joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140214690
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140383974], 1
je 0x1402146c0
xor eax, eax
nop dword [rax]
movzx ecx, byte [r8 + rax + 0x10]
xor cl, byte [r8 + rax]
mov byte [rdx + rax], cl
add rax, 1
cmp eax, 3
jne 0x1402146a0
mov dword [0x140383974], 1
pop rax
ret

Function at 0x1402146d0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403839c4], 1
je 0x140214731
xor eax, eax
mov r9d, 0x86186187
nop word cs:[rax + rax]
nop dword [rax]
mov r10d, eax
imul r10, r9
shr r10, 0x20
mov ecx, eax
sub ecx, r10d
shr ecx, 1
add ecx, r10d
shr ecx, 4
imul ecx, ecx, 0xffffffeb
movzx r10d, byte [r8 + rax + 0x15]
add ecx, eax
movsxd rcx, ecx
xor r10b, byte [r8 + rcx]
mov byte [rdx + rax], r10b
add rax, 1
cmp eax, 0x4c
jne 0x1402146f0
mov dword [0x1403839c4], 1
pop rax
ret

Function at 0x140214740
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403839d8], 1
je 0x1402147a6
mov r9, rdx
mov ecx, reloc.WS2_32.dll_send
xor r10d, r10d
movabs r11, 0xd79435e50d79435f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x13], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x22
jne 0x140214770
mov dword [0x1403839d8], 1
add rsp, 8
pop rsi
ret

Function at 0x1402147b0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140383a18], 1
je 0x1402147f6
xor eax, eax
nop dword [rax]
mov ecx, eax
imul rcx, rcx, 0x4ec4ec4f
shr rcx, 0x23
imul ecx, ecx, 0xffffffe6
movzx r9d, byte [r8 + rax + 0x1a]
add ecx, eax
movsxd rcx, ecx
xor r9b, byte [r8 + rcx]
mov byte [rdx + rax], r9b
add rax, 1
cmp eax, 0x3b
jne 0x1402147c0
mov dword [0x140383a18], 1
pop rax
ret

Function at 0x140214800
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383a24], 1
je 0x14021486d
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xe38e38e38e38e38f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
and rdx, 0xfffffffffffffffe
lea rax, [rdx + rdx*8]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x12], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1a
jne 0x140214830
mov dword [0x140383a24], 1
add rsp, 8
pop rsi
ret

Function at 0x140214880
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140383a70], 1
je 0x1402148c6
xor eax, eax
nop dword [rax]
mov ecx, eax
imul rcx, rcx, 0x4ec4ec4f
shr rcx, 0x23
imul ecx, ecx, 0xffffffe6
movzx r9d, byte [r8 + rax + 0x1a]
add ecx, eax
movsxd rcx, ecx
xor r9b, byte [r8 + rcx]
mov byte [rdx + rax], r9b
add rax, 1
cmp eax, 0x47
jne 0x140214890
mov dword [0x140383a70], 1
pop rax
ret
Function at 0x1402148d0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140383ab8], 1
je 0x14021492d
xor eax, eax
mov r9d, 0xf0f0f0f1
nop word cs:[rax + rax]
nop dword [rax]
mov ecx, eax
imul rcx, r9
shr rcx, 0x24
mov r10d, ecx
shl r10d, 4
add r10d, ecx
movzx r11d, byte [r8 + rax + 0x11]
mov ecx, eax
sub ecx, r10d
movsxd rcx, ecx
xor r11b, byte [r8 + rcx]
mov byte [rdx + rax], r11b
add rax, 1
cmp eax, 0x41
jne 0x1402148f0
mov dword [0x140383ab8], 1
pop rax
ret

Function at 0x140214930
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140383aec], 1
je 0x140214983
xor eax, eax
mov r9d, 0xb21642c9
nop word cs:[rax + rax]
nop dword [rax]
mov ecx, eax
imul rcx, r9
shr rcx, 0x24
imul ecx, ecx, 0xffffffe9
movzx r10d, byte [r8 + rax + 0x17]
add ecx, eax
movsxd rcx, ecx
xor r10b, byte [r8 + rcx]
mov byte [rdx + rax], r10b
add rax, 1
cmp eax, 0x2f
jne 0x140214950
mov dword [0x140383aec], 1
pop rax
ret

Function at 0x140214990
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140383b2c], 1
je 0x1402149f1
xor eax, eax
mov r9d, 0xaf286bcb
nop word cs:[rax + rax]
nop dword [rax]
mov r10d, eax
imul r10, r9
shr r10, 0x20
mov ecx, eax
sub ecx, r10d
shr ecx, 1
add ecx, r10d
shr ecx, 4
imul ecx, ecx, 0xffffffed
movzx r10d, byte [r8 + rax + 0x13]
add ecx, eax
movsxd rcx, ecx
xor r10b, byte [r8 + rcx]
mov byte [rdx + rax], r10b
add rax, 1
cmp eax, 0x3b
jne 0x1402149b0
mov dword [0x140383b2c], 1
pop rax
ret

Function at 0x140214a00
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140383b3c], 1
je 0x140214a30
xor eax, eax
nop dword [rax]
movzx ecx, byte [r8 + rax + 0x10]
xor cl, byte [r8 + rax]
mov byte [rdx + rax], cl
add rax, 1
cmp eax, 0xa
jne 0x140214a10
mov dword [0x140383b3c], 1
pop rax
ret

Function at 0x140214a40
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383b4c], 1
je 0x140214ab8
mov r9, rdx
mov ecx, 0x1f
xor r10d, r10d
movabs r11, 0x842108421084211
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
mov rdx, rax
shl rdx, 5
sub rax, rdx
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1f], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x2b
jne 0x140214a70
mov dword [0x140383b4c], 1
add rsp, 8
pop rsi
ret

Function at 0x140214ac0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140383b60], 1
je 0x140214af0
xor eax, eax
nop dword [rax]
movzx ecx, byte [r8 + rax + 0x10]
xor cl, byte [r8 + rax]
mov byte [rdx + rax], cl
add rax, 1
cmp eax, 0xe
jne 0x140214ad0
mov dword [0x140383b60], 1
pop rax
ret
Function at 0x140214b00
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383b6c], 1
je 0x140214b6d
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xe38e38e38e38e38f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
and rdx, 0xfffffffffffffffe
lea rax, [rdx + rdx*8]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x12], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x19
jne 0x140214b30
mov dword [0x140383b6c], 1
add rsp, 8
pop rsi
ret

Function at 0x140214b80
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383b78], 1
je 0x140214bf2
mov r9, rdx
mov ecx, 0x19
xor r10d, r10d
movabs r11, 0x47ae147ae147ae15
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe7
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x19], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x20
jne 0x140214bb0
mov dword [0x140383b78], 1
add rsp, 8
pop rsi
ret

Function at 0x140214c00
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383b88], 1
je 0x140214c69
mov r9, rdx
mov ecx, 0x1c
xor r10d, r10d
movabs r11, 0x4924924924924925
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
shr rax, 2
mul r11
shr rdx, 1
imul rax, rdx, 0xffffffffffffffe4
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1c], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x26
jne 0x140214c30
mov dword [0x140383b88], 1
add rsp, 8
pop rsi
ret

Function at 0x140214c70
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140383d04], 1
je 0x140214ccd
xor r10d, r10d
nop dword [rax]
mov ecx, r10d
imul r9, rcx, 0x8421085
shr r9, 0x20
mov eax, r10d
sub eax, r9d
shr eax, 1
add eax, r9d
shr eax, 4
mov ecx, eax
shl ecx, 5
sub eax, ecx
movzx ecx, byte [r8 + r10 + 0x1f]
add eax, r10d
cdqe
xor cl, byte [r8 + rax]
mov byte [rdx + r10], cl
add r10, 1
cmp r10d, 0x177
jne 0x140214c80
mov dword [0x140383d04], 1
pop rax
ret

Function at 0x140214cd0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383d28], 1
je 0x140214d36
mov r9, rdx
mov ecx, 0x1e
xor r10d, r10d
movabs r11, 0x8888888888888889
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe2
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1e], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x3b
jne 0x140214d00
mov dword [0x140383d28], 1
add rsp, 8
pop rsi
ret

Function at 0x140214d40
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383d40], 1
je 0x140214da6
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x2e8ba2e8ba2e8ba3
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
imul rax, rdx, 0xffffffffffffffea
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x16], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x28
jne 0x140214d70
mov dword [0x140383d40], 1
add rsp, 8
pop rsi
ret
Function at 0x140214db0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140383d60], 1
je 0x140214e02
mov r9, rdx
xor ecx, ecx
movabs r10, 0x2e8ba2e8ba2e8ba3
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 2
imul eax, edx, 0xffffffea
movzx edx, byte [r8 + rcx + 0x16]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x1a
jne 0x140214dd0
mov dword [0x140383d60], 1
pop rax
ret

Function at 0x140214e10
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383d6c], 1
je 0x140214e7d
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0xcccccccccccccccd
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
and rdx, 0xfffffffffffffffc
lea rax, [rdx + rdx*4]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x14], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1b
jne 0x140214e40
mov dword [0x140383d6c], 1
add rsp, 8
pop rsi
ret

Function at 0x140214e90
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383d78], 1
je 0x140214f02
mov r9, rdx
mov ecx, 0x19
xor r10d, r10d
movabs r11, 0x47ae147ae147ae15
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe7
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x19], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x20
jne 0x140214ec0
mov dword [0x140383d78], 1
add rsp, 8
pop rsi
ret

Function at 0x140214f10
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383d80], 1
je 0x140214f88
mov r9, rdx
mov ecx, 0x1f
xor r10d, r10d
movabs r11, 0x842108421084211
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
mov rdx, rax
shl rdx, 5
sub rax, rdx
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1f], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x23
jne 0x140214f40
mov dword [0x140383d80], 1
add rsp, 8
pop rsi
ret

Function at 0x140214f90
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383d88], 1
je 0x140214ff6
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x2e8ba2e8ba2e8ba3
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
imul rax, rdx, 0xffffffffffffffea
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x16], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1a
jne 0x140214fc0
mov dword [0x140383d88], 1
add rsp, 8
pop rsi
ret

Function at 0x140215000
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383d90], 1
je 0x140215069
mov r9, rdx
mov ecx, 0x1c
xor r10d, r10d
movabs r11, 0x4924924924924925
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
shr rax, 2
mul r11
shr rdx, 1
imul rax, rdx, 0xffffffffffffffe4
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1c], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x20
jne 0x140215030
mov dword [0x140383d90], 1
add rsp, 8
pop rsi
ret
Function at 0x140215070
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140383dd8], 1
je 0x1402150bc
xor eax, eax
nop dword [rax]
mov ecx, eax
imul rcx, rcx, 0x38e38e39
shr rcx, 0x22
add ecx, ecx
lea r9d, [rcx + rcx*8]
movzx r10d, byte [r8 + rax + 0x12]
mov ecx, eax
sub ecx, r9d
movsxd rcx, ecx
xor r10b, byte [r8 + rcx]
mov byte [rdx + rax], r10b
add rax, 1
cmp eax, 0x41
jne 0x140215080
mov dword [0x140383dd8], 1
pop rax
ret

Function at 0x1402150c0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383de4], 1
je 0x140215126
mov r9, rdx
mov ecx, 0x1b
xor r10d, r10d
movabs r11, 0x97b425ed097b425f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe5
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1b], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x23
jne 0x1402150f0
mov dword [0x140383de4], 1
add rsp, 8
pop rsi
ret

Function at 0x140215130
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383df4], 1
je 0x14021519c
mov r9, rdx
mov ecx, 0x18
xor r10d, r10d
movabs r11, 0xaaaaaaaaaaaaaaab
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 1
and rdx, 0xfffffffffffffff8
lea rax, [rdx + rdx*2]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x18], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x22
jne 0x140215160
mov dword [0x140383df4], 1
add rsp, 8
pop rsi
ret

Function at 0x1402151b0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140383e04], 1
je 0x1402151e0
xor eax, eax
nop dword [rax]
movzx ecx, byte [r8 + rax + 0x10]
xor cl, byte [r8 + rax]
mov byte [rdx + rax], cl
add rax, 1
cmp eax, 0xc
jne 0x1402151c0
mov dword [0x140383e04], 1
pop rax
ret

Function at 0x1402151f0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383e14], 1
je 0x140215256
mov r9, rdx
mov ecx, reloc.WS2_32.dll_send
xor r10d, r10d
movabs r11, 0xd79435e50d79435f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x13], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1f
jne 0x140215220
mov dword [0x140383e14], 1
add rsp, 8
pop rsi
ret

Function at 0x140215260
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383e28], 1
je 0x1402152c6
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x2e8ba2e8ba2e8ba3
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
imul rax, rdx, 0xffffffffffffffea
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x16], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x26
jne 0x140215290
mov dword [0x140383e28], 1
add rsp, 8
pop rsi
ret
Function at 0x1402152d0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383e38], 1
je 0x140215342
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x8618618618618619
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffeb
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x15], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x20
jne 0x140215300
mov dword [0x140383e38], 1
add rsp, 8
pop rsi
ret

Function at 0x140215350
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383e48], 1
je 0x1402153b6
mov r9, rdx
mov ecx, reloc.WS2_32.dll_send
xor r10d, r10d
movabs r11, 0xd79435e50d79435f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x13], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1f
jne 0x140215380
mov dword [0x140383e48], 1
add rsp, 8
pop rsi
ret

Function at 0x1402153c0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383e5c], 1
je 0x140215432
mov r9, rdx
mov ecx, reloc.WS2_32.dll_socket
xor r10d, r10d
movabs r11, 0x642c8590b21642c9
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe9
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x17], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x24
jne 0x1402153f0
mov dword [0x140383e5c], 1
add rsp, 8
pop rsi
ret

Function at 0x140215440
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383e6c], 1
je 0x1402154ad
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xe38e38e38e38e38f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
and rdx, 0xfffffffffffffffe
lea rax, [rdx + rdx*8]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x12], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1d
jne 0x140215470
mov dword [0x140383e6c], 1
add rsp, 8
pop rsi
ret

Function at 0x1402154c0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383e7c], 1
je 0x140215526
mov r9, rdx
mov ecx, 0x1b
xor r10d, r10d
movabs r11, 0x97b425ed097b425f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe5
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1b], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x27
jne 0x1402154f0
mov dword [0x140383e7c], 1
add rsp, 8
pop rsi
ret
Function at 0x140215530
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383e94], 1
je 0x14021559f
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xf0f0f0f0f0f0f0f1
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
mov rax, rdx
shl rax, 4
add rax, rdx
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x11], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x22
jne 0x140215560
mov dword [0x140383e94], 1
add rsp, 8
pop rsi
ret

Function at 0x1402155b0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383ea8], 1
je 0x140215619
mov r9, rdx
mov ecx, 0x1c
xor r10d, r10d
movabs r11, 0x4924924924924925
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
shr rax, 2
mul r11
shr rdx, 1
imul rax, rdx, 0xffffffffffffffe4
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1c], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x29
jne 0x1402155e0
mov dword [0x140383ea8], 1
add rsp, 8
pop rsi
ret

Function at 0x140215620
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383eb8], 1
je 0x14021568c
mov r9, rdx
mov ecx, 0x18
xor r10d, r10d
movabs r11, 0xaaaaaaaaaaaaaaab
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 1
and rdx, 0xfffffffffffffff8
lea rax, [rdx + rdx*2]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x18], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x24
jne 0x140215650
mov dword [0x140383eb8], 1
add rsp, 8
pop rsi
ret

Function at 0x1402156a0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140383ecc], 1
je 0x1402156d0
xor eax, eax
nop dword [rax]
movzx ecx, byte [r8 + rax + 0x10]
xor cl, byte [r8 + rax]
mov byte [rdx + rax], cl
add rax, 1
cmp eax, 0xd
jne 0x1402156b0
mov dword [0x140383ecc], 1
pop rax
ret

Function at 0x1402156e0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140383ee0], 1
je 0x140215710
xor eax, eax
nop dword [rax]
movzx ecx, byte [r8 + rax + 0x10]
xor cl, byte [r8 + rax]
mov byte [rdx + rax], cl
add rax, 1
cmp eax, 0xd
jne 0x1402156f0
mov dword [0x140383ee0], 1
pop rax
ret

Function at 0x140215720
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383ef0], 1
je 0x140215789
mov r9, rdx
mov ecx, 0x1c
xor r10d, r10d
movabs r11, 0x4924924924924925
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
shr rax, 2
mul r11
shr rdx, 1
imul rax, rdx, 0xffffffffffffffe4
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1c], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x26
jne 0x140215750
mov dword [0x140383ef0], 1
add rsp, 8
pop rsi
ret
Function at 0x140215790
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383f00], 1
je 0x1402157f6
mov r9, rdx
mov ecx, 0x1b
xor r10d, r10d
movabs r11, 0x97b425ed097b425f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe5
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1b], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x27
jne 0x1402157c0
mov dword [0x140383f00], 1
add rsp, 8
pop rsi
ret

Function at 0x140215800
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383f10], 1
je 0x140215869
mov r9, rdx
mov ecx, 0x1c
xor r10d, r10d
movabs r11, 0x4924924924924925
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
shr rax, 2
mul r11
shr rdx, 1
imul rax, rdx, 0xffffffffffffffe4
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1c], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x26
jne 0x140215830
mov dword [0x140383f10], 1
add rsp, 8
pop rsi
ret

Function at 0x140215870
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140383f20], 1
je 0x1402158a0
xor eax, eax
nop dword [rax]
movzx ecx, byte [r8 + rax + 0x10]
xor cl, byte [r8 + rax]
mov byte [rdx + rax], cl
add rax, 1
cmp eax, 0xb
jne 0x140215880
mov dword [0x140383f20], 1
pop rax
ret

Function at 0x1402158b0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383f28], 1
je 0x140215916
mov r9, rdx
mov ecx, 0x1e
xor r10d, r10d
movabs r11, 0x8888888888888889
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe2
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1e], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x20
jne 0x1402158e0
mov dword [0x140383f28], 1
add rsp, 8
pop rsi
ret

Function at 0x140215920
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383f38], 1
je 0x140215986
mov r9, rdx
mov ecx, reloc.WS2_32.dll_send
xor r10d, r10d
movabs r11, 0xd79435e50d79435f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x13], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1c
jne 0x140215950
mov dword [0x140383f38], 1
add rsp, 8
pop rsi
ret

Function at 0x140215990
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383f48], 1
je 0x140215a02
mov r9, rdx
mov ecx, 0x19
xor r10d, r10d
movabs r11, 0x47ae147ae147ae15
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe7
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x19], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x23
jne 0x1402159c0
mov dword [0x140383f48], 1
add rsp, 8
pop rsi
ret