joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14017bde0
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x14017be1c
mov ecx, dword [rsp + 0x28]
test edx, edx
je 0x14017be4c
movzx eax, byte [0x14054305e]
cmp al, 0xb7
je 0x14017be14
mov dl, 0x82
nop dword [rax]
mov al, 0xf5
lock cmpxchg byte [0x14054305e], dl
je 0x14017beac
cmp al, 0xb7
jne 0x14017be00
lea rax, [0x140543050]
ret
test edx, edx
je 0x14017be7c
movzx eax, byte [0x140542fdd]
cmp al, 0x79
je 0x14017be44
mov cl, 0x3c
nop dword [rax]
mov al, 0x55
lock cmpxchg byte [0x140542fdd], cl
je 0x14017bf1b
cmp al, 0x79
jne 0x14017be30
lea rax, [0x140542fd0]
ret
movzx eax, byte [0x140543152]
cmp al, 0x2d
je 0x14017be74
mov dl, 0xd8
nop dword [rax]
mov al, 0x56
lock cmpxchg byte [0x140543152], dl
je 0x14017bf48
cmp al, 0x2d
jne 0x14017be60
lea rax, [0x140543140]
ret
movzx eax, byte [0x140542f5d]
cmp al, 0x41
je 0x14017bea4
mov cl, 0x45
nop dword [rax]
mov al, 0x84
lock cmpxchg byte [0x140542f5d], cl
je 0x14017bfbf
cmp al, 0x41
jne 0x14017be90
lea rax, [0x140542f50]
ret
xor eax, eax
lea rdx, [0x140543050]
lea r8, [0x140462480]
xor ecx, 0x59246775
nop word cs:[rax + rax]
movzx r9d, byte [rax + rdx]
movzx r10d, byte [rax + r8]
not r9b
mov r11d, r9d
and r11b, r10b
not r10b
xor r9b, r10b
and r9b, r10b
or r9b, r11b
mov byte [rax + rdx], r9b
lea r9d, [rax + 1]
mov r10d, dword [0x140543438]
add r10d, ecx
cmp r9d, r10d
jge 0x14017bf0b
inc rax
jmp 0x14017bed0
mov al, 0xb7
xchg byte [0x14054305e], al
lea rax, [0x140543050]
ret
xor eax, eax
lea rcx, [0x140542fd0]
lea rdx, [0x140462400]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x14017bfaf
inc rax
jmp 0x14017bf30
xor r8d, r8d
lea rax, [0x140543140]
lea rdx, [0x140462570]
xor ecx, 0x59246766
nop
movsxd r8, r8d
movzx r9d, byte [r8 + rdx]
xor byte [r8 + rax], r9b
mov r9d, dword [0x140543438]
mov r10d, ecx
xor r10d, r9d
and r9d, ecx
lea r9d, [r10 + r9*2]
mov r10d, r8d
xor r10d, r9d
not r8d
not r9d
and r9d, r8d
or r9d, r10d
not r9d
lea r8d, [r10 + r9*2]
cmp r8d, 0x12
jl 0x14017bf60
mov al, 0x2d
xchg byte [0x140543152], al
lea rax, [0x140543140]
ret
mov al, 0x79
xchg byte [0x140542fdd], al
lea rax, [0x140542fd0]
ret
xor eax, eax
lea rcx, [0x140542f50]
lea rdx, [0x140462380]
nop
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x14017bfe8
inc rax
jmp 0x14017bfd0
mov al, 0x41
xchg byte [0x140542f5d], al
lea rax, [0x140542f50]
ret
Function at 0x14017c020
Capabilities:
Encode data using xor

Disassembly:
mov r8d, dword [rsp + 0x28]
test ecx, ecx
je 0x14017c0bc
mov eax, r8d
xor eax, 0x7f11aaa
add eax, dword [0x140543438]
cmp edx, eax
jne 0x14017c0fc
movzx eax, byte [0x1405430ed]
nop word [rax + rax]
cmp al, 0x3e
je 0x14017c1d0
movzx ecx, byte [0x14054343c]
mov eax, r8d
xor al, 0x67
add al, cl
mov edx, r8d
xor dl, 0x49
add dl, cl
lock cmpxchg byte [0x1405430ed], dl
jne 0x14017c050
xor eax, eax
lea rcx, [0x1405430e0]
lea rdx, [0x140462510]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rax + rcx]
xor r9b, r8b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x14017c1c8
inc rax
jmp 0x14017c090
test edx, edx
je 0x14017c188
movzx eax, byte [0x140543181]
cmp al, 0x1c
je 0x14017c0f4
mov cl, 0x73
nop word cs:[rax + rax]
mov al, 0xbf
lock cmpxchg byte [0x140543181], cl
je 0x14017c1e8
cmp al, 0x1c
jne 0x14017c0e0
lea rax, [0x140543170]
ret
movzx eax, byte [0x140542ec1]
nop word cs:[rax + rax]
cmp al, 0xa4
je 0x14017c1e0
movzx ecx, byte [0x14054343c]
mov edx, r8d
not dl
mov r9d, edx
and r9b, 0x85
mov eax, r8d
and al, 0x7a
or al, r9b
mov r9d, ecx
xor r9b, cl
not r9b
and r9b, al
xor r9b, cl
and al, cl
add al, al
add al, r9b
add dl, cl
lock cmpxchg byte [0x140542ec1], dl
jne 0x14017c110
xor eax, eax
lea rcx, [0x140542eb0]
lea rdx, [0x1404622e0]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x10
jg 0x14017c1d8
inc rax
jmp 0x14017c170
movzx eax, byte [0x140542f7d]
cmp al, 0x38
je 0x14017c1c0
mov cl, 0xd2
nop word cs:[rax + rax]
mov al, 0x42
lock cmpxchg byte [0x140542f7d], cl
je 0x14017c23f
mov edx, r8d
xor dl, 0xa5
add dl, byte [0x14054343c]
cmp al, dl
jne 0x14017c1a0
lea rax, [0x140542f70]
ret
mov al, 0x3e
xchg byte [0x1405430ed], al
lea rax, [0x1405430e0]
ret
mov al, 0xa4
xchg byte [0x140542ec1], al
lea rax, [0x140542eb0]
ret
xor edx, edx
lea rax, [0x140543170]
lea rcx, [0x1404625a0]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rdx + rax]
xor r9b, r8b
mov byte [rdx + rax], r9b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 0x11
jl 0x14017c200
mov al, 0x1c
xchg byte [0x140543181], al
lea rax, [0x140543170]
ret
xor eax, eax
lea rcx, [0x140542f70]
lea rdx, [0x1404623a0]
nop
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x14017c268
inc rax
jmp 0x14017c250
mov al, 0x38
xchg byte [0x140542f7d], al
lea rax, [0x140542f70]
ret
Function at 0x14017c280
Capabilities:
Encode data using xor

Disassembly:
mov r8d, dword [rsp + 0x28]
test ecx, ecx
je 0x14017c2d8
mov eax, r8d
xor eax, 0xad0d3cda
add eax, dword [0x140543438]
cmp edx, eax
jne 0x14017c330
movzx eax, byte [0x1405430a3]
cmp al, 0x13
je 0x14017c2d0
mov cl, 0x87
nop dword [rax]
mov al, 0xef
lock cmpxchg byte [0x1405430a3], cl
je 0x14017c3d2
mov edx, r8d
xor dl, 0xf0
add dl, byte [0x14054343c]
cmp al, dl
jne 0x14017c2b0
lea rax, [0x140543090]
ret
test edx, edx
je 0x14017c358
movzx eax, byte [0x140542e75]
mov ecx, r8d
xor cl, 0xd3
add cl, byte [0x14054343c]
cmp al, cl
je 0x14017c328
nop word cs:[rax + rax]
movzx ecx, byte [0x14054343c]
mov eax, r8d
xor al, 0xf7
add al, cl
mov edx, r8d
xor dl, 0x8b
add dl, cl
lock cmpxchg byte [0x140542e75], dl
je 0x14017c42f
cmp al, 0x36
jne 0x14017c300
lea rax, [0x140542e60]
ret
cmp byte [0x140542fff], 0
je 0x14017c350
mov cl, 0x99
nop dword [rax + rax]
mov al, 0xde
lock cmpxchg byte [0x140542fff], cl
je 0x14017c38c
test al, al
jne 0x14017c340
lea rax, [0x140542fe0]
ret
movzx eax, byte [0x14054316d]
cmp al, 0x48
je 0x14017c384
mov cl, 0x2c
nop word cs:[rax + rax]
mov al, 0xa3
lock cmpxchg byte [0x14054316d], cl
je 0x14017c47d
cmp al, 0x48
jne 0x14017c370
lea rax, [0x140543160]
ret
xor eax, eax
lea rcx, [0x140542fe0]
lea rdx, [0x140462410]
nop dword [rax]
movzx r9d, byte [rax + rdx]
add byte [rax + rcx], r9b
lea r9d, [rax + 1]
cmp r9d, 0x1e
jg 0x14017c3b8
inc rax
jmp 0x14017c3a0
xor r8b, 0x8d
add r8b, byte [0x14054343c]
xchg byte [0x140542fff], r8b
lea rax, [0x140542fe0]
ret
xor edx, edx
lea rax, [0x140543090]
lea rcx, [0x1404624c0]
nop word cs:[rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rdx + rax]
xor r9b, r8b
mov byte [rdx + rax], r9b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 0x13
jl 0x14017c3f0
mov al, 0x13
xchg byte [0x1405430a3], al
lea rax, [0x140543090]
ret
xor eax, eax
lea rcx, [0x140542e60]
lea rdx, [0x140462290]
xor r8d, 0xad0d3cdb
nop word cs:[rax + rax]
cdqe
movzx r9d, byte [rax + rdx]
xor byte [rax + rcx], r9b
mov r9d, dword [0x140543438]
add r9d, r8d
add eax, r9d
cmp eax, 0x15
jl 0x14017c450
mov al, 0x36
xchg byte [0x140542e75], al
lea rax, [0x140542e60]
ret
xor eax, eax
lea rcx, [0x140543160]
lea rdx, [0x140462590]
nop dword [rax]
movzx r8d, byte [rax + rdx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rax + rcx]
xor r9b, r8b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x14017c4b8
inc rax
jmp 0x14017c490
mov al, 0x48
xchg byte [0x14054316d], al
lea rax, [0x140543160]
ret
Function at 0x14017cde0
Capabilities:
Encode data using xor

Disassembly:
mov r8d, dword [rsp + 0x28]
test ecx, ecx
je 0x14017ce2c
mov eax, r8d
xor eax, 0xdd566a7a
add eax, dword [0x140543438]
cmp edx, eax
jne 0x14017ce5c
movzx eax, byte [0x14054304d]
cmp al, 5
je 0x14017ce24
mov cl, 0xd1
nop dword [rax + rax]
mov al, 0x57
lock cmpxchg byte [0x14054304d], cl
je 0x14017cecc
cmp al, 5
jne 0x14017ce10
lea rax, [0x140543040]
ret
test edx, edx
je 0x14017ce8c
movzx eax, byte [0x140542f91]
cmp al, 0xaa
je 0x14017ce54
mov cl, 0xbc
nop dword [rax]
mov al, 0x38
lock cmpxchg byte [0x140542f91], cl
je 0x14017cf6f
cmp al, 0xaa
jne 0x14017ce40
lea rax, [0x140542f80]
ret
movzx eax, byte [0x140542f4d]
cmp al, 0xe4
je 0x14017ce84
mov cl, 0x7d
nop dword [rax]
mov al, 0x71
lock cmpxchg byte [0x140542f4d], cl
je 0x14017cf2d
cmp al, 0xe4
jne 0x14017ce70
lea rax, [0x140542f40]
ret
movzx eax, byte [0x14054306d]
mov ecx, r8d
xor cl, 0xaf
add cl, byte [0x14054343c]
cmp al, cl
je 0x14017cec4
mov cl, 0x8b
nop word cs:[rax + rax]
mov al, 0xa7
lock cmpxchg byte [0x14054306d], cl
je 0x14017cfca
cmp al, 0x82
jne 0x14017ceb0
lea rax, [0x140543060]
ret
xor eax, eax
lea rcx, [0x140543040]
lea rdx, [0x140462470]
xor r8d, 0xdd566a7b
nop word cs:[rax + rax]
cdqe
movzx r9d, byte [rax + rdx]
mov r10d, r9d
xor r10b, r9b
not r10b
and r10b, byte [rax + rcx]
xor r10b, r9b
mov byte [rax + rcx], r10b
mov r9d, dword [0x140543438]
add r9d, r8d
add eax, r9d
cmp eax, 0xd
jl 0x14017cef0
mov al, 5
xchg byte [0x14054304d], al
lea rax, [0x140543040]
ret
xor edx, edx
lea rax, [0x140542f40]
lea rcx, [0x140462370]
nop dword [rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
xor byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 0xd
jl 0x14017cf40
mov al, 0xe4
xchg byte [0x140542f4d], al
lea rax, [0x140542f40]
ret
xor edx, edx
lea rax, [0x140542f80]
lea rcx, [0x1404623b0]
nop
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rdx + rax]
xor r9b, r8b
mov byte [rdx + rax], r9b
mov r8d, edx
xor r8d, 1
add edx, edx
and edx, 2
mov r9d, r8d
xor r9d, edx
and edx, r8d
lea edx, [r9 + rdx*2]
cmp edx, 0x11
jl 0x14017cf80
mov al, 0xaa
xchg byte [0x140542f91], al
lea rax, [0x140542f80]
ret
xor eax, eax
lea rcx, [0x140543060]
lea rdx, [0x140462490]
xor r8d, 0xdd566a77
nop word cs:[rax + rax]
movzx r9d, byte [rax + rcx]
movzx r10d, byte [rax + rdx]
mov r11d, r9d
xor r11b, r10b
and r9b, r10b
add r9b, r9b
add r9b, r11b
mov byte [rax + rcx], r9b
lea r9d, [rax + 1]
mov r10d, dword [0x140543438]
add r10d, r8d
cmp r9d, r10d
jge 0x14017d025
inc rax
jmp 0x14017cff0
mov al, 0x82
xchg byte [0x14054306d], al
lea rax, [0x140543060]
ret
Function at 0x14018ddf0
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [0x140543de0]
mov r8d, eax
xor r8d, 0xbe6f1718
and eax, 0x3e6f1718
lea eax, [r8 + rax*2]
cmp ecx, eax
jne 0x14018de3c
test edx, edx
je 0x14018de6c
movzx eax, byte [0x140543754]
cmp al, 0x42
je 0x14018de34
mov cl, 0xc
nop
mov al, 0xcb
lock cmpxchg byte [0x140543754], cl
je 0x14018defc
cmp al, 0x42
jne 0x14018de20
lea rax, [0x140543750]
ret
test edx, edx
je 0x14018de9c
movzx eax, byte [0x1405438f3]
cmp al, 0x7c
je 0x14018de64
xor ecx, ecx
nop dword [rax]
mov al, 0x3c
lock cmpxchg byte [0x1405438f3], cl
je 0x14018df28
cmp al, 0x7c
jne 0x14018de50
lea rax, [0x1405438d0]
ret
movzx eax, byte [0x1405437f6]
cmp al, 0x5a
je 0x14018de94
mov cl, 0xd9
nop dword [rax]
mov al, 0x72
lock cmpxchg byte [0x1405437f6], cl
je 0x14018df88
cmp al, 0x5a
jne 0x14018de80
lea rax, [0x1405437f0]
ret
movzx eax, byte [0x1405436bf]
nop word cs:[rax + rax]
cmp al, 0x77
je 0x14018dfeb
movzx ecx, byte [0x140543de4]
lea eax, [rcx + 0x27]
add cl, 0x51
lock cmpxchg byte [0x1405436bf], cl
jne 0x14018deb0
xor eax, eax
lea rcx, [0x140543690]
lea rdx, [0x140462840]
nop
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x2e
jg 0x14018dfe3
inc rax
jmp 0x14018dee0
xor eax, eax
lea rcx, [0x140543750]
lea rdx, [0x140462900]
nop dword [rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 3
jg 0x14018df68
inc rax
jmp 0x14018df10
xor eax, eax
lea rcx, [0x1405438d0]
lea rdx, [0x140462a80]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rax + rcx]
xor r9b, r8b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
cmp r8d, 0x22
jg 0x14018df78
inc rax
jmp 0x14018df40
mov al, 0x42
xchg byte [0x140543754], al
lea rax, [0x140543750]
ret
mov al, 0x7c
xchg byte [0x1405438f3], al
lea rax, [0x1405438d0]
ret
xor edx, edx
lea rax, [0x1405437f0]
lea rcx, [0x1404629a0]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rax]
movzx r9d, byte [rdx + rcx]
mov r10d, r8d
xor r10b, r9b
and r8b, r9b
add r8b, r8b
add r8b, r10b
mov byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 6
jl 0x14018dfa0
mov al, 0x5a
xchg byte [0x1405437f6], al
lea rax, [0x1405437f0]
ret
mov al, 0x77
xchg byte [0x1405436bf], al
lea rax, [0x140543690]
ret
Function at 0x14018e2c0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov eax, 0xbe6f1718
mov r8d, dword [0x140543de0]
add r8d, eax
cmp ecx, r8d
jne 0x14018e319
add eax, dword [0x140543de0]
cmp edx, eax
jne 0x14018e345
movzx eax, byte [0x140543852]
movzx ecx, byte [0x140543de4]
add cl, 0x1d
cmp al, cl
je 0x14018e4ed
mov cl, 0x45
nop dword [rax + rax]
mov al, 0x53
lock cmpxchg byte [0x140543852], cl
je 0x14018e412
cmp al, 0x41
jne 0x14018e300
jmp 0x14018e4ed
test edx, edx
je 0x14018e379
movzx eax, byte [0x14054392d]
cmp al, 0x91
je 0x14018e406
mov cl, 4
nop
mov al, 0x8f
lock cmpxchg byte [0x14054392d], cl
je 0x14018e3a9
cmp al, 0x91
jne 0x14018e330
jmp 0x14018e406
movzx eax, byte [0x1405438be]
movzx ecx, byte [0x140543de4]
add cl, 0x16
cmp al, cl
je 0x14018e4d2
mov cl, 0x43
mov al, 0x5a
lock cmpxchg byte [0x1405438be], cl
je 0x14018e44c
cmp al, 0x3a
jne 0x14018e360
jmp 0x14018e4d2
movzx eax, byte [0x1405438a8]
cmp al, 0x7f
je 0x14018e55b
xor ecx, ecx
nop word [rax + rax]
mov al, 0x89
lock cmpxchg byte [0x1405438a8], cl
je 0x14018e4f6
cmp al, 0x7f
jne 0x14018e390
jmp 0x14018e55b
xor eax, eax
lea rcx, [0x140543920]
lea rdx, [0x140462ad0]
nop dword [rax]
movzx r8d, byte [rax + rcx]
movzx r9d, byte [rax + rdx]
mov r10d, r8d
not r10b
mov r11d, r9d
not r11b
xor r8b, r11b
xor r11b, r10b
and r11b, r9b
and r10b, r9b
or r10b, r8b
not r10b
or r10b, r11b
mov byte [rax + rcx], r10b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x14018e3fe
inc rax
jmp 0x14018e3c0
mov al, 0x91
xchg byte [0x14054392d], al
lea rax, [0x140543920]
jmp 0x14018e562
xor eax, eax
lea rcx, [0x140543840]
lea rdx, [0x1404629f0]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x11
jg 0x14018e4de
inc rax
jmp 0x14018e430
xor r8d, r8d
lea rax, [0x1405438b0]
lea rcx, [0x140462a60]
mov edx, 0xbe6f1726
nop word cs:[rax + rax]
movsxd r8, r8d
movzx r9d, byte [r8 + rax]
movzx r10d, byte [r8 + rcx]
mov r11d, r9d
not r11b
mov ebx, r11d
xor bl, r10b
not r10b
mov esi, r9d
and sil, r10b
or sil, bl
not sil
xor r10b, r11b
and r10b, r9b
or r10b, sil
mov byte [r8 + rax], r10b
mov r9d, r8d
xor r9d, 1
and r8d, 1
lea r8d, [r9 + r8*2]
mov r9d, dword [0x140543de0]
add r9d, edx
cmp r8d, r9d
jl 0x14018e470
movzx eax, byte [0x140543de4]
add al, 0x16
xchg byte [0x1405438be], al
lea rax, [0x1405438b0]
jmp 0x14018e562
movzx eax, byte [0x140543de4]
add al, 0x1d
xchg byte [0x140543852], al
lea rax, [0x140543840]
jmp 0x14018e562
xor eax, eax
lea rcx, [0x140543890]
lea rdx, [0x140462a40]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rdx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rax + rcx]
xor r9b, r8b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
mov r9d, dword [0x140543de0]
mov r10d, r9d
xor r10d, 0xbe6f1730
and r9d, 0x3e6f1730
lea r9d, [r10 + r9*2]
cmp r8d, r9d
jge 0x14018e553
inc rax
jmp 0x14018e510
mov al, 0x7f
xchg byte [0x1405438a8], al
lea rax, [0x140543890]
pop rbx
pop rsi
ret
Function at 0x14018e8d0
Capabilities:
Encode data using xor

Disassembly:
mov r8d, dword [rsp + 0x28]
mov eax, r8d
xor eax, 0xb8ab377d
add eax, dword [0x140543de0]
cmp ecx, eax
jne 0x14018e92c
test edx, edx
je 0x14018e964
movzx eax, byte [0x140543784]
xor r8b, 0x86
add r8b, byte [0x140543de4]
cmp al, r8b
je 0x14018e924
mov cl, 0xcc
nop word cs:[rax + rax]
mov al, 0x7f
lock cmpxchg byte [0x140543784], cl
je 0x14018e9eb
cmp al, 7
jne 0x14018e910
lea rax, [0x140543780]
ret
movzx eax, byte [0x1405438c3]
cmp al, 0x53
je 0x14018e95c
mov cl, 0xcf
nop dword [rax]
mov al, 0xb4
lock cmpxchg byte [0x1405438c3], cl
je 0x14018e99c
mov edx, r8d
xor dl, 0x4a
add dl, byte [0x140543de4]
cmp al, dl
jne 0x14018e940
lea rax, [0x1405438c0]
ret
movzx eax, byte [0x14054386e]
cmp al, 0x33
je 0x14018e994
mov cl, 0x3c
nop word cs:[rax + rax]
mov al, 0x76
lock cmpxchg byte [0x14054386e], cl
je 0x14018ea3f
cmp al, 0x33
jne 0x14018e980
lea rax, [0x140543860]
ret
xor edx, edx
lea rax, [0x1405438c0]
lea rcx, [0x140462a70]
nop dword [rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
xor byte [rdx + rax], r8b
add edx, 0xbd6bd9fd
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
add edx, 0x42942603
cmp edx, 3
jl 0x14018e9b0
mov al, 0x53
xchg byte [0x1405438c3], al
lea rax, [0x1405438c0]
ret
xor eax, eax
lea rcx, [0x140543780]
lea rdx, [0x140462930]
nop dword [rax + rax]
movzx r8d, byte [rax + rcx]
movzx r9d, byte [rax + rdx]
not r8b
mov r10d, r8d
and r10b, r9b
or r8b, r9b
not r8b
or r8b, r10b
mov byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 3
jg 0x14018ea2f
inc rax
jmp 0x14018ea00
mov al, 7
xchg byte [0x140543784], al
lea rax, [0x140543780]
ret
xor eax, eax
lea rcx, [0x140543860]
lea rdx, [0x140462a10]
nop
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xd
jg 0x14018ea68
inc rax
jmp 0x14018ea50
mov al, 0x33
xchg byte [0x14054386e], al
lea rax, [0x140543860]
ret
Function at 0x1401a5170
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x1401a51ac
test edx, edx
je 0x1401a51e6
movzx eax, byte [0x140544232]
cmp al, 0x31
je 0x1401a51a4
mov cl, 0xbb
nop word cs:[rax + rax]
mov al, 0xc7
lock cmpxchg byte [0x140544232], cl
je 0x1401a524c
cmp al, 0x31
jne 0x1401a5190
lea rax, [0x140544220]
ret
test edx, edx
je 0x1401a521c
movzx eax, byte [0x140544471]
cmp al, 0xca
je 0x1401a51de
mov cl, 0x2e
nop dword [rax]
mov al, 0x70
lock cmpxchg byte [0x140544471], cl
je 0x1401a52b8
movzx edx, byte [0x140546f58]
add dl, 0x5b
cmp al, dl
jne 0x1401a51c0
lea rax, [0x140544460]
ret
movzx eax, byte [0x1405441ac]
cmp al, 0xf0
je 0x1401a5214
mov cl, 0x32
nop word cs:[rax + rax]
mov al, 0x4d
lock cmpxchg byte [0x1405441ac], cl
je 0x1401a52e8
cmp al, 0xf0
jne 0x1401a5200
lea rax, [0x1405441a0]
ret
movzx eax, byte [0x14054432d]
cmp al, 0xf4
je 0x1401a5244
mov cl, 0x42
nop dword [rax]
mov al, 0xa3
lock cmpxchg byte [0x14054432d], cl
je 0x1401a5356
cmp al, 0xf4
jne 0x1401a5230
lea rax, [0x140544320]
ret
xor eax, eax
lea rcx, [0x140544220]
lea rdx, [0x140462e30]
mov r8d, 0x76a2eb1a
nop word cs:[rax + rax]
movzx r9d, byte [rax + rdx]
mov r10d, r9d
xor r10b, r9b
not r10b
and r10b, byte [rax + rcx]
xor r10b, r9b
mov byte [rax + rcx], r10b
lea r9d, [rax + 1]
mov r10d, dword [0x140546f48]
add r10d, r8d
cmp r9d, r10d
jge 0x1401a52a1
inc rax
jmp 0x1401a5270
movzx eax, byte [0x140546f58]
add al, 0xc2
xchg byte [0x140544232], al
lea rax, [0x140544220]
ret
xor eax, eax
lea rcx, [0x140544460]
lea rdx, [0x140463060]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x10
jg 0x1401a5346
inc rax
jmp 0x1401a52d0
xor edx, edx
lea rax, [0x1405441a0]
lea rcx, [0x140462db0]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, dword [0x140546f48]
add edx, r8d
add edx, 0x76a2eb09
mov r9d, r8d
xor r9d, 0x76a2eb14
and r8d, 0x76a2eb14
lea r8d, [r9 + r8*2]
cmp edx, r8d
jl 0x1401a5300
mov al, 0xf0
xchg byte [0x1405441ac], al
lea rax, [0x1405441a0]
ret
mov al, 0xca
xchg byte [0x140544471], al
lea rax, [0x140544460]
ret
xor eax, eax
lea rcx, [0x140544320]
lea rdx, [0x140462f20]
mov r8d, 0x76a2eb15
nop dword [rax]
movzx r9d, byte [rax + rdx]
add byte [rax + rcx], r9b
lea r9d, [rax + 1]
mov r10d, dword [0x140546f48]
add r10d, r8d
cmp r9d, r10d
jge 0x1401a5391
inc rax
jmp 0x1401a5370
movzx eax, byte [0x140546f58]
mov ecx, eax
xor cl, 0x85
and al, 5
add al, al
add al, cl
xchg byte [0x14054432d], al
lea rax, [0x140544320]
ret
Function at 0x1401a53d0
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x1401a540c
test edx, edx
je 0x1401a544c
movzx eax, byte [0x14054437d]
movzx ecx, byte [0x140546f58]
add cl, 0x86
cmp al, cl
je 0x1401a5404
mov cl, 0x15
nop
mov al, 0x79
lock cmpxchg byte [0x14054437d], cl
je 0x1401a54e6
cmp al, 0xf5
jne 0x1401a53f0
lea rax, [0x140544370]
ret
test edx, edx
je 0x1401a54aa
movzx eax, byte [0x14054434d]
movzx ecx, byte [0x140546f58]
add cl, 0x39
cmp al, cl
je 0x1401a5444
mov cl, 0xbe
nop dword [rax + rax]
mov al, 0x53
lock cmpxchg byte [0x14054434d], cl
je 0x1401a5539
cmp al, 0xa8
jne 0x1401a5430
lea rax, [0x140544340]
ret
movzx eax, byte [0x1405442c3]
cmp al, 0xcd
je 0x1401a54a2
nop word [rax + rax]
movzx ecx, byte [0x140546f58]
mov edx, ecx
xor dl, 0x29
mov eax, ecx
and al, 0x29
add al, al
add al, dl
mov edx, ecx
xor dl, 0x71
not cl
and cl, 0xe
or cl, dl
not cl
add cl, cl
add cl, dl
lock cmpxchg byte [0x1405442c3], cl
je 0x1401a5587
movzx ecx, byte [0x140546f58]
add cl, 0x5e
cmp al, cl
jne 0x1401a5460
lea rax, [0x1405442a0]
ret
movzx eax, byte [0x14054424e]
cmp al, 0x72
je 0x1401a54de
mov cl, 0x2c
nop word [rax + rax]
mov al, 0x12
lock cmpxchg byte [0x14054424e], cl
je 0x1401a55ff
movzx edx, byte [0x140546f58]
add dl, 3
cmp al, dl
jne 0x1401a54c0
lea rax, [0x140544240]
ret
xor r8d, r8d
lea rax, [0x140544370]
lea rcx, [0x140462f70]
mov edx, 0x76a2eb09
nop dword [rax]
movsxd r8, r8d
movzx r9d, byte [r8 + rcx]
xor byte [r8 + rax], r9b
mov r9d, dword [0x140546f48]
add r9d, edx
mov r10d, r8d
xor r10d, r9d
and r9d, r8d
lea r8d, [r10 + r9*2]
cmp r8d, 0xd
jl 0x1401a5500
mov al, 0xf5
xchg byte [0x14054437d], al
lea rax, [0x140544370]
ret
xor eax, eax
lea rcx, [0x140544340]
lea rdx, [0x140462f40]
nop dword [rax]
xor r8d, r8d
sub r8b, byte [rax + rcx]
movzx r9d, byte [rax + rdx]
xor r10d, r10d
sub r10b, r9b
mov r9d, r8d
xor r9b, r10b
and r10b, r8b
add r10b, r10b
add r10b, r9b
neg r10b
mov byte [rax + rcx], r10b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x1401a55d8
inc rax
jmp 0x1401a5550
xor eax, eax
lea rcx, [0x1405442a0]
lea rdx, [0x140462ea0]
nop word [rax + rax]
movzx r8d, byte [rax + rcx]
movzx r9d, byte [rax + rdx]
mov r10d, r8d
xor r10b, r9b
and r8b, r9b
add r8b, r8b
mov r9d, r10d
xor r9b, r8b
and r8b, r10b
add r8b, r8b
add r8b, r9b
mov byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x22
jg 0x1401a55e8
inc rax
jmp 0x1401a55a0
mov al, 0xa8
xchg byte [0x14054434d], al
lea rax, [0x140544340]
ret
movzx eax, byte [0x140546f58]
add al, 0x5e
xchg byte [0x1405442c3], al
lea rax, [0x1405442a0]
ret
xor r8d, r8d
lea rax, [0x140544240]
lea rcx, [0x140462e50]
mov edx, 0x76a2eb16
nop word cs:[rax + rax]
movsxd r8, r8d
movzx r9d, byte [r8 + rcx]
add byte [r8 + rax], r9b
mov r9d, r8d
xor r9d, 1
and r8d, 1
lea r8d, [r9 + r8*2]
mov r9d, dword [0x140546f48]
add r9d, edx
cmp r8d, r9d
jl 0x1401a5620
mov al, 0x72
xchg byte [0x14054424e], al
lea rax, [0x140544240]
ret