joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14011b480
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403772b0], 1
je 0x14011b4b0
xor eax, eax
nop dword [rax]
movzx ecx, byte [r8 + rax + 0x10]
xor cl, byte [r8 + rax]
mov byte [rdx + rax], cl
add rax, 1
cmp eax, 2
jne 0x14011b490
mov dword [0x1403772b0], 1
pop rax
ret

Function at 0x14011b4c0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403772b8], 1
je 0x14011b532
mov r9, rdx
mov ecx, reloc.WS2_32.dll_socket
xor r10d, r10d
movabs r11, 0x642c8590b21642c9
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe9
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x17], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x19
jne 0x14011b4f0
mov dword [0x1403772b8], 1
add rsp, 8
pop rsi
ret

Function at 0x14011b540
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403772c0], 1
je 0x14011b5a6
mov r9, rdx
mov ecx, 0x1b
xor r10d, r10d
movabs r11, 0x97b425ed097b425f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe5
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1b], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1d
jne 0x14011b570
mov dword [0x1403772c0], 1
add rsp, 8
pop rsi
ret

Function at 0x14011b5b0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403772c8], 1
je 0x14011b622
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x8618618618618619
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffeb
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x15], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x17
jne 0x14011b5e0
mov dword [0x1403772c8], 1
add rsp, 8
pop rsi
ret

Function at 0x14011b630
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403772d0], 1
je 0x14011b696
mov r9, rdx
mov ecx, 0x1e
xor r10d, r10d
movabs r11, 0x8888888888888889
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe2
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1e], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x21
jne 0x14011b660
mov dword [0x1403772d0], 1
add rsp, 8
pop rsi
ret

Function at 0x14011b6a0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403772d8], 1
je 0x14011b70d
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0xcccccccccccccccd
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
and rdx, 0xfffffffffffffffc
lea rax, [rdx + rdx*4]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x14], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x17
jne 0x14011b6d0
mov dword [0x1403772d8], 1
add rsp, 8
pop rsi
ret
Function at 0x14011b720
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403772e0], 1
je 0x14011b786
mov r9, rdx
mov ecx, reloc.WS2_32.dll_send
xor r10d, r10d
movabs r11, 0xd79435e50d79435f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x13], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x16
jne 0x14011b750
mov dword [0x1403772e0], 1
add rsp, 8
pop rsi
ret

Function at 0x14011b790
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403772e8], 1
je 0x14011b802
mov r9, rdx
mov ecx, reloc.WS2_32.dll_socket
xor r10d, r10d
movabs r11, 0x642c8590b21642c9
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe9
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x17], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1a
jne 0x14011b7c0
mov dword [0x1403772e8], 1
add rsp, 8
pop rsi
ret

Function at 0x14011b810
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403772f0], 1
je 0x14011b876
mov r9, rdx
mov ecx, 0x1e
xor r10d, r10d
movabs r11, 0x8888888888888889
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe2
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1e], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x21
jne 0x14011b840
mov dword [0x1403772f0], 1
add rsp, 8
pop rsi
ret

Function at 0x14011b880
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403772f8], 1
je 0x14011b8e6
mov r9, rdx
mov ecx, 0x1a
xor r10d, r10d
movabs r11, 0x4ec4ec4ec4ec4ec5
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
imul rax, rdx, 0xffffffffffffffe6
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1a], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1d
jne 0x14011b8b0
mov dword [0x1403772f8], 1
add rsp, 8
pop rsi
ret

Function at 0x14011b8f0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377300], 1
je 0x14011b95c
mov r9, rdx
mov ecx, 0x18
xor r10d, r10d
movabs r11, 0xaaaaaaaaaaaaaaab
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 1
and rdx, 0xfffffffffffffff8
lea rax, [rdx + rdx*2]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x18], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1b
jne 0x14011b920
mov dword [0x140377300], 1
add rsp, 8
pop rsi
ret
Function at 0x14011b970
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377308], 1
je 0x14011b9df
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xf0f0f0f0f0f0f0f1
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
mov rax, rdx
shl rax, 4
add rax, rdx
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x11], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x14
jne 0x14011b9a0
mov dword [0x140377308], 1
add rsp, 8
pop rsi
ret

Function at 0x14011b9f0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377310], 1
je 0x14011ba56
mov r9, rdx
mov ecx, 0x1a
xor r10d, r10d
movabs r11, 0x4ec4ec4ec4ec4ec5
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
imul rax, rdx, 0xffffffffffffffe6
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1a], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1d
jne 0x14011ba20
mov dword [0x140377310], 1
add rsp, 8
pop rsi
ret

Function at 0x14011ba60
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377318], 1
je 0x14011bad8
mov r9, rdx
mov ecx, 0x1f
xor r10d, r10d
movabs r11, 0x842108421084211
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
mov rdx, rax
shl rdx, 5
sub rax, rdx
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1f], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x23
jne 0x14011ba90
mov dword [0x140377318], 1
add rsp, 8
pop rsi
ret

Function at 0x14011bae0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377320], 1
je 0x14011bb4d
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0xcccccccccccccccd
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
and rdx, 0xfffffffffffffffc
lea rax, [rdx + rdx*4]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x14], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x18
jne 0x14011bb10
mov dword [0x140377320], 1
add rsp, 8
pop rsi
ret

Function at 0x14011bb60
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377328], 1
je 0x14011bbcd
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xe38e38e38e38e38f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
and rdx, 0xfffffffffffffffe
lea rax, [rdx + rdx*8]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x12], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x16
jne 0x14011bb90
mov dword [0x140377328], 1
add rsp, 8
pop rsi
ret
Function at 0x14011bbe0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377338], 1
je 0x14011bc4f
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xf0f0f0f0f0f0f0f1
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
mov rax, rdx
shl rax, 4
add rax, rdx
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x11], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1c
jne 0x14011bc10
mov dword [0x140377338], 1
add rsp, 8
pop rsi
ret

Function at 0x14011bc60
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377344], 1
je 0x14011bcd8
mov r9, rdx
mov ecx, 0x1f
xor r10d, r10d
movabs r11, 0x842108421084211
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
mov rdx, rax
shl rdx, 5
sub rax, rdx
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1f], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x25
jne 0x14011bc90
mov dword [0x140377344], 1
add rsp, 8
pop rsi
ret

Function at 0x14011bce0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377350], 1
je 0x14011bd46
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x2e8ba2e8ba2e8ba3
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
imul rax, rdx, 0xffffffffffffffea
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x16], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1c
jne 0x14011bd10
mov dword [0x140377350], 1
add rsp, 8
pop rsi
ret

Function at 0x14011bd50
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037735c], 1
je 0x14011bdc2
mov r9, rdx
mov ecx, reloc.WS2_32.dll_socket
xor r10d, r10d
movabs r11, 0x642c8590b21642c9
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe9
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x17], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1e
jne 0x14011bd80
mov dword [0x14037735c], 1
add rsp, 8
pop rsi
ret

Function at 0x14011bdd0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377368], 1
je 0x14011be42
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x8618618618618619
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffeb
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x15], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1b
jne 0x14011be00
mov dword [0x140377368], 1
add rsp, 8
pop rsi
ret
Function at 0x14011be50
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377378], 1
je 0x14011beb6
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x2e8ba2e8ba2e8ba3
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
imul rax, rdx, 0xffffffffffffffea
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x16], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x20
jne 0x14011be80
mov dword [0x140377378], 1
add rsp, 8
pop rsi
ret

Function at 0x14011bec0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377384], 1
je 0x14011bf2f
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xf0f0f0f0f0f0f0f1
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
mov rax, rdx
shl rax, 4
add rax, rdx
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x11], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x17
jne 0x14011bef0
mov dword [0x140377384], 1
add rsp, 8
pop rsi
ret

Function at 0x14011bf40
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140377394], 1
je 0x14011bf70
xor eax, eax
nop dword [rax]
movzx ecx, byte [r8 + rax + 0x10]
xor cl, byte [r8 + rax]
mov byte [rdx + rax], cl
add rax, 1
cmp eax, 0xc
jne 0x14011bf50
mov dword [0x140377394], 1
pop rax
ret

Function at 0x14011bf80
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403773a4], 1
je 0x14011bff2
mov r9, rdx
mov ecx, reloc.WS2_32.dll_socket
xor r10d, r10d
movabs r11, 0x642c8590b21642c9
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe9
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x17], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x21
jne 0x14011bfb0
mov dword [0x1403773a4], 1
add rsp, 8
pop rsi
ret

Function at 0x14011c000
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403773b8], 1
je 0x14011c066
mov r9, rdx
mov ecx, 0x1e
xor r10d, r10d
movabs r11, 0x8888888888888889
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe2
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1e], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x2b
jne 0x14011c030
mov dword [0x1403773b8], 1
add rsp, 8
pop rsi
ret

Function at 0x14011c070
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403773c8], 1
je 0x14011c0e2
mov r9, rdx
mov ecx, 0x1d
xor r10d, r10d
movabs r11, 0x1a7b9611a7b9611b
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe3
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1d], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x29
jne 0x14011c0a0
mov dword [0x1403773c8], 1
add rsp, 8
pop rsi
ret
Function at 0x14011c0f0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403773d8], 1
je 0x14011c156
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x2e8ba2e8ba2e8ba3
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
imul rax, rdx, 0xffffffffffffffea
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x16], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1f
jne 0x14011c120
mov dword [0x1403773d8], 1
add rsp, 8
pop rsi
ret

Function at 0x14011c160
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403773e8], 1
je 0x14011c1cd
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xe38e38e38e38e38f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
and rdx, 0xfffffffffffffffe
lea rax, [rdx + rdx*8]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x12], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1d
jne 0x14011c190
mov dword [0x1403773e8], 1
add rsp, 8
pop rsi
ret

Function at 0x14011c1e0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403773f4], 1
je 0x14011c249
mov r9, rdx
mov ecx, 0x1c
xor r10d, r10d
movabs r11, 0x4924924924924925
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
shr rax, 2
mul r11
shr rdx, 1
imul rax, rdx, 0xffffffffffffffe4
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1c], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x24
jne 0x14011c210
mov dword [0x1403773f4], 1
add rsp, 8
pop rsi
ret

Function at 0x14011c250
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140377404], 1
je 0x14011c280
xor eax, eax
nop dword [rax]
movzx ecx, byte [r8 + rax + 0x10]
xor cl, byte [r8 + rax]
mov byte [rdx + rax], cl
add rax, 1
cmp eax, 0xc
jne 0x14011c260
mov dword [0x140377404], 1
pop rax
ret

Function at 0x14011c290
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377410], 1
je 0x14011c2ff
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xf0f0f0f0f0f0f0f1
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
mov rax, rdx
shl rax, 4
add rax, rdx
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x11], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x17
jne 0x14011c2c0
mov dword [0x140377410], 1
add rsp, 8
pop rsi
ret

Function at 0x14011c310
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037741c], 1
je 0x14011c37d
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0xcccccccccccccccd
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
and rdx, 0xfffffffffffffffc
lea rax, [rdx + rdx*4]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x14], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1c
jne 0x14011c340
mov dword [0x14037741c], 1
add rsp, 8
pop rsi
ret
Function at 0x14011c390
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377428], 1
je 0x14011c3f6
mov r9, rdx
mov ecx, reloc.WS2_32.dll_send
xor r10d, r10d
movabs r11, 0xd79435e50d79435f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x13], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1b
jne 0x14011c3c0
mov dword [0x140377428], 1
add rsp, 8
pop rsi
ret

Function at 0x14011c400
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377434], 1
je 0x14011c466
mov r9, rdx
mov ecx, 0x1b
xor r10d, r10d
movabs r11, 0x97b425ed097b425f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe5
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1b], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x23
jne 0x14011c430
mov dword [0x140377434], 1
add rsp, 8
pop rsi
ret

Function at 0x14011c470
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377440], 1
je 0x14011c4d6
mov r9, rdx
mov ecx, reloc.WS2_32.dll_send
xor r10d, r10d
movabs r11, 0xd79435e50d79435f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x13], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1b
jne 0x14011c4a0
mov dword [0x140377440], 1
add rsp, 8
pop rsi
ret

Function at 0x14011c4e0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037744c], 1
je 0x14011c549
mov r9, rdx
mov ecx, 0x1c
xor r10d, r10d
movabs r11, 0x4924924924924925
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
shr rax, 2
mul r11
shr rdx, 1
imul rax, rdx, 0xffffffffffffffe4
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1c], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x24
jne 0x14011c510
mov dword [0x14037744c], 1
add rsp, 8
pop rsi
ret

Function at 0x14011c550
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377458], 1
je 0x14011c5c2
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x8618618618618619
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffeb
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x15], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1d
jne 0x14011c580
mov dword [0x140377458], 1
add rsp, 8
pop rsi
ret
Function at 0x14011c5d0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377464], 1
je 0x14011c636
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x2e8ba2e8ba2e8ba3
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
imul rax, rdx, 0xffffffffffffffea
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x16], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1e
jne 0x14011c600
mov dword [0x140377464], 1
add rsp, 8
pop rsi
ret

Function at 0x14011c640
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377470], 1
je 0x14011c6a9
mov r9, rdx
mov ecx, 0x1c
xor r10d, r10d
movabs r11, 0x4924924924924925
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
shr rax, 2
mul r11
shr rdx, 1
imul rax, rdx, 0xffffffffffffffe4
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1c], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x24
jne 0x14011c670
mov dword [0x140377470], 1
add rsp, 8
pop rsi
ret

Function at 0x14011c6b0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037747c], 1
je 0x14011c719
mov r9, rdx
mov ecx, 0x1c
xor r10d, r10d
movabs r11, 0x4924924924924925
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
shr rax, 2
mul r11
shr rdx, 1
imul rax, rdx, 0xffffffffffffffe4
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1c], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x24
jne 0x14011c6e0
mov dword [0x14037747c], 1
add rsp, 8
pop rsi
ret

Function at 0x14011c720
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377488], 1
je 0x14011c792
mov r9, rdx
mov ecx, 0x19
xor r10d, r10d
movabs r11, 0x47ae147ae147ae15
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe7
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x19], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x21
jne 0x14011c750
mov dword [0x140377488], 1
add rsp, 8
pop rsi
ret

Function at 0x14011c7a0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037749c], 1
je 0x14011c806
mov r9, rdx
mov ecx, 0x1b
xor r10d, r10d
movabs r11, 0x97b425ed097b425f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe5
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1b], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x29
jne 0x14011c7d0
mov dword [0x14037749c], 1
add rsp, 8
pop rsi
ret

Function at 0x14011c810
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403774b0], 1
je 0x14011c876
mov r9, rdx
mov ecx, 0x1a
xor r10d, r10d
movabs r11, 0x4ec4ec4ec4ec4ec5
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
imul rax, rdx, 0xffffffffffffffe6
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1a], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x27
jne 0x14011c840
mov dword [0x1403774b0], 1
add rsp, 8
pop rsi
ret