joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140118cb0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376bc0], 1
je 0x140118d16
mov r9, rdx
mov ecx, 0x1e
xor r10d, r10d
movabs r11, 0x8888888888888889
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe2
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1e], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x25
jne 0x140118ce0
mov dword [0x140376bc0], 1
add rsp, 8
pop rsi
ret

Function at 0x140118d20
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376bd0], 1
je 0x140118d86
mov r9, rdx
mov ecx, 0x1a
xor r10d, r10d
movabs r11, 0x4ec4ec4ec4ec4ec5
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
imul rax, rdx, 0xffffffffffffffe6
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1a], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x23
jne 0x140118d50
mov dword [0x140376bd0], 1
add rsp, 8
pop rsi
ret

Function at 0x140118d90
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376bdc], 1
je 0x140118df6
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x2e8ba2e8ba2e8ba3
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
imul rax, rdx, 0xffffffffffffffea
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x16], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1d
jne 0x140118dc0
mov dword [0x140376bdc], 1
add rsp, 8
pop rsi
ret

Function at 0x140118e00
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140376c08], 1
je 0x140118e55
mov r9, rdx
xor ecx, ecx
movabs r10, 0x4924924924924925
nop dword [rax]
mov rax, rcx
shr rax, 2
mul r10
shr rdx, 1
imul eax, edx, 0xffffffe4
movzx edx, byte [r8 + rcx + 0x1c]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x25
jne 0x140118e20
mov dword [0x140376c08], 1
pop rax
ret

Function at 0x140118e60
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376c10], 1
je 0x140118ed2
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x8618618618618619
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffeb
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x15], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x17
jne 0x140118e90
mov dword [0x140376c10], 1
add rsp, 8
pop rsi
ret

Function at 0x140118ee0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376c18], 1
je 0x140118f4c
mov r9, rdx
mov ecx, 0x18
xor r10d, r10d
movabs r11, 0xaaaaaaaaaaaaaaab
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 1
and rdx, 0xfffffffffffffff8
lea rax, [rdx + rdx*2]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x18], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1a
jne 0x140118f10
mov dword [0x140376c18], 1
add rsp, 8
pop rsi
ret
Function at 0x140118f60
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140376c4c], 1
je 0x140118fb2
mov r9, rdx
xor ecx, ecx
movabs r10, 0x97b425ed097b425f
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
imul eax, edx, 0xffffffe5
movzx edx, byte [r8 + rcx + 0x1b]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x2d
jne 0x140118f80
mov dword [0x140376c4c], 1
pop rax
ret

Function at 0x140118fc0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140376c90], 1
je 0x140119022
mov r9, rdx
xor ecx, ecx
movabs r10, 0x842108421084211
nop dword [rax]
mov rax, rcx
mul r10
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
mov edx, eax
shl edx, 5
sub eax, edx
movzx edx, byte [r8 + rcx + 0x1f]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x3e
jne 0x140118fe0
mov dword [0x140376c90], 1
pop rax
ret

Function at 0x140119030
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140376cd4], 1
je 0x140119091
xor eax, eax
mov r9d, 0xaf286bcb
nop word cs:[rax + rax]
nop dword [rax]
mov r10d, eax
imul r10, r9
shr r10, 0x20
mov ecx, eax
sub ecx, r10d
shr ecx, 1
add ecx, r10d
shr ecx, 4
imul ecx, ecx, 0xffffffed
movzx r10d, byte [r8 + rax + 0x13]
add ecx, eax
movsxd rcx, ecx
xor r10b, byte [r8 + rcx]
mov byte [rdx + rax], r10b
add rax, 1
cmp eax, 0x40
jne 0x140119050
mov dword [0x140376cd4], 1
pop rax
ret

Function at 0x1401190a0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376cf0], 1
je 0x140119112
mov r9, rdx
mov ecx, reloc.WS2_32.dll_socket
xor r10d, r10d
movabs r11, 0x642c8590b21642c9
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe9
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x17], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x2e
jne 0x1401190d0
mov dword [0x140376cf0], 1
add rsp, 8
pop rsi
ret

Function at 0x140119120
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140376d28], 1
je 0x140119181
xor eax, eax
mov r9d, 0xaf286bcb
nop word cs:[rax + rax]
nop dword [rax]
mov r10d, eax
imul r10, r9
shr r10, 0x20
mov ecx, eax
sub ecx, r10d
shr ecx, 1
add ecx, r10d
shr ecx, 4
imul ecx, ecx, 0xffffffed
movzx r10d, byte [r8 + rax + 0x13]
add ecx, eax
movsxd rcx, ecx
xor r10b, byte [r8 + rcx]
mov byte [rdx + rax], r10b
add rax, 1
cmp eax, 0x32
jne 0x140119140
mov dword [0x140376d28], 1
pop rax
ret

Function at 0x140119190
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140376d60], 1
je 0x1401191f1
xor eax, eax
mov r9d, 0xaf286bcb
nop word cs:[rax + rax]
nop dword [rax]
mov r10d, eax
imul r10, r9
shr r10, 0x20
mov ecx, eax
sub ecx, r10d
shr ecx, 1
add ecx, r10d
shr ecx, 4
imul ecx, ecx, 0xffffffed
movzx r10d, byte [r8 + rax + 0x13]
add ecx, eax
movsxd rcx, ecx
xor r10b, byte [r8 + rcx]
mov byte [rdx + rax], r10b
add rax, 1
cmp eax, 0x33
jne 0x1401191b0
mov dword [0x140376d60], 1
pop rax
ret
Function at 0x140119200
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140376d70], 1
je 0x140119230
xor eax, eax
nop dword [rax]
movzx ecx, byte [r8 + rax + 0x10]
xor cl, byte [r8 + rax]
mov byte [rdx + rax], cl
add rax, 1
cmp eax, 0xb
jne 0x140119210
mov dword [0x140376d70], 1
pop rax
ret

Function at 0x140119240
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376d84], 1
je 0x1401192b2
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x8618618618618619
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffeb
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x15], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x22
jne 0x140119270
mov dword [0x140376d84], 1
add rsp, 8
pop rsi
ret

Function at 0x1401192c0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376d98], 1
je 0x14011932d
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0xcccccccccccccccd
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
and rdx, 0xfffffffffffffffc
lea rax, [rdx + rdx*4]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x14], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x21
jne 0x1401192f0
mov dword [0x140376d98], 1
add rsp, 8
pop rsi
ret

Function at 0x140119340
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376db0], 1
je 0x1401193a6
mov r9, rdx
mov ecx, 0x1b
xor r10d, r10d
movabs r11, 0x97b425ed097b425f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe5
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1b], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x2d
jne 0x140119370
mov dword [0x140376db0], 1
add rsp, 8
pop rsi
ret

Function at 0x1401193b0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376dbc], 1
je 0x140119416
mov r9, rdx
mov ecx, 0x1b
xor r10d, r10d
movabs r11, 0x97b425ed097b425f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe5
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1b], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x23
jne 0x1401193e0
mov dword [0x140376dbc], 1
add rsp, 8
pop rsi
ret

Function at 0x140119420
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376dc8], 1
je 0x140119486
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x2e8ba2e8ba2e8ba3
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
imul rax, rdx, 0xffffffffffffffea
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x16], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1e
jne 0x140119450
mov dword [0x140376dc8], 1
add rsp, 8
pop rsi
ret
Function at 0x140119490
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140376e00], 1
je 0x1401194e2
mov r9, rdx
xor ecx, ecx
movabs r10, 0x8888888888888889
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
imul eax, edx, 0xffffffe2
movzx edx, byte [r8 + rcx + 0x1e]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x32
jne 0x1401194b0
mov dword [0x140376e00], 1
pop rax
ret

Function at 0x1401194f0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376e0c], 1
je 0x140119568
mov r9, rdx
mov ecx, 0x1f
xor r10d, r10d
movabs r11, 0x842108421084211
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
mov rdx, rax
shl rdx, 5
sub rax, rdx
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1f], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x27
jne 0x140119520
mov dword [0x140376e0c], 1
add rsp, 8
pop rsi
ret

Function at 0x140119570
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376e20], 1
je 0x1401195e2
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x8618618618618619
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffeb
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x15], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x23
jne 0x1401195a0
mov dword [0x140376e20], 1
add rsp, 8
pop rsi
ret

Function at 0x1401195f0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376e2c], 1
je 0x140119662
mov r9, rdx
mov ecx, 0x1d
xor r10d, r10d
movabs r11, 0x1a7b9611a7b9611b
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe3
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1d], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x22
jne 0x140119620
mov dword [0x140376e2c], 1
add rsp, 8
pop rsi
ret

Function at 0x140119670
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376e3c], 1
je 0x1401196e2
mov r9, rdx
mov ecx, 0x1d
xor r10d, r10d
movabs r11, 0x1a7b9611a7b9611b
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe3
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1d], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x29
jne 0x1401196a0
mov dword [0x140376e3c], 1
add rsp, 8
pop rsi
ret
Function at 0x1401196f0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376e54], 1
je 0x140119756
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x2e8ba2e8ba2e8ba3
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
imul rax, rdx, 0xffffffffffffffea
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x16], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x28
jne 0x140119720
mov dword [0x140376e54], 1
add rsp, 8
pop rsi
ret

Function at 0x140119760
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376e70], 1
je 0x1401197c6
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x2e8ba2e8ba2e8ba3
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
imul rax, rdx, 0xffffffffffffffea
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x16], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x2c
jne 0x140119790
mov dword [0x140376e70], 1
add rsp, 8
pop rsi
ret

Function at 0x1401197d0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140376e9c], 1
je 0x14011981c
xor eax, eax
nop dword [rax]
mov ecx, eax
imul rcx, rcx, 0x38e38e39
shr rcx, 0x22
add ecx, ecx
lea r9d, [rcx + rcx*8]
movzx r10d, byte [r8 + rax + 0x12]
mov ecx, eax
sub ecx, r9d
movsxd rcx, ecx
xor r10b, byte [r8 + rcx]
mov byte [rdx + rax], r10b
add rax, 1
cmp eax, 0x25
jne 0x1401197e0
mov dword [0x140376e9c], 1
pop rax
ret

Function at 0x140119820
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140376fe8], 1
je 0x14011986e
xor eax, eax
nop dword [rax]
mov ecx, eax
imul rcx, rcx, 0x38e38e39
shr rcx, 0x22
add ecx, ecx
lea r9d, [rcx + rcx*8]
movzx r10d, byte [r8 + rax + 0x12]
mov ecx, eax
sub ecx, r9d
movsxd rcx, ecx
xor r10b, byte [r8 + rcx]
mov byte [rdx + rax], r10b
add rax, 1
cmp eax, 0x145
jne 0x140119830
mov dword [0x140376fe8], 1
pop rax
ret

Function at 0x140119870
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x14037700c], 1
je 0x1401198c9
mov r9, rdx
xor ecx, ecx
movabs r10, 0xf0f0f0f0f0f0f0f1
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
mov eax, edx
shl eax, 4
add eax, edx
movzx r11d, byte [r8 + rcx + 0x11]
mov edx, ecx
sub edx, eax
movsxd rax, edx
xor r11b, byte [r8 + rax]
mov byte [r9 + rcx], r11b
add rcx, 1
cmp ecx, 0x1f
jne 0x140119890
mov dword [0x14037700c], 1
pop rax
ret

Function at 0x1401198d0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037701c], 1
je 0x140119942
mov r9, rdx
mov ecx, 0x19
xor r10d, r10d
movabs r11, 0x47ae147ae147ae15
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe7
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x19], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x22
jne 0x140119900
mov dword [0x14037701c], 1
add rsp, 8
pop rsi
ret
Function at 0x140119950
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377028], 1
je 0x1401199b6
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x2e8ba2e8ba2e8ba3
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
imul rax, rdx, 0xffffffffffffffea
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x16], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1e
jne 0x140119980
mov dword [0x140377028], 1
add rsp, 8
pop rsi
ret

Function at 0x1401199c0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377038], 1
je 0x140119a38
mov r9, rdx
mov ecx, 0x1f
xor r10d, r10d
movabs r11, 0x842108421084211
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
mov rdx, rax
shl rdx, 5
sub rax, rdx
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1f], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x2a
jne 0x1401199f0
mov dword [0x140377038], 1
add rsp, 8
pop rsi
ret

Function at 0x140119a40
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377044], 1
je 0x140119ab2
mov r9, rdx
mov ecx, 0x19
xor r10d, r10d
movabs r11, 0x47ae147ae147ae15
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe7
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x19], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1e
jne 0x140119a70
mov dword [0x140377044], 1
add rsp, 8
pop rsi
ret

Function at 0x140119ac0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377050], 1
je 0x140119b2c
mov r9, rdx
mov ecx, 0x18
xor r10d, r10d
movabs r11, 0xaaaaaaaaaaaaaaab
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 1
and rdx, 0xfffffffffffffff8
lea rax, [rdx + rdx*2]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x18], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1f
jne 0x140119af0
mov dword [0x140377050], 1
add rsp, 8
pop rsi
ret

Function at 0x140119b40
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037705c], 1
je 0x140119bad
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0xcccccccccccccccd
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
and rdx, 0xfffffffffffffffc
lea rax, [rdx + rdx*4]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x14], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1b
jne 0x140119b70
mov dword [0x14037705c], 1
add rsp, 8
pop rsi
ret
Function at 0x140119bc0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377068], 1
je 0x140119c32
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x8618618618618619
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffeb
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x15], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1c
jne 0x140119bf0
mov dword [0x140377068], 1
add rsp, 8
pop rsi
ret

Function at 0x140119c40
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140377078], 1
je 0x140119c70
xor eax, eax
nop dword [rax]
movzx ecx, byte [r8 + rax + 0x10]
xor cl, byte [r8 + rax]
mov byte [rdx + rax], cl
add rax, 1
cmp eax, 0xa
jne 0x140119c50
mov dword [0x140377078], 1
pop rax
ret

Function at 0x140119c80
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140377084], 1
je 0x140119ce9
mov r9, rdx
mov ecx, 0x1c
xor r10d, r10d
movabs r11, 0x4924924924924925
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
shr rax, 2
mul r11
shr rdx, 1
imul rax, rdx, 0xffffffffffffffe4
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1c], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x23
jne 0x140119cb0
mov dword [0x140377084], 1
add rsp, 8
pop rsi
ret

Function at 0x140119cf0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140377094], 1
je 0x140119d20
xor eax, eax
nop dword [rax]
movzx ecx, byte [r8 + rax + 0x10]
xor cl, byte [r8 + rax]
mov byte [rdx + rax], cl
add rax, 1
cmp eax, 0xa
jne 0x140119d00
mov dword [0x140377094], 1
pop rax
ret

Function at 0x140119d30
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403770a4], 1
je 0x140119d96
mov r9, rdx
mov ecx, 0x1e
xor r10d, r10d
movabs r11, 0x8888888888888889
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe2
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1e], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x29
jne 0x140119d60
mov dword [0x1403770a4], 1
add rsp, 8
pop rsi
ret

Function at 0x140119da0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403770b0], 1
je 0x140119e06
mov r9, rdx
mov ecx, 0x1b
xor r10d, r10d
movabs r11, 0x97b425ed097b425f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe5
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1b], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x23
jne 0x140119dd0
mov dword [0x1403770b0], 1
add rsp, 8
pop rsi
ret
Function at 0x140119e10
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403770c0], 1
je 0x140119e76
mov r9, rdx
mov ecx, 0x1e
xor r10d, r10d
movabs r11, 0x8888888888888889
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe2
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1e], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x28
jne 0x140119e40
mov dword [0x1403770c0], 1
add rsp, 8
pop rsi
ret

Function at 0x140119e80
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403770cc], 1
je 0x140119ef2
mov r9, rdx
mov ecx, reloc.WS2_32.dll_socket
xor r10d, r10d
movabs r11, 0x642c8590b21642c9
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe9
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x17], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1e
jne 0x140119eb0
mov dword [0x1403770cc], 1
add rsp, 8
pop rsi
ret

Function at 0x140119f00
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403770dc], 1
je 0x140119f66
mov r9, rdx
mov ecx, reloc.WS2_32.dll_send
xor r10d, r10d
movabs r11, 0xd79435e50d79435f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x13], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1c
jne 0x140119f30
mov dword [0x1403770dc], 1
add rsp, 8
pop rsi
ret

Function at 0x140119f70
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403770e8], 1
je 0x140119fdd
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0xcccccccccccccccd
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
and rdx, 0xfffffffffffffffc
lea rax, [rdx + rdx*4]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x14], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x19
jne 0x140119fa0
mov dword [0x1403770e8], 1
add rsp, 8
pop rsi
ret

Function at 0x140119ff0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403770f0], 1
je 0x14011a020
xor eax, eax
nop dword [rax]
movzx ecx, byte [r8 + rax + 0x10]
xor cl, byte [r8 + rax]
mov byte [rdx + rax], cl
add rax, 1
cmp eax, 4
jne 0x14011a000
mov dword [0x1403770f0], 1
pop rax
ret

Function at 0x14011a030
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403770fc], 1
je 0x14011a0a2
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x8618618618618619
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffeb
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x15], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1c
jne 0x14011a060
mov dword [0x1403770fc], 1
add rsp, 8
pop rsi
ret