joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1402b4300
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140384790], 1
je 0x1402b436c
mov r9, rdx
mov ecx, 0x18
xor r10d, r10d
movabs r11, 0xaaaaaaaaaaaaaaab
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 1
and rdx, 0xfffffffffffffff8
lea rax, [rdx + rdx*2]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x18], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x20
jne 0x1402b4330
mov dword [0x140384790], 1
add rsp, 8
pop rsi
ret

Function at 0x1402b4380
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14038479c], 1
je 0x1402b43e6
mov r9, rdx
mov ecx, 0x1e
xor r10d, r10d
movabs r11, 0x8888888888888889
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe2
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1e], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x26
jne 0x1402b43b0
mov dword [0x14038479c], 1
add rsp, 8
pop rsi
ret

Function at 0x1402b43f0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403847a8], 1
je 0x1402b4462
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x8618618618618619
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffeb
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x15], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1d
jne 0x1402b4420
mov dword [0x1403847a8], 1
add rsp, 8
pop rsi
ret

Function at 0x1402b4470
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403847b4], 1
je 0x1402b44df
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xf0f0f0f0f0f0f0f1
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
mov rax, rdx
shl rax, 4
add rax, rdx
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x11], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x19
jne 0x1402b44a0
mov dword [0x1403847b4], 1
add rsp, 8
pop rsi
ret

Function at 0x1402b44f0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403847c0], 1
je 0x1402b4556
mov r9, rdx
mov ecx, 0x1b
xor r10d, r10d
movabs r11, 0x97b425ed097b425f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe5
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1b], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x23
jne 0x1402b4520
mov dword [0x1403847c0], 1
add rsp, 8
pop rsi
ret
Function at 0x1402b4560
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403847cc], 1
je 0x1402b45c6
mov r9, rdx
mov ecx, 0x1a
xor r10d, r10d
movabs r11, 0x4ec4ec4ec4ec4ec5
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
imul rax, rdx, 0xffffffffffffffe6
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1a], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x22
jne 0x1402b4590
mov dword [0x1403847cc], 1
add rsp, 8
pop rsi
ret

Function at 0x1402b45d0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403847d8], 1
je 0x1402b4642
mov r9, rdx
mov ecx, 0x1d
xor r10d, r10d
movabs r11, 0x1a7b9611a7b9611b
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe3
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1d], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x25
jne 0x1402b4600
mov dword [0x1403847d8], 1
add rsp, 8
pop rsi
ret

Function at 0x1402b4650
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403847e4], 1
je 0x1402b46c2
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x8618618618618619
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffeb
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x15], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1d
jne 0x1402b4680
mov dword [0x1403847e4], 1
add rsp, 8
pop rsi
ret

Function at 0x1402b46d0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403847fc], 1
je 0x1402b4739
mov r9, rdx
mov ecx, 0x1c
xor r10d, r10d
movabs r11, 0x4924924924924925
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
shr rax, 2
mul r11
shr rdx, 1
imul rax, rdx, 0xffffffffffffffe4
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1c], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x2e
jne 0x1402b4700
mov dword [0x1403847fc], 1
add rsp, 8
pop rsi
ret

Function at 0x1402b4740
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140384810], 1
je 0x1402b47b2
mov r9, rdx
mov ecx, 0x19
xor r10d, r10d
movabs r11, 0x47ae147ae147ae15
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe7
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x19], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x27
jne 0x1402b4770
mov dword [0x140384810], 1
add rsp, 8
pop rsi
ret
Function at 0x1402b47c0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14038481c], 1
je 0x1402b4832
mov r9, rdx
mov ecx, reloc.WS2_32.dll_socket
xor r10d, r10d
movabs r11, 0x642c8590b21642c9
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe9
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x17], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1e
jne 0x1402b47f0
mov dword [0x14038481c], 1
add rsp, 8
pop rsi
ret

Function at 0x1402b4840
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140384834], 1
je 0x1402b48b2
mov r9, rdx
mov ecx, reloc.WS2_32.dll_socket
xor r10d, r10d
movabs r11, 0x642c8590b21642c9
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe9
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x17], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x28
jne 0x1402b4870
mov dword [0x140384834], 1
add rsp, 8
pop rsi
ret

Function at 0x1402b48c0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140384848], 1
je 0x1402b492d
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0xcccccccccccccccd
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
and rdx, 0xfffffffffffffffc
lea rax, [rdx + rdx*4]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x14], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x21
jne 0x1402b48f0
mov dword [0x140384848], 1
add rsp, 8
pop rsi
ret

Function at 0x1402b4940
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14038485c], 1
je 0x1402b49a6
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x2e8ba2e8ba2e8ba3
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
imul rax, rdx, 0xffffffffffffffea
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x16], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x24
jne 0x1402b4970
mov dword [0x14038485c], 1
add rsp, 8
pop rsi
ret

Function at 0x1402b49b0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140384868], 1
je 0x1402b4a1d
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0xcccccccccccccccd
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
and rdx, 0xfffffffffffffffc
lea rax, [rdx + rdx*4]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x14], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1b
jne 0x1402b49e0
mov dword [0x140384868], 1
add rsp, 8
pop rsi
ret
Function at 0x1402b4a30
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140384878], 1
je 0x1402b4aa2
mov r9, rdx
mov ecx, reloc.WS2_32.dll_socket
xor r10d, r10d
movabs r11, 0x642c8590b21642c9
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe9
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x17], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x20
jne 0x1402b4a60
mov dword [0x140384878], 1
add rsp, 8
pop rsi
ret

Function at 0x1402b4ab0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140384884], 1
je 0x1402b4ae0
xor eax, eax
nop dword [rax]
movzx ecx, byte [r8 + rax + 0x10]
xor cl, byte [r8 + rax]
mov byte [rdx + rax], cl
add rax, 1
cmp eax, 7
jne 0x1402b4ac0
mov dword [0x140384884], 1
pop rax
ret

Function at 0x1402b4af0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140384890], 1
je 0x1402b4b56
mov r9, rdx
mov ecx, 0x1a
xor r10d, r10d
movabs r11, 0x4ec4ec4ec4ec4ec5
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
imul rax, rdx, 0xffffffffffffffe6
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1a], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x21
jne 0x1402b4b20
mov dword [0x140384890], 1
add rsp, 8
pop rsi
ret

Function at 0x1402b4b60
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140384898], 1
je 0x1402b4bc6
mov r9, rdx
mov ecx, 0x1a
xor r10d, r10d
movabs r11, 0x4ec4ec4ec4ec4ec5
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
imul rax, rdx, 0xffffffffffffffe6
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1a], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1e
jne 0x1402b4b90
mov dword [0x140384898], 1
add rsp, 8
pop rsi
ret

Function at 0x1402b4bd0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403848a0], 1
je 0x1402b4c48
mov r9, rdx
mov ecx, 0x1f
xor r10d, r10d
movabs r11, 0x842108421084211
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
mov rdx, rax
shl rdx, 5
sub rax, rdx
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1f], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x22
jne 0x1402b4c00
mov dword [0x1403848a0], 1
add rsp, 8
pop rsi
ret

Function at 0x1402b4c50
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403848a8], 1
je 0x1402b4cb6
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x2e8ba2e8ba2e8ba3
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
imul rax, rdx, 0xffffffffffffffea
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x16], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1a
jne 0x1402b4c80
mov dword [0x1403848a8], 1
add rsp, 8
pop rsi
ret
Function at 0x1402b4cc0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403848b4], 1
je 0x1402b4d26
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x2e8ba2e8ba2e8ba3
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
imul rax, rdx, 0xffffffffffffffea
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x16], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1c
jne 0x1402b4cf0
mov dword [0x1403848b4], 1
add rsp, 8
pop rsi
ret

Function at 0x1402b4d30
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403848c0], 1
je 0x1402b4da2
mov r9, rdx
mov ecx, 0x19
xor r10d, r10d
movabs r11, 0x47ae147ae147ae15
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe7
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x19], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x21
jne 0x1402b4d60
mov dword [0x1403848c0], 1
add rsp, 8
pop rsi
ret

Function at 0x1402b4db0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403848d0], 1
je 0x1402b4e16
mov r9, rdx
mov ecx, 0x1a
xor r10d, r10d
movabs r11, 0x4ec4ec4ec4ec4ec5
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
imul rax, rdx, 0xffffffffffffffe6
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1a], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x24
jne 0x1402b4de0
mov dword [0x1403848d0], 1
add rsp, 8
pop rsi
ret

Function at 0x1402b4e20
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403848e0], 1
je 0x1402b4e86
mov r9, rdx
mov ecx, reloc.WS2_32.dll_send
xor r10d, r10d
movabs r11, 0xd79435e50d79435f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x13], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1c
jne 0x1402b4e50
mov dword [0x1403848e0], 1
add rsp, 8
pop rsi
ret

Function at 0x1402b4e90
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403848f0], 1
je 0x1402b4f02
mov r9, rdx
mov ecx, 0x19
xor r10d, r10d
movabs r11, 0x47ae147ae147ae15
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe7
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x19], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x24
jne 0x1402b4ec0
mov dword [0x1403848f0], 1
add rsp, 8
pop rsi
ret
Function at 0x1402b4f10
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403848fc], 1
je 0x1402b4f7f
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xf0f0f0f0f0f0f0f1
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
mov rax, rdx
shl rax, 4
add rax, rdx
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x11], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x17
jne 0x1402b4f40
mov dword [0x1403848fc], 1
add rsp, 8
pop rsi
ret

Function at 0x1402b4f90
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140384908], 1
je 0x1402b4ffd
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xe38e38e38e38e38f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
and rdx, 0xfffffffffffffffe
lea rax, [rdx + rdx*8]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x12], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x18
jne 0x1402b4fc0
mov dword [0x140384908], 1
add rsp, 8
pop rsi
ret

Function at 0x1402b5010
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140384914], 1
je 0x1402b5082
mov r9, rdx
mov ecx, 0x1d
xor r10d, r10d
movabs r11, 0x1a7b9611a7b9611b
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe3
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1d], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x23
jne 0x1402b5040
mov dword [0x140384914], 1
add rsp, 8
pop rsi
ret

Function at 0x1402b5090
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140384920], 1
je 0x1402b50f6
mov r9, rdx
mov ecx, 0x1b
xor r10d, r10d
movabs r11, 0x97b425ed097b425f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe5
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1b], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x21
jne 0x1402b50c0
mov dword [0x140384920], 1
add rsp, 8
pop rsi
ret

Function at 0x1402b5100
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140384930], 1
je 0x1402b5172
mov r9, rdx
mov ecx, 0x19
xor r10d, r10d
movabs r11, 0x47ae147ae147ae15
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe7
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x19], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x23
jne 0x1402b5130
mov dword [0x140384930], 1
add rsp, 8
pop rsi
ret
Function at 0x1402b5180
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x14038496c], 1
je 0x1402b51de
mov r9, rdx
xor ecx, ecx
movabs r10, 0x1a7b9611a7b9611b
nop dword [rax]
mov rax, rcx
mul r10
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul eax, eax, 0xffffffe3
movzx edx, byte [r8 + rcx + 0x1d]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x35
jne 0x1402b51a0
mov dword [0x14038496c], 1
pop rax
ret

Function at 0x1402b51e0
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403849b4], 1
je 0x1402b523a
xor eax, eax
mov r9d, 0xaaaaaaab
nop word cs:[rax + rax]
nop dword [rax]
mov ecx, eax
imul rcx, r9
shr rcx, 0x24
shl ecx, 3
lea r10d, [rcx + rcx*2]
movzx r11d, byte [r8 + rax + 0x18]
mov ecx, eax
sub ecx, r10d
movsxd rcx, ecx
xor r11b, byte [r8 + rcx]
mov byte [rdx + rax], r11b
add rax, 1
cmp eax, 0x42
jne 0x1402b5200
mov dword [0x1403849b4], 1
pop rax
ret

Function at 0x1402b5240
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403849d4], 1
je 0x1402b52a6
mov r9, rdx
mov ecx, 0x1e
xor r10d, r10d
movabs r11, 0x8888888888888889
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe2
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1e], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x38
jne 0x1402b5270
mov dword [0x1403849d4], 1
add rsp, 8
pop rsi
ret

Function at 0x1402b52b0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403849fc], 1
je 0x1402b530d
xor eax, eax
mov r9d, 0xf0f0f0f1
nop word cs:[rax + rax]
nop dword [rax]
mov ecx, eax
imul rcx, r9
shr rcx, 0x24
mov r10d, ecx
shl r10d, 4
add r10d, ecx
movzx r11d, byte [r8 + rax + 0x11]
mov ecx, eax
sub ecx, r10d
movsxd rcx, ecx
xor r11b, byte [r8 + rcx]
mov byte [rdx + rax], r11b
add rax, 1
cmp eax, 0x23
jne 0x1402b52d0
mov dword [0x1403849fc], 1
pop rax
ret

Function at 0x1402b5310
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140384a04], 1
je 0x1402b5382
mov r9, rdx
mov ecx, reloc.WS2_32.dll_socket
xor r10d, r10d
movabs r11, 0x642c8590b21642c9
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe9
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x17], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1b
jne 0x1402b5340
mov dword [0x140384a04], 1
add rsp, 8
pop rsi
ret

Function at 0x1402b5390
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140384a0c], 1
je 0x1402b53f6
mov r9, rdx
mov ecx, reloc.WS2_32.dll_send
xor r10d, r10d
movabs r11, 0xd79435e50d79435f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x13], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x17
jne 0x1402b53c0
mov dword [0x140384a0c], 1
add rsp, 8
pop rsi
ret
Function at 0x1402b5400
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140384a14], 1
je 0x1402b546f
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xf0f0f0f0f0f0f0f1
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
mov rax, rdx
shl rax, 4
add rax, rdx
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x11], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x15
jne 0x1402b5430
mov dword [0x140384a14], 1
add rsp, 8
pop rsi
ret

Function at 0x1402b5480
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140384a20], 1
je 0x1402b54f2
mov r9, rdx
mov ecx, reloc.WS2_32.dll_socket
xor r10d, r10d
movabs r11, 0x642c8590b21642c9
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe9
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x17], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1e
jne 0x1402b54b0
mov dword [0x140384a20], 1
add rsp, 8
pop rsi
ret

Function at 0x1402b5500
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140384a30], 1
je 0x1402b5566
mov r9, rdx
mov ecx, 0x1e
xor r10d, r10d
movabs r11, 0x8888888888888889
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe2
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1e], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x29
jne 0x1402b5530
mov dword [0x140384a30], 1
add rsp, 8
pop rsi
ret

Function at 0x1402b5570
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140384a40], 1
je 0x1402b55e2
mov r9, rdx
mov ecx, 0x1d
xor r10d, r10d
movabs r11, 0x1a7b9611a7b9611b
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe3
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1d], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x27
jne 0x1402b55a0
mov dword [0x140384a40], 1
add rsp, 8
pop rsi
ret

Function at 0x1402b55f0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140384a4c], 1
je 0x1402b5668
mov r9, rdx
mov ecx, 0x1f
xor r10d, r10d
movabs r11, 0x842108421084211
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
mov rdx, rax
shl rdx, 5
sub rax, rdx
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1f], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x24
jne 0x1402b5620
mov dword [0x140384a4c], 1
add rsp, 8
pop rsi
ret