x14011325e
mov r9, rdx
xor ecx, ecx
movabs r10, 0x1a7b9611a7b9611b
nop dword [rax]
mov rax, rcx
mul r10
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul eax, eax, 0xffffffe3
movzx edx, byte [r8 + rcx + 0x1d]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x2b
jne 0x140113220
mov dword [0x1403752e0], 1
pop rax
ret

Function at 0x140113260
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x14037530c], 1
je 0x1401132bd
xor eax, eax
mov r9d, 0xf0f0f0f1
nop word cs:[rax + rax]
nop dword [rax]
mov ecx, eax
imul rcx, r9
shr rcx, 0x24
mov r10d, ecx
shl r10d, 4
add r10d, ecx
movzx r11d, byte [r8 + rax + 0x11]
mov ecx, eax
sub ecx, r10d
movsxd rcx, ecx
xor r11b, byte [r8 + rcx]
mov byte [rdx + rax], r11b
add rax, 1
cmp eax, 0x26
jne 0x140113280
mov dword [0x14037530c], 1
pop rax
ret

Function at 0x1401132c0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x14037533c], 1
je 0x140113312
mov r9, rdx
xor ecx, ecx
movabs r10, 0x97b425ed097b425f
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
imul eax, edx, 0xffffffe5
movzx edx, byte [r8 + rcx + 0x1b]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x2a
jne 0x1401132e0
mov dword [0x14037533c], 1
pop rax
ret

Function at 0x140113320
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x14037536c], 1
je 0x140113382
mov r9, rdx
xor ecx, ecx
movabs r10, 0x842108421084211
nop dword [rax]
mov rax, rcx
mul r10
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
mov edx, eax
shl edx, 5
sub eax, edx
movzx edx, byte [r8 + rcx + 0x1f]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x2b
jne 0x140113340
mov dword [0x14037536c], 1
pop rax
ret
Function at 0x140113390
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x14037539c], 1
je 0x1401133ee
mov r9, rdx
xor ecx, ecx
movabs r10, 0x47ae147ae147ae15
nop dword [rax]
mov rax, rcx
mul r10
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul eax, eax, 0xffffffe7
movzx edx, byte [r8 + rcx + 0x19]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x29
jne 0x1401133b0
mov dword [0x14037539c], 1
pop rax
ret

Function at 0x1401133f0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403753cc], 1
je 0x140113451
xor eax, eax
mov r9d, 0xaf286bcb
nop word cs:[rax + rax]
nop dword [rax]
mov r10d, eax
imul r10, r9
shr r10, 0x20
mov ecx, eax
sub ecx, r10d
shr ecx, 1
add ecx, r10d
shr ecx, 4
imul ecx, ecx, 0xffffffed
movzx r10d, byte [r8 + rax + 0x13]
add ecx, eax
movsxd rcx, ecx
xor r10b, byte [r8 + rcx]
mov byte [rdx + rax], r10b
add rax, 1
cmp eax, 0x2a
jne 0x140113410
mov dword [0x1403753cc], 1
pop rax
ret

Function at 0x140113460
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403753f8], 1
je 0x1401134be
mov r9, rdx
xor ecx, ecx
movabs r10, 0x8618618618618619
nop dword [rax]
mov rax, rcx
mul r10
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul eax, eax, 0xffffffeb
movzx edx, byte [r8 + rcx + 0x15]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x27
jne 0x140113480
mov dword [0x1403753f8], 1
pop rax
ret

Function at 0x1401134c0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x14037542c], 1
je 0x1401134f6
xor ecx, ecx
nop dword [rax]
movzx r9d, byte [r8 + rcx + 0x10]
mov eax, ecx
and eax, 0xf
xor r9b, byte [r8 + rax]
mov byte [rdx + rcx], r9b
add rcx, 1
cmp ecx, 0x2d
jne 0x1401134d0
mov dword [0x14037542c], 1
pop rax
ret

Function at 0x140113500
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140375470], 1
je 0x140113553
xor eax, eax
mov r9d, 0xb21642c9
nop word cs:[rax + rax]
nop dword [rax]
mov ecx, eax
imul rcx, r9
shr rcx, 0x24
imul ecx, ecx, 0xffffffe9
movzx r10d, byte [r8 + rax + 0x17]
add ecx, eax
movsxd rcx, ecx
xor r10b, byte [r8 + rcx]
mov byte [rdx + rax], r10b
add rax, 1
cmp eax, 0x3f
jne 0x140113520
mov dword [0x140375470], 1
pop rax
ret

Function at 0x140113560
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403754a4], 1
je 0x1401135b2
mov r9, rdx
xor ecx, ecx
movabs r10, 0x8888888888888889
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
imul eax, edx, 0xffffffe2
movzx edx, byte [r8 + rcx + 0x1e]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x2d
jne 0x140113580
mov dword [0x1403754a4], 1
pop rax
ret
Function at 0x1401135c0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403754d8], 1
je 0x14011361d
xor eax, eax
mov r9d, 0xf0f0f0f1
nop word cs:[rax + rax]
nop dword [rax]
mov ecx, eax
imul rcx, r9
shr rcx, 0x24
mov r10d, ecx
shl r10d, 4
add r10d, ecx
movzx r11d, byte [r8 + rax + 0x11]
mov ecx, eax
sub ecx, r10d
movsxd rcx, ecx
xor r11b, byte [r8 + rcx]
mov byte [rdx + rax], r11b
add rax, 1
cmp eax, 0x2d
jne 0x1401135e0
mov dword [0x1403754d8], 1
pop rax
ret

Function at 0x140113620
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x14037550c], 1
je 0x140113682
mov r9, rdx
xor ecx, ecx
movabs r10, 0x842108421084211
nop dword [rax]
mov rax, rcx
mul r10
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
mov edx, eax
shl edx, 5
sub eax, edx
movzx edx, byte [r8 + rcx + 0x1f]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x2f
jne 0x140113640
mov dword [0x14037550c], 1
pop rax
ret

Function at 0x140113690
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375520], 1
je 0x1401136f9
mov r9, rdx
mov ecx, 0x1c
xor r10d, r10d
movabs r11, 0x4924924924924925
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
shr rax, 2
mul r11
shr rdx, 1
imul rax, rdx, 0xffffffffffffffe4
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1c], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x2b
jne 0x1401136c0
mov dword [0x140375520], 1
add rsp, 8
pop rsi
ret

Function at 0x140113700
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375530], 1
je 0x140113772
mov r9, rdx
mov ecx, 0x19
xor r10d, r10d
movabs r11, 0x47ae147ae147ae15
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe7
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x19], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x25
jne 0x140113730
mov dword [0x140375530], 1
add rsp, 8
pop rsi
ret

Function at 0x140113780
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375544], 1
je 0x1401137e9
mov r9, rdx
mov ecx, 0x1c
xor r10d, r10d
movabs r11, 0x4924924924924925
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
shr rax, 2
mul r11
shr rdx, 1
imul rax, rdx, 0xffffffffffffffe4
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1c], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x29
jne 0x1401137b0
mov dword [0x140375544], 1
add rsp, 8
pop rsi
ret

Function at 0x1401137f0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375558], 1
je 0x140113862
mov r9, rdx
mov ecx, 0x1d
xor r10d, r10d
movabs r11, 0x1a7b9611a7b9611b
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe3
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1d], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x2c
jne 0x140113820
mov dword [0x140375558], 1
add rsp, 8
pop rsi
ret
Function at 0x140113870
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037556c], 1
je 0x1401138dd
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xe38e38e38e38e38f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
and rdx, 0xfffffffffffffffe
lea rax, [rdx + rdx*8]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x12], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1f
jne 0x1401138a0
mov dword [0x14037556c], 1
add rsp, 8
pop rsi
ret

Function at 0x1401138f0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037557c], 1
je 0x14011395c
mov r9, rdx
mov ecx, 0x18
xor r10d, r10d
movabs r11, 0xaaaaaaaaaaaaaaab
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 1
and rdx, 0xfffffffffffffff8
lea rax, [rdx + rdx*2]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x18], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x21
jne 0x140113920
mov dword [0x14037557c], 1
add rsp, 8
pop rsi
ret

Function at 0x140113970
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375588], 1
je 0x1401139dd
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xe38e38e38e38e38f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
and rdx, 0xfffffffffffffffe
lea rax, [rdx + rdx*8]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x12], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x19
jne 0x1401139a0
mov dword [0x140375588], 1
add rsp, 8
pop rsi
ret

Function at 0x1401139f0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375594], 1
je 0x140113a5d
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0xcccccccccccccccd
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
and rdx, 0xfffffffffffffffc
lea rax, [rdx + rdx*4]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x14], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1a
jne 0x140113a20
mov dword [0x140375594], 1
add rsp, 8
pop rsi
ret

Function at 0x140113a70
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403755a0], 1
je 0x140113ae2
mov r9, rdx
mov ecx, 0x1d
xor r10d, r10d
movabs r11, 0x1a7b9611a7b9611b
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe3
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1d], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x22
jne 0x140113aa0
mov dword [0x1403755a0], 1
add rsp, 8
pop rsi
ret
Function at 0x140113af0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403755b0], 1
je 0x140113b56
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x2e8ba2e8ba2e8ba3
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
imul rax, rdx, 0xffffffffffffffea
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x16], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1f
jne 0x140113b20
mov dword [0x1403755b0], 1
add rsp, 8
pop rsi
ret

Function at 0x140113b60
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403755c0], 1
je 0x140113b90
xor eax, eax
nop dword [rax]
movzx ecx, byte [r8 + rax + 0x10]
xor cl, byte [r8 + rax]
mov byte [rdx + rax], cl
add rax, 1
cmp eax, 0xa
jne 0x140113b70
mov dword [0x1403755c0], 1
pop rax
ret

Function at 0x140113ba0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403755cc], 1
je 0x140113c06
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x2e8ba2e8ba2e8ba3
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
imul rax, rdx, 0xffffffffffffffea
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x16], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1d
jne 0x140113bd0
mov dword [0x1403755cc], 1
add rsp, 8
pop rsi
ret

Function at 0x140113c10
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403755dc], 1
je 0x140113c82
mov r9, rdx
mov ecx, reloc.WS2_32.dll_socket
xor r10d, r10d
movabs r11, 0x642c8590b21642c9
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe9
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x17], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x20
jne 0x140113c40
mov dword [0x1403755dc], 1
add rsp, 8
pop rsi
ret

Function at 0x140113c90
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403755ec], 1
je 0x140113cc0
xor eax, eax
nop dword [rax]
movzx ecx, byte [r8 + rax + 0x10]
xor cl, byte [r8 + rax]
mov byte [rdx + rax], cl
add rax, 1
cmp eax, 0xb
jne 0x140113ca0
mov dword [0x1403755ec], 1
pop rax
ret

Function at 0x140113cd0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403755fc], 1
je 0x140113d42
mov r9, rdx
mov ecx, 0x1d
xor r10d, r10d
movabs r11, 0x1a7b9611a7b9611b
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe3
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1d], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x29
jne 0x140113d00
mov dword [0x1403755fc], 1
add rsp, 8
pop rsi
ret