joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1401164a0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140375e48], 1
je 0x1401164f8
mov r9, rdx
xor ecx, ecx
movabs r10, 0xe38e38e38e38e38f
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
add edx, edx
lea r11d, [rdx + rdx*8]
movzx edx, byte [r8 + rcx + 0x12]
mov eax, ecx
sub eax, r11d
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x18
jne 0x1401164c0
mov dword [0x140375e48], 1
pop rax
ret

Function at 0x140116500
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375e60], 1
je 0x14011656d
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0xcccccccccccccccd
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
and rdx, 0xfffffffffffffffc
lea rax, [rdx + rdx*4]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x14], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x25
jne 0x140116530
mov dword [0x140375e60], 1
add rsp, 8
pop rsi
ret

Function at 0x140116580
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375e68], 1
je 0x1401165f2
mov r9, rdx
mov ecx, reloc.WS2_32.dll_socket
xor r10d, r10d
movabs r11, 0x642c8590b21642c9
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe9
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x17], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1a
jne 0x1401165b0
mov dword [0x140375e68], 1
add rsp, 8
pop rsi
ret

Function at 0x140116600
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
push rax
cmp dword [0x140375e94], 1
je 0x140116659
mov r9, rdx
xor ecx, ecx
movabs r10, 0xcccccccccccccccd
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
shl edx, 2
lea r11d, [rdx + rdx*4]
movzx edx, byte [r8 + rcx + 0x14]
mov eax, ecx
sub eax, r11d
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x28
jne 0x140116620
mov dword [0x140375e94], 1
pop rax
ret

Function at 0x140116660
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375ea8], 1
je 0x1401166c6
mov r9, rdx
mov ecx, 0x1a
xor r10d, r10d
movabs r11, 0x4ec4ec4ec4ec4ec5
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
imul rax, rdx, 0xffffffffffffffe6
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1a], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x2a
jne 0x140116690
mov dword [0x140375ea8], 1
add rsp, 8
pop rsi
ret

Function at 0x1401166d0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140375ed4], 1
je 0x140116731
xor eax, eax
mov r9d, 0xaf286bcb
nop word cs:[rax + rax]
nop dword [rax]
mov r10d, eax
imul r10, r9
shr r10, 0x20
mov ecx, eax
sub ecx, r10d
shr ecx, 1
add ecx, r10d
shr ecx, 4
imul ecx, ecx, 0xffffffed
movzx r10d, byte [r8 + rax + 0x13]
add ecx, eax
movsxd rcx, ecx
xor r10b, byte [r8 + rcx]
mov byte [rdx + rax], r10b
add rax, 1
cmp eax, 0x27
jne 0x1401166f0
mov dword [0x140375ed4], 1
pop rax
ret
Function at 0x140116740
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140375ee8], 1
je 0x140116770
xor eax, eax
nop dword [rax]
movzx ecx, byte [r8 + rax + 0x10]
xor cl, byte [r8 + rax]
mov byte [rdx + rax], cl
add rax, 1
cmp eax, 0xf
jne 0x140116750
mov dword [0x140375ee8], 1
pop rax
ret

Function at 0x140116780
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
push rax
cmp dword [0x140375f14], 1
je 0x1401167d9
mov r9, rdx
xor ecx, ecx
movabs r10, 0xcccccccccccccccd
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
shl edx, 2
lea r11d, [rdx + rdx*4]
movzx edx, byte [r8 + rcx + 0x14]
mov eax, ecx
sub eax, r11d
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x28
jne 0x1401167a0
mov dword [0x140375f14], 1
pop rax
ret

Function at 0x1401167e0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375f28], 1
je 0x140116852
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x8618618618618619
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffeb
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x15], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x25
jne 0x140116810
mov dword [0x140375f28], 1
add rsp, 8
pop rsi
ret

Function at 0x140116860
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375f34], 1
je 0x1401168c6
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x2e8ba2e8ba2e8ba3
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
imul rax, rdx, 0xffffffffffffffea
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x16], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1c
jne 0x140116890
mov dword [0x140375f34], 1
add rsp, 8
pop rsi
ret

Function at 0x1401168d0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375f48], 1
je 0x140116942
mov r9, rdx
mov ecx, 0x19
xor r10d, r10d
movabs r11, 0x47ae147ae147ae15
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe7
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x19], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x28
jne 0x140116900
mov dword [0x140375f48], 1
add rsp, 8
pop rsi
ret

Function at 0x140116950
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375f58], 1
je 0x1401169b6
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x2e8ba2e8ba2e8ba3
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
imul rax, rdx, 0xffffffffffffffea
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x16], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x20
jne 0x140116980
mov dword [0x140375f58], 1
add rsp, 8
pop rsi
ret
Function at 0x1401169c0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140375f70], 1
je 0x140116a12
mov r9, rdx
xor ecx, ecx
movabs r10, 0xd79435e50d79435f
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
imul eax, edx, 0xffffffed
movzx edx, byte [r8 + rcx + 0x13]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x14
jne 0x1401169e0
mov dword [0x140375f70], 1
pop rax
ret

Function at 0x140116a20
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140375f90], 1
je 0x140116a72
mov r9, rdx
xor ecx, ecx
movabs r10, 0xd79435e50d79435f
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
imul eax, edx, 0xffffffed
movzx edx, byte [r8 + rcx + 0x13]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x1a
jne 0x140116a40
mov dword [0x140375f90], 1
pop rax
ret

Function at 0x140116a80
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140375fbc], 1
je 0x140116ad2
mov r9, rdx
xor ecx, ecx
movabs r10, 0x2e8ba2e8ba2e8ba3
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 2
imul eax, edx, 0xffffffea
movzx edx, byte [r8 + rcx + 0x16]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x25
jne 0x140116aa0
mov dword [0x140375fbc], 1
pop rax
ret

Function at 0x140116ae0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375fd4], 1
je 0x140116b46
mov r9, rdx
mov ecx, reloc.WS2_32.dll_send
xor r10d, r10d
movabs r11, 0xd79435e50d79435f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x13], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x26
jne 0x140116b10
mov dword [0x140375fd4], 1
add rsp, 8
pop rsi
ret

Function at 0x140116b50
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140375fe0], 1
je 0x140116bbd
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0xcccccccccccccccd
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 2
and rdx, 0xfffffffffffffffc
lea rax, [rdx + rdx*4]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x14], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1a
jne 0x140116b80
mov dword [0x140375fe0], 1
add rsp, 8
pop rsi
ret

Function at 0x140116bd0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140376028], 1
je 0x140116c06
xor ecx, ecx
nop dword [rax]
movzx r9d, byte [r8 + rcx + 0x10]
mov eax, ecx
and eax, 0xf
xor r9b, byte [r8 + rax]
mov byte [rdx + rcx], r9b
add rcx, 1
cmp ecx, 0x41
jne 0x140116be0
mov dword [0x140376028], 1
pop rax
ret

Function at 0x140116c10
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140376044], 1
je 0x140116c62
mov r9, rdx
xor ecx, ecx
movabs r10, 0xd79435e50d79435f
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
imul eax, edx, 0xffffffed
movzx edx, byte [r8 + rcx + 0x13]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x15
jne 0x140116c30
mov dword [0x140376044], 1
pop rax
ret
Function at 0x140116c70
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x14037609c], 1
je 0x140116cc3
xor eax, eax
mov r9d, 0xba2e8ba3
nop word cs:[rax + rax]
nop dword [rax]
mov ecx, eax
imul rcx, r9
shr rcx, 0x24
imul ecx, ecx, 0xffffffea
movzx r10d, byte [r8 + rax + 0x16]
add ecx, eax
movsxd rcx, ecx
xor r10b, byte [r8 + rcx]
mov byte [rdx + rax], r10b
add rax, 1
cmp eax, 0x54
jne 0x140116c90
mov dword [0x14037609c], 1
pop rax
ret

Function at 0x140116cd0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403760d0], 1
je 0x140116d22
mov r9, rdx
xor ecx, ecx
movabs r10, 0x4ec4ec4ec4ec4ec5
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 3
imul eax, edx, 0xffffffe6
movzx edx, byte [r8 + rcx + 0x1a]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x2f
jne 0x140116cf0
mov dword [0x1403760d0], 1
pop rax
ret

Function at 0x140116d30
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
push rax
cmp dword [0x140376110], 1
je 0x140116d8a
xor eax, eax
mov r9d, 0xcccccccd
nop word cs:[rax + rax]
nop dword [rax]
mov ecx, eax
imul rcx, r9
shr rcx, 0x24
shl ecx, 2
lea r10d, [rcx + rcx*4]
movzx r11d, byte [r8 + rax + 0x14]
mov ecx, eax
sub ecx, r10d
movsxd rcx, ecx
xor r11b, byte [r8 + rcx]
mov byte [rdx + rax], r11b
add rax, 1
cmp eax, 0x39
jne 0x140116d50
mov dword [0x140376110], 1
pop rax
ret

Function at 0x140116d90
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140376120], 1
je 0x140116dc0
xor eax, eax
nop dword [rax]
movzx ecx, byte [r8 + rax + 0x10]
xor cl, byte [r8 + rax]
mov byte [rdx + rax], cl
add rax, 1
cmp eax, 0xa
jne 0x140116da0
mov dword [0x140376120], 1
pop rax
ret

Function at 0x140116dd0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376134], 1
je 0x140116e3d
mov r9, rdx
mov ecx, send
xor r10d, r10d
movabs r11, 0xe38e38e38e38e38f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
and rdx, 0xfffffffffffffffe
lea rax, [rdx + rdx*8]
neg rax
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x12], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x22
jne 0x140116e00
mov dword [0x140376134], 1
add rsp, 8
pop rsi
ret

Function at 0x140116e50
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140376154], 1
je 0x140116eae
mov r9, rdx
xor ecx, ecx
movabs r10, 0x8618618618618619
nop dword [rax]
mov rax, rcx
mul r10
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul eax, eax, 0xffffffeb
movzx edx, byte [r8 + rcx + 0x15]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x1c
jne 0x140116e70
mov dword [0x140376154], 1
pop rax
ret
Function at 0x140116eb0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037616c], 1
je 0x140116f28
mov r9, rdx
mov ecx, 0x1f
xor r10d, r10d
movabs r11, 0x842108421084211
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
mov rdx, rax
shl rdx, 5
sub rax, rdx
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1f], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x32
jne 0x140116ee0
mov dword [0x14037616c], 1
add rsp, 8
pop rsi
ret

Function at 0x140116f30
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140376190], 1
je 0x140116f82
mov r9, rdx
xor ecx, ecx
movabs r10, 0x2e8ba2e8ba2e8ba3
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 2
imul eax, edx, 0xffffffea
movzx edx, byte [r8 + rcx + 0x16]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x1e
jne 0x140116f50
mov dword [0x140376190], 1
pop rax
ret

Function at 0x140116f90
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403761d0], 1
je 0x140116fc6
xor ecx, ecx
nop dword [rax]
movzx r9d, byte [r8 + rcx + 0x10]
mov eax, ecx
and eax, 0xf
xor r9b, byte [r8 + rax]
mov byte [rdx + rcx], r9b
add rcx, 1
cmp ecx, 0x3c
jne 0x140116fa0
mov dword [0x1403761d0], 1
pop rax
ret

Function at 0x140116fd0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403761ec], 1
je 0x140117042
mov r9, rdx
mov ecx, 0x1d
xor r10d, r10d
movabs r11, 0x1a7b9611a7b9611b
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe3
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1d], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x34
jne 0x140117000
mov dword [0x1403761ec], 1
add rsp, 8
pop rsi
ret

Function at 0x140117050
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140376224], 1
je 0x1401170ae
mov r9, rdx
xor ecx, ecx
movabs r10, 0x47ae147ae147ae15
nop dword [rax]
mov rax, rcx
mul r10
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul eax, eax, 0xffffffe7
movzx edx, byte [r8 + rcx + 0x19]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x32
jne 0x140117070
mov dword [0x140376224], 1
pop rax
ret

Function at 0x1401170b0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376244], 1
je 0x140117116
mov r9, rdx
mov ecx, 0x1e
xor r10d, r10d
movabs r11, 0x8888888888888889
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe2
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1e], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x37
jne 0x1401170e0
mov dword [0x140376244], 1
add rsp, 8
pop rsi
ret
Function at 0x140117120
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376264], 1
je 0x140117186
mov r9, rdx
mov ecx, 0x1b
xor r10d, r10d
movabs r11, 0x97b425ed097b425f
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe5
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1b], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x34
jne 0x140117150
mov dword [0x140376264], 1
add rsp, 8
pop rsi
ret

Function at 0x140117190
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x14037626c], 1
je 0x1401171f9
mov r9, rdx
mov ecx, 0x1c
xor r10d, r10d
movabs r11, 0x4924924924924925
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
shr rax, 2
mul r11
shr rdx, 1
imul rax, rdx, 0xffffffffffffffe4
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1c], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1f
jne 0x1401171c0
mov dword [0x14037626c], 1
add rsp, 8
pop rsi
ret

Function at 0x140117200
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
push rax
cmp dword [0x140376290], 1
je 0x140117259
mov r9, rdx
xor ecx, ecx
movabs r10, 0xcccccccccccccccd
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
shl edx, 2
lea r11d, [rdx + rdx*4]
movzx edx, byte [r8 + rcx + 0x14]
mov eax, ecx
sub eax, r11d
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x1d
jne 0x140117220
mov dword [0x140376290], 1
pop rax
ret

Function at 0x140117260
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x1403762a4], 1
je 0x1401172d2
mov r9, rdx
mov ecx, 0x1d
xor r10d, r10d
movabs r11, 0x1a7b9611a7b9611b
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe3
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1d], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x2b
jne 0x140117290
mov dword [0x1403762a4], 1
add rsp, 8
pop rsi
ret

Function at 0x1401172e0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403762d8], 1
je 0x140117335
mov r9, rdx
xor ecx, ecx
movabs r10, 0x4924924924924925
nop dword [rax]
mov rax, rcx
shr rax, 2
mul r10
shr rdx, 1
imul eax, edx, 0xffffffe4
movzx edx, byte [r8 + rcx + 0x1c]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x2d
jne 0x140117300
mov dword [0x1403762d8], 1
pop rax
ret

Function at 0x140117340
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140376304], 1
je 0x1401173a2
mov r9, rdx
xor ecx, ecx
movabs r10, 0x842108421084211
nop dword [rax]
mov rax, rcx
mul r10
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
mov edx, eax
shl edx, 5
sub eax, edx
movzx edx, byte [r8 + rcx + 0x1f]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x25
jne 0x140117360
mov dword [0x140376304], 1
pop rax
ret
Function at 0x1401173b0
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
push rax
cmp dword [0x140376334], 1
je 0x14011740a
xor eax, eax
mov r9d, 0xcccccccd
nop word cs:[rax + rax]
nop dword [rax]
mov ecx, eax
imul rcx, r9
shr rcx, 0x24
shl ecx, 2
lea r10d, [rcx + rcx*4]
movzx r11d, byte [r8 + rax + 0x14]
mov ecx, eax
sub ecx, r10d
movsxd rcx, ecx
xor r11b, byte [r8 + rcx]
mov byte [rdx + rax], r11b
add rax, 1
cmp eax, 0x29
jne 0x1401173d0
mov dword [0x140376334], 1
pop rax
ret

Function at 0x140117410
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140376360], 1
je 0x140117462
mov r9, rdx
xor ecx, ecx
movabs r10, 0x97b425ed097b425f
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
imul eax, edx, 0xffffffe5
movzx edx, byte [r8 + rcx + 0x1b]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x25
jne 0x140117430
mov dword [0x140376360], 1
pop rax
ret

Function at 0x140117470
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376378], 1
je 0x1401174e2
mov r9, rdx
mov ecx, 0x1d
xor r10d, r10d
movabs r11, 0x1a7b9611a7b9611b
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe3
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1d], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x31
jne 0x1401174a0
mov dword [0x140376378], 1
add rsp, 8
pop rsi
ret

Function at 0x1401174f0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403763c8], 1
je 0x140117551
xor eax, eax
mov r9d, 0x86186187
nop word cs:[rax + rax]
nop dword [rax]
mov r10d, eax
imul r10, r9
shr r10, 0x20
mov ecx, eax
sub ecx, r10d
shr ecx, 1
add ecx, r10d
shr ecx, 4
imul ecx, ecx, 0xffffffeb
movzx r10d, byte [r8 + rax + 0x15]
add ecx, eax
movsxd rcx, ecx
xor r10b, byte [r8 + rcx]
mov byte [rdx + rax], r10b
add rax, 1
cmp eax, 0x49
jne 0x140117510
mov dword [0x1403763c8], 1
pop rax
ret

Function at 0x140117560
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403763e8], 1
je 0x1401175b9
mov r9, rdx
xor ecx, ecx
movabs r10, 0xcccccccccccccccd
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
shl edx, 2
lea r11d, [rdx + rdx*4]
movzx edx, byte [r8 + rcx + 0x14]
mov eax, ecx
sub eax, r11d
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x1a
jne 0x140117580
mov dword [0x1403763e8], 1
pop rax
ret

Function at 0x1401175c0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140376430], 1
je 0x1401175f6
xor ecx, ecx
nop dword [rax]
movzx r9d, byte [r8 + rcx + 0x10]
mov eax, ecx
and eax, 0xf
xor r9b, byte [r8 + rax]
mov byte [rdx + rcx], r9b
add rcx, 1
cmp ecx, 0x41
jne 0x1401175d0
mov dword [0x140376430], 1
pop rax
ret
Function at 0x140117600
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x140376478], 1
je 0x140117653
xor eax, eax
mov r9d, 0xb21642c9
nop word cs:[rax + rax]
nop dword [rax]
mov ecx, eax
imul rcx, r9
shr rcx, 0x24
imul ecx, ecx, 0xffffffe9
movzx r10d, byte [r8 + rax + 0x17]
add ecx, eax
movsxd rcx, ecx
xor r10b, byte [r8 + rcx]
mov byte [rdx + rax], r10b
add rax, 1
cmp eax, 0x44
jne 0x140117620
mov dword [0x140376478], 1
pop rax
ret

Function at 0x140117660
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376484], 1
je 0x1401176d2
mov r9, rdx
mov ecx, socket
xor r10d, r10d
movabs r11, 0x8618618618618619
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffeb
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x15], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x1b
jne 0x140117690
mov dword [0x140376484], 1
add rsp, 8
pop rsi
ret

Function at 0x1401176e0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376490], 1
je 0x140117746
mov r9, rdx
mov ecx, 0x1a
xor r10d, r10d
movabs r11, 0x4ec4ec4ec4ec4ec5
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
shr rdx, 3
imul rax, rdx, 0xffffffffffffffe6
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1a], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x20
jne 0x140117710
mov dword [0x140376490], 1
add rsp, 8
pop rsi
ret

Function at 0x140117750
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403764cc], 1
je 0x1401177a2
mov r9, rdx
xor ecx, ecx
movabs r10, 0x8888888888888889
nop dword [rax]
mov rax, rcx
mul r10
shr rdx, 4
imul eax, edx, 0xffffffe2
movzx edx, byte [r8 + rcx + 0x1e]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x36
jne 0x140117770
mov dword [0x1403764cc], 1
pop rax
ret

Function at 0x1401177b0
Capabilities:
Encode data using xor

Disassembly:
push rax
cmp dword [0x1403764fc], 1
je 0x14011780e
mov r9, rdx
xor ecx, ecx
movabs r10, 0x8618618618618619
nop dword [rax]
mov rax, rcx
mul r10
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul eax, eax, 0xffffffeb
movzx edx, byte [r8 + rcx + 0x15]
add eax, ecx
cdqe
xor dl, byte [r8 + rax]
mov byte [r9 + rcx], dl
add rcx, 1
cmp ecx, 0x2a
jne 0x1401177d0
mov dword [0x1403764fc], 1
pop rax
ret

Function at 0x140117810
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rax
cmp dword [0x140376510], 1
je 0x140117882
mov r9, rdx
mov ecx, 0x1d
xor r10d, r10d
movabs r11, 0x1a7b9611a7b9611b
mov rsi, r8
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r10
mul r11
mov rax, r10
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0xffffffffffffffe3
movzx edx, byte [r8 + rcx]
xor dl, byte [rsi + rax]
mov byte [r9 + rcx - 0x1d], dl
add rcx, 1
add rsi, 1
add r10, 1
cmp ecx, 0x2c
jne 0x140117840
mov dword [0x140376510], 1
add rsp, 8
pop rsi
ret