joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140d96268
Capabilities:
Decompress data using aplib

Disassembly:
call fcn.140d963ef
push r10
mov r10, rsp
push r10
mov rsi, qword [r10 + 0x10]
mov rdi, qword [r10 + 0x20]
cld
mov dl, 0x80
mov al, byte [rsi]
inc rsi
mov byte [rdi], al
inc rdi
mov ebx, 2
add dl, dl
jne 0x140d96299
mov dl, byte [rsi]
inc rsi
adc dl, dl
jae 0x140d9627f
add dl, dl
jne 0x140d962a6
mov dl, byte [rsi]
inc rsi
adc dl, dl
jae 0x140d96306
xor eax, eax
add dl, dl
jne 0x140d962b5
mov dl, byte [rsi]
inc rsi
adc dl, dl
jae 0x140d963bd
add dl, dl
jne 0x140d962c6
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc eax, eax
add dl, dl
jne 0x140d962d3
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc eax, eax
add dl, dl
jne 0x140d962e0
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc eax, eax
add dl, dl
jne 0x140d962ed
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc eax, eax
je 0x140d962fa
push rdi
mov eax, eax
sub rdi, rax
mov al, byte [rdi]
pop rdi
mov byte [rdi], al
inc rdi
mov ebx, 2
jmp 0x140d9628e
mov eax, 1
add dl, dl
jne 0x140d96316
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc eax, eax
add dl, dl
jne 0x140d96323
mov dl, byte [rsi]
inc rsi
adc dl, dl
jb 0x140d9630b
sub eax, ebx
mov ebx, 1
jne 0x140d9635c
mov ecx, 1
add dl, dl
jne 0x140d9633e
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc ecx, ecx
add dl, dl
jne 0x140d9634b
mov dl, byte [rsi]
inc rsi
adc dl, dl
jb 0x140d96333
push rsi
mov rsi, rdi
sub rsi, rbp
rep movsb byte [rdi], byte [rsi]
pop rsi
jmp 0x140d9628e
dec eax
shl eax, 8
mov al, byte [rsi]
inc rsi
mov ebp, eax
mov ecx, 1
add dl, dl
jne 0x140d96378
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc ecx, ecx
add dl, dl
jne 0x140d96385
mov dl, byte [rsi]
inc rsi
adc dl, dl
jb 0x140d9636d
cmp eax, 0x7d00
jae 0x140d963ab
cmp eax, 0x500
jb 0x140d963a6
inc ecx
push rsi
mov rsi, rdi
sub rsi, rax
rep movsb byte [rdi], byte [rsi]
pop rsi
jmp 0x140d9628e
cmp eax, 0x7f
ja 0x140d963ae
add ecx, 2
push rsi
mov rsi, rdi
sub rsi, rax
rep movsb byte [rdi], byte [rsi]
pop rsi
jmp 0x140d9628e
mov al, byte [rsi]
inc rsi
xor ecx, ecx
shr al, 1
je 0x140d963e2
adc ecx, 2
mov ebp, eax
push rsi
mov rsi, rdi
sub rsi, rax
rep movsb byte [rdi], byte [rsi]
pop rsi
mov ebx, 1
jmp 0x140d9628e
pop r10
sub rdi, qword [r10 + 0x20]
mov eax, edi
pop r10
ret 0x20