joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140017bf0
Capabilities:
Encode data using xor

Disassembly:
movabs r8, 0x7615abc6e8feaac
imul rax, rdx, 0x4b504a7f
add rax, r8
nop word cs:[rax + rax]
mov edx, dword [0x141dc2b68]
xor edx, dword [0x141dc2b6c]
and edx, 0xd5d789ea
xor edx, 0xd13a7bff
add edx, 0xdade8b9f
cmp edx, 0xe01c69ac
ja 0x140017c10
mov rdx, rax
rol rdx, 3
xor r8d, r8d
test r8b, r8b
jne 0x140017c40
xor edx, eax
movzx eax, dx
add rcx, rax
nop dword [rax]
mov eax, dword [0x141dc2b70]
xor edx, edx
div dword [0x141dc2b74]
cmp eax, 0xbc29d09f
je 0x140017c50
mov rax, rcx
ret

Function at 0x140017ca0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rdx
rol rax, 2
xor rax, rdx
mov rdx, rax
rol rdx, 2
xor rdx, rax
mov r8, rdx
rol r8, 4
mov rax, rcx
xor r8, rdx
mov ecx, 0x64137aec
sub rcx, r8
mov rdx, rcx
rol rdx, 4
xor rdx, rcx
movzx ecx, dx
add rax, rcx
nop dword [rax]
mov ecx, dword [0x141dc2b78]
imul ecx, dword [0x141dc2b7c]
xor ecx, 0x44004
or ecx, 0xe2b22f58
and ecx, 0xf2b66fdd
cmp ecx, 0xb08eebe2
je 0x140017ce0
ret

Function at 0x140017d10
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
neg r8
mov r9, r8
shr r9, 0xb
nop dword [rax]
mov eax, dword [0x141dc2b80]
xor edx, edx
div dword [0x141dc2b84]
and eax, 0x5f24ea3d
imul eax, eax, 0x2acbe137
add eax, 0x559816d5
cmp eax, 0x27c977ba
jb 0x140017d20
xor r9, r8
nop dword [rax + rax]
mov eax, dword [0x141dc2b88]
sub eax, dword [0x141dc2b8c]
imul eax, eax, 0xfb87cf78
cmp eax, 0xf78d58be
je 0x140017d50
mov rax, r9
rol rax, 6
mov edx, dword [str.RZ]
or edx, dword [0x141dc2b94]
add edx, 0xfa2b2406
xor edx, 0x3d691c0
cmp edx, 0x18e00b48
jb 0x140017d70
xor eax, r9d
movzx eax, ax
add rcx, rax
mov rax, rcx
ret

Function at 0x140017ef0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov ecx, 0x30557e17
sub rcx, rdx
xor rcx, 0xffffffff85b2e85f
mov rdx, rcx
rol rdx, 7
xor rdx, rcx
mov rcx, rdx
rol rcx, 3
xor rcx, rdx
nop word cs:[rax + rax]
mov edx, dword [0x141dc2ba8]
and edx, dword [0x141dc2bac]
or edx, 0x6ddc62fe
imul edx, edx, 0x23af2b5a
cmp edx, 0x87f9f682
ja 0x140017f20
movzx ecx, cx
add rax, rcx
nop word cs:[rax + rax]
mov ecx, dword [0x141dc2bb0]
xor ecx, dword [0x141dc2bb4]
imul ecx, ecx, 0xeffc5165
cmp ecx, 0x679dbb7
je 0x140017f50
ret

Function at 0x140017f70
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov r8, rdx
shr r8, 0x16
xor r8, rdx
xor r8, 0x5225f8f9
add r8, 0xffffffffe101709b
mov rcx, r8
shr rcx, 0xf
xor rcx, r8
mov rdx, rcx
rol rdx, 1
nop dword [rax + rax]
mov r8d, dword [0x141dc2bb8]
sub r8d, dword [0x141dc2bbc]
add r8d, 0xadf712dd
or r8d, 0x5eba22d2
add r8d, 0x2f566e22
cmp r8d, 0x2a883c57
ja 0x140017fa0
xor edx, ecx
movzx ecx, dx
add rax, rcx
nop word cs:[rax + rax]
mov ecx, dword [0x141dc2bc0]
imul ecx, dword [0x141dc2bc4]
and ecx, 0x4492031
xor ecx, 0x9a9313a4
cmp ecx, 0xad78187a
ja 0x140017fe0
nop word cs:[rax + rax]
mov ecx, dword [0x141dc2bc8]
or ecx, dword [0x141dc2bcc]
add ecx, 0xaf56864b
or ecx, 0x6001908
and ecx, 0x66189d1b
cmp ecx, 0xda7a4d2d
ja 0x140018010
ret
Function at 0x140018040
Capabilities:
Encode data using xor

Disassembly:
mov rax, rdx
rol rax, 7
xor rax, rdx
not rax
mov r8, rax
rol r8, 1
xor r8, rax
neg r8
mov r9, r8
rol r9, 6
mov eax, dword [0x141dc2bd0]
xor edx, edx
div dword [0x141dc2bd4]
xor eax, 0x159088
or eax, 0x7ee24e32
cmp eax, 0xa922198
je 0x140018060
xor r9d, r8d
movzx eax, r9w
add rcx, rax
mov rax, rcx
ret

Function at 0x140018090
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov rax, rcx
mov r8d, 0xeffa
sub r8, rdx
mov rcx, r8
shr rcx, 0x12
xor rcx, r8
mov rdx, rcx
rol rdx, 4
nop dword [rax]
mov r8d, dword [0x141dc2bd8]
sub r8d, dword [0x141dc2bdc]
imul r8, r8, 0x2a4f1ae7
shr r8, 0x3d
xor r8d, 0x3f51dfb9
add r8d, 0x29b79c08
cmp r8d, 0x44e2cf0b
jb 0x1400180b0
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret

Function at 0x140018190
Capabilities:
Encode data using xor

Disassembly:
imul rax, rdx, 0xffffffffba39bf93
movabs rdx, 0xe48a6ddf40790e95
add rdx, rax
mov rax, rdx
rol rax, 2
xor rax, rdx
movzx eax, ax
add rcx, rax
nop word cs:[rax + rax]
mov eax, dword [0x141dc2bf0]
or eax, dword [0x141dc2bf4]
and eax, 0xd70a9501
xor eax, 0x23d4a15e
cmp eax, 0x7c43e092
ja 0x1400181c0
mov r8d, 0x97c258c5
nop word cs:[rax + rax]
mov eax, dword [0x141dc2bf8]
xor edx, edx
div dword [0x141dc2bfc]
imul rax, r8
shr rax, 0x3d
xor eax, 0x65c774a4
imul eax, eax, 0xa77ccb35
cmp eax, 0xaad3d237
je 0x1400181f0
mov rax, rcx
ret

Function at 0x140018310
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
xor rdx, 0x6dacef6f
mov rcx, rdx
rol rcx, 4
xor rcx, rdx
mov edx, 0x7e5f762a
sub rdx, rcx
imul rdx, rdx, 0xdbc7650
mov rcx, rdx
rol rcx, 5
xor rcx, rdx
nop dword [rax]
mov edx, dword [0x141dc2c18]
or edx, dword [0x141dc2c1c]
xor edx, 0xfed210ee
add edx, 0xbb0d0bf3
and edx, 0xe0223ce1
cmp edx, 0x768afc8d
je 0x140018340
movzx ecx, cx
nop dword [rax]
mov edx, dword [0x141dc2c20]
or edx, dword [0x141dc2c24]
or edx, 0x719686af
and edx, 0xf396c6bf
cmp edx, 0x1e2f7ea3
je 0x140018370
add rax, rcx
ret

Function at 0x1400183a0
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
rol r8, 7
xor r8, rdx
mov rax, rcx
mov ecx, 0x58f23390
sub rcx, r8
shr rcx, 0x12
add r8, 0xffffffffa70dcc6f
xor rcx, r8
mov rdx, rcx
rol rdx, 4
nop word [rax + rax]
mov r8d, dword [0x141dc2c28]
add r8d, dword [0x141dc2c2c]
xor r8d, 0x28889811
or r8d, 0xd73425ea
add r8d, 0xae62c750
cmp r8d, 0xf09b2a4
jb 0x1400183d0
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret

Function at 0x140018410
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
add rdx, 0xffffffffca28c985
mov rcx, rdx
rol rcx, 6
xor rcx, rdx
nop word cs:[rax + rax]
mov edx, dword [0x141dc2c30]
or edx, dword [0x141dc2c34]
and edx, 0x322739ca
add edx, 0xee055a18
cmp edx, 0x15d62d06
ja 0x140018430
movzx edx, cx
nop word cs:[rax + rax]
mov ecx, dword [0x141dc2c38]
add ecx, dword [0x141dc2c3c]
imul ecx, ecx, 0xf03bd21e
xor ecx, 0x179ab7a7
cmp ecx, 0xc1bd55f4
ja 0x140018460
mov ecx, 0xc1ec2b73
add rax, rdx
nop dword [rax + rax]
mov edx, dword [0x141dc2c40]
imul edx, dword [0x141dc2c44]
imul rdx, rcx
shr rdx, 0x3f
or edx, 0x9d302382
xor edx, 0xb7621d83
cmp edx, 0x5f90f815
ja 0x140018490
ret
Function at 0x1400186c0
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov r9, rdx
shr r9, 1
nop dword [rax]
mov eax, dword [0x141dc2c80]
sub eax, dword [0x141dc2c84]
xor eax, 0x6fd4eed
imul eax, eax, 0xc63d0d4e
or eax, 0xf9a915ea
cmp eax, 0x880dfb4d
jb 0x1400186d0
mov eax, dword [0x141dc2c88]
xor edx, edx
div dword [0x141dc2c8c]
xor r9, r8
xor r9, 0xfffffffff20369e4
mov rdx, r9
shr rdx, 0x1d
xor rdx, r9
mov rax, rdx
shr rax, 0xc
xor rax, rdx
mov rdx, rax
rol rdx, 2
nop word cs:[rax + rax]
mov r8d, dword [0x141dc2c90]
imul r8d, dword [0x141dc2c94]
imul r8d, r8d, 0x5db9af7c
or r8d, 0xfe7fdf6b
cmp r8d, 0x4c1573cf
je 0x140018730
xor edx, eax
movzx eax, dx
add rcx, rax
mov rax, rcx
ret

Function at 0x140018770
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov ecx, 0x9b7cd65
sub rcx, rdx
xor rcx, 0x10d50ce3
inc rcx
mov rdx, rcx
rol rdx, 1
nop dword [rax + rax]
mov r8d, dword [0x141dc2c98]
xor r8d, dword [0x141dc2c9c]
or r8d, 0x37c067b0
imul r8d, r8d, 0xdd1e841a
cmp r8d, 0xea74eed7
je 0x140018790
nop word cs:[rax + rax]
mov r8d, dword [0x141dc2ca0]
sub r8d, dword [0x141dc2ca4]
add r8d, 0x86fd4be8
cmp r8d, 0x9dbdba97
jb 0x1400187c0
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret

Function at 0x140018820
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov rcx, 0xffffffffde6555c5
sub rcx, rdx
mov rdx, rcx
shr rdx, 6
xor rdx, rcx
mov rcx, 0xffffffffe0036f85
sub rcx, rdx
nop word cs:[rax + rax]
mov edx, dword [0x141dc2ca8]
add edx, dword [0x141dc2cac]
xor edx, 0x1080081
or edx, 0xdce0003c
and edx, 0xdde802bd
cmp edx, 0x11f4438c
jb 0x140018850
mov rdx, rcx
rol rdx, 2
xor rdx, rcx
mov ecx, dword [0x141dc2cb0]
or ecx, dword [0x141dc2cb4]
imul ecx, ecx, 0x3a658025
or ecx, 0x80531019
xor ecx, 0x37c39645
cmp ecx, 0x9fe8fc0c
jb 0x140018880
movzx ecx, dx
add rax, rcx
ret

Function at 0x140018900
Capabilities:
Encode data using xor

Disassembly:
mov rax, rdx
rol rax, 1
xor rax, rdx
mov rdx, rax
shr rdx, 0xe
xor rdx, rax
mov rax, rdx
rol rax, 6
xor rax, rdx
mov r8, 0xffffffff912a2872
sub r8, rax
mov r9, r8
rol r9, 1
nop dword [rax]
mov eax, dword [0x141dc2cc0]
xor edx, edx
div dword [0x141dc2cc4]
or eax, 0xe2836ca9
add eax, 0xc43fa33e
xor eax, 0xabc776d2
cmp eax, 0x542a51ee
ja 0x140018930
nop word cs:[rax + rax]
mov eax, dword [0x141dc2cc8]
sub eax, dword [0x141dc2ccc]
or eax, 0x80a00001
and eax, 0xc1bcc2a1
cmp eax, 0x89fe9607
je 0x140018960
xor r9d, r8d
movzx eax, r9w
add rcx, rax
mov rax, rcx
ret
Function at 0x140018a30
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov rcx, rdx
shr rcx, 2
nop word [rax + rax]
mov r8d, dword [0x141dc2ce0]
imul r8d, dword [0x141dc2ce4]
or r8d, 0x43d3161c
xor r8d, 0x89e364f7
imul r8d, r8d, 0x2ee55b1f
cmp r8d, 0xc25247c7
jb 0x140018a40
xor rcx, rdx
imul rdx, rcx, 0x73c5c8e8
add rdx, 0x1f3e11f8
mov rcx, rdx
rol rcx, 1
xor rcx, rdx
nop word [rax + rax]
mov edx, dword [0x141dc2ce8]
or edx, dword [0x141dc2cec]
xor edx, 0xfb6f1edb
add edx, 0x5c321eec
cmp edx, 0xa1fad3ae
ja 0x140018a90
and ecx, 0xfff9
add rax, rcx
nop dword [rax]
mov ecx, dword [0x141dc2cf0]
xor ecx, dword [0x141dc2cf4]
and ecx, 0x1a9f62
add ecx, 0xbc1f6419
and ecx, 0x188548
cmp ecx, 0xb72f2221
ja 0x140018ac0
ret

Function at 0x140018b30
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x141dc2cf8]
xor edx, edx
div dword [0x141dc2cfc]
mov rax, r8
rol rax, 6
xor rax, r8
mov r8, rax
shr r8, 0xa
xor r8, rax
nop word cs:[rax + rax]
mov eax, dword [0x141dc2d00]
xor eax, dword [0x141dc2d04]
or eax, 0x190
xor eax, 0x9008080
or eax, 0x74ef7e6f
cmp eax, 0x54396768
je 0x140018b60
xor r8, 0x11fe76aa
add r8, 0x6ca896b7
mov eax, dword [0x141dc2d08]
or eax, dword [0x141dc2d0c]
add eax, 0x1d376c04
and eax, 0xa04064b3
add eax, 0x99aad369
cmp eax, 0x1cdddc37
jb 0x140018b90
mov r9, r8
rol r9, 3
nop dword [rax]
mov eax, dword [0x141dc2d10]
xor edx, edx
div dword [0x141dc2d14]
imul eax, eax, 0x6d984dbc
cmp eax, 0x27939684
je 0x140018bc0
xor r9d, r8d
movzx eax, r9w
add rcx, rax
mov rax, rcx
ret

Function at 0x140018e50
Capabilities:
Encode data using xor

Disassembly:
mov r9, 0xffffffffe1a0a137
sub r9, rdx
mov r8, r9
shr r8, 0x1c
mov eax, dword [0x141dc2d58]
xor edx, edx
div dword [0x141dc2d5c]
xor r8, r9
mov r9, r8
rol r9, 5
nop dword [rax]
mov eax, dword [0x141dc2d60]
xor edx, edx
div dword [0x141dc2d64]
imul eax, eax, 0x39962c11
add eax, 0xeb1f8425
xor eax, 0xad3e11b0
cmp eax, 0x3e730561
jb 0x140018e80
nop word cs:[rax + rax]
mov eax, dword [0x141dc2d68]
imul eax, dword [0x141dc2d6c]
add eax, 0xe1207fbb
or eax, 0x816315a4
imul eax, eax, 0xca42bfee
cmp eax, 0x92dee37f
je 0x140018eb0
xor r9d, r8d
movzx eax, r9w
add rcx, rax
mov rax, rcx
ret

Function at 0x140019000
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
xor rdx, 0xffffffffbf7c5545
nop word [rax + rax]
mov ecx, dword [0x141dc2d80]
sub ecx, dword [0x141dc2d84]
imul ecx, ecx, 0xf94d7f3a
xor ecx, 0x33000edd
cmp ecx, 0xb884a297
ja 0x140019010
movabs r9, 0x2809eb325414699b
mov r8d, 0x9fe728e7
imul rcx, rdx, 0x5425fcd3
add rcx, r9
mov rdx, rcx
rol rdx, 4
nop word cs:[rax + rax]
mov r9d, dword [0x141dc2d88]
mov r10d, dword [0x141dc2d8c]
add r9d, r10d
add r9d, 0x97f69daf
imul r9, r8
shr r9, 0x3f
imul r9d, r9d, 0x4a93ba62
cmp r9d, 0xe7fc5da5
ja 0x140019060
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret
Function at 0x140019110
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov r8d, 0x366f1e29
sub r8, rdx
mov rcx, r8
shr rcx, 0x10
xor rcx, r8
nop word cs:[rax + rax]
mov edx, dword [0x141dc2d98]
or edx, dword [0x141dc2d9c]
imul edx, edx, 0xbf0e7199
xor edx, 0x44240010
or edx, 0x38dafc6e
cmp edx, 0xfa30bebc
je 0x140019130
xor rcx, 0x6109122b
imul rcx, rcx, 0xffffffffda2c0f9c
mov rdx, rcx
rol rdx, 6
xor edx, ecx
movzx ecx, dx
add rax, rcx
nop word cs:[rax + rax]
mov ecx, dword [0x141dc2da0]
sub ecx, dword [0x141dc2da4]
and ecx, 0xb0876046
imul rcx, rcx, 0x4cfcba53
shr rcx, 0x3d
cmp ecx, 0x28819ff8
je 0x140019180
ret

Function at 0x1400191b0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
xor rdx, 0xffffffff91021fe3
nop word [rax + rax]
mov ecx, dword [0x141dc2da8]
add ecx, dword [0x141dc2dac]
imul ecx, ecx, 0xe137d6da
and ecx, 0x519a3ef4
cmp ecx, 0x1ff0a0d2
je 0x1400191c0
mov rcx, rdx
shr rcx, 3
xor rcx, rdx
nop word [rax + rax]
mov edx, dword [0x141dc2db0]
xor edx, dword [0x141dc2db4]
imul rdx, rdx, 0x77d8beef
shr rdx, 0x3e
imul edx, edx, 0xd5a00316
or edx, 0x8de9de9d
cmp edx, 0x9ab50d4f
je 0x1400191f0
mov rdx, rcx
shr rdx, 0x1e
xor rdx, rcx
mov rcx, rdx
rol rcx, 6
xor ecx, edx
movzx ecx, cx
add rax, rcx
ret

Function at 0x140019240
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov ecx, 0x45cf8e61
sub rcx, rdx
nop dword [rax + rax]
mov edx, dword [0x141dc2db8]
xor edx, dword [0x141dc2dbc]
imul edx, edx, 0x5069a771
or edx, 0x7cdc7554
and edx, 0x7cfffd56
cmp edx, 0xf0954380
ja 0x140019250
imul rcx, rcx, 0xffffffffac9f0bcd
mov rdx, rcx
shr rdx, 3
xor rdx, rcx
not rdx
mov rcx, rdx
rol rcx, 1
xor ecx, edx
movzx ecx, cx
add rax, rcx
ret

Function at 0x1400192a0
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0xbcbd97dd
mov r9, rdx
rol r9, 1
xor r9, rdx
nop
mov edx, dword [0x141dc2dc0]
add edx, dword [0x141dc2dc4]
xor edx, 0xd57f79be
imul rdx, rax
shr rdx, 0x3e
add edx, 0xa8173f
cmp edx, 0xac9ceb22
ja 0x1400192b0
mov r8, r9
rol r8, 5
mov eax, dword [0x141dc2dc8]
xor edx, edx
div dword [0x141dc2dcc]
mov edx, 0xb4b16e33
xor r8, r9
mov rax, r8
rol rax, 1
nop dword [rax + rax]
mov r9d, dword [0x141dc2dd0]
add r9d, dword [0x141dc2dd4]
or r9d, 0x820f7402
imul r9, rdx
shr r9, 0x3b
and r9d, 0xa
cmp r9d, 0x84cc4551
ja 0x140019300
xor eax, r8d
movzx eax, ax
add rcx, rax
mov rax, rcx
ret

Function at 0x1400193a0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov rcx, 0xffffffff8adfc54d
sub rcx, rdx
imul rdx, rcx, 0x464ed3db
not rdx
mov rcx, rdx
rol rcx, 2
xor rcx, rdx
nop word cs:[rax + rax]
mov edx, dword [0x141dc2de0]
and edx, dword [0x141dc2de4]
xor edx, 0x8000
or edx, 0xfaff6741
and edx, 0xffffffcf
cmp edx, 0x97db72f5
je 0x1400193d0
movzx ecx, cx
add rax, rcx
nop dword [rax]
mov ecx, dword [0x141dc2de8]
sub ecx, dword [0x141dc2dec]
or ecx, 0x8e70fc1f
xor ecx, 0xeaf388fe
imul ecx, ecx, 0x5a09a514
cmp ecx, 0x539bfab9
je 0x140019400
ret
Function at 0x140019430
Capabilities:
Encode data using xor

Disassembly:
imul rax, rdx, 0x3cccccea
mov r8, rax
rol r8, 5
xor r8, rax
mov r9, r8
rol r9, 4
nop dword [rax + rax]
mov eax, dword [0x141dc2df0]
xor edx, edx
div dword [0x141dc2df4]
xor eax, 0x3453a9b1
add eax, 0xb9190b52
xor eax, 0x53df31c2
cmp eax, 0xc68ba93e
ja 0x140019450
nop word cs:[rax + rax]
mov eax, dword [0x141dc2df8]
imul eax, dword [0x141dc2dfc]
imul eax, eax, 0xd502e8fd
add eax, 0x4147e0d0
cmp eax, 0xbe3fe444
ja 0x140019480
xor r9d, r8d
movzx eax, r9w
add rcx, rax
mov rax, rcx
ret

Function at 0x1400194b0
Capabilities:
Encode data using xor

Disassembly:
mov rax, 0xffffffffaab5972c
sub rax, rdx
movabs rdx, 0xb06c7d8dc4a2771
imul rdx, rax
add rdx, 0x79fcc603
mov r8, rdx
rol r8, 2
xor r8, rdx
nop dword [rax]
mov eax, dword [0x141dc2e00]
sub eax, dword [0x141dc2e04]
and eax, 0x8850218
add eax, 0x3d2a1a47
cmp eax, 0x9ab17510
ja 0x1400194e0
mov eax, dword [0x141dc2e08]
xor edx, edx
div dword [0x141dc2e0c]
movzx eax, r8w
add rcx, rax
nop word cs:[rax + rax]
mov eax, dword [0x141dc2e10]
sub eax, dword [0x141dc2e14]
xor eax, 0x400111
and eax, 0xbc52cb73
xor eax, 0x7cafab00
cmp eax, 0x64d24ced
jb 0x140019520
mov rax, rcx
ret

Function at 0x140019550
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x141dc2e18]
xor edx, edx
div dword [0x141dc2e1c]
xor r8, 0x23ee322b
nop dword [rax + rax]
mov eax, dword [0x141dc2e20]
xor edx, edx
div dword [0x141dc2e24]
imul rax, rax, 0x65a942af
shr rax, 0x3c
or eax, 0x8b762441
imul rdx, rax, 0x24f63f6b
shr rdx, 0x20
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1b
cmp eax, 0x9e9e39cb
ja 0x140019570
mov eax, 0xa6169c07
add r8, 0xb1307b4
nop word cs:[rax + rax]
mov edx, dword [0x141dc2e28]
or edx, dword [0x141dc2e2c]
add edx, 0xb0d5c3a5
xor edx, 0x8e36ea7d
imul rdx, rax
shr rdx, 0x3f
cmp edx, 0x33ae0a3a
ja 0x1400195c0
mov rax, r8
shr rax, 0x16
xor rax, r8
mov rdx, rax
rol rdx, 2
xor edx, eax
movzx eax, dx
add rcx, rax
mov rax, rcx
ret

Function at 0x140019610
Capabilities:
Encode data using xor

Disassembly:
mov r8d, 0x100c56fd
sub r8, rdx
mov rax, r8
shr rax, 3
xor edx, edx
nop word cs:[rax + rax]
test dl, dl
jne 0x140019630
xor rax, r8
mov r8, rax
rol r8, 1
xor r8, rax
mov r9, r8
rol r9, 5
nop word [rax + rax]
mov eax, dword [0x141dc2e30]
xor edx, edx
div dword [0x141dc2e34]
and eax, 0xe5692eae
add eax, 0xcccca98a
xor eax, 0x9a7c3ff7
cmp eax, 0x791e64ab
ja 0x140019650
xor r9d, r8d
movzx eax, r9w
add rcx, rax
mov rax, rcx
ret

Function at 0x140019690
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
add rdx, 0x148d8bce
xor rdx, 0xffffffffe664e7bc
mov rcx, rdx
shr rcx, 0xc
xor rcx, rdx
nop dword [rax + rax]
mov edx, dword [0x141dc2e38]
xor edx, dword [0x141dc2e3c]
imul edx, edx, 0x5e286816
cmp edx, 0xacf2aca7
je 0x1400196b0
mov rdx, rcx
rol rdx, 6
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret
Function at 0x140019c20
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
xor rdx, 0x1303053b
mov rcx, rdx
rol rcx, 1
xor rcx, rdx
mov rdx, rcx
rol rdx, 3
xor rdx, rcx
nop dword [rax]
mov ecx, dword [0x141dc2ec8]
xor ecx, dword [0x141dc2ecc]
add ecx, 0xd42caa19
or ecx, 0xf31c8c
add ecx, 0x17ad129d
cmp ecx, 0xfbdd30d4
ja 0x140019c40
mov rcx, rdx
rol rcx, 1
nop dword [rax]
mov r8d, dword [0x141dc2ed0]
add r8d, dword [0x141dc2ed4]
xor r8d, 0xcdbcb270
add r8d, 0xde61da66
imul r8, r8, 0x15b0a5f9
shr r8, 0x3a
cmp r8d, 0x4418abcf
je 0x140019c70
xor rcx, rdx
mov rdx, rcx
rol rdx, 2
nop word [rax + rax]
mov r8d, dword [0x141dc2ed8]
imul r8d, dword [0x141dc2edc]
imul r8d, r8d, 0x9031ca32
add r8d, 0x513abb0
and r8d, 0xc2df6fa4
cmp r8d, 0x2b237139
jb 0x140019cb0
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret

Function at 0x140019cf0
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
rol r8, 4
xor r8, rdx
mov rax, r8
rol rax, 1
xor rax, r8
mov rdx, rax
rol rdx, 2
nop word [rax + rax]
mov r8d, dword [0x141dc2ee0]
imul r8d, dword [0x141dc2ee4]
add r8d, 0x41eb36b4
xor r8d, 0x8258c3b3
imul r8d, r8d, 0xa592f8f7
cmp r8d, 0x4c2ae111
jb 0x140019d10
nop dword [rax]
mov r8d, dword [0x141dc2ee8]
xor r8d, dword [0x141dc2eec]
or r8d, 0xc07742d1
and r8d, 0xe1f743f7
cmp r8d, 0xdde44e86
je 0x140019d40
xor edx, eax
movzx eax, dx
add rcx, rax
nop dword [rax]
mov eax, dword [0x141dc2ef0]
xor edx, edx
div dword [0x141dc2ef4]
xor eax, 0xe4edf98a
imul eax, eax, 0x3f23e5c5
imul rax, rax, 0x17bac6b
shr rax, 0x38
cmp eax, 0x9cfdf082
ja 0x140019d70
mov rax, rcx
ret

Function at 0x140019e10
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov rcx, rdx
shr rcx, 0x1c
xor rcx, rdx
mov rdx, rcx
xor rdx, 0xc48577c
nop word [rax + rax]
mov r8d, dword [0x141dc2f00]
xor r8d, dword [0x141dc2f04]
imul r8d, r8d, 0xa684251b
add r8d, 0x86137f0f
cmp r8d, 0xe55bda70
ja 0x140019e30
rol rdx, 7
xor rcx, rdx
xor rcx, 0xffffffffa853c8e8
mov rdx, rcx
rol rdx, 3
nop word [rax + rax]
mov r8d, dword [0x141dc2f08]
imul r8d, dword [0x141dc2f0c]
add r8d, 0x42378e2d
or r8d, 0xd5911633
cmp r8d, 0xb2285312
je 0x140019e70
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret

Function at 0x14001a020
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
imul rdx, rdx, 0x443c729f
mov rcx, rdx
shr rcx, 0xd
xor rcx, rdx
add rcx, 0xffffffffb58276f4
mov rdx, rcx
rol rdx, 6
nop word cs:[rax + rax]
mov r8d, dword [0x141dc2f30]
xor r8d, dword [0x141dc2f34]
or r8d, 0xe16da0a1
imul r8d, r8d, 0x2df4405c
or r8d, 0x254966b3
cmp r8d, 0x853c42da
je 0x14001a050
xor edx, ecx
movzx ecx, dx
add rax, rcx
nop word cs:[rax + rax]
mov ecx, dword [0x141dc2f38]
imul ecx, dword [0x141dc2f3c]
and ecx, 0x1a286968
xor ecx, 0xf922e256
cmp ecx, 0x5c786f9b
jb 0x14001a090
ret

Function at 0x14001a0c0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
add rdx, 0x5e04f423
mov rcx, rdx
shr rcx, 2
xor rcx, rdx
mov rdx, rcx
rol rdx, 1
xor rdx, rcx
movzx ecx, dx
mov edx, dword [0x141dc2f40]
xor edx, dword [0x141dc2f44]
imul edx, edx, 0x49ae7352
imul rdx, rdx, 0x33e84ad5
shr rdx, 0x3d
cmp edx, 0x5c561fad
je 0x14001a0e0
add rax, rcx
ret
Function at 0x14001a260
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
imul rcx, rdx, 0x6bb8a86e
nop word [rax + rax]
mov edx, dword [0x141dc2f68]
xor edx, dword [0x141dc2f6c]
add edx, 0x939bdd98
imul rdx, rdx, 0x33763755
shr rdx, 0x3d
or edx, 0x370c460
cmp edx, 0xf84a3260
je 0x14001a270
movabs rdx, 0xf094022ea76b12dd
add rcx, rdx
mov rdx, rcx
rol rdx, 7
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret

Function at 0x14001a380
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov ecx, 0xcb7b0f91
xor rdx, 0x673d1440
nop
mov r8d, dword [0x141dc2f80]
imul r8d, dword [0x141dc2f84]
xor r8d, 0x4a162cc4
shr r8d, 1
imul r8, rcx
shr r8, 0x3d
imul r8d, r8d, 0x7da5df56
cmp r8d, 0xedb4103f
ja 0x14001a390
mov ecx, 0xb7dbe259
mov r8, rdx
rol r8, 3
xor r8, rdx
neg r8
mov rdx, r8
rol rdx, 3
xor rdx, r8
nop dword [rax]
mov r8d, dword [0x141dc2f88]
imul r8d, dword [str._v_HgbY]
imul r8, rcx
shr r8, 0x3f
or r8d, 0xb0f96e12
imul r8d, r8d, 0x429d8aad
cmp r8d, 0xa865cc4e
ja 0x14001a3e0
movzx ecx, dx
add rax, rcx
ret

Function at 0x14001a690
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
add rdx, 0xffffffffdc3d715b
xor rdx, 0xffffffff821c43dc
mov rcx, rdx
rol rcx, 2
xor ecx, edx
movzx ecx, cx
add rax, rcx
mov ecx, dword [0x141dc2fd8]
or ecx, dword [0x141dc2fdc]
and ecx, 0xcdb516d7
xor ecx, 0x345d990c
add ecx, 0xcb1a401a
cmp ecx, 0xcf5828cc
ja 0x14001a6b0
ret

Function at 0x14001a6e0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov rcx, 0xffffffff84fad91c
sub rcx, rdx
mov rdx, rcx
rol rdx, 1
xor r8d, r8d
nop word cs:[rax + rax]
test r8b, r8b
jne 0x14001a700
xor edx, ecx
movzx ecx, dx
add rax, rcx
mov ecx, 0x8b7bd691
nop word cs:[rax + rax]
mov edx, dword [0x141dc2fe0]
xor edx, dword [0x141dc2fe4]
add edx, 0x232cd109
shr edx, 1
imul rdx, rcx
shr rdx, 0x39
xor edx, 0x3b1ab792
cmp edx, 0xbe1a88b5
ja 0x14001a720
ret

Function at 0x14001a780
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
imul rcx, rdx, 0xffffffffb361bc45
add rcx, 0x4c9e43bb
mov rdx, rcx
rol rdx, 7
xor rdx, rcx
mov rcx, rdx
rol rcx, 5
xor rcx, rdx
nop word cs:[rax + rax]
mov edx, dword [0x141dc2fe8]
add edx, dword [0x141dc2fec]
or edx, 0x699c7b00
shr edx, 7
imul rdx, rdx, 0x221d87b
shr rdx, 0x32
imul edx, edx, 0x4e5264cc
cmp edx, 0x7e1b2b7
jb 0x14001a7b0
movzx ecx, cx
add rax, rcx
nop word cs:[rax + rax]
mov ecx, dword [0x141dc2ff0]
imul ecx, dword [0x141dc2ff4]
xor ecx, 0x9772d977
imul ecx, ecx, 0xdb2b3c3e
cmp ecx, 0xa8e2940d
jb 0x14001a7f0
ret

Function at 0x14001a8f0
Capabilities:
Encode data using xor

Disassembly:
xor rdx, 0xffffffffbf87331c
imul rax, rdx, 0x6c4635b
not rax
mov r8d, 0x93f95d2d
mov rdx, rax
rol rdx, 1
nop dword [rax]
mov r9d, dword [0x141dc3010]
xor r9d, dword [0x141dc3014]
or r9d, 0x80ad9c53
imul r9, r8
shr r9, 0x3f
cmp r9d, 0x1b205a31
je 0x14001a910
xor edx, eax
movzx eax, dx
add rcx, rax
nop
mov eax, dword [0x141dc3018]
xor edx, edx
div dword [0x141dc301c]
or eax, 0x95c16ada
imul rax, rax, 0x42d4cdc7
shr rax, 0x3e
add eax, 0x218826eb
cmp eax, 0x52967c23
ja 0x14001a940
mov rax, rcx
ret