joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1401b9b10
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x1401b9b7c
test edx, edx
je 0x1401b9bee
movzx eax, byte [0x14051f86d]
nop word cs:[rax + rax]
cmp al, 0xdc
je 0x1401b9c9d
movzx ecx, byte [0x140520b18]
lea eax, [rcx - 0x78]
add cl, 0x86
lock cmpxchg byte [0x14051f86d], cl
jne 0x1401b9b30
xor eax, eax
lea rcx, [0x14051f850]
lea rdx, [0x14043e5e0]
nop
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x1c
jg 0x1401b9c95
inc rax
jmp 0x1401b9b60
test edx, edx
je 0x1401b9c39
movzx eax, byte [0x14051fb11]
cmp al, 0xc6
je 0x1401b9be6
mov cl, 0x71
nop word cs:[rax + rax]
mov al, 0xff
lock cmpxchg byte [0x14051fb11], cl
je 0x1401b9ca5
movzx edx, byte [0x140520b18]
mov r8d, edx
not r8b
mov r9d, edx
and r9b, 0x93
mov r10d, r8d
and r10b, 0x6c
or r10b, r9b
xor dl, 0x6c
and r8b, 0x13
or r8b, dl
not r8b
add r8b, r8b
add r8b, r10b
cmp al, r8b
jne 0x1401b9ba0
lea rax, [0x14051fb00]
ret
movzx eax, byte [0x14051f8d1]
cmp al, 0x1d
je 0x1401b9c31
mov cl, 0xcf
nop dword [rax + rax]
mov al, 0xbf
lock cmpxchg byte [0x14051f8d1], cl
je 0x1401b9cf8
movzx edx, byte [0x140520b18]
mov r8d, edx
xor r8b, 0xc3
not dl
and dl, 0x3c
or dl, r8b
not dl
add dl, dl
add dl, r8b
cmp al, dl
jne 0x1401b9c00
lea rax, [0x14051f8c0]
ret
movzx eax, byte [0x14051f82c]
movzx ecx, byte [0x140520b18]
mov edx, ecx
xor dl, 0x72
and cl, 0x72
add cl, cl
add cl, dl
cmp al, cl
je 0x1401b9c8d
mov cl, 0x86
nop dword [rax]
mov al, 7
lock cmpxchg byte [0x14051f82c], cl
je 0x1401b9d5a
movzx edx, byte [0x140520b18]
mov r8d, edx
xor r8b, 0x68
and dl, 0x68
add dl, dl
add dl, r8b
add dl, 0xa
cmp al, dl
jne 0x1401b9c60
lea rax, [0x14051f820]
ret
mov al, 0xdc
xchg byte [0x14051f86d], al
lea rax, [0x14051f850]
ret
xor eax, eax
lea rcx, [0x14051fb00]
lea rdx, [0x14043e880]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rcx]
movzx r9d, byte [rax + rdx]
mov r10d, r8d
xor r10b, r9b
not r8b
not r9b
and r9b, r8b
or r9b, r10b
not r9b
add r9b, r9b
add r9b, r10b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
cmp r8d, 0x10
jg 0x1401b9d4a
inc rax
jmp 0x1401b9cc0
xor r8d, r8d
lea rax, [0x14051f8c0]
lea rcx, [0x14043e650]
mov edx, 0x284d8a8d
nop
movsxd r8, r8d
movzx r9d, byte [r8 + rcx]
add byte [r8 + rax], r9b
mov r9d, r8d
xor r9d, 1
and r8d, 1
lea r8d, [r9 + r8*2]
mov r9d, dword [0x140520b08]
add r9d, edx
cmp r8d, r9d
jl 0x1401b9d10
mov al, 0x1d
xchg byte [0x14051f8d1], al
lea rax, [0x14051f8c0]
ret
mov al, 0xc6
xchg byte [0x14051fb11], al
lea rax, [0x14051fb00]
ret
xor eax, eax
lea rcx, [0x14051f820]
lea rdx, [0x14043e5b0]
mov r8d, 0x284d8a88
movzx r9d, byte [rax + rdx]
add byte [rax + rcx], r9b
lea r9d, [rax + 1]
mov r10d, dword [0x140520b08]
add r10d, r8d
cmp r9d, r10d
jge 0x1401b9d91
inc rax
jmp 0x1401b9d70
movzx eax, byte [0x140520b18]
mov ecx, eax
xor cl, 0x72
and al, 0x72
add al, al
add al, cl
xchg byte [0x14051f82c], al
lea rax, [0x14051f820]
ret
Function at 0x1401e4370
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov eax, dword [rsp + 0x28]
mov r8d, eax
xor r8d, 0x9ba85e5
add r8d, dword [0x140523d6c]
cmp ecx, r8d
jne 0x1401e43bc
test edx, edx
je 0x1401e43fc
movzx eax, byte [0x140522fc5]
cmp al, 0xab
je 0x1401e43b4
mov cl, 0xa2
nop dword [rax + rax]
mov al, 0xd6
lock cmpxchg byte [0x140522fc5], cl
je 0x1401e445c
cmp al, 0xab
jne 0x1401e43a0
lea rax, [0x140522fb0]
ret
test edx, edx
je 0x1401e442c
movzx ecx, byte [0x1405230c4]
xor al, 0xd3
add al, byte [0x140523d68]
cmp cl, al
je 0x1401e43f4
mov cl, 0x45
nop word cs:[rax + rax]
mov al, 0xe7
lock cmpxchg byte [0x1405230c4], cl
je 0x1401e4488
cmp al, 0xb4
jne 0x1401e43e0
lea rax, [0x1405230b0]
ret
movzx eax, byte [0x14052306f]
cmp al, 0xfc
je 0x1401e4424
mov cl, 0xdf
nop dword [rax]
mov al, 5
lock cmpxchg byte [0x14052306f], cl
je 0x1401e44d8
cmp al, 0xfc
jne 0x1401e4410
lea rax, [0x140523060]
ret
movzx eax, byte [0x140522fe2]
cmp al, 0x5f
je 0x1401e4454
mov cl, 0x65
nop dword [rax]
mov al, 0x29
lock cmpxchg byte [0x140522fe2], cl
je 0x1401e4508
cmp al, 0x5f
jne 0x1401e4440
lea rax, [0x140522fd0]
ret
xor eax, eax
lea rcx, [0x140522fb0]
lea rdx, [0x14043f0e0]
nop dword [rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x14
jg 0x1401e44b8
inc rax
jmp 0x1401e4470
xor eax, eax
lea rcx, [0x1405230b0]
lea rdx, [0x14043f1d0]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x13
jg 0x1401e44c8
inc rax
jmp 0x1401e44a0
mov al, 0xab
xchg byte [0x140522fc5], al
lea rax, [0x140522fb0]
ret
mov al, 0xb4
xchg byte [0x1405230c4], al
lea rax, [0x1405230b0]
ret
xor eax, eax
lea rcx, [0x140523060]
lea rdx, [0x14043f180]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xe
jg 0x1401e4538
inc rax
jmp 0x1401e44f0
xor eax, eax
lea rcx, [0x140522fd0]
lea rdx, [0x14043f100]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x11
jg 0x1401e4548
inc rax
jmp 0x1401e4520
mov al, 0xfc
xchg byte [0x14052306f], al
lea rax, [0x140523060]
ret
mov al, 0x5f
xchg byte [0x140522fe2], al
lea rax, [0x140522fd0]
ret
Function at 0x1401ece90
Capabilities:
Encode data using xor

Disassembly:
mov r8d, dword [rsp + 0x28]
mov eax, r8d
xor eax, 0x68b6d674
mov r9d, dword [0x1405258a8]
add r9d, eax
cmp ecx, r9d
jne 0x1401eceec
test edx, edx
je 0x1401ecf6c
movzx eax, byte [0x1405254d9]
cmp al, 0x61
je 0x1401ecee4
mov cl, 0xac
nop word cs:[rax + rax]
mov al, 0xf8
lock cmpxchg byte [0x1405254d9], cl
je 0x1401ecf9c
cmp al, 0x61
jne 0x1401eced0
lea rax, [0x1405254b0]
ret
add eax, dword [0x1405258a8]
cmp edx, eax
jne 0x1401ecf38
movzx eax, byte [0x1405254a7]
cmp al, 0xe9
je 0x1401ecf30
mov cl, 0xe
nop word cs:[rax + rax]
mov al, 0x18
lock cmpxchg byte [0x1405254a7], cl
je 0x1401ecfe9
mov edx, r8d
xor dl, 0xb1
add dl, byte [0x1405258ac]
cmp al, dl
jne 0x1401ecf10
lea rax, [0x140525480]
ret
movzx eax, byte [0x140525515]
cmp al, 0x61
je 0x1401ecf64
mov cl, 0x40
nop word cs:[rax + rax]
mov al, 0x7d
lock cmpxchg byte [0x140525515], cl
je 0x1401ed028
cmp al, 0x61
jne 0x1401ecf50
lea rax, [0x140525500]
ret
movzx eax, byte [0x14052547d]
cmp al, 0x97
je 0x1401ecf94
mov cl, 0x10
nop dword [rax]
mov al, 0xaa
lock cmpxchg byte [0x14052547d], cl
je 0x1401ed088
cmp al, 0x97
jne 0x1401ecf80
lea rax, [0x140525470]
ret
xor edx, edx
lea rax, [0x1405254b0]
lea rcx, [0x14043f750]
nop dword [rax]
movsxd rdx, edx
movzx r9d, byte [rdx + rcx]
add byte [rdx + rax], r9b
mov r9d, edx
xor r9d, 1
and edx, 1
lea edx, [r9 + rdx*2]
cmp edx, 0x29
jl 0x1401ecfb0
xor r8b, 0x39
add r8b, byte [0x1405258ac]
xchg byte [0x1405254d9], r8b
lea rax, [0x1405254b0]
ret
xor eax, eax
lea rcx, [0x140525480]
lea rdx, [0x14043f720]
nop dword [rax]
movzx r8d, byte [rax + rdx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rax + rcx]
xor r9b, r8b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
cmp r8d, 0x26
jg 0x1401ed068
inc rax
jmp 0x1401ed000
xor eax, eax
lea rcx, [0x140525500]
lea rdx, [0x14043f790]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rax + rcx]
xor r9b, r8b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
cmp r8d, 0x14
jg 0x1401ed078
inc rax
jmp 0x1401ed040
mov al, 0xe9
xchg byte [0x1405254a7], al
lea rax, [0x140525480]
ret
mov al, 0x61
xchg byte [0x140525515], al
lea rax, [0x140525500]
ret
xor eax, eax
lea rcx, [0x140525470]
lea rdx, [0x14043f710]
mov r9d, r8d
xor r9d, 0x68b6d673
nop word cs:[rax + rax]
cdqe
movzx r10d, byte [rax + rdx]
mov r11d, r10d
xor r11b, r10b
not r11b
and r11b, byte [rax + rcx]
xor r11b, r10b
mov byte [rax + rcx], r11b
mov r10d, dword [0x1405258a8]
add r10d, r9d
add eax, r10d
cmp eax, 0xd
jl 0x1401ed0b0
xor r8b, 0xc3
add r8b, byte [0x1405258ac]
xchg byte [0x14052547d], r8b
lea rax, [0x140525470]
ret
Function at 0x1401f45a0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
mov r8d, dword [rsp + 0x40]
test ecx, ecx
je 0x1401f45e9
test edx, edx
je 0x1401f46c3
movzx eax, byte [0x140526169]
cmp al, 0xfb
je 0x1401f4779
mov cl, 0xbe
nop word cs:[rax + rax]
mov al, 4
lock cmpxchg byte [0x140526169], cl
je 0x1401f4729
cmp al, 0xfb
jne 0x1401f45d0
jmp 0x1401f4779
test edx, edx
je 0x1401f46f9
movzx eax, byte [0x140526113]
nop dword [rax + rax]
cmp al, 0xaa
je 0x1401f46b7
movzx ecx, byte [0x1405265e0]
mov edx, r8d
not dl
mov eax, r8d
xor al, 0x8c
mov r9d, edx
and r9b, 0x73
or al, r9b
not al
or al, r9b
add al, cl
and dl, 0x66
mov r9d, r8d
and r9b, 0x99
or r9b, dl
add r9b, cl
lock cmpxchg byte [0x140526113], r9b
jne 0x1401f4600
xor eax, eax
lea rcx, [0x140526110]
lea rdx, [0x14043fbf0]
mov r9d, r8d
xor r9d, 0xffafb932
mov r10d, r8d
xor r10d, 0xffafb92c
nop dword [rax]
cdqe
movzx r11d, byte [rax + rdx]
add byte [rax + rcx], r11b
mov r11d, dword [0x1405265d0]
add eax, r9d
add eax, r11d
mov esi, r10d
xor esi, r11d
and r11d, r10d
add r11d, r11d
mov edi, esi
xor edi, r11d
and r11d, esi
lea r11d, [rdi + r11*2]
cmp eax, r11d
jl 0x1401f4670
xor r8b, 0x3b
add r8b, byte [0x1405265e0]
xchg byte [0x140526113], r8b
lea rax, [0x140526110]
jmp 0x1401f4847
movzx eax, byte [0x140526083]
mov ecx, r8d
xor cl, 0x8f
add cl, byte [0x1405265e0]
cmp al, cl
je 0x1401f47f9
mov cl, 0x83
mov al, 0xa6
lock cmpxchg byte [0x140526083], cl
je 0x1401f4785
cmp al, 0x56
jne 0x1401f46e0
jmp 0x1401f47f9
movzx eax, byte [0x140526105]
cmp al, 7
je 0x1401f4840
mov cl, 8
nop word [rax + rax]
mov al, 0xbe
lock cmpxchg byte [0x140526105], cl
je 0x1401f4802
cmp al, 7
jne 0x1401f4710
jmp 0x1401f4840
xor eax, eax
lea rcx, [0x140526160]
lea rdx, [0x14043fc40]
xor r8d, 0xffafb932
cdqe
movzx r9d, byte [rax + rcx]
movzx r10d, byte [rax + rdx]
mov r11d, r9d
xor r11b, r10b
and r9b, r10b
add r9b, r9b
add r9b, r11b
mov byte [rax + rcx], r9b
mov r9d, dword [0x1405265d0]
add r9d, r8d
add eax, r9d
cmp eax, 9
jl 0x1401f4740
mov al, 0xfb
xchg byte [0x140526169], al
lea rax, [0x140526160]
jmp 0x1401f4847
xor eax, eax
lea rcx, [0x140526060]
lea rdx, [0x14043fb50]
mov r9d, r8d
xor r9d, 0xffafb932
xor r8d, 0xffafb90c
nop word cs:[rax + rax]
cdqe
movzx r10d, byte [rax + rcx]
movzx r11d, byte [rax + rdx]
mov ebx, r10d
not bl
not r11b
mov esi, ebx
xor sil, r11b
and sil, bl
xor r11b, r10b
not r11b
and r11b, r10b
or r11b, sil
mov byte [rax + rcx], r11b
mov r10d, dword [0x1405265d0]
add eax, r9d
add eax, r10d
add r10d, r8d
cmp eax, r10d
jl 0x1401f47b0
mov al, 0x56
xchg byte [0x140526083], al
lea rax, [0x140526060]
jmp 0x1401f4847
xor eax, eax
lea rcx, [0x1405260f0]
lea rdx, [0x14043fbd0]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x14
jg 0x1401f4838
inc rax
jmp 0x1401f4820
mov al, 7
xchg byte [0x140526105], al
lea rax, [0x1405260f0]
pop rbx
pop rdi
pop rsi
ret
Function at 0x140204230
Capabilities:
Encode data using xor

Disassembly:
push rsi
mov r8d, dword [rsp + 0x30]
test ecx, ecx
je 0x1402042ac
test edx, edx
je 0x140204309
movzx eax, byte [0x1405283a5]
nop dword [rax]
cmp al, 0xde
je 0x140204371
movzx ecx, byte [0x1405286c8]
mov eax, r8d
xor al, 0x6f
add al, cl
mov edx, r8d
xor dl, 0x2b
add dl, cl
lock cmpxchg byte [0x1405283a5], dl
jne 0x140204250
xor eax, eax
lea rcx, [0x140528390]
lea rdx, [0x140440910]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x14
jg 0x140204369
inc rax
jmp 0x140204290
mov eax, dword [0x1405286b8]
mov ecx, r8d
xor ecx, 0x8ab3fd
xor ecx, eax
mov r9d, r8d
xor r9d, 0xff754c02
not eax
and eax, r9d
or eax, ecx
not eax
lea eax, [rcx + rax*2]
cmp edx, eax
jne 0x140204335
movzx eax, byte [0x140528403]
cmp al, 0x2e
je 0x14020446a
mov cl, 0x88
nop dword [rax + rax]
mov al, 0x28
lock cmpxchg byte [0x140528403], cl
je 0x1402043fe
cmp al, 0x2e
jne 0x1402042f0
jmp 0x14020446a
movzx eax, byte [0x140528380]
cmp al, 9
je 0x1402043f5
mov cl, 0xd6
nop word [rax + rax]
mov al, 0x7f
lock cmpxchg byte [0x140528380], cl
je 0x14020437a
cmp al, 9
jne 0x140204320
jmp 0x1402043f5
movzx eax, byte [0x14052841f]
cmp al, 0x65
je 0x14020447b
mov cl, 0x6d
nop word cs:[rax + rax]
mov al, 0x5d
lock cmpxchg byte [0x14052841f], cl
je 0x140204428
cmp al, 0x65
jne 0x140204350
jmp 0x14020447b
mov al, 0xde
xchg byte [0x1405283a5], al
lea rax, [0x140528390]
pop rsi
ret
xor eax, eax
lea rcx, [0x140528370]
lea rdx, [0x140440900]
mov r9d, r8d
xor r9d, 0x8ab3c2
mov r10d, r8d
not r10d
xor r8d, 0xff754c32
and r10d, 0x8ab3cd
or r8d, r10d
not r8d
or r8d, r10d
nop word cs:[rax + rax]
cdqe
movzx r10d, byte [rax + rdx]
xor byte [rax + rcx], r10b
mov r10d, dword [0x1405286b8]
mov r11d, r9d
xor r11d, r10d
mov esi, r9d
and esi, r10d
lea r11d, [r11 + rsi*2]
add eax, r11d
add r10d, r8d
cmp eax, r10d
jl 0x1402043c0
mov al, 9
xchg byte [0x140528380], al
lea rax, [0x140528370]
pop rsi
ret
xor eax, eax
lea rcx, [0x1405283e0]
lea rdx, [0x140440960]
nop
movzx r9d, byte [rax + rdx]
add byte [rax + rcx], r9b
lea r9d, [rax + 1]
cmp r9d, 0x22
jg 0x140204458
inc rax
jmp 0x140204410
xor eax, eax
lea rcx, [0x140528410]
lea rdx, [0x140440990]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xe
jg 0x140204473
inc rax
jmp 0x140204440
xor r8b, 0xac
add r8b, byte [0x1405286c8]
xchg byte [0x140528403], r8b
lea rax, [0x1405283e0]
pop rsi
ret
mov al, 0x65
xchg byte [0x14052841f], al
lea rax, [0x140528410]
pop rsi
ret
Function at 0x14021e290
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x14021e2cc
mov eax, 0x1a1baed4
add eax, dword [0x14052b388]
cmp edx, eax
jne 0x14021e30c
movzx eax, byte [0x14052958d]
cmp al, 0xb8
je 0x14021e2c4
mov cl, 0x3f
mov al, 0x1e
lock cmpxchg byte [0x14052958d], cl
je 0x14021e3ba
cmp al, 0xb8
jne 0x14021e2b0
lea rax, [0x140529580]
ret
test edx, edx
je 0x14021e35a
movzx eax, byte [0x140529330]
movzx ecx, byte [0x14052b38c]
add cl, 0xcc
cmp al, cl
je 0x14021e304
mov cl, 0x6d
nop dword [rax + rax]
mov al, 0x9d
lock cmpxchg byte [0x140529330], cl
je 0x14021e484
cmp al, 0xf2
jne 0x14021e2f0
lea rax, [0x140529320]
ret
movzx eax, byte [0x140528ec5]
cmp al, 0x50
je 0x14021e352
mov cl, 0x48
nop dword [rax]
mov al, 0x1e
lock cmpxchg byte [0x140528ec5], cl
je 0x14021e40b
movzx edx, byte [0x14052b38c]
xor r8d, r8d
sub r8b, dl
mov edx, r8d
xor dl, 0xd6
and r8b, 0x56
add r8b, r8b
add r8b, dl
add al, r8b
jne 0x14021e320
lea rax, [0x140528eb0]
ret
movzx eax, byte [0x140528f75]
movzx ecx, byte [0x14052b38c]
add cl, 0x9b
cmp al, cl
je 0x14021e3b2
nop
movzx ecx, byte [0x14052b38c]
mov edx, ecx
xor dl, 0x81
mov eax, ecx
and al, 1
add al, al
add al, dl
add al, 0xa
add cl, 0x25
lock cmpxchg byte [0x140528f75], cl
je 0x14021e4d8
movzx ecx, byte [0x14052b38c]
xor edx, edx
sub dl, cl
mov ecx, edx
xor cl, 0x65
and dl, 0x65
add dl, dl
add dl, cl
add al, dl
jne 0x14021e370
lea rax, [0x140528f60]
ret
xor eax, eax
lea rcx, [0x140529580]
lea rdx, [0x140441840]
mov r8d, 0x1a1baee1
movzx r9d, byte [rax + rcx]
movzx r10d, byte [rax + rdx]
not r9b
mov r11d, r9d
and r11b, r10b
not r10b
xor r9b, r10b
and r9b, r10b
or r9b, r11b
mov byte [rax + rcx], r9b
lea r9d, [rax + 1]
mov r10d, dword [0x14052b388]
add r10d, r8d
cmp r9d, r10d
jge 0x14021e46d
inc rax
jmp 0x14021e3d0
xor edx, edx
lea rax, [0x140528eb0]
lea rcx, [0x1404411b0]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rax]
movzx r9d, byte [rdx + rcx]
add r8b, 0x25
mov r10d, r8d
xor r10b, r9b
and r8b, r9b
add r8b, r8b
add r8b, r10b
add r8b, 0xdb
mov byte [rdx + rax], r8b
mov r8d, dword [0x14052b388]
add edx, r8d
add edx, 0x1a1baed5
cmp edx, 0x15
jl 0x14021e420
mov al, 0x50
xchg byte [0x140528ec5], al
lea rax, [0x140528eb0]
ret
movzx eax, byte [0x14052b38c]
add al, 0x92
xchg byte [0x14052958d], al
lea rax, [0x140529580]
ret
xor eax, eax
lea rcx, [0x140529320]
lea rdx, [0x140441600]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rdx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rax + rcx]
xor r9b, r8b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
cmp r8d, 0xf
jg 0x14021e4c8
inc rax
jmp 0x14021e4a0
mov al, 0xf2
xchg byte [0x140529330], al
lea rax, [0x140529320]
ret
xor edx, edx
lea rax, [0x140528f60]
lea rcx, [0x140441250]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rax]
movzx r9d, byte [rdx + rcx]
mov r10d, r8d
not r10b
mov r11d, r9d
xor r11b, r10b
and r10b, r9b
not r11b
and r11b, r8b
or r11b, r10b
mov byte [rdx + rax], r11b
mov r8d, edx
xor r8d, 0x7ffffffe
and r8d, edx
xor edx, 1
lea edx, [rdx + r8*2]
cmp edx, 0x15
jl 0x14021e4f0
movzx eax, byte [0x14052b38c]
add al, 0x9b
xchg byte [0x140528f75], al
lea rax, [0x140528f60]
ret
Function at 0x14021f5f0
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x1a1baed4
add eax, dword [0x14052b388]
cmp ecx, eax
jne 0x14021f62c
test edx, edx
je 0x14021f65c
movzx eax, byte [0x1405294c4]
cmp al, 0xe6
je 0x14021f624
mov cl, 0x3c
mov al, 0xed
lock cmpxchg byte [0x1405294c4], cl
je 0x14021f6e7
cmp al, 0xe6
jne 0x14021f610
lea rax, [0x1405294b0]
ret
test edx, edx
je 0x14021f69c
movzx eax, byte [0x140528f19]
cmp al, 0xba
je 0x14021f654
mov cl, 0xa8
nop dword [rax]
mov al, 0x3e
lock cmpxchg byte [0x140528f19], cl
je 0x14021f73f
cmp al, 0xba
jne 0x14021f640
lea rax, [0x140528f10]
ret
movzx eax, byte [0x1405295fd]
movzx ecx, byte [0x14052b38c]
add cl, 0x48
cmp al, cl
je 0x14021f694
mov cl, 0xb7
nop word cs:[rax + rax]
mov al, 0x5a
lock cmpxchg byte [0x1405295fd], cl
je 0x14021f77f
cmp al, 0x6e
jne 0x14021f680
lea rax, [0x1405295f0]
ret
movzx eax, byte [0x140529574]
movzx ecx, byte [0x14052b38c]
add cl, 0xcd
cmp al, cl
je 0x14021f6df
nop word cs:[rax + rax]
movzx ecx, byte [0x14052b38c]
lea eax, [rcx + 0x77]
add cl, 0xcc
lock cmpxchg byte [0x140529574], cl
je 0x14021f7a8
cmp al, 0xf3
jne 0x14021f6c0
lea rax, [0x140529560]
ret
xor eax, eax
lea rcx, [0x1405294b0]
lea rdx, [0x140441780]
nop word [rax + rax]
cdqe
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
mov r8d, dword [0x14052b388]
mov r9d, r8d
xor r9d, 0x1a1baed5
and r8d, 0x1a1baed5
lea r8d, [r9 + r8*2]
add eax, r8d
cmp eax, 0x14
jl 0x14021f700
mov al, 0xe6
xchg byte [0x1405294c4], al
lea rax, [0x1405294b0]
ret
xor eax, eax
lea rcx, [0x140528f10]
lea rdx, [0x140441210]
nop
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 8
jg 0x14021f768
inc rax
jmp 0x14021f750
movzx eax, byte [0x14052b38c]
add al, 0x94
xchg byte [0x140528f19], al
lea rax, [0x140528f10]
ret
xor eax, eax
lea rcx, [0x1405295f0]
lea rdx, [0x1404418b0]
nop
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x14021f7d8
inc rax
jmp 0x14021f790
xor eax, eax
lea rcx, [0x140529560]
lea rdx, [0x140441820]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x13
jg 0x14021f7e8
inc rax
jmp 0x14021f7c0
mov al, 0x6e
xchg byte [0x1405295fd], al
lea rax, [0x1405295f0]
ret
mov al, 0xf3
xchg byte [0x140529574], al
lea rax, [0x140529560]
ret
Function at 0x140220cd0
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x1a1baed4
add eax, dword [0x14052b388]
cmp ecx, eax
jne 0x140220d22
test edx, edx
je 0x140220d5c
movzx eax, byte [0x1405298ad]
cmp al, 0x8d
je 0x140220d1a
mov cl, 0xfe
mov al, 0xe9
lock cmpxchg byte [0x1405298ad], cl
je 0x140220e29
movzx edx, byte [0x14052b38c]
mov r8d, edx
xor r8b, 0x67
and dl, 0x67
add dl, dl
add dl, r8b
cmp al, dl
jne 0x140220cf0
lea rax, [0x1405298a0]
ret
test edx, edx
je 0x140220d8c
movzx eax, byte [0x1405298fd]
cmp al, 0xe
je 0x140220d54
mov cl, 0xaf
nop word cs:[rax + rax]
mov al, 0x10
lock cmpxchg byte [0x1405298fd], cl
je 0x140220e68
cmp al, 0xe
jne 0x140220d40
lea rax, [0x1405298f0]
ret
movzx eax, byte [0x14052969d]
cmp al, 0xdd
je 0x140220d84
mov cl, 3
nop dword [rax]
mov al, 0x5e
lock cmpxchg byte [0x14052969d], cl
je 0x140220ec6
cmp al, 0xdd
jne 0x140220d70
lea rax, [0x140529690]
ret
movzx eax, byte [0x14052963c]
nop word cs:[rax + rax]
cmp al, 0x89
je 0x140220e21
movzx ecx, byte [0x14052b38c]
mov edx, ecx
xor dl, 0xbd
mov eax, ecx
and al, 0x3d
add al, al
add al, dl
add cl, 0xb4
lock cmpxchg byte [0x14052963c], cl
jne 0x140220da0
xor r8d, r8d
lea rax, [0x140529630]
lea rcx, [0x1404418f0]
mov edx, 0x1a1baed5
nop dword [rax + rax]
movsxd r8, r8d
movzx r9d, byte [r8 + rcx]
mov r10d, r9d
xor r10b, r9b
not r10b
and r10b, byte [r8 + rax]
xor r10b, r9b
mov byte [r8 + rax], r10b
mov r9d, dword [0x14052b388]
add r9d, edx
mov r10d, r8d
xor r10d, r9d
and r9d, r8d
lea r8d, [r10 + r9*2]
cmp r8d, 0xc
jl 0x140220de0
mov al, 0x89
xchg byte [0x14052963c], al
lea rax, [0x140529630]
ret
xor eax, eax
lea rcx, [0x1405298a0]
lea rdx, [0x140441b60]
nop dword [rax]
movzx r8d, byte [rax + rdx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rax + rcx]
xor r9b, r8b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x140220eaf
inc rax
jmp 0x140220e40
xor edx, edx
lea rax, [0x1405298f0]
lea rcx, [0x140441bb0]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
xor byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 0xd
jl 0x140220e80
mov al, 0xe
xchg byte [0x1405298fd], al
lea rax, [0x1405298f0]
ret
movzx eax, byte [0x14052b38c]
add al, 0x67
xchg byte [0x1405298ad], al
lea rax, [0x1405298a0]
ret
xor eax, eax
lea rcx, [0x140529690]
lea rdx, [0x140441950]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rcx]
movzx r9d, byte [rax + rdx]
mov r10d, r9d
xor r10b, r9b
not r10b
and r10b, r8b
xor r10b, r9b
and r8b, r9b
add r8b, r8b
add r8b, r10b
mov byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x140220f15
inc rax
jmp 0x140220ee0
movzx eax, byte [0x14052b38c]
add al, 0xb7
xchg byte [0x14052969d], al
lea rax, [0x140529690]
ret
Function at 0x140220f30
Capabilities:
Authenticate hmac

Disassembly:
mov r8d, dword [rsp + 0x28]
test ecx, ecx
je 0x140220fac
test edx, edx
je 0x140220fdc
movzx eax, byte [0x1405292c8]
nop dword [rax + rax]
cmp al, 0x5c
je 0x140221054
movzx ecx, byte [0x14052b38c]
mov eax, r8d
xor al, 0xa5
add al, cl
mov edx, r8d
xor dl, 0x1e
add dl, cl
lock cmpxchg byte [0x1405292c8], dl
jne 0x140220f50
xor eax, eax
lea rcx, [0x1405292b0]
lea rdx, [0x140441590]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x17
jg 0x14022104c
inc rax
jmp 0x140220f90
test edx, edx
je 0x14022101c
movzx eax, byte [0x140529611]
cmp al, 0xb5
je 0x140220fd4
mov cl, 0x49
nop dword [rax]
mov al, 0x7c
lock cmpxchg byte [0x140529611], cl
je 0x14022105c
cmp al, 0xb5
jne 0x140220fc0
lea rax, [0x140529600]
ret
mov eax, r8d
xor al, 0xf5
xor ecx, ecx
sub cl, byte [0x14052b38c]
neg al
mov edx, eax
xor dl, cl
and cl, al
add cl, cl
add cl, dl
add cl, byte [0x14052978c]
je 0x140221014
mov cl, 0x99
nop
mov al, 0x33
lock cmpxchg byte [0x14052978c], cl
je 0x1402210a1
cmp al, 0xa
jne 0x140221000
lea rax, [0x140529780]
ret
movzx eax, byte [0x1405299a8]
cmp al, 0x36
je 0x140221044
mov cl, 0xd8
nop dword [rax]
mov al, 0xb
lock cmpxchg byte [0x1405299a8], cl
je 0x140221115
cmp al, 0x36
jne 0x140221030
lea rax, [0x140529990]
ret
mov al, 0x5c
xchg byte [0x1405292c8], al
lea rax, [0x1405292b0]
ret
xor eax, eax
lea rcx, [0x140529600]
lea rdx, [0x1404418c0]
xor r8d, 0xcf975bf4
nop word cs:[rax + rax]
movzx r9d, byte [rax + rdx]
add byte [rax + rcx], r9b
lea r9d, [rax + 1]
mov r10d, dword [0x14052b388]
add r10d, r8d
cmp r9d, r10d
jge 0x140221105
inc rax
jmp 0x140221080
xor eax, eax
lea rcx, [0x140529780]
lea rdx, [0x140441a40]
mov r9d, r8d
xor r9d, 0xcf975bc4
nop dword [rax + rax]
cdqe
movzx r10d, byte [rax + rdx]
add byte [rax + rcx], r10b
mov r10d, dword [0x14052b388]
add r10d, r9d
add eax, r10d
cmp eax, 0xc
jl 0x1402210c0
movzx eax, byte [0x14052b38c]
xor r8b, 0xf5
mov ecx, r8d
xor cl, al
and r8b, al
add r8b, r8b
add r8b, cl
xchg byte [0x14052978c], r8b
lea rax, [0x140529780]
ret
mov al, 0xb5
xchg byte [0x140529611], al
lea rax, [0x140529600]
ret
xor eax, eax
lea rcx, [0x140529990]
lea rdx, [0x140441c20]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x17
jg 0x140221148
inc rax
jmp 0x140221130
mov al, 0x36
xchg byte [0x1405299a8], al
lea rax, [0x140529990]
ret