joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14011c880
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403774c4], 1
je 0x14011c8f2
mov r9, rdx
mov ecx, reloc.WS2_32.dll_socket
xor r10d, r10d
movabs r11, 0x642c8590b21642c9
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe9
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x17], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x26
jne 0x14011c8b0
mov dword [0x1403774c4], 1
add rsp, 8
pop rsi
ret

Function at 0x14011c900
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403774d8], 1
je 0x14011c972
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x8618618618618619
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffeb
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x15], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x24
jne 0x14011c930
mov dword [0x1403774d8], 1
add rsp, 8
pop rsi
ret

Function at 0x14011c980
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403774e8], 1
je 0x14011c9e6
mov r9, rdx
mov ecx, 0x1b
xor r10d, r10d
movabs r11, 0x97b425ed097b425f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe5
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1b], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x25
jne 0x14011c9b0
mov dword [0x1403774e8], 1
add rsp, 8
pop rsi
ret

Function at 0x14011c9f0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403774f8], 1
je 0x14011ca56
mov r9, rdx
mov ecx, 0x1e
xor r10d, r10d
movabs r11, 0x8888888888888889
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe2
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1e], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x2a
jne 0x14011ca20
mov dword [0x1403774f8], 1
add rsp, 8
pop rsi
ret

Function at 0x14011ca60
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377508], 1
je 0x14011cad2
mov r9, rdx
mov ecx, 0x1d
xor r10d, r10d
movabs r11, 0x1a7b9611a7b9611b
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe3
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1d], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x29
jne 0x14011ca90
mov dword [0x140377508], 1
add rsp, 8
pop rsi
ret
Function at 0x14011cae0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037751c], 1
je 0x14011cb52
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x8618618618618619
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffeb
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x15], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x22
jne 0x14011cb10
mov dword [0x14037751c], 1
add rsp, 8
pop rsi
ret

Function at 0x14011cb60
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x14037752c], 1
je 0x14011cb90
xor eax, eax
nop dword [rax]
movzx ecx, byte [r8 + rax + 0x10]
xor cl, byte [r8 + rax]
mov byte [rdx + rax], cl
add rax, 1
cmp eax, 0xc
jne 0x14011cb70
mov dword [0x14037752c], 1
pop rax
ret

Function at 0x14011cba0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377540], 1
je 0x14011cc12
mov r9, rdx
mov ecx, 0x19
xor r10d, r10d
movabs r11, 0x47ae147ae147ae15
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe7
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x19], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x27
jne 0x14011cbd0
mov dword [0x140377540], 1
add rsp, 8
pop rsi
ret

Function at 0x14011cc20
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377554], 1
je 0x14011cc98
mov r9, rdx
mov ecx, 0x1f
xor r10d, r10d
movabs r11, 0x842108421084211
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
mov rdx, rax
shl rdx, 5
sub rax, rdx
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1f], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x2f
jne 0x14011cc50
mov dword [0x140377554], 1
add rsp, 8
pop rsi
ret

Function at 0x14011cca0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377568], 1
je 0x14011cd0d
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0xcccccccccccccccd
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
and rdx, 0xfffffffffffffffc
lea rax, [rdx + rdx*4]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x14], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x24
jne 0x14011ccd0
mov dword [0x140377568], 1
add rsp, 8
pop rsi
ret

Function at 0x14011cd20
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377580], 1
je 0x14011cd92
mov r9, rdx
mov ecx, 0x1d
xor r10d, r10d
movabs r11, 0x1a7b9611a7b9611b
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe3
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1d], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x2e
jne 0x14011cd50
mov dword [0x140377580], 1
add rsp, 8
pop rsi
ret
Function at 0x14011cda0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377594], 1
je 0x14011ce0c
mov r9, rdx
mov ecx, 0x18
xor r10d, r10d
movabs r11, 0xaaaaaaaaaaaaaaab
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 1
and rdx, 0xfffffffffffffff8
lea rax, [rdx + rdx*2]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x18], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x26
jne 0x14011cdd0
mov dword [0x140377594], 1
add rsp, 8
pop rsi
ret

Function at 0x14011ce20
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403775a8], 1
je 0x14011ce8d
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0xcccccccccccccccd
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
and rdx, 0xfffffffffffffffc
lea rax, [rdx + rdx*4]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x14], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x24
jne 0x14011ce50
mov dword [0x1403775a8], 1
add rsp, 8
pop rsi
ret

Function at 0x14011cea0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403775bc], 1
je 0x14011cf0f
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xf0f0f0f0f0f0f0f1
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
mov rax, rdx
shl rax, 4
add rax, rdx
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x11], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x21
jne 0x14011ced0
mov dword [0x1403775bc], 1
add rsp, 8
pop rsi
ret

Function at 0x14011cf20
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403775d4], 1
je 0x14011cf92
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x8618618618618619
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffeb
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x15], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x26
jne 0x14011cf50
mov dword [0x1403775d4], 1
add rsp, 8
pop rsi
ret

Function at 0x14011cfa0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403775e4], 1
je 0x14011d006
mov r9, rdx
mov ecx, 0x1a
xor r10d, r10d
movabs r11, 0x4ec4ec4ec4ec4ec5
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
imul rax, rdx, 0xffffffffffffffe6
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1a], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x24
jne 0x14011cfd0
mov dword [0x1403775e4], 1
add rsp, 8
pop rsi
ret
Function at 0x14011d010
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403775f4], 1
je 0x14011d07c
mov r9, rdx
mov ecx, 0x18
xor r10d, r10d
movabs r11, 0xaaaaaaaaaaaaaaab
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 1
and rdx, 0xfffffffffffffff8
lea rax, [rdx + rdx*2]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x18], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x22
jne 0x14011d040
mov dword [0x1403775f4], 1
add rsp, 8
pop rsi
ret

Function at 0x14011d090
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377604], 1
je 0x14011d102
mov r9, rdx
mov ecx, 0x19
xor r10d, r10d
movabs r11, 0x47ae147ae147ae15
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe7
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x19], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x23
jne 0x14011d0c0
mov dword [0x140377604], 1
add rsp, 8
pop rsi
ret

Function at 0x14011d110
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377614], 1
je 0x14011d17c
mov r9, rdx
mov ecx, 0x18
xor r10d, r10d
movabs r11, 0xaaaaaaaaaaaaaaab
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 1
and rdx, 0xfffffffffffffff8
lea rax, [rdx + rdx*2]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x18], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x22
jne 0x14011d140
mov dword [0x140377614], 1
add rsp, 8
pop rsi
ret

Function at 0x14011d190
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377624], 1
je 0x14011d1f6
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x2e8ba2e8ba2e8ba3
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
imul rax, rdx, 0xffffffffffffffea
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x16], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x20
jne 0x14011d1c0
mov dword [0x140377624], 1
add rsp, 8
pop rsi
ret

Function at 0x14011d200
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377634], 1
je 0x14011d266
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x2e8ba2e8ba2e8ba3
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
imul rax, rdx, 0xffffffffffffffea
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x16], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x20
jne 0x14011d230
mov dword [0x140377634], 1
add rsp, 8
pop rsi
ret
Function at 0x14011d270
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377648], 1
je 0x14011d2d6
mov r9, rdx
mov ecx, 0x1a
xor r10d, r10d
movabs r11, 0x4ec4ec4ec4ec4ec5
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
imul rax, rdx, 0xffffffffffffffe6
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1a], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x2a
jne 0x14011d2a0
mov dword [0x140377648], 1
add rsp, 8
pop rsi
ret

Function at 0x14011d2e0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377660], 1
je 0x14011d349
mov r9, rdx
mov ecx, 0x1c
xor r10d, r10d
movabs r11, 0x4924924924924925
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
shr rax, 2
mul r11
shr rdx, 1
imul rax, rdx, 0xffffffffffffffe4
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1c], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x2e
jne 0x14011d310
mov dword [0x140377660], 1
add rsp, 8
pop rsi
ret

Function at 0x14011d350
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377678], 1
je 0x14011d3c2
mov r9, rdx
mov ecx, 0x1d
xor r10d, r10d
movabs r11, 0x1a7b9611a7b9611b
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe3
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1d], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x2f
jne 0x14011d380
mov dword [0x140377678], 1
add rsp, 8
pop rsi
ret

Function at 0x14011d3d0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377690], 1
je 0x14011d439
mov r9, rdx
mov ecx, 0x1c
xor r10d, r10d
movabs r11, 0x4924924924924925
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
shr rax, 2
mul r11
shr rdx, 1
imul rax, rdx, 0xffffffffffffffe4
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1c], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x2f
jne 0x14011d400
mov dword [0x140377690], 1
add rsp, 8
pop rsi
ret

Function at 0x14011d440
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403776a4], 1
je 0x14011d4b8
mov r9, rdx
mov ecx, 0x1f
xor r10d, r10d
movabs r11, 0x842108421084211
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
mov rdx, rax
shl rdx, 5
sub rax, rdx
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1f], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x2f
jne 0x14011d470
mov dword [0x1403776a4], 1
add rsp, 8
pop rsi
ret
Function at 0x14011d4c0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403776bc], 1
je 0x14011d538
mov r9, rdx
mov ecx, 0x1f
xor r10d, r10d
movabs r11, 0x842108421084211
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
mov rdx, rax
shl rdx, 5
sub rax, rdx
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1f], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x31
jne 0x14011d4f0
mov dword [0x1403776bc], 1
add rsp, 8
pop rsi
ret

Function at 0x14011d540
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403776d4], 1
je 0x14011d599
mov r9, rdx
xor ecx, ecx
movabs r10, 0xf0f0f0f0f0f0f0f1
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
mov eax, edx
shl eax, 4
add eax, edx
movzx r11d, byte [r8 + rcx + 0x11]
mov edx, ecx
sub edx, eax
movsxd rax, edx
xor r11b, byte [r8 + rax]
mov byte [r9 + rcx], r11b
add rcx, 1
cmp ecx, 0x12
jne 0x14011d560
mov dword [0x1403776d4], 1
pop rax
ret

Function at 0x14011d5a0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403776ec], 1
je 0x14011d606
mov r9, rdx
mov ecx, 0x1e
xor r10d, r10d
movabs r11, 0x8888888888888889
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe2
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1e], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x31
jne 0x14011d5d0
mov dword [0x1403776ec], 1
add rsp, 8
pop rsi
ret

Function at 0x14011d610
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403776f8], 1
je 0x14011d676
mov r9, rdx
mov ecx, reloc.WS2_32.dll_send
xor r10d, r10d
movabs r11, 0xd79435e50d79435f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x13], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1b
jne 0x14011d640
mov dword [0x1403776f8], 1
add rsp, 8
pop rsi
ret

Function at 0x14011d680
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377708], 1
je 0x14011d6e6
mov r9, rdx
mov ecx, reloc.WS2_32.dll_send
xor r10d, r10d
movabs r11, 0xd79435e50d79435f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x13], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1c
jne 0x14011d6b0
mov dword [0x140377708], 1
add rsp, 8
pop rsi
ret

Function at 0x14011d6f0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377714], 1
je 0x14011d75d
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0xcccccccccccccccd
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
and rdx, 0xfffffffffffffffc
lea rax, [rdx + rdx*4]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x14], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1b
jne 0x14011d720
mov dword [0x140377714], 1
add rsp, 8
pop rsi
ret
Function at 0x14011d770
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377724], 1
je 0x14011d7d6
mov r9, rdx
mov ecx, 0x1e
xor r10d, r10d
movabs r11, 0x8888888888888889
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe2
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1e], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x27
jne 0x14011d7a0
mov dword [0x140377724], 1
add rsp, 8
pop rsi
ret

Function at 0x14011d7e0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037773c], 1
je 0x14011d846
mov r9, rdx
mov ecx, 0x1a
xor r10d, r10d
movabs r11, 0x4ec4ec4ec4ec4ec5
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
imul rax, rdx, 0xffffffffffffffe6
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1a], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x2e
jne 0x14011d810
mov dword [0x14037773c], 1
add rsp, 8
pop rsi
ret

Function at 0x14011d850
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377748], 1
je 0x14011d8c2
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x8618618618618619
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffeb
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x15], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1d
jne 0x14011d880
mov dword [0x140377748], 1
add rsp, 8
pop rsi
ret

Function at 0x14011d8d0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037775c], 1
je 0x14011d93f
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xf0f0f0f0f0f0f0f1
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
mov rax, rdx
shl rax, 4
add rax, rdx
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x11], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1f
jne 0x14011d900
mov dword [0x14037775c], 1
add rsp, 8
pop rsi
ret

Function at 0x14011d950
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377770], 1
je 0x14011d9c8
mov r9, rdx
mov ecx, 0x1f
xor r10d, r10d
movabs r11, 0x842108421084211
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
mov rdx, rax
shl rdx, 5
sub rax, rdx
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1f], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x2f
jne 0x14011d980
mov dword [0x140377770], 1
add rsp, 8
pop rsi
ret
Function at 0x14011d9d0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377780], 1
je 0x14011da3d
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xe38e38e38e38e38f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
and rdx, 0xfffffffffffffffe
lea rax, [rdx + rdx*8]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x12], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1d
jne 0x14011da00
mov dword [0x140377780], 1
add rsp, 8
pop rsi
ret

Function at 0x14011da50
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377790], 1
je 0x14011dabd
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xe38e38e38e38e38f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
and rdx, 0xfffffffffffffffe
lea rax, [rdx + rdx*8]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x12], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1c
jne 0x14011da80
mov dword [0x140377790], 1
add rsp, 8
pop rsi
ret

Function at 0x14011dad0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403777a0], 1
je 0x14011db42
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x8618618618618619
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffeb
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x15], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x20
jne 0x14011db00
mov dword [0x1403777a0], 1
add rsp, 8
pop rsi
ret

Function at 0x14011db50
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403777b4], 1
je 0x14011dbb6
mov r9, rdx
mov ecx, 0x1b
xor r10d, r10d
movabs r11, 0x97b425ed097b425f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe5
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1b], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x28
jne 0x14011db80
mov dword [0x1403777b4], 1
add rsp, 8
pop rsi
ret

Function at 0x14011dbc0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403777c4], 1
je 0x14011dc26
mov r9, rdx
mov ecx, 0x1a
xor r10d, r10d
movabs r11, 0x4ec4ec4ec4ec4ec5
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
imul rax, rdx, 0xffffffffffffffe6
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1a], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x24
jne 0x14011dbf0
mov dword [0x1403777c4], 1
add rsp, 8
pop rsi
ret