joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140229620
Capabilities:
Check for software breakpoints

Disassembly:
mov r8d, dword [rsp + 0x28]
test ecx, ecx
je 0x14022968c
mov eax, r8d
xor eax, 0xf4b469cb
add eax, dword [0x140520538]
cmp edx, eax
jne 0x1402296bc
movzx eax, byte [0x14052021d]
movzx ecx, byte [0x140520548]
mov edx, r8d
xor dl, 0xa3
mov r9d, ecx
xor r9b, cl
not r9b
and r9b, dl
xor r9b, cl
and dl, cl
add dl, dl
add dl, r9b
cmp al, dl
je 0x140229684
mov cl, 0x93
nop
mov al, 0xee
lock cmpxchg byte [0x14052021d], cl
je 0x140229793
cmp al, 0xc2
jne 0x140229670
lea rax, [0x140520210]
ret
test edx, edx
je 0x1402296ec
movzx eax, byte [0x140520063]
cmp al, 0xc4
je 0x1402296b4
mov cl, 0x34
nop dword [rax]
mov al, 0xea
lock cmpxchg byte [0x140520063], cl
je 0x140229822
cmp al, 0xc4
jne 0x1402296a0
lea rax, [0x140520060]
ret
movzx eax, byte [0x14052018f]
cmp al, 0xcc
je 0x1402296e4
mov cl, 0x80
nop dword [rax]
mov al, 0xf8
lock cmpxchg byte [0x14052018f], cl
je 0x1402297c8
cmp al, 0xcc
jne 0x1402296d0
lea rax, [0x140520180]
ret
movzx eax, byte [0x14052023d]
nop word cs:[rax + rax]
cmp al, 0xe1
je 0x140229883
movzx ecx, byte [0x140520548]
mov edx, r8d
not dl
mov r9d, edx
and r9b, 0xf9
mov eax, r8d
and al, 6
or al, r9b
add al, 0x51
mov r9d, eax
xor r9b, cl
and al, cl
add al, al
add al, r9b
add al, 0xaf
and dl, 0xf7
mov r9d, r8d
and r9b, 8
or r9b, dl
add r9b, cl
lock cmpxchg byte [0x14052023d], r9b
jne 0x140229700
xor eax, eax
lea rcx, [0x140520230]
lea rdx, [0x140432b50]
nop
movzx r8d, byte [rax + rcx]
movzx r9d, byte [rax + rdx]
not r8b
mov r10d, r8d
and r10b, r9b
or r8b, r9b
not r8b
or r8b, r10b
mov byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x14022987b
inc rax
jmp 0x140229760
xor eax, eax
lea rcx, [0x140520210]
lea rdx, [0x140432b30]
nop word cs:[rax + rax]
movzx r9d, byte [rax + rdx]
xor byte [rax + rcx], r9b
lea r9d, [rax + 1]
cmp r9d, 0xc
jg 0x1402297f8
inc rax
jmp 0x1402297b0
xor eax, eax
lea rcx, [0x140520180]
lea rdx, [0x140432aa0]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xe
jg 0x140229812
inc rax
jmp 0x1402297e0
xor r8b, 0xa3
add r8b, byte [0x140520548]
xchg byte [0x14052021d], r8b
lea rax, [0x140520210]
ret
mov al, 0xcc
xchg byte [0x14052018f], al
lea rax, [0x140520180]
ret
xor eax, eax
lea rcx, [0x140520060]
lea rdx, [0x140432990]
mov r9d, r8d
xor r9d, 0xf4b469ce
nop dword [rax]
movzx r10d, byte [rax + rdx]
xor byte [rax + rcx], r10b
lea r10d, [rax + 1]
mov r11d, dword [0x140520538]
add r11d, r9d
cmp r10d, r11d
jge 0x140229861
inc rax
jmp 0x140229840
xor r8b, 0xa5
add r8b, byte [0x140520548]
xchg byte [0x140520063], r8b
lea rax, [0x140520060]
ret
mov al, 0xe1
xchg byte [0x14052023d], al
lea rax, [0x140520230]
ret
Function at 0x140234f90
Capabilities:
Encode data using xor

Disassembly:
push rsi
mov r8d, dword [rsp + 0x30]
test ecx, ecx
je 0x14023502c
test edx, edx
je 0x140235083
movzx eax, byte [0x140521c82]
nop dword [rax]
cmp al, 0x4a
je 0x140235129
movzx ecx, byte [0x14052260c]
mov edx, r8d
not dl
mov eax, r8d
xor al, 0x1b
and dl, 0xe4
or al, dl
not al
or al, dl
add al, cl
mov edx, r8d
xor dl, 0x31
mov r9d, edx
xor r9b, cl
and dl, cl
add dl, dl
add dl, r9b
lock cmpxchg byte [0x140521c82], dl
jne 0x140234fb0
xor eax, eax
lea rcx, [0x140521c70]
lea rdx, [0x1404334e0]
nop word cs:[rax + rax]
movzx r9d, byte [rax + rdx]
xor byte [rax + rcx], r9b
lea r9d, [rax + 1]
cmp r9d, 0x11
jg 0x140235109
inc rax
jmp 0x140235010
mov eax, r8d
xor eax, 0x48757b9d
add eax, dword [0x140522608]
cmp edx, eax
jne 0x1402350b9
movzx eax, byte [0x140521cff]
cmp al, 0x5e
je 0x14023523d
mov cl, 0xc9
nop
mov al, 0xd1
lock cmpxchg byte [0x140521cff], cl
je 0x1402351b2
mov edx, r8d
xor dl, 0x9e
mov r9d, r8d
not r9b
and r9b, r8b
xor r9b, dl
add r9b, byte [0x14052260c]
cmp al, r9b
jne 0x140235050
jmp 0x14023523d
movzx eax, byte [0x140521d4d]
cmp al, 3
je 0x1402351a9
mov cl, 0xbe
nop word cs:[rax + rax]
mov al, 0xfb
lock cmpxchg byte [0x140521d4d], cl
je 0x140235132
cmp al, 3
jne 0x1402350a0
jmp 0x1402351a9
movzx eax, byte [0x140521e8d]
movzx ecx, byte [0x14052260c]
xor r8b, cl
mov edx, r8d
xor dl, 0x41
xor r8b, 0x3e
and r8b, cl
add r8b, r8b
add r8b, dl
cmp al, r8b
je 0x14023524e
mov cl, 0xbd
nop dword [rax + rax]
mov al, 0xe3
lock cmpxchg byte [0x140521e8d], cl
je 0x1402351e8
cmp al, 0x23
jne 0x1402350f0
jmp 0x14023524e
movzx eax, byte [0x14052260c]
xor r8b, 0x6a
mov ecx, r8d
xor cl, al
and r8b, al
add r8b, r8b
add r8b, cl
xchg byte [0x140521c82], r8b
lea rax, [0x140521c70]
pop rsi
ret
xor edx, edx
lea rax, [0x140521d40]
lea rcx, [0x1404335a0]
mov r9d, r8d
xor r9d, 0x8107088
mov r10d, r8d
xor r10d, 0xd7678f34
and r9d, 0x1f12f4a8
lea r9d, [r10 + r9*2]
mov r10d, r8d
xor r10d, 0x48757b88
nop dword [rax + rax]
movsxd rdx, edx
movzx r11d, byte [rdx + rcx]
xor byte [rdx + rax], r11b
mov r11d, dword [0x140522608]
lea esi, [r9 + r11]
add edx, esi
add edx, 0x60ed0b58
add r11d, r10d
cmp edx, r11d
jl 0x140235170
xor r8b, 0x21
add r8b, byte [0x14052260c]
xchg byte [0x140521d4d], r8b
lea rax, [0x140521d40]
pop rsi
ret
xor eax, eax
lea rcx, [0x140521cf0]
lea rdx, [0x140433550]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xe
jg 0x140235235
inc rax
jmp 0x1402351d0
xor eax, eax
lea rcx, [0x140521e80]
lea rdx, [0x1404336e0]
nop dword [rax + rax]
movzx r8d, byte [rax + rcx]
movzx r9d, byte [rax + rdx]
mov r10d, r9d
xor r10b, r9b
not r10b
and r10b, r8b
xor r10b, r9b
and r8b, r9b
add r8b, r8b
add r8b, r10b
mov byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x140235246
inc rax
jmp 0x140235200
mov al, 0x5e
xchg byte [0x140521cff], al
lea rax, [0x140521cf0]
pop rsi
ret
mov al, 0x23
xchg byte [0x140521e8d], al
lea rax, [0x140521e80]
pop rsi
ret
Function at 0x1402386c0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rcx
movzx r15d, byte [0x14056450c]
lea rdi, [rcx + 8]
test rdx, rdx
lea rbx, [0x1404273f8]
cmovne rbx, rdx
mov qword [rcx + 0x18], 0
mov qword [rcx + 0x20], 0xf
mov byte [rcx + 8], 0
mov eax, dword [0x140523480]
or eax, r15d
add eax, 0xffff29fb
cdqe
add rax, qword [0x140523498]
mov rcx, rbx
mov edx, 0x7853c7eb
mov r8d, 0x3b6622
call qword [0x1404ee420]
mov r14, rax
cmp rax, 0xf
jbe 0x14023875f
mov eax, dword [0x140523484]
neg r15d
add eax, r15d
add eax, 0xffff29fb
cdqe
add rax, qword [0x140523490]
mov rcx, rdi
mov rdx, r14
mov r9, rbx
call qword [0x1404ee420]
jmp 0x1402387fc
mov ecx, dword [0x1405651a0]
mov r8d, dword [0x140524840]
mov eax, ecx
sub eax, r8d
add eax, 0x980c9030
imul eax, ecx
lea ecx, [r8 + 0x67f36fd1]
xor edx, edx
div ecx
add r8d, 0x67f36fcf
cmp edx, r8d
jne 0x1402387b9
mov qword [rsi + 0x18], r14
mov rcx, rdi
mov rdx, rbx
mov r8, r14
call fcn.14040bf30
mov byte [rsi + r14 + 8], 0
mov eax, dword [0x1405651a0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
je 0x1402387fc
mov ebp, 0x67f36fd0
lea rax, [fcn.1402386c0]
lea r15d, [rax + rax]
add r15d, 0x4780
mov qword [rsi + 0x18], r14
mov rcx, rdi
mov rdx, rbx
mov r8, r14
call fcn.14040bf30
mov byte [rsi + r14 + 8], 0
mov eax, dword [0x140524840]
add eax, ebp
xor eax, r15d
not eax
test eax, r15d
jne 0x1402387d0
jmp 0x140238790
lea rax, [0x140428958]
mov qword [rsi], rax
mov rax, rsi
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
pop r15
ret
Function at 0x14024ddb0
Capabilities:
Encode data using xor

Disassembly:
mov r8d, dword [rsp + 0x28]
test ecx, ecx
je 0x14024de2a
mov eax, r8d
xor eax, 0x546ab39c
add eax, dword [0x140526760]
cmp edx, eax
jne 0x14024de5c
movzx eax, byte [0x140525acf]
cmp al, 0xd7
je 0x14024de22
mov cl, 0x22
nop dword [rax]
mov al, 0x91
lock cmpxchg byte [0x140525acf], cl
je 0x14024decc
movzx edx, byte [0x140526764]
mov r9d, r8d
xor r9b, dl
mov r10d, r9d
xor r10b, 0x47
xor r9b, 0x38
and r9b, dl
add r9b, r9b
mov edx, r10d
xor dl, r9b
and r9b, r10b
add r9b, r9b
add r9b, dl
cmp al, r9b
jne 0x14024dde0
lea rax, [0x140525ac0]
ret
test edx, edx
je 0x14024de9c
movzx eax, byte [0x140525a16]
cmp al, 0x51
je 0x14024de54
mov cl, 0xb9
nop dword [rax + rax]
mov al, 0x94
lock cmpxchg byte [0x140525a16], cl
je 0x14024df78
cmp al, 0x51
jne 0x14024de40
lea rax, [0x140525a00]
ret
movzx eax, byte [0x1405259f5]
xor r8b, 3
add r8b, byte [0x140526764]
cmp al, r8b
je 0x14024de94
mov cl, 0x50
nop word cs:[rax + rax]
mov al, 0xfc
lock cmpxchg byte [0x1405259f5], cl
je 0x14024df3c
cmp al, 0x13
jne 0x14024de80
lea rax, [0x1405259e0]
ret
movzx eax, byte [0x1405259c8]
cmp al, 0x83
je 0x14024dec4
mov cl, 0x57
nop dword [rax]
mov al, 0xb9
lock cmpxchg byte [0x1405259c8], cl
je 0x14024dfc8
cmp al, 0x83
jne 0x14024deb0
lea rax, [0x1405259b0]
ret
xor edx, edx
lea rax, [0x140525ac0]
lea rcx, [0x1404341b0]
nop dword [rax]
movsxd rdx, edx
movzx r9d, byte [rdx + rax]
movzx r10d, byte [rdx + rcx]
not r10b
mov r11d, r10d
or r11b, r9b
not r11b
and r10b, r9b
or r10b, r11b
mov byte [rdx + rax], r10b
add edx, 0x1f7afaa8
mov r9d, edx
xor r9d, 1
and edx, 1
lea edx, [r9 + rdx*2]
add edx, 0xe0850558
cmp edx, 0xf
jl 0x14024dee0
xor r8b, 0x47
add r8b, byte [0x140526764]
xchg byte [0x140525acf], r8b
lea rax, [0x140525ac0]
ret
xor eax, eax
lea rcx, [0x1405259e0]
lea rdx, [0x1404340d0]
nop dword [rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x14
jg 0x14024df68
inc rax
jmp 0x14024df50
mov al, 0x13
xchg byte [0x1405259f5], al
lea rax, [0x1405259e0]
ret
xor eax, eax
lea rcx, [0x140525a00]
lea rdx, [0x1404340f0]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rax + rcx]
xor r9b, r8b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
cmp r8d, 0x15
jg 0x14024dfb8
inc rax
jmp 0x14024df90
mov al, 0x51
xchg byte [0x140525a16], al
lea rax, [0x140525a00]
ret
xor edx, edx
lea rax, [0x1405259b0]
lea rcx, [0x1404340a0]
nop dword [rax + rax]
movsxd rdx, edx
movzx r9d, byte [rdx + rax]
movzx r10d, byte [rdx + rcx]
not r9b
not r10b
mov r11d, r9d
xor r11b, r10b
or r10b, r9b
and r10b, r11b
mov byte [rdx + rax], r10b
mov r9d, edx
xor r9d, 1
not edx
and edx, 0x7ffffffe
or edx, r9d
not edx
lea edx, [r9 + rdx*2]
cmp edx, 0x18
jl 0x14024dfe0
movzx eax, byte [0x140526764]
xor r8b, 0xb3
mov ecx, eax
xor cl, al
not cl
and cl, r8b
xor cl, al
and r8b, al
add r8b, r8b
add r8b, cl
xchg byte [0x1405259c8], r8b
lea rax, [0x1405259b0]
ret
Function at 0x140259af0
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x140259b2c
test edx, edx
je 0x140259b5c
movzx eax, byte [0x140527745]
cmp al, 0x84
je 0x140259b24
mov cl, 0x16
nop word cs:[rax + rax]
mov al, 0xf1
lock cmpxchg byte [0x140527745], cl
je 0x140259bbc
cmp al, 0x84
jne 0x140259b10
lea rax, [0x140527730]
ret
test edx, edx
je 0x140259b8c
movzx eax, byte [0x1405277c6]
cmp al, 0x92
je 0x140259b54
mov cl, 0x43
nop dword [rax]
mov al, 0x68
lock cmpxchg byte [0x1405277c6], cl
je 0x140259bf8
cmp al, 0x92
jne 0x140259b40
lea rax, [0x1405277c0]
ret
movzx eax, byte [0x14052793d]
cmp al, 0x72
je 0x140259b84
mov cl, 0x22
nop dword [rax]
mov al, 0x1c
lock cmpxchg byte [0x14052793d], cl
je 0x140259c65
cmp al, 0x72
jne 0x140259b70
lea rax, [0x140527930]
ret
movzx eax, byte [0x14052799d]
cmp al, 0xc7
je 0x140259bb4
mov cl, 0x11
nop dword [rax]
mov al, 0x8f
lock cmpxchg byte [0x14052799d], cl
je 0x140259ca8
cmp al, 0xc7
jne 0x140259ba0
lea rax, [0x140527990]
ret
xor eax, eax
lea rcx, [0x140527730]
lea rdx, [0x140434620]
nop dword [rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x14
jg 0x140259be8
inc rax
jmp 0x140259bd0
mov al, 0x84
xchg byte [0x140527745], al
lea rax, [0x140527730]
ret
xor edx, edx
lea rax, [0x1405277c0]
lea rcx, [0x140434690]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rax]
movzx r9d, byte [rdx + rcx]
mov r10d, r8d
not r10b
mov r11d, r10d
xor r11b, r9b
not r9b
and r8b, r9b
or r8b, r11b
not r8b
xor r10b, r9b
and r10b, r9b
or r10b, r8b
mov byte [rdx + rax], r10b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 6
jl 0x140259c10
mov al, 0x92
xchg byte [0x1405277c6], al
lea rax, [0x1405277c0]
ret
xor eax, eax
lea rcx, [0x140527930]
lea rdx, [0x140434800]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x140259c98
inc rax
jmp 0x140259c80
mov al, 0x72
xchg byte [0x14052793d], al
lea rax, [0x140527930]
ret
xor eax, eax
lea rcx, [0x140527990]
lea rdx, [0x140434860]
nop dword [rax + rax]
cdqe
movzx r8d, byte [rax + rcx]
movzx r9d, byte [rax + rdx]
add r8b, 0x79
mov r10d, r8d
xor r10b, r9b
and r8b, r9b
add r8b, r8b
add r8b, r10b
add r8b, 0x87
mov byte [rax + rcx], r8b
mov r8d, dword [0x1405286fc]
mov r9d, r8d
xor r9d, 0x6f361480
and r8d, 0x6f361480
add r8d, r8d
mov r10d, r9d
xor r10d, r8d
and r8d, r9d
lea r8d, [r10 + r8*2]
add eax, r8d
cmp eax, 0xd
jl 0x140259cc0
mov al, 0xc7
xchg byte [0x14052799d], al
lea rax, [0x140527990]
ret
Function at 0x14025a510
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x14025a54c
test edx, edx
je 0x14025a586
movzx eax, byte [0x1405276c2]
movzx ecx, byte [0x1405286f8]
add cl, 0x14
cmp al, cl
je 0x14025a544
mov cl, 0x79
nop
mov al, 0x47
lock cmpxchg byte [0x1405276c2], cl
je 0x14025a5ec
cmp al, 0xae
jne 0x14025a530
lea rax, [0x1405276c0]
ret
test edx, edx
je 0x14025a5bc
movzx eax, byte [0x140527722]
cmp al, 0xfa
je 0x14025a57e
mov cl, 0xbd
nop dword [rax]
mov al, 0x33
lock cmpxchg byte [0x140527722], cl
je 0x14025a639
movzx edx, byte [0x1405286f8]
add dl, 0x60
cmp al, dl
jne 0x14025a560
lea rax, [0x140527720]
ret
movzx eax, byte [0x1405278a3]
cmp al, 0x6a
je 0x14025a5b4
mov cl, 0xfa
nop word cs:[rax + rax]
mov al, 0xdd
lock cmpxchg byte [0x1405278a3], cl
je 0x14025a678
cmp al, 0x6a
jne 0x14025a5a0
lea rax, [0x1405278a0]
ret
movzx eax, byte [0x140527896]
cmp al, 0xe7
je 0x14025a5e4
mov cl, 0xfe
nop dword [rax]
mov al, 0x47
lock cmpxchg byte [0x140527896], cl
je 0x14025a6d1
cmp al, 0xe7
jne 0x14025a5d0
lea rax, [0x140527880]
ret
xor edx, edx
lea rax, [0x1405276c0]
lea rcx, [0x1404345c0]
nop dword [rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
not edx
and edx, 0x7ffffffe
or edx, r8d
not edx
lea edx, [r8 + rdx*2]
cmp edx, 2
jl 0x14025a600
mov al, 0xae
xchg byte [0x1405276c2], al
lea rax, [0x1405276c0]
ret
xor eax, eax
lea rcx, [0x140527720]
lea rdx, [0x140434610]
nop dword [rax]
movzx r8d, byte [rax + rdx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rax + rcx]
xor r9b, r8b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
cmp r8d, 1
jg 0x14025a6c1
inc rax
jmp 0x14025a650
xor edx, edx
lea rax, [0x1405278a0]
lea rcx, [0x140434770]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, dword [0x1405286fc]
add edx, r8d
add edx, 0x6f361480
cmp edx, 3
jl 0x14025a690
mov al, 0x6a
xchg byte [0x1405278a3], al
lea rax, [0x1405278a0]
ret
mov al, 0xfa
xchg byte [0x140527722], al
lea rax, [0x140527720]
ret
xor eax, eax
lea rcx, [0x140527880]
lea rdx, [0x140434750]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x15
jg 0x14025a708
inc rax
jmp 0x14025a6f0
mov al, 0xe7
xchg byte [0x140527896], al
lea rax, [0x140527880]
ret
Function at 0x14025b390
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x14025b3cc
test edx, edx
je 0x14025b40c
movzx eax, byte [0x140527709]
cmp al, 0x64
je 0x14025b3c4
mov cl, 0xe
nop word cs:[rax + rax]
mov al, 0x62
lock cmpxchg byte [0x140527709], cl
je 0x14025b49c
cmp al, 0x64
jne 0x14025b3b0
lea rax, [0x140527700]
ret
test edx, edx
je 0x14025b464
movzx eax, byte [0x14052796d]
cmp al, 0x60
je 0x14025b404
mov cl, 0x5a
nop word cs:[rax + rax]
mov al, 0xc1
lock cmpxchg byte [0x14052796d], cl
je 0x14025b4d8
cmp al, 0x60
jne 0x14025b3f0
lea rax, [0x140527960]
ret
movzx eax, byte [0x1405276f0]
movzx ecx, byte [0x1405286f8]
mov edx, ecx
xor dl, 0xc4
not cl
and cl, 0x3b
or cl, dl
not cl
add cl, cl
add cl, dl
cmp al, cl
je 0x14025b45c
movzx ecx, byte [0x1405286f8]
lea eax, [rcx - 0x75]
neg cl
mov edx, ecx
xor dl, 0xd8
and cl, 0x58
add cl, cl
add cl, dl
neg cl
lock cmpxchg byte [0x1405276f0], cl
je 0x14025b529
cmp al, 0x5e
jne 0x14025b430
lea rax, [0x1405276e0]
ret
movzx eax, byte [0x1405277d5]
cmp al, 0x28
je 0x14025b494
mov cl, 0x66
nop word cs:[rax + rax]
mov al, 0xa2
lock cmpxchg byte [0x1405277d5], cl
je 0x14025b578
cmp al, 0x28
jne 0x14025b480
lea rax, [0x1405277d0]
ret
xor eax, eax
lea rcx, [0x140527700]
lea rdx, [0x1404345f0]
nop dword [rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 8
jg 0x14025b4c8
inc rax
jmp 0x14025b4b0
mov al, 0x64
xchg byte [0x140527709], al
lea rax, [0x140527700]
ret
xor edx, edx
lea rax, [0x140527960]
lea rcx, [0x140434830]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
xor byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
not edx
and edx, 0x7ffffffe
or edx, r8d
not edx
lea edx, [r8 + rdx*2]
cmp edx, 0xd
jl 0x14025b4f0
mov al, 0x60
xchg byte [0x14052796d], al
lea rax, [0x140527960]
ret
xor eax, eax
lea rcx, [0x1405276e0]
lea rdx, [0x1404345e0]
nop dword [rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xf
jg 0x14025b558
inc rax
jmp 0x14025b540
movzx eax, byte [0x1405286f8]
mov ecx, eax
xor cl, 0xc4
and al, 0x44
add al, al
add al, cl
xchg byte [0x1405276f0], al
lea rax, [0x1405276e0]
ret
xor eax, eax
lea rcx, [0x1405277d0]
lea rdx, [0x1404346a0]
nop dword [rax + rax]
movzx r8d, byte [rax + rcx]
movzx r9d, byte [rax + rdx]
mov r10d, r8d
xor r10b, r9b
not r8b
not r9b
and r9b, r8b
or r9b, r10b
not r9b
add r9b, r9b
add r9b, r10b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
cmp r8d, 4
jg 0x14025b5c8
inc rax
jmp 0x14025b590
movzx eax, byte [0x1405286f8]
add al, 0x8e
xchg byte [0x1405277d5], al
lea rax, [0x1405277d0]
ret
Function at 0x14025bc30
Capabilities:
Encode data using xor

Disassembly:
mov r8d, dword [rsp + 0x28]
test ecx, ecx
je 0x14025bc6c
test edx, edx
je 0x14025bc9c
movzx eax, byte [0x140527762]
cmp al, 0x45
je 0x14025bc64
mov cl, 0x86
nop word [rax + rax]
mov al, 0x6b
lock cmpxchg byte [0x140527762], cl
je 0x14025bd0c
cmp al, 0x45
jne 0x14025bc50
lea rax, [0x140527750]
ret
test edx, edx
je 0x14025bcd8
movzx eax, byte [0x140527612]
cmp al, 0x17
je 0x14025bc94
mov cl, 0x33
nop dword [rax]
mov al, 0x71
lock cmpxchg byte [0x140527612], cl
je 0x14025bd58
cmp al, 0x17
jne 0x14025bc80
lea rax, [0x140527610]
ret
movzx eax, byte [0x140527825]
cmp al, 0x39
je 0x14025bcd0
mov cl, 0x64
nop dword [rax]
mov al, 0x37
lock cmpxchg byte [0x140527825], cl
je 0x14025bd88
mov edx, r8d
xor dl, 0xf2
add dl, byte [0x1405286f8]
cmp al, dl
jne 0x14025bcb0
lea rax, [0x140527810]
ret
movzx eax, byte [0x1405276d8]
cmp al, 0xde
je 0x14025bd04
mov cl, 0x66
nop word cs:[rax + rax]
mov al, 0x89
lock cmpxchg byte [0x1405276d8], cl
je 0x14025bdd8
cmp al, 0xde
jne 0x14025bcf0
lea rax, [0x1405276d0]
ret
xor eax, eax
lea rcx, [0x140527750]
lea rdx, [0x140434640]
nop dword [rax]
movzx r8d, byte [rax + rdx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rax + rcx]
xor r9b, r8b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
cmp r8d, 0x11
jg 0x14025bd48
inc rax
jmp 0x14025bd20
mov al, 0x45
xchg byte [0x140527762], al
lea rax, [0x140527750]
ret
xor eax, eax
lea rcx, [0x140527610]
lea rdx, [0x140434530]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 1
jg 0x14025bdb8
inc rax
jmp 0x14025bd70
xor eax, eax
lea rcx, [0x140527810]
lea rdx, [0x1404346e0]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x14
jg 0x14025bdc8
inc rax
jmp 0x14025bda0
mov al, 0x17
xchg byte [0x140527612], al
lea rax, [0x140527610]
ret
mov al, 0x39
xchg byte [0x140527825], al
lea rax, [0x140527810]
ret
xor eax, eax
lea rcx, [0x1405276d0]
lea rdx, [0x1404345d0]
mov r9d, r8d
xor r9d, 0x78dac8ed
xor r8d, 0x78dac8ea
nop dword [rax]
cdqe
movzx r10d, byte [rax + rdx]
mov r11d, r10d
xor r11b, r10b
not r11b
and r11b, byte [rax + rcx]
xor r11b, r10b
mov byte [rax + rcx], r11b
mov r10d, dword [0x1405286fc]
add eax, r9d
add eax, r10d
add r10d, r8d
cmp eax, r10d
jl 0x14025be00
mov al, 0xde
xchg byte [0x1405276d8], al
lea rax, [0x1405276d0]
ret
Function at 0x1402703d0
Capabilities:
Check http status code
Encrypt data using rc4 prga

Disassembly:
test ecx, ecx
je 0x14027040c
test edx, edx
je 0x14027043c
movzx eax, byte [0x14052b843]
cmp al, 0x6d
je 0x140270404
mov cl, 0xa8
nop word cs:[rax + rax]
mov al, 0xc4
lock cmpxchg byte [0x14052b843], cl
je 0x14027049c
cmp al, 0x6d
jne 0x1402703f0
lea rax, [0x14052b840]
ret
test edx, edx
je 0x14027046c
movzx eax, byte [0x14052b7b6]
cmp al, 0x95
je 0x140270434
mov cl, 0xfd
nop dword [rax]
mov al, 0xdf
lock cmpxchg byte [0x14052b7b6], cl
je 0x1402704ef
cmp al, 0x95
jne 0x140270420
lea rax, [0x14052b7a0]
ret
movzx eax, byte [0x14052b6d3]
cmp al, 0xcd
je 0x140270464
mov cl, 0xe5
nop dword [rax]
mov al, 0x42
lock cmpxchg byte [0x14052b6d3], cl
je 0x140270518
cmp al, 0xcd
jne 0x140270450
lea rax, [0x14052b6d0]
ret
movzx eax, byte [0x14052b6f4]
cmp al, 0xc8
je 0x140270494
mov cl, 0x5f
nop dword [rax]
mov al, 0x25
lock cmpxchg byte [0x14052b6f4], cl
je 0x14027056f
cmp al, 0xc8
jne 0x140270480
lea rax, [0x14052b6e0]
ret
xor eax, eax
lea rcx, [0x14052b840]
lea rdx, [0x140435780]
nop dword [rax]
movzx r8d, byte [rax + rcx]
movzx r9d, byte [rax + rdx]
not r9b
mov r10d, r9d
or r10b, r8b
not r10b
and r9b, r8b
or r9b, r10b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
cmp r8d, 2
jg 0x1402704df
inc rax
jmp 0x1402704b0
mov al, 0x6d
xchg byte [0x14052b843], al
lea rax, [0x14052b840]
ret
xor eax, eax
lea rcx, [0x14052b7a0]
lea rdx, [0x1404356f0]
nop
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x15
jg 0x140270548
inc rax
jmp 0x140270500
xor eax, eax
lea rcx, [0x14052b6d0]
lea rdx, [0x140435630]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 2
jg 0x14027055f
inc rax
jmp 0x140270530
movzx eax, byte [0x14052c3f4]
add al, 0x56
xchg byte [0x14052b7b6], al
lea rax, [0x14052b7a0]
ret
mov al, 0xcd
xchg byte [0x14052b6d3], al
lea rax, [0x14052b6d0]
ret
xor eax, eax
lea rcx, [0x14052b6e0]
lea rdx, [0x140435640]
nop
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x13
jg 0x140270598
inc rax
jmp 0x140270580
mov al, 0xc8
xchg byte [0x14052b6f4], al
lea rax, [0x14052b6e0]
ret