joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14001f980
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400d6714], 1
je 0x14001f9e9
mov r8, rdx
movabs r10, 0xaaaaaaaaaaaaaaab
xor r9d, r9d
mov eax, 0x18
nop
mov r11, rax
mov rsi, rdx
mov rax, r9
mul r10
shr rdx, 1
and rdx, 0xfffffffffffffff8
lea rax, [rdx + rdx*2]
neg rax
movzx edx, byte [r8 + r11]
xor dl, byte [rsi + rax]
mov byte [rcx + r11 - 0x18], dl
inc r11
mov rax, r11
mov edx, r11d
inc rsi
inc r9
cmp r11d, 0x22
mov rdx, rsi
jne 0x14001f9a0
mov dword [0x1400d6714], 1
mov eax, 0xbeebb1ca
pop rsi
ret

Function at 0x14001f9f0
Capabilities:
Encode data using xor

Disassembly:
cmp dword [0x1400d6704], 1
je 0x14001fa27
xor eax, eax
nop dword [rax + rax]
movzx r8d, byte [rdx + rax + 0x10]
xor r8b, byte [rdx + rax]
mov byte [rcx + rax], r8b
mov r8, rax
inc r8
mov rax, r8
cmp r8d, 0xa
jne 0x14001fa00
mov dword [0x1400d6704], 1
mov eax, 0xa2ecdac7
ret

Function at 0x14001fcc0
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400d6728], 1
je 0x14001fd23
mov r8, rdx
movabs r10, 0xd79435e50d79435f
xor r9d, r9d
mov eax, 0x13
nop
mov r11, rax
mov rsi, rdx
mov rax, r9
mul r10
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + r11]
xor dl, byte [rsi + rax]
mov byte [rcx + r11 - 0x13], dl
inc r11
mov rax, r11
mov edx, r11d
inc rsi
inc r9
cmp r11d, 0x21
mov rdx, rsi
jne 0x14001fce0
mov dword [0x1400d6728], 1
mov eax, 0xf742d62f
pop rsi
ret

Function at 0x14001fd30
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400d673c], 1
je 0x14001fda9
mov r8, rdx
movabs r10, 0x1a7b9611a7b9611b
xor r9d, r9d
mov r11, rdx
mov esi, 0x1d
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r9
mul r10
mov rax, r9
sub r9, rdx
shr r9, 1
add r9, rdx
shr r9, 4
imul rdx, r9, 0xffffffffffffffe3
movzx r9d, byte [r8 + rsi]
xor r9b, byte [r11 + rdx]
mov byte [rcx + rsi - 0x1d], r9b
mov rdx, rsi
inc rdx
mov rsi, rdx
inc r11
inc rax
cmp edx, 0x2c
mov r9, rax
jne 0x14001fd60
mov dword [0x1400d673c], 1
mov eax, 0xdf5915e0
pop rsi
ret

Function at 0x14001fee0
Capabilities:
Encode data using xor

Disassembly:
cmp dword [0x1400d6744], 1
je 0x14001ff17
xor eax, eax
nop dword [rax + rax]
movzx r8d, byte [rdx + rax + 0x10]
xor r8b, byte [rdx + rax]
mov byte [rcx + rax], r8b
mov r8, rax
inc r8
mov rax, r8
cmp r8d, 3
jne 0x14001fef0
mov dword [0x1400d6744], 1
mov eax, 0x21d05f4c
ret

Function at 0x14001ff20
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400d678c], 1
je 0x14001ff99
mov r8, rdx
movabs r10, 0x642c8590b21642c9
xor r9d, r9d
mov r11, rdx
mov esi, 0x17
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r9
mul r10
mov rax, r9
sub r9, rdx
shr r9, 1
add r9, rdx
shr r9, 4
imul rdx, r9, 0xffffffffffffffe9
movzx r9d, byte [r8 + rsi]
xor r9b, byte [r11 + rdx]
mov byte [rcx + rsi - 0x17], r9b
mov rdx, rsi
inc rdx
mov rsi, rdx
inc r11
inc rax
cmp edx, 0x27
mov r9, rax
jne 0x14001ff50
mov dword [0x1400d678c], 1
mov eax, 0xc145963e
pop rsi
ret
Function at 0x14001ffa0
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400d6758], 1
je 0x140020003
mov r8, rdx
movabs r10, 0x2e8ba2e8ba2e8ba3
xor r9d, r9d
mov eax, 0x16
nop
mov r11, rax
mov rsi, rdx
mov rax, r9
mul r10
shr rdx, 2
imul rax, rdx, 0xffffffffffffffea
movzx edx, byte [r8 + r11]
xor dl, byte [rsi + rax]
mov byte [rcx + r11 - 0x16], dl
inc r11
mov rax, r11
mov edx, r11d
inc rsi
inc r9
cmp r11d, 0x25
mov rdx, rsi
jne 0x14001ffc0
mov dword [0x1400d6758], 1
mov eax, 0x62e4691c
pop rsi
ret

Function at 0x140020150
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400d67a0], 1
je 0x1400201c9
mov r8, rdx
movabs r10, 0x642c8590b21642c9
xor r9d, r9d
mov r11, rdx
mov esi, 0x17
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r9
mul r10
mov rax, r9
sub r9, rdx
shr r9, 1
add r9, rdx
shr r9, 4
imul rdx, r9, 0xffffffffffffffe9
movzx r9d, byte [r8 + rsi]
xor r9b, byte [r11 + rdx]
mov byte [rcx + rsi - 0x17], r9b
mov rdx, rsi
inc rdx
mov rsi, rdx
inc r11
inc rax
cmp edx, 0x24
mov r9, rax
jne 0x140020180
mov dword [0x1400d67a0], 1
mov eax, 0x7c22e57e
pop rsi
ret

Function at 0x1400201d0
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400d67b4], 1
je 0x140020240
mov r8, rdx
movabs r9, 0x4924924924924925
xor eax, eax
mov r10, rdx
mov r11d, 0x1c
nop word cs:[rax + rax]
nop dword [rax]
mov rsi, rax
shr rax, 2
mul r9
shr rdx, 1
imul rax, rdx, 0xffffffffffffffe4
movzx edx, byte [r8 + r11]
xor dl, byte [r10 + rax]
mov byte [rcx + r11 - 0x1c], dl
mov rax, r11
inc rax
mov r11, rax
inc r10
inc rsi
cmp eax, 0x2a
mov rax, rsi
jne 0x140020200
mov dword [0x1400d67b4], 1
mov eax, 0xbe0bff70
pop rsi
ret

Function at 0x140020250
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400d67c8], 1
je 0x1400202b3
mov r8, rdx
movabs r10, 0x2e8ba2e8ba2e8ba3
xor r9d, r9d
mov eax, 0x16
nop
mov r11, rax
mov rsi, rdx
mov rax, r9
mul r10
shr rdx, 2
imul rax, rdx, 0xffffffffffffffea
movzx edx, byte [r8 + r11]
xor dl, byte [rsi + rax]
mov byte [rcx + r11 - 0x16], dl
inc r11
mov rax, r11
mov edx, r11d
inc rsi
inc r9
cmp r11d, 0x23
mov rdx, rsi
jne 0x140020270
mov dword [0x1400d67c8], 1
mov eax, 0x9a1f5c78
pop rsi
ret

Function at 0x1400202c0
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400d67dc], 1
je 0x140020339
mov r8, rdx
movabs r10, 0x8618618618618619
xor r9d, r9d
mov r11, rdx
mov esi, 0x15
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r9
mul r10
mov rax, r9
sub r9, rdx
shr r9, 1
add r9, rdx
shr r9, 4
imul rdx, r9, 0xffffffffffffffeb
movzx r9d, byte [r8 + rsi]
xor r9b, byte [r11 + rdx]
mov byte [rcx + rsi - 0x15], r9b
mov rdx, rsi
inc rdx
mov rsi, rdx
inc r11
inc rax
cmp edx, 0x24
mov r9, rax
jne 0x1400202f0
mov dword [0x1400d67dc], 1
mov eax, 0xb595a6f8
pop rsi
ret
Function at 0x140020340
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400d67f0], 1
je 0x1400203a9
mov r8, rdx
movabs r10, 0xaaaaaaaaaaaaaaab
xor r9d, r9d
mov eax, 0x18
nop
mov r11, rax
mov rsi, rdx
mov rax, r9
mul r10
shr rdx, 1
and rdx, 0xfffffffffffffff8
lea rax, [rdx + rdx*2]
neg rax
movzx edx, byte [r8 + r11]
xor dl, byte [rsi + rax]
mov byte [rcx + r11 - 0x18], dl
inc r11
mov rax, r11
mov edx, r11d
inc rsi
inc r9
cmp r11d, 0x27
mov rdx, rsi
jne 0x140020360
mov dword [0x1400d67f0], 1
mov eax, 0x149e9bee
pop rsi
ret

Function at 0x1400203b0
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400d67f8], 1
je 0x140020419
mov r8, rdx
movabs r10, 0xaaaaaaaaaaaaaaab
xor r9d, r9d
mov eax, 0x18
nop
mov r11, rax
mov rsi, rdx
mov rax, r9
mul r10
shr rdx, 1
and rdx, 0xfffffffffffffff8
lea rax, [rdx + rdx*2]
neg rax
movzx edx, byte [r8 + r11]
xor dl, byte [rsi + rax]
mov byte [rcx + r11 - 0x18], dl
inc r11
mov rax, r11
mov edx, r11d
inc rsi
inc r9
cmp r11d, 0x1c
mov rdx, rsi
jne 0x1400203d0
mov dword [0x1400d67f8], 1
mov eax, 0x9c5d5863
pop rsi
ret

Function at 0x140020420
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400d6800], 1
je 0x140020483
mov r8, rdx
movabs r10, 0x4ec4ec4ec4ec4ec5
xor r9d, r9d
mov eax, 0x1a
nop
mov r11, rax
mov rsi, rdx
mov rax, r9
mul r10
shr rdx, 3
imul rax, rdx, 0xffffffffffffffe6
movzx edx, byte [r8 + r11]
xor dl, byte [rsi + rax]
mov byte [rcx + r11 - 0x1a], dl
inc r11
mov rax, r11
mov edx, r11d
inc rsi
inc r9
cmp r11d, 0x1e
mov rdx, rsi
jne 0x140020440
mov dword [0x1400d6800], 1
mov eax, 0xa1b17815
pop rsi
ret

Function at 0x1400204d0
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400d6810], 1
je 0x140020549
mov r8, rdx
movabs r10, 0x1a7b9611a7b9611b
xor r9d, r9d
mov r11, rdx
mov esi, 0x1d
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r9
mul r10
mov rax, r9
sub r9, rdx
shr r9, 1
add r9, rdx
shr r9, 4
imul rdx, r9, 0xffffffffffffffe3
movzx r9d, byte [r8 + rsi]
xor r9b, byte [r11 + rdx]
mov byte [rcx + rsi - 0x1d], r9b
mov rdx, rsi
inc rdx
mov rsi, rdx
inc r11
inc rax
cmp edx, 0x21
mov r9, rax
jne 0x140020500
mov dword [0x1400d6810], 1
mov eax, 0x1621c94d
pop rsi
ret

Function at 0x140020550
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400d6818], 1
je 0x1400205c0
mov r8, rdx
movabs r9, 0x4924924924924925
xor eax, eax
mov r10, rdx
mov r11d, 0x1c
nop word cs:[rax + rax]
nop dword [rax]
mov rsi, rax
shr rax, 2
mul r9
shr rdx, 1
imul rax, rdx, 0xffffffffffffffe4
movzx edx, byte [r8 + r11]
xor dl, byte [r10 + rax]
mov byte [rcx + r11 - 0x1c], dl
mov rax, r11
inc rax
mov r11, rax
inc r10
inc rsi
cmp eax, 0x20
mov rax, rsi
jne 0x140020580
mov dword [0x1400d6818], 1
mov eax, 0x66e603c
pop rsi
ret
Function at 0x1400205d0
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400d6820], 1
je 0x140020633
mov r8, rdx
movabs r10, 0x2e8ba2e8ba2e8ba3
xor r9d, r9d
mov eax, 0x16
nop
mov r11, rax
mov rsi, rdx
mov rax, r9
mul r10
shr rdx, 2
imul rax, rdx, 0xffffffffffffffea
movzx edx, byte [r8 + r11]
xor dl, byte [rsi + rax]
mov byte [rcx + r11 - 0x16], dl
inc r11
mov rax, r11
mov edx, r11d
inc rsi
inc r9
cmp r11d, 0x1a
mov rdx, rsi
jne 0x1400205f0
mov dword [0x1400d6820], 1
mov eax, 0x5b7d8911
pop rsi
ret

Function at 0x140020640
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400d6848], 1
je 0x1400206bf
mov r8, rdx
movabs r10, 0x842108421084211
xor r9d, r9d
mov r11, rdx
mov esi, 0x1f
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r9
mul r10
mov rax, r9
sub r9, rdx
shr r9, 1
add r9, rdx
shr r9, 4
mov rdx, r9
shl r9, 5
sub rdx, r9
movzx r9d, byte [r8 + rsi]
xor r9b, byte [r11 + rdx]
mov byte [rcx + rsi - 0x1f], r9b
mov rdx, rsi
inc rdx
mov rsi, rdx
inc r11
inc rax
cmp edx, 0x2c
mov r9, rax
jne 0x140020670
mov dword [0x1400d6848], 1
mov eax, 0xd984aa4d
pop rsi
ret

Function at 0x1400206d0
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400d6864], 1
je 0x140020749
mov r8, rdx
movabs r10, 0x1a7b9611a7b9611b
xor r9d, r9d
mov r11, rdx
mov esi, 0x1d
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r9
mul r10
mov rax, r9
sub r9, rdx
shr r9, 1
add r9, rdx
shr r9, 4
imul rdx, r9, 0xffffffffffffffe3
movzx r9d, byte [r8 + rsi]
xor r9b, byte [r11 + rdx]
mov byte [rcx + rsi - 0x1d], r9b
mov rdx, rsi
inc rdx
mov rsi, rdx
inc r11
inc rax
cmp edx, 0x34
mov r9, rax
jne 0x140020700
mov dword [0x1400d6864], 1
mov eax, 0xc34c4278
pop rsi
ret

Function at 0x140020750
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400d6878], 1
je 0x1400207b3
mov r8, rdx
movabs r10, 0x2e8ba2e8ba2e8ba3
xor r9d, r9d
mov eax, 0x16
nop
mov r11, rax
mov rsi, rdx
mov rax, r9
mul r10
shr rdx, 2
imul rax, rdx, 0xffffffffffffffea
movzx edx, byte [r8 + r11]
xor dl, byte [rsi + rax]
mov byte [rcx + r11 - 0x16], dl
inc r11
mov rax, r11
mov edx, r11d
inc rsi
inc r9
cmp r11d, 0x24
mov rdx, rsi
jne 0x140020770
mov dword [0x1400d6878], 1
mov eax, 0x4832ff9b
pop rsi
ret

Function at 0x1400207c0
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400d6768], 1
je 0x140020823
mov r8, rdx
movabs r10, 0x4ec4ec4ec4ec4ec5
xor r9d, r9d
mov eax, 0x1a
nop
mov r11, rax
mov rsi, rdx
mov rax, r9
mul r10
shr rdx, 3
imul rax, rdx, 0xffffffffffffffe6
movzx edx, byte [r8 + r11]
xor dl, byte [rsi + rax]
mov byte [rcx + r11 - 0x1a], dl
inc r11
mov rax, r11
mov edx, r11d
inc rsi
inc r9
cmp r11d, 0x26
mov rdx, rsi
jne 0x1400207e0
mov dword [0x1400d6768], 1
mov eax, 0xeafa70a0
pop rsi
ret
Function at 0x1400209a0
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400d6834], 1
je 0x140020a03
mov r8, rdx
movabs r10, 0x2e8ba2e8ba2e8ba3
xor r9d, r9d
mov eax, 0x16
nop
mov r11, rax
mov rsi, rdx
mov rax, r9
mul r10
shr rdx, 2
imul rax, rdx, 0xffffffffffffffea
movzx edx, byte [r8 + r11]
xor dl, byte [rsi + rax]
mov byte [rcx + r11 - 0x16], dl
inc r11
mov rax, r11
mov edx, r11d
inc rsi
inc r9
cmp r11d, 0x24
mov rdx, rsi
jne 0x1400209c0
mov dword [0x1400d6834], 1
mov eax, 0x2e84bd4d
pop rsi
ret

Function at 0x140020a10
Capabilities:
Encode data using xor

Disassembly:
cmp dword [0x1400d6778], 1
je 0x140020a47
xor eax, eax
nop dword [rax + rax]
movzx r8d, byte [rdx + rax + 0x10]
xor r8b, byte [rdx + rax]
mov byte [rcx + rax], r8b
mov r8, rax
inc r8
mov rax, r8
cmp r8d, 0xc
jne 0x140020a20
mov dword [0x1400d6778], 1
mov eax, 0x4b0ac7bf
ret

Function at 0x140020db0
Capabilities:
Encode data using xor

Disassembly:
cmp dword [0x1400d58c8], 1
je 0x140020dee
xor eax, eax
nop dword [rax + rax]
movzx r8d, byte [rdx + rax + 0x10]
mov r9d, eax
and r9d, 0xf
xor r8b, byte [rdx + r9]
mov byte [rcx + rax], r8b
mov r8, rax
inc r8
mov rax, r8
cmp r8d, 0x2d
jne 0x140020dc0
mov dword [0x1400d58c8], 1
mov eax, 0xd88ae265
ret

Function at 0x140021430
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400d58dc], 1
je 0x140021493
mov r8, rdx
movabs r10, 0xd79435e50d79435f
xor r9d, r9d
mov eax, 0x13
nop
mov r11, rax
mov rsi, rdx
mov rax, r9
mul r10
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + r11]
xor dl, byte [rsi + rax]
mov byte [rcx + r11 - 0x13], dl
inc r11
mov rax, r11
mov edx, r11d
inc rsi
inc r9
cmp r11d, 0x23
mov rdx, rsi
jne 0x140021450
mov dword [0x1400d58dc], 1
mov eax, 0x31df8638
pop rsi
ret

Function at 0x140023080
Capabilities:
Encode data using xor

Disassembly:
cmp dword [0x1400d64c4], 1
je 0x1400230dd
mov r8, rdx
movabs r10, 0x8888888888888889
xor r9d, r9d
nop dword [rax]
mov rax, r9
mul r10
shr rdx, 4
mov eax, edx
imul eax, edx, 0xffffffe2
movzx edx, byte [r8 + r9 + 0x1e]
mov r11d, r9d
add eax, r9d
cdqe
xor dl, byte [r8 + rax]
mov byte [rcx + r9], dl
mov rax, r9
inc rax
mov r9, rax
cmp eax, 0x29
jne 0x1400230a0
mov dword [0x1400d64c4], 1
mov eax, 0x8a7eb0d7
ret

Function at 0x1400230f0
Capabilities:
Encode data using xor

Disassembly:
cmp dword [0x1400d64f4], 1
je 0x14002315c
mov r8, rdx
movabs r10, 0x842108421084211
xor r9d, r9d
nop dword [rax]
mov rax, r9
mul r10
mov rax, r9
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
mov edx, eax
shl eax, 5
sub edx, eax
movzx eax, byte [r8 + r9 + 0x1f]
mov r11d, r9d
add edx, r9d
movsxd rdx, edx
xor al, byte [r8 + rdx]
mov byte [rcx + r9], al
mov rax, r9
inc rax
mov r9, rax
cmp eax, 0x29
jne 0x140023110
mov dword [0x1400d64f4], 1
mov eax, 0x3abe38d3
ret

Function at 0x140023170
Capabilities:
Encode data using xor

Disassembly:
cmp dword [0x1400d6534], 1
je 0x1400231ae
xor eax, eax
nop dword [rax + rax]
movzx r8d, byte [rdx + rax + 0x10]
mov r9d, eax
and r9d, 0xf
xor r8b, byte [rdx + r9]
mov byte [rcx + rax], r8b
mov r8, rax
inc r8
mov rax, r8
cmp r8d, 0x3b
jne 0x140023180
mov dword [0x1400d6534], 1
mov eax, 0xd6c75b3
ret
Function at 0x1400231c0
Capabilities:
Encode data using xor

Disassembly:
cmp dword [0x1400d656c], 1
je 0x140023212
xor eax, eax
nop dword [rax + rax]
mov r8d, eax
mov r9d, eax
imul r9, r9, 0x51eb851f
shr r9, 0x23
imul r9d, r9d, 0xffffffe7
movzx r10d, byte [rdx + rax + 0x19]
add r9d, eax
movsxd r8, r9d
xor r10b, byte [rdx + r8]
mov byte [rcx + rax], r10b
mov r8, rax
inc r8
mov rax, r8
cmp r8d, 0x33
jne 0x1400231d0
mov dword [0x1400d656c], 1
mov eax, 0x5b389eaf
ret

Function at 0x140023220
Capabilities:
Encode data using xor

Disassembly:
cmp dword [0x1400d5968], 1
je 0x14002325e
xor eax, eax
nop dword [rax + rax]
movzx r8d, byte [rdx + rax + 0x10]
mov r9d, eax
and r9d, 0xf
xor r8b, byte [rdx + r9]
mov byte [rcx + rax], r8b
mov r8, rax
inc r8
mov rax, r8
cmp r8d, 0x26
jne 0x140023230
mov dword [0x1400d5968], 1
mov eax, 0x4a121964
ret

Function at 0x140023270
Capabilities:
Encode data using xor

Disassembly:
cmp dword [0x1400d5df0], 1
je 0x1400232c6
xor eax, eax
nop dword [rax + rax]
mov r8d, eax
mov r9d, eax
shr r9d, 2
imul r9, r9, 0x24924925
shr r9, 0x20
imul r9d, r9d, 0xffffffe4
movzx r10d, byte [rdx + rax + 0x1c]
add r9d, eax
movsxd r8, r9d
xor r10b, byte [rdx + r8]
mov byte [rcx + rax], r10b
mov r8, rax
inc r8
mov rax, r8
cmp r8d, 0x4e
jne 0x140023280
mov dword [0x1400d5df0], 1
mov eax, 0xfa31d31f
ret

Function at 0x140024500
Capabilities:
Encode data using xor

Disassembly:
cmp dword [0x1400d6494], 1
je 0x14002455d
mov r8, rdx
movabs r10, 0x2e8ba2e8ba2e8ba3
xor r9d, r9d
nop dword [rax]
mov rax, r9
mul r10
shr rdx, 2
mov eax, edx
imul eax, edx, 0xffffffea
movzx edx, byte [r8 + r9 + 0x16]
mov r11d, r9d
add eax, r9d
cdqe
xor dl, byte [r8 + rax]
mov byte [rcx + r9], dl
mov rax, r9
inc rax
mov r9, rax
cmp eax, 0x26
jne 0x140024520
mov dword [0x1400d6494], 1
mov eax, 0x681c4088
ret

Function at 0x1400245a0
Capabilities:
Encode data using xor

Disassembly:
cmp dword [0x1400d5908], 1
je 0x140024601
mov r8, rdx
movabs r10, 0xaaaaaaaaaaaaaaab
xor r9d, r9d
nop dword [rax]
mov rax, r9
mul r10
shr rdx, 4
mov eax, edx
shl eax, 3
lea eax, [rax + rax*2]
movzx edx, byte [r8 + r9 + 0x18]
mov r11d, r9d
sub r11d, eax
movsxd rax, r11d
xor dl, byte [r8 + rax]
mov byte [rcx + r9], dl
mov rax, r9
inc rax
mov r9, rax
cmp eax, 0x26
jne 0x1400245c0
mov dword [0x1400d5908], 1
mov eax, 0xf603f411
ret

Function at 0x140024610
Capabilities:
Encode data using xor

Disassembly:
cmp dword [0x1400d593c], 1
je 0x14002467c
mov r8, rdx
movabs r10, 0x842108421084211
xor r9d, r9d
nop dword [rax]
mov rax, r9
mul r10
mov rax, r9
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
mov edx, eax
shl eax, 5
sub edx, eax
movzx eax, byte [r8 + r9 + 0x1f]
mov r11d, r9d
add edx, r9d
movsxd rdx, edx
xor al, byte [r8 + rdx]
mov byte [rcx + r9], al
mov rax, r9
inc rax
mov r9, rax
cmp eax, 0x30
jne 0x140024630
mov dword [0x1400d593c], 1
mov eax, 0xd7b3a4de
ret
Function at 0x140027500
Capabilities:
Encode data using xor

Disassembly:
cmp dword [0x1400d66d4], 1
je 0x140027561
mov r8, rdx
movabs r10, 0xcccccccccccccccd
xor r9d, r9d
nop dword [rax]
mov rax, r9
mul r10
shr rdx, 4
mov eax, edx
shl eax, 2
lea eax, [rax + rax*4]
movzx edx, byte [r8 + r9 + 0x14]
mov r11d, r9d
sub r11d, eax
movsxd rax, r11d
xor dl, byte [r8 + rax]
mov byte [rcx + r9], dl
mov rax, r9
inc rax
mov r9, rax
cmp eax, 0x17
jne 0x140027520
mov dword [0x1400d66d4], 1
mov eax, 0x83ce5a06
ret

Function at 0x140027a00
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400d663c], 1
je 0x140027a7f
mov r8, rdx
movabs r10, 0x842108421084211
xor r9d, r9d
mov r11, rdx
mov esi, 0x1f
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r9
mul r10
mov rax, r9
sub r9, rdx
shr r9, 1
add r9, rdx
shr r9, 4
mov rdx, r9
shl r9, 5
sub rdx, r9
movzx r9d, byte [r8 + rsi]
xor r9b, byte [r11 + rdx]
mov byte [rcx + rsi - 0x1f], r9b
mov rdx, rsi
inc rdx
mov rsi, rdx
inc r11
inc rax
cmp edx, 0x30
mov r9, rax
jne 0x140027a30
mov dword [0x1400d663c], 1
mov eax, 0xfe3669b5
pop rsi
ret

Function at 0x140028260
Capabilities:
Encode data using xor

Disassembly:
cmp dword [0x1400d6664], 1
je 0x1400282c1
mov r8, rdx
movabs r9, 0x4924924924924925
xor eax, eax
nop dword [rax + rax]
mov r10, rax
shr rax, 2
mul r9
shr rdx, 1
mov eax, edx
imul eax, edx, 0xffffffe4
movzx edx, byte [r8 + r10 + 0x1c]
mov r11d, r10d
add eax, r10d
cdqe
xor dl, byte [r8 + rax]
mov byte [rcx + r10], dl
inc r10
mov rax, r10
mov edx, r10d
cmp r10d, 0x24
jne 0x140028280
mov dword [0x1400d6664], 1
mov eax, 0x59c257aa
ret

Function at 0x1400283d0
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400d6680], 1
je 0x140028449
mov r8, rdx
movabs r10, 0x47ae147ae147ae15
xor r9d, r9d
mov r11, rdx
mov esi, 0x19
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r9
mul r10
mov rax, r9
sub r9, rdx
shr r9, 1
add r9, rdx
shr r9, 4
imul rdx, r9, 0xffffffffffffffe7
movzx r9d, byte [r8 + rsi]
xor r9b, byte [r11 + rdx]
mov byte [rcx + rsi - 0x19], r9b
mov rdx, rsi
inc rdx
mov rsi, rdx
inc r11
inc rax
cmp edx, 0x2f
mov r9, rax
jne 0x140028400
mov dword [0x1400d6680], 1
mov eax, 0xddc72145
pop rsi
ret

Function at 0x140028450
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400d66a0], 1
je 0x1400284c9
mov r8, rdx
movabs r10, 0x1a7b9611a7b9611b
xor r9d, r9d
mov r11, rdx
mov esi, 0x1d
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r9
mul r10
mov rax, r9
sub r9, rdx
shr r9, 1
add r9, rdx
shr r9, 4
imul rdx, r9, 0xffffffffffffffe3
movzx r9d, byte [r8 + rsi]
xor r9b, byte [r11 + rdx]
mov byte [rcx + rsi - 0x1d], r9b
mov rdx, rsi
inc rdx
mov rsi, rdx
inc r11
inc rax
cmp edx, 0x36
mov r9, rax
jne 0x140028480
mov dword [0x1400d66a0], 1
mov eax, 0xd1664114
pop rsi
ret
Function at 0x140028c20
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400d6624], 1
je 0x140028c83
mov r8, rdx
movabs r10, 0x4ec4ec4ec4ec4ec5
xor r9d, r9d
mov eax, 0x1a
nop
mov r11, rax
mov rsi, rdx
mov rax, r9
mul r10
shr rdx, 3
imul rax, rdx, 0xffffffffffffffe6
movzx edx, byte [r8 + r11]
xor dl, byte [rsi + rax]
mov byte [rcx + r11 - 0x1a], dl
inc r11
mov rax, r11
mov edx, r11d
inc rsi
inc r9
cmp r11d, 0x2b
mov rdx, rsi
jne 0x140028c40
mov dword [0x1400d6624], 1
mov eax, 0xa450ccfa
pop rsi
ret

Function at 0x140028c90
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400d65f8], 1
je 0x140028d0f
mov r8, rdx
movabs r10, 0x842108421084211
xor r9d, r9d
mov r11, rdx
mov esi, 0x1f
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r9
mul r10
mov rax, r9
sub r9, rdx
shr r9, 1
add r9, rdx
shr r9, 4
mov rdx, r9
shl r9, 5
sub rdx, r9
movzx r9d, byte [r8 + rsi]
xor r9b, byte [r11 + rdx]
mov byte [rcx + rsi - 0x1f], r9b
mov rdx, rsi
inc rdx
mov rsi, rdx
inc r11
inc rax
cmp edx, 0x37
mov r9, rax
jne 0x140028cc0
mov dword [0x1400d65f8], 1
mov eax, 0x50149674
pop rsi
ret

Function at 0x140029110
Capabilities:
Encode data using xor

Disassembly:
cmp dword [0x1400d4e18], 1
je 0x140029172
mov eax, 0x8d3dcb09
xor r8d, r8d
nop word cs:[rax + rax]
nop dword [rax + rax]
mov r9d, r8d
mov r10d, r8d
imul r10, rax
shr r10, 0x24
imul r10d, r10d, 0xffffffe3
movzx r11d, byte [rdx + r8 + 0x1d]
add r10d, r8d
movsxd r9, r10d
xor r11b, byte [rdx + r9]
mov byte [rcx + r8], r11b
mov r9, r8
inc r9
mov r8, r9
cmp r9d, 0x556
jne 0x140029130
mov dword [0x1400d4e18], 1
mov eax, 0x769ddc23
ret

Function at 0x140029180
Capabilities:
Encode data using xor

Disassembly:
cmp dword [0x1400d4e40], 1
je 0x1400291dd
mov r8, rdx
movabs r10, 0x4ec4ec4ec4ec4ec5
xor r9d, r9d
nop dword [rax]
mov rax, r9
mul r10
shr rdx, 3
mov eax, edx
imul eax, edx, 0xffffffe6
movzx edx, byte [r8 + r9 + 0x1a]
mov r11d, r9d
add eax, r9d
cdqe
xor dl, byte [r8 + rax]
mov byte [rcx + r9], dl
mov rax, r9
inc rax
mov r9, rax
cmp eax, 0x22
jne 0x1400291a0
mov dword [0x1400d4e40], 1
mov eax, 0xcb3ac032
ret

Function at 0x1400291f0
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
cmp dword [0x1400d4e90], 1
je 0x140029255
mov eax, 0xf0f0f0f1
xor r8d, r8d
nop word cs:[rax + rax]
nop dword [rax + rax]
mov r9d, r8d
mov r10d, r8d
imul r10, rax
shr r10, 0x24
mov r11d, r10d
shl r11d, 4
add r11d, r10d
movzx r10d, byte [rdx + r8 + 0x11]
sub r9d, r11d
movsxd r9, r9d
xor r10b, byte [rdx + r9]
mov byte [rcx + r8], r10b
mov r9, r8
inc r9
mov r8, r9
cmp r9d, 0x4b
jne 0x140029210
mov dword [0x1400d4e90], 1
mov eax, 0xfd814b71
ret