joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140197ca0
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [0x140546e50]
mov r8d, eax
xor r8d, 0xbe6f1718
and eax, 0x3e6f1718
lea eax, [r8 + rax*2]
cmp ecx, eax
jne 0x140197cec
test edx, edx
je 0x140197d1c
movzx eax, byte [0x1405467c4]
cmp al, 0x42
je 0x140197ce4
mov cl, 0xc
nop
mov al, 0xcb
lock cmpxchg byte [0x1405467c4], cl
je 0x140197dac
cmp al, 0x42
jne 0x140197cd0
lea rax, [0x1405467c0]
ret
test edx, edx
je 0x140197d4c
movzx eax, byte [0x140546963]
cmp al, 0x7c
je 0x140197d14
xor ecx, ecx
nop dword [rax]
mov al, 0x3c
lock cmpxchg byte [0x140546963], cl
je 0x140197dd8
cmp al, 0x7c
jne 0x140197d00
lea rax, [0x140546940]
ret
movzx eax, byte [0x140546866]
cmp al, 0x5a
je 0x140197d44
mov cl, 0xd9
nop dword [rax]
mov al, 0x72
lock cmpxchg byte [0x140546866], cl
je 0x140197e38
cmp al, 0x5a
jne 0x140197d30
lea rax, [0x140546860]
ret
movzx eax, byte [0x14054672f]
nop word cs:[rax + rax]
cmp al, 0x77
je 0x140197e9b
movzx ecx, byte [0x140546e54]
lea eax, [rcx + 0x27]
add cl, 0x51
lock cmpxchg byte [0x14054672f], cl
jne 0x140197d60
xor eax, eax
lea rcx, [0x140546700]
lea rdx, [0x140468940]
nop
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x2e
jg 0x140197e93
inc rax
jmp 0x140197d90
xor eax, eax
lea rcx, [0x1405467c0]
lea rdx, [0x140468a00]
nop dword [rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 3
jg 0x140197e18
inc rax
jmp 0x140197dc0
xor eax, eax
lea rcx, [0x140546940]
lea rdx, [0x140468b80]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rax + rcx]
xor r9b, r8b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
cmp r8d, 0x22
jg 0x140197e28
inc rax
jmp 0x140197df0
mov al, 0x42
xchg byte [0x1405467c4], al
lea rax, [0x1405467c0]
ret
mov al, 0x7c
xchg byte [0x140546963], al
lea rax, [0x140546940]
ret
xor edx, edx
lea rax, [0x140546860]
lea rcx, [0x140468aa0]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rax]
movzx r9d, byte [rdx + rcx]
mov r10d, r8d
xor r10b, r9b
and r8b, r9b
add r8b, r8b
add r8b, r10b
mov byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 6
jl 0x140197e50
mov al, 0x5a
xchg byte [0x140546866], al
lea rax, [0x140546860]
ret
mov al, 0x77
xchg byte [0x14054672f], al
lea rax, [0x140546700]
ret
Function at 0x140198160
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov eax, 0xbe6f1718
mov r8d, dword [0x140546e50]
add r8d, eax
cmp ecx, r8d
jne 0x1401981b9
add eax, dword [0x140546e50]
cmp edx, eax
jne 0x1401981e5
movzx eax, byte [0x1405468c2]
movzx ecx, byte [0x140546e54]
add cl, 0x1d
cmp al, cl
je 0x14019838d
mov cl, 0x45
nop dword [rax + rax]
mov al, 0x53
lock cmpxchg byte [0x1405468c2], cl
je 0x1401982b2
cmp al, 0x41
jne 0x1401981a0
jmp 0x14019838d
test edx, edx
je 0x140198219
movzx eax, byte [0x14054699d]
cmp al, 0x91
je 0x1401982a6
mov cl, 4
nop
mov al, 0x8f
lock cmpxchg byte [0x14054699d], cl
je 0x140198249
cmp al, 0x91
jne 0x1401981d0
jmp 0x1401982a6
movzx eax, byte [0x14054692e]
movzx ecx, byte [0x140546e54]
add cl, 0x16
cmp al, cl
je 0x140198372
mov cl, 0x43
mov al, 0x5a
lock cmpxchg byte [0x14054692e], cl
je 0x1401982ec
cmp al, 0x3a
jne 0x140198200
jmp 0x140198372
movzx eax, byte [0x140546918]
cmp al, 0x7f
je 0x1401983fb
xor ecx, ecx
nop word [rax + rax]
mov al, 0x89
lock cmpxchg byte [0x140546918], cl
je 0x140198396
cmp al, 0x7f
jne 0x140198230
jmp 0x1401983fb
xor eax, eax
lea rcx, [0x140546990]
lea rdx, [0x140468bd0]
nop dword [rax]
movzx r8d, byte [rax + rcx]
movzx r9d, byte [rax + rdx]
mov r10d, r8d
not r10b
mov r11d, r9d
not r11b
xor r8b, r11b
xor r11b, r10b
and r11b, r9b
and r10b, r9b
or r10b, r8b
not r10b
or r10b, r11b
mov byte [rax + rcx], r10b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x14019829e
inc rax
jmp 0x140198260
mov al, 0x91
xchg byte [0x14054699d], al
lea rax, [0x140546990]
jmp 0x140198402
xor eax, eax
lea rcx, [0x1405468b0]
lea rdx, [0x140468af0]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x11
jg 0x14019837e
inc rax
jmp 0x1401982d0
xor r8d, r8d
lea rax, [0x140546920]
lea rcx, [0x140468b60]
mov edx, 0xbe6f1726
nop word cs:[rax + rax]
movsxd r8, r8d
movzx r9d, byte [r8 + rax]
movzx r10d, byte [r8 + rcx]
mov r11d, r9d
not r11b
mov ebx, r11d
xor bl, r10b
not r10b
mov esi, r9d
and sil, r10b
or sil, bl
not sil
xor r10b, r11b
and r10b, r9b
or r10b, sil
mov byte [r8 + rax], r10b
mov r9d, r8d
xor r9d, 1
and r8d, 1
lea r8d, [r9 + r8*2]
mov r9d, dword [0x140546e50]
add r9d, edx
cmp r8d, r9d
jl 0x140198310
movzx eax, byte [0x140546e54]
add al, 0x16
xchg byte [0x14054692e], al
lea rax, [0x140546920]
jmp 0x140198402
movzx eax, byte [0x140546e54]
add al, 0x1d
xchg byte [0x1405468c2], al
lea rax, [0x1405468b0]
jmp 0x140198402
xor eax, eax
lea rcx, [0x140546900]
lea rdx, [0x140468b40]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rdx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rax + rcx]
xor r9b, r8b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
mov r9d, dword [0x140546e50]
mov r10d, r9d
xor r10d, 0xbe6f1730
and r9d, 0x3e6f1730
lea r9d, [r10 + r9*2]
cmp r8d, r9d
jge 0x1401983f3
inc rax
jmp 0x1401983b0
mov al, 0x7f
xchg byte [0x140546918], al
lea rax, [0x140546900]
pop rbx
pop rsi
ret
Function at 0x140198760
Capabilities:
Encode data using xor

Disassembly:
mov r8d, dword [rsp + 0x28]
mov eax, r8d
xor eax, 0xb8ab377d
add eax, dword [0x140546e50]
cmp ecx, eax
jne 0x1401987bc
test edx, edx
je 0x1401987f4
movzx eax, byte [0x1405467f4]
xor r8b, 0x86
add r8b, byte [0x140546e54]
cmp al, r8b
je 0x1401987b4
mov cl, 0xcc
nop word cs:[rax + rax]
mov al, 0x7f
lock cmpxchg byte [0x1405467f4], cl
je 0x14019887b
cmp al, 7
jne 0x1401987a0
lea rax, [0x1405467f0]
ret
movzx eax, byte [0x140546933]
cmp al, 0x53
je 0x1401987ec
mov cl, 0xcf
nop dword [rax]
mov al, 0xb4
lock cmpxchg byte [0x140546933], cl
je 0x14019882c
mov edx, r8d
xor dl, 0x4a
add dl, byte [0x140546e54]
cmp al, dl
jne 0x1401987d0
lea rax, [0x140546930]
ret
movzx eax, byte [0x1405468de]
cmp al, 0x33
je 0x140198824
mov cl, 0x3c
nop word cs:[rax + rax]
mov al, 0x76
lock cmpxchg byte [0x1405468de], cl
je 0x1401988cf
cmp al, 0x33
jne 0x140198810
lea rax, [0x1405468d0]
ret
xor edx, edx
lea rax, [0x140546930]
lea rcx, [0x140468b70]
nop dword [rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
xor byte [rdx + rax], r8b
add edx, 0xbd6bd9fd
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
add edx, 0x42942603
cmp edx, 3
jl 0x140198840
mov al, 0x53
xchg byte [0x140546933], al
lea rax, [0x140546930]
ret
xor eax, eax
lea rcx, [0x1405467f0]
lea rdx, [0x140468a30]
nop dword [rax + rax]
movzx r8d, byte [rax + rcx]
movzx r9d, byte [rax + rdx]
not r8b
mov r10d, r8d
and r10b, r9b
or r8b, r9b
not r8b
or r8b, r10b
mov byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 3
jg 0x1401988bf
inc rax
jmp 0x140198890
mov al, 7
xchg byte [0x1405467f4], al
lea rax, [0x1405467f0]
ret
xor eax, eax
lea rcx, [0x1405468d0]
lea rdx, [0x140468b10]
nop
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xd
jg 0x1401988f8
inc rax
jmp 0x1401988e0
mov al, 0x33
xchg byte [0x1405468de], al
lea rax, [0x1405468d0]
ret
Function at 0x1401af010
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x1401af04c
test edx, edx
je 0x1401af086
movzx eax, byte [0x1405472a2]
cmp al, 0x31
je 0x1401af044
mov cl, 0xbb
nop word cs:[rax + rax]
mov al, 0xc7
lock cmpxchg byte [0x1405472a2], cl
je 0x1401af0ec
cmp al, 0x31
jne 0x1401af030
lea rax, [0x140547290]
ret
test edx, edx
je 0x1401af0bc
movzx eax, byte [0x1405474e1]
cmp al, 0xca
je 0x1401af07e
mov cl, 0x2e
nop dword [rax]
mov al, 0x70
lock cmpxchg byte [0x1405474e1], cl
je 0x1401af158
movzx edx, byte [0x140549fc8]
add dl, 0x5b
cmp al, dl
jne 0x1401af060
lea rax, [0x1405474d0]
ret
movzx eax, byte [0x14054721c]
cmp al, 0xf0
je 0x1401af0b4
mov cl, 0x32
nop word cs:[rax + rax]
mov al, 0x4d
lock cmpxchg byte [0x14054721c], cl
je 0x1401af188
cmp al, 0xf0
jne 0x1401af0a0
lea rax, [0x140547210]
ret
movzx eax, byte [0x14054739d]
cmp al, 0xf4
je 0x1401af0e4
mov cl, 0x42
nop dword [rax]
mov al, 0xa3
lock cmpxchg byte [0x14054739d], cl
je 0x1401af1f6
cmp al, 0xf4
jne 0x1401af0d0
lea rax, [0x140547390]
ret
xor eax, eax
lea rcx, [0x140547290]
lea rdx, [0x140468f30]
mov r8d, 0x76a2eb1a
nop word cs:[rax + rax]
movzx r9d, byte [rax + rdx]
mov r10d, r9d
xor r10b, r9b
not r10b
and r10b, byte [rax + rcx]
xor r10b, r9b
mov byte [rax + rcx], r10b
lea r9d, [rax + 1]
mov r10d, dword [0x140549fb8]
add r10d, r8d
cmp r9d, r10d
jge 0x1401af141
inc rax
jmp 0x1401af110
movzx eax, byte [0x140549fc8]
add al, 0xc2
xchg byte [0x1405472a2], al
lea rax, [0x140547290]
ret
xor eax, eax
lea rcx, [0x1405474d0]
lea rdx, [0x140469160]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x10
jg 0x1401af1e6
inc rax
jmp 0x1401af170
xor edx, edx
lea rax, [0x140547210]
lea rcx, [0x140468eb0]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, dword [0x140549fb8]
add edx, r8d
add edx, 0x76a2eb09
mov r9d, r8d
xor r9d, 0x76a2eb14
and r8d, 0x76a2eb14
lea r8d, [r9 + r8*2]
cmp edx, r8d
jl 0x1401af1a0
mov al, 0xf0
xchg byte [0x14054721c], al
lea rax, [0x140547210]
ret
mov al, 0xca
xchg byte [0x1405474e1], al
lea rax, [0x1405474d0]
ret
xor eax, eax
lea rcx, [0x140547390]
lea rdx, [0x140469020]
mov r8d, 0x76a2eb15
nop dword [rax]
movzx r9d, byte [rax + rdx]
add byte [rax + rcx], r9b
lea r9d, [rax + 1]
mov r10d, dword [0x140549fb8]
add r10d, r8d
cmp r9d, r10d
jge 0x1401af231
inc rax
jmp 0x1401af210
movzx eax, byte [0x140549fc8]
mov ecx, eax
xor cl, 0x85
and al, 5
add al, al
add al, cl
xchg byte [0x14054739d], al
lea rax, [0x140547390]
ret
Function at 0x1401af270
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x1401af2ac
test edx, edx
je 0x1401af2ec
movzx eax, byte [0x1405473ed]
movzx ecx, byte [0x140549fc8]
add cl, 0x86
cmp al, cl
je 0x1401af2a4
mov cl, 0x15
nop
mov al, 0x79
lock cmpxchg byte [0x1405473ed], cl
je 0x1401af386
cmp al, 0xf5
jne 0x1401af290
lea rax, [0x1405473e0]
ret
test edx, edx
je 0x1401af34a
movzx eax, byte [0x1405473bd]
movzx ecx, byte [0x140549fc8]
add cl, 0x39
cmp al, cl
je 0x1401af2e4
mov cl, 0xbe
nop dword [rax + rax]
mov al, 0x53
lock cmpxchg byte [0x1405473bd], cl
je 0x1401af3d9
cmp al, 0xa8
jne 0x1401af2d0
lea rax, [0x1405473b0]
ret
movzx eax, byte [0x140547333]
cmp al, 0xcd
je 0x1401af342
nop word [rax + rax]
movzx ecx, byte [0x140549fc8]
mov edx, ecx
xor dl, 0x29
mov eax, ecx
and al, 0x29
add al, al
add al, dl
mov edx, ecx
xor dl, 0x71
not cl
and cl, 0xe
or cl, dl
not cl
add cl, cl
add cl, dl
lock cmpxchg byte [0x140547333], cl
je 0x1401af427
movzx ecx, byte [0x140549fc8]
add cl, 0x5e
cmp al, cl
jne 0x1401af300
lea rax, [0x140547310]
ret
movzx eax, byte [0x1405472be]
cmp al, 0x72
je 0x1401af37e
mov cl, 0x2c
nop word [rax + rax]
mov al, 0x12
lock cmpxchg byte [0x1405472be], cl
je 0x1401af49f
movzx edx, byte [0x140549fc8]
add dl, 3
cmp al, dl
jne 0x1401af360
lea rax, [0x1405472b0]
ret
xor r8d, r8d
lea rax, [0x1405473e0]
lea rcx, [0x140469070]
mov edx, 0x76a2eb09
nop dword [rax]
movsxd r8, r8d
movzx r9d, byte [r8 + rcx]
xor byte [r8 + rax], r9b
mov r9d, dword [0x140549fb8]
add r9d, edx
mov r10d, r8d
xor r10d, r9d
and r9d, r8d
lea r8d, [r10 + r9*2]
cmp r8d, 0xd
jl 0x1401af3a0
mov al, 0xf5
xchg byte [0x1405473ed], al
lea rax, [0x1405473e0]
ret
xor eax, eax
lea rcx, [0x1405473b0]
lea rdx, [0x140469040]
nop dword [rax]
xor r8d, r8d
sub r8b, byte [rax + rcx]
movzx r9d, byte [rax + rdx]
xor r10d, r10d
sub r10b, r9b
mov r9d, r8d
xor r9b, r10b
and r10b, r8b
add r10b, r10b
add r10b, r9b
neg r10b
mov byte [rax + rcx], r10b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x1401af478
inc rax
jmp 0x1401af3f0
xor eax, eax
lea rcx, [0x140547310]
lea rdx, [0x140468fa0]
nop word [rax + rax]
movzx r8d, byte [rax + rcx]
movzx r9d, byte [rax + rdx]
mov r10d, r8d
xor r10b, r9b
and r8b, r9b
add r8b, r8b
mov r9d, r10d
xor r9b, r8b
and r8b, r10b
add r8b, r8b
add r8b, r9b
mov byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x22
jg 0x1401af488
inc rax
jmp 0x1401af440
mov al, 0xa8
xchg byte [0x1405473bd], al
lea rax, [0x1405473b0]
ret
movzx eax, byte [0x140549fc8]
add al, 0x5e
xchg byte [0x140547333], al
lea rax, [0x140547310]
ret
xor r8d, r8d
lea rax, [0x1405472b0]
lea rcx, [0x140468f50]
mov edx, 0x76a2eb16
nop word cs:[rax + rax]
movsxd r8, r8d
movzx r9d, byte [r8 + rcx]
add byte [r8 + rax], r9b
mov r9d, r8d
xor r9d, 1
and r8d, 1
lea r8d, [r9 + r8*2]
mov r9d, dword [0x140549fb8]
add r9d, edx
cmp r8d, r9d
jl 0x1401af4c0
mov al, 0x72
xchg byte [0x1405472be], al
lea rax, [0x1405472b0]
ret
Function at 0x1401b0200
Capabilities:
Encode data using xor

Disassembly:
mov r8d, dword [rsp + 0x28]
test ecx, ecx
je 0x1401b023c
test edx, edx
je 0x1401b02a0
movzx eax, byte [0x140547511]
cmp al, 2
je 0x1401b0234
mov cl, 0x76
nop
mov al, 0x15
lock cmpxchg byte [0x140547511], cl
je 0x1401b0318
cmp al, 2
jne 0x1401b0220
lea rax, [0x140547500]
ret
mov eax, r8d
xor eax, 0xdb5a3a28
add eax, dword [0x140549fb8]
cmp edx, eax
jne 0x1401b02dc
movzx eax, byte [0x1405474cd]
mov ecx, r8d
xor cl, 0x94
add cl, byte [0x140549fc8]
cmp al, cl
je 0x1401b0298
nop dword [rax]
movzx ecx, byte [0x140549fc8]
mov eax, r8d
xor al, 0xda
add al, cl
mov edx, r8d
xor dl, 0x9a
add dl, cl
lock cmpxchg byte [0x1405474cd], dl
je 0x1401b03d1
cmp al, 0x23
jne 0x1401b0270
lea rax, [0x1405474c0]
ret
movzx eax, byte [0x14054746d]
mov ecx, r8d
xor cl, 0xde
add cl, byte [0x140549fc8]
cmp al, cl
je 0x1401b02d4
mov cl, 0x61
nop dword [rax]
mov al, 0x15
lock cmpxchg byte [0x14054746d], cl
je 0x1401b0358
cmp al, 0x6d
jne 0x1401b02c0
lea rax, [0x140547460]
ret
movzx eax, byte [0x14054736d]
cmp al, 0x52
je 0x1401b0310
mov cl, 0x1c
nop dword [rax]
mov al, 0x86
lock cmpxchg byte [0x14054736d], cl
je 0x1401b041c
mov edx, r8d
xor dl, 0xc3
add dl, byte [0x140549fc8]
cmp al, dl
jne 0x1401b02f0
lea rax, [0x140547360]
ret
xor eax, eax
lea rcx, [0x140547500]
lea rdx, [0x140469190]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x10
jg 0x1401b0348
inc rax
jmp 0x1401b0330
mov al, 2
xchg byte [0x140547511], al
lea rax, [0x140547500]
ret
xor eax, eax
lea rcx, [0x140547460]
lea rdx, [0x1404690f0]
mov r9d, r8d
xor r9d, 0xdb5a3a29
nop word cs:[rax + rax]
cdqe
movzx r10d, byte [rax + rdx]
mov r11d, r10d
xor r11b, r10b
not r11b
and r11b, byte [rax + rcx]
xor r11b, r10b
mov byte [rax + rcx], r11b
mov r10d, dword [0x140549fb8]
mov r11d, r9d
xor r11d, r10d
and r10d, r9d
lea r10d, [r11 + r10*2]
add eax, r10d
cmp eax, 0xd
jl 0x1401b0380
xor r8b, 0xde
add r8b, byte [0x140549fc8]
xchg byte [0x14054746d], r8b
lea rax, [0x140547460]
ret
xor eax, eax
lea rcx, [0x1405474c0]
lea rdx, [0x140469150]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rcx]
movzx r9d, byte [rax + rdx]
mov r10d, r8d
xor r10b, r9b
and r8b, r9b
add r8b, r8b
add r8b, r10b
mov byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x1401b045f
inc rax
jmp 0x1401b03f0
xor edx, edx
lea rax, [0x140547360]
lea rcx, [0x140468ff0]
nop dword [rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 0xd
jl 0x1401b0430
mov al, 0x52
xchg byte [0x14054736d], al
lea rax, [0x140547360]
ret
mov al, 0x23
xchg byte [0x1405474cd], al
lea rax, [0x1405474c0]
ret
Function at 0x1401d0cb0
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x1401d0d1b
mov eax, dword [0x14054ac80]
mov ecx, eax
xor ecx, 0xeafc5318
and eax, 0x6afc5318
lea eax, [rcx + rax*2]
cmp edx, eax
jne 0x1401d0d4c
movzx eax, byte [0x14054a96f]
cmp al, 0xc
je 0x1401d0d13
nop dword [rax]
movzx ecx, byte [0x14054ac90]
mov edx, ecx
xor dl, 0x97
mov eax, ecx
and al, 0x17
add al, al
add al, dl
add cl, 0xe2
lock cmpxchg byte [0x14054a96f], cl
je 0x1401d0dac
movzx ecx, byte [0x14054ac90]
add cl, 0xdf
cmp al, cl
jne 0x1401d0ce0
lea rax, [0x14054a960]
ret
test edx, edx
je 0x1401d0d7c
movzx eax, byte [0x14054a979]
cmp al, 0xed
je 0x1401d0d44
mov cl, 0x4e
nop dword [rax]
mov al, 0x5f
lock cmpxchg byte [0x14054a979], cl
je 0x1401d0e48
cmp al, 0xed
jne 0x1401d0d30
lea rax, [0x14054a970]
ret
movzx eax, byte [0x14054a886]
cmp al, 0x6c
je 0x1401d0d74
mov cl, 0x3d
nop dword [rax]
mov al, 0xff
lock cmpxchg byte [0x14054a886], cl
je 0x1401d0e0a
cmp al, 0x6c
jne 0x1401d0d60
lea rax, [0x14054a880]
ret
movzx eax, byte [0x14054a8b1]
cmp al, 0x33
je 0x1401d0da4
mov cl, 0xa4
nop dword [rax]
mov al, 0xf6
lock cmpxchg byte [0x14054a8b1], cl
je 0x1401d0e88
cmp al, 0x33
jne 0x1401d0d90
lea rax, [0x14054a8a0]
ret
xor r8d, r8d
lea rax, [0x14054a960]
lea rcx, [0x140469590]
mov edx, 0xeafc5327
nop word cs:[rax + rax]
movsxd r8, r8d
movzx r9d, byte [r8 + rcx]
xor byte [r8 + rax], r9b
mov r9d, r8d
xor r9d, 1
and r8d, 1
lea r8d, [r9 + r8*2]
mov r9d, dword [0x14054ac80]
add r9d, edx
cmp r8d, r9d
jl 0x1401d0dd0
mov al, 0xc
xchg byte [0x14054a96f], al
lea rax, [0x14054a960]
ret
xor eax, eax
lea rcx, [0x14054a880]
lea rdx, [0x1404694c0]
nop word [rax + rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 5
jg 0x1401d0e38
inc rax
jmp 0x1401d0e20
mov al, 0x6c
xchg byte [0x14054a886], al
lea rax, [0x14054a880]
ret
xor eax, eax
lea rcx, [0x14054a970]
lea rdx, [0x1404695a0]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 8
jg 0x1401d0e78
inc rax
jmp 0x1401d0e60
mov al, 0xed
xchg byte [0x14054a979], al
lea rax, [0x14054a970]
ret
xor edx, edx
lea rax, [0x14054a8a0]
lea rcx, [0x1404694e0]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, dword [0x14054ac80]
add edx, r8d
add edx, 0xeafc5319
add r8d, 0xeafc5329
cmp edx, r8d
jl 0x1401d0ea0
mov al, 0x33
xchg byte [0x14054a8b1], al
lea rax, [0x14054a8a0]
ret
Function at 0x1401d0ee0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x48
mov esi, r8d
test ecx, ecx
je 0x1401d0f39
movzx eax, byte [0x14054a897]
movzx ecx, byte [0x14054ac90]
add cl, 0x8e
cmp al, cl
je 0x1401d1040
mov cl, 0x9b
nop word cs:[rax + rax]
mov al, 0xf1
lock cmpxchg byte [0x14054a897], cl
je 0x1401d0fb9
cmp al, 0xbb
jne 0x1401d0f20
jmp 0x1401d1040
movzx eax, byte [0x14054a910]
cmp al, 0xeb
je 0x1401d0fad
movzx ecx, byte [0x14054ac90]
lea eax, [rcx + 0x1b]
add cl, 0x6d
lock cmpxchg byte [0x14054a910], cl
jne 0x1401d0f40
xor eax, eax
lea rbx, [0x14054a900]
lea r14, [0x140469540]
xor esi, 0x1eeb498d
lea rdi, [rsp + 0x40]
nop word cs:[rax + rax]
movsxd rcx, eax
movzx eax, byte [rcx + r14]
add byte [rcx + rbx], al
mov rdx, rdi
mov r8d, esi
mov r9d, 0xc5cff884
call fcn.1401d10d0
mov eax, dword [rsp + 0x40]
cmp eax, 0x10
jl 0x1401d0f80
mov al, 0xeb
xchg byte [0x14054a910], al
lea rax, [0x14054a900]
jmp 0x1401d1047
xor eax, eax
lea r12, [0x14054a890]
mov edi, esi
xor edi, 0x8b051812
mov ebp, 0x392db672
lea rbx, [rsp + 0x3f]
lea r13, [0x1404694d0]
xor esi, 0x19aa4025
lea r14, [rsp + 0x44]
nop word cs:[rax + rax]
movsxd r15, eax
lea rcx, [r12 + r15]
mov r9d, dword [0x14054ac80]
add r9d, ebp
mov rdx, rbx
mov r8d, edi
call fcn.140115440
movzx edx, byte [rsp + 0x3f]
xor dl, byte [r15 + r13]
mov dword [rsp + 0x20], esi
mov dword [rsp + 0x28], 0x92ccc9fd
mov rcx, r15
mov r8d, r15d
mov r9, r14
call fcn.1401d10a0
mov eax, dword [rsp + 0x44]
cmp eax, 7
jl 0x1401d0ff0
mov al, 0xbb
xchg byte [0x14054a897], al
lea rax, [0x14054a890]
add rsp, 0x48
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x1401d9d60
Capabilities:
Encode data using xor

Disassembly:
mov r8d, dword [rsp + 0x28]
test ecx, ecx
je 0x1401d9dac
mov eax, r8d
xor eax, 0x996d5a8
add eax, dword [0x14054b590]
cmp edx, eax
jne 0x1401d9de4
movzx eax, byte [0x14054b235]
cmp al, 0xa7
je 0x1401d9da4
mov cl, 0xe9
nop dword [rax + rax]
mov al, 0x82
lock cmpxchg byte [0x14054b235], cl
je 0x1401d9e72
cmp al, 0xa7
jne 0x1401d9d90
lea rax, [0x14054b230]
ret
movzx eax, byte [0x14054b2be]
cmp al, 0x9e
je 0x1401d9ddc
mov cl, 0x98
nop dword [rax]
mov al, 0x67
lock cmpxchg byte [0x14054b2be], cl
je 0x1401d9e28
mov edx, r8d
xor dl, 0xa4
add dl, byte [0x14054b594]
cmp al, dl
jne 0x1401d9dc0
lea rax, [0x14054b2b0]
ret
movzx eax, byte [0x14054b244]
cmp al, 0x67
je 0x1401d9e20
mov cl, 0x8c
nop word cs:[rax + rax]
mov al, 0x5c
lock cmpxchg byte [0x14054b244], cl
je 0x1401d9ea8
mov edx, r8d
xor dl, 0x6d
add dl, byte [0x14054b594]
cmp al, dl
jne 0x1401d9e00
lea rax, [0x14054b240]
ret
xor eax, eax
lea rcx, [0x14054b2b0]
lea rdx, [0x140469a20]
nop dword [rax + rax]
movzx r9d, byte [rax + rdx]
xor byte [rax + rcx], r9b
lea r9d, [rax + 1]
cmp r9d, 0xd
jg 0x1401d9e58
inc rax
jmp 0x1401d9e40
xor r8b, 0xa4
add r8b, byte [0x14054b594]
xchg byte [0x14054b2be], r8b
lea rax, [0x14054b2b0]
ret
xor eax, eax
lea rcx, [0x14054b230]
lea rdx, [0x1404699b0]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 4
jg 0x1401d9eef
inc rax
jmp 0x1401d9e90
xor edx, edx
lea rax, [0x14054b240]
lea rcx, [0x1404699c0]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 4
jl 0x1401d9ec0
mov al, 0x67
xchg byte [0x14054b244], al
lea rax, [0x14054b240]
ret
mov al, 0xa7
xchg byte [0x14054b235], al
lea rax, [0x14054b230]
ret