joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14039ab00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
test ecx, ecx
je 0x14039ab45
test edx, edx
je 0x14039ab7c
movzx eax, byte [0x140546c1a]
cmp al, 0xa9
je 0x14039ab3d
mov cl, 0xd4
nop word cs:[rax + rax]
mov al, 0xda
lock cmpxchg byte [0x140546c1a], cl
je 0x14039abec
movzx edx, byte [0x140548434]
dec dl
cmp al, dl
jne 0x14039ab20
lea rax, [0x140546c10]
ret
test edx, edx
je 0x14039abbc
movzx eax, byte [0x140547663]
cmp al, 0x39
je 0x14039ab74
mov cl, 0x93
nop word cs:[rax + rax]
mov al, 0x1e
lock cmpxchg byte [0x140547663], cl
je 0x14039ac31
cmp al, 0x39
jne 0x14039ab60
lea rax, [0x140547640]
ret
movzx eax, byte [0x140546c64]
movzx ecx, byte [0x140548434]
add cl, 0x97
cmp al, cl
je 0x14039abb4
mov cl, 0x5c
nop word cs:[rax + rax]
mov al, 0x79
lock cmpxchg byte [0x140546c64], cl
je 0x14039ac68
cmp al, 0x41
jne 0x14039aba0
lea rax, [0x140546c60]
ret
movzx eax, byte [0x1405474c0]
cmp al, 0x22
je 0x14039abe4
mov cl, 0xe2
nop dword [rax]
mov al, 0xa5
lock cmpxchg byte [0x1405474c0], cl
je 0x14039acb8
cmp al, 0x22
jne 0x14039abd0
lea rax, [0x1405474b0]
ret
xor edx, edx
lea rax, [0x140546c10]
lea rcx, [0x14044f0c0]
nop dword [rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, dword [0x140548430]
add edx, r8d
add edx, 0x5a062f0c
cmp edx, 0xa
jl 0x14039ac00
mov al, 0xa9
xchg byte [0x140546c1a], al
lea rax, [0x140546c10]
ret
xor eax, eax
lea rcx, [0x140547640]
lea rdx, [0x14044fa60]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x22
jg 0x14039ac98
inc rax
jmp 0x14039ac50
xor eax, eax
lea rcx, [0x140546c60]
lea rdx, [0x14044f110]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 3
jg 0x14039aca8
inc rax
jmp 0x14039ac80
mov al, 0x39
xchg byte [0x140547663], al
lea rax, [0x140547640]
ret
mov al, 0x41
xchg byte [0x140546c64], al
lea rax, [0x140546c60]
ret
xor eax, eax
lea rcx, [0x1405474b0]
lea rdx, [0x14044f8f0]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xf
jg 0x14039ace8
inc rax
jmp 0x14039acd0
mov al, 0x22
xchg byte [0x1405474c0], al
lea rax, [0x1405474b0]
ret
Function at 0x14039b780
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x14039b7bc
test edx, edx
je 0x14039b7ec
movzx eax, byte [0x140547570]
cmp al, 0x94
je 0x14039b7b4
mov cl, 0xfc
nop word cs:[rax + rax]
mov al, 0x29
lock cmpxchg byte [0x140547570], cl
je 0x14039b84c
cmp al, 0x94
jne 0x14039b7a0
lea rax, [0x140547560]
ret
test edx, edx
je 0x14039b81c
movzx eax, byte [0x14055f478]
cmp al, 0xa9
je 0x14039b7e4
mov cl, 0x23
nop dword [rax]
xor eax, eax
lock cmpxchg byte [0x14055f478], cl
je 0x14039b888
cmp al, 0xa9
jne 0x14039b7d0
lea rax, [0x140547080]
ret
movzx eax, byte [0x140547472]
cmp al, 2
je 0x14039b814
mov cl, 0x77
nop dword [rax]
mov al, 0xf2
lock cmpxchg byte [0x140547472], cl
je 0x14039b8cf
cmp al, 2
jne 0x14039b800
lea rax, [0x140547470]
ret
movzx eax, byte [0x14054728d]
cmp al, 0xdc
je 0x14039b844
mov cl, 0xee
nop dword [rax]
mov al, 0x42
lock cmpxchg byte [0x14054728d], cl
je 0x14039b908
cmp al, 0xdc
jne 0x14039b830
lea rax, [0x140547280]
ret
xor eax, eax
lea rcx, [0x140547560]
lea rdx, [0x14044f990]
nop dword [rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xf
jg 0x14039b878
inc rax
jmp 0x14039b860
mov al, 0x94
xchg byte [0x140547570], al
lea rax, [0x140547560]
ret
xor edx, edx
lea rax, [0x140547080]
lea rcx, [0x14044f500]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 0x15
jl 0x14039b8a0
mov al, 0xa9
xchg byte [0x14055f478], al
lea rax, [0x140547080]
ret
xor eax, eax
lea rcx, [0x140547470]
lea rdx, [0x14044f8b0]
nop
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 1
jg 0x14039b8f8
inc rax
jmp 0x14039b8e0
mov al, 2
xchg byte [0x140547472], al
lea rax, [0x140547470]
ret
xor eax, eax
lea rcx, [0x140547280]
lea rdx, [0x14044f6f0]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x14039b938
inc rax
jmp 0x14039b920
mov al, 0xdc
xchg byte [0x14054728d], al
lea rax, [0x140547280]
ret
Function at 0x14039b950
Capabilities:
Encode data using xor

Disassembly:
push rbx
test ecx, ecx
je 0x14039b999
mov eax, 0x5a062f0b
add eax, dword [0x140548430]
cmp edx, eax
jne 0x14039ba12
movzx eax, byte [0x140546e5d]
cmp al, 0x59
je 0x14039bb52
mov cl, 0xb5
nop dword [rax]
mov al, 0x4f
lock cmpxchg byte [0x140546e5d], cl
je 0x14039ba9e
cmp al, 0x59
jne 0x14039b980
jmp 0x14039bb52
test edx, edx
je 0x14039ba49
movzx eax, byte [0x140546e1b]
nop dword [rax + rax]
cmp al, 0x57
je 0x14039ba09
movzx ecx, byte [0x140548434]
lea eax, [rcx + 4]
add cl, 0xdc
lock cmpxchg byte [0x140546e1b], cl
jne 0x14039b9b0
xor edx, edx
lea rax, [0x140546e10]
lea rcx, [0x14044f2b0]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
xor byte [rdx + rax], r8b
mov r8d, dword [0x140548430]
add edx, r8d
add edx, 0x5a062f0c
cmp edx, 0xb
jl 0x14039b9e0
mov al, 0x57
xchg byte [0x140546e1b], al
lea rax, [0x140546e10]
pop rbx
ret
movzx eax, byte [0x140546f89]
cmp al, 0xc1
je 0x14039bb41
mov cl, 0xa4
nop word cs:[rax + rax]
mov al, 0x81
lock cmpxchg byte [0x140546f89], cl
je 0x14039baf1
cmp al, 0xc1
jne 0x14039ba30
jmp 0x14039bb41
movzx eax, byte [0x140547689]
movzx ecx, byte [0x140548434]
mov edx, ecx
xor dl, 0xd8
and cl, 0x58
add cl, cl
add cl, dl
cmp al, cl
je 0x14039bb90
nop dword [rax + rax]
movzx ecx, byte [0x140548434]
lea eax, [rcx - 7]
add cl, 0x19
lock cmpxchg byte [0x140547689], cl
je 0x14039bb5b
movzx ecx, byte [0x140548434]
add cl, 0xd8
cmp al, cl
jne 0x14039ba70
jmp 0x14039bb90
xor eax, eax
lea rcx, [0x140546e50]
lea rdx, [0x14044f2f0]
nop
movzx r8d, byte [rax + rcx]
movzx r9d, byte [rax + rdx]
mov r10d, r8d
not r10b
mov r11d, r9d
not r11b
mov ebx, r10d
xor bl, r11b
and bl, r10b
xor r11b, r8b
and r10b, r9b
or r10b, r11b
not r10b
or r10b, bl
mov byte [rax + rcx], r10b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x14039bb4a
inc rax
jmp 0x14039bab0
xor edx, edx
lea rax, [0x140546f80]
lea rcx, [0x14044f400]
nop word cs:[rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
not edx
and edx, 0x7ffffffe
or edx, r8d
not edx
lea edx, [r8 + rdx*2]
cmp edx, 9
jl 0x14039bb10
mov al, 0xc1
xchg byte [0x140546f89], al
lea rax, [0x140546f80]
pop rbx
ret
mov al, 0x59
xchg byte [0x140546e5d], al
lea rax, [0x140546e50]
pop rbx
ret
xor eax, eax
lea rcx, [0x140547680]
lea rdx, [0x14044faa0]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 8
jg 0x14039bb88
inc rax
jmp 0x14039bb70
mov al, 0x82
xchg byte [0x140547689], al
lea rax, [0x140547680]
pop rbx
ret
Function at 0x14039bba0
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x14039bc35
test edx, edx
je 0x14039bc6c
movzx eax, byte [0x140546f33]
nop word [rax + rax]
cmp al, 0xda
je 0x14039bcde
movzx ecx, byte [0x140548434]
lea eax, [rcx - 0x64]
add cl, 0x5f
lock cmpxchg byte [0x140546f33], cl
jne 0x14039bbc0
xor eax, eax
lea rcx, [0x140546f20]
lea rdx, [0x14044f3b0]
mov r8d, 0x5a062f1e
nop word cs:[rax + rax]
movzx r9d, byte [rax + rdx]
mov r10d, r9d
xor r10b, r9b
not r10b
and r10b, byte [rax + rcx]
xor r10b, r9b
mov byte [rax + rcx], r10b
lea r9d, [rax + 1]
mov r10d, dword [0x140548430]
add r10d, r8d
cmp r9d, r10d
jge 0x14039bcd6
inc rax
jmp 0x14039bc00
test edx, edx
je 0x14039bc9c
movzx eax, byte [0x140547340]
cmp al, 7
je 0x14039bc64
mov cl, 0x44
nop word cs:[rax + rax]
mov al, 0x95
lock cmpxchg byte [0x140547340], cl
je 0x14039bce6
cmp al, 7
jne 0x14039bc50
lea rax, [0x140547330]
ret
movzx eax, byte [0x140546ce3]
cmp al, 0xc3
je 0x14039bc94
mov cl, 0x71
nop dword [rax]
mov al, 0x24
lock cmpxchg byte [0x140546ce3], cl
je 0x14039bd18
cmp al, 0xc3
jne 0x14039bc80
lea rax, [0x140546ce0]
ret
movzx eax, byte [0x140547506]
cmp al, 0xd
je 0x14039bcce
mov cl, 0x43
nop dword [rax]
mov al, 0x97
lock cmpxchg byte [0x140547506], cl
je 0x14039bd71
movzx edx, byte [0x140548434]
add dl, 0x63
cmp al, dl
jne 0x14039bcb0
lea rax, [0x1405474f0]
ret
mov al, 0xda
xchg byte [0x140546f33], al
lea rax, [0x140546f20]
ret
xor eax, eax
lea rcx, [0x140547330]
lea rdx, [0x14044f780]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xf
jg 0x14039bd51
inc rax
jmp 0x14039bd00
xor eax, eax
lea rcx, [0x140546ce0]
lea rdx, [0x14044f190]
mov r8d, 0x5a062f0e
nop
movzx r9d, byte [rax + rdx]
xor byte [rax + rcx], r9b
lea r9d, [rax + 1]
mov r10d, dword [0x140548430]
add r10d, r8d
cmp r9d, r10d
jge 0x14039bd61
inc rax
jmp 0x14039bd30
mov al, 7
xchg byte [0x140547340], al
lea rax, [0x140547330]
ret
mov al, 0xc3
xchg byte [0x140546ce3], al
lea rax, [0x140546ce0]
ret
xor edx, edx
lea rax, [0x1405474f0]
lea rcx, [0x14044f920]
nop word cs:[rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rax]
movzx r9d, byte [rdx + rcx]
mov r10d, r8d
xor r10b, r9b
and r8b, r9b
add r8b, r8b
add r8b, r10b
mov byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 0x16
jl 0x14039bd90
mov al, 0xd
xchg byte [0x140547506], al
lea rax, [0x1405474f0]
ret
Function at 0x14039bde0
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x14039be1c
test edx, edx
je 0x14039be7c
movzx eax, byte [0x1405471f7]
cmp al, 0xd2
je 0x14039be14
mov cl, 0x88
nop dword [rax]
mov al, 0xc7
lock cmpxchg byte [0x1405471f7], cl
je 0x14039bf28
cmp al, 0xd2
jne 0x14039be00
lea rax, [0x1405471f0]
ret
test edx, edx
je 0x14039bf01
movzx eax, byte [0x140546d20]
nop dword [rax + rax]
cmp al, 0xb7
je 0x14039bf79
movzx ecx, byte [0x140548434]
lea eax, [rcx + 0x3d]
add cl, 0xf5
lock cmpxchg byte [0x140546d20], cl
jne 0x14039be30
xor eax, eax
lea rcx, [0x140546d10]
lea rdx, [0x14044f1c0]
nop
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xf
jg 0x14039bf71
inc rax
jmp 0x14039be60
movzx eax, byte [0x140546efb]
nop word cs:[rax + rax]
cmp al, 0x8c
je 0x14039bef9
movzx ecx, byte [0x140548434]
lea eax, [rcx + 0x29]
add cl, 0x4d
lock cmpxchg byte [0x140546efb], cl
jne 0x14039be90
xor edx, edx
lea rax, [0x140546ee0]
lea rcx, [0x14044f370]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rdx + rax]
xor r9b, r8b
mov byte [rdx + rax], r9b
mov r8d, dword [0x140548430]
add edx, r8d
add edx, 0x5a062f0c
cmp edx, 0x1b
jl 0x14039bec0
mov al, 0x8c
xchg byte [0x140546efb], al
lea rax, [0x140546ee0]
ret
movzx eax, byte [0x140546d4a]
cmp al, 0x41
je 0x14039bf20
mov cl, 0x51
nop
mov al, 0x64
lock cmpxchg byte [0x140546d4a], cl
je 0x14039bf81
cmp al, 0x41
jne 0x14039bf10
lea rax, [0x140546d40]
ret
xor edx, edx
lea rax, [0x1405471f0]
lea rcx, [0x14044f660]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, dword [0x140548430]
add edx, r8d
add edx, 0x5a062f0c
cmp edx, 7
jl 0x14039bf40
mov al, 0xd2
xchg byte [0x1405471f7], al
lea rax, [0x1405471f0]
ret
mov al, 0xb7
xchg byte [0x140546d20], al
lea rax, [0x140546d10]
ret
xor eax, eax
lea rcx, [0x140546d40]
lea rdx, [0x14044f1e0]
mov r8d, 0x5a062f15
nop word [rax + rax]
movzx r9d, byte [rax + rdx]
xor byte [rax + rcx], r9b
lea r9d, [rax + 1]
mov r10d, dword [0x140548430]
add r10d, r8d
cmp r9d, r10d
jge 0x14039bfc1
inc rax
jmp 0x14039bfa0
mov al, 0x41
xchg byte [0x140546d4a], al
lea rax, [0x140546d40]
ret
Function at 0x14039c030
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x14039c06c
test edx, edx
je 0x14039c09c
movzx eax, byte [0x1405472f3]
cmp al, 0x2a
je 0x14039c064
mov cl, 0x86
nop word cs:[rax + rax]
mov al, 0x56
lock cmpxchg byte [0x1405472f3], cl
je 0x14039c10c
cmp al, 0x2a
jne 0x14039c050
lea rax, [0x1405472e0]
ret
test edx, edx
je 0x14039c0dc
movzx eax, byte [0x14054705d]
cmp al, 0x8e
je 0x14039c094
mov cl, 0xcf
nop dword [rax]
mov al, 0xf3
lock cmpxchg byte [0x14054705d], cl
je 0x14039c17e
cmp al, 0x8e
jne 0x14039c080
lea rax, [0x140547050]
ret
movzx eax, byte [0x140546ed2]
movzx ecx, byte [0x140548434]
add cl, 0xd4
cmp al, cl
je 0x14039c0d4
mov cl, 0xcf
nop word cs:[rax + rax]
mov al, 0x44
lock cmpxchg byte [0x140546ed2], cl
je 0x14039c1b8
cmp al, 0x7e
jne 0x14039c0c0
lea rax, [0x140546ec0]
ret
movzx eax, byte [0x140547462]
cmp al, 0xc9
je 0x14039c104
mov cl, 0xa4
nop dword [rax]
mov al, 0xda
lock cmpxchg byte [0x140547462], cl
je 0x14039c20f
cmp al, 0xc9
jne 0x14039c0f0
lea rax, [0x140547460]
ret
xor r8d, r8d
lea rax, [0x1405472e0]
lea rcx, [0x14044f740]
mov edx, 0x5a062f1e
nop word cs:[rax + rax]
movsxd r8, r8d
movzx r9d, byte [r8 + rax]
movzx r10d, byte [r8 + rcx]
mov r11d, r9d
xor r11b, r10b
and r9b, r10b
add r9b, r9b
add r9b, r11b
mov byte [r8 + rax], r9b
mov r9d, r8d
xor r9d, 1
and r8d, 1
lea r8d, [r9 + r8*2]
mov r9d, dword [0x140548430]
add r9d, edx
cmp r8d, r9d
jl 0x14039c130
mov al, 0x2a
xchg byte [0x1405472f3], al
lea rax, [0x1405472e0]
ret
xor eax, eax
lea rcx, [0x140547050]
lea rdx, [0x14044f4d0]
nop
movzx r8d, byte [rax + rdx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rax + rcx]
xor r9b, r8b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x14039c1e8
inc rax
jmp 0x14039c190
xor eax, eax
lea rcx, [0x140546ec0]
lea rdx, [0x14044f350]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x11
jg 0x14039c1ff
inc rax
jmp 0x14039c1d0
movzx eax, byte [0x140548434]
add al, 0xe4
xchg byte [0x14054705d], al
lea rax, [0x140547050]
ret
mov al, 0x7e
xchg byte [0x140546ed2], al
lea rax, [0x140546ec0]
ret
xor eax, eax
lea rcx, [0x140547460]
lea rdx, [0x14044f8a0]
nop
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 1
jg 0x14039c238
inc rax
jmp 0x14039c220
movzx eax, byte [0x140548434]
add al, 0x1f
xchg byte [0x140547462], al
lea rax, [0x140547460]
ret
Function at 0x14039c270
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x14039c2ac
test edx, edx
je 0x14039c2f6
movzx eax, byte [0x1405475f8]
cmp al, 0xb4
je 0x14039c2a4
mov cl, 0x33
nop word cs:[rax + rax]
mov al, 0x81
lock cmpxchg byte [0x1405475f8], cl
je 0x14039c35c
cmp al, 0xb4
jne 0x14039c290
lea rax, [0x1405475e0]
ret
test edx, edx
je 0x14039c32c
movzx eax, byte [0x140547196]
movzx ecx, byte [0x140548434]
add cl, 0x97
cmp al, cl
je 0x14039c2ee
mov cl, 0x6a
nop word [rax + rax]
mov al, 0xf6
lock cmpxchg byte [0x140547196], cl
je 0x14039c398
movzx edx, byte [0x140548434]
add dl, 0x97
cmp al, dl
jne 0x14039c2d0
lea rax, [0x140547190]
ret
movzx eax, byte [0x140546c4a]
cmp al, 0x1c
je 0x14039c324
mov cl, 0x2a
nop word cs:[rax + rax]
mov al, 6
lock cmpxchg byte [0x140546c4a], cl
je 0x14039c3c8
cmp al, 0x1c
jne 0x14039c310
lea rax, [0x140546c40]
ret
movzx eax, byte [0x1405475c8]
cmp al, 0x58
je 0x14039c354
mov cl, 0x61
nop dword [rax]
mov al, 0x76
lock cmpxchg byte [0x1405475c8], cl
je 0x14039c418
cmp al, 0x58
jne 0x14039c340
lea rax, [0x1405475b0]
ret
xor eax, eax
lea rcx, [0x1405475e0]
lea rdx, [0x14044fa00]
nop dword [rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x17
jg 0x14039c388
inc rax
jmp 0x14039c370
mov al, 0xb4
xchg byte [0x1405475f8], al
lea rax, [0x1405475e0]
ret
xor eax, eax
lea rcx, [0x140547190]
lea rdx, [0x14044f610]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 5
jg 0x14039c3f8
inc rax
jmp 0x14039c3b0
xor eax, eax
lea rcx, [0x140546c40]
lea rdx, [0x14044f0f0]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 9
jg 0x14039c408
inc rax
jmp 0x14039c3e0
mov al, 0x41
xchg byte [0x140547196], al
lea rax, [0x140547190]
ret
mov al, 0x1c
xchg byte [0x140546c4a], al
lea rax, [0x140546c40]
ret
xor edx, edx
lea rax, [0x1405475b0]
lea rcx, [0x14044f9d0]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 0x18
jl 0x14039c430
mov al, 0x58
xchg byte [0x1405475c8], al
lea rax, [0x1405475b0]
ret
Function at 0x14039c8c0
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x14039c907
test edx, edx
je 0x14039c93c
movzx eax, byte [0x140546d66]
movzx ecx, byte [0x140548434]
add cl, 0xdc
cmp al, cl
je 0x14039c8ff
nop dword [rax]
movzx ecx, byte [0x140548434]
lea eax, [rcx + 0x38]
add cl, 0x1f
lock cmpxchg byte [0x140546d66], cl
je 0x14039c9f1
cmp al, 0x86
jne 0x14039c8e0
lea rax, [0x140546d60]
ret
test edx, edx
je 0x14039c96c
movzx eax, byte [0x140546c83]
cmp al, 0xb1
je 0x14039c934
mov cl, 0xf
nop dword [rax + rax]
mov al, 0x81
lock cmpxchg byte [0x140546c83], cl
je 0x14039ca38
cmp al, 0xb1
jne 0x14039c920
lea rax, [0x140546c70]
ret
movzx eax, byte [0x140546e7d]
cmp al, 0x73
je 0x14039c964
mov cl, 0x35
nop dword [rax]
mov al, 0x8c
lock cmpxchg byte [0x140546e7d], cl
je 0x14039ca68
cmp al, 0x73
jne 0x14039c950
lea rax, [0x140546e70]
ret
movzx eax, byte [0x140547525]
nop word cs:[rax + rax]
cmp al, 0xd6
je 0x14039c9e9
movzx ecx, byte [0x140548434]
lea eax, [rcx + 0x16]
add cl, 0xdf
lock cmpxchg byte [0x140547525], cl
jne 0x14039c980
xor edx, edx
lea rax, [0x140547510]
lea rcx, [0x14044f940]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rdx + rax]
xor r9b, r8b
mov byte [rdx + rax], r9b
mov r8d, dword [0x140548430]
add edx, r8d
add edx, 0x5a062f0c
cmp edx, 0x15
jl 0x14039c9b0
mov al, 0xd6
xchg byte [0x140547525], al
lea rax, [0x140547510]
ret
xor eax, eax
lea rcx, [0x140546d60]
lea rdx, [0x14044f200]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 5
jg 0x14039ca28
inc rax
jmp 0x14039ca10
mov al, 0x86
xchg byte [0x140546d66], al
lea rax, [0x140546d60]
ret
xor eax, eax
lea rcx, [0x140546c70]
lea rdx, [0x14044f120]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x12
jg 0x14039ca98
inc rax
jmp 0x14039ca50
xor eax, eax
lea rcx, [0x140546e70]
lea rdx, [0x14044f310]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x14039caa8
inc rax
jmp 0x14039ca80
mov al, 0xb1
xchg byte [0x140546c83], al
lea rax, [0x140546c70]
ret
mov al, 0x73
xchg byte [0x140546e7d], al
lea rax, [0x140546e70]
ret
Function at 0x14039cd00
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x14039cd3c
test edx, edx
je 0x14039cdb1
movzx eax, byte [0x140546e6d]
cmp al, 9
je 0x14039cd34
mov cl, 0x41
nop dword [rax]
mov al, 0x9d
lock cmpxchg byte [0x140546e6d], cl
je 0x14039ce60
cmp al, 9
jne 0x14039cd20
lea rax, [0x140546e60]
ret
test edx, edx
je 0x14039cdec
movzx eax, byte [0x14054725e]
nop dword [rax + rax]
cmp al, 0x5f
je 0x14039cda9
movzx ecx, byte [0x140548434]
lea eax, [rcx + 0x67]
add cl, 0x34
lock cmpxchg byte [0x14054725e], cl
jne 0x14039cd50
xor edx, edx
lea rax, [0x140547250]
lea rcx, [0x14044f6c0]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, dword [0x140548430]
add edx, r8d
add edx, 0x5a062f0c
cmp edx, 0xe
jl 0x14039cd80
mov al, 0x5f
xchg byte [0x14054725e], al
lea rax, [0x140547250]
ret
movzx eax, byte [0x140547073]
movzx ecx, byte [0x140548434]
add cl, 0x3f
cmp al, cl
je 0x14039cde4
mov cl, 0x1a
nop dword [rax + rax]
mov al, 0xc1
lock cmpxchg byte [0x140547073], cl
je 0x14039ceaf
cmp al, 0xe9
jne 0x14039cdd0
lea rax, [0x140547060]
ret
movzx eax, byte [0x140546bd9]
nop word cs:[rax + rax]
cmp al, 0xf8
je 0x14039cef7
movzx ecx, byte [0x140548434]
lea eax, [rcx - 0x23]
add cl, 0x77
lock cmpxchg byte [0x140546bd9], cl
jne 0x14039ce00
xor eax, eax
lea rcx, [0x140546bd0]
lea rdx, [0x14044f080]
nop
movzx r8d, byte [rax + rcx]
movzx r9d, byte [rax + rdx]
mov r10d, r8d
xor r10b, r9b
and r8b, r9b
add r8b, r8b
add r8b, r10b
mov byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 8
jg 0x14039cee8
inc rax
jmp 0x14039ce30
xor eax, eax
lea rcx, [0x140546e60]
lea rdx, [0x14044f300]
cdqe
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
mov r8d, dword [0x140548430]
mov r9d, r8d
xor r9d, 0x5a062f0c
and r8d, 0x5a062f0c
lea r8d, [r9 + r8*2]
add eax, r8d
cmp eax, 0xd
jl 0x14039ce70
mov al, 9
xchg byte [0x140546e6d], al
lea rax, [0x140546e60]
ret
xor eax, eax
lea rcx, [0x140547060]
lea rdx, [0x14044f4e0]
nop
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x12
jg 0x14039ced8
inc rax
jmp 0x14039cec0
mov al, 0xe9
xchg byte [0x140547073], al
lea rax, [0x140547060]
ret
movzx eax, byte [0x140548434]
add al, 0x4e
xchg byte [0x140546bd9], al
lea rax, [0x140546bd0]
ret
Function at 0x14039cf70
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x14039cfd3
test edx, edx
je 0x14039d00c
movzx eax, byte [0x1405472d4]
movzx ecx, byte [0x140548434]
add cl, 0xc6
cmp al, cl
je 0x14039cfcb
nop word cs:[rax + rax]
movzx ecx, byte [0x140548434]
mov edx, ecx
xor dl, 0x2d
mov eax, ecx
and al, 0x2d
add al, al
add al, dl
add al, 0x47
add cl, 0xda
lock cmpxchg byte [0x1405472d4], cl
je 0x14039d06c
cmp al, 0x70
jne 0x14039cfa0
lea rax, [0x1405472c0]
ret
test edx, edx
je 0x14039d03c
movzx eax, byte [0x140546b86]
cmp al, 0x58
je 0x14039d004
mov cl, 0xff
nop word cs:[rax + rax]
mov al, 1
lock cmpxchg byte [0x140546b86], cl
je 0x14039d0af
cmp al, 0x58
jne 0x14039cff0
lea rax, [0x140546b80]
ret
movzx eax, byte [0x140546ffe]
cmp al, 0x22
je 0x14039d034
mov cl, 0xe3
nop dword [rax]
mov al, 0x87
lock cmpxchg byte [0x140546ffe], cl
je 0x14039d0d8
cmp al, 0x22
jne 0x14039d020
lea rax, [0x140546fe0]
ret
movzx eax, byte [0x140547492]
cmp al, 0x6a
je 0x14039d064
mov cl, 0xf
nop dword [rax]
mov al, 0x9e
lock cmpxchg byte [0x140547492], cl
je 0x14039d15e
cmp al, 0x6a
jne 0x14039d050
lea rax, [0x140547490]
ret
xor edx, edx
lea rax, [0x1405472c0]
lea rcx, [0x14044f720]
nop dword [rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 0x14
jl 0x14039d080
mov al, 0x70
xchg byte [0x1405472d4], al
lea rax, [0x1405472c0]
ret
xor eax, eax
lea rcx, [0x140546b80]
lea rdx, [0x14044f030]
nop
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 5
jg 0x14039d14e
inc rax
jmp 0x14039d0c0
xor edx, edx
lea rax, [0x140546fe0]
lea rcx, [0x14044f460]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
xor byte [rdx + rax], r8b
mov r8d, dword [0x140548430]
lea r9d, [r8 + 0x5a062f0c]
mov r10d, 0xa5f9d0f3
sub r10d, r8d
and r10d, edx
not edx
mov r11d, r9d
xor r11d, edx
and edx, r9d
or r10d, edx
and r11d, r9d
lea edx, [r10 + r11*2]
add r8d, 0x5a062f29
cmp edx, r8d
jl 0x14039d0f0
movzx eax, byte [0x140548434]
add al, 0x78
xchg byte [0x140546ffe], al
lea rax, [0x140546fe0]
ret
mov al, 0x58
xchg byte [0x140546b86], al
lea rax, [0x140546b80]
ret
xor eax, eax
lea rcx, [0x140547490]
lea rdx, [0x14044f8d0]
nop
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 1
jg 0x14039d188
inc rax
jmp 0x14039d170
mov al, 0x6a
xchg byte [0x140547492], al
lea rax, [0x140547490]
ret