joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140019710
Capabilities:
Encode data using xor

Disassembly:
imul rax, rdx, 0xffffffffba39bf93
movabs rdx, 0xe48a6ddf40790e95
add rdx, rax
mov rax, rdx
rol rax, 2
xor eax, edx
movzx eax, ax
add rax, rcx
nop word cs:[rax + rax]
mov ecx, dword [0x141dbefc0]
xor ecx, dword [0x141dbefc4]
imul rcx, rcx, 0x53e35053
shr rcx, 0x3d
add ecx, 0x5737228b
cmp ecx, 0x878f62a9
ja 0x140019740
ret

Function at 0x1400198a0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
movabs rcx, 0xf094022ea76b12dd
imul rdx, rdx, 0x6bb8a86e
add rdx, rcx
xor ecx, ecx
nop dword [rax]
test cl, cl
jne 0x1400198c0
mov rcx, rdx
rol rcx, 7
xor rcx, rdx
nop
mov edx, dword [0x141dbefe8]
or edx, dword [0x141dbefec]
xor edx, 0x8164004
or edx, 0xb6e90ce3
cmp edx, 0x50c63842
je 0x1400198d0
movzx ecx, cx
add rax, rcx
nop word cs:[rax + rax]
mov ecx, dword [0x141dbeff0]
add ecx, dword [0x141dbeff4]
and ecx, 0xfb0857be
add ecx, 0x7fe05aa4
or ecx, 0x417af085
cmp ecx, 0xff40e240
ja 0x140019900
ret

Function at 0x140019c20
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x141dbf038]
xor r9d, r9d
xor edx, edx
div dword [0x141dbf03c]
mov rax, 0xfffffffff3aa2e8d
sub rax, r8
mov rdx, rax
shr rdx, 0x1e
xor rdx, rax
mov rax, rdx
rol rax, 7
xor rax, rdx
mov r8, rax
rol r8, 2
xor r8, rax
nop dword [rax]
test r9b, r9b
jne 0x140019c60
mov r9, r8
rol r9, 2
nop dword [rax]
mov eax, dword [0x141dbf040]
xor edx, edx
div dword [0x141dbf044]
imul eax, eax, 0x3ad54f82
and eax, 0x32870466
imul eax, eax, 0xd21de2ac
cmp eax, 0x454380
je 0x140019c70
nop word cs:[rax + rax]
mov eax, dword [0x141dbf048]
or eax, dword [0x141dbf04c]
add eax, 0xa4778464
xor eax, 0x27e44981
cmp eax, 0x5825006c
ja 0x140019ca0
xor r9d, r8d
movzx eax, r9w
add rcx, rax
mov rax, rcx
ret

Function at 0x140019d30
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x141dbf050]
xor edx, edx
div dword [str._9j_]
add r8, 0x24b61fb0
xor r8, 0xffffffffaa849540
imul rdx, r8, 0x2c3947c9
mov rax, rdx
rol rax, 6
nop dword [rax]
mov r8d, dword [0x141dbf058]
xor r8d, dword [0x141dbf05c]
imul r8, r8, 0x33c53689
shr r8, 0x3c
imul r8d, r8d, 0xbf63fde6
and r8d, 0x38e68e9c
cmp r8d, 0x253f7e54
je 0x140019d60
mov r8d, dword [0x141dbf060]
add r8d, dword [0x141dbf064]
or r8d, 0x16080048
xor r8d, 0xc08004b
or r8d, 0xe077ffa4
cmp r8d, 0x28c8097c
jb 0x140019d90
xor eax, edx
movzx eax, ax
add rcx, rax
mov rax, rcx
ret

Function at 0x140019dd0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
xor rdx, 0xffffffffe1e26758
mov rcx, rdx
shr rcx, 0x12
nop word cs:[rax + rax]
mov r8d, dword [0x141dbf068]
xor r8d, dword [0x141dbf06c]
or r8d, 0xb8c3d79c
add r8d, 0xb338cebe
imul r8, r8, 0x5c2c19f1
shr r8, 0x3e
cmp r8d, 0x21473f64
je 0x140019df0
xor rcx, rdx
mov rdx, rcx
shr rdx, 0x14
xor rdx, rcx
mov rcx, rdx
rol rcx, 5
xor rcx, rdx
mov rdx, rcx
rol rdx, 2
nop
mov r8d, dword [0x141dbf070]
imul r8d, dword [0x141dbf074]
add r8d, 0x255b619
or r8d, 0x5723c75
imul r8, r8, 0x31a6e4d
shr r8, 0x38
cmp r8d, 0xe53e66c5
ja 0x140019e40
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret
Function at 0x140019e80
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
movabs r8, 0xfffffffede24fab4
add r8, rdx
mov edx, 0xb966672b
mov rcx, r8
rol rcx, 7
xor rcx, r8
nop
mov r8d, dword [0x141dbf078]
xor r8d, dword [0x141dbf07c]
shr r8d, 1
imul r8, rdx
shr r8, 0x3c
or r8d, 0xde7960b5
cmp r8d, 0x9640401
je 0x140019ea0
movzx ecx, cx
add rax, rcx
nop
mov ecx, dword [0x141dbf080]
add ecx, dword [0x141dbf084]
imul rcx, rcx, 0x15b47237
shr rcx, 0x3b
and ecx, 1
cmp ecx, 0x6997ec3e
je 0x140019ed0
ret

Function at 0x140019f30
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
movabs r8, 0x7615abc6e8feaac
imul rcx, rdx, 0x4b504a7f
add rcx, r8
nop word [rax + rax]
mov edx, dword [0x141dbf088]
add edx, dword [0x141dbf08c]
imul edx, edx, 0x7e2cafa7
add edx, 0x5de1801
xor edx, 0x40ad1bbc
cmp edx, 0x647fdaff
jb 0x140019f50
mov rdx, rcx
rol rdx, 3
nop dword [rax]
mov r8d, dword [0x141dbf090]
sub r8d, dword [str.74_p]
add r8d, 0x86e768d4
xor r8d, 0xf57eb026
add r8d, 0x71e021b1
cmp r8d, 0x5c05c9ea
ja 0x140019f80
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret

Function at 0x140019fc0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov rcx, 0xffffffffdd256472
sub rcx, rdx
xor rcx, 0x44198fa
imul rcx, rcx, 0xffffffffe86799cc
nop dword [rax + rax]
mov edx, dword [0x141dbf098]
xor edx, dword [0x141dbf09c]
and edx, 0x576c9eaa
add edx, 0xc2c6a0fd
xor edx, 0xbba29fa8
cmp edx, 0xf1618b4
jb 0x140019fe0
add rcx, 0xffffffffe86799cc
mov rdx, rcx
rol rdx, 4
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret

Function at 0x14001a020
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
xor rdx, 0xffffffff91021fe3
nop word [rax + rax]
mov ecx, dword [0x141dbf0a0]
or ecx, dword [0x141dbf0a4]
imul ecx, ecx, 0xa4f4872b
add ecx, 0x953e07d9
cmp ecx, 0xf4e76b8b
ja 0x14001a030
mov r8, rdx
shr r8, 3
xor r8, rdx
mov rcx, r8
shr rcx, 0x1e
xor rcx, r8
nop word cs:[rax + rax]
mov edx, dword [0x141dbf0a8]
and edx, dword [0x141dbf0ac]
imul edx, edx, 0xb73ebf5c
xor edx, 0x8213400
or edx, 0xc6d6c2d7
cmp edx, 0xedc2f892
ja 0x14001a070
mov rdx, rcx
rol rdx, 6
nop dword [rax]
mov r8d, dword [0x141dbf0b0]
sub r8d, dword [0x141dbf0b4]
add r8d, 0x6fa61ab4
and r8d, 0x2194028
cmp r8d, 0xd157273a
ja 0x14001a0a0
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret

Function at 0x14001a340
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov rax, rcx
mov ecx, 0x72a0f36c
sub rcx, rdx
xor rcx, 0xd86a79a
nop word cs:[rax + rax]
mov edx, dword [0x141dbf0f0]
sub edx, dword [0x141dbf0f4]
xor edx, 0xacb5546c
add edx, 0x5d28e414
cmp edx, 0x17388a08
jb 0x14001a360
add rcx, 0xffffffffece11559
mov rdx, rcx
rol rdx, 1
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret
Function at 0x14001a420
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov rcx, rdx
shr rcx, 0x1e
xor rcx, rdx
not rcx
imul rcx, rcx, 0xffffffffaefbea66
nop word [rax + rax]
mov edx, dword [0x141dbf108]
xor edx, dword [0x141dbf10c]
or edx, 0x73166a75
xor edx, 0xa14957bb
cmp edx, 0xf3041595
ja 0x14001a440
mov rdx, rcx
rol rdx, 6
nop word [rax + rax]
mov r8d, dword [0x141dbf110]
sub r8d, dword [0x141dbf114]
xor r8d, 0xb835410e
and r8d, 0xb9f5410e
imul r8d, r8d, 0xe21bfa29
cmp r8d, 0xc55b6241
ja 0x14001a470
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret

Function at 0x14001a4b0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov rcx, rdx
rol rcx, 5
nop word [rax + rax]
mov r8d, dword [0x141dbf118]
mov r9d, dword [0x141dbf11c]
add r8d, r9d
add r8d, 0x47ba3996
xor r8d, 0x264a94c4
imul r8d, r8d, 0xbc500571
cmp r8d, 0x450a269a
jb 0x14001a4c0
xor rcx, rdx
mov rdx, rcx
rol rdx, 3
xor rdx, rcx
mov ecx, 0x5955ab6c
sub rcx, rdx
mov rdx, rcx
rol rdx, 1
nop word [rax + rax]
mov r8d, dword [0x141dbf120]
imul r8d, dword [0x141dbf124]
add r8d, 0x8aa5e700
xor r8d, 0x80b06a25
add r8d, 0xd640c4df
cmp r8d, 0x1bd406a4
jb 0x14001a510
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret

Function at 0x14001a680
Capabilities:
Encode data using xor

Disassembly:
mov rax, rdx
shr rax, 0x16
nop word [rax + rax]
mov r8d, dword [0x141dbf148]
and r8d, dword [0x141dbf14c]
imul r8d, r8d, 0x7118e7f0
add r8d, 0xafa0d83a
cmp r8d, 0x3e3ad9b6
jb 0x14001a690
movabs r8, 0xfe22f39a3a56857f
mov r10d, 0x84336fc5
xor rax, rdx
imul r9, rax, 0xffffffffefcdbdef
add r9, r8
mov r8, r9
rol r8, 2
nop dword [rax]
mov eax, dword [0x141dbf150]
xor edx, edx
div dword [0x141dbf154]
xor eax, 0xe251ee6d
imul rax, r10
shr rax, 0x3f
or eax, 0x311f2af0
cmp eax, 0xc0d07067
ja 0x14001a6e0
xor r8, r9
mov r9, r8
rol r9, 7
nop word cs:[rax + rax]
mov eax, dword [0x141dbf158]
xor edx, edx
div dword [0x141dbf15c]
add eax, 0xada70d85
and eax, 0x6191e632
cmp eax, 0xc1394bef
ja 0x14001a720
xor r9d, r8d
movzx eax, r9w
add rcx, rax
mov rax, rcx
ret

Function at 0x14001a7e0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rdx
rol rax, 1
xor rax, rdx
imul rax, rax, 0x1a4ebab9
mov r8, rax
rol r8, 4
xor r8, rax
add r8, 0x1bf25327
mov eax, dword [0x141dbf160]
xor edx, edx
div dword [0x141dbf164]
mov rax, r8
rol rax, 3
xor edx, edx
nop dword [rax + rax]
test dl, dl
jne 0x14001a820
xor eax, r8d
movzx eax, ax
add rcx, rax
nop dword [rax]
mov eax, dword [0x141dbf168]
and eax, dword [0x141dbf16c]
or eax, 0x408a80
xor eax, 0x80000100
and eax, 0xe0408ba0
cmp eax, 0x6fb3b838
je 0x14001a830
mov rax, rcx
ret
Function at 0x14001a8c0
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x141dbf178]
xor edx, edx
div dword [0x141dbf17c]
movabs rdx, 0xf87a4d4fc4eb6ab6
xor r8, 0xffffffffbcf3a771
imul rax, r8, 0x25abcc01
add rax, rdx
nop dword [rax]
mov edx, dword [0x141dbf180]
and edx, dword [0x141dbf184]
xor edx, 0x90821010
and edx, 0x9c831b9f
cmp edx, 0x27156c0f
je 0x14001a8f0
mov rdx, rax
rol rdx, 1
xor edx, eax
movzx eax, dx
add rcx, rax
nop
mov eax, dword [0x141dbf188]
xor eax, dword [0x141dbf18c]
add eax, 0x620f5
or eax, 0x827dc470
imul eax, eax, 0x31e97021
cmp eax, 0x353c262f
je 0x14001a920
mov rax, rcx
ret

Function at 0x14001a950
Capabilities:
Encode data using xor

Disassembly:
movabs rax, 0x11729e1949dd8eca
mov r8, rdx
shr r8, 0x1a
xor r8, rdx
mov rdx, r8
shr rdx, 0xc
xor rdx, r8
imul r8, rdx, 0x557c8f5a
add r8, rax
nop dword [rax + rax]
mov eax, dword [0x141dbf190]
xor eax, dword [0x141dbf194]
imul eax, eax, 0x3fea7a39
add eax, 0x58869570
and eax, 0x7fbf19b9
cmp eax, 0xd4399f79
ja 0x14001a980
mov r10d, 0x98405425
mov r9, r8
rol r9, 1
nop
mov eax, dword [0x141dbf198]
xor edx, edx
div dword [0x141dbf19c]
xor eax, 0xeb35d217
imul rax, r10
shr rax, 0x3f
cmp eax, 0xb5c5416f
ja 0x14001a9b0
xor r9d, r8d
movzx eax, r9w
add rcx, rax
mov rax, rcx
ret

Function at 0x14001aa30
Capabilities:
Encode data using xor

Disassembly:
mov rax, rdx
shr rax, 2
xor rax, rdx
imul r8, rax, 0x73c5c8e8
nop word cs:[rax + rax]
mov eax, dword [0x141dbf1a0]
xor eax, dword [0x141dbf1a4]
imul eax, eax, 0x5ef0067a
or eax, 0xa4003501
and eax, 0xe4443f01
cmp eax, 0xd3d8fbc0
ja 0x14001aa50
add r8, 0x1f3e11f8
mov r9, r8
rol r9, 1
mov eax, dword [0x141dbf1a8]
xor edx, edx
div dword [0x141dbf1ac]
nop
mov eax, dword [0x141dbf1b0]
xor edx, edx
div dword [0x141dbf1b4]
xor eax, 0x3547659d
add eax, 0x8a3e8656
cmp eax, 0xd8153ff8
ja 0x14001aa90
xor r9d, r8d
and r9d, 0xfff9
add rcx, r9
mov rax, rcx
ret

Function at 0x14001ac50
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov rcx, rdx
rol rcx, 7
mov r8d, 0x980106d9
xor rcx, rdx
add rcx, 0xbd94a6
xor rcx, 0x3e637604
nop word cs:[rax + rax]
mov edx, dword [0x141dbf1e0]
xor edx, dword [0x141dbf1e4]
or edx, 0xf70bf7a7
imul rdx, r8
shr rdx, 0x3f
cmp edx, 0x57c97a81
ja 0x14001ac80
mov rdx, rcx
rol rdx, 4
nop dword [rax]
mov r8d, dword [0x141dbf1e8]
sub r8d, dword [0x141dbf1ec]
or r8d, 0x2acbe77b
xor r8d, 0x373fee6c
imul r8, r8, 0x14015f45
shr r8, 0x3a
cmp r8d, 0x3541f295
ja 0x14001acb0
xor edx, ecx
movzx ecx, dx
add rax, rcx
nop dword [rax + rax]
mov ecx, dword [0x141dbf1f0]
sub ecx, dword [0x141dbf1f4]
imul ecx, ecx, 0x87ac94b1
or ecx, 0x7e2aee98
add ecx, 0x8d933702
cmp ecx, 0xd75d2b97
ja 0x14001acf0
ret
Function at 0x14001ad20
Capabilities:
Encode data using xor

Disassembly:
mov rax, rdx
shr rax, 0xf
xor rax, rdx
imul rdx, rax, 0x2b930655
not rdx
mov rax, rdx
rol rax, 4
nop dword [rax + rax]
mov r8d, dword [0x141dbf1f8]
and r8d, dword [0x141dbf1fc]
xor r8d, 0x4ed2d3c2
imul r8, r8, 0x6a386bcd
shr r8, 0x3e
imul r8d, r8d, 0x6853c519
cmp r8d, 0xb3618a7
ja 0x14001ad40
xor rax, rdx
mov r8, rax
rol r8, 1
xor r8, rax
nop dword [rax]
mov eax, dword [0x141dbf200]
xor eax, dword [0x141dbf204]
xor eax, 0x18b1e0c9
imul eax, eax, 0x3d19f120
cmp eax, 0x4d5b7548
je 0x14001ad80
mov eax, dword [0x141dbf208]
xor edx, edx
div dword [0x141dbf20c]
movzx eax, r8w
add rcx, rax
nop word cs:[rax + rax]
mov eax, dword [0x141dbf210]
xor edx, edx
div dword [0x141dbf214]
xor eax, 0x56682e9b
add eax, 0xed184e24
and eax, 0x9d208335
cmp eax, 0x6f17bd8f
ja 0x14001adc0
mov rax, rcx
ret

Function at 0x14001aea0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov r8, rdx
shr r8, 0x18
xor r8, rdx
mov rcx, r8
rol rcx, 2
xor rcx, r8
xor rcx, 0xffffffffe2bc9ef5
add rcx, 0x7b790a36
mov rdx, rcx
rol rdx, 3
nop dword [rax]
mov r8d, dword [0x141dbf228]
xor r8d, dword [0x141dbf22c]
or r8d, 0x81c6dad3
and r8d, 0xc7eefad3
cmp r8d, 0x6de2142a
jb 0x14001aed0
xor edx, ecx
movzx edx, dx
mov ecx, 0xb7f22a3f
add rax, rdx
nop word cs:[rax + rax]
mov edx, dword [0x141dbf230]
sub edx, dword [0x141dbf234]
xor edx, 0xc5d50487
imul rdx, rcx
shr rdx, 0x3f
or edx, 0x6cc6a17c
cmp edx, 0x4a48b2d2
jb 0x14001af10
ret

Function at 0x14001af40
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
xor rdx, 0x30fd7dcb
add rdx, 0xfffffffff772f0a4
mov rcx, rdx
shr rcx, 0x1b
nop dword [rax + rax]
mov r8d, dword [0x141dbf238]
imul r8d, dword [0x141dbf23c]
imul r8d, r8d, 0x239425
add r8d, 0xc3b16a3b
cmp r8d, 0x33afcc07
jb 0x14001af60
xor rcx, rdx
mov rdx, rcx
rol rdx, 3
mov r8d, dword [0x141dbf240]
imul r8d, dword [0x141dbf244]
add r8d, 0x344b64d9
or r8d, 0x5e230afb
add r8d, 0x42bb5b41
cmp r8d, 0x9805e367
jb 0x14001af90
nop dword [rax]
mov r8d, dword [0x141dbf248]
and r8d, dword [0x141dbf24c]
add r8d, 0x88fe82c9
xor r8d, 0x3962620d
imul r8d, r8d, 0xd79dc5e6
cmp r8d, 0x63bd46df
je 0x14001afc0
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret

Function at 0x14001b000
Capabilities:
Encode data using xor

Disassembly:
imul rax, rdx, 0xe1321f8
xor rax, 0x686e0085
add rax, 0xe98cf1d
mov r8, rax
rol r8, 6
xor r8, rax
nop dword [rax]
mov eax, dword [0x141dbf250]
xor edx, edx
div dword [0x141dbf254]
imul eax, eax, 0x3461f8b4
or eax, 0xb2af4df9
imul rax, rax, 0xff0f9ef
shr rax, 0x3b
cmp eax, 0x513c4a64
ja 0x14001b020
movzx eax, r8w
add rcx, rax
nop word cs:[rax + rax]
mov eax, dword [0x141dbf258]
xor edx, edx
div dword [0x141dbf25c]
xor eax, 0x2862002a
or eax, 0xd78d7fd4
xor eax, 0x47cda141
cmp eax, 0x5cdef0b0
jb 0x14001b060
mov rax, rcx
ret
Function at 0x14001b230
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
add rdx, 0xffffffffdc3d715b
xor rdx, 0xffffffff821c43dc
mov rcx, rdx
rol rcx, 2
xor rcx, rdx
nop dword [rax + rax]
mov edx, dword [0x141dbf280]
xor edx, dword [0x141dbf284]
and edx, 0x1e85d046
xor edx, 0x581e2e14
cmp edx, 0xb9a9c858
ja 0x14001b250
movzx edx, cx
mov ecx, 0xa3e23317
add rax, rdx
nop dword [rax + rax]
mov edx, dword [0x141dbf288]
sub edx, dword [0x141dbf28c]
or edx, 0x4702e175
imul rdx, rcx
shr rdx, 0x3b
xor edx, 0x9607af11
cmp edx, 0x548102e8
jb 0x14001b280
ret

Function at 0x14001b2b0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
xor rdx, 0xffffffff8b54ae56
add rdx, 0x65230377
nop word cs:[rax + rax]
mov ecx, dword [0x141dbf290]
imul ecx, dword [0x141dbf294]
add ecx, 0x9749cf15
imul r8, rcx, 0x394eb097
shr r8, 0x20
sub ecx, r8d
shr ecx, 1
add ecx, r8d
shr ecx, 0x1f
cmp ecx, 0xfffc6e9b
je 0x14001b2d0
mov rcx, rdx
rol rcx, 1
xor rcx, rdx
nop word [rax + rax]
mov edx, dword [0x141dbf298]
and edx, dword [0x141dbf29c]
add edx, 0x82246b66
xor edx, 0xc44ed188
imul edx, edx, 0xf5ece85d
cmp edx, 0xf00bf8dd
ja 0x14001b310
movzx ecx, cx
add rax, rcx
ret

Function at 0x14001b340
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
not rdx
nop word cs:[rax + rax]
mov ecx, dword [0x141dbf2a0]
xor ecx, dword [0x141dbf2a4]
imul ecx, ecx, 0xcff55c48
add ecx, 0x42b0528c
cmp ecx, 0x3512bd66
jb 0x14001b350
mov rcx, rdx
shr rcx, 0xe
xor rcx, rdx
mov rdx, rcx
shr rdx, 6
xor rdx, rcx
imul rdx, rdx, 0xc197ff8
mov rcx, rdx
rol rcx, 5
nop word cs:[rax + rax]
mov r8d, dword [0x141dbf2a8]
xor r8d, dword [0x141dbf2ac]
xor r8d, 0x46800010
and r8d, 0x46890012
cmp r8d, 0x4d4ba6a6
ja 0x14001b3a0
xor ecx, edx
movzx ecx, cx
add rax, rcx
ret

Function at 0x14001b4c0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov rcx, 0xfffffffff4594856
sub rcx, rdx
imul rcx, rcx, 0x6e31692a
xor rcx, 0xffffffff95e70c76
mov rdx, rcx
rol rdx, 1
nop word cs:[rax + rax]
mov r8d, dword [0x141dbf2c8]
imul r8d, dword [0x141dbf2cc]
imul r8d, r8d, 0x25b03b73
or r8d, 0xd471ff20
xor r8d, 0x80284b90
cmp r8d, 0x3bd639f2
jb 0x14001b4f0
xor edx, ecx
movzx ecx, dx
add rax, rcx
xor ecx, ecx
nop word [rax + rax]
test cl, cl
jne 0x14001b530
ret

Function at 0x14001b620
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
add rdx, 0x148d8bce
xor rdx, 0xffffffffe664e7bc
mov rcx, rdx
shr rcx, 0xc
xor rcx, rdx
mov rdx, rcx
rol rdx, 6
nop word cs:[rax + rax]
mov r8d, dword [0x141dbf2e8]
sub r8d, dword [0x141dbf2ec]
add r8d, 0x72424bec
or r8d, 0x86e0df62
cmp r8d, 0x8a9a0750
je 0x14001b650
xor edx, ecx
movzx ecx, dx
add rax, rcx
nop dword [rax]
mov ecx, dword [0x141dbf2f0]
imul ecx, dword [0x141dbf2f4]
imul ecx, ecx, 0x2337941c
xor ecx, 0xf3b770b1
cmp ecx, 0x63a2124e
jb 0x14001b680
ret
Function at 0x14001b6b0
Capabilities:
Encode data using xor

Disassembly:
xor rdx, 0xffffffffbf87331c
imul rax, rdx, 0x6c4635b
not rax
mov r8, rax
rol r8, 1
nop word [rax + rax]
mov edx, dword [0x141dbf2f8]
sub edx, dword [0x141dbf2fc]
or edx, 0x261c610
xor edx, 0xf44d4d4c
imul r9, rdx, 0xd552627
shr r9, 0x20
sub edx, r9d
shr edx, 1
add edx, r9d
shr edx, 0x1f
cmp edx, 0x20c47077
je 0x14001b6d0
xor r8, rax
xor eax, eax
nop dword [rax + rax]
test al, al
jne 0x14001b710
mov eax, dword [0x141dbf300]
xor edx, edx
div dword [0x141dbf304]
movzx eax, r8w
add rcx, rax
xor eax, eax
nop dword [rax + rax]
test al, al
jne 0x14001b730
mov rax, rcx
ret

Function at 0x14001b7a0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov rcx, rdx
xor rcx, 0xffffffffbe5baa01
rol rcx, 1
mov r8d, dword [0x141dbf310]
or r8d, dword [0x141dbf314]
add r8d, 0x120b6544
or r8d, 0x2f8bff55
cmp r8d, 0x5270ed26
jb 0x14001b7b0
xor rcx, rdx
xor rcx, 0x41a455fe
mov rdx, rcx
rol rdx, 1
nop word cs:[rax + rax]
mov r8d, dword [0x141dbf318]
xor r8d, dword [0x141dbf31c]
add r8d, 0x9af42a01
or r8d, 0x7cb6913
cmp r8d, 0x8d42ae7b
je 0x14001b7f0
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret

Function at 0x14001b8b0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
xor rdx, 0xffffffffedb3fb28
xor ecx, ecx
nop dword [rax]
test cl, cl
jne 0x14001b8c0
movabs rcx, 0xffffffff450be045
add rdx, rcx
nop word cs:[rax + rax]
mov ecx, dword [0x141dbf330]
imul ecx, dword [0x141dbf334]
add ecx, 0xa153dfb6
xor ecx, 0x1a01309c
and ecx, 0x5a91329c
cmp ecx, 0x3c47d03c
je 0x14001b8e0
mov rcx, rdx
rol rcx, 1
nop dword [rax]
mov r8d, dword [0x141dbf338]
imul r8d, dword [0x141dbf33c]
or r8d, 0x890d2a40
and r8d, 0xa90d2bcb
cmp r8d, 0xe064c339
ja 0x14001b910
xor ecx, edx
movzx ecx, cx
add rax, rcx
ret

Function at 0x14001b940
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
xor rdx, 0x6dacef6f
mov r8, rdx
rol r8, 4
mov ecx, 0xb639a497
xor r8, rdx
mov edx, 0x7e5f762a
sub rdx, r8
nop word cs:[rax + rax]
mov r8d, dword [0x141dbf340]
add r8d, dword [0x141dbf344]
imul r8, rcx
shr r8, 0x3d
imul r8d, r8d, 0x9b6a49f2
xor r8d, 0x4dc18746
cmp r8d, 0xff88f593
ja 0x14001b970
imul rcx, rdx, 0xdbc7650
mov rdx, rcx
rol rdx, 5
xor edx, ecx
movzx ecx, dx
add rax, rcx
nop word cs:[rax + rax]
mov ecx, dword [0x141dbf348]
mov edx, dword [0x141dbf34c]
add ecx, edx
add ecx, 0x153ee656
or ecx, 0xffe7fbff
cmp ecx, 0xb31798af
je 0x14001b9c0
ret

Function at 0x14001bb00
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov rcx, rdx
shr rcx, 0x17
xor rcx, rdx
mov rdx, rcx
shr rdx, 0x10
nop word cs:[rax + rax]
mov r8d, dword [0x141dbf368]
sub r8d, dword [0x141dbf36c]
or r8d, 0x8418144
and r8d, 0x2e5f91c4
xor r8d, 0x1ebd9ed6
cmp r8d, 0x533c3608
ja 0x14001bb20
xor rdx, rcx
imul rcx, rdx, 0x702eec05
mov rdx, rcx
rol rdx, 6
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret
Function at 0x14001bb70
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
add rdx, 0xffffffffca28c985
mov rcx, rdx
rol rcx, 6
nop word cs:[rax + rax]
mov r8d, dword [str.__G1]
add r8d, dword [0x141dbf374]
imul r8, r8, 0x3199e627
shr r8, 0x3b
xor r8d, 0x4d5db1da
imul r8d, r8d, 0x57d4daeb
cmp r8d, 0x5ade4891
jb 0x14001bb90
xor ecx, edx
movzx ecx, cx
add rax, rcx
ret

Function at 0x14001bc10
Capabilities:
Encode data using xor

Disassembly:
imul rax, rdx, 0xffffffff85378186
mov r8, rax
rol r8, 7
xor r8, rax
mov r9, r8
rol r9, 3
nop dword [rax + rax]
mov eax, dword [0x141dbf378]
xor edx, edx
div dword [0x141dbf37c]
xor eax, 0xf5c8cd52
add eax, 0xfd265cc0
cmp eax, 0xa772572
jb 0x14001bc30
xor r9d, r8d
movzx eax, r9w
add rcx, rax
mov eax, 0xd135bbff
nop
mov edx, dword [0x141dbf380]
xor edx, dword [0x141dbf384]
imul rdx, rax
shr rdx, 0x3d
or edx, 0xcb2f452
imul edx, edx, 0x351549b6
cmp edx, 0xc008755d
ja 0x14001bc60
mov rax, rcx
ret

Function at 0x14001bc90
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x45cf8e61
sub rax, rdx
imul rax, rax, 0xffffffffac9f0bcd
nop
mov edx, dword [0x141dbf388]
and edx, dword [0x141dbf38c]
add edx, 0xe07def9a
cmp edx, 0xc839b58b
ja 0x14001bca0
mov r8d, 0xea06d9b1
mov rdx, rax
shr rdx, 3
xor rdx, rax
not rdx
mov r9, rdx
rol r9, 1
xor r9, rdx
nop word cs:[rax + rax]
mov eax, dword [0x141dbf390]
xor edx, edx
div dword [0x141dbf394]
add eax, 0x4655cd81
imul rax, r8
shr rax, 0x3e
cmp eax, 0xe439531c
je 0x14001bce0
movzx eax, r9w
add rcx, rax
nop dword [rax]
mov eax, dword [str.Qu_e]
and eax, dword [0x141dbf39c]
add eax, 0xc61d72b5
and eax, 0xa8b10f24
xor eax, 0x76e7f2d7
cmp eax, 0x57f10037
ja 0x14001bd10
mov rax, rcx
ret

Function at 0x14001bdb0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
xor rdx, 0x7583b869
add rdx, 0xffffffffebb275dd
mov rcx, rdx
rol rcx, 7
nop dword [rax + rax]
mov r8d, dword [0x141dbf3a8]
sub r8d, dword [0x141dbf3ac]
xor r8d, 0x7237509e
imul r8, r8, 0x1b9f87e9
shr r8, 0x3b
cmp r8d, 0x1699dc07
je 0x14001bdd0
xor ecx, edx
movzx edx, cx
mov ecx, 0x96048059
add rax, rdx
nop word cs:[rax + rax]
mov edx, dword [0x141dbf3b0]
add edx, dword [0x141dbf3b4]
imul edx, edx, 0x1cb0683
and edx, 0x4fec4d0d
imul rdx, rcx
shr rdx, 0x3b
cmp edx, 0x33135c62
ja 0x14001be10
ret

Function at 0x14001bef0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov r8, rdx
shr r8, 7
xor r8, rdx
mov ecx, 0x31a5f665
sub rcx, r8
nop word cs:[rax + rax]
mov edx, dword [0x141dbf3c8]
and edx, dword [0x141dbf3cc]
add edx, 0x8a1c519d
xor edx, 0xe44ea2c6
cmp edx, 0x3fbbd0b3
jb 0x14001bf10
mov rdx, rcx
rol rdx, 1
nop word cs:[rax + rax]
mov r8d, dword [0x141dbf3d0]
imul r8d, dword [0x141dbf3d4]
imul r8, r8, 0x3510baaf
shr r8, 0x3d
or r8d, 0x35b01b44
cmp r8d, 0x780ec828
ja 0x14001bf40
xor edx, ecx
movzx ecx, dx
add rax, rcx
nop word cs:[rax + rax]
mov ecx, dword [0x141dbf3d8]
imul ecx, dword [0x141dbf3dc]
imul rcx, rcx, 0x3e0033cb
shr rcx, 0x3d
imul ecx, ecx, 0x37bef5b6
cmp ecx, 0xab87a588
ja 0x14001bf80
ret
Function at 0x14001bfb0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov r8, rdx
not r8
rol r8, 4
xor r8, rdx
mov rcx, r8
rol rcx, 5
xor rcx, r8
mov rdx, rcx
rol rdx, 2
nop word cs:[rax + rax]
mov r8d, dword [0x141dbf3e0]
and r8d, dword [0x141dbf3e4]
imul r8d, r8d, 0xd3eb9eb9
or r8d, 0x20cf0c5f
xor r8d, 0x5efea593
cmp r8d, 0xb6ae8edc
jb 0x14001bfe0
nop dword [rax]
mov r8d, dword [0x141dbf3e8]
or r8d, dword [0x141dbf3ec]
or r8d, 0xccd1d620
cmp r8d, 0xda8d6e31
je 0x14001c010
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret