joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140031e30
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403745b4], 1
je 0x140031e9f
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xf0f0f0f0f0f0f0f1
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
mov rax, rdx
shl rax, 4
add rax, rdx
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x11], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x15
jne 0x140031e60
mov dword [0x1403745b4], 1
add rsp, 8
pop rsi
ret

Function at 0x140031eb0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403745bc], 1
je 0x140031f1c
mov r9, rdx
mov ecx, 0x18
xor r10d, r10d
movabs r11, 0xaaaaaaaaaaaaaaab
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 1
and rdx, 0xfffffffffffffff8
lea rax, [rdx + rdx*2]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x18], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1c
jne 0x140031ee0
mov dword [0x1403745bc], 1
add rsp, 8
pop rsi
ret

Function at 0x140031f30
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403745c4], 1
je 0x140031f9f
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xf0f0f0f0f0f0f0f1
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
mov rax, rdx
shl rax, 4
add rax, rdx
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x11], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x15
jne 0x140031f60
mov dword [0x1403745c4], 1
add rsp, 8
pop rsi
ret

Function at 0x140031fb0
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403745e4], 1
je 0x140032009
mov r9, rdx
xor ecx, ecx
movabs r10, 0xcccccccccccccccd
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
shl edx, 2
lea r11d, [rdx + rdx*4]
movzx edx, byte [r8 + rcx + 0x14]
mov eax, ecx
sub eax, r11d
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x1a
jne 0x140031fd0
mov dword [0x1403745e4], 1
pop rax
ret

Function at 0x140032010
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140374608], 1
je 0x140032062
mov r9, rdx
xor ecx, ecx
movabs r10, 0x97b425ed097b425f
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
imul eax, edx, 0xffffffe5
movzx edx, byte [r8 + rcx + 0x1b]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x20
jne 0x140032030
mov dword [0x140374608], 1
pop rax
ret

Function at 0x140032070
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140374624], 1
je 0x1400320c2
mov r9, rdx
xor ecx, ecx
movabs r10, 0xd79435e50d79435f
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
imul eax, edx, 0xffffffed
movzx edx, byte [r8 + rcx + 0x13]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x18
jne 0x140032090
mov dword [0x140374624], 1
pop rax
ret
Function at 0x1400320d0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140374648], 1
je 0x140032122
mov r9, rdx
xor ecx, ecx
movabs r10, 0x97b425ed097b425f
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
imul eax, edx, 0xffffffe5
movzx edx, byte [r8 + rcx + 0x1b]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x20
jne 0x1400320f0
mov dword [0x140374648], 1
pop rax
ret

Function at 0x140032130
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140374670], 1
je 0x14003218d
xor eax, eax
mov r9d, 0xf0f0f0f1
nop word cs:[rax + rax]
nop dword [rax]
mov ecx, eax
imul rcx, r9
shr rcx, 0x24
mov r10d, ecx
shl r10d, 4
add r10d, ecx
movzx r11d, byte [r8 + rax + 0x11]
mov ecx, eax
sub ecx, r10d
movsxd rcx, ecx
xor r11b, byte [r8 + rcx]
mov byte [rdx + rax], r11b
add rax, 1
cmp eax, 0x24
jne 0x140032150
mov dword [0x140374670], 1
pop rax
ret

Function at 0x140032190
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140374690], 1
je 0x1400321e2
mov r9, rdx
xor ecx, ecx
movabs r10, 0xd79435e50d79435f
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
imul eax, edx, 0xffffffed
movzx edx, byte [r8 + rcx + 0x13]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x1a
jne 0x1400321b0
mov dword [0x140374690], 1
pop rax
ret

Function at 0x1400321f0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403746b0], 1
je 0x140032242
mov r9, rdx
xor ecx, ecx
movabs r10, 0x2e8ba2e8ba2e8ba3
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 2
imul eax, edx, 0xffffffea
movzx edx, byte [r8 + rcx + 0x16]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x1a
jne 0x140032210
mov dword [0x1403746b0], 1
pop rax
ret

Function at 0x140032250
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403746d0], 1
je 0x1400322c2
mov r9, rdx
mov ecx, 0x1d
xor r10d, r10d
movabs r11, 0x1a7b9611a7b9611b
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe3
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1d], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x38
jne 0x140032280
mov dword [0x1403746d0], 1
add rsp, 8
pop rsi
ret

Function at 0x1400322d0
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403746f0], 1
je 0x140032329
mov r9, rdx
xor ecx, ecx
movabs r10, 0xcccccccccccccccd
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
shl edx, 2
lea r11d, [rdx + rdx*4]
movzx edx, byte [r8 + rcx + 0x14]
mov eax, ecx
sub eax, r11d
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x1b
jne 0x1400322f0
mov dword [0x1403746f0], 1
pop rax
ret
Function at 0x140032330
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
push rax
cmp dword [0x14037470c], 1
je 0x140032389
mov r9, rdx
xor ecx, ecx
movabs r10, 0xcccccccccccccccd
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
shl edx, 2
lea r11d, [rdx + rdx*4]
movzx edx, byte [r8 + rcx + 0x14]
mov eax, ecx
sub eax, r11d
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x15
jne 0x140032350
mov dword [0x14037470c], 1
pop rax
ret

Function at 0x140032390
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374724], 1
je 0x1400323f6
mov r9, rdx
mov ecx, reloc.WS2_32.dll_send
xor r10d, r10d
movabs r11, 0xd79435e50d79435f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x13], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x24
jne 0x1400323c0
mov dword [0x140374724], 1
add rsp, 8
pop rsi
ret

Function at 0x140032400
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374734], 1
je 0x140032466
mov r9, rdx
mov ecx, 0x1b
xor r10d, r10d
movabs r11, 0x97b425ed097b425f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe5
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1b], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x27
jne 0x140032430
mov dword [0x140374734], 1
add rsp, 8
pop rsi
ret

Function at 0x140032470
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374748], 1
je 0x1400324dc
mov r9, rdx
mov ecx, 0x18
xor r10d, r10d
movabs r11, 0xaaaaaaaaaaaaaaab
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 1
and rdx, 0xfffffffffffffff8
lea rax, [rdx + rdx*2]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x18], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x25
jne 0x1400324a0
mov dword [0x140374748], 1
add rsp, 8
pop rsi
ret

Function at 0x1400324f0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374754], 1
je 0x140032556
mov r9, rdx
mov ecx, reloc.WS2_32.dll_send
xor r10d, r10d
movabs r11, 0xd79435e50d79435f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x13], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1a
jne 0x140032520
mov dword [0x140374754], 1
add rsp, 8
pop rsi
ret

Function at 0x140032560
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374764], 1
je 0x1400325c6
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x2e8ba2e8ba2e8ba3
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
imul rax, rdx, 0xffffffffffffffea
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x16], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1f
jne 0x140032590
mov dword [0x140374764], 1
add rsp, 8
pop rsi
ret
Function at 0x1400325d0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037476c], 1
je 0x140032636
mov r9, rdx
mov ecx, 0x1e
xor r10d, r10d
movabs r11, 0x8888888888888889
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe2
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1e], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x21
jne 0x140032600
mov dword [0x14037476c], 1
add rsp, 8
pop rsi
ret

Function at 0x140032640
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037477c], 1
je 0x1400326b8
mov r9, rdx
mov ecx, 0x1f
xor r10d, r10d
movabs r11, 0x842108421084211
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
mov rdx, rax
shl rdx, 5
sub rax, rdx
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1f], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x29
jne 0x140032670
mov dword [0x14037477c], 1
add rsp, 8
pop rsi
ret

Function at 0x1400326c0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374790], 1
je 0x140032726
mov r9, rdx
mov ecx, reloc.WS2_32.dll_send
xor r10d, r10d
movabs r11, 0xd79435e50d79435f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x13], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x20
jne 0x1400326f0
mov dword [0x140374790], 1
add rsp, 8
pop rsi
ret

Function at 0x140032730
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403747a8], 1
je 0x140032782
mov r9, rdx
xor ecx, ecx
movabs r10, 0xd79435e50d79435f
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
imul eax, edx, 0xffffffed
movzx edx, byte [r8 + rcx + 0x13]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x14
jne 0x140032750
mov dword [0x1403747a8], 1
pop rax
ret

Function at 0x140032790
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403747c0], 1
je 0x1400327e9
mov r9, rdx
xor ecx, ecx
movabs r10, 0xf0f0f0f0f0f0f0f1
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
mov eax, edx
shl eax, 4
add eax, edx
movzx r11d, byte [r8 + rcx + 0x11]
mov edx, ecx
sub edx, eax
movsxd rax, edx
xor r11b, byte [r8 + rax]
mov byte [r9 + rcx], r11b
add rcx, 1
cmp ecx, 0x13
jne 0x1400327b0
mov dword [0x1403747c0], 1
pop rax
ret

Function at 0x1400327f0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403747f0], 1
je 0x140032842
mov r9, rdx
xor ecx, ecx
movabs r10, 0x4ec4ec4ec4ec4ec5
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 3
imul eax, edx, 0xffffffe6
movzx edx, byte [r8 + rcx + 0x1a]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x2c
jne 0x140032810
mov dword [0x1403747f0], 1
pop rax
ret
Function at 0x140032850
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374814], 1
je 0x1400328b6
mov r9, rdx
mov ecx, 0x1e
xor r10d, r10d
movabs r11, 0x8888888888888889
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe2
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1e], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x3b
jne 0x140032880
mov dword [0x140374814], 1
add rsp, 8
pop rsi
ret

Function at 0x1400328c0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140374838], 1
je 0x140032919
mov r9, rdx
xor ecx, ecx
movabs r10, 0xf0f0f0f0f0f0f0f1
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
mov eax, edx
shl eax, 4
add eax, edx
movzx r11d, byte [r8 + rcx + 0x11]
mov edx, ecx
sub edx, eax
movsxd rax, edx
xor r11b, byte [r8 + rax]
mov byte [r9 + rcx], r11b
add rcx, 1
cmp ecx, 0x1e
jne 0x1400328e0
mov dword [0x140374838], 1
pop rax
ret

Function at 0x140032920
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140374848], 1
je 0x140032950
xor eax, eax
nop dword [rax]
movzx ecx, byte [r8 + rax + 0x10]
xor cl, byte [r8 + rax]
mov byte [rdx + rax], cl
add rax, 1
cmp eax, 0xa
jne 0x140032930
mov dword [0x140374848], 1
pop rax
ret

Function at 0x140032960
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374854], 1
je 0x1400329c6
mov r9, rdx
mov ecx, reloc.WS2_32.dll_send
xor r10d, r10d
movabs r11, 0xd79435e50d79435f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x13], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1b
jne 0x140032990
mov dword [0x140374854], 1
add rsp, 8
pop rsi
ret

Function at 0x1400329d0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374860], 1
je 0x140032a42
mov r9, rdx
mov ecx, reloc.WS2_32.dll_socket
xor r10d, r10d
movabs r11, 0x642c8590b21642c9
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe9
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x17], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1c
jne 0x140032a00
mov dword [0x140374860], 1
add rsp, 8
pop rsi
ret

Function at 0x140032a50
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374870], 1
je 0x140032ac2
mov r9, rdx
mov ecx, 0x19
xor r10d, r10d
movabs r11, 0x47ae147ae147ae15
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe7
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x19], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x22
jne 0x140032a80
mov dword [0x140374870], 1
add rsp, 8
pop rsi
ret
Function at 0x140032ad0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x14037487c], 1
je 0x140032b00
xor eax, eax
nop dword [rax]
movzx ecx, byte [r8 + rax + 0x10]
xor cl, byte [r8 + rax]
mov byte [rdx + rax], cl
add rax, 1
cmp eax, 8
jne 0x140032ae0
mov dword [0x14037487c], 1
pop rax
ret

Function at 0x140032b10
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374884], 1
je 0x140032b7f
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xf0f0f0f0f0f0f0f1
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
mov rax, rdx
shl rax, 4
add rax, rdx
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x11], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x15
jne 0x140032b40
mov dword [0x140374884], 1
add rsp, 8
pop rsi
ret

Function at 0x140032b90
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037488c], 1
je 0x140032bf6
mov r9, rdx
mov ecx, 0x1b
xor r10d, r10d
movabs r11, 0x97b425ed097b425f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe5
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1b], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1f
jne 0x140032bc0
mov dword [0x14037488c], 1
add rsp, 8
pop rsi
ret

Function at 0x140032c00
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403748e4], 1
je 0x140032c46
xor eax, eax
nop dword [rax]
mov ecx, eax
imul rcx, rcx, 0x51eb851f
shr rcx, 0x23
imul ecx, ecx, 0xffffffe7
movzx r9d, byte [r8 + rax + 0x19]
add ecx, eax
movsxd rcx, ecx
xor r9b, byte [r8 + rcx]
mov byte [rdx + rax], r9b
add rax, 1
cmp eax, 0x53
jne 0x140032c10
mov dword [0x1403748e4], 1
pop rax
ret

Function at 0x140032c50
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403748f8], 1
je 0x140032cbd
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0xcccccccccccccccd
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
and rdx, 0xfffffffffffffffc
lea rax, [rdx + rdx*4]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x14], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x22
jne 0x140032c80
mov dword [0x1403748f8], 1
add rsp, 8
pop rsi
ret

Function at 0x140032cd0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374910], 1
je 0x140032d36
mov r9, rdx
mov ecx, reloc.WS2_32.dll_send
xor r10d, r10d
movabs r11, 0xd79435e50d79435f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x13], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x24
jne 0x140032d00
mov dword [0x140374910], 1
add rsp, 8
pop rsi
ret
Function at 0x140032d40
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374924], 1
je 0x140032db2
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x8618618618618619
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffeb
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x15], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x22
jne 0x140032d70
mov dword [0x140374924], 1
add rsp, 8
pop rsi
ret

Function at 0x140032dc0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374934], 1
je 0x140032e26
mov r9, rdx
mov ecx, 0x1e
xor r10d, r10d
movabs r11, 0x8888888888888889
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe2
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1e], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x29
jne 0x140032df0
mov dword [0x140374934], 1
add rsp, 8
pop rsi
ret
Function at 0x1401113a0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374e04], 1
je 0x14011140f
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xf0f0f0f0f0f0f0f1
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
mov rax, rdx
shl rax, 4
add rax, rdx
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x11], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x16
jne 0x1401113d0
mov dword [0x140374e04], 1
add rsp, 8
pop rsi
ret

Function at 0x140111420
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374e18], 1
je 0x140111486
mov r9, rdx
mov ecx, 0x1a
xor r10d, r10d
movabs r11, 0x4ec4ec4ec4ec4ec5
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
imul rax, rdx, 0xffffffffffffffe6
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1a], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x27
jne 0x140111450
mov dword [0x140374e18], 1
add rsp, 8
pop rsi
ret

Function at 0x140111490
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374e28], 1
je 0x140111502
mov r9, rdx
mov ecx, 0x1d
xor r10d, r10d
movabs r11, 0x1a7b9611a7b9611b
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe3
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1d], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x26
jne 0x1401114c0
mov dword [0x140374e28], 1
add rsp, 8
pop rsi
ret

Function at 0x140111510
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374e34], 1
je 0x140111588
mov r9, rdx
mov ecx, 0x1f
xor r10d, r10d
movabs r11, 0x842108421084211
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
mov rdx, rax
shl rdx, 5
sub rax, rdx
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1f], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x27
jne 0x140111540
mov dword [0x140374e34], 1
add rsp, 8
pop rsi
ret

Function at 0x140111590
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374e40], 1
je 0x140111602
mov r9, rdx
mov ecx, reloc.WS2_32.dll_socket
xor r10d, r10d
movabs r11, 0x642c8590b21642c9
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe9
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x17], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1f
jne 0x1401115c0
mov dword [0x140374e40], 1
add rsp, 8
pop rsi
ret