joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400011b0
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400dd574], 1
je 0x140001229
mov r8, rdx
movabs r10, 0x642c8590b21642c9
xor r9d, r9d
mov r11, rdx
mov esi, 0x17
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r9
mul r10
mov rax, r9
sub r9, rdx
shr r9, 1
add r9, rdx
shr r9, 4
imul rdx, r9, 0xffffffffffffffe9
movzx r9d, byte [r8 + rsi]
xor r9b, byte [r11 + rdx]
mov byte [rcx + rsi - 0x17], r9b
mov rdx, rsi
inc rdx
mov rsi, rdx
inc r11
inc rax
cmp edx, 0x23
mov r9, rax
jne 0x1400011e0
mov dword [0x1400dd574], 1
mov eax, 0x2de12d5f
pop rsi
ret

Function at 0x140001550
Capabilities:
Encode data using xor

Disassembly:
cmp dword [0x1400ddf0c], 1
je 0x1400015ad
mov r8, rdx
movabs r10, 0xd79435e50d79435f
xor r9d, r9d
nop dword [rax]
mov rax, r9
mul r10
shr rdx, 4
mov eax, edx
imul eax, edx, 0xffffffed
movzx edx, byte [r8 + r9 + 0x13]
mov r11d, r9d
add eax, r9d
cdqe
xor dl, byte [r8 + rax]
mov byte [rcx + r9], dl
mov rax, r9
inc rax
mov r9, rax
cmp eax, 0x15
jne 0x140001570
mov dword [0x1400ddf0c], 1
mov eax, 0x2c527e32
ret

Function at 0x1400016a0
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400ddf24], 1
je 0x14000170a
mov r8, rdx
movabs r10, 0xcccccccccccccccd
xor r9d, r9d
mov eax, 0x14
nop
mov r11, rax
mov rsi, rdx
mov rax, r9
mul r10
shr rdx, 2
and rdx, 0xfffffffffffffffc
lea rax, [rdx + rdx*4]
neg rax
movzx edx, byte [r8 + r11]
xor dl, byte [rsi + rax]
mov byte [rcx + r11 - 0x14], dl
inc r11
mov rax, r11
mov edx, r11d
inc rsi
inc r9
cmp r11d, 0x26
mov rdx, rsi
jne 0x1400016c0
mov dword [0x1400ddf24], 1
mov eax, 0x8ec53c1a
pop rsi
ret

Function at 0x140001820
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400ddef0], 1
je 0x14000189f
mov r8, rdx
movabs r10, 0x842108421084211
xor r9d, r9d
mov r11, rdx
mov esi, 0x1f
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r9
mul r10
mov rax, r9
sub r9, rdx
shr r9, 1
add r9, rdx
shr r9, 4
mov rdx, r9
shl r9, 5
sub rdx, r9
movzx r9d, byte [r8 + rsi]
xor r9b, byte [r11 + rdx]
mov byte [rcx + rsi - 0x1f], r9b
mov rdx, rsi
inc rdx
mov rsi, rdx
inc r11
inc rax
cmp edx, 0x2f
mov r9, rax
jne 0x140001850
mov dword [0x1400ddef0], 1
mov eax, 0xd20cd932
pop rsi
ret

Function at 0x140001ff0
Capabilities:
Encode data using xor

Disassembly:
cmp dword [0x1400ddf50], 1
je 0x140002027
xor eax, eax
nop dword [rax + rax]
movzx r8d, byte [rdx + rax + 0x10]
xor r8b, byte [rdx + rax]
mov byte [rcx + rax], r8b
mov r8, rax
inc r8
mov rax, r8
cmp r8d, 8
jne 0x140002000
mov dword [0x1400ddf50], 1
mov eax, 0x7bfa404f
ret

Function at 0x140002030
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400ddf44], 1
je 0x140002093
mov r8, rdx
movabs r10, 0x97b425ed097b425f
xor r9d, r9d
mov eax, 0x1b
nop
mov r11, rax
mov rsi, rdx
mov rax, r9
mul r10
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe5
movzx edx, byte [r8 + r11]
xor dl, byte [rsi + rax]
mov byte [rcx + r11 - 0x1b], dl
inc r11
mov rax, r11
mov edx, r11d
inc rsi
inc r9
cmp r11d, 0x29
mov rdx, rsi
jne 0x140002050
mov dword [0x1400ddf44], 1
mov eax, 0xc4c315fb
pop rsi
ret
Function at 0x1400020a0
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400ddf30], 1
je 0x140002119
mov r8, rdx
movabs r10, 0x8618618618618619
xor r9d, r9d
mov r11, rdx
mov esi, 0x15
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r9
mul r10
mov rax, r9
sub r9, rdx
shr r9, 1
add r9, rdx
shr r9, 4
imul rdx, r9, 0xffffffffffffffeb
movzx r9d, byte [r8 + rsi]
xor r9b, byte [r11 + rdx]
mov byte [rcx + rsi - 0x15], r9b
mov rdx, rsi
inc rdx
mov rsi, rdx
inc r11
inc rax
cmp edx, 0x1c
mov r9, rax
jne 0x1400020d0
mov dword [0x1400ddf30], 1
mov eax, 0x930c6c8b
pop rsi
ret
Function at 0x140002df0
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400dd584], 1
je 0x140002e5a
mov r8, rdx
movabs r10, 0xe38e38e38e38e38f
xor r9d, r9d
mov eax, 0x12
nop
mov r11, rax
mov rsi, rdx
mov rax, r9
mul r10
shr rdx, 3
and rdx, 0xfffffffffffffffe
lea rax, [rdx + rdx*8]
neg rax
movzx edx, byte [r8 + r11]
xor dl, byte [rsi + rax]
mov byte [rcx + r11 - 0x12], dl
inc r11
mov rax, r11
mov edx, r11d
inc rsi
inc r9
cmp r11d, 0x1e
mov rdx, rsi
jne 0x140002e10
mov dword [0x1400dd584], 1
mov eax, 0x4b5f04e3
pop rsi
ret

Function at 0x140002e70
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400dd5a4], 1
je 0x140002ed3
mov r8, rdx
movabs r10, 0x97b425ed097b425f
xor r9d, r9d
mov eax, 0x1b
nop
mov r11, rax
mov rsi, rdx
mov rax, r9
mul r10
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe5
movzx edx, byte [r8 + r11]
xor dl, byte [rsi + rax]
mov byte [rcx + r11 - 0x1b], dl
inc r11
mov rax, r11
mov edx, r11d
inc rsi
inc r9
cmp r11d, 0x34
mov rdx, rsi
jne 0x140002e90
mov dword [0x1400dd5a4], 1
mov eax, 0x82936642
pop rsi
ret

Function at 0x140002ee0
Capabilities:
Encode data using xor

Disassembly:
cmp dword [0x1400dd5d8], 1
je 0x140002f3d
mov r8, rdx
movabs r10, 0x8888888888888889
xor r9d, r9d
nop dword [rax]
mov rax, r9
mul r10
shr rdx, 4
mov eax, edx
imul eax, edx, 0xffffffe2
movzx edx, byte [r8 + r9 + 0x1e]
mov r11d, r9d
add eax, r9d
cdqe
xor dl, byte [r8 + rax]
mov byte [rcx + r9], dl
mov rax, r9
inc rax
mov r9, rax
cmp eax, 0x2f
jne 0x140002f00
mov dword [0x1400dd5d8], 1
mov eax, 0x3124db3f
ret

Function at 0x140002f50
Capabilities:
Encode data using xor

Disassembly:
cmp dword [0x1400dd618], 1
je 0x140002fb2
xor eax, eax
nop dword [rax + rax]
mov r8d, eax
mov r9d, eax
imul r9, r9, 0x2f684bdb
shr r9, 0x20
mov r10d, eax
sub r10d, r9d
shr r10d, 1
add r10d, r9d
shr r10d, 4
imul r9d, r10d, 0xffffffe5
movzx r10d, byte [rdx + rax + 0x1b]
add r9d, eax
movsxd r8, r9d
xor r10b, byte [rdx + r8]
mov byte [rcx + rax], r10b
mov r8, rax
inc r8
mov rax, r8
cmp r8d, 0x3b
jne 0x140002f60
mov dword [0x1400dd618], 1
mov eax, 0x48e8ca29
ret

Function at 0x140002fc0
Capabilities:
Encode data using xor

Disassembly:
cmp dword [0x1400dd658], 1
je 0x140003022
xor eax, eax
nop dword [rax + rax]
mov r8d, eax
mov r9d, eax
imul r9, r9, 0x2f684bdb
shr r9, 0x20
mov r10d, eax
sub r10d, r9d
shr r10d, 1
add r10d, r9d
shr r10d, 4
imul r9d, r10d, 0xffffffe5
movzx r10d, byte [rdx + rax + 0x1b]
add r9d, eax
movsxd r8, r9d
xor r10b, byte [rdx + r8]
mov byte [rcx + rax], r10b
mov r8, rax
inc r8
mov rax, r8
cmp r8d, 0x3a
jne 0x140002fd0
mov dword [0x1400dd658], 1
mov eax, 0x6513ab97
ret

Function at 0x140003030
Capabilities:
Encode data using xor

Disassembly:
cmp dword [0x1400dd688], 1
je 0x14000308d
mov r8, rdx
movabs r10, 0x97b425ed097b425f
xor r9d, r9d
nop dword [rax]
mov rax, r9
mul r10
shr rdx, 4
mov eax, edx
imul eax, edx, 0xffffffe5
movzx edx, byte [r8 + r9 + 0x1b]
mov r11d, r9d
add eax, r9d
cdqe
xor dl, byte [r8 + rax]
mov byte [rcx + r9], dl
mov rax, r9
inc rax
mov r9, rax
cmp eax, 0x29
jne 0x140003050
mov dword [0x1400dd688], 1
mov eax, 0x6a5125aa
ret
Function at 0x1400030a0
Capabilities:
Encode data using xor

Disassembly:
cmp dword [0x1400dd6b0], 1
je 0x140003107
mov r8, rdx
movabs r10, 0x47ae147ae147ae15
xor r9d, r9d
nop dword [rax]
mov rax, r9
mul r10
mov rax, r9
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul eax, eax, 0xffffffe7
movzx edx, byte [r8 + r9 + 0x19]
mov r11d, r9d
add eax, r9d
cdqe
xor dl, byte [r8 + rax]
mov byte [rcx + r9], dl
mov rax, r9
inc rax
mov r9, rax
cmp eax, 0x21
jne 0x1400030c0
mov dword [0x1400dd6b0], 1
mov eax, 0xc4dc052b
ret

Function at 0x140003110
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400dd6c8], 1
je 0x14000318f
mov r8, rdx
movabs r10, 0x842108421084211
xor r9d, r9d
mov r11, rdx
mov esi, 0x1f
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r9
mul r10
mov rax, r9
sub r9, rdx
shr r9, 1
add r9, rdx
shr r9, 4
mov rdx, r9
shl r9, 5
sub rdx, r9
movzx r9d, byte [r8 + rsi]
xor r9b, byte [r11 + rdx]
mov byte [rcx + rsi - 0x1f], r9b
mov rdx, rsi
inc rdx
mov rsi, rdx
inc r11
inc rax
cmp edx, 0x33
mov r9, rax
jne 0x140003140
mov dword [0x1400dd6c8], 1
mov eax, 0x1072b4b0
pop rsi
ret

Function at 0x1400031a0
Capabilities:
Encode data using xor

Disassembly:
cmp dword [0x1400dd6f8], 1
je 0x140003203
mov eax, 0xcccccccd
xor r8d, r8d
nop word cs:[rax + rax]
nop dword [rax + rax]
mov r9d, r8d
mov r10d, r8d
imul r10, rax
shr r10, 0x24
shl r10d, 2
lea r10d, [r10 + r10*4]
movzx r11d, byte [rdx + r8 + 0x14]
sub r9d, r10d
movsxd r9, r9d
xor r11b, byte [rdx + r9]
mov byte [rcx + r8], r11b
mov r9, r8
inc r9
mov r8, r9
cmp r9d, 0x2a
jne 0x1400031c0
mov dword [0x1400dd6f8], 1
mov eax, 0x2217f73a
ret

Function at 0x140003940
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400ddf5c], 1
je 0x1400039bf
mov r8, rdx
movabs r10, 0x842108421084211
xor r9d, r9d
mov r11, rdx
mov esi, 0x1f
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r9
mul r10
mov rax, r9
sub r9, rdx
shr r9, 1
add r9, rdx
shr r9, 4
mov rdx, r9
shl r9, 5
sub rdx, r9
movzx r9d, byte [r8 + rsi]
xor r9b, byte [r11 + rdx]
mov byte [rcx + rsi - 0x1f], r9b
mov rdx, rsi
inc rdx
mov rsi, rdx
inc r11
inc rax
cmp edx, 0x26
mov r9, rax
jne 0x140003970
mov dword [0x1400ddf5c], 1
mov eax, 0x14938cb9
pop rsi
ret

Function at 0x140004de0
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400ddf6c], 1
je 0x140004e4a
mov r8, rdx
movabs r10, 0xcccccccccccccccd
xor r9d, r9d
mov eax, 0x14
nop
mov r11, rax
mov rsi, rdx
mov rax, r9
mul r10
shr rdx, 2
and rdx, 0xfffffffffffffffc
lea rax, [rdx + rdx*4]
neg rax
movzx edx, byte [r8 + r11]
xor dl, byte [rsi + rax]
mov byte [rcx + r11 - 0x14], dl
inc r11
mov rax, r11
mov edx, r11d
inc rsi
inc r9
cmp r11d, 0x18
mov rdx, rsi
jne 0x140004e00
mov dword [0x1400ddf6c], 1
mov eax, 0xbd9522a0
pop rsi
ret
Function at 0x140004e60
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400ddf78], 1
je 0x140004ed9
mov r8, rdx
movabs r10, 0x8618618618618619
xor r9d, r9d
mov r11, rdx
mov esi, 0x15
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r9
mul r10
mov rax, r9
sub r9, rdx
shr r9, 1
add r9, rdx
shr r9, 4
imul rdx, r9, 0xffffffffffffffeb
movzx r9d, byte [r8 + rsi]
xor r9b, byte [r11 + rdx]
mov byte [rcx + rsi - 0x15], r9b
mov rdx, rsi
inc rdx
mov rsi, rdx
inc r11
inc rax
cmp edx, 0x1a
mov r9, rax
jne 0x140004e90
mov dword [0x1400ddf78], 1
mov eax, 0x488c8e7
pop rsi
ret

Function at 0x140005590
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400ddf64], 1
je 0x1400055f3
mov r8, rdx
movabs r10, 0x97b425ed097b425f
xor r9d, r9d
mov eax, 0x1b
nop
mov r11, rax
mov rsi, rdx
mov rax, r9
mul r10
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe5
movzx edx, byte [r8 + r11]
xor dl, byte [rsi + rax]
mov byte [rcx + r11 - 0x1b], dl
inc r11
mov rax, r11
mov edx, r11d
inc rsi
inc r9
cmp r11d, 0x1e
mov rdx, rsi
jne 0x1400055b0
mov dword [0x1400ddf64], 1
mov eax, 0x1146a317
pop rsi
ret

Function at 0x140005e70
Capabilities:
Encode data using xor

Disassembly:
cmp dword [0x1400dd720], 1
je 0x140005ed1
mov r8, rdx
movabs r10, 0xcccccccccccccccd
xor r9d, r9d
nop dword [rax]
mov rax, r9
mul r10
shr rdx, 4
mov eax, edx
shl eax, 2
lea eax, [rax + rax*4]
movzx edx, byte [r8 + r9 + 0x14]
mov r11d, r9d
sub r11d, eax
movsxd rax, r11d
xor dl, byte [r8 + rax]
mov byte [rcx + r9], dl
mov rax, r9
inc rax
mov r9, rax
cmp eax, 0x24
jne 0x140005e90
mov dword [0x1400dd720], 1
mov eax, 0xc2f523db
ret

Function at 0x140005ee0
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400dd73c], 1
je 0x140005f4a
mov r8, rdx
movabs r10, 0xcccccccccccccccd
xor r9d, r9d
mov eax, 0x14
nop
mov r11, rax
mov rsi, rdx
mov rax, r9
mul r10
shr rdx, 2
and rdx, 0xfffffffffffffffc
lea rax, [rdx + rdx*4]
neg rax
movzx edx, byte [r8 + r11]
xor dl, byte [rsi + rax]
mov byte [rcx + r11 - 0x14], dl
inc r11
mov rax, r11
mov edx, r11d
inc rsi
inc r9
cmp r11d, 0x1e
mov rdx, rsi
jne 0x140005f00
mov dword [0x1400dd73c], 1
mov eax, 0xad7f73fc
pop rsi
ret

Function at 0x140005f60
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400dd72c], 1
je 0x140005fc3
mov r8, rdx
movabs r10, 0x97b425ed097b425f
xor r9d, r9d
mov eax, 0x1b
nop
mov r11, rax
mov rsi, rdx
mov rax, r9
mul r10
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe5
movzx edx, byte [r8 + r11]
xor dl, byte [rsi + rax]
mov byte [rcx + r11 - 0x1b], dl
inc r11
mov rax, r11
mov edx, r11d
inc rsi
inc r9
cmp r11d, 0x22
mov rdx, rsi
jne 0x140005f80
mov dword [0x1400dd72c], 1
mov eax, 0x997825a9
pop rsi
ret

Function at 0x140005fd0
Capabilities:
Encode data using xor

Disassembly:
cmp dword [0x1400dd760], 1
je 0x14000600e
xor eax, eax
nop dword [rax + rax]
movzx r8d, byte [rdx + rax + 0x10]
mov r9d, eax
and r9d, 0xf
xor r8b, byte [rdx + r9]
mov byte [rcx + rax], r8b
mov r8, rax
inc r8
mov rax, r8
cmp r8d, 0x1d
jne 0x140005fe0
mov dword [0x1400dd760], 1
mov eax, 0x22415f10
ret
Function at 0x140006ad0
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400dd76c], 1
je 0x140006b3a
mov r8, rdx
movabs r10, 0xcccccccccccccccd
xor r9d, r9d
mov eax, 0x14
nop
mov r11, rax
mov rsi, rdx
mov rax, r9
mul r10
shr rdx, 2
and rdx, 0xfffffffffffffffc
lea rax, [rdx + rdx*4]
neg rax
movzx edx, byte [r8 + r11]
xor dl, byte [rsi + rax]
mov byte [rcx + r11 - 0x14], dl
inc r11
mov rax, r11
mov edx, r11d
inc rsi
inc r9
cmp r11d, 0x1c
mov rdx, rsi
jne 0x140006af0
mov dword [0x1400dd76c], 1
mov eax, 0x5c2441f3
pop rsi
ret

Function at 0x140006b50
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400dd840], 1
je 0x140006bc9
mov r8, rdx
movabs r10, 0x642c8590b21642c9
xor r9d, r9d
mov r11, rdx
mov esi, 0x17
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r9
mul r10
mov rax, r9
sub r9, rdx
shr r9, 1
add r9, rdx
shr r9, 4
imul rdx, r9, 0xffffffffffffffe9
movzx r9d, byte [r8 + rsi]
xor r9b, byte [r11 + rdx]
mov byte [rcx + rsi - 0x17], r9b
mov rdx, rsi
inc rdx
mov rsi, rdx
inc r11
inc rax
cmp edx, 0x2c
mov r9, rax
jne 0x140006b80
mov dword [0x1400dd840], 1
mov eax, 0xc30dc9c8
pop rsi
ret

Function at 0x140006c50
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400dd7cc], 1
je 0x140006cc0
mov r8, rdx
movabs r9, 0x4924924924924925
xor eax, eax
mov r10, rdx
mov r11d, 0x1c
nop word cs:[rax + rax]
nop dword [rax]
mov rsi, rax
shr rax, 2
mul r9
shr rdx, 1
imul rax, rdx, 0xffffffffffffffe4
movzx edx, byte [r8 + r11]
xor dl, byte [r10 + rax]
mov byte [rcx + r11 - 0x1c], dl
mov rax, r11
inc rax
mov r11, rax
inc r10
inc rsi
cmp eax, 0x23
mov rax, rsi
jne 0x140006c80
mov dword [0x1400dd7cc], 1
mov eax, 0x3fe5db89
pop rsi
ret

Function at 0x140006cd0
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400dd850], 1
je 0x140006d4f
mov r8, rdx
movabs r10, 0x842108421084211
xor r9d, r9d
mov r11, rdx
mov esi, 0x1f
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r9
mul r10
mov rax, r9
sub r9, rdx
shr r9, 1
add r9, rdx
shr r9, 4
mov rdx, r9
shl r9, 5
sub rdx, r9
movzx r9d, byte [r8 + rsi]
xor r9b, byte [r11 + rdx]
mov byte [rcx + rsi - 0x1f], r9b
mov rdx, rsi
inc rdx
mov rsi, rdx
inc r11
inc rax
cmp edx, 0x2b
mov r9, rax
jne 0x140006d00
mov dword [0x1400dd850], 1
mov eax, 0xbb298644
pop rsi
ret

Function at 0x140006d60
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400dd774], 1
je 0x140006dd9
mov r8, rdx
movabs r10, 0x8618618618618619
xor r9d, r9d
mov r11, rdx
mov esi, 0x15
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r9
mul r10
mov rax, r9
sub r9, rdx
shr r9, 1
add r9, rdx
shr r9, 4
imul rdx, r9, 0xffffffffffffffeb
movzx r9d, byte [r8 + rsi]
xor r9b, byte [r11 + rdx]
mov byte [rcx + rsi - 0x15], r9b
mov rdx, rsi
inc rdx
mov rsi, rdx
inc r11
inc rax
cmp edx, 0x18
mov r9, rax
jne 0x140006d90
mov dword [0x1400dd774], 1
mov eax, 0xe5e26609
pop rsi
ret
Function at 0x140006de0
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400dd788], 1
je 0x140006e59
mov r8, rdx
movabs r10, 0x47ae147ae147ae15
xor r9d, r9d
mov r11, rdx
mov esi, 0x19
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r9
mul r10
mov rax, r9
sub r9, rdx
shr r9, 1
add r9, rdx
shr r9, 4
imul rdx, r9, 0xffffffffffffffe7
movzx r9d, byte [r8 + rsi]
xor r9b, byte [r11 + rdx]
mov byte [rcx + rsi - 0x19], r9b
mov rdx, rsi
inc rdx
mov rsi, rdx
inc r11
inc rax
cmp edx, 0x26
mov r9, rax
jne 0x140006e10
mov dword [0x1400dd788], 1
mov eax, 0xe0b0523
pop rsi
ret

Function at 0x140006e60
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400dd798], 1
je 0x140006ec3
mov r8, rdx
movabs r10, 0x2e8ba2e8ba2e8ba3
xor r9d, r9d
mov eax, 0x16
nop
mov r11, rax
mov rsi, rdx
mov rax, r9
mul r10
shr rdx, 2
imul rax, rdx, 0xffffffffffffffea
movzx edx, byte [r8 + r11]
xor dl, byte [rsi + rax]
mov byte [rcx + r11 - 0x16], dl
inc r11
mov rax, r11
mov edx, r11d
inc rsi
inc r9
cmp r11d, 0x22
mov rdx, rsi
jne 0x140006e80
mov dword [0x1400dd798], 1
mov eax, 0xcc88e2e2
pop rsi
ret

Function at 0x140006ed0
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400dd7ac], 1
je 0x140006f33
mov r8, rdx
movabs r10, 0x8888888888888889
xor r9d, r9d
mov eax, 0x1e
nop
mov r11, rax
mov rsi, rdx
mov rax, r9
mul r10
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe2
movzx edx, byte [r8 + r11]
xor dl, byte [rsi + rax]
mov byte [rcx + r11 - 0x1e], dl
inc r11
mov rax, r11
mov edx, r11d
inc rsi
inc r9
cmp r11d, 0x2c
mov rdx, rsi
jne 0x140006ef0
mov dword [0x1400dd7ac], 1
mov eax, 0xe9b6023
pop rsi
ret

Function at 0x140006f40
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400dd7c0], 1
je 0x140006fa3
mov r8, rdx
movabs r10, 0xd79435e50d79435f
xor r9d, r9d
mov eax, 0x13
nop
mov r11, rax
mov rsi, rdx
mov rax, r9
mul r10
shr rdx, 4
imul rax, rdx, 0xffffffffffffffed
movzx edx, byte [r8 + r11]
xor dl, byte [rsi + rax]
mov byte [rcx + r11 - 0x13], dl
inc r11
mov rax, r11
mov edx, r11d
inc rsi
inc r9
cmp r11d, 0x21
mov rdx, rsi
jne 0x140006f60
mov dword [0x1400dd7c0], 1
mov eax, 0xf32d0991
pop rsi
ret

Function at 0x140006fb0
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400dd7e0], 1
je 0x140007024
mov r8, rdx
movabs r10, 0xf0f0f0f0f0f0f0f1
xor r9d, r9d
mov r11, rdx
mov eax, 0x11
nop word cs:[rax + rax]
nop dword [rax]
mov rsi, rax
mov rax, r9
mul r10
mov rax, rdx
shr rdx, 4
and rax, 0xfffffffffffffff0
add rax, rdx
neg rax
movzx edx, byte [r8 + rsi]
xor dl, byte [r11 + rax]
mov byte [rcx + rsi - 0x11], dl
inc rsi
mov rax, rsi
mov edx, esi
inc r11
inc r9
cmp esi, 0x1e
jne 0x140006fe0
mov dword [0x1400dd7e0], 1
mov eax, 0x30959af2
pop rsi
ret
Function at 0x140007030
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400dd7f8], 1
je 0x1400070a9
mov r8, rdx
movabs r10, 0x8618618618618619
xor r9d, r9d
mov r11, rdx
mov esi, 0x15
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r9
mul r10
mov rax, r9
sub r9, rdx
shr r9, 1
add r9, rdx
shr r9, 4
imul rdx, r9, 0xffffffffffffffeb
movzx r9d, byte [r8 + rsi]
xor r9b, byte [r11 + rdx]
mov byte [rcx + rsi - 0x15], r9b
mov rdx, rsi
inc rdx
mov rsi, rdx
inc r11
inc rax
cmp edx, 0x27
mov r9, rax
jne 0x140007060
mov dword [0x1400dd7f8], 1
mov eax, 0xa8ac24e8
pop rsi
ret

Function at 0x1400070b0
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400dd810], 1
je 0x140007129
mov r8, rdx
movabs r10, 0x47ae147ae147ae15
xor r9d, r9d
mov r11, rdx
mov esi, 0x19
nop word cs:[rax + rax]
nop dword [rax]
mov rax, r9
mul r10
mov rax, r9
sub r9, rdx
shr r9, 1
add r9, rdx
shr r9, 4
imul rdx, r9, 0xffffffffffffffe7
movzx r9d, byte [r8 + rsi]
xor r9b, byte [r11 + rdx]
mov byte [rcx + rsi - 0x19], r9b
mov rdx, rsi
inc rdx
mov rsi, rdx
inc r11
inc rax
cmp edx, 0x2b
mov r9, rax
jne 0x1400070e0
mov dword [0x1400dd810], 1
mov eax, 0xa048ff3e
pop rsi
ret

Function at 0x140007130
Capabilities:
Encode data using xor

Disassembly:
cmp dword [0x1400dd824], 1
je 0x140007167
xor eax, eax
nop dword [rax + rax]
movzx r8d, byte [rdx + rax + 0x10]
xor r8b, byte [rdx + rax]
mov byte [rcx + rax], r8b
mov r8, rax
inc r8
mov rax, r8
cmp r8d, 0xf
jne 0x140007140
mov dword [0x1400dd824], 1
mov eax, 0x6111195d
ret
Function at 0x140007bc0
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400dddd4], 1
je 0x140007c34
mov r8, rdx
movabs r10, 0xf0f0f0f0f0f0f0f1
xor r9d, r9d
mov r11, rdx
mov eax, 0x11
nop word cs:[rax + rax]
nop dword [rax]
mov rsi, rax
mov rax, r9
mul r10
mov rax, rdx
shr rdx, 4
and rax, 0xfffffffffffffff0
add rax, rdx
neg rax
movzx edx, byte [r8 + rsi]
xor dl, byte [r11 + rax]
mov byte [rcx + rsi - 0x11], dl
inc rsi
mov rax, rsi
mov edx, esi
inc r11
inc r9
cmp esi, 0x22
jne 0x140007bf0
mov dword [0x1400dddd4], 1
mov eax, 0x4354ad89
pop rsi
ret

Function at 0x140007e10
Capabilities:
Encode data using xor

Disassembly:
cmp dword [0x1400dd88c], 1
je 0x140007e73
mov eax, 0xcccccccd
xor r8d, r8d
nop word cs:[rax + rax]
nop dword [rax + rax]
mov r9d, r8d
mov r10d, r8d
imul r10, rax
shr r10, 0x24
shl r10d, 2
lea r10d, [r10 + r10*4]
movzx r11d, byte [rdx + r8 + 0x14]
sub r9d, r10d
movsxd r9, r9d
xor r11b, byte [rdx + r9]
mov byte [rcx + r8], r11b
mov r9, r8
inc r9
mov r8, r9
cmp r9d, 0x36
jne 0x140007e30
mov dword [0x1400dd88c], 1
mov eax, 0x2a039bde
ret

Function at 0x140007e80
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400dd89c], 1
je 0x140007ee3
mov r8, rdx
movabs r10, 0x97b425ed097b425f
xor r9d, r9d
mov eax, 0x1b
nop
mov r11, rax
mov rsi, rdx
mov rax, r9
mul r10
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe5
movzx edx, byte [r8 + r11]
xor dl, byte [rsi + rax]
mov byte [rcx + r11 - 0x1b], dl
inc r11
mov rax, r11
mov edx, r11d
inc rsi
inc r9
cmp r11d, 0x25
mov rdx, rsi
jne 0x140007ea0
mov dword [0x1400dd89c], 1
mov eax, 0xf0810384
pop rsi
ret

Function at 0x140007ef0
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
cmp dword [0x1400dd8bc], 1
je 0x140007f50
mov r8, rdx
movabs r10, 0xf0f0f0f0f0f0f0f1
xor r9d, r9d
nop dword [rax]
mov rax, r9
mul r10
shr rdx, 4
mov eax, edx
shl edx, 4
add edx, eax
movzx eax, byte [r8 + r9 + 0x11]
mov r11d, r9d
sub r11d, edx
movsxd rdx, r11d
xor al, byte [r8 + rdx]
mov byte [rcx + r9], al
mov rax, r9
inc rax
mov r9, rax
cmp eax, 0x1c
jne 0x140007f10
mov dword [0x1400dd8bc], 1
mov eax, 0x13e09ddb
ret

Function at 0x140007f60
Capabilities:
Encode data using xor

Disassembly:
cmp dword [0x1400dd8dc], 1
je 0x140007f9e
xor eax, eax
nop dword [rax + rax]
movzx r8d, byte [rdx + rax + 0x10]
mov r9d, eax
and r9d, 0xf
xor r8b, byte [rdx + r9]
mov byte [rcx + rax], r8b
mov r8, rax
inc r8
mov rax, r8
cmp r8d, 0x1c
jne 0x140007f70
mov dword [0x1400dd8dc], 1
mov eax, 0x5c73338
ret

Function at 0x140007fb0
Capabilities:
Encode data using xor

Disassembly:
push rsi
cmp dword [0x1400dd8e8], 1
je 0x140008013
mov r8, rdx
movabs r10, 0x8888888888888889
xor r9d, r9d
mov eax, 0x1e
nop
mov r11, rax
mov rsi, rdx
mov rax, r9
mul r10
shr rdx, 4
imul rax, rdx, 0xffffffffffffffe2
movzx edx, byte [r8 + r11]
xor dl, byte [rsi + rax]
mov byte [rcx + r11 - 0x1e], dl
inc r11
mov rax, r11
mov edx, r11d
inc rsi
inc r9
cmp r11d, 0x26
mov rdx, rsi
jne 0x140007fd0
mov dword [0x1400dd8e8], 1
mov eax, 0xd1e7318
pop rsi
ret