joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14011dc30
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403777d4], 1
je 0x14011dca2
mov r9, rdx
mov ecx, 0x1d
xor r10d, r10d
movabs r11, 0x1a7b9611a7b9611b
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe3
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1d], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x28
jne 0x14011dc60
mov dword [0x1403777d4], 1
add rsp, 8
pop rsi
ret

Function at 0x14011dcb0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403777e4], 1
je 0x14011dd1d
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0xcccccccccccccccd
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
and rdx, 0xfffffffffffffffc
lea rax, [rdx + rdx*4]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x14], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x20
jne 0x14011dce0
mov dword [0x1403777e4], 1
add rsp, 8
pop rsi
ret

Function at 0x14011dd30
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403777f8], 1
je 0x14011dda2
mov r9, rdx
mov ecx, 0x1d
xor r10d, r10d
movabs r11, 0x1a7b9611a7b9611b
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe3
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1d], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x2b
jne 0x14011dd60
mov dword [0x1403777f8], 1
add rsp, 8
pop rsi
ret

Function at 0x14011ddb0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377800], 1
je 0x14011de16
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x2e8ba2e8ba2e8ba3
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
imul rax, rdx, 0xffffffffffffffea
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x16], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x18
jne 0x14011dde0
mov dword [0x140377800], 1
add rsp, 8
pop rsi
ret

Function at 0x14011de20
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377808], 1
je 0x14011de89
mov r9, rdx
mov ecx, 0x1c
xor r10d, r10d
movabs r11, 0x4924924924924925
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
shr rax, 2
mul r11
shr rdx, 1
imul rax, rdx, 0xffffffffffffffe4
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1c], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x20
jne 0x14011de50
mov dword [0x140377808], 1
add rsp, 8
pop rsi
ret
Function at 0x14011de90
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377860], 1
je 0x14011def6
mov r9, rdx
mov ecx, 0x1a
xor r10d, r10d
movabs r11, 0x4ec4ec4ec4ec4ec5
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
imul rax, rdx, 0xffffffffffffffe6
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1a], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x2c
jne 0x14011dec0
mov dword [0x140377860], 1
add rsp, 8
pop rsi
ret

Function at 0x14011df00
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140377880], 1
je 0x14011df52
mov r9, rdx
xor ecx, ecx
movabs r10, 0x2e8ba2e8ba2e8ba3
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 2
imul eax, edx, 0xffffffea
movzx edx, byte [r8 + rcx + 0x16]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x1c
jne 0x14011df20
mov dword [0x140377880], 1
pop rax
ret

Function at 0x14011df60
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403778a0], 1
je 0x14011dfd2
mov r9, rdx
mov ecx, 0x1d
xor r10d, r10d
movabs r11, 0x1a7b9611a7b9611b
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe3
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1d], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x39
jne 0x14011df90
mov dword [0x1403778a0], 1
add rsp, 8
pop rsi
ret

Function at 0x14011dfe0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403778b4], 1
je 0x14011e046
mov r9, rdx
mov ecx, 0x1a
xor r10d, r10d
movabs r11, 0x4ec4ec4ec4ec4ec5
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
imul rax, rdx, 0xffffffffffffffe6
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1a], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x28
jne 0x14011e010
mov dword [0x1403778b4], 1
add rsp, 8
pop rsi
ret

Function at 0x1401bbbf0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037ec00], 1
je 0x1401bbc56
mov r9, rdx
mov ecx, 0x1a
xor r10d, r10d
movabs r11, 0x4ec4ec4ec4ec4ec5
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
imul rax, rdx, 0xffffffffffffffe6
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1a], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x30
jne 0x1401bbc20
mov dword [0x14037ec00], 1
add rsp, 8
pop rsi
ret

Function at 0x1401bbc60
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037ec08], 1
je 0x1401bbcc6
mov r9, rdx
mov ecx, 0x1e
xor r10d, r10d
movabs r11, 0x8888888888888889
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe2
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1e], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x21
jne 0x1401bbc90
mov dword [0x14037ec08], 1
add rsp, 8
pop rsi
ret
Function at 0x1401bbcd0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037ec18], 1
je 0x1401bbd48
mov r9, rdx
mov ecx, 0x1f
xor r10d, r10d
movabs r11, 0x842108421084211
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
mov rdx, rax
shl rdx, 5
sub rax, rdx
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1f], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x2a
jne 0x1401bbd00
mov dword [0x14037ec18], 1
add rsp, 8
pop rsi
ret

Function at 0x1401bbd50
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037ec24], 1
je 0x1401bbdc2
mov r9, rdx
mov ecx, reloc.WS2_32.dll_socket
xor r10d, r10d
movabs r11, 0x642c8590b21642c9
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe9
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x17], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1c
jne 0x1401bbd80
mov dword [0x14037ec24], 1
add rsp, 8
pop rsi
ret

Function at 0x1401bbdd0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037ec30], 1
je 0x1401bbe3f
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xf0f0f0f0f0f0f0f1
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
mov rax, rdx
shl rax, 4
add rax, rdx
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x11], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x16
jne 0x1401bbe00
mov dword [0x14037ec30], 1
add rsp, 8
pop rsi
ret

Function at 0x1401bbe50
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037ec3c], 1
je 0x1401bbebd
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xe38e38e38e38e38f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
and rdx, 0xfffffffffffffffe
lea rax, [rdx + rdx*8]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x12], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x17
jne 0x1401bbe80
mov dword [0x14037ec3c], 1
add rsp, 8
pop rsi
ret

Function at 0x1401bbed0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037ec48], 1
je 0x1401bbf42
mov r9, rdx
mov ecx, 0x1d
xor r10d, r10d
movabs r11, 0x1a7b9611a7b9611b
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe3
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1d], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x22
jne 0x1401bbf00
mov dword [0x14037ec48], 1
add rsp, 8
pop rsi
ret
Function at 0x1401bbf50
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037ec54], 1
je 0x1401bbfb6
mov r9, rdx
mov ecx, reloc.WS2_32.dll_send
xor r10d, r10d
movabs r11, 0xd79435e50d79435f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x13], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x18
jne 0x1401bbf80
mov dword [0x14037ec54], 1
add rsp, 8
pop rsi
ret

Function at 0x1401bbfc0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037ec60], 1
je 0x1401bc026
mov r9, rdx
mov ecx, 0x1e
xor r10d, r10d
movabs r11, 0x8888888888888889
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe2
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1e], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x23
jne 0x1401bbff0
mov dword [0x14037ec60], 1
add rsp, 8
pop rsi
ret

Function at 0x1401bc030
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037ec6c], 1
je 0x1401bc09c
mov r9, rdx
mov ecx, 0x18
xor r10d, r10d
movabs r11, 0xaaaaaaaaaaaaaaab
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 1
and rdx, 0xfffffffffffffff8
lea rax, [rdx + rdx*2]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x18], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1d
jne 0x1401bc060
mov dword [0x14037ec6c], 1
add rsp, 8
pop rsi
ret

Function at 0x1401bc0b0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037ec78], 1
je 0x1401bc116
mov r9, rdx
mov ecx, reloc.WS2_32.dll_send
xor r10d, r10d
movabs r11, 0xd79435e50d79435f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x13], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x18
jne 0x1401bc0e0
mov dword [0x14037ec78], 1
add rsp, 8
pop rsi
ret

Function at 0x1401bc120
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037ec84], 1
je 0x1401bc192
mov r9, rdx
mov ecx, 0x19
xor r10d, r10d
movabs r11, 0x47ae147ae147ae15
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe7
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x19], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1e
jne 0x1401bc150
mov dword [0x14037ec84], 1
add rsp, 8
pop rsi
ret
Function at 0x1401bc1a0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037ec90], 1
je 0x1401bc218
mov r9, rdx
mov ecx, 0x1f
xor r10d, r10d
movabs r11, 0x842108421084211
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
mov rdx, rax
shl rdx, 5
sub rax, rdx
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1f], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x24
jne 0x1401bc1d0
mov dword [0x14037ec90], 1
add rsp, 8
pop rsi
ret

Function at 0x1401bc220
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
push rax
cmp dword [0x14037f980], 1
je 0x1401bc27c
xor eax, eax
mov r9d, 0xcccccccd
nop word cs:[rax + rax]
nop dword [rax]
mov ecx, eax
imul rcx, r9
shr rcx, 0x24
shl ecx, 2
lea r10d, [rcx + rcx*4]
movzx r11d, byte [r8 + rax + 0x14]
mov ecx, eax
sub ecx, r10d
movsxd rcx, ecx
xor r11b, byte [r8 + rcx]
mov byte [rdx + rax], r11b
add rax, 1
cmp eax, 0xcdf
jne 0x1401bc240
mov dword [0x14037f980], 1
pop rax
ret

Function at 0x1401bc280
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140382860], 1
je 0x1401bc2c8
xor eax, eax
nop dword [rax]
mov ecx, eax
imul rcx, rcx, 0x51eb851f
shr rcx, 0x23
imul ecx, ecx, 0xffffffe7
movzx r9d, byte [r8 + rax + 0x19]
add ecx, eax
movsxd rcx, ecx
xor r9b, byte [r8 + rcx]
mov byte [rdx + rax], r9b
add rax, 1
cmp eax, 0x2ecd
jne 0x1401bc290
mov dword [0x140382860], 1
pop rax
ret

Function at 0x1401d13e0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140383550], 1
je 0x1401d1435
xor eax, eax
mov r9d, 0x88888889
nop word cs:[rax + rax]
nop dword [rax]
mov ecx, eax
imul rcx, r9
shr rcx, 0x24
imul ecx, ecx, 0xffffffe2
movzx r10d, byte [r8 + rax + 0x1e]
add ecx, eax
movsxd rcx, ecx
xor r10b, byte [r8 + rcx]
mov byte [rdx + rax], r10b
add rax, 1
cmp eax, 0x2de
jne 0x1401d1400
mov dword [0x140383550], 1
pop rax
ret

Function at 0x1401d1440
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14038355c], 1
je 0x1401d14b2
mov r9, rdx
mov ecx, reloc.WS2_32.dll_socket
xor r10d, r10d
movabs r11, 0x642c8590b21642c9
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe9
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x17], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1e
jne 0x1401d1470
mov dword [0x14038355c], 1
add rsp, 8
pop rsi
ret

Function at 0x1401d14c0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383568], 1
je 0x1401d1529
mov r9, rdx
mov ecx, 0x1c
xor r10d, r10d
movabs r11, 0x4924924924924925
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
shr rax, 2
mul r11
shr rdx, 1
imul rax, rdx, 0xffffffffffffffe4
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1c], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x21
jne 0x1401d14f0
mov dword [0x140383568], 1
add rsp, 8
pop rsi
ret
Function at 0x1401d1530
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383578], 1
je 0x1401d1599
mov r9, rdx
mov ecx, 0x1c
xor r10d, r10d
movabs r11, 0x4924924924924925
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
shr rax, 2
mul r11
shr rdx, 1
imul rax, rdx, 0xffffffffffffffe4
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1c], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x25
jne 0x1401d1560
mov dword [0x140383578], 1
add rsp, 8
pop rsi
ret

Function at 0x1401d15a0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383588], 1
je 0x1401d1606
mov r9, rdx
mov ecx, reloc.WS2_32.dll_send
xor r10d, r10d
movabs r11, 0xd79435e50d79435f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x13], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1c
jne 0x1401d15d0
mov dword [0x140383588], 1
add rsp, 8
pop rsi
ret

Function at 0x1401d1610
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383594], 1
je 0x1401d1676
mov r9, rdx
mov ecx, reloc.WS2_32.dll_send
xor r10d, r10d
movabs r11, 0xd79435e50d79435f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x13], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x19
jne 0x1401d1640
mov dword [0x140383594], 1
add rsp, 8
pop rsi
ret

Function at 0x1401d1680
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x14038372c], 1
je 0x1401d16d5
xor eax, eax
mov r9d, 0xb21642c9
nop word cs:[rax + rax]
nop dword [rax]
mov ecx, eax
imul rcx, r9
shr rcx, 0x24
imul ecx, ecx, 0xffffffe9
movzx r10d, byte [r8 + rax + 0x17]
add ecx, eax
movsxd rcx, ecx
xor r10b, byte [r8 + rcx]
mov byte [rdx + rax], r10b
add rax, 1
cmp eax, 0x192
jne 0x1401d16a0
mov dword [0x14038372c], 1
pop rax
ret

Function at 0x1401d16e0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383738], 1
je 0x1401d1752
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x8618618618618619
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffeb
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x15], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1c
jne 0x1401d1710
mov dword [0x140383738], 1
add rsp, 8
pop rsi
ret

Function at 0x1401d1760
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140383748], 1
je 0x1401d1790
xor eax, eax
nop dword [rax]
movzx ecx, byte [r8 + rax + 0x10]
xor cl, byte [r8 + rax]
mov byte [rdx + rax], cl
add rax, 1
cmp eax, 9
jne 0x1401d1770
mov dword [0x140383748], 1
pop rax
ret
Function at 0x1402141b0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383870], 1
je 0x140214216
mov r9, rdx
mov ecx, 0x1e
xor r10d, r10d
movabs r11, 0x8888888888888889
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe2
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1e], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x2c
jne 0x1402141e0
mov dword [0x140383870], 1
add rsp, 8
pop rsi
ret

Function at 0x140214220
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383878], 1
je 0x140214286
mov r9, rdx
mov ecx, 0x1a
xor r10d, r10d
movabs r11, 0x4ec4ec4ec4ec4ec5
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
imul rax, rdx, 0xffffffffffffffe6
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1a], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1c
jne 0x140214250
mov dword [0x140383878], 1
add rsp, 8
pop rsi
ret

Function at 0x140214290
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383880], 1
je 0x1402142f9
mov r9, rdx
mov ecx, 0x1c
xor r10d, r10d
movabs r11, 0x4924924924924925
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
shr rax, 2
mul r11
shr rdx, 1
imul rax, rdx, 0xffffffffffffffe4
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1c], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1f
jne 0x1402142c0
mov dword [0x140383880], 1
add rsp, 8
pop rsi
ret

Function at 0x140214300
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14038388c], 1
je 0x140214372
mov r9, rdx
mov ecx, reloc.WS2_32.dll_socket
xor r10d, r10d
movabs r11, 0x642c8590b21642c9
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe9
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x17], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1c
jne 0x140214330
mov dword [0x14038388c], 1
add rsp, 8
pop rsi
ret

Function at 0x140214380
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403838b0], 1
je 0x1402143b6
xor ecx, ecx
nop dword [rax]
movzx r9d, byte [r8 + rcx + 0x10]
mov eax, ecx
and eax, 0xf
xor r9b, byte [r8 + rax]
mov byte [rdx + rcx], r9b
add rcx, 1
cmp ecx, 0x1d
jne 0x140214390
mov dword [0x1403838b0], 1
pop rax
ret

Function at 0x1402143c0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403838d8], 1
je 0x140214415
mov r9, rdx
xor ecx, ecx
movabs r10, 0x4924924924924925
nop dword [rax]
mov rax, rcx
shr rax, 2
mul r10
shr rdx, 1
imul eax, edx, 0xffffffe4
movzx edx, byte [r8 + rcx + 0x1c]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x22
jne 0x1402143e0
mov dword [0x1403838d8], 1
pop rax
ret
Function at 0x140214420
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140383904], 1
je 0x140214472
mov r9, rdx
xor ecx, ecx
movabs r10, 0xd79435e50d79435f
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
imul eax, edx, 0xffffffed
movzx edx, byte [r8 + rcx + 0x13]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x26
jne 0x140214440
mov dword [0x140383904], 1
pop rax
ret

Function at 0x140214480
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140383914], 1
je 0x1402144b0
xor eax, eax
nop dword [rax]
movzx ecx, byte [r8 + rax + 0x10]
xor cl, byte [r8 + rax]
mov byte [rdx + rax], cl
add rax, 1
cmp eax, 0xc
jne 0x140214490
mov dword [0x140383914], 1
pop rax
ret

Function at 0x1402144c0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383924], 1
je 0x140214526
mov r9, rdx
mov ecx, 0x1b
xor r10d, r10d
movabs r11, 0x97b425ed097b425f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe5
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1b], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x25
jne 0x1402144f0
mov dword [0x140383924], 1
add rsp, 8
pop rsi
ret

Function at 0x140214530
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383930], 1
je 0x1402145a8
mov r9, rdx
mov ecx, 0x1f
xor r10d, r10d
movabs r11, 0x842108421084211
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
mov rdx, rax
shl rdx, 5
sub rax, rdx
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1f], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x25
jne 0x140214560
mov dword [0x140383930], 1
add rsp, 8
pop rsi
ret

Function at 0x1402145b0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140383940], 1
je 0x140214622
mov r9, rdx
mov ecx, reloc.WS2_32.dll_socket
xor r10d, r10d
movabs r11, 0x642c8590b21642c9
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe9
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x17], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x23
jne 0x1402145e0
mov dword [0x140383940], 1
add rsp, 8
pop rsi
ret

Function at 0x140214630
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x14038396c], 1
je 0x14021468e
mov r9, rdx
xor ecx, ecx
movabs r10, 0x47ae147ae147ae15
nop dword [rax]
mov rax, rcx
mul r10
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul eax, eax, 0xffffffe7
movzx edx, byte [r8 + rcx + 0x19]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x25
jne 0x140214650
mov dword [0x14038396c], 1
pop rax
ret