joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1401d4cf0
Capabilities:
Encode data using xor

Disassembly:
mov r8d, dword [rsp + 0x28]
test ecx, ecx
je 0x1401d4d60
mov eax, r8d
xor eax, 0x9322785a
add eax, dword [0x14050924c]
cmp edx, eax
jne 0x1401d4d9c
movzx eax, byte [0x1405090d5]
mov ecx, r8d
xor cl, 0x81
add cl, byte [0x140509248]
cmp al, cl
je 0x1401d4d58
nop word cs:[rax + rax]
movzx ecx, byte [0x140509248]
mov eax, r8d
xor al, 0x88
add al, cl
mov edx, r8d
xor dl, 0x58
add dl, cl
lock cmpxchg byte [0x1405090d5], dl
je 0x1401d4dfc
cmp al, 0x9a
jne 0x1401d4d30
lea rax, [0x1405090d0]
ret
xor r8d, 0x9322785a
add r8d, dword [0x14050924c]
cmp edx, r8d
jne 0x1401d4dcc
movzx eax, byte [0x140509132]
cmp al, 0x20
je 0x1401d4d94
mov cl, 0xe1
mov al, 0x8f
lock cmpxchg byte [0x140509132], cl
je 0x1401d4e88
cmp al, 0x20
jne 0x1401d4d80
lea rax, [0x140509120]
ret
movzx eax, byte [0x1405091f9]
cmp al, 0x73
je 0x1401d4dc4
mov cl, 0xb2
nop dword [rax]
mov al, 0xed
lock cmpxchg byte [0x1405091f9], cl
je 0x1401d4e4d
cmp al, 0x73
jne 0x1401d4db0
lea rax, [0x1405091f0]
ret
movzx eax, byte [0x1405091ef]
cmp al, 0xe4
je 0x1401d4df4
mov cl, 0xb8
nop dword [rax]
mov al, 0xf
lock cmpxchg byte [0x1405091ef], cl
je 0x1401d4eb8
cmp al, 0xe4
jne 0x1401d4de0
lea rax, [0x1405091e0]
ret
xor eax, eax
lea rcx, [0x1405090d0]
lea rdx, [0x1404279a0]
xor r8d, 0x9322785d
nop word cs:[rax + rax]
cdqe
movzx r9d, byte [rax + rdx]
xor byte [rax + rcx], r9b
mov r9d, dword [0x14050924c]
add r9d, r8d
add eax, r9d
cmp eax, 5
jl 0x1401d4e20
mov al, 0x9a
xchg byte [0x1405090d5], al
lea rax, [0x1405090d0]
ret
xor eax, eax
lea rcx, [0x1405091f0]
lea rdx, [0x140427aa0]
nop dword [rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 8
jg 0x1401d4e78
inc rax
jmp 0x1401d4e60
mov al, 0x73
xchg byte [0x1405091f9], al
lea rax, [0x1405091f0]
ret
xor eax, eax
lea rcx, [0x140509120]
lea rdx, [0x1404279e0]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x11
jg 0x1401d4f0f
inc rax
jmp 0x1401d4ea0
xor edx, edx
lea rax, [0x1405091e0]
lea rcx, [0x140427a90]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rdx + rax]
xor r9b, r8b
mov byte [rdx + rax], r9b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 0xf
jl 0x1401d4ed0
mov al, 0xe4
xchg byte [0x1405091ef], al
lea rax, [0x1405091e0]
ret
mov al, 0x20
xchg byte [0x140509132], al
lea rax, [0x140509120]
ret
Function at 0x1401d5040
Capabilities:
Encode data using xor

Disassembly:
mov r8d, dword [rsp + 0x28]
test ecx, ecx
je 0x1401d5088
test edx, edx
je 0x1401d50bc
movzx eax, byte [0x140509115]
cmp al, 0xc5
je 0x1401d5080
mov cl, 0xe9
nop word [rax + rax]
mov al, 0x5f
lock cmpxchg byte [0x140509115], cl
je 0x1401d511c
mov edx, r8d
xor dl, 0x9a
add dl, byte [0x140509248]
cmp al, dl
jne 0x1401d5060
lea rax, [0x140509100]
ret
test edx, edx
je 0x1401d50ec
movzx eax, byte [0x14050918f]
cmp al, 0xf6
je 0x1401d50b4
mov cl, 0xc2
nop dword [rax]
mov al, 0x4a
lock cmpxchg byte [0x14050918f], cl
je 0x1401d515f
cmp al, 0xf6
jne 0x1401d50a0
lea rax, [0x140509180]
ret
movzx eax, byte [0x1405091d3]
cmp al, 0x5a
je 0x1401d50e4
mov cl, 0xe8
nop dword [rax]
mov al, 0xaf
lock cmpxchg byte [0x1405091d3], cl
je 0x1401d5188
cmp al, 0x5a
jne 0x1401d50d0
lea rax, [0x1405091b0]
ret
movzx eax, byte [0x1405091a3]
cmp al, 0x28
je 0x1401d5114
mov cl, 0xd7
nop dword [rax]
mov al, 6
lock cmpxchg byte [0x1405091a3], cl
je 0x1401d51f9
cmp al, 0x28
jne 0x1401d5100
lea rax, [0x1405091a0]
ret
xor edx, edx
lea rax, [0x140509100]
lea rcx, [0x1404279c0]
nop dword [rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 0x15
jl 0x1401d5130
mov al, 0xc5
xchg byte [0x140509115], al
lea rax, [0x140509100]
ret
xor eax, eax
lea rcx, [0x140509180]
lea rdx, [0x140427a30]
nop
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xe
jg 0x1401d51e9
inc rax
jmp 0x1401d5170
xor edx, edx
lea rax, [0x1405091b0]
lea rcx, [0x140427a60]
nop dword [rax + rax]
movsxd rdx, edx
movzx r9d, byte [rdx + rcx]
mov r10d, r9d
xor r10b, r9b
not r10b
and r10b, byte [rdx + rax]
xor r10b, r9b
mov byte [rdx + rax], r10b
mov r9d, edx
xor r9d, 1
and edx, 1
lea edx, [r9 + rdx*2]
cmp edx, 0x23
jl 0x1401d51a0
xor r8b, 0x31
add r8b, byte [0x140509248]
xchg byte [0x1405091d3], r8b
lea rax, [0x1405091b0]
ret
mov al, 0xf6
xchg byte [0x14050918f], al
lea rax, [0x140509180]
ret
xor eax, eax
lea rcx, [0x1405091a0]
lea rdx, [0x140427a50]
nop dword [rax]
movzx r9d, byte [rax + rdx]
mov r10d, r9d
xor r10b, r9b
not r10b
and r10b, byte [rax + rcx]
xor r10b, r9b
mov byte [rax + rcx], r10b
lea r9d, [rax + 1]
cmp r9d, 2
jg 0x1401d5238
inc rax
jmp 0x1401d5210
xor r8b, 0x7f
add r8b, byte [0x140509248]
xchg byte [0x1405091a3], r8b
lea rax, [0x1405091a0]
ret
Function at 0x1401d5bc0
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x1401d5c31
movzx eax, byte [0x140509965]
nop dword [rax + rax]
cmp al, 0x27
je 0x1401d5c6c
movzx ecx, byte [0x140509a28]
mov eax, r9d
xor al, 0xca
add al, cl
mov edx, r9d
xor dl, 0xa2
add dl, cl
lock cmpxchg byte [0x140509965], dl
jne 0x1401d5bd0
xor eax, eax
lea rcx, [0x140509950]
lea rdx, [0x140427c80]
xor r9d, 0xdf90263c
nop
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
mov r10d, dword [0x140509a2c]
add r10d, r9d
cmp r8d, r10d
jge 0x1401d5c64
inc rax
jmp 0x1401d5c10
movzx eax, byte [0x1405098f3]
cmp al, 0x97
je 0x1401d5c5c
mov cl, 0x56
nop
mov al, 0x4e
lock cmpxchg byte [0x1405098f3], cl
je 0x1401d5c74
mov edx, r9d
xor dl, 0x74
add dl, byte [0x140509a28]
cmp al, dl
jne 0x1401d5c40
lea rax, [0x1405098d0]
ret
mov al, 0x27
xchg byte [0x140509965], al
lea rax, [0x140509950]
ret
xor edx, edx
lea rax, [0x1405098d0]
lea rcx, [0x140427c00]
nop word cs:[rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rdx + rax]
xor r9b, r8b
mov byte [rdx + rax], r9b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 0x23
jl 0x1401d5c90
mov al, 0x97
xchg byte [0x1405098f3], al
lea rax, [0x1405098d0]
ret
Function at 0x1401e26d0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x20
mov rsi, rcx
xorps xmm0, xmm0
movups xmmword [rcx + 0x68], xmm0
movups xmmword [rcx + 0x58], xmm0
movups xmmword [rcx + 0x48], xmm0
movups xmmword [rcx + 0x38], xmm0
movups xmmword [rcx + 0x28], xmm0
movups xmmword [rcx + 0x18], xmm0
movups xmmword [rcx + 8], xmm0
mov rdi, qword [rcx + 0x78]
mov rbx, qword [rcx + 0x80]
cmp rdi, rbx
je 0x1401e2744
nop dword [rax]
mov eax, dword [0x14050bba0]
lea edx, [rax + 0x381efbde]
mov ecx, eax
xor ecx, 0x10afa4d4
not eax
and eax, 0x6f505b2b
or eax, ecx
not eax
lea r8d, [rcx + rax*2]
mov rcx, rdi
call fcn.1401e4700
add rdi, 0x40
cmp rdi, rbx
jne 0x1401e2710
mov rax, qword [rsi + 0x78]
mov qword [rsi + 0x80], rax
add rsp, 0x20
pop rbx
pop rdi
pop rsi
ret
Function at 0x1401e41d0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
test ecx, ecx
je 0x1401e4209
test edx, edx
je 0x1401e42d4
movzx eax, byte [0x14050b7f0]
cmp al, 0xae
je 0x1401e4399
mov cl, 0x90
nop
mov al, 0xb4
lock cmpxchg byte [0x14050b7f0], cl
je 0x1401e4349
cmp al, 0xae
jne 0x1401e41f0
jmp 0x1401e4399
test edx, edx
je 0x1401e4309
movzx eax, byte [0x14050b735]
nop dword [rax + rax]
cmp al, 0xd
je 0x1401e42c8
movzx ecx, byte [0x14050bbb0]
lea eax, [rcx - 0x37]
mov edx, ecx
xor dl, 0xd2
and cl, 0x52
add cl, cl
add cl, dl
lock cmpxchg byte [0x14050b735], cl
jne 0x1401e4220
xor edx, edx
lea rax, [0x14050b720]
lea rcx, [0x140428890]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rdx + rax]
xor r9b, r8b
mov byte [rdx + rax], r9b
mov r8d, dword [0x14050bba0]
lea r9d, [r8 + 0x6e995980]
mov r10d, edx
not r10d
mov r11d, 0x9166a67f
sub r11d, r8d
mov esi, edx
and esi, r11d
and r11d, r10d
and r10d, r9d
or esi, r10d
xor edx, r9d
or r11d, edx
not r11d
lea edx, [rsi + r11*2]
add r8d, 0x6e995994
cmp edx, r8d
jl 0x1401e4260
mov al, 0xd
xchg byte [0x14050b735], al
lea rax, [0x14050b720]
jmp 0x1401e4456
movzx eax, byte [0x14050b7c0]
cmp al, 0x8e
je 0x1401e43e0
mov cl, 0x1b
nop word cs:[rax + rax]
mov al, 0x70
lock cmpxchg byte [0x14050b7c0], cl
je 0x1401e43a5
cmp al, 0x8e
jne 0x1401e42f0
jmp 0x1401e43e0
movzx eax, byte [0x14050b6a2]
movzx ecx, byte [0x14050bbb0]
add cl, 0xfb
cmp al, cl
je 0x1401e444f
mov cl, 0xcf
nop word cs:[rax + rax]
mov al, 0x1b
lock cmpxchg byte [0x14050b6a2], cl
je 0x1401e43e9
cmp al, 0x4c
jne 0x1401e4330
jmp 0x1401e444f
xor edx, edx
lea rax, [0x14050b7e0]
lea rcx, [0x140428940]
nop dword [rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rdx + rax]
xor r9b, r8b
mov byte [rdx + rax], r9b
mov r8d, dword [0x14050bba0]
add edx, r8d
add edx, 0x6e995980
cmp edx, 0x10
jl 0x1401e4360
mov al, 0xae
xchg byte [0x14050b7f0], al
lea rax, [0x14050b7e0]
jmp 0x1401e4456
xor eax, eax
lea rcx, [0x14050b7b0]
lea rdx, [0x140428920]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xf
jg 0x1401e43d8
inc rax
jmp 0x1401e43c0
mov al, 0x8e
xchg byte [0x14050b7c0], al
lea rax, [0x14050b7b0]
jmp 0x1401e4456
xor eax, eax
lea rcx, [0x14050b6a0]
lea rdx, [0x140428820]
nop dword [rax]
movzx r8d, byte [rax + rcx]
movzx r9d, byte [rax + rdx]
mov r10d, r8d
not r10b
mov r11d, r10d
xor r11b, r9b
not r9b
mov ebx, r8d
and bl, r9b
or bl, r11b
not bl
xor r9b, r10b
and r9b, r8b
or r9b, bl
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
cmp r8d, 1
jg 0x1401e4440
inc rax
jmp 0x1401e4400
movzx eax, byte [0x14050bbb0]
add al, 0xfb
xchg byte [0x14050b6a2], al
lea rax, [0x14050b6a0]
pop rbx
pop rsi
ret
Function at 0x1401fc2c0
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x1401fc2fc
test edx, edx
je 0x1401fc32c
movzx eax, byte [0x14050cbfd]
cmp al, 0x7d
je 0x1401fc2f4
mov cl, 0xef
nop word cs:[rax + rax]
mov al, 0xeb
lock cmpxchg byte [0x14050cbfd], cl
je 0x1401fc39c
cmp al, 0x7d
jne 0x1401fc2e0
lea rax, [0x14050cbf0]
ret
test edx, edx
je 0x1401fc36c
movzx eax, byte [0x14050cd0d]
cmp al, 0xad
je 0x1401fc324
mov cl, 0xda
nop dword [rax]
mov al, 0x89
lock cmpxchg byte [0x14050cd0d], cl
je 0x1401fc3d8
cmp al, 0xad
jne 0x1401fc310
lea rax, [0x14050cd00]
ret
movzx eax, byte [0x14050c6e0]
movzx ecx, byte [0x14050d908]
add cl, 0xac
cmp al, cl
je 0x1401fc364
mov cl, 0xe8
nop word cs:[rax + rax]
mov al, 0x14
lock cmpxchg byte [0x14050c6e0], cl
je 0x1401fc408
cmp al, 0xe6
jne 0x1401fc350
lea rax, [0x14050c6d0]
ret
movzx eax, byte [0x14050d0ad]
cmp al, 0xf7
je 0x1401fc394
mov cl, 0x60
nop dword [rax]
mov al, 0xcf
lock cmpxchg byte [0x14050d0ad], cl
je 0x1401fc458
cmp al, 0xf7
jne 0x1401fc380
lea rax, [0x14050d0a0]
ret
xor eax, eax
lea rcx, [0x14050cbf0]
lea rdx, [0x140429880]
nop dword [rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x1401fc3c8
inc rax
jmp 0x1401fc3b0
mov al, 0x7d
xchg byte [0x14050cbfd], al
lea rax, [0x14050cbf0]
ret
xor eax, eax
lea rcx, [0x14050cd00]
lea rdx, [0x140429980]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x1401fc438
inc rax
jmp 0x1401fc3f0
xor eax, eax
lea rcx, [0x14050c6d0]
lea rdx, [0x140429380]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xf
jg 0x1401fc448
inc rax
jmp 0x1401fc420
mov al, 0xad
xchg byte [0x14050cd0d], al
lea rax, [0x14050cd00]
ret
mov al, 0xe6
xchg byte [0x14050c6e0], al
lea rax, [0x14050c6d0]
ret
xor edx, edx
lea rax, [0x14050d0a0]
lea rcx, [0x140429cf0]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 0xd
jl 0x1401fc470
mov al, 0xf7
xchg byte [0x14050d0ad], al
lea rax, [0x14050d0a0]
ret
Function at 0x1401ff270
Capabilities:
Encode data using xor

Disassembly:
mov r8d, dword [rsp + 0x28]
test ecx, ecx
je 0x1401ff2ac
test edx, edx
je 0x1401ff2ec
movzx eax, byte [0x14050cb61]
cmp al, 0x19
je 0x1401ff2a4
mov cl, 0x2e
nop word [rax + rax]
mov al, 0x25
lock cmpxchg byte [0x14050cb61], cl
je 0x1401ff38c
cmp al, 0x19
jne 0x1401ff290
lea rax, [0x14050cb50]
ret
test edx, edx
je 0x1401ff35c
movzx eax, byte [0x14050c6c3]
cmp al, 0x8c
je 0x1401ff2e4
mov cl, 0x85
nop word cs:[rax + rax]
mov al, 0xb5
lock cmpxchg byte [0x14050c6c3], cl
je 0x1401ff3e8
cmp al, 0x8c
jne 0x1401ff2d0
lea rax, [0x14050c6c0]
ret
movzx eax, byte [0x14050cc10]
nop word cs:[rax + rax]
cmp al, 0xff
je 0x1401ff3e0
movzx ecx, byte [0x14050d908]
mov eax, r8d
xor al, 0x37
add al, cl
mov edx, r8d
xor dl, 0x35
add dl, cl
lock cmpxchg byte [0x14050cc10], dl
jne 0x1401ff300
xor eax, eax
lea rcx, [0x14050cc00]
lea rdx, [0x140429890]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xf
jg 0x1401ff3d8
inc rax
jmp 0x1401ff340
movzx eax, byte [0x14050ccfd]
cmp al, 0x57
je 0x1401ff384
mov cl, 0x99
nop dword [rax]
mov al, 0xea
lock cmpxchg byte [0x14050ccfd], cl
je 0x1401ff428
cmp al, 0x57
jne 0x1401ff370
lea rax, [0x14050ccf0]
ret
xor eax, eax
lea rcx, [0x14050cb50]
lea rdx, [0x1404297e0]
nop dword [rax]
movzx r8d, byte [rax + rdx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rax + rcx]
xor r9b, r8b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
cmp r8d, 0x10
jg 0x1401ff3c8
inc rax
jmp 0x1401ff3a0
mov al, 0x19
xchg byte [0x14050cb61], al
lea rax, [0x14050cb50]
ret
mov al, 0xff
xchg byte [0x14050cc10], al
lea rax, [0x14050cc00]
ret
xor eax, eax
lea rcx, [0x14050c6c0]
lea rdx, [0x140429370]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 2
jg 0x1401ff418
inc rax
jmp 0x1401ff400
mov al, 0x8c
xchg byte [0x14050c6c3], al
lea rax, [0x14050c6c0]
ret
xor eax, eax
lea rcx, [0x14050ccf0]
lea rdx, [0x140429970]
xor r8d, 0x4186bf07
nop
cdqe
movzx r9d, byte [rax + rdx]
add byte [rax + rcx], r9b
mov r9d, dword [0x14050d900]
mov r10d, r8d
xor r10d, r9d
and r9d, r8d
lea r9d, [r10 + r9*2]
add eax, r9d
cmp eax, 0xd
jl 0x1401ff440
mov al, 0x57
xchg byte [0x14050ccfd], al
lea rax, [0x14050ccf0]
ret
Function at 0x140235290
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x1402352e6
mov eax, dword [0x1405157e8]
mov ecx, eax
xor ecx, 0x22932e3a
and eax, 0x22932e3a
lea eax, [rcx + rax*2]
cmp edx, eax
jne 0x140235326
movzx eax, byte [0x140515524]
cmp al, 0x60
je 0x1402352de
mov cl, 0x20
nop dword [rax + rax]
mov al, 0x5b
lock cmpxchg byte [0x140515524], cl
je 0x1402353e6
movzx edx, byte [0x1405157ec]
add dl, 0xae
cmp al, dl
jne 0x1402352c0
lea rax, [0x140515520]
ret
test edx, edx
je 0x1402353b1
movzx eax, byte [0x14051568d]
cmp al, 0xde
je 0x14023531e
mov cl, 0x8f
nop dword [rax + rax]
mov al, 0xe
lock cmpxchg byte [0x14051568d], cl
je 0x140235438
movzx edx, byte [0x1405157ec]
add dl, 0x2c
cmp al, dl
jne 0x140235300
lea rax, [0x140515680]
ret
movzx eax, byte [0x14051579d]
nop dword [rax]
cmp al, 0xae
je 0x1402353a9
movzx ecx, byte [0x1405157ec]
lea eax, [rcx - 0x27]
add cl, 0xad
lock cmpxchg byte [0x14051579d], cl
jne 0x140235330
xor edx, edx
lea rax, [0x140515790]
lea rcx, [0x14042d910]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rdx + rax]
xor r9b, r8b
mov byte [rdx + rax], r9b
mov r8d, dword [0x1405157e8]
add edx, r8d
add edx, 0x22932e3b
cmp edx, 0xd
jl 0x140235360
movzx eax, byte [0x1405157ec]
mov ecx, eax
xor cl, 0xfc
and al, 0x7c
add al, al
add al, cl
xchg byte [0x14051579d], al
lea rax, [0x140515790]
ret
movzx eax, byte [0x14051560f]
cmp al, 0xbd
je 0x1402353de
mov cl, 0x1a
nop
mov al, 0x44
lock cmpxchg byte [0x14051560f], cl
je 0x14023547f
movzx edx, byte [0x1405157ec]
add dl, 0xb
cmp al, dl
jne 0x1402353c0
lea rax, [0x140515600]
ret
xor eax, eax
lea rcx, [0x140515520]
lea rdx, [0x14042d6c0]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rdx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rax + rcx]
xor r9b, r8b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
cmp r8d, 3
jg 0x140235428
inc rax
jmp 0x140235400
mov al, 0x60
xchg byte [0x140515524], al
lea rax, [0x140515520]
ret
xor eax, eax
lea rcx, [0x140515680]
lea rdx, [0x14042d800]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x140235468
inc rax
jmp 0x140235450
movzx eax, byte [0x1405157ec]
add al, 0x2c
xchg byte [0x14051568d], al
lea rax, [0x140515680]
ret
xor eax, eax
lea rcx, [0x140515600]
lea rdx, [0x14042d780]
nop
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xe
jg 0x1402354a8
inc rax
jmp 0x140235490
mov al, 0xbd
xchg byte [0x14051560f], al
lea rax, [0x140515600]
ret
Function at 0x140235520
Capabilities:
Encode data using xor

Disassembly:
push rsi
mov r8d, dword [rsp + 0x30]
test ecx, ecx
je 0x140235559
test edx, edx
je 0x1402355a9
movzx eax, byte [0x14051569c]
cmp al, 0x20
je 0x140235680
mov cl, 0x4c
nop
mov al, 0x19
lock cmpxchg byte [0x14051569c], cl
je 0x140235645
cmp al, 0x20
jne 0x140235540
jmp 0x140235680
mov eax, r8d
xor eax, 0x3e4b9f70
add eax, dword [0x1405157e8]
cmp edx, eax
jne 0x140235605
movzx eax, byte [0x1405155f3]
mov ecx, r8d
xor cl, 0xb7
add cl, byte [0x1405157ec]
cmp al, cl
je 0x1402357a0
mov cl, 0x99
nop dword [rax]
mov al, 0x22
lock cmpxchg byte [0x1405155f3], cl
je 0x1402356fd
cmp al, 0xaf
jne 0x140235590
jmp 0x1402357a0
movzx eax, byte [0x1405156df]
movzx ecx, byte [0x1405157ec]
mov edx, r8d
xor dl, 0x69
mov r9d, edx
xor r9b, cl
and dl, cl
add dl, dl
add dl, r9b
cmp al, dl
je 0x1402356f4
mov cl, 0x54
nop word cs:[rax + rax]
mov al, 0xf8
lock cmpxchg byte [0x1405156df], cl
je 0x140235689
mov edx, r8d
xor dl, 0x69
add dl, byte [0x1405157ec]
cmp al, dl
jne 0x1402355e0
jmp 0x1402356f4
movzx eax, byte [0x1405156ed]
cmp al, 0xe2
je 0x14023578f
mov cl, 0x53
nop word cs:[rax + rax]
mov al, 0x22
lock cmpxchg byte [0x1405156ed], cl
je 0x140235741
mov edx, r8d
xor dl, 0x7a
add dl, byte [0x1405157ec]
cmp al, dl
jne 0x140235620
jmp 0x14023578f
xor eax, eax
lea rcx, [0x140515690]
lea rdx, [0x14042d810]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xb
jg 0x140235678
inc rax
jmp 0x140235660
mov al, 0x20
xchg byte [0x14051569c], al
lea rax, [0x140515690]
pop rsi
ret
xor r9d, r9d
lea rax, [0x1405156d0]
lea rcx, [0x14042d850]
mov edx, r8d
xor edx, 0x3e4b9f71
xor r8d, 0x3e4b9f03
nop word [rax + rax]
movsxd r9, r9d
movzx r10d, byte [r9 + rcx]
mov r11d, r10d
xor r11b, r10b
not r11b
and r11b, byte [r9 + rax]
xor r11b, r10b
mov byte [r9 + rax], r11b
mov r10d, dword [0x1405157e8]
lea r11d, [rdx + r10]
mov esi, r9d
xor esi, r11d
and r9d, r11d
lea r9d, [rsi + r9*2]
add r10d, r8d
cmp r9d, r10d
jl 0x1402356b0
mov al, 0xd5
xchg byte [0x1405156df], al
lea rax, [0x1405156d0]
pop rsi
ret
xor eax, eax
lea rcx, [0x1405155d0]
lea rdx, [0x14042d750]
xor r8d, 0x3e4b9f17
nop word cs:[rax + rax]
movzx r9d, byte [rax + rdx]
add byte [rax + rcx], r9b
lea r9d, [rax + 1]
mov r10d, dword [0x1405157e8]
add r10d, r8d
cmp r9d, r10d
jge 0x140235798
inc rax
jmp 0x140235720
xor eax, eax
lea rcx, [0x1405156e0]
lea rdx, [0x14042d860]
xor r8d, 0x3e4b9f71
nop dword [rax + rax]
cdqe
movzx r9d, byte [rax + rdx]
xor byte [rax + rcx], r9b
mov r9d, dword [0x1405157e8]
mov r10d, r8d
xor r10d, r9d
and r9d, r8d
lea r9d, [r10 + r9*2]
add eax, r9d
cmp eax, 0xd
jl 0x140235760
mov al, 0xe2
xchg byte [0x1405156ed], al
lea rax, [0x1405156e0]
pop rsi
ret
mov al, 0xaf
xchg byte [0x1405155f3], al
lea rax, [0x1405155d0]
pop rsi
ret
Function at 0x1402357b0
Capabilities:
Encode data using xor

Disassembly:
push rsi
mov r8d, dword [rsp + 0x30]
test ecx, ecx
je 0x1402357e9
test edx, edx
je 0x140235829
movzx eax, byte [0x14051565d]
cmp al, 0xad
je 0x14023592d
mov cl, 0x6d
nop
mov al, 0x10
lock cmpxchg byte [0x14051565d], cl
je 0x1402358c9
cmp al, 0xad
jne 0x1402357d0
jmp 0x14023592d
test edx, edx
je 0x140235897
movzx eax, byte [0x1405155c3]
cmp al, 0x31
je 0x1402359d6
mov cl, 0x53
nop word cs:[rax + rax]
mov al, 0x64
lock cmpxchg byte [0x1405155c3], cl
je 0x140235936
cmp al, 0x31
jne 0x140235810
jmp 0x1402359d6
movzx eax, byte [0x14051578d]
mov ecx, r8d
xor cl, 0x29
add cl, byte [0x1405157ec]
cmp al, cl
je 0x1402359c5
nop word cs:[rax + rax]
movzx ecx, byte [0x1405157ec]
mov eax, r8d
xor al, 0x6d
add al, cl
mov edx, r8d
xor dl, 0x9b
add dl, cl
lock cmpxchg byte [0x14051578d], dl
je 0x140235978
movzx ecx, byte [0x1405157ec]
mov edx, r8d
xor dl, 0x29
mov r9d, edx
xor r9b, cl
and dl, cl
add dl, dl
add dl, r9b
cmp al, dl
jne 0x140235850
jmp 0x1402359c5
movzx eax, byte [0x140515673]
cmp al, 0xdc
je 0x140235a29
mov cl, 0x79
nop dword [rax + rax]
mov al, 0xa6
lock cmpxchg byte [0x140515673], cl
je 0x1402359df
cmp al, 0xdc
jne 0x1402358b0
jmp 0x140235a29
xor eax, eax
lea rcx, [0x140515650]
lea rdx, [0x14042d7d0]
mov r9d, r8d
xor r9d, 0x96325e4c
nop word cs:[rax + rax]
movzx r10d, byte [rax + rdx]
xor byte [rax + rcx], r10b
lea r10d, [rax + 1]
mov r11d, dword [0x1405157e8]
mov esi, r9d
xor esi, r11d
and r11d, r9d
lea r11d, [rsi + r11*2]
cmp r10d, r11d
jge 0x14023591b
inc rax
jmp 0x1402358f0
xor r8b, 0xf0
add r8b, byte [0x1405157ec]
xchg byte [0x14051565d], r8b
lea rax, [0x140515650]
pop rsi
ret
xor eax, eax
lea rcx, [0x1405155c0]
lea rdx, [0x14042d740]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rdx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rax + rcx]
xor r9b, r8b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
cmp r8d, 2
jg 0x1402359ce
inc rax
jmp 0x140235950
xor eax, eax
lea rcx, [0x140515780]
lea rdx, [0x14042d900]
xor r8d, 0x96325e30
nop
cdqe
movzx r9d, byte [rax + rdx]
mov r10d, r9d
xor r10b, r9b
not r10b
and r10b, byte [rax + rcx]
xor r10b, r9b
mov byte [rax + rcx], r10b
mov r9d, dword [0x1405157e8]
add r9d, r8d
add eax, r9d
cmp eax, 0xd
jl 0x140235990
mov al, 0xd4
xchg byte [0x14051578d], al
lea rax, [0x140515780]
pop rsi
ret
mov al, 0x31
xchg byte [0x1405155c3], al
lea rax, [0x1405155c0]
pop rsi
ret
xor eax, eax
lea rcx, [0x140515660]
lea rdx, [0x14042d7e0]
xor r8d, 0x96325e46
nop word cs:[rax + rax]
movzx r9d, byte [rax + rdx]
xor byte [rax + rcx], r9b
lea r9d, [rax + 1]
mov r10d, dword [0x1405157e8]
add r10d, r8d
cmp r9d, r10d
jge 0x140235a21
inc rax
jmp 0x140235a00
mov al, 0xdc
xchg byte [0x140515673], al
lea rax, [0x140515660]
pop rsi
ret