joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14019b6f0
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x14019b72c
test edx, edx
je 0x14019b75c
movzx eax, byte [0x140507f6e]
cmp al, 0x9e
je 0x14019b724
mov cl, 0xfd
nop word cs:[rax + rax]
mov al, 0x2f
lock cmpxchg byte [0x140507f6e], cl
je 0x14019b7cc
cmp al, 0x9e
jne 0x14019b710
lea rax, [0x140507f60]
ret
test edx, edx
je 0x14019b79c
movzx eax, byte [0x140507e44]
cmp al, 0x83
je 0x14019b754
mov cl, 0x3b
nop dword [rax]
mov al, 0x2f
lock cmpxchg byte [0x140507e44], cl
je 0x14019b80f
cmp al, 0x83
jne 0x14019b740
lea rax, [0x140507e40]
ret
movzx eax, byte [0x140507d70]
movzx ecx, byte [0x14050a8bc]
add cl, 0xd2
cmp al, cl
je 0x14019b794
mov cl, 0xb8
nop word cs:[rax + rax]
mov al, 0xab
lock cmpxchg byte [0x140507d70], cl
je 0x14019b866
cmp al, 0x1f
jne 0x14019b780
lea rax, [0x140507d40]
ret
movzx eax, byte [0x140508062]
cmp al, 0xf6
je 0x14019b7c4
mov cl, 0x18
nop dword [rax]
mov al, 0x51
lock cmpxchg byte [0x140508062], cl
je 0x14019b8bf
cmp al, 0xf6
jne 0x14019b7b0
lea rax, [0x140508050]
ret
xor eax, eax
lea rcx, [0x140507f60]
lea rdx, [0x14042d550]
nop dword [rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xd
jg 0x14019b7f8
inc rax
jmp 0x14019b7e0
movzx eax, byte [0x14050a8bc]
add al, 0x51
xchg byte [0x140507f6e], al
lea rax, [0x140507f60]
ret
xor edx, edx
lea rax, [0x140507e40]
lea rcx, [0x14042d440]
nop
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, dword [0x14050a8b8]
mov r9d, r8d
xor r9d, 0x549eb4eb
and r8d, 0x549eb4eb
lea r8d, [r9 + r8*2]
add edx, r8d
add edx, 0x1c3ea5c0
cmp edx, 4
jl 0x14019b820
mov al, 0x83
xchg byte [0x140507e44], al
lea rax, [0x140507e40]
ret
xor edx, edx
lea rax, [0x140507d40]
lea rcx, [0x14042d350]
nop word cs:[rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rdx + rax]
xor r9b, r8b
mov byte [rdx + rax], r9b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 0x30
jl 0x14019b880
mov al, 0x1f
xchg byte [0x140507d70], al
lea rax, [0x140507d40]
ret
xor r8d, r8d
lea rax, [0x140508050]
lea rcx, [0x14042d640]
mov edx, 0x70dd5aab
nop word cs:[rax + rax]
movsxd r8, r8d
movzx r9d, byte [r8 + rcx]
add byte [r8 + rax], r9b
mov r9d, dword [0x14050a8b8]
add r9d, edx
mov r10d, r8d
xor r10d, r9d
and r9d, r8d
lea r8d, [r10 + r9*2]
cmp r8d, 0x12
jl 0x14019b8e0
movzx eax, byte [0x14050a8bc]
add al, 0xa9
xchg byte [0x140508062], al
lea rax, [0x140508050]
ret
Function at 0x14019ba20
Capabilities:
Encode data using xor

Disassembly:
push rbx
mov r8d, dword [rsp + 0x30]
test ecx, ecx
je 0x14019ba59
test edx, edx
je 0x14019ba99
movzx eax, byte [0x14050804d]
cmp al, 0x4a
je 0x14019bbb3
mov cl, 0x51
nop
mov al, 0x2a
lock cmpxchg byte [0x14050804d], cl
je 0x14019bb49
cmp al, 0x4a
jne 0x14019ba40
jmp 0x14019bbb3
test edx, edx
je 0x14019bb00
movzx eax, byte [0x140507ec9]
cmp al, 0xfa
je 0x14019bbf7
mov cl, 0x1b
nop word cs:[rax + rax]
mov al, 0xa2
lock cmpxchg byte [0x140507ec9], cl
je 0x14019bbbc
cmp al, 0xfa
jne 0x14019ba80
jmp 0x14019bbf7
movzx eax, byte [0x14050800f]
mov ecx, r8d
xor cl, 0x9a
add cl, byte [0x14050a8bc]
cmp al, cl
je 0x14019bc59
mov cl, 0x31
nop word cs:[rax + rax]
mov al, 0x65
lock cmpxchg byte [0x14050800f], cl
je 0x14019bc00
movzx edx, byte [0x14050a8bc]
mov r9d, r8d
xor r9b, dl
xor r9b, 0x9a
mov r10d, r8d
xor r10b, 0x65
not dl
and dl, r10b
or dl, r9b
not dl
add dl, dl
add dl, r9b
cmp al, dl
jne 0x14019bac0
jmp 0x14019bc59
movzx eax, byte [0x140507ded]
movzx ecx, byte [0x14050a8bc]
mov edx, r8d
xor dl, 0xf7
mov r9d, edx
xor r9b, cl
and dl, cl
add dl, dl
add dl, r9b
cmp al, dl
je 0x14019bcc0
mov cl, 0xb3
nop dword [rax + rax]
mov al, 0x31
lock cmpxchg byte [0x140507ded], cl
je 0x14019bc62
cmp al, 0x5b
jne 0x14019bb30
jmp 0x14019bcc0
xor edx, edx
lea rax, [0x140508040]
lea rcx, [0x14042d630]
xor r8d, 0xa5b0d52
movsxd rdx, edx
movzx r9d, byte [rdx + rcx]
add byte [rdx + rax], r9b
mov r9d, dword [0x14050a8b8]
mov r10d, r9d
xor r10d, r10d
not r10d
and r10d, r8d
xor r10d, r9d
and r9d, r8d
lea r9d, [r10 + r9*2]
add edx, r9d
add edx, 0xfc391528
mov r9d, edx
xor r9d, 0x3c6ead8
and edx, 0x3c6ead8
lea edx, [r9 + rdx*2]
cmp edx, 0xd
jl 0x14019bb60
mov al, 0x4a
xchg byte [0x14050804d], al
lea rax, [0x140508040]
pop rbx
ret
xor edx, edx
lea rax, [0x140507ec0]
lea rcx, [0x14042d4c0]
nop dword [rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
xor byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 9
jl 0x14019bbd0
mov al, 0xfa
xchg byte [0x140507ec9], al
lea rax, [0x140507ec0]
pop rbx
ret
xor eax, eax
lea rcx, [0x140508000]
lea rdx, [0x14042d5f0]
xor r8d, 0xa5b0d40
nop word [rax + rax]
movzx r9d, byte [rax + rdx]
mov r10d, r9d
xor r10b, r9b
not r10b
and r10b, byte [rax + rcx]
xor r10b, r9b
mov byte [rax + rcx], r10b
lea r9d, [rax + 1]
mov r10d, dword [0x14050a8b8]
add r10d, r8d
cmp r9d, r10d
jge 0x14019bc51
inc rax
jmp 0x14019bc20
mov al, 0xb0
xchg byte [0x14050800f], al
lea rax, [0x140508000]
pop rbx
ret
xor eax, eax
lea rcx, [0x140507db0]
lea rdx, [0x14042d3b0]
xor r8d, 0xa5b0d52
nop dword [rax]
cdqe
movzx r9d, byte [rax + rcx]
movzx r10d, byte [rax + rdx]
mov r11d, r9d
not r11b
mov ebx, r10d
xor bl, r11b
and r11b, r10b
not bl
and bl, r9b
or bl, r11b
mov byte [rax + rcx], bl
mov r9d, dword [0x14050a8b8]
add r9d, r8d
add eax, r9d
cmp eax, 0x3d
jl 0x14019bc80
mov al, 0x5b
xchg byte [0x140507ded], al
lea rax, [0x140507db0]
pop rbx
ret
Function at 0x14019bcf0
Capabilities:
Encode data using xor

Disassembly:
mov r8d, dword [rsp + 0x28]
test ecx, ecx
je 0x14019bd7d
test edx, edx
je 0x14019bdbc
movzx eax, byte [0x140508019]
nop dword [rax]
cmp al, 0x16
je 0x14019bd75
movzx ecx, byte [0x14050a8bc]
mov eax, r8d
xor al, 0x5f
add al, cl
mov edx, r8d
xor dl, 0x18
add dl, cl
lock cmpxchg byte [0x140508019], dl
jne 0x14019bd10
xor eax, eax
lea rcx, [0x140508010]
lea rdx, [0x14042d600]
xor r8d, 0xb860e9eb
nop dword [rax + rax]
cdqe
movzx r9d, byte [rax + rdx]
xor byte [rax + rcx], r9b
mov r9d, dword [0x14050a8b8]
add r9d, r8d
add eax, r9d
cmp eax, 9
jl 0x14019bd50
mov al, 0x16
xchg byte [0x140508019], al
lea rax, [0x140508010]
ret
test edx, edx
je 0x14019be71
movzx eax, byte [0x140507cf3]
cmp al, 0x45
je 0x14019bdb4
mov cl, 0xb3
nop word cs:[rax + rax]
mov al, 0x6c
lock cmpxchg byte [0x140507cf3], cl
je 0x14019be98
cmp al, 0x45
jne 0x14019bda0
lea rax, [0x140507cc0]
ret
movzx eax, byte [0x140507fbe]
nop word cs:[rax + rax]
cmp al, 0x3e
je 0x14019bed0
movzx ecx, byte [0x14050a8bc]
mov edx, r8d
not dl
mov r9d, edx
and r9b, 0x15
mov eax, r8d
and al, 0xea
or al, r9b
add al, cl
and dl, 0x99
mov r9d, r8d
and r9b, 0x66
or r9b, dl
mov edx, r9d
xor dl, cl
and r9b, cl
add r9b, r9b
add r9b, dl
lock cmpxchg byte [0x140507fbe], r9b
jne 0x14019bdd0
xor eax, eax
lea rcx, [0x140507fb0]
lea rdx, [0x14042d5a0]
xor r8d, 0xb860e9f8
nop word cs:[rax + rax]
movzx r9d, byte [rax + rdx]
mov r10d, r9d
xor r10b, r9b
not r10b
and r10b, byte [rax + rcx]
xor r10b, r9b
mov byte [rax + rcx], r10b
lea r9d, [rax + 1]
mov r10d, dword [0x14050a8b8]
add r10d, r8d
cmp r9d, r10d
jge 0x14019bec8
inc rax
jmp 0x14019be40
movzx eax, byte [0x14050802d]
cmp al, 0xf3
je 0x14019be90
mov cl, 0x28
nop
mov al, 0x90
lock cmpxchg byte [0x14050802d], cl
je 0x14019bee8
cmp al, 0xf3
jne 0x14019be80
lea rax, [0x140508020]
ret
xor eax, eax
lea rcx, [0x140507cc0]
lea rdx, [0x14042d2d0]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x32
jg 0x14019bed8
inc rax
jmp 0x14019beb0
mov al, 0x3e
xchg byte [0x140507fbe], al
lea rax, [0x140507fb0]
ret
mov al, 0x45
xchg byte [0x140507cf3], al
lea rax, [0x140507cc0]
ret
xor eax, eax
lea rcx, [0x140508020]
lea rdx, [0x14042d610]
nop dword [rax + rax]
movzx r9d, byte [rax + rdx]
add byte [rax + rcx], r9b
lea r9d, [rax + 1]
cmp r9d, 0xc
jg 0x14019bf18
inc rax
jmp 0x14019bf00
xor r8b, 0xe6
add r8b, byte [0x14050a8bc]
xchg byte [0x14050802d], r8b
lea rax, [0x140508020]
ret
Function at 0x1401b1490
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x1126c2af
add eax, dword [0x14050cd68]
cmp ecx, eax
jne 0x1401b14d6
test edx, edx
je 0x1401b150c
movzx eax, byte [0x14050b344]
cmp al, 0xbb
je 0x1401b14ce
mov cl, 0xc9
mov al, 0x39
lock cmpxchg byte [0x14050b344], cl
je 0x1401b157c
movzx edx, byte [0x14050cd6c]
add dl, 0xe0
cmp al, dl
jne 0x1401b14b0
lea rax, [0x14050b330]
ret
test edx, edx
je 0x1401b153c
movzx eax, byte [0x14050b273]
cmp al, 0x57
je 0x1401b1504
mov cl, 0x14
nop word [rax + rax]
mov al, 0x88
lock cmpxchg byte [0x14050b273], cl
je 0x1401b15a8
cmp al, 0x57
jne 0x1401b14f0
lea rax, [0x14050b270]
ret
movzx eax, byte [0x14050b31d]
cmp al, 0x68
je 0x1401b1534
mov cl, 0x9b
nop dword [rax]
mov al, 0xd
lock cmpxchg byte [0x14050b31d], cl
je 0x1401b15ff
cmp al, 0x68
jne 0x1401b1520
lea rax, [0x14050b310]
ret
movzx eax, byte [0x14050b451]
movzx ecx, byte [0x14050cd6c]
add cl, 0x4a
cmp al, cl
je 0x1401b1574
mov cl, 0xda
nop word cs:[rax + rax]
mov al, 0x3a
lock cmpxchg byte [0x14050b451], cl
je 0x1401b1641
cmp al, 0x25
jne 0x1401b1560
lea rax, [0x14050b440]
ret
xor eax, eax
lea rcx, [0x14050b330]
lea rdx, [0x14042da50]
nop dword [rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x13
jg 0x1401b15ef
inc rax
jmp 0x1401b1590
xor edx, edx
lea rax, [0x14050b270]
lea rcx, [0x14042d990]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 3
jl 0x1401b15c0
mov al, 0x57
xchg byte [0x14050b273], al
lea rax, [0x14050b270]
ret
mov al, 0xbb
xchg byte [0x14050b344], al
lea rax, [0x14050b330]
ret
xor eax, eax
lea rcx, [0x14050b310]
lea rdx, [0x14042da30]
mov r8d, 0x1126c2bc
nop word cs:[rax + rax]
movzx r9d, byte [rax + rdx]
add byte [rax + rcx], r9b
lea r9d, [rax + 1]
mov r10d, dword [0x14050cd68]
add r10d, r8d
cmp r9d, r10d
jge 0x1401b16a1
inc rax
jmp 0x1401b1620
xor edx, edx
lea rax, [0x14050b440]
lea rcx, [0x14042db60]
nop word cs:[rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rdx + rax]
xor r9b, r8b
mov byte [rdx + rax], r9b
mov r8d, dword [0x14050cd68]
add edx, r8d
add edx, 0x1126c2b0
cmp edx, 0x11
jl 0x1401b1660
mov al, 0x25
xchg byte [0x14050b451], al
lea rax, [0x14050b440]
ret
mov al, 0x68
xchg byte [0x14050b31d], al
lea rax, [0x14050b310]
ret
Function at 0x1401b2a40
Capabilities:
Encode data using xor

Disassembly:
mov r8d, dword [rsp + 0x28]
test ecx, ecx
je 0x1401b2a7c
test edx, edx
je 0x1401b2acc
movzx eax, byte [0x14050b19c]
cmp al, 0xea
je 0x1401b2a74
mov cl, 0x35
nop word [rax + rax]
mov al, 0xb5
lock cmpxchg byte [0x14050b19c], cl
je 0x1401b2b2c
cmp al, 0xea
jne 0x1401b2a60
lea rax, [0x14050b190]
ret
mov eax, r8d
xor eax, 0xbe6e42c4
add eax, dword [0x14050cd68]
cmp edx, eax
jne 0x1401b2afc
movzx eax, byte [0x14050b4af]
xor r8b, 0x70
add r8b, byte [0x14050cd6c]
cmp al, r8b
je 0x1401b2ac4
mov cl, 0x7d
nop word [rax + rax]
mov al, 0x25
lock cmpxchg byte [0x14050b4af], cl
je 0x1401b2bd0
cmp al, 0xf6
jne 0x1401b2ab0
lea rax, [0x14050b4a0]
ret
movzx eax, byte [0x14050b3ad]
cmp al, 0x43
je 0x1401b2af4
mov cl, 0xd1
nop dword [rax]
mov al, 0xfb
lock cmpxchg byte [0x14050b3ad], cl
je 0x1401b2b78
cmp al, 0x43
jne 0x1401b2ae0
lea rax, [0x14050b3a0]
ret
movzx eax, byte [0x14050b37b]
cmp al, 0xac
je 0x1401b2b24
mov cl, 0x38
nop dword [rax]
mov al, 0xfc
lock cmpxchg byte [0x14050b37b], cl
je 0x1401b2c0f
cmp al, 0xac
jne 0x1401b2b10
lea rax, [0x14050b360]
ret
xor eax, eax
lea rcx, [0x14050b190]
lea rdx, [0x14042d8c0]
nop dword [rax]
movzx r8d, byte [rax + rdx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rax + rcx]
xor r9b, r8b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
cmp r8d, 0xb
jg 0x1401b2b68
inc rax
jmp 0x1401b2b40
mov al, 0xea
xchg byte [0x14050b19c], al
lea rax, [0x14050b190]
ret
xor eax, eax
lea rcx, [0x14050b3a0]
lea rdx, [0x14042dac0]
xor r8d, 0xbe6e42db
nop
cdqe
movzx r9d, byte [rax + rdx]
add byte [rax + rcx], r9b
mov r9d, dword [0x14050cd68]
mov r10d, r9d
xor r10d, r10d
not r10d
and r10d, r8d
xor r10d, r9d
and r9d, r8d
lea r9d, [r10 + r9*2]
add eax, r9d
cmp eax, 0xd
jl 0x1401b2b90
mov al, 0x43
xchg byte [0x14050b3ad], al
lea rax, [0x14050b3a0]
ret
xor edx, edx
lea rax, [0x14050b4a0]
lea rcx, [0x14042dbc0]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 0xf
jl 0x1401b2be0
mov al, 0xf6
xchg byte [0x14050b4af], al
lea rax, [0x14050b4a0]
ret
xor eax, eax
lea rcx, [0x14050b360]
lea rdx, [0x14042da80]
nop
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x1a
jg 0x1401b2c38
inc rax
jmp 0x1401b2c20
mov al, 0xac
xchg byte [0x14050b37b], al
lea rax, [0x14050b360]
ret
Function at 0x1401b2c60
Capabilities:
Encode data using xor

Disassembly:
mov r8d, dword [rsp + 0x28]
mov eax, r8d
xor eax, 0x10862ea2
mov r9d, dword [0x14050cd68]
add r9d, eax
cmp ecx, r9d
jne 0x1401b2cbc
test edx, edx
je 0x1401b2d38
movzx eax, byte [0x14050b241]
xor r8b, 0xd7
add r8b, byte [0x14050cd6c]
cmp al, r8b
je 0x1401b2cb4
mov cl, 0x8c
nop dword [rax]
mov al, 0x68
lock cmpxchg byte [0x14050b241], cl
je 0x1401b2d6c
cmp al, 0xb5
jne 0x1401b2ca0
lea rax, [0x14050b230]
ret
add eax, dword [0x14050cd68]
cmp edx, eax
jne 0x1401b2cfc
movzx eax, byte [0x14050b3c5]
cmp al, 0xa4
je 0x1401b2cf4
mov cl, 0x50
nop word cs:[rax + rax]
mov al, 0x43
lock cmpxchg byte [0x14050b3c5], cl
je 0x1401b2daf
cmp al, 0xa4
jne 0x1401b2ce0
lea rax, [0x14050b3b0]
ret
movzx eax, byte [0x14050b481]
cmp al, 0xef
je 0x1401b2d30
mov cl, 0xff
nop dword [rax]
mov al, 0x62
lock cmpxchg byte [0x14050b481], cl
je 0x1401b2df1
mov edx, r8d
xor dl, 0x19
add dl, byte [0x14050cd6c]
cmp al, dl
jne 0x1401b2d10
lea rax, [0x14050b470]
ret
movzx eax, byte [0x14050b1f5]
cmp al, 0x6e
je 0x1401b2d64
mov cl, 0xd1
nop word cs:[rax + rax]
mov al, 0x9f
lock cmpxchg byte [0x14050b1f5], cl
je 0x1401b2e48
cmp al, 0x6e
jne 0x1401b2d50
lea rax, [0x14050b1e0]
ret
xor edx, edx
lea rax, [0x14050b230]
lea rcx, [0x14042d960]
nop dword [rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 0x11
jl 0x1401b2d80
mov al, 0xb5
xchg byte [0x14050b241], al
lea rax, [0x14050b230]
ret
xor eax, eax
lea rcx, [0x14050b3b0]
lea rdx, [0x14042dad0]
xor r8d, 0x10862ec9
nop word cs:[rax + rax]
movzx r9d, byte [rax + rdx]
xor byte [rax + rcx], r9b
lea r9d, [rax + 1]
mov r10d, dword [0x14050cd68]
add r10d, r8d
cmp r9d, r10d
jge 0x1401b2e28
inc rax
jmp 0x1401b2dd0
xor eax, eax
lea rcx, [0x14050b470]
lea rdx, [0x14042db90]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x10
jg 0x1401b2e38
inc rax
jmp 0x1401b2e10
mov al, 0xa4
xchg byte [0x14050b3c5], al
lea rax, [0x14050b3b0]
ret
mov al, 0xef
xchg byte [0x14050b481], al
lea rax, [0x14050b470]
ret
xor eax, eax
lea rcx, [0x14050b1e0]
lea rdx, [0x14042d910]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x14
jg 0x1401b2e78
inc rax
jmp 0x1401b2e60
mov al, 0x6e
xchg byte [0x14050b1f5], al
lea rax, [0x14050b1e0]
ret
Function at 0x1401ba7d0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r14
push rsi
push rdi
push rbx
sub rsp, 0x80
lea rbp, [rsp + 0x80]
mov qword [rbp - 8], 0xfffffffffffffffe
mov rdi, r9
mov rbx, r8
mov rsi, rcx
lea r14, [0x14042dd98]
mov qword [rbp - 0x48], r14
lea rcx, [rbp - 0x40]
mov qword [rbp - 0x28], 0
mov qword [rbp - 0x20], 0xf
mov byte [rbp - 0x38], 0
lea rax, [0x140427b38]
mov qword [rbp - 0x40], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
call fcn.140271230
mov qword [rbp - 0x18], rbx
mov qword [rbp - 0x10], rdi
add rsi, 0x30
lea rdx, [rbp - 0x58]
lea r8, [rbp - 0x48]
mov rcx, rsi
call fcn.1401d2050
lea rax, [fcn.1401ba7d0]
add eax, eax
add eax, 0x16a0
mov ecx, eax
not ecx
nop
mov edx, dword [0x14055c268]
lea r8d, [rdx - 1]
imul r8d, edx
test r8b, 1
jne 0x1401ba89a
mov qword [rbp - 0x48], r14
mov edx, dword [0x14050d6f0]
mov r8d, 0x20c830e5
sub r8d, edx
add edx, 0xdf37cf1a
and r8d, ecx
xor edx, eax
or edx, r8d
cmp edx, 0xffffffff
je 0x1401ba8ba
mov qword [rbp - 0x48], r14
mov edx, dword [0x14055c268]
mov r8d, edx
sub r8d, dword [0x14050d6f0]
imul r8d, edx
test r8b, 1
jne 0x1401ba860
jmp 0x1401ba874
mov rax, qword [rbp - 0x20]
cmp rax, 0x10
jb 0x1401ba957
mov ecx, dword [0x14055c26c]
cmp ecx, 0x54
nop word cs:[rax + rax]
mov rsi, qword [rbp - 0x38]
mov ecx, dword [0x14055c268]
lea edx, [rcx - 1]
imul edx, ecx
test dl, 1
jne 0x1401ba8e0
lea rdi, [rax + 1]
cmp rdi, 0x1000
jb 0x1401ba91d
mov rcx, qword [rsi - 8]
sub rsi, rcx
add rsi, 0xfffffffffffffff8
cmp rsi, 0x20
jae 0x1401ba934
add rax, 0x28
mov rdi, rax
mov rsi, rcx
mov eax, dword [0x14055c26c]
mov ecx, 0xdf37cf79
add ecx, dword [0x14050d6f0]
cmp eax, ecx
jl 0x1401ba939
jmp 0x1401ba94a
call fcn.1403c4adc
mov rcx, rsi
mov rdx, rdi
call fcn.1400a7e90
xor eax, eax
test al, al
je 0x1401ba957
mov rcx, rsi
mov rdx, rdi
call fcn.1400a7e90
jmp 0x1401ba939
mov eax, dword [0x14055c26c]
cmp eax, 0x32
mov ecx, dword [0x14055c268]
mov edx, dword [0x14050d6f0]
mov eax, ecx
sub eax, edx
add eax, 0x20c830e6
imul eax, ecx
mov ecx, edx
not ecx
mov r8d, edx
and r8d, 0x20c830e4
mov r9d, ecx
and r9d, 0xdf37cf1b
or r9d, r8d
xor edx, 0x5f37cf1b
and ecx, 0x20c830e4
or ecx, edx
not ecx
lea ecx, [r9 + rcx*2]
xor edx, edx
div ecx
test edx, edx
jne 0x1401ba960
add rsp, 0x80
pop rbx
pop rdi
pop rsi
pop r14
pop rbp
ret
Function at 0x1401e1c90
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0xc99c3e9c
test ecx, ecx
je 0x1401e1cd6
add eax, dword [0x14050ef38]
cmp edx, eax
jne 0x1401e1d1c
movzx eax, byte [0x14050e692]
cmp al, 0xc0
je 0x1401e1cce
mov cl, 0xa7
mov al, 0xcd
lock cmpxchg byte [0x14050e692], cl
je 0x1401e1dac
movzx edx, byte [0x14050ef48]
add dl, 0xfc
cmp al, dl
jne 0x1401e1cb0
lea rax, [0x14050e680]
ret
add eax, dword [0x14050ef38]
cmp edx, eax
jne 0x1401e1d78
movzx eax, byte [0x14050e5b0]
cmp al, 0xaf
je 0x1401e1d14
mov cl, 0xc1
nop word cs:[rax + rax]
mov al, 0x3f
lock cmpxchg byte [0x14050e5b0], cl
je 0x1401e1e01
cmp al, 0xaf
jne 0x1401e1d00
lea rax, [0x14050e5a0]
ret
movzx eax, byte [0x14050e600]
nop word cs:[rax + rax]
cmp al, 0x88
je 0x1401e1df9
movzx ecx, byte [0x14050ef48]
lea eax, [rcx + 0x63]
add cl, 0xbc
lock cmpxchg byte [0x14050e600], cl
jne 0x1401e1d30
xor eax, eax
lea rcx, [0x14050e5f0]
lea rdx, [0x14042e700]
nop
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xf
jg 0x1401e1df1
inc rax
jmp 0x1401e1d60
movzx eax, byte [0x14050e669]
cmp al, 0x48
je 0x1401e1da4
mov cl, 0x5a
nop word cs:[rax + rax]
mov al, 0x9d
lock cmpxchg byte [0x14050e669], cl
je 0x1401e1e38
cmp al, 0x48
jne 0x1401e1d90
lea rax, [0x14050e660]
ret
xor edx, edx
lea rax, [0x14050e680]
lea rcx, [0x14042e780]
nop dword [rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, dword [0x14050ef38]
add edx, r8d
add edx, 0xc99c3e9d
cmp edx, 0x12
jl 0x1401e1dc0
mov al, 0xc0
xchg byte [0x14050e692], al
lea rax, [0x14050e680]
ret
mov al, 0x88
xchg byte [0x14050e600], al
lea rax, [0x14050e5f0]
ret
xor eax, eax
lea rcx, [0x14050e5a0]
lea rdx, [0x14042e6c0]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xf
jg 0x1401e1e8a
inc rax
jmp 0x1401e1e20
xor r8d, r8d
lea rax, [0x14050e660]
lea rcx, [0x14042e760]
mov edx, 0xc99c3ea5
nop
movsxd r8, r8d
movzx r9d, byte [r8 + rcx]
xor byte [r8 + rax], r9b
mov r9d, r8d
xor r9d, 1
and r8d, 1
lea r8d, [r9 + r8*2]
mov r9d, dword [0x14050ef38]
add r9d, edx
cmp r8d, r9d
jl 0x1401e1e50
mov al, 0x48
xchg byte [0x14050e669], al
lea rax, [0x14050e660]
ret
mov al, 0xaf
xchg byte [0x14050e5b0], al
lea rax, [0x14050e5a0]
ret
Function at 0x1401e5720
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
mov r8d, dword [rsp + 0x38]
test ecx, ecx
je 0x1401e57fd
mov eax, dword [0x14050f3f0]
mov ecx, r8d
xor ecx, 0x48ada097
mov r9d, r8d
xor r9d, ecx
xor r9d, 0xb7525f68
and r9d, eax
xor r9d, ecx
and ecx, eax
lea eax, [r9 + rcx*2]
cmp edx, eax
jne 0x1401e5839
movzx eax, byte [0x14050f2b7]
nop word cs:[rax + rax]
cmp al, 0x22
je 0x1401e57f1
movzx ecx, byte [0x14050f3f4]
mov edx, r8d
not dl
mov r9d, edx
and r9b, 0xbc
mov eax, r8d
and al, 0x43
or al, r9b
add al, cl
and dl, 0xc6
mov r9d, r8d
and r9b, 0x39
or r9b, dl
add r9b, cl
lock cmpxchg byte [0x14050f2b7], r9b
jne 0x1401e5770
xor edx, edx
lea rax, [0x14050f290]
lea rcx, [0x14042ea60]
nop dword [rax]
movsxd rdx, edx
movzx r9d, byte [rdx + rcx]
add byte [rdx + rax], r9b
mov r9d, edx
xor r9d, 1
and edx, 1
lea edx, [r9 + rdx*2]
cmp edx, 0x27
jl 0x1401e57c0
xor r8b, 0xbb
add r8b, byte [0x14050f3f4]
xchg byte [0x14050f2b7], r8b
lea rax, [0x14050f290]
jmp 0x1401e59e7
test edx, edx
je 0x1401e58ca
movzx eax, byte [0x14050f2e9]
cmp al, 0x4a
je 0x1401e59a7
mov cl, 0x4d
nop word cs:[rax + rax]
mov al, 0xeb
lock cmpxchg byte [0x14050f2e9], cl
je 0x1401e595f
cmp al, 0x4a
jne 0x1401e5820
jmp 0x1401e59a7
movzx eax, byte [0x14050f28d]
cmp al, 0xe7
je 0x1401e5953
movzx ecx, byte [0x14050f3f4]
mov eax, r8d
xor al, 0xba
add al, cl
mov edx, r8d
xor dl, 0x6b
add dl, cl
lock cmpxchg byte [0x14050f28d], dl
jne 0x1401e5840
xor eax, eax
lea rcx, [0x14050f280]
lea rdx, [0x14042ea50]
nop dword [rax + rax]
movzx r9d, byte [rax + rdx]
add byte [rax + rcx], r9b
lea r9d, [rax + 1]
mov r10d, dword [0x14050f3f0]
mov r11d, r8d
xor r11d, 0x48ada0a4
mov esi, r8d
xor esi, 0xb7525f5b
mov edi, r10d
xor edi, esi
xor esi, r11d
and esi, r10d
xor esi, r11d
and edi, r10d
lea r10d, [rsi + rdi*2]
cmp r9d, r10d
jge 0x1401e594b
inc rax
jmp 0x1401e5880
movzx eax, byte [0x14050f300]
cmp al, 0x42
je 0x1401e59e0
nop dword [rax]
movzx ecx, byte [0x14050f3f4]
mov edx, r8d
not dl
mov r9d, edx
and r9b, 0x20
mov eax, r8d
xor al, 0x20
and al, r8b
or al, r9b
add al, cl
add al, 0xa8
mov r9d, eax
xor r9b, 0x58
and al, 0x58
add al, al
add al, r9b
and dl, 0x65
mov r9d, r8d
and r9b, 0x9a
or r9b, dl
mov edx, r9d
xor dl, cl
and r9b, cl
add r9b, r9b
add r9b, dl
lock cmpxchg byte [0x14050f300], r9b
je 0x1401e59b0
mov ecx, r8d
xor cl, 0x5b
add cl, byte [0x14050f3f4]
cmp al, cl
jne 0x1401e58e0
jmp 0x1401e59e0
mov al, 0xe7
xchg byte [0x14050f28d], al
lea rax, [0x14050f280]
jmp 0x1401e59e7
xor eax, eax
lea rcx, [0x14050f2c0]
lea rdx, [0x14042ea90]
nop
movzx r8d, byte [rax + rcx]
movzx r9d, byte [rax + rdx]
not r9b
mov r10d, r9d
or r10b, r8b
not r10b
and r9b, r8b
or r9b, r10b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
cmp r8d, 0x28
jg 0x1401e599f
inc rax
jmp 0x1401e5970
mov al, 0x4a
xchg byte [0x14050f2e9], al
lea rax, [0x14050f2c0]
jmp 0x1401e59e7
xor eax, eax
lea rcx, [0x14050f2f0]
lea rdx, [0x14042eac0]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xf
jg 0x1401e59d8
inc rax
jmp 0x1401e59c0
mov al, 0x42
xchg byte [0x14050f300], al
lea rax, [0x14050f2f0]
pop rdi
pop rsi
ret