joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14045e9b0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rsi
push rdi
sub rsp, 0x38
mov rsi, rcx
test rcx, rcx
jne 0x14045e9ee
mov dword [rsp + 0x28], 0x55227b80
mov dword [rsp + 0x20], 0x641cd547
xor edi, edi
mov ecx, 1
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call fcn.14045ec00
mov rsi, rax
test rax, rax
je 0x14045eabc
mov dword [rsp + 0x28], 0x55227b80
mov dword [rsp + 0x20], 0x641cd547
xor edi, edi
xor ecx, ecx
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call fcn.14045ec00
test rax, rax
je 0x14045eabc
mov rcx, qword [rax + 0x18]
test rcx, rcx
je 0x14045eaba
mov rax, qword [rcx + 0x10]
xor edi, edi
test rax, rax
je 0x14045eabc
mov rcx, qword [rcx + 0x18]
test rcx, rcx
je 0x14045eabc
xor edx, edx
mov r8d, 1
xor edi, edi
jmp 0x14045ea60
mov r9d, edx
not r9b
or r9b, 0xfe
cmp r9b, 0xff
jne 0x14045eabc
movzx r9d, byte [0x140677194]
lea r10d, [r9 + 0x69]
mov r11d, r10d
xor r11b, 0xed
and r10b, 0x6d
add r10b, r10b
add r10b, r11b
cmp rax, rcx
movzx r10d, r10b
movzx edx, dl
cmove edx, r10d
cmp qword [rax + 0x30], rsi
cmove edx, r10d
cmove rdi, rax
lea r10d, [r9 + 0x56]
and r10b, dl
add r9b, 0x55
cmp r10b, r9b
jne 0x14045ea50
mov r9, qword [rax]
test r9, r9
cmovne rax, r9
movzx edx, dl
cmove edx, r8d
jmp 0x14045ea50
xor edi, edi
mov rax, rdi
add rsp, 0x38
pop rdi
pop rsi
ret
Function at 0x14046db10
Capabilities:
Encode data using xor

Disassembly:
mov r8d, dword [rsp + 0x28]
mov eax, r8d
xor eax, 0xea6b72f
add eax, dword [0x14067a380]
cmp ecx, eax
jne 0x14046db5c
test edx, edx
je 0x14046dbcc
movzx eax, byte [0x14067a1d3]
cmp al, 0x51
je 0x14046db54
mov cl, 0x41
nop dword [rax]
mov al, 0x28
lock cmpxchg byte [0x14067a1d3], cl
je 0x14046dc4c
cmp al, 0x51
jne 0x14046db40
lea rax, [0x14067a1b0]
ret
test edx, edx
je 0x14046dbfc
movzx eax, byte [0x14067a26d]
nop dword [rax + rax]
cmp al, 0x3f
je 0x14046dcb5
movzx ecx, byte [0x14067a384]
mov eax, r8d
xor al, 0x36
mov edx, eax
xor dl, cl
and al, cl
add al, al
add al, dl
mov edx, r8d
xor dl, 0xdb
add dl, cl
lock cmpxchg byte [0x14067a26d], dl
jne 0x14046db70
xor eax, eax
lea rcx, [0x14067a260]
lea rdx, [0x14055bc00]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x14046dcad
inc rax
jmp 0x14046dbb0
movzx eax, byte [0x14067a25b]
cmp al, 0xbb
je 0x14046dbf4
mov cl, 0xb8
nop dword [rax]
mov al, 0xaa
lock cmpxchg byte [0x14067a25b], cl
je 0x14046dcbd
cmp al, 0xbb
jne 0x14046dbe0
lea rax, [0x14067a250]
ret
movzx eax, byte [0x14067a1a3]
movzx ecx, byte [0x14067a384]
mov edx, r8d
xor dl, 0x45
mov r9d, edx
xor r9b, cl
and dl, cl
add dl, dl
add dl, r9b
cmp al, dl
je 0x14046dc44
mov cl, 0x99
nop word cs:[rax + rax]
mov al, 0x2a
lock cmpxchg byte [0x14067a1a3], cl
je 0x14046dce8
cmp al, 0x3f
jne 0x14046dc30
lea rax, [0x14067a1a0]
ret
xor eax, eax
lea rcx, [0x14067a1b0]
lea rdx, [0x14055bb50]
xor r8d, 0xea6b72e
nop word cs:[rax + rax]
cdqe
movzx r9d, byte [rax + rdx]
mov r10d, r9d
xor r10b, r9b
not r10b
and r10b, byte [rax + rcx]
xor r10b, r9b
mov byte [rax + rcx], r10b
mov r9d, dword [0x14067a380]
add r9d, r8d
add eax, r9d
cmp eax, 0x23
jl 0x14046dc70
mov al, 0x51
xchg byte [0x14067a1d3], al
lea rax, [0x14067a1b0]
ret
mov al, 0x3f
xchg byte [0x14067a26d], al
lea rax, [0x14067a260]
ret
xor eax, eax
lea rcx, [0x14067a250]
lea rdx, [0x14055bbf0]
nop dword [rax]
movzx r9d, byte [rax + rdx]
add byte [rax + rcx], r9b
lea r9d, [rax + 1]
cmp r9d, 0xa
jg 0x14046dd39
inc rax
jmp 0x14046dcd0
xor edx, edx
lea rax, [0x14067a1a0]
lea rcx, [0x14055bb40]
xor r8d, 0xea6b72c
nop
movsxd rdx, edx
movzx r9d, byte [rdx + rcx]
add byte [rdx + rax], r9b
mov r9d, edx
xor r9d, 1
and edx, 1
lea edx, [r9 + rdx*2]
mov r9d, dword [0x14067a380]
add r9d, r8d
cmp edx, r9d
jl 0x14046dd00
mov al, 0x3f
xchg byte [0x14067a1a3], al
lea rax, [0x14067a1a0]
ret
xor r8b, 0xc9
add r8b, byte [0x14067a384]
xchg byte [0x14067a25b], r8b
lea rax, [0x14067a250]
ret
Function at 0x1404717b0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x30
mov esi, r9d
test ecx, ecx
je 0x1404717f9
test edx, edx
je 0x140471849
movzx eax, byte [0x14067a5ed]
cmp al, 0x8f
je 0x140471949
mov cl, 0xf4
nop
mov al, 0x44
lock cmpxchg byte [0x14067a5ed], cl
je 0x1404718ee
cmp al, 0x8f
jne 0x1404717e0
jmp 0x140471949
mov eax, esi
xor eax, 0x16a95cfa
mov ecx, edx
mov edx, eax
call fcn.140471720
mov ecx, esi
test al, 1
je 0x1404718a9
xor ecx, 0x300d23b8
call fcn.140471790
test al, 1
jne 0x140471a4b
mov cl, 0x1f
nop dword [rax + rax]
mov al, 0x1d
lock cmpxchg byte [0x14067a523], cl
je 0x14047199c
cmp al, 0x4f
jne 0x140471830
jmp 0x140471a4b
movzx eax, byte [0x14067a63d]
cmp al, 6
je 0x140471990
mov ebx, dword [rsp + 0x90]
mov bpl, 0x6e
xor ebx, 0x97a0aae7
lea rdi, [rsp + 0x27]
nop dword [rax]
mov al, 0x1f
lock cmpxchg byte [0x14067a63d], bpl
sete dl
mov r9d, dword [0x14067aa2c]
add r9d, ebx
xor r9d, esi
mov ecx, eax
mov r8, rdi
call fcn.1400aabc0
test al, 1
jne 0x140471955
cmp byte [rsp + 0x27], 6
jne 0x140471870
jmp 0x140471990
xor ecx, 0x83b7f92c
call fcn.140471700
test al, 1
jne 0x140471a3a
mov edi, esi
xor edi, 0x55dd944d
lea rbx, [rsp + 0x25]
nop dword [rax]
mov rcx, rbx
mov edx, edi
call fcn.1404711c0
test al, 1
jne 0x1404719e1
cmp byte [rsp + 0x25], 0xe4
jne 0x1404718d0
jmp 0x140471a3a
xor edi, edi
mov ebx, esi
xor ebx, 0x853b0746
lea r14, [rsp + 0x28]
lea r15, [0x14067a5e0]
lea r12, [0x14055bfc0]
nop dword [rax + rax]
mov ecx, edi
mov rdx, r14
mov r8d, ebx
call fcn.1400a9970
mov rax, qword [rsp + 0x28]
movzx eax, byte [rax + r15]
add al, byte [rdi + r12]
mov byte [rdi + r15], al
lea eax, [rdi + 1]
cmp eax, 0xc
jg 0x14047193c
inc rdi
jmp 0x140471910
xor esi, 0x662d86dd
mov ecx, esi
call fcn.1404711b0
lea rax, [0x14067a5e0]
jmp 0x140471a52
xor eax, eax
lea rcx, [0x14067a630]
lea rdx, [0x14055c010]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x140471988
inc rax
jmp 0x140471970
mov al, 6
xchg byte [0x14067a63d], al
lea rax, [0x14067a630]
jmp 0x140471a52
xor edi, edi
lea rbx, [0x14067a500]
lea r14, [0x14055bee0]
xor esi, 0x9ea0a62b
nop word cs:[rax + rax]
lea rdx, [rbx + rdi]
movzx ecx, byte [rdi + rbx]
xor cl, byte [rdi + r14]
mov r8d, esi
call fcn.1400ab640
lea eax, [rdi + 1]
cmp eax, 0x22
jg 0x140471a43
inc rdi
jmp 0x1404719c0
xor eax, eax
lea rbx, [0x14067a530]
xor esi, 0xbb855cfb
lea rdi, [rsp + 0x26]
lea r14, [0x14055bf10]
nop dword [rax]
movsxd r15, eax
lea rcx, [rbx + r15]
mov rdx, rdi
mov r8d, esi
call fcn.14017dc80
movzx eax, byte [rsp + 0x26]
add al, byte [r15 + r14]
mov byte [r15 + rbx], al
mov eax, r15d
xor eax, 1
and r15d, 1
lea eax, [rax + r15*2]
cmp eax, 0xb
jl 0x140471a00
mov al, 0xe4
xchg byte [0x14067a53b], al
lea rax, [0x14067a530]
jmp 0x140471a52
mov al, 0x4f
xchg byte [0x14067a523], al
lea rax, [0x14067a500]
add rsp, 0x30
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
Function at 0x140489e00
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x13bcdcb4
mov r8d, dword [0x14067c4b0]
add r8d, eax
cmp ecx, r8d
jne 0x140489e4c
add eax, dword [0x14067c4b0]
cmp edx, eax
jne 0x140489e8c
movzx eax, byte [0x14067b2b7]
cmp al, 0x91
je 0x140489e44
xor ecx, ecx
nop dword [rax + rax]
mov al, 0x60
lock cmpxchg byte [0x14067b2b7], cl
je 0x140489f58
cmp al, 0x91
jne 0x140489e30
lea rax, [0x14067b2b0]
ret
test edx, edx
je 0x140489eec
movzx eax, byte [0x14067ae8d]
cmp al, 4
je 0x140489e84
mov cl, 0x7a
nop word cs:[rax + rax]
mov al, 0xd2
lock cmpxchg byte [0x14067ae8d], cl
je 0x140489f1c
cmp al, 4
jne 0x140489e70
lea rax, [0x14067ae80]
ret
movzx eax, byte [0x14067b6e3]
nop word cs:[rax + rax]
cmp al, 0x79
je 0x140489fa7
movzx ecx, byte [0x14067c4b4]
lea eax, [rcx - 0x71]
add cl, 0xdf
lock cmpxchg byte [0x14067b6e3], cl
jne 0x140489ea0
xor eax, eax
lea rcx, [0x14067b6e0]
lea rdx, [0x14055cb20]
nop
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 2
jg 0x140489f98
inc rax
jmp 0x140489ed0
movzx eax, byte [0x14067adcc]
cmp al, 0x70
je 0x140489f14
mov cl, 0xee
nop dword [rax]
mov al, 0xa1
lock cmpxchg byte [0x14067adcc], cl
je 0x140489fbf
cmp al, 0x70
jne 0x140489f00
lea rax, [0x14067adc0]
ret
xor eax, eax
lea rcx, [0x14067ae80]
lea rdx, [0x14055c340]
nop dword [rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x140489f48
inc rax
jmp 0x140489f30
mov al, 4
xchg byte [0x14067ae8d], al
lea rax, [0x14067ae80]
ret
xor eax, eax
lea rcx, [0x14067b2b0]
lea rdx, [0x14055c740]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rax + rcx]
xor r9b, r8b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
cmp r8d, 6
jg 0x140489faf
inc rax
jmp 0x140489f70
movzx eax, byte [0x14067c4b4]
add al, 0x92
xchg byte [0x14067b6e3], al
lea rax, [0x14067b6e0]
ret
mov al, 0x91
xchg byte [0x14067b2b7], al
lea rax, [0x14067b2b0]
ret
xor eax, eax
lea rcx, [0x14067adc0]
lea rdx, [0x14055c280]
nop
cdqe
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
mov r8d, dword [0x14067c4b0]
mov r9d, r8d
xor r9d, 0x13bcdcb5
and r8d, 0x13bcdcb5
lea r8d, [r9 + r8*2]
add eax, r8d
cmp eax, 0xc
jl 0x140489fd0
mov al, 0x70
xchg byte [0x14067adcc], al
lea rax, [0x14067adc0]
ret
Function at 0x14048a010
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x13bcdcb4
add eax, dword [0x14067c4b0]
cmp ecx, eax
jne 0x14048a06c
mov eax, 0xb58d4650
add eax, dword [0x14067c4b0]
mov ecx, eax
xor ecx, 0x5e2f9664
and eax, 0x5e2f9664
lea eax, [rcx + rax*2]
cmp edx, eax
jne 0x14048a0ac
movzx eax, byte [0x14067b2a9]
cmp al, 0x87
je 0x14048a064
mov cl, 0x10
nop dword [rax + rax]
mov al, 0xae
lock cmpxchg byte [0x14067b2a9], cl
je 0x14048a16f
cmp al, 0x87
jne 0x14048a050
lea rax, [0x14067b2a0]
ret
test edx, edx
je 0x14048a0f1
movzx eax, byte [0x14067ae07]
movzx ecx, byte [0x14067c4b4]
add cl, 0x7b
cmp al, cl
je 0x14048a0a4
mov cl, 0xe1
nop dword [rax + rax]
mov al, 0x9e
lock cmpxchg byte [0x14067ae07], cl
je 0x14048a11c
cmp al, 0x62
jne 0x14048a090
lea rax, [0x14067ae00]
ret
movzx eax, byte [0x14067b782]
cmp al, 0x53
je 0x14048a0e9
nop word [rax + rax]
movzx ecx, byte [0x14067c4b4]
lea eax, [rcx - 0x48]
add cl, 0xba
lock cmpxchg byte [0x14067b782], cl
je 0x14048a1b5
movzx ecx, byte [0x14067c4b4]
add cl, 0x6c
cmp al, cl
jne 0x14048a0c0
lea rax, [0x14067b780]
ret
movzx eax, byte [0x14067acf4]
cmp al, 0x29
je 0x14048a114
mov cl, 0xed
nop
mov al, 0x8d
lock cmpxchg byte [0x14067acf4], cl
je 0x14048a258
cmp al, 0x29
jne 0x14048a100
lea rax, [0x14067acf0]
ret
xor edx, edx
lea rax, [0x14067ae00]
lea rcx, [0x14055c2c0]
nop dword [rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rdx + rax]
xor r9b, r8b
mov byte [rdx + rax], r9b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 7
jl 0x14048a130
mov al, 0x62
xchg byte [0x14067ae07], al
lea rax, [0x14067ae00]
ret
xor eax, eax
lea rcx, [0x14067b2a0]
lea rdx, [0x14055c730]
nop
movzx r8d, byte [rax + rcx]
mov r9d, r8d
xor r9b, 0xf8
and r8b, 0x78
add r8b, r8b
add r8b, r9b
add r8b, byte [rax + rdx]
add r8b, 8
mov byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 8
jg 0x14048a248
inc rax
jmp 0x14048a180
xor r8d, r8d
lea rax, [0x14067b780]
lea rcx, [0x14055cbc0]
mov edx, 0x13bcdcb5
nop dword [rax + rax]
movsxd r8, r8d
movzx r9d, byte [r8 + rax]
add r9b, byte [r8 + rcx]
add r9b, 0x2d
mov r10d, r9d
xor r10b, 0xd3
and r9b, 0x53
add r9b, r9b
add r9b, r10b
mov byte [r8 + rax], r9b
mov r9d, dword [0x14067c4b0]
add r9d, edx
mov r10d, r8d
xor r10d, r9d
not r8d
xor r9d, r8d
and r9d, r8d
or r9d, r10d
not r9d
add r9d, r9d
add r10d, 0xf3a9930d
mov r8d, r10d
xor r8d, r9d
and r10d, r9d
lea r8d, [r8 + r10*2]
add r8d, 0xc566cf3
cmp r8d, 2
jl 0x14048a1d0
mov al, 0x53
xchg byte [0x14067b782], al
lea rax, [0x14067b780]
ret
mov al, 0x87
xchg byte [0x14067b2a9], al
lea rax, [0x14067b2a0]
ret
xor edx, edx
lea rax, [0x14067acf0]
lea rcx, [0x14055c1c0]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rdx + rax]
xor r9b, r8b
mov byte [rdx + rax], r9b
mov r8d, dword [0x14067c4b0]
add edx, r8d
add edx, 0x13bcdcb5
cmp edx, 4
jl 0x14048a270
mov al, 0x29
xchg byte [0x14067acf4], al
lea rax, [0x14067acf0]
ret
Function at 0x14048a570
Capabilities:
Encode data using xor

Disassembly:
push rbx
mov eax, 0x13bcdcb4
add eax, dword [0x14067c4b0]
cmp ecx, eax
jne 0x14048a5b9
test edx, edx
je 0x14048a609
movzx eax, byte [0x14067b713]
cmp al, 0x3f
je 0x14048a706
mov cl, 0xc2
nop dword [rax]
mov al, 0x8c
lock cmpxchg byte [0x14067b713], cl
je 0x14048a679
cmp al, 0x3f
jne 0x14048a5a0
jmp 0x14048a706
test edx, edx
je 0x14048a639
movzx eax, byte [0x14067b648]
movzx ecx, byte [0x14067c4b4]
mov edx, ecx
xor dl, 0x63
and cl, 0x63
add cl, cl
add cl, dl
cmp al, cl
je 0x14048a759
mov cl, 0xf
nop word cs:[rax + rax]
mov al, 9
lock cmpxchg byte [0x14067b648], cl
je 0x14048a70f
cmp al, 0x4a
jne 0x14048a5f0
jmp 0x14048a759
movzx eax, byte [0x14067ac5d]
cmp al, 0x58
je 0x14048a7d0
mov cl, 0x24
nop word [rax + rax]
mov al, 0x8b
lock cmpxchg byte [0x14067ac5d], cl
je 0x14048a762
cmp al, 0x58
jne 0x14048a620
jmp 0x14048a7d0
movzx eax, byte [0x14067af45]
movzx ecx, byte [0x14067c4b4]
mov edx, ecx
not dl
add cl, cl
add cl, dl
cmp al, cl
je 0x14048a7e1
mov cl, 0xbe
nop dword [rax]
mov al, 0x5d
lock cmpxchg byte [0x14067af45], cl
je 0x14048a798
cmp al, 0xe6
jne 0x14048a660
jmp 0x14048a7e1
xor edx, edx
lea rax, [0x14067b6f0]
lea rcx, [0x14055cb30]
nop dword [rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rax]
movzx r9d, byte [rdx + rcx]
mov r10d, r8d
xor r10b, r9b
mov r11d, r10d
and r10b, r8b
not r8b
mov ebx, r8d
xor bl, r9b
not r11b
and r8b, r9b
or r8b, r11b
not r8b
or r8b, bl
not r8b
or r10b, r8b
mov byte [rdx + rax], r10b
add edx, 0x5055d538
mov r8d, edx
xor r8d, 0x7ffffffe
and r8d, edx
xor edx, 1
lea edx, [rdx + r8*2]
mov r8d, edx
xor r8d, 0xafaa2ac8
and edx, 0x2faa2ac8
lea edx, [r8 + rdx*2]
cmp edx, 0x23
jl 0x14048a690
mov al, 0x3f
xchg byte [0x14067b713], al
lea rax, [0x14067b6f0]
pop rbx
ret
xor eax, eax
lea rcx, [0x14067b630]
lea rdx, [0x14055ca70]
mov r8d, 0x13bcdccc
nop word cs:[rax + rax]
movzx r9d, byte [rax + rdx]
add byte [rax + rcx], r9b
lea r9d, [rax + 1]
mov r10d, dword [0x14067c4b0]
add r10d, r8d
cmp r9d, r10d
jge 0x14048a751
inc rax
jmp 0x14048a730
mov al, 0x4a
xchg byte [0x14067b648], al
lea rax, [0x14067b630]
pop rbx
ret
xor eax, eax
lea rcx, [0x14067ac50]
lea rdx, [0x14055c120]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x14048a7c8
inc rax
jmp 0x14048a780
xor eax, eax
lea rcx, [0x14067af30]
lea rdx, [0x14055c3e0]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x14
jg 0x14048a7d9
inc rax
jmp 0x14048a7b0
mov al, 0x58
xchg byte [0x14067ac5d], al
lea rax, [0x14067ac50]
pop rbx
ret
mov al, 0xe6
xchg byte [0x14067af45], al
lea rax, [0x14067af30]
pop rbx
ret
Function at 0x14048aa10
Capabilities:
Encode data using xor

Disassembly:
push rbx
test ecx, ecx
je 0x14048aa49
movzx eax, byte [0x14067b613]
cmp al, 0x81
je 0x14048ab46
mov cl, 0x83
nop word cs:[rax + rax]
mov al, 0x98
lock cmpxchg byte [0x14067b613], cl
je 0x14048aade
cmp al, 0x81
jne 0x14048aa30
jmp 0x14048ab46
movzx eax, byte [0x14067ace7]
cmp al, 0x2a
je 0x14048aad5
movzx ecx, byte [0x14067c4b4]
lea eax, [rcx + 0x13]
add cl, 0x82
lock cmpxchg byte [0x14067ace7], cl
jne 0x14048aa50
xor edx, edx
lea rax, [0x14067ace0]
lea rcx, [0x14055c1b0]
nop
movsxd rdx, edx
movzx r8d, byte [rdx + rax]
movzx r9d, byte [rdx + rcx]
not r9b
mov r10d, r9d
or r10b, r8b
not r10b
and r9b, r8b
or r9b, r10b
mov byte [rdx + rax], r9b
mov r8d, edx
xor r8d, 0x87e0ee6f
add edx, edx
and edx, 0xfc1dcde
mov r9d, r8d
xor r9d, edx
and edx, r8d
lea edx, [r9 + rdx*2]
add edx, 0x781f1192
cmp edx, 7
jl 0x14048aa80
mov al, 0x2a
xchg byte [0x14067ace7], al
lea rax, [0x14067ace0]
pop rbx
ret
xor eax, eax
lea rcx, [0x14067b610]
lea rdx, [0x14055ca50]
mov r8d, 0x13bcdcb7
nop word cs:[rax + rax]
movzx r9d, byte [rax + rcx]
movzx r10d, byte [rax + rdx]
mov r11d, r9d
not r11b
not r10b
mov ebx, r11d
xor bl, r10b
and bl, r11b
and r10b, r9b
or r10b, bl
mov byte [rax + rcx], r10b
lea r9d, [rax + 1]
mov r10d, dword [0x14067c4b0]
add r10d, r8d
cmp r9d, r10d
jge 0x14048ab3e
inc rax
jmp 0x14048ab00
mov al, 0x81
xchg byte [0x14067b613], al
lea rax, [0x14067b610]
pop rbx
ret
Function at 0x14048b4d0
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x14048b50c
test edx, edx
je 0x14048b54c
movzx eax, byte [0x14067b766]
cmp al, 0x92
je 0x14048b504
mov cl, 9
nop word cs:[rax + rax]
mov al, 0xaa
lock cmpxchg byte [0x14067b766], cl
je 0x14048b5bc
cmp al, 0x92
jne 0x14048b4f0
lea rax, [0x14067b740]
ret
test edx, edx
je 0x14048b58c
movzx eax, byte [0x14067b5c9]
movzx ecx, byte [0x14067c4b4]
add cl, 0xa1
cmp al, cl
je 0x14048b544
mov cl, 0x83
nop word [rax + rax]
mov al, 0xa5
lock cmpxchg byte [0x14067b5c9], cl
je 0x14048b5f8
cmp al, 0x88
jne 0x14048b530
lea rax, [0x14067b5c0]
ret
movzx eax, byte [0x14067ae7a]
movzx ecx, byte [0x14067c4b4]
add cl, 0xd2
cmp al, cl
je 0x14048b584
mov cl, 0x3d
nop word cs:[rax + rax]
mov al, 0x3b
lock cmpxchg byte [0x14067ae7a], cl
je 0x14048b641
cmp al, 0xb9
jne 0x14048b570
lea rax, [0x14067ae50]
ret
movzx eax, byte [0x14067acb5]
cmp al, 0x89
je 0x14048b5b4
mov cl, 0xbe
nop dword [rax]
mov al, 0x69
lock cmpxchg byte [0x14067acb5], cl
je 0x14048b691
cmp al, 0x89
jne 0x14048b5a0
lea rax, [0x14067acb0]
ret
xor eax, eax
lea rcx, [0x14067b740]
lea rdx, [0x14055cb80]
nop dword [rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x25
jg 0x14048b5e8
inc rax
jmp 0x14048b5d0
mov al, 0x92
xchg byte [0x14067b766], al
lea rax, [0x14067b740]
ret
xor edx, edx
lea rax, [0x14067b5c0]
lea rcx, [0x14055ca10]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, dword [0x14067c4b0]
add edx, r8d
add edx, 0x13bcdcb5
cmp edx, 9
jl 0x14048b610
mov al, 0x88
xchg byte [0x14067b5c9], al
lea rax, [0x14067b5c0]
ret
xor edx, edx
lea rax, [0x14067ae50]
lea rcx, [0x14055c310]
nop word cs:[rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
xor byte [rdx + rax], r8b
mov r8d, dword [0x14067c4b0]
add edx, r8d
add edx, 0x13bcdcb5
cmp edx, 0x2a
jl 0x14048b660
mov al, 0xb9
xchg byte [0x14067ae7a], al
lea rax, [0x14067ae50]
ret
xor edx, edx
lea rax, [0x14067acb0]
lea rcx, [0x14055c180]
nop word cs:[rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 5
jl 0x14048b6b0
mov al, 0x89
xchg byte [0x14067acb5], al
lea rax, [0x14067acb0]
ret
Function at 0x14048ba70
Capabilities:
Encode data using xor

Disassembly:
push rbx
test ecx, ecx
je 0x14048bb12
test edx, edx
je 0x14048bb55
movzx eax, byte [0x14067b3a0]
nop dword [rax + rax]
cmp al, 0x66
je 0x14048bb09
movzx ecx, byte [0x14067c4b4]
lea eax, [rcx + 0x24]
mov edx, eax
xor dl, 0x76
and al, 0x76
add al, al
add al, dl
mov dl, 0xf9
sub dl, cl
add cl, 6
and dl, 2
mov r8d, ecx
and r8b, 0xfd
or r8b, dl
and cl, 2
add cl, cl
add cl, r8b
lock cmpxchg byte [0x14067b3a0], cl
jne 0x14048ba90
xor edx, edx
lea rax, [0x14067b390]
lea rcx, [0x14055c810]
nop
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, dword [0x14067c4b0]
add edx, r8d
add edx, 0x13bcdcb5
cmp edx, 0x10
jl 0x14048bae0
mov al, 0x66
xchg byte [0x14067b3a0], al
lea rax, [0x14067b390]
pop rbx
ret
test edx, edx
je 0x14048bb89
movzx eax, byte [0x14067b502]
movzx ecx, byte [0x14067c4b4]
add cl, 0x1b
cmp al, cl
je 0x14048bc3b
mov cl, 5
nop word cs:[rax + rax]
mov al, 0x67
lock cmpxchg byte [0x14067b502], cl
je 0x14048bbb9
cmp al, 2
jne 0x14048bb40
jmp 0x14048bc3b
movzx eax, byte [0x14067acaa]
cmp al, 0x23
je 0x14048bcac
mov cl, 0x3c
nop word cs:[rax + rax]
mov al, 0xe
lock cmpxchg byte [0x14067acaa], cl
je 0x14048bc44
cmp al, 0x23
jne 0x14048bb70
jmp 0x14048bcac
movzx eax, byte [0x14067b287]
cmp al, 0x43
je 0x14048bcf0
mov cl, 0x74
nop word [rax + rax]
mov al, 0x99
lock cmpxchg byte [0x14067b287], cl
je 0x14048bcb5
cmp al, 0x43
jne 0x14048bba0
jmp 0x14048bcf0
xor edx, edx
lea rax, [0x14067b500]
lea rcx, [0x14055c960]
nop dword [rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rax]
movzx r9d, byte [rdx + rcx]
mov r10d, r8d
not r10b
mov r11d, r8d
and r11b, r9b
mov ebx, r10d
and r10b, r9b
not r9b
and bl, r9b
or bl, r11b
mov r11d, r8d
xor r11b, r9b
or r10b, r11b
not r10b
or r10b, bl
not r10b
and r9b, r8b
or r9b, r10b
mov byte [rdx + rax], r9b
add edx, 0xf4ec2c3b
mov r8d, edx
xor r8d, 0xb13d3c6
and edx, 0xb13d3c6
lea edx, [r8 + rdx*2]
cmp edx, 2
jl 0x14048bbd0
mov al, 2
xchg byte [0x14067b502], al
lea rax, [0x14067b500]
pop rbx
ret
xor eax, eax
lea rcx, [0x14067aca0]
lea rdx, [0x14055c170]
mov r8d, 0x13bcdcbe
nop word [rax + rax]
movzx r9d, byte [rax + rdx]
movzx r10d, byte [rax + rcx]
xor r10b, r9b
mov r11d, r10d
not r11b
and r11b, r9b
add r11b, r11b
mov r9d, r10d
xor r9b, r11b
and r11b, r10b
add r11b, r11b
add r11b, r9b
mov byte [rax + rcx], r11b
lea r9d, [rax + 1]
mov r10d, dword [0x14067c4b0]
add r10d, r8d
cmp r9d, r10d
jge 0x14048bca4
inc rax
jmp 0x14048bc60
mov al, 0x23
xchg byte [0x14067acaa], al
lea rax, [0x14067aca0]
pop rbx
ret
xor eax, eax
lea rcx, [0x14067b280]
lea rdx, [0x14055c710]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 6
jg 0x14048bce8
inc rax
jmp 0x14048bcd0
mov al, 0x43
xchg byte [0x14067b287], al
lea rax, [0x14067b280]
pop rbx
ret