joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140018b10
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, 0xe19af60b
mov rdx, 0xffffffffca2aa492
sub rdx, r8
shr rdx, 0xc
add r8, 0x35d55b6d
xor r8, rdx
mov edx, dword [0x141dc0e78]
or edx, dword [0x141dc0e7c]
xor edx, 0x64753d27
add edx, 0x53d7cfec
imul rdx, rax
shr rdx, 0x3e
cmp edx, 0x1d4ffe0a
ja 0x140018b30
mov eax, dword [0x141dc0e80]
xor edx, edx
div dword [0x141dc0e84]
mov r9, r8
rol r9, 2
nop dword [rax]
mov eax, dword [0x141dc0e88]
xor edx, edx
div dword [0x141dc0e8c]
or eax, 0xbcc7bc6c
imul eax, eax, 0xfc425a3c
cmp eax, 0x1ce26f42
jb 0x140018b70
xor r9d, r8d
movzx eax, r9w
add rcx, rax
mov rax, rcx
ret

Function at 0x140018be0
Capabilities:
Encode data using xor

Disassembly:
neg rdx
mov rax, rcx
xor rdx, 0x53f3ec6e
add rdx, 0x763f6713
mov rcx, rdx
rol rcx, 5
nop dword [rax + rax]
mov r8d, dword [0x141dc0e90]
mov r9d, dword [0x141dc0e94]
add r8d, r9d
add r8d, 0x8d1b788d
xor r8d, 0x464280
and r8d, 0x3167e2ca
cmp r8d, 0xc16b8e03
ja 0x140018c00
xor ecx, edx
movzx ecx, cx
add rax, rcx
ret

Function at 0x140018cb0
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov rax, rcx
mov rcx, rdx
shr rcx, 6
xor rcx, rdx
nop dword [rax]
mov edx, dword [0x141dc0e98]
sub edx, dword [0x141dc0e9c]
xor edx, 0x21463f64
add edx, 0x2c3f72a4
and edx, 0x5d0fdbf6
cmp edx, 0x4da58911
jb 0x140018cc0
movabs rdx, 0xffffffff35683bdd
sub rdx, rcx
mov rcx, rdx
rol rcx, 1
xor ecx, edx
movzx ecx, cx
add rax, rcx
ret

Function at 0x140018de0
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x141dc0eb8]
xor edx, edx
div dword [0x141dc0ebc]
mov rax, r8
rol rax, 3
xor rax, r8
nop dword [rax + rax]
mov edx, dword [0x141dc0ec0]
add edx, dword [0x141dc0ec4]
or edx, 0x52000e22
xor edx, 0x3a00380
or edx, 0xac1ff05d
cmp edx, 0xd8ce4436
jb 0x140018e00
add rax, 0xffffffffeb98a398
mov rdx, rax
rol rdx, 7
xor edx, eax
movzx eax, dx
add rcx, rax
mov rax, rcx
ret

Function at 0x140018e40
Capabilities:
Encode data using xor

Disassembly:
imul r8, rdx, 0xffffffffb361bc45
add r8, 0x4c9e43bb
nop
mov eax, dword [0x141dc0ec8]
xor edx, edx
div dword [0x141dc0ecc]
and eax, 0x215dc12b
imul eax, eax, 0x37c3f5af
add eax, 0x2293a07d
cmp eax, 0x9d3c2bc
jb 0x140018e50
mov eax, dword [0x141dc0ed0]
xor edx, edx
div dword [0x141dc0ed4]
mov rax, r8
rol rax, 7
xor rax, r8
nop dword [rax]
mov edx, dword [0x141dc0ed8]
imul edx, dword [0x141dc0edc]
xor edx, 0x25104400
and edx, 0xadbbf61c
cmp edx, 0x2bf208d7
je 0x140018e90
mov rdx, rax
rol rdx, 5
nop dword [rax + rax]
mov r8d, dword [0x141dc0ee0]
xor r8d, dword [0x141dc0ee4]
add r8d, 0xb8ec5730
or r8d, 0xfae13210
xor r8d, 0x3a6be971
cmp r8d, 0x281933c0
jb 0x140018ec0
xor edx, eax
movzx eax, dx
add rcx, rax
mov rax, rcx
ret
Function at 0x140018f70
Capabilities:
Encode data using xor

Disassembly:
xor rdx, 0x23ee322b
add rdx, 0xb1307b4
mov r8, rdx
shr r8, 0x16
xor r8, rdx
nop dword [rax + rax]
mov eax, dword [0x141dc0ee8]
imul eax, dword [0x141dc0eec]
imul eax, eax, 0x3aa044e4
or eax, 0xceb8cd83
and eax, 0xdfb8dfcf
cmp eax, 0x40eb00b6
je 0x140018f90
mov eax, dword [0x141dc0ef0]
xor edx, edx
div dword [0x141dc0ef4]
mov rax, r8
rol rax, 2
nop dword [rax]
mov edx, dword [0x141dc0ef8]
add edx, dword [0x141dc0efc]
imul edx, edx, 0xcaa6caef
xor edx, 0x3c50000
and edx, 0x3e50518
cmp edx, 0xcd2db84e
ja 0x140018fd0
xor eax, r8d
movzx eax, ax
add rcx, rax
mov rax, rcx
ret

Function at 0x1400190d0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
xor rdx, 0x2dcc8548
add rdx, 2
xor ecx, ecx
test cl, cl
jne 0x1400190e0
mov rcx, rdx
rol rcx, 1
nop word [rax + rax]
mov r8d, dword [0x141dc0f00]
sub r8d, dword [0x141dc0f04]
and r8d, 0x6a9a7feb
add r8d, 0x9a2ee462
cmp r8d, 0x3dd89d13
jb 0x1400190f0
xor ecx, edx
movzx ecx, cx
add rax, rcx
nop dword [rax]
mov ecx, dword [0x141dc0f08]
xor ecx, dword [0x141dc0f0c]
or ecx, 0xbbf4f2f4
shr ecx, 2
imul rcx, rcx, 0x359c3fab
shr rcx, 0x3a
or ecx, 0x282abc7e
cmp ecx, 0xf629cb00
je 0x140019120
ret

Function at 0x140019440
Capabilities:
Encode data using xor

Disassembly:
xor rdx, 0x2b97f889
lea rax, [rdx + 1]
shr rax, 8
mov r8, 0xfffffffffffffffe
sub r8, rdx
xor r8, rax
mov rax, r8
rol rax, 2
xor eax, r8d
movzx eax, ax
add rax, rcx
mov ecx, 0xada1fad1
nop word cs:[rax + rax]
mov edx, dword [0x141dc0f48]
xor edx, dword [0x141dc0f4c]
imul rdx, rcx
shr rdx, 0x3d
imul edx, edx, 0xf6a36fde
cmp edx, 0x638d7a53
je 0x140019480
ret

Function at 0x1400195a0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov r8, 0xffffffffb74f018a
sub r8, rdx
xor r8, 0x5ad80fed
mov rcx, r8
rol rcx, 3
xor rcx, r8
nop
mov edx, dword [0x141dc0f68]
imul edx, dword [0x141dc0f6c]
or edx, 0x22758123
and edx, 0xebf5dfb7
cmp edx, 0x8f57c9b
je 0x1400195c0
movzx ecx, cx
nop word cs:[rax + rax]
mov edx, dword [str.93F_]
or edx, dword [0x141dc0f74]
add edx, 0x879f7f67
xor edx, 0x91b102
or edx, 0xc76e04e1
cmp edx, 0xe86aaec7
jb 0x1400195f0
add rax, rcx
nop dword [rax]
mov ecx, dword [0x141dc0f78]
and ecx, dword [0x141dc0f7c]
and ecx, 0x10cb9fa1
add ecx, 0xa5062bcb
cmp ecx, 0x8401c84d
jb 0x140019620
ret

Function at 0x140019650
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov r8d, 0x9b7851f1
mov rcx, 0xfffffffff3aa2e8d
sub rcx, rdx
mov r9, rcx
shr r9, 0x1e
xor r9, rcx
mov rdx, r9
rol rdx, 7
xor rdx, r9
mov rcx, rdx
rol rcx, 2
nop
mov r9d, dword [0x141dc0f80]
xor r9d, dword [0x141dc0f84]
imul r9, r8
shr r9, 0x3d
imul r9d, r9d, 0x60a4e0ac
add r9d, 0x7169aa84
cmp r9d, 0xc84798bb
jb 0x140019680
xor rcx, rdx
mov edx, dword [0x141dc0f88]
add edx, dword [0x141dc0f8c]
imul edx, edx, 0xfc8d1fc1
or edx, 0xea4cab5c
xor edx, 0xa21a61d5
cmp edx, 0xc46f42fb
ja 0x1400196b0
mov rdx, rcx
rol rdx, 2
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret
Function at 0x1400196f0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov rcx, rdx
shr rcx, 0x19
xor rcx, rdx
nop dword [rax]
mov edx, dword [0x141dc0f90]
xor edx, dword [0x141dc0f94]
and edx, 0x51560925
cmp edx, 0xf1c57795
je 0x140019700
imul rcx, rcx, 0xffffffff9a950caa
nop word cs:[rax + rax]
mov edx, dword [0x141dc0f98]
xor edx, dword [0x141dc0f9c]
or edx, 0x5155254f
add edx, 0xb13ddcc0
imul rdx, rdx, 0xec94ac7
shr rdx, 0x3b
cmp edx, 0x78fea8c8
je 0x140019730
movabs rdx, 0x2393d053da83cb8a
add rcx, rdx
mov rdx, rcx
rol rdx, 1
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret

Function at 0x1400197f0
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
add r8, 0x24b61fb0
nop word [rax + rax]
mov eax, dword [0x141dc0fa8]
and eax, dword [0x141dc0fac]
imul eax, eax, 0x87e5beaa
xor eax, 0x3d2d1ea
cmp eax, 0xb580d858
ja 0x140019800
mov eax, dword [0x141dc0fb0]
xor edx, edx
div dword [0x141dc0fb4]
xor r8, 0xffffffffaa849540
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x140019840
imul rax, r8, 0x2c3947c9
mov rdx, rax
rol rdx, 6
xor edx, eax
movzx eax, dx
add rcx, rax
mov rax, rcx
ret

Function at 0x140019860
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
xor rdx, 0xffffffffe1e26758
mov rcx, rdx
shr rcx, 0x12
xor rcx, rdx
mov rdx, rcx
shr rdx, 0x14
xor rdx, rcx
mov rcx, rdx
rol rcx, 5
xor rcx, rdx
mov rdx, rcx
rol rdx, 2
nop
mov r8d, dword [0x141dc0fb8]
xor r8d, dword [0x141dc0fbc]
imul r8d, r8d, 0x95a88e7
or r8d, 0xfd7f5ddb
cmp r8d, 0xf8d3355a
jb 0x140019890
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret

Function at 0x1400198c0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
movabs rcx, 0xfffffffede24fab4
mov r8d, 0x9de20d5d
add rdx, rcx
mov rcx, rdx
rol rcx, 7
nop dword [rax]
mov r9d, dword [0x141dc0fc0]
xor r9d, dword [0x141dc0fc4]
imul r9, r8
shr r9, 0x3e
or r9d, 0xcc92146e
cmp r9d, 0xd7a08bfa
je 0x1400198e0
xor ecx, edx
movzx ecx, cx
add rax, rcx
ret

Function at 0x140019a00
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov ecx, 0xb209d637
mov r8, 0xffffffffdd256472
sub r8, rdx
xor r8, 0x44198fa
imul rdx, r8, 0xffffffffe86799cc
add rdx, 0xffffffffe86799cc
mov r8, rdx
rol r8, 4
nop
mov r9d, dword [0x141dc0fe8]
imul r9d, dword [0x141dc0fec]
xor r9d, 0xa3705c9d
add r9d, 0xce22994e
imul r9, rcx
shr r9, 0x3f
cmp r9d, 0xcc53a1c6
ja 0x140019a30
xor r8d, edx
movzx ecx, r8w
add rax, rcx
ret
Function at 0x140019aa0
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x141dc0ff0]
xor edx, edx
div dword [0x141dc0ff4]
mov eax, 0x7ae964d
sub rax, r8
mov rdx, rax
rol rdx, 1
xor rdx, rax
mov rax, 0xffffffff9686f16b
sub rax, rdx
mov rdx, rax
rol rdx, 4
nop word cs:[rax + rax]
mov r8d, dword [0x141dc0ff8]
sub r8d, dword [0x141dc0ffc]
and r8d, 0x81303688
imul r8d, r8d, 0x2d1491dc
cmp r8d, 0xfc80251a
je 0x140019ae0
xor edx, eax
movzx edx, dx
mov eax, 0xc03cd8bd
add rcx, rdx
nop word cs:[rax + rax]
mov edx, dword [0x141dc1000]
or edx, dword [0x141dc1004]
imul rdx, rax
shr rdx, 0x3f
xor edx, 0x348227fb
imul edx, edx, 0x67b5a61d
cmp edx, 0x5586f69d
ja 0x140019b20
nop dword [rax + rax]
mov eax, dword [0x141dc1008]
imul eax, dword [0x141dc100c]
imul rax, rax, 0x4a9c5f47
shr rax, 0x3c
or eax, 0x7886279b
imul eax, eax, 0x807fdea6
cmp eax, 0x1feeb7f8
jb 0x140019b50
mov rax, rcx
ret

Function at 0x140019b80
Capabilities:
Encode data using xor

Disassembly:
mov r8d, 0xeffa
sub r8, rdx
mov rax, r8
shr rax, 0x12
mov edx, dword [0x141dc1010]
sub edx, dword [0x141dc1014]
imul rdx, rdx, 0x27ff394b
shr rdx, 0x3d
or edx, 0x3ce2ae52
cmp edx, 0xc208d39b
ja 0x140019b90
xor rax, r8
mov rdx, rax
rol rdx, 4
nop
mov r8d, dword [0x141dc1018]
and r8d, dword [0x141dc101c]
xor r8d, 0x6b1cf8
imul r8d, r8d, 0xc4db38b8
imul r9, r8, 0x16c046dd
shr r9, 0x20
sub r8d, r9d
shr r8d, 1
add r8d, r9d
shr r8d, 0x1f
cmp r8d, 0xd614269d
je 0x140019bc0
xor edx, eax
movzx eax, dx
add rcx, rax
nop word cs:[rax + rax]
mov eax, dword [0x141dc1020]
xor edx, edx
div dword [0x141dc1024]
add eax, 0x4785ee1b
or eax, 0x86fedca7
add eax, 0x76bc650d
cmp eax, 0x7e07f047
ja 0x140019c10
mov rax, rcx
ret

Function at 0x140019c70
Capabilities:
Encode data using xor

Disassembly:
mov rax, rdx
shr rax, 1
xor rax, rdx
xor rax, 0xfffffffff20369e4
nop
mov edx, dword [0x141dc1028]
xor edx, dword [0x141dc102c]
xor edx, 0x82791e97
imul edx, edx, 0xd7c5f0fb
add edx, 0xb61fb963
cmp edx, 0xc6ffe038
ja 0x140019c80
mov rdx, rax
shr rdx, 0x1d
xor rdx, rax
mov r8, rdx
shr r8, 0xc
xor r8, rdx
mov r9, r8
rol r9, 2
nop word cs:[rax + rax]
mov eax, dword [0x141dc1030]
xor edx, edx
div dword [0x141dc1034]
imul eax, eax, 0xa9d355e6
add eax, 0xb7342c82
or eax, 0x87b067bf
cmp eax, 0x5e99d169
jb 0x140019cd0
xor r9d, r8d
movzx eax, r9w
add rcx, rax
mov rax, rcx
ret

Function at 0x140019e20
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov rax, rcx
mov ecx, 0x72a0f36c
sub rcx, rdx
xor rcx, 0xd86a79a
add rcx, 0xffffffffece11559
mov rdx, rcx
rol rdx, 1
nop
mov r8d, dword [0x141dc1058]
sub r8d, dword [0x141dc105c]
xor r8d, 0xbee2dc1e
add r8d, 0x92a292fb
xor r8d, 0x797246f1
cmp r8d, 0x65cb48e8
jb 0x140019e40
nop dword [rax]
mov r8d, dword [0x141dc1060]
imul r8d, dword [0x141dc1064]
and r8d, 0xed31163a
imul r8d, r8d, 0x7e66d2fb
shr r8d, 2
imul r8, r8, 0x12fa2cdb
shr r8, 0x3a
cmp r8d, 0xcc48cb26
je 0x140019e70
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret
Function at 0x14001a0c0
Capabilities:
Encode data using xor

Disassembly:
inc rdx
mov rax, rcx
mov rcx, rdx
rol rcx, 1
xor rcx, rdx
add rcx, 0xffffffff98682c96
nop word cs:[rax + rax]
mov edx, dword [0x141dc10a0]
or edx, dword [0x141dc10a4]
or edx, 0x67b0365c
add edx, 0xe789dc78
xor edx, 0x9de77e49
cmp edx, 0x8788d3eb
jb 0x14001a0e0
mov rdx, rcx
rol rdx, 5
xor r8d, r8d
test r8b, r8b
jne 0x14001a110
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret

Function at 0x14001a1d0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
not rdx
nop word cs:[rax + rax]
mov ecx, dword [0x141dc10b0]
xor ecx, dword [0x141dc10b4]
add ecx, 0xbbc38b44
or ecx, 0xb0763a3c
add ecx, 0x57e11580
cmp ecx, 0xe5c72e29
ja 0x14001a1e0
mov rcx, rdx
shr rcx, 0xb
xor rcx, rdx
add rcx, 0xffffffff9c48430d
mov rdx, rcx
rol rdx, 1
nop dword [rax]
mov r8d, dword [0x141dc10b8]
and r8d, dword [0x141dc10bc]
imul r8, r8, 0x652dc41f
shr r8, 0x3e
imul r8d, r8d, 0x95587f0e
cmp r8d, 0x19efe621
ja 0x14001a220
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret

Function at 0x14001a360
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x141dc10d8]
xor edx, edx
div dword [0x141dc10dc]
mov rax, r8
rol rax, 1
xor rax, r8
nop word [rax + rax]
mov edx, dword [0x141dc10e0]
sub edx, dword [0x141dc10e4]
xor edx, 0x5040a49
and edx, 0x27061f6b
add edx, 0x17f58795
cmp edx, 0xf654a217
ja 0x14001a380
imul rdx, rax, 0x1a4ebab9
mov rax, rdx
rol rax, 4
xor rax, rdx
add rax, 0x1bf25327
mov rdx, rax
rol rdx, 3
nop word cs:[rax + rax]
mov r8d, dword [0x141dc10e8]
and r8d, dword [0x141dc10ec]
or r8d, 0x61580201
xor r8d, 0x9150a05
or r8d, 0x90a2d1d2
cmp r8d, 0xfdfa31fd
ja 0x14001a3d0
xor edx, eax
movzx eax, dx
add rcx, rax
mov rax, rcx
ret

Function at 0x14001a410
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov r8, 0xffffffff84fad91c
sub r8, rdx
mov rcx, r8
rol rcx, 1
nop word cs:[rax + rax]
mov edx, dword [0x141dc10f0]
and edx, dword [0x141dc10f4]
add edx, 0xc95f10f
and edx, 0xa91a8f97
add edx, 0xf847a290
cmp edx, 0xb9e66766
ja 0x14001a430
mov edx, 0x9b8a47a1
xor rcx, r8
nop
mov r8d, dword [0x141dc10f8]
add r8d, dword [0x141dc10fc]
imul r8, rdx
shr r8, 0x3f
imul r8d, r8d, 0x44624df
xor r8d, 0xbbdb39f8
cmp r8d, 0x1f3fbcc8
jb 0x14001a460
movzx ecx, cx
add rax, rcx
ret

Function at 0x14001a4a0
Capabilities:
Encode data using xor

Disassembly:
movabs rax, 0xf87a4d4fc4eb6ab6
xor rdx, 0xffffffffbcf3a771
imul r8, rdx, 0x25abcc01
add r8, rax
mov r9, r8
rol r9, 1
nop word cs:[rax + rax]
mov eax, dword [0x141dc1100]
xor edx, edx
div dword [0x141dc1104]
xor eax, 0xad2224fd
imul rax, rax, 0x407b805
shr rax, 0x38
cmp eax, 0x62878dc0
ja 0x14001a4d0
xor r9d, r8d
movzx eax, r9w
add rcx, rax
nop
mov eax, dword [0x141dc1108]
xor edx, edx
div dword [0x141dc110c]
or eax, 0xde3b3a49
xor eax, 0x14ca2e0c
imul eax, eax, 0x79b25b23
cmp eax, 0xa0ecf171
ja 0x14001a500
mov rax, rcx
ret
Function at 0x14001a620
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov rcx, rdx
shr rcx, 2
xor rcx, rdx
imul rdx, rcx, 0x73c5c8e8
add rdx, 0x1f3e11f8
mov rcx, rdx
rol rcx, 1
nop word cs:[rax + rax]
mov r8d, dword [0x141dc1120]
xor r8d, dword [0x141dc1124]
cmp r8d, 0xf1321ea5
je 0x14001a650
xor ecx, edx
and ecx, 0xfff9
mov edx, 0xb8e6b343
add rax, rcx
nop word [rax + rax]
mov ecx, dword [0x141dc1128]
imul ecx, dword [0x141dc112c]
imul rcx, rdx
shr rcx, 0x3f
cmp ecx, 0xac1f9eaa
je 0x14001a680
nop dword [rax]
mov ecx, dword [0x141dc1130]
add ecx, dword [0x141dc1134]
or ecx, 0x2cc9c0fc
add ecx, 0x9a2556b2
or ecx, 0xc1005d33
cmp ecx, 0x23f3c500
jb 0x14001a6a0
ret

Function at 0x14001a8a0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rdx
shr rax, 0xf
xor rax, rdx
imul r8, rax, 0x2b930655
not r8
nop word cs:[rax + rax]
mov eax, dword [0x141dc1160]
xor eax, dword [0x141dc1164]
add eax, 0xaba52509
xor eax, 0xb3054805
and eax, 0xf317edc5
cmp eax, 0xdff28e80
ja 0x14001a8c0
mov eax, dword [0x141dc1168]
xor edx, edx
div dword [0x141dc116c]
mov rdx, r8
rol rdx, 4
xor rdx, r8
mov rax, rdx
rol rax, 1
xor rax, rdx
nop word cs:[rax + rax]
mov edx, dword [0x141dc1170]
sub edx, dword [0x141dc1174]
add edx, 0x4fbc85e4
and edx, 0xb8572247
imul edx, edx, 0xe5fa9b12
cmp edx, 0x340796f4
jb 0x14001a910
movzx eax, ax
add rcx, rax
mov rax, rcx
ret

Function at 0x14001a940
Capabilities:
Encode data using xor

Disassembly:
mov rax, rdx
rol rax, 5
xor rax, rdx
mov r9d, 0x579791a6
sub r9, rax
mov r8, r9
rol r8, 6
mov eax, dword [0x141dc1178]
xor edx, edx
div dword [0x141dc117c]
mov eax, 0xc32704b5
xor r8, r9
mov edx, dword [0x141dc1180]
xor edx, dword [0x141dc1184]
imul edx, edx, 0x65f5ae28
imul rdx, rax
shr rdx, 0x3f
or edx, 0xa87f0ec6
cmp edx, 0x48aa8c9b
jb 0x14001a970
movzx eax, r8w
add rcx, rax
nop
mov eax, dword [0x141dc1188]
and eax, dword [0x141dc118c]
imul eax, eax, 0x1386b581
add eax, 0x1dc727e2
and eax, 0x92384d5d
cmp eax, 0xf7cc5127
ja 0x14001a9a0
mov rax, rcx
ret

Function at 0x14001aa20
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x141dc1198]
xor edx, edx
div dword [0x141dc119c]
mov rdx, r8
shr rdx, 0x18
nop dword [rax + rax]
mov eax, dword [0x141dc11a0]
xor eax, dword [0x141dc11a4]
imul eax, eax, 0xff489c00
or eax, 0x9a4ab432
cmp eax, 0x94a954a1
jb 0x14001aa40
xor rdx, r8
mov rax, rdx
rol rax, 2
xor rax, rdx
xor rax, 0xffffffffe2bc9ef5
add rax, 0x7b790a36
mov rdx, rax
rol rdx, 3
nop
mov r8d, dword [0x141dc11a8]
xor r8d, dword [0x141dc11ac]
add r8d, 0x8498f50a
or r8d, 0xf4adae9d
cmp r8d, 0xd15dbcd3
jb 0x14001aa80
xor edx, eax
movzx eax, dx
add rcx, rax
mov rax, rcx
ret
Function at 0x14001ab30
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
imul rcx, rdx, 0xe1321f8
xor rcx, 0x686e0085
add rcx, 0xe98cf1d
mov rdx, rcx
rol rdx, 6
nop
mov r8d, dword [0x141dc11c0]
sub r8d, dword [0x141dc11c4]
xor r8d, 0x40092504
or r8d, 0xb544d2eb
imul r8d, r8d, 0x9ef8824f
cmp r8d, 0x883aadd1
jb 0x14001ab50
xor edx, ecx
movzx ecx, dx
add rax, rcx
nop word cs:[rax + rax]
mov ecx, dword [0x141dc11c8]
and ecx, dword [0x141dc11cc]
imul ecx, ecx, 0x557ee54d
add ecx, 0xb38a5832
cmp ecx, 0x1eaa7852
jb 0x14001ab90
ret

Function at 0x14001abc0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov ecx, 0x5c4125e3
sub rcx, rdx
xor rcx, 0x373f6b78
mov rdx, rcx
rol rdx, 6
nop dword [rax]
mov r8d, dword [0x141dc11d0]
or r8d, dword [0x141dc11d4]
and r8d, 0x6d60a463
imul r8, r8, 0x29a2d605
shr r8, 0x3b
xor r8d, 0x8d5af683
cmp r8d, 0x3fb03450
jb 0x14001abe0
xor edx, ecx
movzx ecx, dx
add rax, rcx
xor ecx, ecx
nop word [rax + rax]
test cl, cl
jne 0x14001ac20
ret

Function at 0x14001ac60
Capabilities:
Encode data using xor

Disassembly:
imul rax, rdx, 0x62b15481
add rax, 0x5e4ee9e
nop dword [rax]
mov edx, dword [0x141dc11d8]
or edx, dword [str.lQU:]
imul edx, edx, 0x2b95b600
imul rdx, rdx, 0xe01d837
shr rdx, 0x3b
xor edx, 0x42834551
cmp edx, 0xf3e21399
ja 0x14001ac70
mov r8, rax
rol r8, 2
xor r8, rax
nop word cs:[rax + rax]
mov eax, dword [0x141dc11e0]
xor edx, edx
div dword [0x141dc11e4]
add eax, 0x2fb4d833
xor eax, 0x7000cf92
add eax, 0xf5317a9d
cmp eax, 0x590266a
jb 0x14001acb0
movzx eax, r8w
add rcx, rax
mov rax, rcx
ret

Function at 0x14001ad20
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x141dc11e8]
xor edx, edx
div dword [0x141dc11ec]
add r8, 0xffffffffdc3d715b
xor r8, 0xffffffff821c43dc
nop
mov eax, dword [0x141dc11f0]
xor eax, dword [0x141dc11f4]
and eax, 0xf3b71aee
cmp eax, 0x4d6a57d1
je 0x14001ad40
mov r9, r8
rol r9, 2
mov eax, dword [0x141dc11f8]
xor edx, edx
div dword [0x141dc11fc]
nop dword [rax]
mov eax, dword [0x141dc1200]
imul eax, dword [0x141dc1204]
shr eax, 2
imul rax, rax, 0x4a9be8bb
shr rax, 0x3c
add eax, 0x76d1cd67
or eax, 0x2410671d
cmp eax, 0x7e9aded
jb 0x14001ad70
xor r9d, r8d
movzx eax, r9w
add rcx, rax
mov rax, rcx
ret

Function at 0x14001ae40
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
not rdx
mov rcx, rdx
shr rcx, 0xe
xor rcx, rdx
mov rdx, rcx
shr rdx, 6
xor rdx, rcx
imul rdx, rdx, 0xc197ff8
mov rcx, rdx
rol rcx, 5
xor rcx, rdx
nop dword [rax + rax]
mov edx, dword [0x141dc1218]
imul edx, dword [0x141dc121c]
or edx, 0x88800000
xor edx, 0x40010
and edx, 0x8984b210
cmp edx, 0x9fa66fc9
ja 0x14001ae70
movzx ecx, cx
add rax, rcx
ret

Function at 0x14001aee0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
imul rcx, rdx, 0x124d8dad
movabs rdx, 0x204573293aacce3
add rcx, rdx
nop word [rax + rax]
mov edx, dword [0x141dc1228]
sub edx, dword [str.r0]
xor edx, 0x529020
or edx, 0xb32d6d9e
xor edx, 0x9473b324
cmp edx, 0x19fbaa74
jb 0x14001af00
mov rdx, rcx
rol rdx, 6
xor r8d, r8d
test r8b, r8b
jne 0x14001af30
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret
Function at 0x14001afd0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rdx
shr rax, 1
xor rax, rdx
mov rdx, rax
rol rdx, 1
xor rdx, rax
mov r8, rdx
rol r8, 7
xor r8, rdx
neg r8
mov r9, r8
rol r9, 1
nop word cs:[rax + rax]
mov eax, dword [0x141dc1238]
xor edx, edx
div dword [0x141dc123c]
xor eax, 0x6d1ce53f
imul eax, eax, 0x80aee9fc
cmp eax, 0xe802d9a1
je 0x14001b000
xor r9d, r8d
movzx eax, r9w
add rcx, rax
mov rax, rcx
ret

Function at 0x14001b1b0
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov rax, rcx
mov rcx, rdx
xor rcx, 0xffffffffbe5baa01
rol rcx, 1
xor rcx, rdx
xor rcx, 0x41a455fe
nop word [rax + rax]
mov edx, dword [0x141dc1268]
and edx, dword [0x141dc126c]
xor edx, 0x6888021a
and edx, 0xfbc9129e
imul r8, rdx, 0x89ad0d1
shr r8, 0x20
sub edx, r8d
shr edx, 1
add edx, r8d
shr edx, 0x1c
cmp edx, 0xc35145e0
ja 0x14001b1d0
mov rdx, rcx
rol rdx, 1
nop dword [rax]
mov r8d, dword [0x141dc1270]
imul r8d, dword [0x141dc1274]
imul r8d, r8d, 0xa73d6386
add r8d, 0x6a5543ca
and r8d, 0xfa7e2490
cmp r8d, 0x34347d75
jb 0x14001b210
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret

Function at 0x14001b250
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov r8d, 0x366f1e29
sub r8, rdx
mov rcx, r8
shr rcx, 0x10
xor rcx, r8
nop word cs:[rax + rax]
mov edx, dword [0x141dc1278]
xor edx, dword [0x141dc127c]
or edx, 0x5adfd9cf
cmp edx, 0x53a9e1c5
je 0x14001b270
xor rcx, 0x6109122b
imul rcx, rcx, 0xffffffffda2c0f9c
mov rdx, rcx
rol rdx, 6
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret

Function at 0x14001b3d0
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov rax, rcx
mov rcx, rdx
shr rcx, 1
xor rcx, rdx
xor rcx, 0xffffffffb83bfeb1
nop word cs:[rax + rax]
mov edx, dword [0x141dc12a0]
sub edx, dword [0x141dc12a4]
or edx, 0x60ab1c1d
add edx, 0x7088ace2
xor edx, 0x6bbf1327
cmp edx, 0x750dd615
ja 0x14001b3f0
mov rdx, rcx
rol rdx, 3
nop dword [rax]
mov r8d, dword [0x141dc12a8]
add r8d, dword [0x141dc12ac]
and r8d, 0xc37dcaca
cmp r8d, 0xddc51c89
je 0x14001b420
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret

Function at 0x14001b450
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
add rdx, 0x644f0c2b
mov rcx, rdx
rol rcx, 2
xor rcx, rdx
nop word cs:[rax + rax]
mov edx, dword [0x141dc12b0]
xor edx, dword [0x141dc12b4]
imul edx, edx, 0x15dfcabb
xor edx, 0xf35cb6a4
add edx, 0x762ec88d
cmp edx, 0x18f2a1ca
jb 0x14001b470
movzx ecx, cx
xor edx, edx
nop dword [rax + rax]
test dl, dl
jne 0x14001b4a0
add rax, rcx
ret