joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140113d50
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037560c], 1
je 0x140113dc2
mov r9, rdx
mov ecx, reloc.WS2_32.dll_socket
xor r10d, r10d
movabs r11, 0x642c8590b21642c9
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe9
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x17], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x20
jne 0x140113d80
mov dword [0x14037560c], 1
add rsp, 8
pop rsi
ret

Function at 0x140113dd0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x14037561c], 1
je 0x140113e00
xor eax, eax
nop dword [rax]
movzx ecx, byte [r8 + rax + 0x10]
xor cl, byte [r8 + rax]
mov byte [rdx + rax], cl
add rax, 1
cmp eax, 0xb
jne 0x140113de0
mov dword [0x14037561c], 1
pop rax
ret

Function at 0x140113e10
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037562c], 1
je 0x140113e7c
mov r9, rdx
mov ecx, 0x18
xor r10d, r10d
movabs r11, 0xaaaaaaaaaaaaaaab
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 1
and rdx, 0xfffffffffffffff8
lea rax, [rdx + rdx*2]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x18], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x22
jne 0x140113e40
mov dword [0x14037562c], 1
add rsp, 8
pop rsi
ret

Function at 0x140113e90
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x14037563c], 1
je 0x140113ec0
xor eax, eax
nop dword [rax]
movzx ecx, byte [r8 + rax + 0x10]
xor cl, byte [r8 + rax]
mov byte [rdx + rax], cl
add rax, 1
cmp eax, 0xa
jne 0x140113ea0
mov dword [0x14037563c], 1
pop rax
ret

Function at 0x140113ed0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037564c], 1
je 0x140113f36
mov r9, rdx
mov ecx, 0x1e
xor r10d, r10d
movabs r11, 0x8888888888888889
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe2
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1e], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x28
jne 0x140113f00
mov dword [0x14037564c], 1
add rsp, 8
pop rsi
ret

Function at 0x140113f40
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x14037565c], 1
je 0x140113f70
xor eax, eax
nop dword [rax]
movzx ecx, byte [r8 + rax + 0x10]
xor cl, byte [r8 + rax]
mov byte [rdx + rax], cl
add rax, 1
cmp eax, 0xa
jne 0x140113f50
mov dword [0x14037565c], 1
pop rax
ret

Function at 0x140113f80
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375668], 1
je 0x140113ff8
mov r9, rdx
mov ecx, 0x1f
xor r10d, r10d
movabs r11, 0x842108421084211
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
mov rdx, rax
shl rdx, 5
sub rax, rdx
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1f], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x27
jne 0x140113fb0
mov dword [0x140375668], 1
add rsp, 8
pop rsi
ret
Function at 0x140114000
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375678], 1
je 0x140114066
mov r9, rdx
mov ecx, reloc.WS2_32.dll_send
xor r10d, r10d
movabs r11, 0xd79435e50d79435f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x13], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1c
jne 0x140114030
mov dword [0x140375678], 1
add rsp, 8
pop rsi
ret

Function at 0x140114070
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375684], 1
je 0x1401140dd
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xe38e38e38e38e38f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
and rdx, 0xfffffffffffffffe
lea rax, [rdx + rdx*8]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x12], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x18
jne 0x1401140a0
mov dword [0x140375684], 1
add rsp, 8
pop rsi
ret

Function at 0x1401140f0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375690], 1
je 0x140114156
mov r9, rdx
mov ecx, 0x1b
xor r10d, r10d
movabs r11, 0x97b425ed097b425f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe5
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1b], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x23
jne 0x140114120
mov dword [0x140375690], 1
add rsp, 8
pop rsi
ret

Function at 0x140114160
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403756a4], 1
je 0x140114190
xor eax, eax
nop dword [rax]
movzx ecx, byte [r8 + rax + 0x10]
xor cl, byte [r8 + rax]
mov byte [rdx + rax], cl
add rax, 1
cmp eax, 0xe
jne 0x140114170
mov dword [0x1403756a4], 1
pop rax
ret

Function at 0x1401141a0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403756ac], 1
je 0x14011420d
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xe38e38e38e38e38f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
and rdx, 0xfffffffffffffffe
lea rax, [rdx + rdx*8]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x12], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x15
jne 0x1401141d0
mov dword [0x1403756ac], 1
add rsp, 8
pop rsi
ret

Function at 0x140114220
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403756b8], 1
je 0x14011428d
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0xcccccccccccccccd
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
and rdx, 0xfffffffffffffffc
lea rax, [rdx + rdx*4]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x14], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1c
jne 0x140114250
mov dword [0x1403756b8], 1
add rsp, 8
pop rsi
ret
Function at 0x1401142a0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403756c0], 1
je 0x140114306
mov r9, rdx
mov ecx, reloc.WS2_32.dll_send
xor r10d, r10d
movabs r11, 0xd79435e50d79435f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x13], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x16
jne 0x1401142d0
mov dword [0x1403756c0], 1
add rsp, 8
pop rsi
ret

Function at 0x140114310
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403756d0], 1
je 0x140114376
mov r9, rdx
mov ecx, 0x1e
xor r10d, r10d
movabs r11, 0x8888888888888889
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe2
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1e], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x29
jne 0x140114340
mov dword [0x1403756d0], 1
add rsp, 8
pop rsi
ret

Function at 0x140114380
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403756e0], 1
je 0x1401143f2
mov r9, rdx
mov ecx, 0x1d
xor r10d, r10d
movabs r11, 0x1a7b9611a7b9611b
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe3
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1d], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x28
jne 0x1401143b0
mov dword [0x1403756e0], 1
add rsp, 8
pop rsi
ret

Function at 0x140114400
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403756f0], 1
je 0x140114472
mov r9, rdx
mov ecx, 0x19
xor r10d, r10d
movabs r11, 0x47ae147ae147ae15
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe7
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x19], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x25
jne 0x140114430
mov dword [0x1403756f0], 1
add rsp, 8
pop rsi
ret

Function at 0x140114480
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375708], 1
je 0x1401144f2
mov r9, rdx
mov ecx, reloc.WS2_32.dll_socket
xor r10d, r10d
movabs r11, 0x642c8590b21642c9
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe9
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x17], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x28
jne 0x1401144b0
mov dword [0x140375708], 1
add rsp, 8
pop rsi
ret

Function at 0x140114500
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x14037571c], 1
je 0x140114530
xor eax, eax
nop dword [rax]
movzx ecx, byte [r8 + rax + 0x10]
xor cl, byte [r8 + rax]
mov byte [rdx + rax], cl
add rax, 1
cmp eax, 0xe
jne 0x140114510
mov dword [0x14037571c], 1
pop rax
ret
Function at 0x140114540
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375724], 1
je 0x1401145b2
mov r9, rdx
mov ecx, reloc.WS2_32.dll_socket
xor r10d, r10d
movabs r11, 0x642c8590b21642c9
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe9
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x17], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1b
jne 0x140114570
mov dword [0x140375724], 1
add rsp, 8
pop rsi
ret

Function at 0x1401145c0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037572c], 1
je 0x140114626
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x2e8ba2e8ba2e8ba3
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
imul rax, rdx, 0xffffffffffffffea
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x16], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x19
jne 0x1401145f0
mov dword [0x14037572c], 1
add rsp, 8
pop rsi
ret

Function at 0x140114630
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375734], 1
je 0x140114696
mov r9, rdx
mov ecx, 0x1a
xor r10d, r10d
movabs r11, 0x4ec4ec4ec4ec4ec5
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
imul rax, rdx, 0xffffffffffffffe6
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1a], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1d
jne 0x140114660
mov dword [0x140375734], 1
add rsp, 8
pop rsi
ret

Function at 0x1401146a0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140375754], 1
je 0x1401146f2
mov r9, rdx
xor ecx, ecx
movabs r10, 0x97b425ed097b425f
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
imul eax, edx, 0xffffffe5
movzx edx, byte [r8 + rcx + 0x1b]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x1c
jne 0x1401146c0
mov dword [0x140375754], 1
pop rax
ret

Function at 0x140114700
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375768], 1
je 0x140114766
mov r9, rdx
mov ecx, 0x1b
xor r10d, r10d
movabs r11, 0x97b425ed097b425f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe5
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1b], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x29
jne 0x140114730
mov dword [0x140375768], 1
add rsp, 8
pop rsi
ret

Function at 0x140114770
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x14037579c], 1
je 0x1401147d1
xor eax, eax
mov r9d, 0xaf286bcb
nop word cs:[rax + rax]
nop dword [rax]
mov r10d, eax
imul r10, r9
shr r10, 0x20
mov ecx, eax
sub ecx, r10d
shr ecx, 1
add ecx, r10d
shr ecx, 4
imul ecx, ecx, 0xffffffed
movzx r10d, byte [r8 + rax + 0x13]
add ecx, eax
movsxd rcx, ecx
xor r10b, byte [r8 + rcx]
mov byte [rdx + rax], r10b
add rax, 1
cmp eax, 0x2d
jne 0x140114790
mov dword [0x14037579c], 1
pop rax
ret
Function at 0x1401147e0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403757c8], 1
je 0x14011483e
mov r9, rdx
xor ecx, ecx
movabs r10, 0x8618618618618619
nop dword [rax]
mov rax, rcx
mul r10
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul eax, eax, 0xffffffeb
movzx edx, byte [r8 + rcx + 0x15]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x27
jne 0x140114800
mov dword [0x1403757c8], 1
pop rax
ret

Function at 0x140114840
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403757f8], 1
je 0x1401148a1
xor eax, eax
mov r9d, 0xaf286bcb
nop word cs:[rax + rax]
nop dword [rax]
mov r10d, eax
imul r10, r9
shr r10, 0x20
mov ecx, eax
sub ecx, r10d
shr ecx, 1
add ecx, r10d
shr ecx, 4
imul ecx, ecx, 0xffffffed
movzx r10d, byte [r8 + rax + 0x13]
add ecx, eax
movsxd rcx, ecx
xor r10b, byte [r8 + rcx]
mov byte [rdx + rax], r10b
add rax, 1
cmp eax, 0x2a
jne 0x140114860
mov dword [0x1403757f8], 1
pop rax
ret

Function at 0x1401148b0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375808], 1
je 0x140114922
mov r9, rdx
mov ecx, 0x1d
xor r10d, r10d
movabs r11, 0x1a7b9611a7b9611b
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe3
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1d], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x27
jne 0x1401148e0
mov dword [0x140375808], 1
add rsp, 8
pop rsi
ret

Function at 0x140114930
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375820], 1
je 0x14011499d
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xe38e38e38e38e38f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
and rdx, 0xfffffffffffffffe
lea rax, [rdx + rdx*8]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x12], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x23
jne 0x140114960
mov dword [0x140375820], 1
add rsp, 8
pop rsi
ret

Function at 0x1401149b0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375830], 1
je 0x140114a16
mov r9, rdx
mov ecx, 0x1b
xor r10d, r10d
movabs r11, 0x97b425ed097b425f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe5
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1b], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x25
jne 0x1401149e0
mov dword [0x140375830], 1
add rsp, 8
pop rsi
ret
Function at 0x140114a20
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375844], 1
je 0x140114a92
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x8618618618618619
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffeb
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x15], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x23
jne 0x140114a50
mov dword [0x140375844], 1
add rsp, 8
pop rsi
ret

Function at 0x140114aa0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375854], 1
je 0x140114b12
mov r9, rdx
mov ecx, 0x1d
xor r10d, r10d
movabs r11, 0x1a7b9611a7b9611b
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe3
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1d], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x26
jne 0x140114ad0
mov dword [0x140375854], 1
add rsp, 8
pop rsi
ret

Function at 0x140114b20
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375860], 1
je 0x140114b86
mov r9, rdx
mov ecx, reloc.WS2_32.dll_send
xor r10d, r10d
movabs r11, 0xd79435e50d79435f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x13], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1b
jne 0x140114b50
mov dword [0x140375860], 1
add rsp, 8
pop rsi
ret

Function at 0x140114b90
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375874], 1
je 0x140114c02
mov r9, rdx
mov ecx, reloc.WS2_32.dll_socket
xor r10d, r10d
movabs r11, 0x642c8590b21642c9
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe9
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x17], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x24
jne 0x140114bc0
mov dword [0x140375874], 1
add rsp, 8
pop rsi
ret

Function at 0x140114c10
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037588c], 1
je 0x140114c7d
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xe38e38e38e38e38f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
and rdx, 0xfffffffffffffffe
lea rax, [rdx + rdx*8]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x12], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x24
jne 0x140114c40
mov dword [0x14037588c], 1
add rsp, 8
pop rsi
ret

Function at 0x140114c90
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403758a0], 1
je 0x140114cc0
xor eax, eax
nop dword [rax]
movzx ecx, byte [r8 + rax + 0x10]
xor cl, byte [r8 + rax]
mov byte [rdx + rax], cl
add rax, 1
cmp eax, 0xd
jne 0x140114ca0
mov dword [0x1403758a0], 1
pop rax
ret
Function at 0x140114cd0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403758b8], 1
je 0x140114d29
mov r9, rdx
xor ecx, ecx
movabs r10, 0xf0f0f0f0f0f0f0f1
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
mov eax, edx
shl eax, 4
add eax, edx
movzx r11d, byte [r8 + rcx + 0x11]
mov edx, ecx
sub edx, eax
movsxd rax, edx
xor r11b, byte [r8 + rax]
mov byte [r9 + rcx], r11b
add rcx, 1
cmp ecx, 0x13
jne 0x140114cf0
mov dword [0x1403758b8], 1
pop rax
ret

Function at 0x140114d30
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403758c8], 1
je 0x140114d96
mov r9, rdx
mov ecx, 0x1b
xor r10d, r10d
movabs r11, 0x97b425ed097b425f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe5
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1b], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x27
jne 0x140114d60
mov dword [0x1403758c8], 1
add rsp, 8
pop rsi
ret

Function at 0x140114da0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403758dc], 1
je 0x140114e0c
mov r9, rdx
mov ecx, 0x18
xor r10d, r10d
movabs r11, 0xaaaaaaaaaaaaaaab
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 1
and rdx, 0xfffffffffffffff8
lea rax, [rdx + rdx*2]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x18], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x28
jne 0x140114dd0
mov dword [0x1403758dc], 1
add rsp, 8
pop rsi
ret

Function at 0x140114e20
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403758f0], 1
je 0x140114e92
mov r9, rdx
mov ecx, 0x19
xor r10d, r10d
movabs r11, 0x47ae147ae147ae15
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe7
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x19], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x29
jne 0x140114e50
mov dword [0x1403758f0], 1
add rsp, 8
pop rsi
ret

Function at 0x140114ea0
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
push rax
cmp dword [0x140375910], 1
je 0x140114ef9
mov r9, rdx
xor ecx, ecx
movabs r10, 0xcccccccccccccccd
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
shl edx, 2
lea r11d, [rdx + rdx*4]
movzx edx, byte [r8 + rcx + 0x14]
mov eax, ecx
sub eax, r11d
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x1a
jne 0x140114ec0
mov dword [0x140375910], 1
pop rax
ret

Function at 0x140114f00
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140375930], 1
je 0x140114f59
mov r9, rdx
xor ecx, ecx
movabs r10, 0xf0f0f0f0f0f0f0f1
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
mov eax, edx
shl eax, 4
add eax, edx
movzx r11d, byte [r8 + rcx + 0x11]
mov edx, ecx
sub edx, eax
movsxd rax, edx
xor r11b, byte [r8 + rax]
mov byte [r9 + rcx], r11b
add rcx, 1
cmp ecx, 0x1b
jne 0x140114f20
mov dword [0x140375930], 1
pop rax
ret
Function at 0x140114f60
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037594c], 1
je 0x140114fc6
mov r9, rdx
mov ecx, 0x1b
xor r10d, r10d
movabs r11, 0x97b425ed097b425f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe5
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1b], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x30
jne 0x140114f90
mov dword [0x14037594c], 1
add rsp, 8
pop rsi
ret

Function at 0x140114fd0
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
push rax
cmp dword [0x140375968], 1
je 0x140115029
mov r9, rdx
xor ecx, ecx
movabs r10, 0xcccccccccccccccd
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
shl edx, 2
lea r11d, [rdx + rdx*4]
movzx edx, byte [r8 + rcx + 0x14]
mov eax, ecx
sub eax, r11d
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x17
jne 0x140114ff0
mov dword [0x140375968], 1
pop rax
ret

Function at 0x140115030
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375974], 1
je 0x14011509f
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xf0f0f0f0f0f0f0f1
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
mov rax, rdx
shl rax, 4
add rax, rdx
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x11], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x17
jne 0x140115060
mov dword [0x140375974], 1
add rsp, 8
pop rsi
ret

Function at 0x1401150b0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375988], 1
je 0x14011511d
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xe38e38e38e38e38f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
and rdx, 0xfffffffffffffffe
lea rax, [rdx + rdx*8]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x12], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x22
jne 0x1401150e0
mov dword [0x140375988], 1
add rsp, 8
pop rsi
ret

Function at 0x140115130
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403759cc], 1
je 0x14011517c
xor eax, eax
nop dword [rax]
mov ecx, eax
imul rcx, rcx, 0x38e38e39
shr rcx, 0x22
add ecx, ecx
lea r9d, [rcx + rcx*8]
movzx r10d, byte [r8 + rax + 0x12]
mov ecx, eax
sub ecx, r9d
movsxd rcx, ecx
xor r10b, byte [r8 + rcx]
mov byte [rdx + rax], r10b
add rax, 1
cmp eax, 0x3f
jne 0x140115140
mov dword [0x1403759cc], 1
pop rax
ret

Function at 0x140115180
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403759ec], 1
je 0x1401151d9
mov r9, rdx
xor ecx, ecx
movabs r10, 0xf0f0f0f0f0f0f0f1
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
mov eax, edx
shl eax, 4
add eax, edx
movzx r11d, byte [r8 + rcx + 0x11]
mov edx, ecx
sub edx, eax
movsxd rax, edx
xor r11b, byte [r8 + rax]
mov byte [r9 + rcx], r11b
add rcx, 1
cmp ecx, 0x19
jne 0x1401151a0
mov dword [0x1403759ec], 1
pop rax
ret