joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1401e9470
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x58
mov esi, dword [rsp + 0xc0]
mov eax, esi
xor eax, 0x26ea0373
add eax, dword [0x14057422c]
cmp ecx, eax
jne 0x1401e94f4
mov edi, r9d
test edx, edx
je 0x1401e9535
movzx eax, byte [0x140573b52]
cmp al, 0x87
je 0x1401e9617
xor edi, 0x58c36447
xor esi, 0x9875af8
lea rbx, [rsp + 0x30]
nop word cs:[rax + rax]
mov rcx, rbx
mov edx, edi
mov r8d, esi
call fcn.1401e8e90
cmp byte [rsp + 0x31], 0
jne 0x1401e95dc
cmp byte [rsp + 0x30], 0x87
jne 0x1401e94d0
jmp 0x1401e9617
movzx eax, byte [0x140573ac6]
movzx ecx, byte [0x140574228]
xor sil, 0xed
mov edx, esi
xor dl, cl
and sil, cl
add sil, sil
add sil, dl
cmp al, sil
je 0x1401e95d0
mov cl, 0xf6
nop
mov al, 0xc
lock cmpxchg byte [0x140573ac6], cl
je 0x1401e9588
cmp al, 0xee
jne 0x1401e9520
jmp 0x1401e95d0
movzx eax, byte [0x140573b25]
cmp al, 0xc5
je 0x1401e9692
mov ebx, edi
xor ebx, 0xaf5a55e2
mov ebp, esi
xor ebp, 0xea30e7f9
lea r14, [rsp + 0x40]
lea r15, [rsp + 0x2f]
nop
mov rcx, r14
mov rdx, r15
mov r8d, ebx
mov r9d, ebp
call fcn.1401e96f0
cmp byte [rsp + 0x41], 0
jne 0x1401e9620
cmp byte [rsp + 0x2f], 0xc5
jne 0x1401e9560
jmp 0x1401e9692
xor eax, eax
lea rcx, [0x140573ac0]
lea rdx, [0x1404905c0]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rax + rcx]
xor r9b, r8b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
cmp r8d, 5
jg 0x1401e95c8
inc rax
jmp 0x1401e95a0
mov al, 0xee
xchg byte [0x140573ac6], al
lea rax, [0x140573ac0]
jmp 0x1401e9699
xor edx, edx
lea rax, [0x140573b50]
lea rcx, [0x140490640]
nop dword [rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 2
jl 0x1401e95f0
mov al, 0x87
xchg byte [0x140573b52], al
lea rax, [0x140573b50]
jmp 0x1401e9699
xor ebx, ebx
mov ebp, edi
xor ebp, 0xb6997159
mov r14d, esi
xor r14d, 0x694ba95b
lea r15, [rsp + 0x50]
lea r12, [0x140490600]
lea r13, [0x140573b10]
nop word [rax + rax]
mov ecx, ebx
mov rdx, r15
mov r8d, ebp
mov r9d, r14d
call fcn.1401e96b0
mov rax, qword [rsp + 0x50]
movzx eax, byte [rax]
add al, byte [rbx + r12]
mov byte [rbx + r13], al
lea eax, [rbx + 1]
cmp eax, 0x14
jg 0x1401e967d
inc rbx
jmp 0x1401e9650
xor edi, 0x6a5c3a6
xor esi, 0xf2f27acd
mov ecx, edi
mov edx, esi
call fcn.1401e93b0
lea rax, [0x140573b10]
add rsp, 0x58
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x1401ecb20
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rsi
push rdi
push rbx
sub rsp, 0x28
lea rbp, [rsp + 0x20]
mov qword [rbp], 0xfffffffffffffffe
mov rsi, rcx
lea rdi, [rcx + 0x10]
mov rcx, rdi
call fcn.1401f05b0
mov rax, qword [rsi]
mov rbx, qword [rax]
cmp rbx, rax
jne 0x1401ecbdc
mov rcx, qword [rsi + 0xa8]
test rcx, rcx
je 0x1401ecb81
lea rax, [rsi + 0x70]
cmp rcx, rax
setne dl
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
call qword [case.0x14012b313.0]
mov qword [rsi + 0xa8], 0
lea rcx, [rsi + 0x40]
call fcn.14011de90
mov rcx, rdi
call fcn.1401ef7a0
mov rax, qword [rsi]
mov r8, qword [rax + 8]
mov rcx, rsi
mov rdx, rsi
call fcn.1401eeab0
mov rcx, qword [rsi]
mov edx, 0x30
mov r8d, 0x6d683f52
mov r9d, 0x36b30e65
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop rbp
jmp fcn.1400a8fb0
mov rax, rbx
nop dword [rax + rax]
mov rbx, rax
cmp rax, qword [rsi]
je 0x1401ecb53
mov rcx, qword [rbx + 0x28]
test rcx, rcx
je 0x1401ecbf6
mov rax, qword [rcx]
mov rax, qword [rax]
mov edx, 1
call qword [case.0x14012b313.0]
mov rcx, qword [rbx + 0x10]
cmp byte [rcx + 0x19], 0
je 0x1401ecc40
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x1401ecbd0
nop word [rax + rax]
mov rcx, rbx
mov rbx, rax
cmp rcx, qword [rax + 0x10]
jne 0x1401ecbc5
mov rax, qword [rbx + 8]
movzx ecx, byte [0x1405757f8]
add cl, 0x11
cmp byte [rax + 0x19], cl
je 0x1401ecc10
jmp 0x1401ecbd0
mov rax, rcx
mov rcx, qword [rcx]
movzx edx, byte [0x1405757f8]
mov r8d, edx
xor r8b, 0x11
and dl, 0x11
add dl, dl
add dl, r8b
cmp byte [rcx + 0x19], dl
je 0x1401ecc40
jmp 0x1401ecbd0
Function at 0x1401f4ee0
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x1401f4f1c
test edx, edx
je 0x1401f4f4c
movzx eax, byte [0x140575fa0]
cmp al, 0x25
je 0x1401f4f14
mov cl, 0x79
nop word cs:[rax + rax]
mov al, 0xdc
lock cmpxchg byte [0x140575fa0], cl
je 0x1401f4fcb
cmp al, 0x25
jne 0x1401f4f00
lea rax, [0x140575f90]
ret
test edx, edx
je 0x1401f4f7c
movzx eax, byte [0x140575fe3]
cmp al, 0xe7
je 0x1401f4f44
mov cl, 0x64
nop dword [rax]
mov al, 0x7a
lock cmpxchg byte [0x140575fe3], cl
je 0x1401f500f
cmp al, 0xe7
jne 0x1401f4f30
lea rax, [0x140575fc0]
ret
movzx eax, byte [0x140576009]
cmp al, 0xd8
je 0x1401f4f74
mov cl, 0xa6
nop dword [rax]
mov al, 0xd3
lock cmpxchg byte [0x140576009], cl
je 0x1401f504f
cmp al, 0xd8
jne 0x1401f4f60
lea rax, [0x140576000]
ret
mov ecx, dword [rsp + 0x28]
movzx eax, byte [0x140575fb3]
mov edx, ecx
xor dl, 0xe9
add dl, byte [0x1405761b0]
cmp al, dl
je 0x1401f4fc3
mov dl, 0xe9
nop dword [rax + rax]
mov al, 0x8e
lock cmpxchg byte [0x140575fb3], dl
je 0x1401f5088
mov r8d, ecx
xor r8b, 0xe9
add r8b, byte [0x1405761b0]
cmp al, r8b
jne 0x1401f4fa0
lea rax, [0x140575fb0]
ret
xor edx, edx
lea rax, [0x140575f90]
lea rcx, [0x1404910e0]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 0x10
jl 0x1401f4fe0
mov al, 0x25
xchg byte [0x140575fa0], al
lea rax, [0x140575f90]
ret
xor edx, edx
lea rax, [0x140575fc0]
lea rcx, [0x140491100]
nop
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
xor byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 0x23
jl 0x1401f5020
mov al, 0xe7
xchg byte [0x140575fe3], al
lea rax, [0x140575fc0]
ret
xor eax, eax
lea rcx, [0x140576000]
lea rdx, [0x140491140]
nop
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 8
jg 0x1401f5078
inc rax
jmp 0x1401f5060
mov al, 0xd8
xchg byte [0x140576009], al
lea rax, [0x140576000]
ret
xor eax, eax
lea rdx, [0x140575fb0]
lea r8, [0x1404910f0]
xor ecx, 0xe9b96967
nop
cdqe
movzx r9d, byte [rax + r8]
mov r10d, r9d
xor r10b, r9b
not r10b
and r10b, byte [rax + rdx]
xor r10b, r9b
mov byte [rax + rdx], r10b
mov r9d, dword [0x1405761a0]
add r9d, ecx
add eax, r9d
cmp eax, 3
jl 0x1401f50a0
mov al, 0x6d
xchg byte [0x140575fb3], al
lea rax, [0x140575fb0]
ret
Function at 0x1401f9640
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x6e99597f
add eax, dword [0x140576af0]
cmp ecx, eax
jne 0x1401f96fa
test edx, edx
je 0x1401f972c
movzx eax, byte [0x140576632]
nop word cs:[rax + rax]
cmp al, 0x4c
je 0x1401f96f2
movzx ecx, byte [0x140576b00]
lea eax, [rcx + 0x32]
add cl, 0xe6
lock cmpxchg byte [0x140576632], cl
jne 0x1401f9670
xor r8d, r8d
lea rax, [0x140576630]
lea rcx, [0x140491440]
mov edx, 0x6e995981
nop word cs:[rax + rax]
movsxd r8, r8d
movzx r9d, byte [r8 + rcx]
mov r10d, r9d
xor r10b, r9b
not r10b
and r10b, byte [r8 + rax]
xor r10b, r9b
mov byte [r8 + rax], r10b
mov r9d, r8d
xor r9d, 1
and r8d, 1
lea r8d, [r9 + r8*2]
mov r9d, dword [0x140576af0]
add r9d, edx
cmp r8d, r9d
jl 0x1401f96b0
mov al, 0x4c
xchg byte [0x140576632], al
lea rax, [0x140576630]
ret
test edx, edx
je 0x1401f975c
movzx eax, byte [0x140576780]
cmp al, 0xae
je 0x1401f9724
mov cl, 0x90
nop dword [rax + rax]
mov al, 0xb4
lock cmpxchg byte [0x140576780], cl
je 0x1401f97a5
cmp al, 0xae
jne 0x1401f9710
lea rax, [0x140576770]
ret
movzx eax, byte [0x140576799]
cmp al, 0xe5
je 0x1401f9754
mov cl, 0x7a
nop dword [rax]
mov al, 0x33
lock cmpxchg byte [0x140576799], cl
je 0x1401f97e8
cmp al, 0xe5
jne 0x1401f9740
lea rax, [0x140576790]
ret
movzx eax, byte [0x1405767b6]
cmp al, 0xa6
je 0x1401f979d
mov cl, 0x74
nop dword [rax]
mov al, 0x5e
lock cmpxchg byte [0x1405767b6], cl
je 0x1401f9851
movzx edx, byte [0x140576b00]
mov r8d, edx
xor r8b, 0x9f
and dl, 0x1f
add dl, dl
add dl, r8b
add dl, 0x1e
cmp al, dl
jne 0x1401f9770
lea rax, [0x1405767b0]
ret
xor eax, eax
lea rcx, [0x140576770]
lea rdx, [0x140491560]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xf
jg 0x1401f97d8
inc rax
jmp 0x1401f97c0
mov al, 0xae
xchg byte [0x140576780], al
lea rax, [0x140576770]
ret
xor edx, edx
lea rax, [0x140576790]
lea rcx, [0x140491570]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rax]
movzx r9d, byte [rdx + rcx]
mov r10d, r8d
xor r10b, r9b
and r8b, r9b
add r8b, r8b
mov r9d, r10d
xor r9b, r8b
and r8b, r10b
add r8b, r8b
add r8b, r9b
mov byte [rdx + rax], r8b
mov r8d, dword [0x140576af0]
add edx, r8d
add edx, 0x6e995980
cmp edx, 9
jl 0x1401f9800
mov al, 0xe5
xchg byte [0x140576799], al
lea rax, [0x140576790]
ret
xor eax, eax
lea rcx, [0x1405767b0]
lea rdx, [0x140491590]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rcx]
movzx r9d, byte [rax + rdx]
mov r10d, r8d
xor r10b, r9b
and r8b, r9b
add r8b, r8b
add r8b, r10b
mov byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 5
jg 0x1401f989c
inc rax
jmp 0x1401f9870
mov al, 0xa6
xchg byte [0x1405767b6], al
lea rax, [0x1405767b0]
ret
Function at 0x140214700
Capabilities:
Encode data using xor

Disassembly:
mov r8d, dword [rsp + 0x28]
test ecx, ecx
je 0x1402147ac
mov eax, r8d
xor eax, 0xf5d9ce29
add eax, dword [0x140578320]
cmp edx, eax
jne 0x1402147ec
movzx eax, byte [0x140577763]
nop word [rax + rax]
cmp al, 0x61
je 0x1402148d0
movzx ecx, byte [0x140578324]
mov edx, r8d
xor dl, 0xf5
mov r9d, ecx
not r9b
mov eax, edx
xor al, r9b
xor r9b, cl
and r9b, dl
xor r9b, cl
and al, dl
add al, al
add al, r9b
mov edx, r8d
xor dl, 0x42
add dl, cl
lock cmpxchg byte [0x140577763], dl
jne 0x140214730
xor eax, eax
lea rcx, [0x140577760]
lea rdx, [0x140491fc0]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 2
jg 0x1402148c8
inc rax
jmp 0x140214790
test edx, edx
je 0x140214895
movzx eax, byte [0x140577cf4]
xor r8b, 0x9a
add r8b, byte [0x140578324]
cmp al, r8b
je 0x1402147e4
mov cl, 0x1f
nop dword [rax]
mov al, 0xcf
lock cmpxchg byte [0x140577cf4], cl
je 0x1402148e8
cmp al, 0xb9
jne 0x1402147d0
lea rax, [0x140577ce0]
ret
movzx eax, byte [0x140577fbe]
nop word cs:[rax + rax]
cmp al, 0x8f
je 0x1402148e0
movzx ecx, byte [0x140578324]
mov edx, r8d
not dl
mov r9d, edx
and r9b, 0x6e
mov eax, r8d
and al, 0x91
or al, r9b
add al, cl
mov r9d, r8d
xor r9b, 0x6a
and r9b, dl
mov r10d, r8d
xor r10b, 0x95
and dl, 0x6a
or dl, r10b
not dl
or dl, r9b
add dl, cl
lock cmpxchg byte [0x140577fbe], dl
jne 0x140214800
xor eax, eax
lea rcx, [0x140577fb0]
lea rdx, [0x1404927f0]
nop dword [rax]
movzx r8d, byte [rax + rcx]
movzx r9d, byte [rax + rdx]
mov r10d, r9d
xor r10b, r9b
not r10b
and r10b, r8b
xor r10b, r9b
and r8b, r9b
add r8b, r8b
add r8b, r10b
mov byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xd
jg 0x1402148d8
inc rax
jmp 0x140214860
movzx eax, byte [0x140577923]
cmp al, 0x28
je 0x1402148c0
mov cl, 0x12
nop word cs:[rax + rax]
mov al, 0x24
lock cmpxchg byte [0x140577923], cl
je 0x14021493b
cmp al, 0x28
jne 0x1402148b0
lea rax, [0x140577910]
ret
mov al, 0x61
xchg byte [0x140577763], al
lea rax, [0x140577760]
ret
mov al, 0x8f
xchg byte [0x140577fbe], al
lea rax, [0x140577fb0]
ret
xor edx, edx
lea rax, [0x140577ce0]
lea rcx, [0x140492520]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 0x4b6a2e4c
and edx, 0x4b6a2e4c
lea edx, [r8 + rdx*2]
add edx, 0xb495d1b5
cmp edx, 0x14
jl 0x140214900
mov al, 0xb9
xchg byte [0x140577cf4], al
lea rax, [0x140577ce0]
ret
xor eax, eax
lea rcx, [0x140577910]
lea rdx, [0x140492170]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x12
jg 0x140214968
inc rax
jmp 0x140214950
mov al, 0x28
xchg byte [0x140577923], al
lea rax, [0x140577910]
ret
Function at 0x140218ab0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rsi
sub rsp, 0x48
lea rbp, [rsp + 0x40]
mov qword [rbp], 0xfffffffffffffffe
mov eax, dword [0x1405d1568]
lea r8, [fcn.140218ab0]
lea r9d, [r8 + r8]
add r9d, 0x1ca1
add r8d, r8d
add r8d, 0x1ca0
xor r8d, r9d
cmp r8d, 1
nop dword [rax]
mov r8d, 0x376c766e
add r8d, dword [0x1405791c8]
lea r9, [fcn.140218ab0]
add r9d, r9d
add r9d, 0x4c0
xor r9d, r8d
not r9d
test r9d, r8d
jne 0x140218af0
movzx r8d, dx
cmp r8d, 0x577
jbe 0x140218b39
cmp r8d, 0x2710
jae 0x140218b7c
mov word [rcx], dx
add rsp, 0x48
pop rsi
pop rbp
ret
mov ecx, dword [0x140579560]
mov edx, ecx
xor edx, eax
and ecx, eax
lea eax, [rdx + rcx*2]
neg eax
mov ecx, eax
xor ecx, 0xb1a
and ecx, eax
xor eax, 0xfffff4e5
lea eax, [rax + rcx*2]
neg eax
cdqe
add rax, qword [0x140579570]
lea rsi, [rbp - 0x18]
mov rcx, rsi
call qword [case.0x14012b313.0]
mov rcx, rsi
call fcn.140218c70
xor eax, dword [0x140579560]
add eax, 0xb1b
cdqe
add rax, qword [0x140579570]
lea rsi, [rbp - 0x18]
mov rcx, rsi
call qword [case.0x14012b313.0]
mov rcx, rsi
call fcn.140218c70
int3
Function at 0x14021b330
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov r8d, dword [rsp + 0x38]
test ecx, ecx
je 0x14021b369
test edx, edx
je 0x14021b399
movzx eax, byte [0x14057903d]
cmp al, 0xdf
je 0x14021b450
mov cl, 0x31
mov al, 0x73
lock cmpxchg byte [0x14057903d], cl
je 0x14021b415
cmp al, 0xdf
jne 0x14021b350
jmp 0x14021b450
test edx, edx
je 0x14021b3c9
movzx eax, byte [0x14057906d]
cmp al, 0xb5
je 0x14021b497
mov cl, 0xb9
nop
mov al, 0x89
lock cmpxchg byte [0x14057906d], cl
je 0x14021b45c
cmp al, 0xb5
jne 0x14021b380
jmp 0x14021b497
movzx eax, byte [0x1405790ca]
cmp al, 0xdf
je 0x14021b519
mov cl, 0xed
nop word [rax + rax]
mov al, 0xd7
lock cmpxchg byte [0x1405790ca], cl
je 0x14021b4a3
cmp al, 0xdf
jne 0x14021b3b0
jmp 0x14021b519
movzx eax, byte [0x140578ee3]
mov ecx, r8d
xor cl, 0xa6
add cl, byte [0x1405791d8]
cmp al, cl
je 0x14021b560
mov cl, 0x9c
nop word cs:[rax + rax]
mov al, 0xc9
lock cmpxchg byte [0x140578ee3], cl
je 0x14021b522
mov edx, r8d
xor dl, 0xa6
add dl, byte [0x1405791d8]
cmp al, dl
jne 0x14021b3f0
jmp 0x14021b560
xor eax, eax
lea rcx, [0x140579030]
lea rdx, [0x140493300]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x14021b448
inc rax
jmp 0x14021b430
mov al, 0xdf
xchg byte [0x14057903d], al
lea rax, [0x140579030]
jmp 0x14021b567
xor edx, edx
lea rax, [0x140579060]
lea rcx, [0x140493330]
nop dword [rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 0xd
jl 0x14021b470
mov al, 0xb5
xchg byte [0x14057906d], al
lea rax, [0x140579060]
jmp 0x14021b567
xor eax, eax
lea rcx, [0x1405790b0]
lea rdx, [0x140493380]
mov r9d, r8d
xor r9d, 0x575d9a85
xor r8d, 0x575d9a6c
nop word cs:[rax + rax]
cdqe
movzx r10d, byte [rax + rcx]
movzx r11d, byte [rax + rdx]
mov ebx, r10d
xor bl, r11b
and r10b, r11b
add r10b, r10b
add r10b, bl
mov byte [rax + rcx], r10b
mov r10d, dword [0x1405791c8]
mov r11d, r9d
xor r11d, r10d
mov esi, r9d
and esi, r10d
lea r11d, [r11 + rsi*2]
add eax, r11d
add r10d, r8d
cmp eax, r10d
jl 0x14021b4d0
mov al, 0xdf
xchg byte [0x1405790ca], al
lea rax, [0x1405790b0]
jmp 0x14021b567
xor eax, eax
lea rcx, [0x140578ec0]
lea rdx, [0x140493190]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x22
jg 0x14021b558
inc rax
jmp 0x14021b540
mov al, 0x1e
xchg byte [0x140578ee3], al
lea rax, [0x140578ec0]
pop rbx
pop rsi
ret
Function at 0x140266a50
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x140266a8c
test edx, edx
je 0x140266abc
movzx eax, byte [0x140582802]
cmp al, 0x82
je 0x140266a84
mov cl, 5
nop word cs:[rax + rax]
mov al, 0x86
lock cmpxchg byte [0x140582802], cl
je 0x140266b1c
cmp al, 0x82
jne 0x140266a70
lea rax, [0x140582800]
ret
test edx, edx
je 0x140266aec
movzx eax, byte [0x140582820]
cmp al, 0xbd
je 0x140266ab4
mov cl, 6
nop dword [rax]
mov al, 0xcb
lock cmpxchg byte [0x140582820], cl
je 0x140266b68
cmp al, 0xbd
jne 0x140266aa0
lea rax, [0x140582810]
ret
movzx eax, byte [0x1405828a3]
cmp al, 0x51
je 0x140266ae4
mov cl, 0x91
nop dword [rax]
mov al, 0xd4
lock cmpxchg byte [0x1405828a3], cl
je 0x140266b98
cmp al, 0x51
jne 0x140266ad0
lea rax, [0x140582880]
ret
movzx eax, byte [0x1405828bf]
cmp al, 0xb6
je 0x140266b14
mov ecx, dword [rsp + 0x28]
mov dl, 0x4f
nop dword [rax]
mov al, 0x92
lock cmpxchg byte [0x1405828bf], dl
je 0x140266be8
cmp al, 0xb6
jne 0x140266b00
lea rax, [0x1405828b0]
ret
xor eax, eax
lea rcx, [0x140582800]
lea rdx, [0x140495d60]
nop dword [rax]
movzx r8d, byte [rax + rdx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rax + rcx]
xor r9b, r8b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
cmp r8d, 1
jg 0x140266b58
inc rax
jmp 0x140266b30
mov al, 0x82
xchg byte [0x140582802], al
lea rax, [0x140582800]
ret
xor eax, eax
lea rcx, [0x140582810]
lea rdx, [0x140495d70]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xf
jg 0x140266bc8
inc rax
jmp 0x140266b80
xor eax, eax
lea rcx, [0x140582880]
lea rdx, [0x140495dd0]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x22
jg 0x140266bd8
inc rax
jmp 0x140266bb0
mov al, 0xbd
xchg byte [0x140582820], al
lea rax, [0x140582810]
ret
mov al, 0x51
xchg byte [0x1405828a3], al
lea rax, [0x140582880]
ret
xor r9d, r9d
lea rax, [0x1405828b0]
lea rdx, [0x140495e00]
mov r8d, ecx
xor r8d, 0x36be1206
nop word cs:[rax + rax]
movsxd r9, r9d
movzx r10d, byte [r9 + rdx]
xor byte [r9 + rax], r10b
mov r10d, r9d
xor r10d, 1
and r9d, 1
lea r9d, [r10 + r9*2]
mov r10d, dword [0x140582ba0]
add r10d, r8d
cmp r9d, r10d
jl 0x140266c10
xor cl, 0xdb
add cl, byte [0x140582b90]
xchg byte [0x1405828bf], cl
lea rax, [0x1405828b0]
ret
Function at 0x140268da0
Capabilities:
Encode data using xor

Disassembly:
push rbx
mov r8d, dword [rsp + 0x30]
test ecx, ecx
je 0x140268de9
test edx, edx
je 0x140268e49
movzx eax, byte [0x140582e4d]
cmp al, 0xae
je 0x140268f01
mov cl, 0x5f
nop word cs:[rax + rax]
mov al, 0x8b
lock cmpxchg byte [0x140582e4d], cl
je 0x140268ea9
cmp al, 0xae
jne 0x140268dd0
jmp 0x140268f01
mov eax, r8d
xor eax, 0xa843a251
mov ecx, r8d
not ecx
and ecx, r8d
xor ecx, eax
add ecx, dword [0x140583358]
cmp edx, ecx
jne 0x140268e79
movzx eax, byte [0x140582cbf]
xor r8b, 0x35
add r8b, byte [0x14058335c]
cmp al, r8b
je 0x140268ffd
mov cl, 0x1a
nop word cs:[rax + rax]
mov al, 0x44
lock cmpxchg byte [0x140582cbf], cl
je 0x140268f63
cmp al, 0xbd
jne 0x140268e30
jmp 0x140268ffd
movzx eax, byte [0x140582bd4]
cmp al, 0x60
je 0x140268f5a
mov cl, 0x20
nop word [rax + rax]
mov al, 0x5b
lock cmpxchg byte [0x140582bd4], cl
je 0x140268f0a
cmp al, 0x60
jne 0x140268e60
jmp 0x140268f5a
movzx eax, byte [0x140582d3d]
cmp al, 0xde
je 0x140269018
mov cl, 0x8f
nop word [rax + rax]
mov al, 0xe
lock cmpxchg byte [0x140582d3d], cl
je 0x140268f98
cmp al, 0xde
jne 0x140268e90
jmp 0x140269018
xor edx, edx
lea rax, [0x140582e40]
lea rcx, [0x140496090]
nop dword [rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rdx + rax]
xor r9b, r8b
mov byte [rdx + rax], r9b
mov r8d, edx
xor r8d, 1
not edx
and edx, 0x7ffffffe
or edx, r8d
not edx
lea edx, [r8 + rdx*2]
cmp edx, 0xd
jl 0x140268ec0
mov al, 0xae
xchg byte [0x140582e4d], al
lea rax, [0x140582e40]
pop rbx
ret
xor eax, eax
lea rcx, [0x140582bd0]
lea rdx, [0x140495e40]
nop word [rax + rax]
movzx r9d, byte [rax + rdx]
mov r10d, r9d
xor r10b, r9b
not r10b
and r10b, byte [rax + rcx]
xor r10b, r9b
mov byte [rax + rcx], r10b
lea r9d, [rax + 1]
cmp r9d, 3
jg 0x140268f48
inc rax
jmp 0x140268f20
xor r8b, 0x52
add r8b, byte [0x14058335c]
xchg byte [0x140582bd4], r8b
lea rax, [0x140582bd0]
pop rbx
ret
xor eax, eax
lea rcx, [0x140582cb0]
lea rdx, [0x140495f00]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xe
jg 0x140268ff5
inc rax
jmp 0x140268f80
xor eax, eax
lea rcx, [0x140582d30]
lea rdx, [0x140495f80]
mov r9d, r8d
xor r9d, 0xa843a244
nop word cs:[rax + rax]
movzx r10d, byte [rax + rcx]
movzx r11d, byte [rax + rdx]
mov ebx, r10d
xor bl, r11b
and r10b, r11b
add r10b, r10b
add r10b, bl
mov byte [rax + rcx], r10b
lea r10d, [rax + 1]
mov r11d, dword [0x140583358]
add r11d, r9d
cmp r10d, r11d
jge 0x140269006
inc rax
jmp 0x140268fc0
mov al, 0xbd
xchg byte [0x140582cbf], al
lea rax, [0x140582cb0]
pop rbx
ret
xor r8b, 0xd4
add r8b, byte [0x14058335c]
xchg byte [0x140582d3d], r8b
lea rax, [0x140582d30]
pop rbx
ret
Function at 0x140276320
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x140276377
test edx, edx
je 0x1402763bc
movzx eax, byte [0x140583573]
movzx ecx, byte [0x140584e34]
mov edx, ecx
xor dl, 0x3f
and cl, 0x3f
add cl, cl
add cl, dl
cmp al, cl
je 0x14027636f
nop word [rax + rax]
movzx ecx, byte [0x140584e34]
lea eax, [rcx - 0x1c]
add cl, 0x1a
lock cmpxchg byte [0x140583573], cl
je 0x140276468
cmp al, 0xce
jne 0x140276350
lea rax, [0x140583570]
ret
mov eax, 0xd62cbe65
add eax, dword [0x140584e30]
cmp edx, eax
jne 0x140276438
movzx eax, byte [0x1405836bd]
cmp al, 0x62
je 0x1402763b4
mov cl, 0x2a
nop word [rax + rax]
mov al, 0xa2
lock cmpxchg byte [0x1405836bd], cl
je 0x1402764ff
cmp al, 0x62
jne 0x1402763a0
lea rax, [0x1405836b0]
ret
movzx eax, byte [0x14058373d]
nop word cs:[rax + rax]
cmp al, 0x69
je 0x140276430
movzx ecx, byte [0x140584e34]
lea eax, [rcx - 0x73]
add cl, 0x5f
lock cmpxchg byte [0x14058373d], cl
jne 0x1402763d0
xor edx, edx
lea rax, [0x140583730]
lea rcx, [0x140496420]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
xor byte [rdx + rax], r8b
mov r8d, dword [0x140584e30]
add edx, r8d
add edx, 0xd62cbe66
add r8d, 0xd62cbe72
cmp edx, r8d
jl 0x140276400
mov al, 0x69
xchg byte [0x14058373d], al
lea rax, [0x140583730]
ret
cmp byte [0x1405836a9], 0
je 0x140276460
mov cl, 0xaf
nop word cs:[rax + rax]
mov al, 0xa3
lock cmpxchg byte [0x1405836a9], cl
je 0x1402764b1
test al, al
jne 0x140276450
lea rax, [0x1405836a0]
ret
xor eax, eax
lea rcx, [0x140583570]
lea rdx, [0x140496270]
mov r8d, 0xd62cbe68
nop
movzx r9d, byte [rax + rdx]
xor byte [rax + rcx], r9b
lea r9d, [rax + 1]
mov r10d, dword [0x140584e30]
add r10d, r8d
cmp r9d, r10d
jge 0x1402764a1
inc rax
jmp 0x140276480
mov al, 0xce
xchg byte [0x140583573], al
lea rax, [0x140583570]
ret
xor edx, edx
lea rax, [0x1405836a0]
lea rcx, [0x140496390]
nop word cs:[rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 9
jl 0x1402764d0
xor eax, eax
xchg byte [0x1405836a9], al
lea rax, [0x1405836a0]
ret
xor eax, eax
lea rcx, [0x1405836b0]
lea rdx, [0x1404963a0]
nop
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x140276528
inc rax
jmp 0x140276510
movzx eax, byte [0x140584e34]
add al, 0xd3
xchg byte [0x1405836bd], al
lea rax, [0x1405836b0]
ret