joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140117890
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140376540], 1
je 0x1401178e2
mov r9, rdx
xor ecx, ecx
movabs r10, 0x2e8ba2e8ba2e8ba3
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 2
imul eax, edx, 0xffffffea
movzx edx, byte [r8 + rcx + 0x16]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x2c
jne 0x1401178b0
mov dword [0x140376540], 1
pop rax
ret

Function at 0x1401178f0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037654c], 1
je 0x140117962
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x8618618618618619
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffeb
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x15], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1a
jne 0x140117920
mov dword [0x14037654c], 1
add rsp, 8
pop rsi
ret

Function at 0x140117970
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037655c], 1
je 0x1401179dd
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xe38e38e38e38e38f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
and rdx, 0xfffffffffffffffe
lea rax, [rdx + rdx*8]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x12], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1d
jne 0x1401179a0
mov dword [0x14037655c], 1
add rsp, 8
pop rsi
ret

Function at 0x1401179f0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403766ec], 1
je 0x140117a3e
xor eax, eax
nop dword [rax]
mov ecx, eax
imul rcx, rcx, 0x38e38e39
shr rcx, 0x22
add ecx, ecx
lea r9d, [rcx + rcx*8]
movzx r10d, byte [r8 + rax + 0x12]
mov ecx, eax
sub ecx, r9d
movsxd rcx, ecx
xor r10b, byte [r8 + rcx]
mov byte [rdx + rax], r10b
add rax, 1
cmp eax, 0x18c
jne 0x140117a00
mov dword [0x1403766ec], 1
pop rax
ret

Function at 0x140117a40
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140376714], 1
je 0x140117a92
mov r9, rdx
xor ecx, ecx
movabs r10, 0xd79435e50d79435f
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
imul eax, edx, 0xffffffed
movzx edx, byte [r8 + rcx + 0x13]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x24
jne 0x140117a60
mov dword [0x140376714], 1
pop rax
ret

Function at 0x140117aa0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x14037673c], 1
je 0x140117ad6
xor ecx, ecx
nop dword [rax]
movzx r9d, byte [r8 + rcx + 0x10]
mov eax, ecx
and eax, 0xf
xor r9b, byte [r8 + rax]
mov byte [rdx + rcx], r9b
add rcx, 1
cmp ecx, 0x22
jne 0x140117ab0
mov dword [0x14037673c], 1
pop rax
ret
Function at 0x140117ae0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140376764], 1
je 0x140117b32
mov r9, rdx
xor ecx, ecx
movabs r10, 0x2e8ba2e8ba2e8ba3
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 2
imul eax, edx, 0xffffffea
movzx edx, byte [r8 + rcx + 0x16]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x22
jne 0x140117b00
mov dword [0x140376764], 1
pop rax
ret

Function at 0x140117b40
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x14037678c], 1
je 0x140117b9d
xor eax, eax
mov r9d, 0xf0f0f0f1
nop word cs:[rax + rax]
nop dword [rax]
mov ecx, eax
imul rcx, r9
shr rcx, 0x24
mov r10d, ecx
shl r10d, 4
add r10d, ecx
movzx r11d, byte [r8 + rax + 0x11]
mov ecx, eax
sub ecx, r10d
movsxd rcx, ecx
xor r11b, byte [r8 + rcx]
mov byte [rdx + rax], r11b
add rax, 1
cmp eax, 0x24
jne 0x140117b60
mov dword [0x14037678c], 1
pop rax
ret

Function at 0x140117ba0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403767dc], 1
je 0x140117be6
xor eax, eax
nop dword [rax]
mov ecx, eax
imul rcx, rcx, 0x4ec4ec4f
shr rcx, 0x23
imul ecx, ecx, 0xffffffe6
movzx r9d, byte [r8 + rax + 0x1a]
add ecx, eax
movsxd rcx, ecx
xor r9b, byte [r8 + rcx]
mov byte [rdx + rax], r9b
add rax, 1
cmp eax, 0x49
jne 0x140117bb0
mov dword [0x1403767dc], 1
pop rax
ret

Function at 0x140117bf0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403767ec], 1
je 0x140117c59
mov r9, rdx
mov ecx, 0x1c
xor r10d, r10d
movabs r11, 0x4924924924924925
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
shr rax, 2
mul r11
shr rdx, 1
imul rax, rdx, 0xffffffffffffffe4
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1c], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x28
jne 0x140117c20
mov dword [0x1403767ec], 1
add rsp, 8
pop rsi
ret

Function at 0x140117c60
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403767f8], 1
je 0x140117cc6
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x2e8ba2e8ba2e8ba3
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
imul rax, rdx, 0xffffffffffffffea
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x16], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1d
jne 0x140117c90
mov dword [0x1403767f8], 1
add rsp, 8
pop rsi
ret

Function at 0x140117cd0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376804], 1
je 0x140117d39
mov r9, rdx
mov ecx, 0x1c
xor r10d, r10d
movabs r11, 0x4924924924924925
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
shr rax, 2
mul r11
shr rdx, 1
imul rax, rdx, 0xffffffffffffffe4
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1c], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x23
jne 0x140117d00
mov dword [0x140376804], 1
add rsp, 8
pop rsi
ret
Function at 0x140117d40
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140376810], 1
je 0x140117d70
xor eax, eax
nop dword [rax]
movzx ecx, byte [r8 + rax + 0x10]
xor cl, byte [r8 + rax]
mov byte [rdx + rax], cl
add rax, 1
cmp eax, 6
jne 0x140117d50
mov dword [0x140376810], 1
pop rax
ret

Function at 0x140117d80
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x14037682c], 1
je 0x140117db6
xor ecx, ecx
nop dword [rax]
movzx r9d, byte [r8 + rcx + 0x10]
mov eax, ecx
and eax, 0xf
xor r9b, byte [r8 + rax]
mov byte [rdx + rcx], r9b
add rcx, 1
cmp ecx, 0x17
jne 0x140117d90
mov dword [0x14037682c], 1
pop rax
ret

Function at 0x140117dc0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140376844], 1
je 0x140117e19
mov r9, rdx
xor ecx, ecx
movabs r10, 0xf0f0f0f0f0f0f0f1
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
mov eax, edx
shl eax, 4
add eax, edx
movzx r11d, byte [r8 + rcx + 0x11]
mov edx, ecx
sub edx, eax
movsxd rax, edx
xor r11b, byte [r8 + rax]
mov byte [r9 + rcx], r11b
add rcx, 1
cmp ecx, 0x12
jne 0x140117de0
mov dword [0x140376844], 1
pop rax
ret

Function at 0x140117e20
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376854], 1
je 0x140117e86
mov r9, rdx
mov ecx, 0x1a
xor r10d, r10d
movabs r11, 0x4ec4ec4ec4ec4ec5
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
imul rax, rdx, 0xffffffffffffffe6
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1a], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x26
jne 0x140117e50
mov dword [0x140376854], 1
add rsp, 8
pop rsi
ret

Function at 0x140117e90
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376868], 1
je 0x140117ef6
mov r9, rdx
mov ecx, reloc.WS2_32.dll_send
xor r10d, r10d
movabs r11, 0xd79435e50d79435f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x13], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x22
jne 0x140117ec0
mov dword [0x140376868], 1
add rsp, 8
pop rsi
ret

Function at 0x140117f00
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x14037688c], 1
je 0x140117f5e
mov r9, rdx
xor ecx, ecx
movabs r10, 0x642c8590b21642c9
nop dword [rax]
mov rax, rcx
mul r10
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul eax, eax, 0xffffffe9
movzx edx, byte [r8 + rcx + 0x17]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x1e
jne 0x140117f20
mov dword [0x14037688c], 1
pop rax
ret

Function at 0x140117f60
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403768b0], 1
je 0x140117fb2
mov r9, rdx
xor ecx, ecx
movabs r10, 0x2e8ba2e8ba2e8ba3
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 2
imul eax, edx, 0xffffffea
movzx edx, byte [r8 + rcx + 0x16]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x1d
jne 0x140117f80
mov dword [0x1403768b0], 1
pop rax
ret
Function at 0x140117fc0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403768d0], 1
je 0x140118019
mov r9, rdx
xor ecx, ecx
movabs r10, 0xf0f0f0f0f0f0f0f1
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
mov eax, edx
shl eax, 4
add eax, edx
movzx r11d, byte [r8 + rcx + 0x11]
mov edx, ecx
sub edx, eax
movsxd rax, edx
xor r11b, byte [r8 + rax]
mov byte [r9 + rcx], r11b
add rcx, 1
cmp ecx, 0x19
jne 0x140117fe0
mov dword [0x1403768d0], 1
pop rax
ret

Function at 0x140118020
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403768f0], 1
je 0x140118072
mov r9, rdx
xor ecx, ecx
movabs r10, 0x4ec4ec4ec4ec4ec5
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 3
imul eax, edx, 0xffffffe6
movzx edx, byte [r8 + rcx + 0x1a]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x1b
jne 0x140118040
mov dword [0x1403768f0], 1
pop rax
ret

Function at 0x140118080
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376900], 1
je 0x1401180f2
mov r9, rdx
mov ecx, 0x19
xor r10d, r10d
movabs r11, 0x47ae147ae147ae15
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe7
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x19], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x25
jne 0x1401180b0
mov dword [0x140376900], 1
add rsp, 8
pop rsi
ret

Function at 0x140118100
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
push rax
cmp dword [0x14037691c], 1
je 0x140118159
mov r9, rdx
xor ecx, ecx
movabs r10, 0xcccccccccccccccd
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
shl edx, 2
lea r11d, [rdx + rdx*4]
movzx edx, byte [r8 + rcx + 0x14]
mov eax, ecx
sub eax, r11d
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x16
jne 0x140118120
mov dword [0x14037691c], 1
pop rax
ret

Function at 0x140118160
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376928], 1
je 0x1401181cc
mov r9, rdx
mov ecx, 0x18
xor r10d, r10d
movabs r11, 0xaaaaaaaaaaaaaaab
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 1
and rdx, 0xfffffffffffffff8
lea rax, [rdx + rdx*2]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x18], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1d
jne 0x140118190
mov dword [0x140376928], 1
add rsp, 8
pop rsi
ret

Function at 0x1401181e0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376930], 1
je 0x140118246
mov r9, rdx
mov ecx, 0x1a
xor r10d, r10d
movabs r11, 0x4ec4ec4ec4ec4ec5
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
imul rax, rdx, 0xffffffffffffffe6
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1a], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1e
jne 0x140118210
mov dword [0x140376930], 1
add rsp, 8
pop rsi
ret
Function at 0x140118250
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140376938], 1
je 0x140118280
xor eax, eax
nop dword [rax]
movzx ecx, byte [r8 + rax + 0x10]
xor cl, byte [r8 + rax]
mov byte [rdx + rax], cl
add rax, 1
cmp eax, 3
jne 0x140118260
mov dword [0x140376938], 1
pop rax
ret

Function at 0x140118290
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376944], 1
je 0x1401182f6
mov r9, rdx
mov ecx, 0x1b
xor r10d, r10d
movabs r11, 0x97b425ed097b425f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe5
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1b], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x22
jne 0x1401182c0
mov dword [0x140376944], 1
add rsp, 8
pop rsi
ret

Function at 0x140118300
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376950], 1
je 0x140118366
mov r9, rdx
mov ecx, 0x1a
xor r10d, r10d
movabs r11, 0x4ec4ec4ec4ec4ec5
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
imul rax, rdx, 0xffffffffffffffe6
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1a], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x21
jne 0x140118330
mov dword [0x140376950], 1
add rsp, 8
pop rsi
ret

Function at 0x140118370
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376958], 1
je 0x1401183d6
mov r9, rdx
mov ecx, 0x1a
xor r10d, r10d
movabs r11, 0x4ec4ec4ec4ec4ec5
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
imul rax, rdx, 0xffffffffffffffe6
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1a], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1e
jne 0x1401183a0
mov dword [0x140376958], 1
add rsp, 8
pop rsi
ret

Function at 0x1401183e0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140376960], 1
je 0x140118410
xor eax, eax
nop dword [rax]
movzx ecx, byte [r8 + rax + 0x10]
xor cl, byte [r8 + rax]
mov byte [rdx + rax], cl
add rax, 1
cmp eax, 2
jne 0x1401183f0
mov dword [0x140376960], 1
pop rax
ret

Function at 0x140118420
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376968], 1
je 0x14011848f
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xf0f0f0f0f0f0f0f1
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
mov rax, rdx
shl rax, 4
add rax, rdx
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x11], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x13
jne 0x140118450
mov dword [0x140376968], 1
add rsp, 8
pop rsi
ret

Function at 0x1401184a0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403769a4], 1
je 0x1401184f3
xor eax, eax
mov r9d, 0xba2e8ba3
nop word cs:[rax + rax]
nop dword [rax]
mov ecx, eax
imul rcx, r9
shr rcx, 0x24
imul ecx, ecx, 0xffffffea
movzx r10d, byte [r8 + rax + 0x16]
add ecx, eax
movsxd rcx, ecx
xor r10b, byte [r8 + rcx]
mov byte [rdx + rax], r10b
add rax, 1
cmp eax, 0x36
jne 0x1401184c0
mov dword [0x1403769a4], 1
pop rax
ret
Function at 0x140118500
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403769b8], 1
je 0x140118566
mov r9, rdx
mov ecx, 0x1a
xor r10d, r10d
movabs r11, 0x4ec4ec4ec4ec4ec5
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
imul rax, rdx, 0xffffffffffffffe6
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1a], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x27
jne 0x140118530
mov dword [0x1403769b8], 1
add rsp, 8
pop rsi
ret

Function at 0x140118570
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403769c8], 1
je 0x1401185dd
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0xcccccccccccccccd
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
and rdx, 0xfffffffffffffffc
lea rax, [rdx + rdx*4]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x14], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1e
jne 0x1401185a0
mov dword [0x1403769c8], 1
add rsp, 8
pop rsi
ret

Function at 0x1401185f0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140376a38], 1
je 0x140118651
xor eax, eax
mov r9d, 0xaf286bcb
nop word cs:[rax + rax]
nop dword [rax]
mov r10d, eax
imul r10, r9
shr r10, 0x20
mov ecx, eax
sub ecx, r10d
shr ecx, 1
add ecx, r10d
shr ecx, 4
imul ecx, ecx, 0xffffffed
movzx r10d, byte [r8 + rax + 0x13]
add ecx, eax
movsxd rcx, ecx
xor r10b, byte [r8 + rcx]
mov byte [rdx + rax], r10b
add rax, 1
cmp eax, 0x69
jne 0x140118610
mov dword [0x140376a38], 1
pop rax
ret

Function at 0x140118660
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376a48], 1
je 0x1401186d2
mov r9, rdx
mov ecx, 0x1d
xor r10d, r10d
movabs r11, 0x1a7b9611a7b9611b
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe3
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1d], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x29
jne 0x140118690
mov dword [0x140376a48], 1
add rsp, 8
pop rsi
ret

Function at 0x1401186e0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376a60], 1
je 0x140118758
mov r9, rdx
mov ecx, 0x1f
xor r10d, r10d
movabs r11, 0x842108421084211
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
mov rdx, rax
shl rdx, 5
sub rax, rdx
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1f], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x32
jne 0x140118710
mov dword [0x140376a60], 1
add rsp, 8
pop rsi
ret
Function at 0x140118760
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376a78], 1
je 0x1401187c6
mov r9, rdx
mov ecx, 0x1e
xor r10d, r10d
movabs r11, 0x8888888888888889
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe2
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1e], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x30
jne 0x140118790
mov dword [0x140376a78], 1
add rsp, 8
pop rsi
ret

Function at 0x1401187d0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376a94], 1
je 0x140118848
mov r9, rdx
mov ecx, 0x1f
xor r10d, r10d
movabs r11, 0x842108421084211
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
mov rdx, rax
shl rdx, 5
sub rax, rdx
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1f], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x35
jne 0x140118800
mov dword [0x140376a94], 1
add rsp, 8
pop rsi
ret

Function at 0x140118850
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376aa4], 1
je 0x1401188bc
mov r9, rdx
mov ecx, 0x18
xor r10d, r10d
movabs r11, 0xaaaaaaaaaaaaaaab
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 1
and rdx, 0xfffffffffffffff8
lea rax, [rdx + rdx*2]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x18], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x21
jne 0x140118880
mov dword [0x140376aa4], 1
add rsp, 8
pop rsi
ret

Function at 0x1401188d0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376ab4], 1
je 0x140118936
mov r9, rdx
mov ecx, 0x1e
xor r10d, r10d
movabs r11, 0x8888888888888889
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe2
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1e], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x28
jne 0x140118900
mov dword [0x140376ab4], 1
add rsp, 8
pop rsi
ret

Function at 0x140118940
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140376af0], 1
je 0x14011898c
xor eax, eax
nop dword [rax]
mov ecx, eax
imul rcx, rcx, 0x38e38e39
shr rcx, 0x22
add ecx, ecx
lea r9d, [rcx + rcx*8]
movzx r10d, byte [r8 + rax + 0x12]
mov ecx, eax
sub ecx, r9d
movsxd rcx, ecx
xor r10b, byte [r8 + rcx]
mov byte [rdx + rax], r10b
add rax, 1
cmp eax, 0x35
jne 0x140118950
mov dword [0x140376af0], 1
pop rax
ret

Function at 0x140118990
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
push rax
cmp dword [0x140376b44], 1
je 0x1401189ea
xor eax, eax
mov r9d, 0xaaaaaaab
nop word cs:[rax + rax]
nop dword [rax]
mov ecx, eax
imul rcx, r9
shr rcx, 0x24
shl ecx, 3
lea r10d, [rcx + rcx*2]
movzx r11d, byte [r8 + rax + 0x18]
mov ecx, eax
sub ecx, r10d
movsxd rcx, ecx
xor r11b, byte [r8 + rcx]
mov byte [rdx + rax], r11b
add rax, 1
cmp eax, 0x4f
jne 0x1401189b0
mov dword [0x140376b44], 1
pop rax
ret
Function at 0x1401189f0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140376b5c], 1
je 0x140118a26
xor ecx, ecx
nop dword [rax]
movzx r9d, byte [r8 + rcx + 0x10]
mov eax, ecx
and eax, 0xf
xor r9b, byte [r8 + rax]
mov byte [rdx + rcx], r9b
add rcx, 1
cmp ecx, 0x11
jne 0x140118a00
mov dword [0x140376b5c], 1
pop rax
ret

Function at 0x140118a30
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376b6c], 1
je 0x140118a9d
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0xcccccccccccccccd
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
and rdx, 0xfffffffffffffffc
lea rax, [rdx + rdx*4]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x14], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x20
jne 0x140118a60
mov dword [0x140376b6c], 1
add rsp, 8
pop rsi
ret

Function at 0x140118ab0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376b80], 1
je 0x140118b1c
mov r9, rdx
mov ecx, 0x18
xor r10d, r10d
movabs r11, 0xaaaaaaaaaaaaaaab
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 1
and rdx, 0xfffffffffffffff8
lea rax, [rdx + rdx*2]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x18], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x26
jne 0x140118ae0
mov dword [0x140376b80], 1
add rsp, 8
pop rsi
ret

Function at 0x140118b30
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376b98], 1
je 0x140118ba2
mov r9, rdx
mov ecx, 0x19
xor r10d, r10d
movabs r11, 0x47ae147ae147ae15
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe7
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x19], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x2a
jne 0x140118b60
mov dword [0x140376b98], 1
add rsp, 8
pop rsi
ret

Function at 0x140118bb0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376ba8], 1
je 0x140118c22
mov r9, rdx
mov ecx, reloc.WS2_32.dll_socket
xor r10d, r10d
movabs r11, 0x642c8590b21642c9
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe9
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x17], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x22
jne 0x140118be0
mov dword [0x140376ba8], 1
add rsp, 8
pop rsi
ret

Function at 0x140118c30
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376bb4], 1
je 0x140118c9f
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xf0f0f0f0f0f0f0f1
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
mov rax, rdx
shl rax, 4
add rax, rdx
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x11], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x18
jne 0x140118c60
mov dword [0x140376bb4], 1
add rsp, 8
pop rsi
ret