joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14016a0c0
Capabilities:
Encode data using xor

Disassembly:
mov r8d, dword [rsp + 0x28]
test ecx, ecx
je 0x14016a118
mov eax, r8d
xor eax, 0xad0d3cda
add eax, dword [0x14052bad8]
cmp edx, eax
jne 0x14016a170
movzx eax, byte [0x14052b743]
cmp al, 0x13
je 0x14016a110
mov cl, 0x87
nop dword [rax]
mov al, 0xef
lock cmpxchg byte [0x14052b743], cl
je 0x14016a212
mov edx, r8d
xor dl, 0xf0
add dl, byte [0x14052badc]
cmp al, dl
jne 0x14016a0f0
lea rax, [0x14052b730]
ret
test edx, edx
je 0x14016a198
movzx eax, byte [0x14052b515]
mov ecx, r8d
xor cl, 0xd3
add cl, byte [0x14052badc]
cmp al, cl
je 0x14016a168
nop word cs:[rax + rax]
movzx ecx, byte [0x14052badc]
mov eax, r8d
xor al, 0xf7
add al, cl
mov edx, r8d
xor dl, 0x8b
add dl, cl
lock cmpxchg byte [0x14052b515], dl
je 0x14016a26f
cmp al, 0x36
jne 0x14016a140
lea rax, [0x14052b500]
ret
cmp byte [0x14052b69f], 0
je 0x14016a190
mov cl, 0x99
nop dword [rax + rax]
mov al, 0xde
lock cmpxchg byte [0x14052b69f], cl
je 0x14016a1cc
test al, al
jne 0x14016a180
lea rax, [0x14052b680]
ret
movzx eax, byte [0x14052b80d]
cmp al, 0x48
je 0x14016a1c4
mov cl, 0x2c
nop word cs:[rax + rax]
mov al, 0xa3
lock cmpxchg byte [0x14052b80d], cl
je 0x14016a2bd
cmp al, 0x48
jne 0x14016a1b0
lea rax, [0x14052b800]
ret
xor eax, eax
lea rcx, [0x14052b680]
lea rdx, [0x14044f340]
nop dword [rax]
movzx r9d, byte [rax + rdx]
add byte [rax + rcx], r9b
lea r9d, [rax + 1]
cmp r9d, 0x1e
jg 0x14016a1f8
inc rax
jmp 0x14016a1e0
xor r8b, 0x8d
add r8b, byte [0x14052badc]
xchg byte [0x14052b69f], r8b
lea rax, [0x14052b680]
ret
xor edx, edx
lea rax, [0x14052b730]
lea rcx, [0x14044f3f0]
nop word cs:[rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rdx + rax]
xor r9b, r8b
mov byte [rdx + rax], r9b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 0x13
jl 0x14016a230
mov al, 0x13
xchg byte [0x14052b743], al
lea rax, [0x14052b730]
ret
xor eax, eax
lea rcx, [0x14052b500]
lea rdx, [0x14044f1c0]
xor r8d, 0xad0d3cdb
nop word cs:[rax + rax]
cdqe
movzx r9d, byte [rax + rdx]
xor byte [rax + rcx], r9b
mov r9d, dword [0x14052bad8]
add r9d, r8d
add eax, r9d
cmp eax, 0x15
jl 0x14016a290
mov al, 0x36
xchg byte [0x14052b515], al
lea rax, [0x14052b500]
ret
xor eax, eax
lea rcx, [0x14052b800]
lea rdx, [0x14044f4c0]
nop dword [rax]
movzx r8d, byte [rax + rdx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rax + rcx]
xor r9b, r8b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x14016a2f8
inc rax
jmp 0x14016a2d0
mov al, 0x48
xchg byte [0x14052b80d], al
lea rax, [0x14052b800]
ret
Function at 0x14016ac20
Capabilities:
Encode data using xor

Disassembly:
mov r8d, dword [rsp + 0x28]
test ecx, ecx
je 0x14016ac6c
mov eax, r8d
xor eax, 0xdd566a7a
add eax, dword [0x14052bad8]
cmp edx, eax
jne 0x14016ac9c
movzx eax, byte [0x14052b6ed]
cmp al, 5
je 0x14016ac64
mov cl, 0xd1
nop dword [rax + rax]
mov al, 0x57
lock cmpxchg byte [0x14052b6ed], cl
je 0x14016ad0c
cmp al, 5
jne 0x14016ac50
lea rax, [0x14052b6e0]
ret
test edx, edx
je 0x14016accc
movzx eax, byte [0x14052b631]
cmp al, 0xaa
je 0x14016ac94
mov cl, 0xbc
nop dword [rax]
mov al, 0x38
lock cmpxchg byte [0x14052b631], cl
je 0x14016adaf
cmp al, 0xaa
jne 0x14016ac80
lea rax, [0x14052b620]
ret
movzx eax, byte [0x14052b5ed]
cmp al, 0xe4
je 0x14016acc4
mov cl, 0x7d
nop dword [rax]
mov al, 0x71
lock cmpxchg byte [0x14052b5ed], cl
je 0x14016ad6d
cmp al, 0xe4
jne 0x14016acb0
lea rax, [0x14052b5e0]
ret
movzx eax, byte [0x14052b70d]
mov ecx, r8d
xor cl, 0xaf
add cl, byte [0x14052badc]
cmp al, cl
je 0x14016ad04
mov cl, 0x8b
nop word cs:[rax + rax]
mov al, 0xa7
lock cmpxchg byte [0x14052b70d], cl
je 0x14016ae0a
cmp al, 0x82
jne 0x14016acf0
lea rax, [0x14052b700]
ret
xor eax, eax
lea rcx, [0x14052b6e0]
lea rdx, [0x14044f3a0]
xor r8d, 0xdd566a7b
nop word cs:[rax + rax]
cdqe
movzx r9d, byte [rax + rdx]
mov r10d, r9d
xor r10b, r9b
not r10b
and r10b, byte [rax + rcx]
xor r10b, r9b
mov byte [rax + rcx], r10b
mov r9d, dword [0x14052bad8]
add r9d, r8d
add eax, r9d
cmp eax, 0xd
jl 0x14016ad30
mov al, 5
xchg byte [0x14052b6ed], al
lea rax, [0x14052b6e0]
ret
xor edx, edx
lea rax, [0x14052b5e0]
lea rcx, [0x14044f2a0]
nop dword [rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
xor byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 0xd
jl 0x14016ad80
mov al, 0xe4
xchg byte [0x14052b5ed], al
lea rax, [0x14052b5e0]
ret
xor edx, edx
lea rax, [0x14052b620]
lea rcx, [0x14044f2e0]
nop
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rdx + rax]
xor r9b, r8b
mov byte [rdx + rax], r9b
mov r8d, edx
xor r8d, 1
add edx, edx
and edx, 2
mov r9d, r8d
xor r9d, edx
and edx, r8d
lea edx, [r9 + rdx*2]
cmp edx, 0x11
jl 0x14016adc0
mov al, 0xaa
xchg byte [0x14052b631], al
lea rax, [0x14052b620]
ret
xor eax, eax
lea rcx, [0x14052b700]
lea rdx, [0x14044f3c0]
xor r8d, 0xdd566a77
nop word cs:[rax + rax]
movzx r9d, byte [rax + rcx]
movzx r10d, byte [rax + rdx]
mov r11d, r9d
xor r11b, r10b
and r9b, r10b
add r9b, r9b
add r9b, r11b
mov byte [rax + rcx], r9b
lea r9d, [rax + 1]
mov r10d, dword [0x14052bad8]
add r10d, r8d
cmp r9d, r10d
jge 0x14016ae65
inc rax
jmp 0x14016ae30
mov al, 0x82
xchg byte [0x14052b70d], al
lea rax, [0x14052b700]
ret
Function at 0x14017bc30
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [0x14052c480]
mov r8d, eax
xor r8d, 0xbe6f1718
and eax, 0x3e6f1718
lea eax, [r8 + rax*2]
cmp ecx, eax
jne 0x14017bc7c
test edx, edx
je 0x14017bcac
movzx eax, byte [0x14052bdf4]
cmp al, 0x42
je 0x14017bc74
mov cl, 0xc
nop
mov al, 0xcb
lock cmpxchg byte [0x14052bdf4], cl
je 0x14017bd3c
cmp al, 0x42
jne 0x14017bc60
lea rax, [0x14052bdf0]
ret
test edx, edx
je 0x14017bcdc
movzx eax, byte [0x14052bf93]
cmp al, 0x7c
je 0x14017bca4
xor ecx, ecx
nop dword [rax]
mov al, 0x3c
lock cmpxchg byte [0x14052bf93], cl
je 0x14017bd68
cmp al, 0x7c
jne 0x14017bc90
lea rax, [0x14052bf70]
ret
movzx eax, byte [0x14052be96]
cmp al, 0x5a
je 0x14017bcd4
mov cl, 0xd9
nop dword [rax]
mov al, 0x72
lock cmpxchg byte [0x14052be96], cl
je 0x14017bdc8
cmp al, 0x5a
jne 0x14017bcc0
lea rax, [0x14052be90]
ret
movzx eax, byte [0x14052bd5f]
nop word cs:[rax + rax]
cmp al, 0x77
je 0x14017be2b
movzx ecx, byte [0x14052c484]
lea eax, [rcx + 0x27]
add cl, 0x51
lock cmpxchg byte [0x14052bd5f], cl
jne 0x14017bcf0
xor eax, eax
lea rcx, [0x14052bd30]
lea rdx, [0x14044f770]
nop
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x2e
jg 0x14017be23
inc rax
jmp 0x14017bd20
xor eax, eax
lea rcx, [0x14052bdf0]
lea rdx, [0x14044f830]
nop dword [rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 3
jg 0x14017bda8
inc rax
jmp 0x14017bd50
xor eax, eax
lea rcx, [0x14052bf70]
lea rdx, [0x14044f9b0]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rax + rcx]
xor r9b, r8b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
cmp r8d, 0x22
jg 0x14017bdb8
inc rax
jmp 0x14017bd80
mov al, 0x42
xchg byte [0x14052bdf4], al
lea rax, [0x14052bdf0]
ret
mov al, 0x7c
xchg byte [0x14052bf93], al
lea rax, [0x14052bf70]
ret
xor edx, edx
lea rax, [0x14052be90]
lea rcx, [0x14044f8d0]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rax]
movzx r9d, byte [rdx + rcx]
mov r10d, r8d
xor r10b, r9b
and r8b, r9b
add r8b, r8b
add r8b, r10b
mov byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 6
jl 0x14017bde0
mov al, 0x5a
xchg byte [0x14052be96], al
lea rax, [0x14052be90]
ret
mov al, 0x77
xchg byte [0x14052bd5f], al
lea rax, [0x14052bd30]
ret
Function at 0x14017c0e0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov eax, 0xbe6f1718
mov r8d, dword [0x14052c480]
add r8d, eax
cmp ecx, r8d
jne 0x14017c139
add eax, dword [0x14052c480]
cmp edx, eax
jne 0x14017c165
movzx eax, byte [0x14052bef2]
movzx ecx, byte [0x14052c484]
add cl, 0x1d
cmp al, cl
je 0x14017c30d
mov cl, 0x45
nop dword [rax + rax]
mov al, 0x53
lock cmpxchg byte [0x14052bef2], cl
je 0x14017c232
cmp al, 0x41
jne 0x14017c120
jmp 0x14017c30d
test edx, edx
je 0x14017c199
movzx eax, byte [0x14052bfcd]
cmp al, 0x91
je 0x14017c226
mov cl, 4
nop
mov al, 0x8f
lock cmpxchg byte [0x14052bfcd], cl
je 0x14017c1c9
cmp al, 0x91
jne 0x14017c150
jmp 0x14017c226
movzx eax, byte [0x14052bf5e]
movzx ecx, byte [0x14052c484]
add cl, 0x16
cmp al, cl
je 0x14017c2f2
mov cl, 0x43
mov al, 0x5a
lock cmpxchg byte [0x14052bf5e], cl
je 0x14017c26c
cmp al, 0x3a
jne 0x14017c180
jmp 0x14017c2f2
movzx eax, byte [0x14052bf48]
cmp al, 0x7f
je 0x14017c37b
xor ecx, ecx
nop word [rax + rax]
mov al, 0x89
lock cmpxchg byte [0x14052bf48], cl
je 0x14017c316
cmp al, 0x7f
jne 0x14017c1b0
jmp 0x14017c37b
xor eax, eax
lea rcx, [0x14052bfc0]
lea rdx, [0x14044fa00]
nop dword [rax]
movzx r8d, byte [rax + rcx]
movzx r9d, byte [rax + rdx]
mov r10d, r8d
not r10b
mov r11d, r9d
not r11b
xor r8b, r11b
xor r11b, r10b
and r11b, r9b
and r10b, r9b
or r10b, r8b
not r10b
or r10b, r11b
mov byte [rax + rcx], r10b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x14017c21e
inc rax
jmp 0x14017c1e0
mov al, 0x91
xchg byte [0x14052bfcd], al
lea rax, [0x14052bfc0]
jmp 0x14017c382
xor eax, eax
lea rcx, [0x14052bee0]
lea rdx, [0x14044f920]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x11
jg 0x14017c2fe
inc rax
jmp 0x14017c250
xor r8d, r8d
lea rax, [0x14052bf50]
lea rcx, [0x14044f990]
mov edx, 0xbe6f1726
nop word cs:[rax + rax]
movsxd r8, r8d
movzx r9d, byte [r8 + rax]
movzx r10d, byte [r8 + rcx]
mov r11d, r9d
not r11b
mov ebx, r11d
xor bl, r10b
not r10b
mov esi, r9d
and sil, r10b
or sil, bl
not sil
xor r10b, r11b
and r10b, r9b
or r10b, sil
mov byte [r8 + rax], r10b
mov r9d, r8d
xor r9d, 1
and r8d, 1
lea r8d, [r9 + r8*2]
mov r9d, dword [0x14052c480]
add r9d, edx
cmp r8d, r9d
jl 0x14017c290
movzx eax, byte [0x14052c484]
add al, 0x16
xchg byte [0x14052bf5e], al
lea rax, [0x14052bf50]
jmp 0x14017c382
movzx eax, byte [0x14052c484]
add al, 0x1d
xchg byte [0x14052bef2], al
lea rax, [0x14052bee0]
jmp 0x14017c382
xor eax, eax
lea rcx, [0x14052bf30]
lea rdx, [0x14044f970]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rdx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rax + rcx]
xor r9b, r8b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
mov r9d, dword [0x14052c480]
mov r10d, r9d
xor r10d, 0xbe6f1730
and r9d, 0x3e6f1730
lea r9d, [r10 + r9*2]
cmp r8d, r9d
jge 0x14017c373
inc rax
jmp 0x14017c330
mov al, 0x7f
xchg byte [0x14052bf48], al
lea rax, [0x14052bf30]
pop rbx
pop rsi
ret
Function at 0x14017c6e0
Capabilities:
Encode data using xor

Disassembly:
mov r8d, dword [rsp + 0x28]
mov eax, r8d
xor eax, 0xb8ab377d
add eax, dword [0x14052c480]
cmp ecx, eax
jne 0x14017c73c
test edx, edx
je 0x14017c774
movzx eax, byte [0x14052be24]
xor r8b, 0x86
add r8b, byte [0x14052c484]
cmp al, r8b
je 0x14017c734
mov cl, 0xcc
nop word cs:[rax + rax]
mov al, 0x7f
lock cmpxchg byte [0x14052be24], cl
je 0x14017c7fb
cmp al, 7
jne 0x14017c720
lea rax, [0x14052be20]
ret
movzx eax, byte [0x14052bf63]
cmp al, 0x53
je 0x14017c76c
mov cl, 0xcf
nop dword [rax]
mov al, 0xb4
lock cmpxchg byte [0x14052bf63], cl
je 0x14017c7ac
mov edx, r8d
xor dl, 0x4a
add dl, byte [0x14052c484]
cmp al, dl
jne 0x14017c750
lea rax, [0x14052bf60]
ret
movzx eax, byte [0x14052bf0e]
cmp al, 0x33
je 0x14017c7a4
mov cl, 0x3c
nop word cs:[rax + rax]
mov al, 0x76
lock cmpxchg byte [0x14052bf0e], cl
je 0x14017c84f
cmp al, 0x33
jne 0x14017c790
lea rax, [0x14052bf00]
ret
xor edx, edx
lea rax, [0x14052bf60]
lea rcx, [0x14044f9a0]
nop dword [rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
xor byte [rdx + rax], r8b
add edx, 0xbd6bd9fd
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
add edx, 0x42942603
cmp edx, 3
jl 0x14017c7c0
mov al, 0x53
xchg byte [0x14052bf63], al
lea rax, [0x14052bf60]
ret
xor eax, eax
lea rcx, [0x14052be20]
lea rdx, [0x14044f860]
nop dword [rax + rax]
movzx r8d, byte [rax + rcx]
movzx r9d, byte [rax + rdx]
not r8b
mov r10d, r8d
and r10b, r9b
or r8b, r9b
not r8b
or r8b, r10b
mov byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 3
jg 0x14017c83f
inc rax
jmp 0x14017c810
mov al, 7
xchg byte [0x14052be24], al
lea rax, [0x14052be20]
ret
xor eax, eax
lea rcx, [0x14052bf00]
lea rdx, [0x14044f940]
nop
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xd
jg 0x14017c878
inc rax
jmp 0x14017c860
mov al, 0x33
xchg byte [0x14052bf0e], al
lea rax, [0x14052bf00]
ret
Function at 0x140192f90
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x140192fcc
test edx, edx
je 0x140193006
movzx eax, byte [0x14052c8d2]
cmp al, 0x31
je 0x140192fc4
mov cl, 0xbb
nop word cs:[rax + rax]
mov al, 0xc7
lock cmpxchg byte [0x14052c8d2], cl
je 0x14019306c
cmp al, 0x31
jne 0x140192fb0
lea rax, [0x14052c8c0]
ret
test edx, edx
je 0x14019303c
movzx eax, byte [0x14052cb11]
cmp al, 0xca
je 0x140192ffe
mov cl, 0x2e
nop dword [rax]
mov al, 0x70
lock cmpxchg byte [0x14052cb11], cl
je 0x1401930d8
movzx edx, byte [0x14052f5f8]
add dl, 0x5b
cmp al, dl
jne 0x140192fe0
lea rax, [0x14052cb00]
ret
movzx eax, byte [0x14052c84c]
cmp al, 0xf0
je 0x140193034
mov cl, 0x32
nop word cs:[rax + rax]
mov al, 0x4d
lock cmpxchg byte [0x14052c84c], cl
je 0x140193108
cmp al, 0xf0
jne 0x140193020
lea rax, [0x14052c840]
ret
movzx eax, byte [0x14052c9cd]
cmp al, 0xf4
je 0x140193064
mov cl, 0x42
nop dword [rax]
mov al, 0xa3
lock cmpxchg byte [0x14052c9cd], cl
je 0x140193176
cmp al, 0xf4
jne 0x140193050
lea rax, [0x14052c9c0]
ret
xor eax, eax
lea rcx, [0x14052c8c0]
lea rdx, [0x14044fd60]
mov r8d, 0x76a2eb1a
nop word cs:[rax + rax]
movzx r9d, byte [rax + rdx]
mov r10d, r9d
xor r10b, r9b
not r10b
and r10b, byte [rax + rcx]
xor r10b, r9b
mov byte [rax + rcx], r10b
lea r9d, [rax + 1]
mov r10d, dword [0x14052f5e8]
add r10d, r8d
cmp r9d, r10d
jge 0x1401930c1
inc rax
jmp 0x140193090
movzx eax, byte [0x14052f5f8]
add al, 0xc2
xchg byte [0x14052c8d2], al
lea rax, [0x14052c8c0]
ret
xor eax, eax
lea rcx, [0x14052cb00]
lea rdx, [0x14044ff90]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x10
jg 0x140193166
inc rax
jmp 0x1401930f0
xor edx, edx
lea rax, [0x14052c840]
lea rcx, [0x14044fce0]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, dword [0x14052f5e8]
add edx, r8d
add edx, 0x76a2eb09
mov r9d, r8d
xor r9d, 0x76a2eb14
and r8d, 0x76a2eb14
lea r8d, [r9 + r8*2]
cmp edx, r8d
jl 0x140193120
mov al, 0xf0
xchg byte [0x14052c84c], al
lea rax, [0x14052c840]
ret
mov al, 0xca
xchg byte [0x14052cb11], al
lea rax, [0x14052cb00]
ret
xor eax, eax
lea rcx, [0x14052c9c0]
lea rdx, [0x14044fe50]
mov r8d, 0x76a2eb15
nop dword [rax]
movzx r9d, byte [rax + rdx]
add byte [rax + rcx], r9b
lea r9d, [rax + 1]
mov r10d, dword [0x14052f5e8]
add r10d, r8d
cmp r9d, r10d
jge 0x1401931b1
inc rax
jmp 0x140193190
movzx eax, byte [0x14052f5f8]
mov ecx, eax
xor cl, 0x85
and al, 5
add al, al
add al, cl
xchg byte [0x14052c9cd], al
lea rax, [0x14052c9c0]
ret
Function at 0x1401931f0
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x14019322c
test edx, edx
je 0x14019326c
movzx eax, byte [0x14052ca1d]
movzx ecx, byte [0x14052f5f8]
add cl, 0x86
cmp al, cl
je 0x140193224
mov cl, 0x15
nop
mov al, 0x79
lock cmpxchg byte [0x14052ca1d], cl
je 0x140193306
cmp al, 0xf5
jne 0x140193210
lea rax, [0x14052ca10]
ret
test edx, edx
je 0x1401932ca
movzx eax, byte [0x14052c9ed]
movzx ecx, byte [0x14052f5f8]
add cl, 0x39
cmp al, cl
je 0x140193264
mov cl, 0xbe
nop dword [rax + rax]
mov al, 0x53
lock cmpxchg byte [0x14052c9ed], cl
je 0x140193359
cmp al, 0xa8
jne 0x140193250
lea rax, [0x14052c9e0]
ret
movzx eax, byte [0x14052c963]
cmp al, 0xcd
je 0x1401932c2
nop word [rax + rax]
movzx ecx, byte [0x14052f5f8]
mov edx, ecx
xor dl, 0x29
mov eax, ecx
and al, 0x29
add al, al
add al, dl
mov edx, ecx
xor dl, 0x71
not cl
and cl, 0xe
or cl, dl
not cl
add cl, cl
add cl, dl
lock cmpxchg byte [0x14052c963], cl
je 0x1401933a7
movzx ecx, byte [0x14052f5f8]
add cl, 0x5e
cmp al, cl
jne 0x140193280
lea rax, [0x14052c940]
ret
movzx eax, byte [0x14052c8ee]
cmp al, 0x72
je 0x1401932fe
mov cl, 0x2c
nop word [rax + rax]
mov al, 0x12
lock cmpxchg byte [0x14052c8ee], cl
je 0x14019341f
movzx edx, byte [0x14052f5f8]
add dl, 3
cmp al, dl
jne 0x1401932e0
lea rax, [0x14052c8e0]
ret
xor r8d, r8d
lea rax, [0x14052ca10]
lea rcx, [0x14044fea0]
mov edx, 0x76a2eb09
nop dword [rax]
movsxd r8, r8d
movzx r9d, byte [r8 + rcx]
xor byte [r8 + rax], r9b
mov r9d, dword [0x14052f5e8]
add r9d, edx
mov r10d, r8d
xor r10d, r9d
and r9d, r8d
lea r8d, [r10 + r9*2]
cmp r8d, 0xd
jl 0x140193320
mov al, 0xf5
xchg byte [0x14052ca1d], al
lea rax, [0x14052ca10]
ret
xor eax, eax
lea rcx, [0x14052c9e0]
lea rdx, [0x14044fe70]
nop dword [rax]
xor r8d, r8d
sub r8b, byte [rax + rcx]
movzx r9d, byte [rax + rdx]
xor r10d, r10d
sub r10b, r9b
mov r9d, r8d
xor r9b, r10b
and r10b, r8b
add r10b, r10b
add r10b, r9b
neg r10b
mov byte [rax + rcx], r10b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x1401933f8
inc rax
jmp 0x140193370
xor eax, eax
lea rcx, [0x14052c940]
lea rdx, [0x14044fdd0]
nop word [rax + rax]
movzx r8d, byte [rax + rcx]
movzx r9d, byte [rax + rdx]
mov r10d, r8d
xor r10b, r9b
and r8b, r9b
add r8b, r8b
mov r9d, r10d
xor r9b, r8b
and r8b, r10b
add r8b, r8b
add r8b, r9b
mov byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x22
jg 0x140193408
inc rax
jmp 0x1401933c0
mov al, 0xa8
xchg byte [0x14052c9ed], al
lea rax, [0x14052c9e0]
ret
movzx eax, byte [0x14052f5f8]
add al, 0x5e
xchg byte [0x14052c963], al
lea rax, [0x14052c940]
ret
xor r8d, r8d
lea rax, [0x14052c8e0]
lea rcx, [0x14044fd80]
mov edx, 0x76a2eb16
nop word cs:[rax + rax]
movsxd r8, r8d
movzx r9d, byte [r8 + rcx]
add byte [r8 + rax], r9b
mov r9d, r8d
xor r9d, 1
and r8d, 1
lea r8d, [r9 + r8*2]
mov r9d, dword [0x14052f5e8]
add r9d, edx
cmp r8d, r9d
jl 0x140193440
mov al, 0x72
xchg byte [0x14052c8ee], al
lea rax, [0x14052c8e0]
ret
Function at 0x140194180
Capabilities:
Encode data using xor

Disassembly:
mov r8d, dword [rsp + 0x28]
test ecx, ecx
je 0x1401941bc
test edx, edx
je 0x140194220
movzx eax, byte [0x14052cb41]
cmp al, 2
je 0x1401941b4
mov cl, 0x76
nop
mov al, 0x15
lock cmpxchg byte [0x14052cb41], cl
je 0x140194298
cmp al, 2
jne 0x1401941a0
lea rax, [0x14052cb30]
ret
mov eax, r8d
xor eax, 0xdb5a3a28
add eax, dword [0x14052f5e8]
cmp edx, eax
jne 0x14019425c
movzx eax, byte [0x14052cafd]
mov ecx, r8d
xor cl, 0x94
add cl, byte [0x14052f5f8]
cmp al, cl
je 0x140194218
nop dword [rax]
movzx ecx, byte [0x14052f5f8]
mov eax, r8d
xor al, 0xda
add al, cl
mov edx, r8d
xor dl, 0x9a
add dl, cl
lock cmpxchg byte [0x14052cafd], dl
je 0x140194351
cmp al, 0x23
jne 0x1401941f0
lea rax, [0x14052caf0]
ret
movzx eax, byte [0x14052ca9d]
mov ecx, r8d
xor cl, 0xde
add cl, byte [0x14052f5f8]
cmp al, cl
je 0x140194254
mov cl, 0x61
nop dword [rax]
mov al, 0x15
lock cmpxchg byte [0x14052ca9d], cl
je 0x1401942d8
cmp al, 0x6d
jne 0x140194240
lea rax, [0x14052ca90]
ret
movzx eax, byte [0x14052c99d]
cmp al, 0x52
je 0x140194290
mov cl, 0x1c
nop dword [rax]
mov al, 0x86
lock cmpxchg byte [0x14052c99d], cl
je 0x14019439c
mov edx, r8d
xor dl, 0xc3
add dl, byte [0x14052f5f8]
cmp al, dl
jne 0x140194270
lea rax, [0x14052c990]
ret
xor eax, eax
lea rcx, [0x14052cb30]
lea rdx, [0x14044ffc0]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x10
jg 0x1401942c8
inc rax
jmp 0x1401942b0
mov al, 2
xchg byte [0x14052cb41], al
lea rax, [0x14052cb30]
ret
xor eax, eax
lea rcx, [0x14052ca90]
lea rdx, [0x14044ff20]
mov r9d, r8d
xor r9d, 0xdb5a3a29
nop word cs:[rax + rax]
cdqe
movzx r10d, byte [rax + rdx]
mov r11d, r10d
xor r11b, r10b
not r11b
and r11b, byte [rax + rcx]
xor r11b, r10b
mov byte [rax + rcx], r11b
mov r10d, dword [0x14052f5e8]
mov r11d, r9d
xor r11d, r10d
and r10d, r9d
lea r10d, [r11 + r10*2]
add eax, r10d
cmp eax, 0xd
jl 0x140194300
xor r8b, 0xde
add r8b, byte [0x14052f5f8]
xchg byte [0x14052ca9d], r8b
lea rax, [0x14052ca90]
ret
xor eax, eax
lea rcx, [0x14052caf0]
lea rdx, [0x14044ff80]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rcx]
movzx r9d, byte [rax + rdx]
mov r10d, r8d
xor r10b, r9b
and r8b, r9b
add r8b, r8b
add r8b, r10b
mov byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x1401943df
inc rax
jmp 0x140194370
xor edx, edx
lea rax, [0x14052c990]
lea rcx, [0x14044fe20]
nop dword [rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 0xd
jl 0x1401943b0
mov al, 0x52
xchg byte [0x14052c99d], al
lea rax, [0x14052c990]
ret
mov al, 0x23
xchg byte [0x14052cafd], al
lea rax, [0x14052caf0]
ret
Function at 0x1401b4c40
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x1401b4cab
mov eax, dword [0x1405302b0]
mov ecx, eax
xor ecx, 0xeafc5318
and eax, 0x6afc5318
lea eax, [rcx + rax*2]
cmp edx, eax
jne 0x1401b4cdc
movzx eax, byte [0x14052ff9f]
cmp al, 0xc
je 0x1401b4ca3
nop dword [rax]
movzx ecx, byte [0x1405302c0]
mov edx, ecx
xor dl, 0x97
mov eax, ecx
and al, 0x17
add al, al
add al, dl
add cl, 0xe2
lock cmpxchg byte [0x14052ff9f], cl
je 0x1401b4d3c
movzx ecx, byte [0x1405302c0]
add cl, 0xdf
cmp al, cl
jne 0x1401b4c70
lea rax, [0x14052ff90]
ret
test edx, edx
je 0x1401b4d0c
movzx eax, byte [0x14052ffa9]
cmp al, 0xed
je 0x1401b4cd4
mov cl, 0x4e
nop dword [rax]
mov al, 0x5f
lock cmpxchg byte [0x14052ffa9], cl
je 0x1401b4dd8
cmp al, 0xed
jne 0x1401b4cc0
lea rax, [0x14052ffa0]
ret
movzx eax, byte [0x14052feb6]
cmp al, 0x6c
je 0x1401b4d04
mov cl, 0x3d
nop dword [rax]
mov al, 0xff
lock cmpxchg byte [0x14052feb6], cl
je 0x1401b4d9a
cmp al, 0x6c
jne 0x1401b4cf0
lea rax, [0x14052feb0]
ret
movzx eax, byte [0x14052fee1]
cmp al, 0x33
je 0x1401b4d34
mov cl, 0xa4
nop dword [rax]
mov al, 0xf6
lock cmpxchg byte [0x14052fee1], cl
je 0x1401b4e18
cmp al, 0x33
jne 0x1401b4d20
lea rax, [0x14052fed0]
ret
xor r8d, r8d
lea rax, [0x14052ff90]
lea rcx, [0x1404503c0]
mov edx, 0xeafc5327
nop word cs:[rax + rax]
movsxd r8, r8d
movzx r9d, byte [r8 + rcx]
xor byte [r8 + rax], r9b
mov r9d, r8d
xor r9d, 1
and r8d, 1
lea r8d, [r9 + r8*2]
mov r9d, dword [0x1405302b0]
add r9d, edx
cmp r8d, r9d
jl 0x1401b4d60
mov al, 0xc
xchg byte [0x14052ff9f], al
lea rax, [0x14052ff90]
ret
xor eax, eax
lea rcx, [0x14052feb0]
lea rdx, [0x1404502f0]
nop word [rax + rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 5
jg 0x1401b4dc8
inc rax
jmp 0x1401b4db0
mov al, 0x6c
xchg byte [0x14052feb6], al
lea rax, [0x14052feb0]
ret
xor eax, eax
lea rcx, [0x14052ffa0]
lea rdx, [0x1404503d0]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 8
jg 0x1401b4e08
inc rax
jmp 0x1401b4df0
mov al, 0xed
xchg byte [0x14052ffa9], al
lea rax, [0x14052ffa0]
ret
xor edx, edx
lea rax, [0x14052fed0]
lea rcx, [0x140450310]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, dword [0x1405302b0]
add edx, r8d
add edx, 0xeafc5319
add r8d, 0xeafc5329
cmp edx, r8d
jl 0x1401b4e30
mov al, 0x33
xchg byte [0x14052fee1], al
lea rax, [0x14052fed0]
ret