joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400187f0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
xor rdx, 0xffffffff8b54ae56
add rdx, 0x65230377
mov rcx, rdx
rol rcx, 1
xor rcx, rdx
movzx ecx, cx
nop dword [rax]
mov edx, dword [0x141dc4d00]
add edx, dword [0x141dc4d04]
and edx, 0x3bb1b658
cmp edx, 0xaf7e2b51
je 0x140018810
add rax, rcx
nop dword [rax]
mov ecx, dword [0x141dc4d08]
add ecx, dword [0x141dc4d0c]
xor ecx, 0x427e37f0
add ecx, 0x4756546a
xor ecx, 0x72fc535b
cmp ecx, 0xb53b61ac
ja 0x140018830
ret

Function at 0x1400188c0
Capabilities:
Encode data using xor

Disassembly:
add rdx, 0x24b61fb0
nop word [rax + rax]
mov eax, dword [0x141dc4d18]
or eax, dword [0x141dc4d1c]
and eax, 0x108e0024
cmp eax, 0x39304340
je 0x1400188d0
xor rdx, 0xffffffffaa849540
imul r8, rdx, 0x2c3947c9
nop word cs:[rax + rax]
mov eax, dword [0x141dc4d20]
xor eax, dword [0x141dc4d24]
cmp eax, 0x1d3bfd36
je 0x140018900
mov eax, dword [0x141dc4d28]
xor edx, edx
div dword [0x141dc4d2c]
mov rax, r8
rol rax, 6
nop dword [rax + rax]
mov edx, dword [0x141dc4d30]
imul edx, dword [0x141dc4d34]
or edx, 0x20c02000
and edx, 0x30ec6000
cmp edx, 0x4d0d6198
ja 0x140018930
xor eax, r8d
movzx eax, ax
add rcx, rax
mov rax, rcx
ret

Function at 0x140018960
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
imul rdx, rdx, 0xffffffff85378186
mov rcx, rdx
rol rcx, 7
nop word cs:[rax + rax]
mov r8d, dword [0x141dc4d38]
imul r8d, dword [0x141dc4d3c]
xor r8d, 0xfaa2f268
add r8d, 0x24cd218c
cmp r8d, 0xfa06106f
ja 0x140018980
xor rcx, rdx
mov rdx, rcx
rol rdx, 3
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret

Function at 0x140018a20
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
xor rdx, 0x2b97f889
nop word [rax + rax]
mov ecx, dword [0x141dc4d48]
xor ecx, dword [0x141dc4d4c]
and ecx, 0xca772f65
add ecx, 0xdf01ddc2
cmp ecx, 0xc0976c63
jb 0x140018a30
lea r8, [rdx + 1]
shr r8, 8
mov rcx, 0xfffffffffffffffe
sub rcx, rdx
xor rcx, r8
mov rdx, rcx
rol rdx, 2
nop dword [rax]
mov r8d, dword [0x141dc4d50]
sub r8d, dword [0x141dc4d54]
add r8d, 0x12f2867b
and r8d, 0xecf5876b
add r8d, 0x8177723a
cmp r8d, 0xfa473495
ja 0x140018a70
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret

Function at 0x140018ab0
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov r9, rdx
shr r9, 0x16
nop word [rax + rax]
mov eax, dword [0x141dc4d58]
and eax, dword [0x141dc4d5c]
xor eax, 0x79502480
add eax, 0x584dbdf2
or eax, 0xa7feb846
cmp eax, 0xa22f81a2
jb 0x140018ac0
mov eax, dword [0x141dc4d60]
xor edx, edx
div dword [0x141dc4d64]
xor r9, r8
xor r9, 0x40a3e2b7
nop word [rax + rax]
mov eax, dword [0x141dc4d68]
sub eax, dword [0x141dc4d6c]
imul rax, rax, 0x729c40df
shr rax, 0x3d
or eax, 0xd0981040
and eax, 0xd0981042
cmp eax, 0xb983c987
jb 0x140018b00
add r9, 0x4211439b
mov r8, r9
rol r8, 2
nop word cs:[rax + rax]
mov eax, dword [0x141dc4d70]
xor edx, edx
div dword [0x141dc4d74]
and eax, 0x342032a3
cmp eax, 0x227b0bf1
je 0x140018b40
xor r8d, r9d
movzx eax, r8w
add rcx, rax
mov rax, rcx
ret
Function at 0x140018b70
Capabilities:
Encode data using xor

Disassembly:
mov rax, rdx
shr rax, 9
nop word [rax + rax]
mov r8d, dword [0x141dc4d78]
xor r8d, dword [0x141dc4d7c]
add r8d, 0x8db17fc0
or r8d, 0x60c0e9ed
cmp r8d, 0x68f19236
ja 0x140018b80
xor rax, rdx
imul rax, rax, 0x67fcfa6f
movabs rdx, 0x33c9f48c6c6988ec
add rdx, rax
mov r8, rdx
shr r8, 0x1c
xor r8, rdx
mov rax, r8
rol rax, 1
xor rax, r8
movzx eax, ax
add rcx, rax
nop word cs:[rax + rax]
mov eax, dword [0x141dc4d80]
xor edx, edx
div dword [0x141dc4d84]
or eax, 0x36d58028
add eax, 0x1ef9797c
cmp eax, 0x88d31bbd
ja 0x140018be0
mov rax, rcx
ret

Function at 0x140018c70
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r8d, 0x100c56fd
sub r8, rdx
mov rax, r8
shr rax, 3
xor rax, r8
nop word cs:[rax + rax]
mov edx, dword [0x141dc4d90]
mov r8d, dword [0x141dc4d94]
add edx, r8d
add edx, 0xdcc0593e
or edx, 0xa9829813
xor edx, 0x1277d538
cmp edx, 0xff5897d6
ja 0x140018c90
mov rdx, rax
rol rdx, 1
xor rdx, rax
mov r8, rdx
rol r8, 5
xor r8, rdx
nop dword [rax]
mov eax, dword [0x141dc4d98]
xor edx, edx
div dword [0x141dc4d9c]
xor eax, 0x413d277f
imul rdx, rax, 0xd361d47
shr rdx, 0x20
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1a
xor eax, 0xa07fca8f
cmp eax, 0xb07272cb
ja 0x140018cd0
movzx eax, r8w
add rcx, rax
mov rax, rcx
ret

Function at 0x140018f40
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
xor rdx, 0x14f65b24
mov rcx, rdx
rol rcx, 3
mov r8d, 0x8b71b441
xor rcx, rdx
mov rdx, rcx
rol rdx, 3
xor rdx, rcx
mov rcx, rdx
rol rcx, 4
xor rcx, rdx
mov rdx, rcx
rol rdx, 1
nop word cs:[rax + rax]
mov r9d, dword [0x141dc4dd8]
xor r9d, dword [str.f_tS_]
imul r9, r8
shr r9, 0x3d
imul r9d, r9d, 0xe63ff57f
add r9d, 0x4861a979
cmp r9d, 0xb955b9
jb 0x140018f80
nop dword [rax]
mov r8d, dword [0x141dc4de0]
and r8d, dword [0x141dc4de4]
cmp r8d, 0x4d720d28
je 0x140018fb0
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret

Function at 0x140019040
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov r8d, 0xa7f20e67
mov rcx, rdx
rol rcx, 4
xor rcx, rdx
mov r9, rcx
rol r9, 1
xor r9, rcx
mov rdx, 0xffffffffbb77fe50
sub rdx, r9
mov rcx, rdx
rol rcx, 4
nop dword [rax]
mov r9d, dword [0x141dc4df0]
xor r9d, dword [0x141dc4df4]
or r9d, 0xb123ccf9
imul r9, r8
shr r9, 0x3f
imul r9d, r9d, 0xf22160b1
cmp r9d, 0x2e7804c0
jb 0x140019070
xor rcx, rdx
xor edx, edx
nop word cs:[rax + rax]
test dl, dl
jne 0x1400190b0
movzx ecx, cx
add rax, rcx
nop word [rax + rax]
mov ecx, dword [0x141dc4df8]
imul ecx, dword [0x141dc4dfc]
imul ecx, ecx, 0x266a405d
add ecx, 0xff530186
and ecx, 0x692462ad
cmp ecx, 0x9066ab81
ja 0x1400190c0
ret

Function at 0x140019120
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
shr r8, 0x18
xor r8, rdx
mov rdx, r8
rol rdx, 2
mov rax, rcx
xor rdx, r8
xor rdx, 0xffffffffe2bc9ef5
add rdx, 0x7b790a36
mov rcx, rdx
rol rcx, 3
xor r8d, r8d
nop
test r8b, r8b
jne 0x140019150
xor ecx, edx
movzx ecx, cx
add rax, rcx
nop dword [rax]
mov ecx, dword [0x141dc4e00]
xor ecx, dword [0x141dc4e04]
or ecx, 0x63e4f137
add ecx, 0xf3703047
and ecx, 0xff471d0e
cmp ecx, 0x1d1ca268
jb 0x140019160
ret
Function at 0x140019190
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
imul rcx, rdx, 0x6bb8a86e
nop word [rax + rax]
mov edx, dword [0x141dc4e08]
xor edx, dword [0x141dc4e0c]
xor edx, 0x7dcecac4
imul rdx, rdx, 0x238119c1
shr rdx, 0x3d
cmp edx, 0x4a36c61a
je 0x1400191a0
movabs rdx, 0xf094022ea76b12dd
add rcx, rdx
mov rdx, rcx
rol rdx, 7
xor r8d, r8d
nop dword [rax]
test r8b, r8b
jne 0x1400191e0
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret

Function at 0x1400191f0
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x141dc4e10]
xor r9d, r9d
xor edx, edx
div dword [0x141dc4e14]
xor r8, 0xffffffffd6ef0828
imul rax, r8, 0x588f4791
nop word cs:[rax + rax]
test r9b, r9b
jne 0x140019220
mov rdx, rax
rol rdx, 6
xor rdx, rax
neg rdx
mov rax, rdx
rol rax, 7
xor eax, edx
movzx eax, ax
add rcx, rax
nop word cs:[rax + rax]
mov eax, dword [0x141dc4e18]
xor eax, dword [0x141dc4e1c]
and eax, 0x4154a254
cmp eax, 0x5e14ffcd
je 0x140019250
mov rax, rcx
ret

Function at 0x1400193c0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rdx
shr rax, 1
xor rax, rdx
nop dword [rax]
mov edx, dword [0x141dc4e48]
add edx, dword [0x141dc4e4c]
imul edx, edx, 0x1084be02
add edx, 0x4edc6b4
xor edx, 0xea50761e
cmp edx, 0x191a7577
jb 0x1400193d0
mov rdx, rax
rol rdx, 1
xor rdx, rax
mov rax, rdx
rol rax, 7
xor rax, rdx
neg rax
mov r8, rax
rol r8, 1
xor r8, rax
nop word cs:[rax + rax]
mov eax, dword [0x141dc4e50]
xor edx, edx
div dword [0x141dc4e54]
xor eax, 0xae304204
and eax, 0xefb3c256
cmp eax, 0x3618f4a2
jb 0x140019420
movzx eax, r8w
add rcx, rax
mov rax, rcx
ret

Function at 0x140019450
Capabilities:
Encode data using xor

Disassembly:
xor rdx, 0xffffffff87e6ab0a
mov r8, rdx
shr r8, 9
xor r8, rdx
add r8, 0xffffffffa94a4a2f
mov rax, r8
rol rax, 6
xor rax, r8
nop word cs:[rax + rax]
mov edx, dword [0x141dc4e58]
and edx, dword [0x141dc4e5c]
xor edx, 0x4488c00
and edx, 0x44c8c24
cmp edx, 0xc162bd6f
ja 0x140019480
movzx eax, ax
add rcx, rax
nop word cs:[rax + rax]
mov eax, dword [0x141dc4e60]
xor edx, edx
div dword [0x141dc4e64]
cmp eax, 0xa57e85cc
je 0x1400194b0
mov rax, rcx
ret

Function at 0x1400194d0
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov r8, rdx
mov r9, rdx
shr r9, 0xe
mov eax, dword [0x141dc4e68]
xor edx, edx
div dword [0x141dc4e6c]
xor r9, r8
nop dword [rax + rax]
mov eax, dword [0x141dc4e70]
sub eax, dword [0x141dc4e74]
xor eax, 0x7bcca312
add eax, 0x8dac9796
cmp eax, 0x6a9ae7d3
ja 0x1400194f0
mov rax, r9
rol rax, 1
xor rax, r9
mov rdx, 0xffffffffefcedbe3
sub rdx, rax
mov rax, rdx
rol rax, 5
xor eax, edx
movzx eax, ax
add rcx, rax
mov rax, rcx
ret
Function at 0x140019540
Capabilities:
Encode data using xor

Disassembly:
mov r10d, 0xaf05cd1b
mov r9, 0xffffffffb74f018a
sub r9, rdx
xor r9, 0x5ad80fed
mov r8, r9
rol r8, 3
nop
mov eax, dword [0x141dc4e78]
xor edx, edx
div dword [0x141dc4e7c]
add eax, 0x5a61997a
imul rax, r10
shr rax, 0x3e
add eax, 0x822d8de1
cmp eax, 0xad1e9e92
ja 0x140019560
mov eax, 0xa4f0c657
xor r8, r9
nop
mov edx, dword [0x141dc4e80]
imul edx, dword [0x141dc4e84]
add edx, 0xb8ad2186
xor edx, 0xee0e107
imul rdx, rax
shr rdx, 0x3f
cmp edx, 0x92a40436
ja 0x140019590
movzx eax, r8w
add rcx, rax
mov rax, rcx
ret

Function at 0x140019740
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
neg rdx
mov rcx, rdx
shr rcx, 0xb
xor rcx, rdx
xor edx, edx
nop word cs:[rax + rax]
test dl, dl
jne 0x140019760
mov rdx, rcx
rol rdx, 6
nop dword [rax + rax]
mov r8d, dword [0x141dc4ea8]
imul r8d, dword [0x141dc4eac]
or r8d, 0xc6cb9441
xor r8d, 0xb3e639a5
add r8d, 0x98b5a1c3
cmp r8d, 0xb5974905
jb 0x140019770
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret

Function at 0x1400197b0
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
shr r8, 0x1a
xor r8, rdx
mov r9, r8
shr r9, 0xc
nop word cs:[rax + rax]
mov eax, dword [0x141dc4eb0]
xor edx, edx
div dword [0x141dc4eb4]
and eax, 0x71e7d0bf
imul eax, eax, 0xa7858945
and eax, 0x5d6fc76d
cmp eax, 0xb8b7a766
ja 0x1400197d0
movabs r10, 0x11729e1949dd8eca
mov eax, dword [0x141dc4eb8]
xor edx, edx
div dword [0x141dc4ebc]
xor r9, r8
imul rax, r9, 0x557c8f5a
add rax, r10
mov rdx, rax
rol rdx, 1
mov r8d, dword [0x141dc4ec0]
imul r8d, dword [0x141dc4ec4]
xor r8d, 0x9087955e
imul r8d, r8d, 0x93c8c918
cmp r8d, 0xc6724a02
je 0x140019820
xor edx, eax
movzx eax, dx
add rcx, rax
xor eax, eax
test al, al
jne 0x140019850
mov rax, rcx
ret

Function at 0x1400199f0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov r8, 0xffffffffdf6819da
sub r8, rdx
mov rcx, r8
shr rcx, 6
nop word cs:[rax + rax]
mov edx, dword [0x141dc4ee8]
add edx, dword [0x141dc4eec]
imul edx, edx, 0x50509341
add edx, 0xab10acc1
cmp edx, 0x496be3ed
jb 0x140019a10
xor rcx, r8
add rcx, 0xffffffffd3868f39
mov rdx, rcx
rol rdx, 4
nop word cs:[rax + rax]
mov r8d, dword [0x141dc4ef0]
sub r8d, dword [0x141dc4ef4]
imul r8d, r8d, 0xddbf09d2
add r8d, 0xdcbef601
xor r8d, 0x3f9a93e6
cmp r8d, 0xbc8b00b9
ja 0x140019a50
xor edx, ecx
movzx ecx, dx
add rax, rcx
nop word cs:[rax + rax]
mov ecx, dword [0x141dc4ef8]
xor ecx, dword [0x141dc4efc]
add ecx, 0x7bdf50ea
xor ecx, 0xf6f97c94
add ecx, 0x55f792e4
cmp ecx, 0x753f162c
jb 0x140019a90
ret

Function at 0x140019af0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
xor rdx, 0xffffffffe1e26758
xor ecx, ecx
nop dword [rax]
test cl, cl
jne 0x140019b00
mov rcx, rdx
shr rcx, 0x12
xor rcx, rdx
mov rdx, rcx
shr rdx, 0x14
nop word cs:[rax + rax]
mov r8d, dword [0x141dc4f00]
or r8d, dword [0x141dc4f04]
add r8d, 0x7450d463
xor r8d, 0x40234032
or r8d, 0x3e442e4d
cmp r8d, 0xf2c9ef59
je 0x140019b20
xor rdx, rcx
mov rcx, rdx
rol rcx, 5
xor rcx, rdx
mov rdx, rcx
rol rdx, 2
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret
Function at 0x140019b70
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov ecx, 0x5d081d2d
sub rcx, rdx
nop dword [rax + rax]
mov edx, dword [0x141dc4f08]
mov r8d, dword [0x141dc4f0c]
add edx, r8d
add edx, 0x2b4850a1
or edx, 0x150b2734
cmp edx, 0xf820a1d
je 0x140019b80
mov rdx, rcx
shr rdx, 0x14
xor rdx, rcx
nop
mov ecx, dword [0x141dc4f10]
xor ecx, dword [0x141dc4f14]
add ecx, 0xa29cca71
and ecx, 0xba696ad8
add ecx, 0x7f739e4f
cmp ecx, 0x871ee4e5
ja 0x140019bb0
imul rcx, rdx, 0xffffffff90b9a0b9
add rcx, 0x11fb624e
mov rdx, rcx
rol rdx, 2
nop dword [rax + rax]
mov r8d, dword [0x141dc4f18]
mov r9d, dword [0x141dc4f1c]
add r8d, r9d
add r8d, 0x82318683
or r8d, 0x73c6b2b5
cmp r8d, 0x11a63827
je 0x140019bf0
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret

Function at 0x140019c30
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
not rdx
mov rcx, rdx
shr rcx, 0xb
xor rcx, rdx
add rcx, 0xffffffff9c48430d
mov rdx, rcx
rol rdx, 1
nop dword [rax]
mov r8d, dword [0x141dc4f20]
or r8d, dword [0x141dc4f24]
xor r8d, 0xd5fd31d8
add r8d, 0x95a1c010
xor r8d, 0x93ee5e88
cmp r8d, 0xdab65ee7
ja 0x140019c50
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret

Function at 0x140019c90
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov rax, rcx
imul rcx, rdx, 0x4b504a7f
movabs rdx, 0x7615abc6e8feaac
add rcx, rdx
mov rdx, rcx
rol rdx, 3
nop
mov r8d, dword [0x141dc4f28]
sub r8d, dword [0x141dc4f2c]
add r8d, 0xb9344d33
xor r8d, 0x80661b70
imul r8d, r8d, 0x36a1a343
cmp r8d, 0x50baf3c8
jb 0x140019cb0
xor edx, ecx
movzx ecx, dx
add rax, rcx
nop word cs:[rax + rax]
mov ecx, dword [0x141dc4f30]
xor ecx, dword [0x141dc4f34]
imul ecx, ecx, 0xa0995e0c
add ecx, 0x469331b8
imul rdx, rcx, 0x31546aff
shr rdx, 0x20
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 0x1f
cmp ecx, 0x374bacb1
je 0x140019cf0
ret

Function at 0x140019e20
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
xor rdx, 0xffffffffbf7c5545
nop word [rax + rax]
mov ecx, dword [0x141dc4f50]
mov r8d, dword [0x141dc4f54]
add ecx, r8d
add ecx, 0xc0ddf417
imul rcx, rcx, 0x5fa704df
shr rcx, 0x3e
cmp ecx, 0xfdcd1eb4
ja 0x140019e30
imul rdx, rdx, 0x5425fcd3
movabs rcx, 0x2809eb325414699b
add rcx, rdx
mov rdx, rcx
rol rdx, 4
nop word cs:[rax + rax]
mov r8d, dword [0x141dc4f58]
xor r8d, dword [0x141dc4f5c]
imul r8d, r8d, 0x2d53fe78
and r8d, 0xccf2a768
cmp r8d, 0x95b382e4
jb 0x140019e80
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret

Function at 0x140019f50
Capabilities:
Encode data using xor

Disassembly:
imul r8, rdx, 0xffffffffd93052dd
movabs rax, 0xfc8671e7a54d19d8
add r8, rax
xor r8, 0xffffffffb7eadb00
mov eax, dword [str.I___]
xor edx, edx
div dword [0x141dc4f74]
mov rax, r8
rol rax, 2
mov edx, dword [0x141dc4f78]
sub edx, dword [0x141dc4f7c]
or edx, 0xe02ad052
xor edx, 0xdeb5016d
cmp edx, 0x447d4660
ja 0x140019f80
xor eax, r8d
movzx eax, ax
add rcx, rax
mov rax, rcx
ret
Function at 0x140019fb0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov rcx, rdx
shr rcx, 0xf
xor rcx, rdx
imul rcx, rcx, 0x2b930655
not rcx
nop word [rax + rax]
mov edx, dword [str.VG_F]
sub edx, dword [0x141dc4f84]
imul rdx, rdx, 0x7ee2e2b
shr rdx, 0x38
add edx, 0xecf53d79
cmp edx, 0x4c3c001e
jb 0x140019fd0
mov rdx, rcx
rol rdx, 4
xor rdx, rcx
mov rcx, rdx
rol rcx, 1
nop word cs:[rax + rax]
mov r8d, dword [0x141dc4f88]
xor r8d, dword [0x141dc4f8c]
imul r8d, r8d, 0xdd892415
add r8d, 0x27fbc600
and r8d, 0xbe2d0470
cmp r8d, 0xe7f6b4cf
je 0x14001a010
xor ecx, edx
movzx ecx, cx
add rax, rcx
ret

Function at 0x14001a1a0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov ecx, 0x69874d36
sub rcx, rdx
nop dword [rax + rax]
mov edx, dword [0x141dc4fa8]
or edx, dword [0x141dc4fac]
or edx, 0xd0c22364
xor edx, 0xd08a0174
or edx, 0x5355c0a
cmp edx, 0xa9d2afe
jb 0x14001a1b0
mov rdx, rcx
shr rdx, 4
xor rdx, rcx
mov rcx, rdx
shr rcx, 0x18
xor rcx, rdx
mov rdx, rcx
rol rdx, 5
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret

Function at 0x14001a2a0
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x141dc4fb8]
xor edx, edx
div dword [0x141dc4fbc]
mov rax, rcx
mov rcx, r8
shr rcx, 8
xor rcx, r8
nop
mov edx, dword [0x141dc4fc0]
xor edx, dword [0x141dc4fc4]
imul edx, edx, 0xfd7e4d49
add edx, 0x1f59c5a
imul rdx, rdx, 0x7515cadd
shr rdx, 0x3d
cmp edx, 0x3a3abc6a
je 0x14001a2c0
neg rcx
mov rdx, rcx
shr rdx, 0x18
xor rdx, rcx
mov rcx, rdx
rol rcx, 7
xor rcx, rdx
mov rdx, rcx
rol rdx, 2
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret

Function at 0x14001a320
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov rcx, 0xfffffffff4594856
sub rcx, rdx
imul rcx, rcx, 0x6e31692a
mov r8d, 0xce5d2b87
xor rcx, 0xffffffff95e70c76
mov rdx, rcx
rol rdx, 1
nop word [rax + rax]
mov r9d, dword [0x141dc4fc8]
imul r9d, dword [0x141dc4fcc]
imul r9, r8
shr r9, 0x3d
xor r9d, 0xae22e492
cmp r9d, 0x14c5a9b2
jb 0x14001a350
xor edx, ecx
movzx ecx, dx
add rax, rcx
nop
mov ecx, dword [0x141dc4fd0]
and ecx, dword [0x141dc4fd4]
imul ecx, ecx, 0x8f11a4d5
cmp ecx, 0xeb3b1d00
je 0x14001a380
ret

Function at 0x14001a400
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
add rdx, 0x148d8bce
xor rdx, 0xffffffffe664e7bc
xor ecx, ecx
nop word cs:[rax + rax]
test cl, cl
jne 0x14001a420
mov r8, rdx
shr r8, 0xc
xor r8, rdx
mov rcx, r8
rol rcx, 6
xor rcx, r8
nop dword [rax + rax]
mov edx, dword [0x141dc4fe0]
add edx, dword [0x141dc4fe4]
or edx, 0xa4dbbc0a
xor edx, 0x535ef27d
cmp edx, 0x792f052e
jb 0x14001a440
movzx ecx, cx
add rax, rcx
nop word cs:[rax + rax]
mov ecx, dword [0x141dc4fe8]
sub ecx, dword [0x141dc4fec]
imul rcx, rcx, 0x45eabb37
shr rcx, 0x3e
or ecx, 0xf042d240
cmp ecx, 0xa3077908
jb 0x14001a470
ret
Function at 0x14001a4a0
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x141dc4ff0]
xor edx, edx
div dword [0x141dc4ff4]
mov edx, 0xeffa
sub rdx, r8
mov rax, rdx
shr rax, 0x12
mov r8d, dword [0x141dc4ff8]
or r8d, dword [0x141dc4ffc]
imul r8d, r8d, 0x383ece34
or r8d, 0xefbc5ffe
cmp r8d, 0x99f3191e
je 0x14001a4c0
xor rax, rdx
mov rdx, rax
rol rdx, 4
nop
mov r8d, dword [0x141dc5000]
imul r8d, dword [0x141dc5004]
xor r8d, 0x91619b70
add r8d, 0x11dd1adf
or r8d, 0x39a405d4
cmp r8d, 0x125d093a
jb 0x14001a4f0
xor edx, eax
movzx eax, dx
add rcx, rax
mov rax, rcx
ret

Function at 0x14001a530
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov rcx, rdx
rol rcx, 7
xor rcx, rdx
nop dword [rax]
mov edx, dword [0x141dc5008]
add edx, dword [0x141dc500c]
xor edx, 0x567ab0b
add edx, 0x38624e00
or edx, 0xe6c73c6b
cmp edx, 0xb98cb82e
jb 0x14001a540
add rcx, 0xbd94a6
xor rcx, 0x3e637604
mov rdx, rcx
rol rdx, 4
nop dword [rax + rax]
mov r8d, dword [0x141dc5010]
and r8d, dword [0x141dc5014]
add r8d, 0x63557f9c
xor r8d, 0xe94c5389
imul r8d, r8d, 0x74c25d22
cmp r8d, 0xc2b9af1b
ja 0x14001a580
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret

Function at 0x14001a650
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov r8, rdx
shr r8, 6
xor r8, rdx
movabs rcx, 0xffffffff35683bdd
sub rcx, r8
mov rdx, rcx
rol rdx, 1
mov r8d, dword [0x141dc5028]
sub r8d, dword [0x141dc502c]
or r8d, 0xf6fdf347
xor r8d, 0x9e2f8723
cmp r8d, 0xf1181e71
ja 0x14001a670
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret

Function at 0x14001a7c0
Capabilities:
Encode data using xor

Disassembly:
movabs r8, 0xb06c7d8dc4a2771
mov rax, rcx
mov rcx, 0xffffffffaab5972c
sub rcx, rdx
imul rcx, r8
add rcx, 0x79fcc603
nop word cs:[rax + rax]
mov edx, dword [0x141dc5050]
and edx, dword [0x141dc5054]
xor edx, 0xdfcf5d0
shr edx, 2
imul rdx, rdx, 0x10545135
shr rdx, 0x38
cmp edx, 0x45e113bc
je 0x14001a7f0
mov rdx, rcx
rol rdx, 2
nop
mov r8d, dword [0x141dc5058]
add r8d, dword [0x141dc505c]
imul r8d, r8d, 0xa9d57bbf
add r8d, 0xf44a56e3
cmp r8d, 0xd7f33256
jb 0x14001a820
xor edx, ecx
movzx ecx, dx
add rax, rcx
ret

Function at 0x14001a910
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
rol r8, 7
xor r8, rdx
add r8, 0x47e95d86
xor r8, 0xffffffffca17153b
mov rax, r8
rol rax, 1
xor rax, r8
nop word cs:[rax + rax]
mov edx, dword [0x141dc5070]
or edx, dword [0x141dc5074]
and edx, 0xd49a2
add edx, 0xc032740d
and edx, 0x167d89
cmp edx, 0x2bea2f90
je 0x14001a940
mov rdx, rax
rol rdx, 4
nop dword [rax]
mov r8d, dword [0x141dc5078]
or r8d, dword [0x141dc507c]
xor r8d, 0x22a00880
and r8d, 0x2ea40887
cmp r8d, 0x921735eb
ja 0x14001a970
xor edx, eax
movzx r8d, dx
mov eax, dword [0x141dc5080]
xor edx, edx
div dword [0x141dc5084]
add rcx, r8
nop dword [rax]
mov eax, dword [0x141dc5088]
xor edx, edx
div dword [str.j_bs]
xor eax, 0x830143
or eax, 0xfb5cfcb0
add eax, 0x59a1423e
cmp eax, 0xf5523c4f
ja 0x14001a9b0
mov rax, rcx
ret
Function at 0x14001a9e0
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
xor r8, 0x673d1440
mov r9, r8
rol r9, 3
nop word cs:[rax + rax]
mov eax, dword [0x141dc5090]
xor edx, edx
div dword [0x141dc5094]
or eax, 0xed7f93c
imul rdx, rax, 0x3216c6d
shr rdx, 0x20
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1d
add eax, 0xd43ec4a
cmp eax, 0x1cedd7c9
ja 0x14001aa00
xor r9, r8
neg r9
mov rax, r9
rol rax, 3
xor rax, r9
nop word cs:[rax + rax]
mov edx, dword [0x141dc5098]
xor edx, dword [0x141dc509c]
and edx, 0x4e3e9b86
cmp edx, 0xf2bbbabc
je 0x14001aa50
movzx eax, ax
add rcx, rax
mov rax, rcx
ret

Function at 0x14001aa80
Capabilities:
Encode data using xor

Disassembly:
mov rax, 0xffffffff8adfc54d
sub rax, rdx
imul r8, rax, 0x464ed3db
not r8
mov eax, 0xaed69be3
mov r9, r8
rol r9, 2
mov edx, dword [0x141dc50a0]
or edx, dword [0x141dc50a4]
xor edx, 0x65900100
or edx, 0x9a685e7a
imul rdx, rax
shr rdx, 0x3f
cmp edx, 0x76934b22
ja 0x14001aaa0
mov eax, dword [0x141dc50a8]
xor edx, edx
div dword [0x141dc50ac]
nop word cs:[rax + rax]
mov eax, dword [0x141dc50b0]
and eax, dword [0x141dc50b4]
add eax, 0xd982fcdc
imul rax, rax, 0x53990ec9
shr rax, 0x3e
cmp eax, 0xd96ceb4c
ja 0x14001aae0
xor r9d, r8d
movzx eax, r9w
add rcx, rax
mov rax, rcx
ret

Function at 0x14001ab20
Capabilities:
Encode data using xor

Disassembly:
add rdx, 0xffffffffca28c985
mov rax, rdx
rol rax, 6
nop
mov r8d, dword [0x141dc50b8]
imul r8d, dword [0x141dc50bc]
xor r8d, 0x874c3a5
imul r8d, r8d, 0x85c7b83a
or r8d, 0xa9ed9914
cmp r8d, 0xc18f9732
je 0x14001ab30
xor eax, edx
movzx r8d, ax
mov eax, dword [0x141dc50c0]
xor edx, edx
div dword [0x141dc50c4]
add rcx, r8
nop word cs:[rax + rax]
mov eax, dword [0x141dc50c8]
and eax, dword [0x141dc50cc]
xor eax, 0x2f52eb3b
imul rax, rax, 0x365341eb
shr rax, 0x3b
cmp eax, 0x129a8f37
ja 0x14001ab80
mov rax, rcx
ret

Function at 0x14001ac90
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
add r8, 0xffffffffc05102f5
movabs r9, 0xffffffff4c78fddd
mov eax, dword [0x141dc50e8]
xor edx, edx
div dword [0x141dc50ec]
xor r8, 0xffffffff944ed57a
add r8, r9
mov rax, r8
rol rax, 2
nop word cs:[rax + rax]
mov edx, dword [0x141dc50f0]
xor edx, dword [0x141dc50f4]
imul edx, edx, 0x6cada07d
add edx, 0xc90201d
imul r9, rdx, 0xf20cac1
shr r9, 0x20
sub edx, r9d
shr edx, 1
add edx, r9d
shr edx, 0x1f
cmp edx, 0xad911da4
ja 0x14001acd0
xor eax, r8d
movzx edx, ax
mov eax, 0xa040eb4f
add rcx, rdx
nop word cs:[rax + rax]
mov edx, dword [0x141dc50f8]
or edx, dword [0x141dc50fc]
or edx, 0x197448a4
imul rdx, rax
shr rdx, 0x39
and edx, 0x34
cmp edx, 0x30b89011
ja 0x14001ad20
mov rax, rcx
ret

Function at 0x14001adc0
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
shr r8, 0x1e
xor r8, rdx
not r8
nop dword [rax]
mov eax, dword [0x141dc5110]
xor edx, edx
div dword [0x141dc5114]
cmp eax, 0x7fd36163
je 0x14001add0
imul rdx, r8, 0xffffffffaefbea66
mov rax, rdx
rol rax, 6
xor rax, rdx
nop word cs:[rax + rax]
mov edx, dword [0x141dc5118]
add edx, dword [0x141dc511c]
xor edx, 0x20bf4706
add edx, 0x8eea9f38
or edx, 0x92d7628a
cmp edx, 0x3bd9c8e3
jb 0x14001ae00
movzx eax, ax
add rcx, rax
mov rax, rcx
ret