joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140030ac0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374280], 1
je 0x140030b2d
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0xcccccccccccccccd
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
and rdx, 0xfffffffffffffffc
lea rax, [rdx + rdx*4]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x14], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x19
jne 0x140030af0
mov dword [0x140374280], 1
add rsp, 8
pop rsi
ret

Function at 0x140030b40
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037428c], 1
je 0x140030ba6
mov r9, rdx
mov ecx, reloc.WS2_32.dll_send
xor r10d, r10d
movabs r11, 0xd79435e50d79435f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x13], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x19
jne 0x140030b70
mov dword [0x14037428c], 1
add rsp, 8
pop rsi
ret

Function at 0x140030bb0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374298], 1
je 0x140030c1c
mov r9, rdx
mov ecx, 0x18
xor r10d, r10d
movabs r11, 0xaaaaaaaaaaaaaaab
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 1
and rdx, 0xfffffffffffffff8
lea rax, [rdx + rdx*2]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x18], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1f
jne 0x140030be0
mov dword [0x140374298], 1
add rsp, 8
pop rsi
ret

Function at 0x140030c30
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403742a4], 1
je 0x140030c96
mov r9, rdx
mov ecx, 0x1a
xor r10d, r10d
movabs r11, 0x4ec4ec4ec4ec4ec5
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
imul rax, rdx, 0xffffffffffffffe6
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1a], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x20
jne 0x140030c60
mov dword [0x1403742a4], 1
add rsp, 8
pop rsi
ret

Function at 0x140030ca0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403742b4], 1
je 0x140030d06
mov r9, rdx
mov ecx, 0x1b
xor r10d, r10d
movabs r11, 0x97b425ed097b425f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe5
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1b], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x25
jne 0x140030cd0
mov dword [0x1403742b4], 1
add rsp, 8
pop rsi
ret
Function at 0x140030d10
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403742c0], 1
je 0x140030d88
mov r9, rdx
mov ecx, 0x1f
xor r10d, r10d
movabs r11, 0x842108421084211
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
mov rdx, rax
shl rdx, 5
sub rax, rdx
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1f], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x26
jne 0x140030d40
mov dword [0x1403742c0], 1
add rsp, 8
pop rsi
ret

Function at 0x140030d90
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403742cc], 1
je 0x140030e02
mov r9, rdx
mov ecx, 0x19
xor r10d, r10d
movabs r11, 0x47ae147ae147ae15
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe7
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x19], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x20
jne 0x140030dc0
mov dword [0x1403742cc], 1
add rsp, 8
pop rsi
ret

Function at 0x140030e10
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403742d8], 1
je 0x140030e7c
mov r9, rdx
mov ecx, 0x18
xor r10d, r10d
movabs r11, 0xaaaaaaaaaaaaaaab
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 1
and rdx, 0xfffffffffffffff8
lea rax, [rdx + rdx*2]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x18], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1f
jne 0x140030e40
mov dword [0x1403742d8], 1
add rsp, 8
pop rsi
ret

Function at 0x140030e90
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403742e4], 1
je 0x140030ef6
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x2e8ba2e8ba2e8ba3
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
imul rax, rdx, 0xffffffffffffffea
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x16], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1d
jne 0x140030ec0
mov dword [0x1403742e4], 1
add rsp, 8
pop rsi
ret

Function at 0x140030f00
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403742f4], 1
je 0x140030f66
mov r9, rdx
mov ecx, reloc.WS2_32.dll_send
xor r10d, r10d
movabs r11, 0xd79435e50d79435f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x13], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1d
jne 0x140030f30
mov dword [0x1403742f4], 1
add rsp, 8
pop rsi
ret
Function at 0x140030f70
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374308], 1
je 0x140030fdd
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0xcccccccccccccccd
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
and rdx, 0xfffffffffffffffc
lea rax, [rdx + rdx*4]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x14], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x21
jne 0x140030fa0
mov dword [0x140374308], 1
add rsp, 8
pop rsi
ret

Function at 0x140030ff0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374318], 1
je 0x140031056
mov r9, rdx
mov ecx, reloc.WS2_32.dll_send
xor r10d, r10d
movabs r11, 0xd79435e50d79435f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x13], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1d
jne 0x140031020
mov dword [0x140374318], 1
add rsp, 8
pop rsi
ret

Function at 0x140031060
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374324], 1
je 0x1400310c6
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x2e8ba2e8ba2e8ba3
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
imul rax, rdx, 0xffffffffffffffea
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x16], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1d
jne 0x140031090
mov dword [0x140374324], 1
add rsp, 8
pop rsi
ret

Function at 0x1400310d0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374344], 1
je 0x140031139
mov r9, rdx
mov ecx, 0x1c
xor r10d, r10d
movabs r11, 0x4924924924924925
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
shr rax, 2
mul r11
shr rdx, 1
imul rax, rdx, 0xffffffffffffffe4
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1c], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x36
jne 0x140031100
mov dword [0x140374344], 1
add rsp, 8
pop rsi
ret

Function at 0x140031140
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374350], 1
je 0x1400311a6
mov r9, rdx
mov ecx, 0x1b
xor r10d, r10d
movabs r11, 0x97b425ed097b425f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe5
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1b], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x20
jne 0x140031170
mov dword [0x140374350], 1
add rsp, 8
pop rsi
ret

Function at 0x1400311b0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140374370], 1
je 0x14003120e
mov r9, rdx
xor ecx, ecx
movabs r10, 0x47ae147ae147ae15
nop dword [rax]
mov rax, rcx
mul r10
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul eax, eax, 0xffffffe7
movzx edx, byte [r8 + rcx + 0x19]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x1a
jne 0x1400311d0
mov dword [0x140374370], 1
pop rax
ret
Function at 0x140031210
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374378], 1
je 0x140031276
mov r9, rdx
mov ecx, reloc.WS2_32.dll_send
xor r10d, r10d
movabs r11, 0xd79435e50d79435f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x13], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x16
jne 0x140031240
mov dword [0x140374378], 1
add rsp, 8
pop rsi
ret

Function at 0x140031280
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374380], 1
je 0x1400312ed
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0xcccccccccccccccd
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
and rdx, 0xfffffffffffffffc
lea rax, [rdx + rdx*4]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x14], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x18
jne 0x1400312b0
mov dword [0x140374380], 1
add rsp, 8
pop rsi
ret

Function at 0x140031300
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403743a0], 1
je 0x140031336
xor ecx, ecx
nop dword [rax]
movzx r9d, byte [r8 + rcx + 0x10]
mov eax, ecx
and eax, 0xf
xor r9b, byte [r8 + rax]
mov byte [rdx + rcx], r9b
add rcx, 1
cmp ecx, 0x19
jne 0x140031310
mov dword [0x1403743a0], 1
pop rax
ret

Function at 0x140031340
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403743c0], 1
je 0x1400313a6
mov r9, rdx
mov ecx, 0x1e
xor r10d, r10d
movabs r11, 0x8888888888888889
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe2
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1e], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x37
jne 0x140031370
mov dword [0x1403743c0], 1
add rsp, 8
pop rsi
ret

Function at 0x1400313b0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403743e0], 1
je 0x140031422
mov r9, rdx
mov ecx, 0x1d
xor r10d, r10d
movabs r11, 0x1a7b9611a7b9611b
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe3
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1d], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x36
jne 0x1400313e0
mov dword [0x1403743e0], 1
add rsp, 8
pop rsi
ret

Function at 0x140031430
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140374400], 1
je 0x140031489
mov r9, rdx
xor ecx, ecx
movabs r10, 0xf0f0f0f0f0f0f0f1
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
mov eax, edx
shl eax, 4
add eax, edx
movzx r11d, byte [r8 + rcx + 0x11]
mov edx, ecx
sub edx, eax
movsxd rax, edx
xor r11b, byte [r8 + rax]
mov byte [r9 + rcx], r11b
add rcx, 1
cmp ecx, 0x19
jne 0x140031450
mov dword [0x140374400], 1
pop rax
ret
Function at 0x140031490
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
push rax
cmp dword [0x140374420], 1
je 0x1400314e9
mov r9, rdx
xor ecx, ecx
movabs r10, 0xcccccccccccccccd
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
shl edx, 2
lea r11d, [rdx + rdx*4]
movzx edx, byte [r8 + rcx + 0x14]
mov eax, ecx
sub eax, r11d
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x19
jne 0x1400314b0
mov dword [0x140374420], 1
pop rax
ret

Function at 0x1400314f0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374440], 1
je 0x140031556
mov r9, rdx
mov ecx, 0x1b
xor r10d, r10d
movabs r11, 0x97b425ed097b425f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe5
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1b], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x34
jne 0x140031520
mov dword [0x140374440], 1
add rsp, 8
pop rsi
ret

Function at 0x140031560
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374460], 1
je 0x1400315d8
mov r9, rdx
mov ecx, 0x1f
xor r10d, r10d
movabs r11, 0x842108421084211
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
mov rdx, rax
shl rdx, 5
sub rax, rdx
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1f], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x38
jne 0x140031590
mov dword [0x140374460], 1
add rsp, 8
pop rsi
ret

Function at 0x1400315e0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140374480], 1
je 0x140031638
mov r9, rdx
xor ecx, ecx
movabs r10, 0xe38e38e38e38e38f
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
add edx, edx
lea r11d, [rdx + rdx*8]
movzx edx, byte [r8 + rcx + 0x12]
mov eax, ecx
sub eax, r11d
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x19
jne 0x140031600
mov dword [0x140374480], 1
pop rax
ret

Function at 0x140031640
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403744a0], 1
je 0x140031692
mov r9, rdx
xor ecx, ecx
movabs r10, 0xd79435e50d79435f
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
imul eax, edx, 0xffffffed
movzx edx, byte [r8 + rcx + 0x13]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x1a
jne 0x140031660
mov dword [0x1403744a0], 1
pop rax
ret

Function at 0x1400316a0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403744c4], 1
je 0x140031706
mov r9, rdx
mov ecx, 0x1e
xor r10d, r10d
movabs r11, 0x8888888888888889
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe2
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1e], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x3b
jne 0x1400316d0
mov dword [0x1403744c4], 1
add rsp, 8
pop rsi
ret
Function at 0x140031710
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403744e8], 1
je 0x140031788
mov r9, rdx
mov ecx, 0x1f
xor r10d, r10d
movabs r11, 0x842108421084211
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
mov rdx, rax
shl rdx, 5
sub rax, rdx
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1f], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x3c
jne 0x140031740
mov dword [0x1403744e8], 1
add rsp, 8
pop rsi
ret

Function at 0x140031790
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
push rax
cmp dword [0x140374508], 1
je 0x1400317e9
mov r9, rdx
xor ecx, ecx
movabs r10, 0xaaaaaaaaaaaaaaab
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
shl edx, 3
lea r11d, [rdx + rdx*2]
movzx edx, byte [r8 + rcx + 0x18]
mov eax, ecx
sub eax, r11d
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x1a
jne 0x1400317b0
mov dword [0x140374508], 1
pop rax
ret

Function at 0x1400317f0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374510], 1
je 0x14003185d
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0xcccccccccccccccd
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
and rdx, 0xfffffffffffffffc
lea rax, [rdx + rdx*4]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x14], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x18
jne 0x140031820
mov dword [0x140374510], 1
add rsp, 8
pop rsi
ret

Function at 0x140031870
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374530], 1
je 0x1400318e8
mov r9, rdx
mov ecx, 0x1f
xor r10d, r10d
movabs r11, 0x842108421084211
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
mov rdx, rax
shl rdx, 5
sub rax, rdx
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1f], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x39
jne 0x1400318a0
mov dword [0x140374530], 1
add rsp, 8
pop rsi
ret

Function at 0x1400318f0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374538], 1
je 0x140031968
mov r9, rdx
mov ecx, 0x1f
xor r10d, r10d
movabs r11, 0x842108421084211
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
mov rdx, rax
shl rdx, 5
sub rax, rdx
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1f], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x23
jne 0x140031920
mov dword [0x140374538], 1
add rsp, 8
pop rsi
ret
Function at 0x140031970
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374548], 1
je 0x1400319d6
mov r9, rdx
mov ecx, reloc.WS2_32.dll_send
xor r10d, r10d
movabs r11, 0xd79435e50d79435f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x13], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1d
jne 0x1400319a0
mov dword [0x140374548], 1
add rsp, 8
pop rsi
ret

Function at 0x1400319e0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374554], 1
je 0x140031a52
mov r9, rdx
mov ecx, reloc.WS2_32.dll_socket
xor r10d, r10d
movabs r11, 0x642c8590b21642c9
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe9
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x17], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1d
jne 0x140031a10
mov dword [0x140374554], 1
add rsp, 8
pop rsi
ret

Function at 0x140031a60
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037455c], 1
je 0x140031ac6
mov r9, rdx
mov ecx, reloc.WS2_32.dll_send
xor r10d, r10d
movabs r11, 0xd79435e50d79435f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x13], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x17
jne 0x140031a90
mov dword [0x14037455c], 1
add rsp, 8
pop rsi
ret

Function at 0x140031ad0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374568], 1
je 0x140031b3f
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xf0f0f0f0f0f0f0f1
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
mov rax, rdx
shl rax, 4
add rax, rdx
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x11], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x18
jne 0x140031b00
mov dword [0x140374568], 1
add rsp, 8
pop rsi
ret

Function at 0x140031b50
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374574], 1
je 0x140031bbd
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xe38e38e38e38e38f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
and rdx, 0xfffffffffffffffe
lea rax, [rdx + rdx*8]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x12], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x19
jne 0x140031b80
mov dword [0x140374574], 1
add rsp, 8
pop rsi
ret
Function at 0x140031bd0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374580], 1
je 0x140031c36
mov r9, rdx
mov ecx, reloc.WS2_32.dll_send
xor r10d, r10d
movabs r11, 0xd79435e50d79435f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x13], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x19
jne 0x140031c00
mov dword [0x140374580], 1
add rsp, 8
pop rsi
ret

Function at 0x140031c40
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037458c], 1
je 0x140031caf
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xf0f0f0f0f0f0f0f1
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
mov rax, rdx
shl rax, 4
add rax, rdx
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x11], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x17
jne 0x140031c70
mov dword [0x14037458c], 1
add rsp, 8
pop rsi
ret

Function at 0x140031cc0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374598], 1
je 0x140031d2c
mov r9, rdx
mov ecx, 0x18
xor r10d, r10d
movabs r11, 0xaaaaaaaaaaaaaaab
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 1
and rdx, 0xfffffffffffffff8
lea rax, [rdx + rdx*2]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x18], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1e
jne 0x140031cf0
mov dword [0x140374598], 1
add rsp, 8
pop rsi
ret

Function at 0x140031d40
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403745a4], 1
je 0x140031db2
mov r9, rdx
mov ecx, 0x19
xor r10d, r10d
movabs r11, 0x47ae147ae147ae15
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe7
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x19], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1f
jne 0x140031d70
mov dword [0x1403745a4], 1
add rsp, 8
pop rsi
ret

Function at 0x140031dc0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403745ac], 1
je 0x140031e26
mov r9, rdx
mov ecx, reloc.WS2_32.dll_send
xor r10d, r10d
movabs r11, 0xd79435e50d79435f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x13], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x17
jne 0x140031df0
mov dword [0x1403745ac], 1
add rsp, 8
pop rsi
ret