joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1401b78d0
Capabilities:
Encode data using xor

Disassembly:
mov r8d, dword [rsp + 0x28]
test ecx, ecx
je 0x1401b7918
test edx, edx
je 0x1401b79af
movzx eax, byte [0x1405119fe]
cmp al, 0x66
je 0x1401b7910
mov cl, 0x78
nop
mov al, 0xe
lock cmpxchg byte [0x1405119fe], cl
je 0x1401b7a1c
mov edx, r8d
xor dl, 0xf1
add dl, byte [0x140511edc]
cmp al, dl
jne 0x1401b78f0
lea rax, [0x1405119f0]
ret
test edx, edx
je 0x1401b79dc
movzx eax, byte [0x140511b1f]
nop word [rax + rax]
cmp al, 0x38
je 0x1401b7a75
movzx ecx, byte [0x140511edc]
mov eax, r8d
xor al, 0x9e
add al, cl
mov edx, r8d
xor dl, 0x1e
mov r9d, edx
xor r9b, cl
and dl, cl
add dl, dl
add dl, r9b
lock cmpxchg byte [0x140511b1f], dl
jne 0x1401b7930
xor eax, eax
lea rcx, [0x140511b10]
lea rdx, [0x14042d510]
xor r8d, 0x5e8605a4
nop word [rax + rax]
movzx r9d, byte [rax + rdx]
add byte [rax + rcx], r9b
lea r9d, [rax + 1]
mov r10d, dword [0x140511ee0]
mov r11d, r8d
xor r11d, r10d
and r10d, r8d
lea r10d, [r11 + r10*2]
cmp r9d, r10d
jge 0x1401b7a6d
inc rax
jmp 0x1401b7980
movzx eax, byte [0x140511984]
cmp al, 0x84
je 0x1401b79d4
mov cl, 0xe8
nop dword [rax]
mov al, 0x37
lock cmpxchg byte [0x140511984], cl
je 0x1401b7a7d
cmp al, 0x84
jne 0x1401b79c0
lea rax, [0x140511980]
ret
movzx eax, byte [0x140511975]
mov ecx, r8d
xor cl, 0xa7
add cl, byte [0x140511edc]
cmp al, cl
je 0x1401b7a14
mov cl, 0xb3
nop word cs:[rax + rax]
mov al, 0xbf
lock cmpxchg byte [0x140511975], cl
je 0x1401b7ad2
cmp al, 0x9c
jne 0x1401b7a00
lea rax, [0x140511970]
ret
xor eax, eax
lea rcx, [0x1405119f0]
lea rdx, [0x14042d400]
xor r8d, 0x5e8605d6
nop word cs:[rax + rax]
cdqe
movzx r9d, byte [rax + rdx]
xor byte [rax + rcx], r9b
mov r9d, dword [0x140511ee0]
add r9d, r8d
add eax, r9d
cmp eax, 0xe
jl 0x1401b7a40
mov al, 0x66
xchg byte [0x1405119fe], al
lea rax, [0x1405119f0]
ret
mov al, 0x38
xchg byte [0x140511b1f], al
lea rax, [0x140511b10]
ret
xor eax, eax
lea rcx, [0x140511980]
lea rdx, [0x14042d3a0]
nop dword [rax]
movzx r9d, byte [rax + rdx]
mov r10d, r9d
xor r10b, r9b
not r10b
and r10b, byte [rax + rcx]
xor r10b, r9b
mov byte [rax + rcx], r10b
lea r9d, [rax + 1]
cmp r9d, 3
jg 0x1401b7ab8
inc rax
jmp 0x1401b7a90
xor r8b, 0xcf
add r8b, byte [0x140511edc]
xchg byte [0x140511984], r8b
lea rax, [0x140511980]
ret
xor eax, eax
lea rcx, [0x140511970]
lea rdx, [0x14042d390]
xor r8d, 0x5e8605da
nop dword [rax]
movzx r9d, byte [rax + rdx]
xor byte [rax + rcx], r9b
lea r9d, [rax + 1]
mov r10d, dword [0x140511ee0]
add r10d, r8d
cmp r9d, r10d
jge 0x1401b7b11
inc rax
jmp 0x1401b7af0
mov al, 0x9c
xchg byte [0x140511975], al
lea rax, [0x140511970]
ret
Function at 0x1401c2b90
Capabilities:
Encode data using xor

Disassembly:
mov r8d, dword [rsp + 0x28]
test ecx, ecx
je 0x1401c2bcc
test edx, edx
je 0x1401c2c20
movzx eax, byte [0x140513ce0]
cmp al, 0xbb
je 0x1401c2bc4
mov cl, 0xd7
nop
mov al, 0x9f
lock cmpxchg byte [0x140513ce0], cl
je 0x1401c2c9c
cmp al, 0xbb
jne 0x1401c2bb0
lea rax, [0x140513cd0]
ret
test edx, edx
je 0x1401c2c6a
movzx eax, byte [0x140513cc9]
mov ecx, r8d
xor cl, 0x1a
add cl, byte [0x140513db8]
cmp al, cl
je 0x1401c2c18
nop dword [rax + rax]
movzx ecx, byte [0x140513db8]
mov eax, r8d
xor al, 0x18
add al, cl
mov edx, r8d
xor dl, 0x9d
add dl, cl
lock cmpxchg byte [0x140513cc9], dl
je 0x1401c2cd8
cmp al, 0x32
jne 0x1401c2bf0
lea rax, [0x140513ca0]
ret
movzx eax, byte [0x140513d89]
cmp al, 0x59
je 0x1401c2c62
mov cl, 0xbe
nop dword [rax]
mov al, 0x61
lock cmpxchg byte [0x140513d89], cl
je 0x1401c2d2d
movzx edx, byte [0x140513db8]
mov r9d, r8d
xor r9b, 0x7d
mov r10d, r9d
xor r10b, dl
and r9b, dl
add r9b, r9b
add r9b, r10b
cmp al, r9b
jne 0x1401c2c30
lea rax, [0x140513d80]
ret
movzx eax, byte [0x140513daf]
cmp al, 0xe8
je 0x1401c2c94
mov cl, 0xd8
nop word [rax + rax]
mov al, 0xd0
lock cmpxchg byte [0x140513daf], cl
je 0x1401c2d68
cmp al, 0xe8
jne 0x1401c2c80
lea rax, [0x140513da0]
ret
xor eax, eax
lea rcx, [0x140513cd0]
lea rdx, [0x14042daa0]
nop dword [rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xf
jg 0x1401c2cc8
inc rax
jmp 0x1401c2cb0
mov al, 0xbb
xchg byte [0x140513ce0], al
lea rax, [0x140513cd0]
ret
xor eax, eax
lea rcx, [0x140513ca0]
lea rdx, [0x14042da70]
xor r8d, 0xa5c39a9d
nop
cdqe
movzx r9d, byte [rax + rdx]
mov r10d, r9d
xor r10b, r9b
not r10b
and r10b, byte [rax + rcx]
xor r10b, r9b
mov byte [rax + rcx], r10b
mov r9d, dword [0x140513dbc]
add r9d, r8d
add eax, r9d
cmp eax, 0x29
jl 0x1401c2cf0
mov al, 0x32
xchg byte [0x140513cc9], al
lea rax, [0x140513ca0]
ret
xor eax, eax
lea rcx, [0x140513d80]
lea rdx, [0x14042db40]
nop dword [rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 8
jg 0x1401c2d58
inc rax
jmp 0x1401c2d40
mov al, 0x59
xchg byte [0x140513d89], al
lea rax, [0x140513d80]
ret
xor eax, eax
lea rcx, [0x140513da0]
lea rdx, [0x14042db60]
xor r8d, 0xa5c39a8f
nop
movzx r9d, byte [rax + rdx]
add byte [rax + rcx], r9b
lea r9d, [rax + 1]
mov r10d, dword [0x140513dbc]
add r10d, r8d
cmp r9d, r10d
jge 0x1401c2da1
inc rax
jmp 0x1401c2d80
mov al, 0xe8
xchg byte [0x140513daf], al
lea rax, [0x140513da0]
ret
Function at 0x1401d56c0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x20
mov rsi, rcx
xorps xmm0, xmm0
movups xmmword [rcx + 0x68], xmm0
movups xmmword [rcx + 0x58], xmm0
movups xmmword [rcx + 0x48], xmm0
movups xmmword [rcx + 0x38], xmm0
movups xmmword [rcx + 0x28], xmm0
movups xmmword [rcx + 0x18], xmm0
movups xmmword [rcx + 8], xmm0
mov rdi, qword [rcx + 0x78]
mov rbx, qword [rcx + 0x80]
cmp rdi, rbx
je 0x1401d5735
nop dword [rax]
mov rax, qword [rdi]
mov rax, qword [rax]
mov ecx, dword [0x140516608]
mov edx, ecx
xor edx, 0x70392d65
and ecx, 0x70392d65
lea edx, [rdx + rcx*2]
add edx, 0x81775ac7
mov rcx, rdi
call qword [0x1404ee420]
add rdi, 0x40
cmp rdi, rbx
jne 0x1401d5700
mov rax, qword [rsi + 0x78]
mov qword [rsi + 0x80], rax
add rsp, 0x20
pop rbx
pop rdi
pop rsi
ret
Function at 0x1401eece0
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x1401eed1c
test edx, edx
je 0x1401eed4c
movzx eax, byte [0x140517927]
cmp al, 9
je 0x1401eed14
mov cl, 0xb
nop word cs:[rax + rax]
mov al, 0xe9
lock cmpxchg byte [0x140517927], cl
je 0x1401eedac
cmp al, 9
jne 0x1401eed00
lea rax, [0x140517920]
ret
test edx, edx
je 0x1401eed7c
movzx eax, byte [0x140517c1d]
cmp al, 0xe5
je 0x1401eed44
mov cl, 0x39
nop dword [rax]
mov al, 0x3a
lock cmpxchg byte [0x140517c1d], cl
je 0x1401eedf8
cmp al, 0xe5
jne 0x1401eed30
lea rax, [0x140517c10]
ret
movzx eax, byte [0x140517d6f]
cmp al, 0xfe
je 0x1401eed74
mov cl, 0x40
nop dword [rax]
mov al, 0x68
lock cmpxchg byte [0x140517d6f], cl
je 0x1401eee28
cmp al, 0xfe
jne 0x1401eed60
lea rax, [0x140517d60]
ret
movzx eax, byte [0x140517ff0]
cmp al, 0xfa
je 0x1401eeda4
mov cl, 0xe1
nop dword [rax]
mov al, 0xdb
lock cmpxchg byte [0x140517ff0], cl
je 0x1401eee8c
cmp al, 0xfa
jne 0x1401eed90
lea rax, [0x140517fe0]
ret
xor eax, eax
lea rcx, [0x140517920]
lea rdx, [0x14042f860]
nop dword [rax]
movzx r8d, byte [rax + rdx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rax + rcx]
xor r9b, r8b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
cmp r8d, 6
jg 0x1401eede8
inc rax
jmp 0x1401eedc0
mov al, 9
xchg byte [0x140517927], al
lea rax, [0x140517920]
ret
xor eax, eax
lea rcx, [0x140517c10]
lea rdx, [0x14042fb30]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x1401eee6c
inc rax
jmp 0x1401eee10
xor eax, eax
lea rcx, [0x140517d60]
lea rdx, [0x14042fc80]
nop dword [rax + rax]
movzx r8d, byte [rax + rcx]
movzx r9d, byte [rax + rdx]
mov r10d, r8d
xor r10b, r9b
and r8b, r9b
add r8b, r8b
add r8b, r10b
mov byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xe
jg 0x1401eee7c
inc rax
jmp 0x1401eee40
mov al, 0xe5
xchg byte [0x140517c1d], al
lea rax, [0x140517c10]
ret
mov al, 0xfe
xchg byte [0x140517d6f], al
lea rax, [0x140517d60]
ret
xor edx, edx
lea rax, [0x140517fe0]
lea rcx, [0x14042ff00]
nop dword [rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
xor byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 0x10
jl 0x1401eeea0
mov al, 0xfa
xchg byte [0x140517ff0], al
lea rax, [0x140517fe0]
ret
Function at 0x1401efb60
Capabilities:
Authenticate hmac
Check for software breakpoints
Encode data using xor

Disassembly:
test ecx, ecx
je 0x1401efb9c
test edx, edx
je 0x1401efc3f
movzx eax, byte [0x140517d5d]
cmp al, 0xcc
je 0x1401efb94
mov cl, 0x36
nop dword [rax]
mov al, 0xf4
lock cmpxchg byte [0x140517d5d], cl
je 0x1401efcbc
cmp al, 0xcc
jne 0x1401efb80
lea rax, [0x140517d50]
ret
test edx, edx
je 0x1401efc87
movzx eax, byte [0x140517a4d]
nop dword [rax + rax]
cmp al, 0x66
je 0x1401efc37
movzx ecx, byte [0x140518a38]
mov edx, ecx
xor dl, 0xf5
mov eax, ecx
and al, 0x75
add al, al
add al, dl
add cl, 0xe4
lock cmpxchg byte [0x140517a4d], cl
jne 0x1401efbb0
xor eax, eax
lea rcx, [0x140517a20]
lea rdx, [0x14042f950]
nop dword [rax]
cdqe
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
mov r8d, dword [0x140518a28]
mov r9d, r8d
xor r9d, 0xe7c13e59
and r8d, 0x67c13e59
lea r8d, [r9 + r8*2]
add eax, r8d
cmp eax, 0x2d
jl 0x1401efbf0
movzx eax, byte [0x140518a38]
mov ecx, eax
xor cl, 0xa6
and al, 0x26
add al, al
add al, cl
xchg byte [0x140517a4d], al
lea rax, [0x140517a20]
ret
movzx eax, byte [0x140517efa]
movzx ecx, byte [0x140518a38]
add cl, 0x9c
cmp al, cl
je 0x1401efc7f
nop word cs:[rax + rax]
movzx ecx, byte [0x140518a38]
lea eax, [rcx + 0x1c]
add cl, 0x24
lock cmpxchg byte [0x140517efa], cl
je 0x1401efcf8
cmp al, 0x5c
jne 0x1401efc60
lea rax, [0x140517ef0]
ret
movzx eax, byte [0x1405175c6]
movzx ecx, byte [0x140518a38]
add cl, 0x65
cmp al, cl
je 0x1401efcb4
mov cl, 0x72
nop
mov al, 0xa8
lock cmpxchg byte [0x1405175c6], cl
je 0x1401efd3f
cmp al, 0x25
jne 0x1401efca0
lea rax, [0x1405175b0]
ret
xor eax, eax
lea rcx, [0x140517d50]
lea rdx, [0x14042fc70]
nop dword [rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x1401efce8
inc rax
jmp 0x1401efcd0
mov al, 0xcc
xchg byte [0x140517d5d], al
lea rax, [0x140517d50]
ret
xor edx, edx
lea rax, [0x140517ef0]
lea rcx, [0x14042fe10]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
xor byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 0xa
jl 0x1401efd10
mov al, 0x5c
xchg byte [0x140517efa], al
lea rax, [0x140517ef0]
ret
xor edx, edx
lea rax, [0x1405175b0]
lea rcx, [0x14042f510]
nop
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rdx + rax]
xor r9b, r8b
mov byte [rdx + rax], r9b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 0x16
jl 0x1401efd50
mov al, 0x25
xchg byte [0x1405175c6], al
lea rax, [0x1405175b0]
ret
Function at 0x1401f37e0
Capabilities:
Encode data using xor

Disassembly:
mov r8d, dword [rsp + 0x28]
mov eax, r8d
xor eax, 0xc86330ba
test ecx, ecx
je 0x1401f384c
add eax, dword [0x140518a28]
cmp edx, eax
jne 0x1401f388c
movzx eax, byte [0x140517c6d]
cmp al, 4
je 0x1401f3844
nop word [rax + rax]
movzx ecx, byte [0x140518a38]
mov eax, r8d
xor al, 0xbb
add al, cl
mov edx, r8d
xor dl, 0xe0
add dl, cl
lock cmpxchg byte [0x140517c6d], dl
je 0x1401f38fc
mov ecx, r8d
xor cl, 0xa6
add cl, byte [0x140518a38]
cmp al, cl
jne 0x1401f3810
lea rax, [0x140517c60]
ret
add eax, dword [0x140518a28]
cmp edx, eax
jne 0x1401f38cc
movzx eax, byte [0x140517d0d]
cmp al, 0x50
je 0x1401f3884
mov cl, 0x8b
nop word cs:[rax + rax]
mov al, 0xe2
lock cmpxchg byte [0x140517d0d], cl
je 0x1401f39b8
cmp al, 0x50
jne 0x1401f3870
lea rax, [0x140517d00]
ret
movzx eax, byte [0x140517e5d]
xor r8b, 0xa1
add r8b, byte [0x140518a38]
cmp al, r8b
je 0x1401f38c4
mov cl, 0xe9
nop word cs:[rax + rax]
mov al, 0xce
lock cmpxchg byte [0x140517e5d], cl
je 0x1401f396c
cmp al, 3
jne 0x1401f38b0
lea rax, [0x140517e50]
ret
movzx eax, byte [0x140517c54]
cmp al, 0xd6
je 0x1401f38f4
mov cl, 0xcc
nop dword [rax]
mov al, 0xf3
lock cmpxchg byte [0x140517c54], cl
je 0x1401f39f1
cmp al, 0xd6
jne 0x1401f38e0
lea rax, [0x140517c40]
ret
xor edx, edx
lea rax, [0x140517c60]
lea rcx, [0x14042fb80]
nop dword [rax]
movsxd rdx, edx
movzx r9d, byte [rdx + rax]
movzx r10d, byte [rdx + rcx]
not r9b
mov r11d, r9d
and r11b, r10b
or r9b, r10b
not r9b
or r9b, r11b
mov byte [rdx + rax], r9b
add edx, 0x4ae5062e
mov r9d, edx
xor r9d, 1
and edx, 1
lea edx, [r9 + rdx*2]
add edx, 0xb51af9d2
cmp edx, 0xd
jl 0x1401f3910
xor r8b, 0xa6
add r8b, byte [0x140518a38]
xchg byte [0x140517c6d], r8b
lea rax, [0x140517c60]
ret
xor eax, eax
lea rcx, [0x140517e50]
lea rdx, [0x14042fd70]
nop dword [rax]
movzx r8d, byte [rax + rdx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rax + rcx]
xor r9b, r8b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x1401f39a8
inc rax
jmp 0x1401f3980
mov al, 3
xchg byte [0x140517e5d], al
lea rax, [0x140517e50]
ret
xor eax, eax
lea rcx, [0x140517d00]
lea rdx, [0x14042fc20]
xor r8d, 0xc8633087
nop
movzx r9d, byte [rax + rdx]
add byte [rax + rcx], r9b
lea r9d, [rax + 1]
mov r10d, dword [0x140518a28]
add r10d, r8d
cmp r9d, r10d
jge 0x1401f3a28
inc rax
jmp 0x1401f39d0
xor eax, eax
lea rcx, [0x140517c40]
lea rdx, [0x14042fb60]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x13
jg 0x1401f3a38
inc rax
jmp 0x1401f3a10
mov al, 0x50
xchg byte [0x140517d0d], al
lea rax, [0x140517d00]
ret
mov al, 0xd6
xchg byte [0x140517c54], al
lea rax, [0x140517c40]
ret
Function at 0x140214fe0
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x14021501c
test edx, edx
je 0x14021504c
movzx eax, byte [0x14051c95d]
cmp al, 0xbc
je 0x140215014
mov cl, 0x41
nop word cs:[rax + rax]
mov al, 0x99
lock cmpxchg byte [0x14051c95d], cl
je 0x1402150b6
cmp al, 0xbc
jne 0x140215000
lea rax, [0x14051c950]
ret
test edx, edx
je 0x14021507c
movzx eax, byte [0x14051c6db]
cmp al, 0xdb
je 0x140215044
mov cl, 0x94
nop dword [rax]
mov al, 0x4f
lock cmpxchg byte [0x14051c6db], cl
je 0x1402150f8
cmp al, 0xdb
jne 0x140215030
lea rax, [0x14051c6c0]
ret
movzx eax, byte [0x14051c8be]
cmp al, 0xd2
je 0x140215074
mov cl, 0xa9
nop dword [rax]
mov al, 0xe2
lock cmpxchg byte [0x14051c8be], cl
je 0x140215128
cmp al, 0xd2
jne 0x140215060
lea rax, [0x14051c8b0]
ret
movzx eax, byte [0x14051ca65]
cmp al, 0xc4
je 0x1402150ae
mov cl, 0x71
nop dword [rax]
mov al, 0x3d
lock cmpxchg byte [0x14051ca65], cl
je 0x140215186
movzx edx, byte [0x14051e608]
add dl, 0xd5
cmp al, dl
jne 0x140215090
lea rax, [0x14051ca50]
ret
xor eax, eax
lea rcx, [0x14051c950]
lea rdx, [0x140431770]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x1402150e8
inc rax
jmp 0x1402150d0
mov al, 0xbc
xchg byte [0x14051c95d], al
lea rax, [0x14051c950]
ret
xor eax, eax
lea rcx, [0x14051c6c0]
lea rdx, [0x140431500]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x1a
jg 0x14021516f
inc rax
jmp 0x140215110
xor edx, edx
lea rax, [0x14051c8b0]
lea rcx, [0x1404316d0]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
xor byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 0xe
jl 0x140215140
mov al, 0xd2
xchg byte [0x14051c8be], al
lea rax, [0x14051c8b0]
ret
movzx eax, byte [0x14051e608]
add al, 0xec
xchg byte [0x14051c6db], al
lea rax, [0x14051c6c0]
ret
xor edx, edx
lea rax, [0x14051ca50]
lea rcx, [0x140431860]
nop word cs:[rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, dword [0x14051e5f8]
add edx, r8d
add edx, 0x4a2b697
add r8d, 0x4a2b6ab
cmp edx, r8d
jl 0x1402151a0
mov al, 0xc4
xchg byte [0x14051ca65], al
lea rax, [0x14051ca50]
ret
Function at 0x1402169f0
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x140216a41
test edx, edx
je 0x140216a86
movzx eax, byte [0x14051caf5]
cmp al, 0xe3
je 0x140216a39
nop word [rax + rax]
movzx ecx, byte [0x14051e608]
lea eax, [rcx - 0x3d]
add cl, 0x5e
lock cmpxchg byte [0x14051caf5], cl
je 0x140216afc
movzx ecx, byte [0x14051e608]
add cl, 0xf4
cmp al, cl
jne 0x140216a10
lea rax, [0x14051cae0]
ret
mov eax, 0x4a2b696
add eax, dword [0x14051e5f8]
cmp edx, eax
jne 0x140216ac6
movzx eax, byte [0x14051ccfc]
cmp al, 0x60
je 0x140216a7e
mov cl, 0x2a
nop dword [rax]
mov al, 0x30
lock cmpxchg byte [0x14051ccfc], cl
je 0x140216b88
movzx edx, byte [0x14051e608]
add dl, 0x71
cmp al, dl
jne 0x140216a60
lea rax, [0x14051ccf0]
ret
movzx eax, byte [0x14051c83a]
movzx ecx, byte [0x14051e608]
add cl, 0x38
cmp al, cl
je 0x140216abe
mov cl, 0xfd
nop dword [rax]
mov al, 0x9e
lock cmpxchg byte [0x14051c83a], cl
je 0x140216b48
movzx edx, byte [0x14051e608]
add dl, 0x38
cmp al, dl
jne 0x140216aa0
lea rax, [0x14051c820]
ret
movzx eax, byte [0x14051ccdc]
movzx ecx, byte [0x14051e608]
add cl, 0xd7
cmp al, cl
je 0x140216af4
mov cl, 0x84
nop dword [rax]
mov al, 0xfd
lock cmpxchg byte [0x14051ccdc], cl
je 0x140216bcf
cmp al, 0xc6
jne 0x140216ae0
lea rax, [0x14051ccd0]
ret
xor eax, eax
lea rcx, [0x14051cae0]
lea rdx, [0x1404318f0]
nop dword [rax]
movzx r8d, byte [rax + rdx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rax + rcx]
xor r9b, r8b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
cmp r8d, 0x14
jg 0x140216b38
inc rax
jmp 0x140216b10
mov al, 0xe3
xchg byte [0x14051caf5], al
lea rax, [0x14051cae0]
ret
xor eax, eax
lea rcx, [0x14051c820]
lea rdx, [0x140431640]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x19
jg 0x140216b78
inc rax
jmp 0x140216b60
mov al, 0x27
xchg byte [0x14051c83a], al
lea rax, [0x14051c820]
ret
xor edx, edx
lea rax, [0x14051ccf0]
lea rcx, [0x140431b00]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
xor byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 0xc
jl 0x140216ba0
mov al, 0x60
xchg byte [0x14051ccfc], al
lea rax, [0x14051ccf0]
ret
xor eax, eax
lea rcx, [0x14051ccd0]
lea rdx, [0x140431ae0]
mov r8d, 0x4a2b6a2
nop word cs:[rax + rax]
movzx r9d, byte [rax + rdx]
add byte [rax + rcx], r9b
lea r9d, [rax + 1]
mov r10d, dword [0x14051e5f8]
add r10d, r8d
cmp r9d, r10d
jge 0x140216c11
inc rax
jmp 0x140216bf0
movzx eax, byte [0x14051e608]
add al, 0xd7
xchg byte [0x14051ccdc], al
lea rax, [0x14051ccd0]
ret
Function at 0x140218b50
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x40
mov edi, r9d
mov esi, dword [rsp + 0xa0]
test ecx, ecx
je 0x140218bb9
mov eax, edi
xor eax, 0x11bab71d
mov r8d, esi
xor r8d, 0xb542edbb
mov ecx, edx
mov edx, eax
call fcn.140218af0
test al, 1
je 0x140218bf9
movzx eax, byte [0x14051cc7d]
cmp al, 0x2f
je 0x140218cb7
mov cl, 0x96
nop dword [rax + rax]
mov al, 0xa3
lock cmpxchg byte [0x14051cc7d], cl
je 0x140218c79
cmp al, 0x2f
jne 0x140218ba0
jmp 0x140218cb7
test edx, edx
je 0x140218c44
mov ecx, edi
xor ecx, 0x66290b97
mov edx, esi
xor edx, 0x22918e6d
call fcn.1402175e0
test al, 1
jne 0x140218d94
mov cl, 0x7e
mov al, 0xfd
lock cmpxchg byte [0x14051cb5d], cl
je 0x140218d0c
cmp al, 0x25
jne 0x140218be0
jmp 0x140218d94
xor edi, 0xf7c36511
mov edx, esi
xor edx, 0xd12f0993
add edx, dword [0x14051e5f8]
xor edx, esi
mov ecx, edi
call fcn.140218b30
test al, 1
jne 0x140218d00
mov cl, 0xc
xor eax, eax
lock cmpxchg byte [0x140564eb8], cl
je 0x140218cc3
mov edx, esi
xor dl, 0x1d
add dl, byte [0x14051e608]
cmp al, dl
jne 0x140218c20
jmp 0x140218d00
movzx eax, byte [0x14051c400]
cmp al, 0x4d
je 0x140218dea
mov cl, 0xf8
nop word cs:[rax + rax]
mov al, 0x11
lock cmpxchg byte [0x14051c400], cl
je 0x140218d9d
cmp al, 0x4d
jne 0x140218c60
jmp 0x140218dea
xor edx, edx
lea rax, [0x14051cc70]
lea rcx, [0x140431a80]
nop dword [rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 0xd
jl 0x140218c90
mov al, 0x2f
xchg byte [0x14051cc7d], al
lea rax, [0x14051cc70]
jmp 0x140218df1
xor eax, eax
lea rcx, [0x14051c5d0]
lea rdx, [0x140431410]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x1e
jg 0x140218cf8
inc rax
jmp 0x140218ce0
mov al, 0xd1
xchg byte [0x140564eb8], al
lea rax, [0x14051c5d0]
jmp 0x140218df1
xor eax, eax
lea r14, [0x14051cb50]
lea r15, [0x140431960]
mov ebp, edi
xor ebp, 0xf91c2727
mov r12d, esi
xor r12d, 0x6ca5660c
lea rbx, [rsp + 0x3c]
nop word cs:[rax + rax]
movsxd r8, eax
movzx ecx, byte [r8 + r14]
movzx edx, byte [r8 + r15]
mov eax, dword [0x14051e5f8]
add eax, r12d
mov r9d, eax
xor r9d, eax
not r9d
and r9d, esi
xor r9d, eax
mov dword [rsp + 0x20], ebp
mov dword [rsp + 0x28], r9d
mov r9, rbx
call fcn.1402171d0
mov eax, dword [rsp + 0x3c]
cmp eax, 0xd
jl 0x140218d40
xor edi, 0xe2d58504
xor esi, 0x95a4f797
mov ecx, edi
mov edx, esi
call fcn.140219160
lea rax, [0x14051cb50]
jmp 0x140218df1
xor ecx, ecx
lea r14, [0x14051c3e0]
lea r15, [0x140431240]
xor edi, 0xf7765a81
xor esi, 0x7a094d1d
lea rbx, [rsp + 0x38]
nop
movsxd rcx, ecx
movzx eax, byte [rcx + r15]
xor byte [rcx + r14], al
mov rdx, rbx
mov r8d, edi
mov r9d, esi
call fcn.140216ef0
mov ecx, dword [rsp + 0x38]
test al, 1
je 0x140218dc0
mov al, 0x4d
xchg byte [0x14051c400], al
lea rax, [0x14051c3e0]
add rsp, 0x40
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
Function at 0x14021c320
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0xe353e10
add eax, dword [0x14051f240]
cmp ecx, eax
jne 0x14021c35c
test edx, edx
je 0x14021c38c
movzx eax, byte [0x14051f064]
cmp al, 0x3f
je 0x14021c354
mov cl, 0x28
mov al, 0xc4
lock cmpxchg byte [0x14051f064], cl
je 0x14021c40a
cmp al, 0x3f
jne 0x14021c340
lea rax, [0x14051f050]
ret
test edx, edx
je 0x14021c3bc
movzx eax, byte [0x14051f07d]
cmp al, 0x32
je 0x14021c384
mov cl, 0x28
nop dword [rax]
mov al, 0x47
lock cmpxchg byte [0x14051f07d], cl
je 0x14021c45f
cmp al, 0x32
jne 0x14021c370
lea rax, [0x14051f070]
ret
movzx eax, byte [0x14051ef82]
cmp al, 0xa8
je 0x14021c3b4
mov cl, 0x91
nop dword [rax]
mov al, 0xb8
lock cmpxchg byte [0x14051ef82], cl
je 0x14021c498
cmp al, 0xa8
jne 0x14021c3a0
lea rax, [0x14051ef70]
ret
movzx eax, byte [0x14051eeb2]
cmp al, 0xa
je 0x14021c402
nop word [rax + rax]
movzx ecx, byte [0x14051f250]
lea eax, [rcx + 0x33]
add cl, 0x42
lock cmpxchg byte [0x14051eeb2], cl
je 0x14021c4e1
movzx ecx, byte [0x14051f250]
mov edx, ecx
xor dl, 0xe8
and cl, 0x68
add cl, cl
add cl, dl
cmp al, cl
jne 0x14021c3d0
lea rax, [0x14051eeb0]
ret
xor edx, edx
lea rax, [0x14051f050]
lea rcx, [0x140432320]
nop word [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rdx + rax]
xor r9b, r8b
mov byte [rdx + rax], r9b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 0x14
jl 0x14021c420
mov al, 0x3f
xchg byte [0x14051f064], al
lea rax, [0x14051f050]
ret
xor eax, eax
lea rcx, [0x14051f070]
lea rdx, [0x140432340]
nop
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x14021c488
inc rax
jmp 0x14021c470
mov al, 0x32
xchg byte [0x14051f07d], al
lea rax, [0x14051f070]
ret
xor edx, edx
lea rax, [0x14051ef70]
lea rcx, [0x140432240]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
xor byte [rdx + rax], r8b
mov r8d, dword [0x14051f240]
add edx, r8d
add edx, 0xe353e11
cmp edx, 0x12
jl 0x14021c4b0
mov al, 0xa8
xchg byte [0x14051ef82], al
lea rax, [0x14051ef70]
ret
xor eax, eax
lea rcx, [0x14051eeb0]
lea rdx, [0x140432180]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rdx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rax + rcx]
xor r9b, r8b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
cmp r8d, 1
jg 0x14021c528
inc rax
jmp 0x14021c500
mov al, 0xa
xchg byte [0x14051eeb2], al
lea rax, [0x14051eeb0]
ret