joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14002f6e0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374018], 1
je 0x14002f746
mov r9, rdx
mov ecx, 0x1b
xor r10d, r10d
movabs r11, 0x97b425ed097b425f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe5
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1b], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x24
jne 0x14002f710
mov dword [0x140374018], 1
add rsp, 8
pop rsi
ret

Function at 0x14002f750
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374028], 1
je 0x14002f7c8
mov r9, rdx
mov ecx, 0x1f
xor r10d, r10d
movabs r11, 0x842108421084211
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
mov rdx, rax
shl rdx, 5
sub rax, rdx
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1f], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x29
jne 0x14002f780
mov dword [0x140374028], 1
add rsp, 8
pop rsi
ret

Function at 0x14002f7d0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140374038], 1
je 0x14002f800
xor eax, eax
nop dword [rax]
movzx ecx, byte [r8 + rax + 0x10]
xor cl, byte [r8 + rax]
mov byte [rdx + rax], cl
add rax, 1
cmp eax, 9
jne 0x14002f7e0
mov dword [0x140374038], 1
pop rax
ret

Function at 0x14002f810
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374044], 1
je 0x14002f882
mov r9, rdx
mov ecx, reloc.WS2_32.dll_socket
xor r10d, r10d
movabs r11, 0x642c8590b21642c9
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe9
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x17], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1f
jne 0x14002f840
mov dword [0x140374044], 1
add rsp, 8
pop rsi
ret

Function at 0x14002f890
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374054], 1
je 0x14002f902
mov r9, rdx
mov ecx, reloc.WS2_32.dll_socket
xor r10d, r10d
movabs r11, 0x642c8590b21642c9
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe9
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x17], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x20
jne 0x14002f8c0
mov dword [0x140374054], 1
add rsp, 8
pop rsi
ret

Function at 0x14002f910
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374064], 1
je 0x14002f976
mov r9, rdx
mov ecx, 0x1a
xor r10d, r10d
movabs r11, 0x4ec4ec4ec4ec4ec5
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
imul rax, rdx, 0xffffffffffffffe6
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1a], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x24
jne 0x14002f940
mov dword [0x140374064], 1
add rsp, 8
pop rsi
ret
Function at 0x14002f980
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374074], 1
je 0x14002f9e6
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x2e8ba2e8ba2e8ba3
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
imul rax, rdx, 0xffffffffffffffea
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x16], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1f
jne 0x14002f9b0
mov dword [0x140374074], 1
add rsp, 8
pop rsi
ret

Function at 0x14002f9f0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374080], 1
je 0x14002fa62
mov r9, rdx
mov ecx, reloc.WS2_32.dll_socket
xor r10d, r10d
movabs r11, 0x642c8590b21642c9
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe9
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x17], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1f
jne 0x14002fa20
mov dword [0x140374080], 1
add rsp, 8
pop rsi
ret

Function at 0x14002fa70
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374090], 1
je 0x14002fad6
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x2e8ba2e8ba2e8ba3
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
imul rax, rdx, 0xffffffffffffffea
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x16], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1f
jne 0x14002faa0
mov dword [0x140374090], 1
add rsp, 8
pop rsi
ret

Function at 0x14002fae0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403740a0], 1
je 0x14002fb46
mov r9, rdx
mov ecx, 0x1a
xor r10d, r10d
movabs r11, 0x4ec4ec4ec4ec4ec5
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
imul rax, rdx, 0xffffffffffffffe6
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1a], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x24
jne 0x14002fb10
mov dword [0x1403740a0], 1
add rsp, 8
pop rsi
ret

Function at 0x14002fb50
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403740b0], 1
je 0x14002fbc2
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x8618618618618619
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffeb
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x15], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1e
jne 0x14002fb80
mov dword [0x1403740b0], 1
add rsp, 8
pop rsi
ret
Function at 0x14002fbd0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403740bc], 1
je 0x14002fc42
mov r9, rdx
mov ecx, 0x19
xor r10d, r10d
movabs r11, 0x47ae147ae147ae15
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe7
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x19], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x21
jne 0x14002fc00
mov dword [0x1403740bc], 1
add rsp, 8
pop rsi
ret

Function at 0x14002fc50
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403740cc], 1
je 0x14002fcc2
mov r9, rdx
mov ecx, 0x19
xor r10d, r10d
movabs r11, 0x47ae147ae147ae15
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe7
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x19], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x22
jne 0x14002fc80
mov dword [0x1403740cc], 1
add rsp, 8
pop rsi
ret

Function at 0x14002fcd0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403740dc], 1
je 0x14002fd3d
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xe38e38e38e38e38f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
and rdx, 0xfffffffffffffffe
lea rax, [rdx + rdx*8]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x12], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1c
jne 0x14002fd00
mov dword [0x1403740dc], 1
add rsp, 8
pop rsi
ret

Function at 0x14002fd50
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403740ec], 1
je 0x14002fdbc
mov r9, rdx
mov ecx, 0x18
xor r10d, r10d
movabs r11, 0xaaaaaaaaaaaaaaab
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 1
and rdx, 0xfffffffffffffff8
lea rax, [rdx + rdx*2]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x18], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x21
jne 0x14002fd80
mov dword [0x1403740ec], 1
add rsp, 8
pop rsi
ret

Function at 0x14002fdd0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403740f8], 1
je 0x14002fe36
mov r9, rdx
mov ecx, 0x1e
xor r10d, r10d
movabs r11, 0x8888888888888889
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe2
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1e], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x26
jne 0x14002fe00
mov dword [0x1403740f8], 1
add rsp, 8
pop rsi
ret
Function at 0x14002fe40
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374108], 1
je 0x14002fea6
mov r9, rdx
mov ecx, reloc.WS2_32.dll_send
xor r10d, r10d
movabs r11, 0xd79435e50d79435f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x13], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1c
jne 0x14002fe70
mov dword [0x140374108], 1
add rsp, 8
pop rsi
ret

Function at 0x14002feb0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374118], 1
je 0x14002ff22
mov r9, rdx
mov ecx, 0x19
xor r10d, r10d
movabs r11, 0x47ae147ae147ae15
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe7
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x19], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x23
jne 0x14002fee0
mov dword [0x140374118], 1
add rsp, 8
pop rsi
ret

Function at 0x14002ff30
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374128], 1
je 0x14002ffa2
mov r9, rdx
mov ecx, 0x1d
xor r10d, r10d
movabs r11, 0x1a7b9611a7b9611b
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe3
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1d], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x26
jne 0x14002ff60
mov dword [0x140374128], 1
add rsp, 8
pop rsi
ret

Function at 0x14002ffb0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374134], 1
je 0x14003001c
mov r9, rdx
mov ecx, 0x18
xor r10d, r10d
movabs r11, 0xaaaaaaaaaaaaaaab
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 1
and rdx, 0xfffffffffffffff8
lea rax, [rdx + rdx*2]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x18], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x20
jne 0x14002ffe0
mov dword [0x140374134], 1
add rsp, 8
pop rsi
ret

Function at 0x140030030
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374144], 1
je 0x1400300a2
mov r9, rdx
mov ecx, 0x19
xor r10d, r10d
movabs r11, 0x47ae147ae147ae15
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe7
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x19], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x22
jne 0x140030060
mov dword [0x140374144], 1
add rsp, 8
pop rsi
ret
Function at 0x1400300b0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374154], 1
je 0x140030122
mov r9, rdx
mov ecx, 0x1d
xor r10d, r10d
movabs r11, 0x1a7b9611a7b9611b
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe3
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1d], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x27
jne 0x1400300e0
mov dword [0x140374154], 1
add rsp, 8
pop rsi
ret

Function at 0x140030130
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374164], 1
je 0x1400301a2
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x8618618618618619
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffeb
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x15], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1e
jne 0x140030160
mov dword [0x140374164], 1
add rsp, 8
pop rsi
ret

Function at 0x1400301b0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374170], 1
je 0x140030222
mov r9, rdx
mov ecx, 0x1d
xor r10d, r10d
movabs r11, 0x1a7b9611a7b9611b
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe3
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1d], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x24
jne 0x1400301e0
mov dword [0x140374170], 1
add rsp, 8
pop rsi
ret

Function at 0x140030230
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374184], 1
je 0x140030296
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x2e8ba2e8ba2e8ba3
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
imul rax, rdx, 0xffffffffffffffea
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x16], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x23
jne 0x140030260
mov dword [0x140374184], 1
add rsp, 8
pop rsi
ret

Function at 0x1400302a0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374190], 1
je 0x140030312
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x8618618618618619
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffeb
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x15], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1c
jne 0x1400302d0
mov dword [0x140374190], 1
add rsp, 8
pop rsi
ret
Function at 0x140030320
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403741a0], 1
je 0x140030392
mov r9, rdx
mov ecx, reloc.WS2_32.dll_socket
xor r10d, r10d
movabs r11, 0x642c8590b21642c9
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe9
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x17], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x21
jne 0x140030350
mov dword [0x1403741a0], 1
add rsp, 8
pop rsi
ret

Function at 0x1400303a0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403741ac], 1
je 0x140030412
mov r9, rdx
mov ecx, 0x19
xor r10d, r10d
movabs r11, 0x47ae147ae147ae15
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe7
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x19], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1f
jne 0x1400303d0
mov dword [0x1403741ac], 1
add rsp, 8
pop rsi
ret

Function at 0x140030420
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403741b8], 1
je 0x140030498
mov r9, rdx
mov ecx, 0x1f
xor r10d, r10d
movabs r11, 0x842108421084211
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
mov rdx, rax
shl rdx, 5
sub rax, rdx
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1f], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x25
jne 0x140030450
mov dword [0x1403741b8], 1
add rsp, 8
pop rsi
ret

Function at 0x1400304a0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403741c8], 1
je 0x1400304d0
xor eax, eax
nop dword [rax]
movzx ecx, byte [r8 + rax + 0x10]
xor cl, byte [r8 + rax]
mov byte [rdx + rax], cl
add rax, 1
cmp eax, 0xa
jne 0x1400304b0
mov dword [0x1403741c8], 1
pop rax
ret

Function at 0x1400304e0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403741d4], 1
je 0x140030546
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x2e8ba2e8ba2e8ba3
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
imul rax, rdx, 0xffffffffffffffea
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x16], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1b
jne 0x140030510
mov dword [0x1403741d4], 1
add rsp, 8
pop rsi
ret

Function at 0x140030550
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403741e0], 1
je 0x1400305b6
mov r9, rdx
mov ecx, 0x1e
xor r10d, r10d
movabs r11, 0x8888888888888889
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe2
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1e], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x24
jne 0x140030580
mov dword [0x1403741e0], 1
add rsp, 8
pop rsi
ret
Function at 0x1400305c0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403741ec], 1
je 0x140030626
mov r9, rdx
mov ecx, 0x1a
xor r10d, r10d
movabs r11, 0x4ec4ec4ec4ec4ec5
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
imul rax, rdx, 0xffffffffffffffe6
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1a], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1f
jne 0x1400305f0
mov dword [0x1403741ec], 1
add rsp, 8
pop rsi
ret

Function at 0x140030630
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403741f4], 1
je 0x1400306a2
mov r9, rdx
mov ecx, 0x19
xor r10d, r10d
movabs r11, 0x47ae147ae147ae15
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe7
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x19], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1c
jne 0x140030660
mov dword [0x1403741f4], 1
add rsp, 8
pop rsi
ret

Function at 0x1400306b0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374200], 1
je 0x14003071f
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xf0f0f0f0f0f0f0f1
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
mov rax, rdx
shl rax, 4
add rax, rdx
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x11], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x18
jne 0x1400306e0
mov dword [0x140374200], 1
add rsp, 8
pop rsi
ret

Function at 0x140030730
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037420c], 1
je 0x140030796
mov r9, rdx
mov ecx, 0x1b
xor r10d, r10d
movabs r11, 0x97b425ed097b425f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe5
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1b], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x22
jne 0x140030760
mov dword [0x14037420c], 1
add rsp, 8
pop rsi
ret

Function at 0x1400307a0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037421c], 1
je 0x140030812
mov r9, rdx
mov ecx, reloc.WS2_32.dll_socket
xor r10d, r10d
movabs r11, 0x642c8590b21642c9
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe9
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x17], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x21
jne 0x1400307d0
mov dword [0x14037421c], 1
add rsp, 8
pop rsi
ret
Function at 0x140030820
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374230], 1
je 0x140030886
mov r9, rdx
mov ecx, reloc.WS2_32.dll_send
xor r10d, r10d
movabs r11, 0xd79435e50d79435f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x13], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x20
jne 0x140030850
mov dword [0x140374230], 1
add rsp, 8
pop rsi
ret

Function at 0x140030890
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140374244], 1
je 0x1400308c0
xor eax, eax
nop dword [rax]
movzx ecx, byte [r8 + rax + 0x10]
xor cl, byte [r8 + rax]
mov byte [rdx + rax], cl
add rax, 1
cmp eax, 0xd
jne 0x1400308a0
mov dword [0x140374244], 1
pop rax
ret

Function at 0x1400308d0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374250], 1
je 0x140030939
mov r9, rdx
mov ecx, 0x1c
xor r10d, r10d
movabs r11, 0x4924924924924925
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
shr rax, 2
mul r11
shr rdx, 1
imul rax, rdx, 0xffffffffffffffe4
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1c], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x22
jne 0x140030900
mov dword [0x140374250], 1
add rsp, 8
pop rsi
ret

Function at 0x140030940
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037425c], 1
je 0x1400309ac
mov r9, rdx
mov ecx, 0x18
xor r10d, r10d
movabs r11, 0xaaaaaaaaaaaaaaab
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 1
and rdx, 0xfffffffffffffff8
lea rax, [rdx + rdx*2]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x18], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1f
jne 0x140030970
mov dword [0x14037425c], 1
add rsp, 8
pop rsi
ret

Function at 0x1400309c0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374268], 1
je 0x140030a32
mov r9, rdx
mov ecx, 0x1d
xor r10d, r10d
movabs r11, 0x1a7b9611a7b9611b
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe3
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1d], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x24
jne 0x1400309f0
mov dword [0x140374268], 1
add rsp, 8
pop rsi
ret

Function at 0x140030a40
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140374274], 1
je 0x140030ab2
mov r9, rdx
mov ecx, reloc.WS2_32.dll_socket
xor r10d, r10d
movabs r11, 0x642c8590b21642c9
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe9
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x17], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1e
jne 0x140030a70
mov dword [0x140374274], 1
add rsp, 8
pop rsi
ret