joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140145d90
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x140145ddc
mov eax, dword [0x140500800]
mov ecx, eax
xor ecx, 0x6c45f968
and eax, 0x6c45f968
lea eax, [rcx + rax*2]
cmp edx, eax
jne 0x140145e1c
movzx eax, byte [0x1404ffd4d]
cmp al, 0x9e
je 0x140145dd4
mov cl, 0x7d
nop dword [rax + rax]
mov al, 0xf8
lock cmpxchg byte [0x1404ffd4d], cl
je 0x140145e86
cmp al, 0x9e
jne 0x140145dc0
lea rax, [0x1404ffd40]
ret
test edx, edx
je 0x140145e4c
movzx eax, byte [0x1404ffa95]
movzx ecx, byte [0x140500804]
add cl, 0x7b
cmp al, cl
je 0x140145e14
mov cl, 0x1e
nop word [rax + rax]
mov al, 0xdf
lock cmpxchg byte [0x1404ffa95], cl
je 0x140145f18
cmp al, 0x17
jne 0x140145e00
lea rax, [0x1404ffa80]
ret
movzx eax, byte [0x1404ffccd]
cmp al, 0xdc
je 0x140145e44
mov cl, 0x34
nop dword [rax]
mov al, 0x73
lock cmpxchg byte [0x1404ffccd], cl
je 0x140145edf
cmp al, 0xdc
jne 0x140145e30
lea rax, [0x1404ffcc0]
ret
movzx eax, byte [0x1404ffc30]
cmp al, 0x59
je 0x140145e7e
mov cl, 0xbd
nop dword [rax]
mov al, 0xe3
lock cmpxchg byte [0x1404ffc30], cl
je 0x140145f75
movzx edx, byte [0x140500804]
add dl, 0xbd
cmp al, dl
jne 0x140145e60
lea rax, [0x1404ffc20]
ret
xor edx, edx
lea rax, [0x1404ffd40]
lea rcx, [0x14042bc60]
nop word cs:[rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rdx + rax]
xor r9b, r8b
mov byte [rdx + rax], r9b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 0xd
jl 0x140145ea0
mov al, 0x9e
xchg byte [0x1404ffd4d], al
lea rax, [0x1404ffd40]
ret
xor eax, eax
lea rcx, [0x1404ffcc0]
lea rdx, [0x14042bbe0]
nop
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x140145f08
inc rax
jmp 0x140145ef0
mov al, 0xdc
xchg byte [0x1404ffccd], al
lea rax, [0x1404ffcc0]
ret
xor eax, eax
lea rcx, [0x1404ffa80]
lea rdx, [0x14042b9d0]
nop dword [rax + rax]
movzx r8d, byte [rax + rcx]
movzx r9d, byte [rax + rdx]
mov r10d, r8d
not r10b
mov r11d, r9d
xor r11b, r10b
and r10b, r9b
not r11b
and r11b, r8b
or r11b, r10b
mov byte [rax + rcx], r11b
lea r8d, [rax + 1]
cmp r8d, 0x14
jg 0x140145f65
inc rax
jmp 0x140145f30
mov al, 0x17
xchg byte [0x1404ffa95], al
lea rax, [0x1404ffa80]
ret
xor eax, eax
lea rcx, [0x1404ffc20]
lea rdx, [0x14042bb50]
mov r8d, 0x6c45f978
nop dword [rax + rax]
movzx r9d, byte [rax + rcx]
movzx r10d, byte [rax + rdx]
mov r11d, r9d
xor r11b, r10b
and r9b, r10b
add r9b, r9b
add r9b, r11b
mov byte [rax + rcx], r9b
lea r9d, [rax + 1]
mov r10d, dword [0x140500800]
add r10d, r8d
cmp r9d, r10d
jge 0x140145fc5
inc rax
jmp 0x140145f90
mov al, 0x59
xchg byte [0x1404ffc30], al
lea rax, [0x1404ffc20]
ret
Function at 0x1401462f0
Capabilities:
Encode data using xor

Disassembly:
mov r8d, dword [rsp + 0x28]
test ecx, ecx
je 0x14014635a
test edx, edx
je 0x14014639c
movzx eax, byte [0x1404ffced]
mov ecx, r8d
xor cl, 0x72
add cl, byte [0x140500804]
cmp al, cl
je 0x140146352
mov cl, 0x35
nop word [rax + rax]
mov al, 7
lock cmpxchg byte [0x1404ffced], cl
je 0x1401463fc
mov edx, r8d
xor dl, 0x72
add dl, byte [0x140500804]
add dl, 0x75
mov r9d, edx
xor r9b, 0x8b
and dl, 0xb
add dl, dl
add dl, r9b
cmp al, dl
jne 0x140146320
lea rax, [0x1404ffce0]
ret
mov eax, r8d
xor eax, 0x8255f494
add eax, dword [0x140500800]
cmp edx, eax
jne 0x1401463cc
movzx eax, byte [0x1404ffcaf]
cmp al, 0x3d
je 0x140146394
mov cl, 0x90
nop dword [rax]
mov al, 0xf2
lock cmpxchg byte [0x1404ffcaf], cl
je 0x1401464ad
cmp al, 0x3d
jne 0x140146380
lea rax, [0x1404ffca0]
ret
movzx eax, byte [0x1404ffd25]
cmp al, 0xe
je 0x1401463c4
mov cl, 4
nop dword [rax]
mov al, 0x1b
lock cmpxchg byte [0x1404ffd25], cl
je 0x140146452
cmp al, 0xe
jne 0x1401463b0
lea rax, [0x1404ffd10]
ret
movzx eax, byte [0x1404ffbb0]
cmp al, 0x7a
je 0x1401463f4
mov cl, 0xac
nop dword [rax]
mov al, 0x81
lock cmpxchg byte [0x1404ffbb0], cl
je 0x140146529
cmp al, 0x7a
jne 0x1401463e0
lea rax, [0x1404ffba0]
ret
xor eax, eax
lea rcx, [0x1404ffce0]
lea rdx, [0x14042bc00]
nop dword [rax]
movzx r9d, byte [rax + rdx]
mov r10d, r9d
xor r10b, r9b
not r10b
and r10b, byte [rax + rcx]
xor r10b, r9b
mov byte [rax + rcx], r10b
lea r9d, [rax + 1]
cmp r9d, 0xc
jg 0x140146438
inc rax
jmp 0x140146410
xor r8b, 0x72
add r8b, byte [0x140500804]
xchg byte [0x1404ffced], r8b
lea rax, [0x1404ffce0]
ret
xor eax, eax
lea rcx, [0x1404ffd10]
lea rdx, [0x14042bc30]
xor r8d, 0x8255f495
nop dword [rax]
cdqe
movzx r9d, byte [rax + rdx]
mov r10d, r9d
xor r10b, r9b
not r10b
and r10b, byte [rax + rcx]
xor r10b, r9b
mov byte [rax + rcx], r10b
mov r9d, dword [0x140500800]
add r9d, r8d
add eax, r9d
cmp eax, 0x15
jl 0x140146470
mov al, 0xe
xchg byte [0x1404ffd25], al
lea rax, [0x1404ffd10]
ret
xor edx, edx
lea rax, [0x1404ffca0]
lea rcx, [0x14042bbc0]
nop dword [rax]
movsxd rdx, edx
movzx r9d, byte [rdx + rcx]
mov r10d, r9d
xor r10b, r9b
not r10b
and r10b, byte [rdx + rax]
xor r10b, r9b
mov byte [rdx + rax], r10b
add edx, 0x6602dab7
mov r9d, edx
xor r9d, 0x99fd254a
and edx, 0x19fd254a
lea edx, [r9 + rdx*2]
cmp edx, 0xf
jl 0x1401464c0
mov eax, r8d
not al
mov ecx, r8d
xor cl, 0x5d
and cl, al
xor r8b, 0xa2
and al, 0x5d
or al, r8b
not al
or al, cl
add al, byte [0x140500804]
xchg byte [0x1404ffcaf], al
lea rax, [0x1404ffca0]
ret
xor eax, eax
lea rcx, [0x1404ffba0]
lea rdx, [0x14042bae0]
nop dword [rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xf
jg 0x140146558
inc rax
jmp 0x140146540
mov al, 0x7a
xchg byte [0x1404ffbb0], al
lea rax, [0x1404ffba0]
ret
Function at 0x140173b80
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x140173bc6
test edx, edx
je 0x140173c0c
movzx eax, byte [0x14050603f]
cmp al, 0x30
je 0x140173bbe
mov cl, 0xe
nop dword [rax]
mov al, 0x9a
lock cmpxchg byte [0x14050603f], cl
je 0x140173c91
movzx edx, byte [0x140506094]
add dl, 0xaf
cmp al, dl
jne 0x140173ba0
lea rax, [0x140506030]
ret
mov eax, 0x57d5a9e5
add eax, dword [0x140506090]
cmp edx, eax
jne 0x140173c3c
movzx eax, byte [0x140506062]
movzx ecx, byte [0x140506094]
add cl, 0x2d
cmp al, cl
je 0x140173c04
mov cl, 8
nop dword [rax]
mov al, 0x36
lock cmpxchg byte [0x140506062], cl
je 0x140173d28
cmp al, 0xae
jne 0x140173bf0
lea rax, [0x140506050]
ret
movzx eax, byte [0x140505f22]
cmp al, 0x51
je 0x140173c34
mov cl, 0x92
nop dword [rax]
mov al, 0xad
lock cmpxchg byte [0x140505f22], cl
je 0x140173ce1
cmp al, 0x51
jne 0x140173c20
lea rax, [0x140505f10]
ret
movzx eax, byte [0x140506015]
movzx ecx, byte [0x140506094]
add cl, 0xdc
cmp al, cl
je 0x140173c89
nop word cs:[rax + rax]
movzx ecx, byte [0x140506094]
mov edx, ecx
xor dl, 0xca
mov eax, ecx
and al, 0x4a
add al, al
add al, dl
add cl, 0xe4
lock cmpxchg byte [0x140506015], cl
je 0x140173d61
cmp al, 0x5d
jne 0x140173c60
lea rax, [0x140506000]
ret
xor edx, edx
lea rax, [0x140506030]
lea rcx, [0x14042c6f0]
nop word cs:[rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
xor byte [rdx + rax], r8b
mov r8d, dword [0x140506090]
add edx, r8d
add edx, 0x57d5a9e6
cmp edx, 0xf
jl 0x140173cb0
mov al, 0x30
xchg byte [0x14050603f], al
lea rax, [0x140506030]
ret
xor eax, eax
lea rcx, [0x140505f10]
lea rdx, [0x14042c5d0]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x11
jg 0x140173d18
inc rax
jmp 0x140173d00
mov al, 0x51
xchg byte [0x140505f22], al
lea rax, [0x140505f10]
ret
xor eax, eax
lea rcx, [0x140506050]
lea rdx, [0x14042c710]
mov r8d, 0x57d5a9f7
nop
movzx r9d, byte [rax + rdx]
add byte [rax + rcx], r9b
lea r9d, [rax + 1]
mov r10d, dword [0x140506090]
add r10d, r8d
cmp r9d, r10d
jge 0x140173db1
inc rax
jmp 0x140173d40
xor edx, edx
lea rax, [0x140506000]
lea rcx, [0x14042c6c0]
nop word cs:[rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, dword [0x140506090]
add edx, r8d
add edx, 0x57d5a9e6
cmp edx, 0x15
jl 0x140173d80
mov al, 0x5d
xchg byte [0x140506015], al
lea rax, [0x140506000]
ret
mov al, 0xae
xchg byte [0x140506062], al
lea rax, [0x140506050]
ret
Function at 0x140174250
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x1401742bb
mov ecx, dword [rsp + 0x28]
mov eax, ecx
xor eax, 0xa748c898
add eax, dword [0x140506090]
cmp edx, eax
jne 0x1401742ec
movzx eax, byte [0x140505f3e]
cmp al, 0xdb
je 0x1401742b3
mov dl, 0x4e
nop word [rax + rax]
mov al, 0xb5
lock cmpxchg byte [0x140505f3e], dl
je 0x14017435c
movzx r8d, byte [0x140506094]
mov r9d, ecx
xor r9b, 0x27
mov r10d, r9d
xor r10b, r8b
and r9b, r8b
add r9b, r9b
add r9b, r10b
cmp al, r9b
jne 0x140174280
lea rax, [0x140505f30]
ret
test edx, edx
je 0x14017432c
movzx eax, byte [0x140505eaf]
cmp al, 0xe
je 0x1401742e4
mov cl, 0x1f
nop dword [rax]
mov al, 8
lock cmpxchg byte [0x140505eaf], cl
je 0x14017441f
cmp al, 0xe
jne 0x1401742d0
lea rax, [0x140505ea0]
ret
movzx eax, byte [0x140505fc3]
xor cl, 0xa7
add cl, byte [0x140506094]
cmp al, cl
je 0x140174324
mov cl, 0xaf
nop word cs:[rax + rax]
mov al, 0xb
lock cmpxchg byte [0x140505fc3], cl
je 0x1401743c1
cmp al, 0x5b
jne 0x140174310
lea rax, [0x140505fa0]
ret
movzx eax, byte [0x140505e82]
cmp al, 0x61
je 0x140174354
mov cl, 0x8d
nop dword [rax]
mov al, 0x2c
lock cmpxchg byte [0x140505e82], cl
je 0x140174458
cmp al, 0x61
jne 0x140174340
lea rax, [0x140505e80]
ret
xor r9d, r9d
lea rax, [0x140505f30]
lea rdx, [0x14042c5f0]
mov r8d, ecx
xor r8d, 0xa748c88e
nop word [rax + rax]
movsxd r9, r9d
movzx r10d, byte [r9 + rdx]
add byte [r9 + rax], r10b
mov r10d, r9d
xor r10d, 1
and r9d, 1
lea r9d, [r10 + r9*2]
mov r10d, dword [0x140506090]
add r10d, r8d
cmp r9d, r10d
jl 0x140174380
xor cl, 0x27
add cl, byte [0x140506094]
xchg byte [0x140505f3e], cl
lea rax, [0x140505f30]
ret
xor edx, edx
lea rax, [0x140505fa0]
lea rcx, [0x14042c660]
nop word cs:[rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rdx + rax]
xor r9b, r8b
mov byte [rdx + rax], r9b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 0x23
jl 0x1401743e0
mov al, 0x5b
xchg byte [0x140505fc3], al
lea rax, [0x140505fa0]
ret
xor eax, eax
lea rcx, [0x140505ea0]
lea rdx, [0x14042c570]
nop
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xe
jg 0x140174448
inc rax
jmp 0x140174430
mov al, 0xe
xchg byte [0x140505eaf], al
lea rax, [0x140505ea0]
ret
xor eax, eax
lea rcx, [0x140505e80]
lea rdx, [0x14042c550]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 1
jg 0x140174488
inc rax
jmp 0x140174470
mov al, 0x61
xchg byte [0x140505e82], al
lea rax, [0x140505e80]
ret
Function at 0x14017bfe0
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x14017c01c
test edx, edx
je 0x14017c04c
movzx eax, byte [0x1405064a5]
cmp al, 0x5e
je 0x14017c014
mov cl, 0x54
nop word cs:[rax + rax]
mov al, 0xc1
lock cmpxchg byte [0x1405064a5], cl
je 0x14017c0ac
cmp al, 0x5e
jne 0x14017c000
lea rax, [0x140506490]
ret
test edx, edx
je 0x14017c07c
movzx eax, byte [0x140506465]
cmp al, 0x1e
je 0x14017c044
mov cl, 0xd0
nop dword [rax]
mov al, 0x8d
lock cmpxchg byte [0x140506465], cl
je 0x14017c0e8
cmp al, 0x1e
jne 0x14017c030
lea rax, [0x140506450]
ret
movzx eax, byte [0x140506519]
cmp al, 0x95
je 0x14017c074
mov cl, 0x24
nop dword [rax]
mov al, 0xf0
lock cmpxchg byte [0x140506519], cl
je 0x14017c12f
cmp al, 0x95
jne 0x14017c060
lea rax, [0x140506510]
ret
movzx eax, byte [0x1405062dc]
cmp al, 0x7f
je 0x14017c0a4
mov cl, 0xed
nop dword [rax]
mov al, 0x49
lock cmpxchg byte [0x1405062dc], cl
je 0x14017c168
cmp al, 0x7f
jne 0x14017c090
lea rax, [0x1405062d0]
ret
xor eax, eax
lea rcx, [0x140506490]
lea rdx, [0x14042caa0]
nop dword [rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x14
jg 0x14017c0d8
inc rax
jmp 0x14017c0c0
mov al, 0x5e
xchg byte [0x1405064a5], al
lea rax, [0x140506490]
ret
xor edx, edx
lea rax, [0x140506450]
lea rcx, [0x14042ca60]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 0x15
jl 0x14017c100
mov al, 0x1e
xchg byte [0x140506465], al
lea rax, [0x140506450]
ret
xor eax, eax
lea rcx, [0x140506510]
lea rdx, [0x14042cb10]
nop
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 8
jg 0x14017c158
inc rax
jmp 0x14017c140
mov al, 0x95
xchg byte [0x140506519], al
lea rax, [0x140506510]
ret
xor edx, edx
lea rax, [0x1405062d0]
lea rcx, [0x14042c8f0]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 0xc
jl 0x14017c180
mov al, 0x7f
xchg byte [0x1405062dc], al
lea rax, [0x1405062d0]
ret
Function at 0x140182000
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x14018203c
test edx, edx
je 0x14018207c
movzx eax, byte [0x14050713d]
movzx ecx, byte [0x140507ae8]
add cl, 0x75
cmp al, cl
je 0x140182034
mov cl, 0x38
nop
mov al, 0x64
lock cmpxchg byte [0x14050713d], cl
je 0x14018216f
cmp al, 0x1d
jne 0x140182020
lea rax, [0x140507130]
ret
test edx, edx
je 0x1401820f3
movzx eax, byte [0x140506fdd]
cmp al, 0x8e
je 0x140182074
mov cl, 8
nop word cs:[rax + rax]
mov al, 0x8a
lock cmpxchg byte [0x140506fdd], cl
je 0x1401821bf
cmp al, 0x8e
jne 0x140182060
lea rax, [0x140506fd0]
ret
movzx eax, byte [0x140506e7e]
nop word cs:[rax + rax]
cmp al, 0xc0
je 0x1401821b7
movzx ecx, byte [0x140507ae8]
lea eax, [rcx + 0x20]
add cl, 0xb7
lock cmpxchg byte [0x140506e7e], cl
jne 0x140182090
xor eax, eax
lea rcx, [0x140506e70]
lea rdx, [0x14042ce30]
nop
movzx r8d, byte [rax + rcx]
movzx r9d, byte [rax + rdx]
not r8b
mov r10d, r8d
and r10b, r9b
or r8b, r9b
not r8b
or r8b, r10b
mov byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xd
jg 0x1401821a8
inc rax
jmp 0x1401820c0
movzx eax, byte [0x140506ea3]
nop word [rax + rax]
cmp al, 0x53
je 0x140182167
movzx ecx, byte [0x140507ae8]
lea eax, [rcx + 0x5b]
add cl, 0xb
lock cmpxchg byte [0x140506ea3], cl
jne 0x140182100
xor edx, edx
lea rax, [0x140506ea0]
lea rcx, [0x14042ce60]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rdx + rax]
xor r9b, r8b
mov byte [rdx + rax], r9b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 3
jl 0x140182130
mov al, 0x53
xchg byte [0x140506ea3], al
lea rax, [0x140506ea0]
ret
xor eax, eax
lea rcx, [0x140507130]
lea rdx, [0x14042d0f0]
nop
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x140182198
inc rax
jmp 0x140182180
mov al, 0x1d
xchg byte [0x14050713d], al
lea rax, [0x140507130]
ret
movzx eax, byte [0x140507ae8]
add al, 0x18
xchg byte [0x140506e7e], al
lea rax, [0x140506e70]
ret
xor eax, eax
lea rcx, [0x140506fd0]
lea rdx, [0x14042cf90]
nop
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x1401821e8
inc rax
jmp 0x1401821d0
mov al, 0x8e
xchg byte [0x140506fdd], al
lea rax, [0x140506fd0]
ret
Function at 0x140182200
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x14018223c
test edx, edx
je 0x1401822c6
movzx eax, byte [0x14050708d]
cmp al, 0x38
je 0x140182234
mov cl, 5
nop dword [rax]
mov al, 0x70
lock cmpxchg byte [0x14050708d], cl
je 0x14018232c
cmp al, 0x38
jne 0x140182220
lea rax, [0x140507080]
ret
test edx, edx
je 0x1401822fc
movzx eax, byte [0x140506f61]
nop dword [rax + rax]
movzx ecx, byte [0x140507ae8]
add cl, 0x90
cmp al, cl
je 0x1401822be
movzx ecx, byte [0x140507ae8]
lea eax, [rcx - 0x3c]
add cl, 0xd6
lock cmpxchg byte [0x140506f61], cl
jne 0x140182250
xor edx, edx
lea rax, [0x140506f50]
lea rcx, [0x14042cf10]
nop word cs:[rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
xor byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 0x11
jl 0x140182290
movzx eax, byte [0x140507ae8]
add al, 0x90
xchg byte [0x140506f61], al
lea rax, [0x140506f50]
ret
movzx eax, byte [0x14050703d]
cmp al, 0xae
je 0x1401822f4
mov cl, 9
nop word cs:[rax + rax]
mov al, 0xce
lock cmpxchg byte [0x14050703d], cl
je 0x14018237f
cmp al, 0xae
jne 0x1401822e0
lea rax, [0x140507030]
ret
movzx eax, byte [0x14050705d]
cmp al, 0x20
je 0x140182324
mov cl, 0x1b
nop dword [rax]
mov al, 0x48
lock cmpxchg byte [0x14050705d], cl
je 0x1401823cf
cmp al, 0x20
jne 0x140182310
lea rax, [0x140507050]
ret
xor eax, eax
lea rcx, [0x140507080]
lea rdx, [0x14042d040]
nop dword [rax]
movzx r8d, byte [rax + rdx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rax + rcx]
xor r9b, r8b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x140182368
inc rax
jmp 0x140182340
movzx eax, byte [0x140507ae8]
add al, 0x90
xchg byte [0x14050708d], al
lea rax, [0x140507080]
ret
xor eax, eax
lea rcx, [0x140507030]
lea rdx, [0x14042cff0]
nop
movzx r8d, byte [rax + rdx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rax + rcx]
xor r9b, r8b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x1401823b8
inc rax
jmp 0x140182390
movzx eax, byte [0x140507ae8]
add al, 6
xchg byte [0x14050703d], al
lea rax, [0x140507030]
ret
xor eax, eax
lea rcx, [0x140507050]
lea rdx, [0x14042d010]
nop
movzx r8d, byte [rax + rdx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rax + rcx]
xor r9b, r8b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x140182408
inc rax
jmp 0x1401823e0
mov al, 0x20
xchg byte [0x14050705d], al
lea rax, [0x140507050]
ret
Function at 0x140182460
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x14018250f
test edx, edx
je 0x140182538
movzx eax, byte [0x140506f0d]
nop word [rax + rax]
cmp al, 0x5e
je 0x140182507
movzx ecx, byte [0x140507ae8]
mov edx, ecx
not dl
mov eax, ecx
and al, 0x42
mov r8d, edx
and r8b, 0xbd
or r8b, al
mov eax, ecx
and al, 0x3d
add al, al
add al, r8b
mov r8d, ecx
and r8b, 0x6a
and dl, 0x95
or dl, r8b
and cl, 0x15
add cl, cl
add cl, dl
lock cmpxchg byte [0x140506f0d], cl
jne 0x140182480
xor edx, edx
lea rax, [0x140506f00]
lea rcx, [0x14042cec0]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 0xd
jl 0x1401824e0
mov al, 0x5e
xchg byte [0x140506f0d], al
lea rax, [0x140506f00]
ret
test edx, edx
je 0x140182568
movzx eax, byte [0x140506e62]
cmp al, 5
je 0x140182530
mov cl, 0x5c
mov al, 0x14
lock cmpxchg byte [0x140506e62], cl
je 0x14018259c
cmp al, 5
jne 0x140182520
lea rax, [0x140506e50]
ret
movzx eax, byte [0x14050702e]
cmp al, 0x74
je 0x140182560
mov cl, 0x9b
nop word cs:[rax + rax]
mov al, 0xb7
lock cmpxchg byte [0x14050702e], cl
je 0x1401825c8
cmp al, 0x74
jne 0x140182550
lea rax, [0x140507020]
ret
movzx eax, byte [0x140507073]
cmp al, 0x59
je 0x140182594
mov cl, 0x3c
nop word cs:[rax + rax]
mov al, 0xed
lock cmpxchg byte [0x140507073], cl
je 0x140182618
cmp al, 0x59
jne 0x140182580
lea rax, [0x140507060]
ret
xor eax, eax
lea rcx, [0x140506e50]
lea rdx, [0x14042ce10]
nop dword [rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x11
jg 0x1401825f8
inc rax
jmp 0x1401825b0
xor eax, eax
lea rcx, [0x140507020]
lea rdx, [0x14042cfe0]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xd
jg 0x140182608
inc rax
jmp 0x1401825e0
mov al, 5
xchg byte [0x140506e62], al
lea rax, [0x140506e50]
ret
mov al, 0x74
xchg byte [0x14050702e], al
lea rax, [0x140507020]
ret
xor edx, edx
lea rax, [0x140507060]
lea rcx, [0x14042d020]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rax]
movzx r9d, byte [rdx + rcx]
mov r10d, r8d
xor r10b, r9b
and r8b, r9b
add r8b, r8b
add r8b, r10b
mov byte [rdx + rax], r8b
mov r8d, dword [0x140507ad8]
add edx, r8d
add edx, 0x1fa1a892
cmp edx, 0x13
jl 0x140182630
mov al, 0x59
xchg byte [0x140507073], al
lea rax, [0x140507060]
ret
Function at 0x1401826e0
Capabilities:
Encode data using xor

Disassembly:
mov r8d, dword [rsp + 0x28]
test ecx, ecx
je 0x14018272c
test edx, edx
je 0x140182778
movzx eax, byte [0x140506e91]
xor r8b, 0xdb
add r8b, byte [0x140507ae8]
cmp al, r8b
je 0x140182724
mov cl, 0x6e
nop word [rax + rax]
mov al, 0xe6
lock cmpxchg byte [0x140506e91], cl
je 0x1401827fc
cmp al, 0xda
jne 0x140182710
lea rax, [0x140506e80]
ret
mov eax, r8d
xor eax, 0x6ac50478
add eax, dword [0x140507ad8]
cmp edx, eax
jne 0x1401827c8
movzx eax, byte [0x140506e45]
cmp al, 0xfd
je 0x140182770
mov cl, 0x6a
nop
mov al, 0xa7
lock cmpxchg byte [0x140506e45], cl
je 0x14018287f
mov edx, r8d
xor dl, 0xbc
add dl, byte [0x140507ae8]
cmp al, dl
jne 0x140182750
lea rax, [0x140506e30]
ret
movzx eax, byte [0x140506ffd]
mov ecx, r8d
xor cl, 0xe
add cl, byte [0x140507ae8]
cmp al, cl
je 0x1401827c0
mov cl, 0xe4
nop word cs:[rax + rax]
mov al, 0xf7
lock cmpxchg byte [0x140506ffd], cl
je 0x140182838
mov edx, r8d
xor dl, 0xe
add dl, byte [0x140507ae8]
cmp al, dl
jne 0x1401827a0
lea rax, [0x140506ff0]
ret
movzx eax, byte [0x140507122]
cmp al, 0x86
je 0x1401827f4
mov cl, 0xe7
nop word cs:[rax + rax]
mov al, 0xf8
lock cmpxchg byte [0x140507122], cl
je 0x1401828df
cmp al, 0x86
jne 0x1401827e0
lea rax, [0x140507110]
ret
xor eax, eax
lea rcx, [0x140506e80]
lea rdx, [0x14042ce40]
nop dword [rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x10
jg 0x140182828
inc rax
jmp 0x140182810
mov al, 0xda
xchg byte [0x140506e91], al
lea rax, [0x140506e80]
ret
xor edx, edx
lea rax, [0x140506ff0]
lea rcx, [0x14042cfb0]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 0xd
jl 0x140182850
mov al, 0x8f
xchg byte [0x140506ffd], al
lea rax, [0x140506ff0]
ret
xor eax, eax
lea rcx, [0x140506e30]
lea rdx, [0x14042cdf0]
xor r8d, 0x6ac5044f
nop word cs:[rax + rax]
movzx r9d, byte [rax + rcx]
movzx r10d, byte [rax + rdx]
mov r11d, r9d
xor r11b, r10b
and r9b, r10b
add r9b, r9b
add r9b, r11b
mov byte [rax + rcx], r9b
lea r9d, [rax + 1]
mov r10d, dword [0x140507ad8]
mov r11d, r8d
xor r11d, r10d
and r10d, r8d
lea r10d, [r11 + r10*2]
cmp r9d, r10d
jge 0x140182908
inc rax
jmp 0x1401828a0
xor eax, eax
lea rcx, [0x140507110]
lea rdx, [0x14042d0d0]
nop
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x11
jg 0x140182918
inc rax
jmp 0x1401828f0
mov al, 0xfd
xchg byte [0x140506e45], al
lea rax, [0x140506e30]
ret
mov al, 0x86
xchg byte [0x140507122], al
lea rax, [0x140507110]
ret