joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14001a9c0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x77], 0
je 0x14001a9e3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x76
jb 0x14001a9d0
mov byte [rcx + 0x77], 0
ret

Function at 0x14001a9f0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xb4], 0
je 0x14001aa18
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xb3
jb 0x14001aa00
mov byte [rcx + 0xb4], 0
ret

Function at 0x14001aa20
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xbc], 0
je 0x14001aa48
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xbb
jb 0x14001aa30
mov byte [rcx + 0xbc], 0
ret

Function at 0x14001aa50
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xd3], 0
je 0x14001aa78
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xd2
jb 0x14001aa60
mov byte [rcx + 0xd3], 0
ret

Function at 0x14001aa80
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xae], 0
je 0x14001aaa8
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xad
jb 0x14001aa90
mov byte [rcx + 0xae], 0
ret

Function at 0x14001aab0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x33], 0
je 0x14001aad3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x32
jb 0x14001aac0
mov byte [rcx + 0x33], 0
ret

Function at 0x14001aae0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x31], 0
je 0x14001ab03
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x30
jb 0x14001aaf0
mov byte [rcx + 0x31], 0
ret

Function at 0x14001ab10
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x49], 0
je 0x14001ab33
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x48
jb 0x14001ab20
mov byte [rcx + 0x49], 0
ret

Function at 0x14001ab40
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x8c], 0
je 0x14001ab68
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x8b
jb 0x14001ab50
mov byte [rcx + 0x8c], 0
ret

Function at 0x14001ab70
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x7b], 0
je 0x14001ab93
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x7a
jb 0x14001ab80
mov byte [rcx + 0x7b], 0
ret

Function at 0x14001aba0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x66], 0
je 0x14001abc3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x65
jb 0x14001abb0
mov byte [rcx + 0x66], 0
ret

Function at 0x14001abd0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x60], 0
je 0x14001abf3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x5f
jb 0x14001abe0
mov byte [rcx + 0x60], 0
ret
Function at 0x14001ac00
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x4c], 0
je 0x14001ac23
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x4b
jb 0x14001ac10
mov byte [rcx + 0x4c], 0
ret

Function at 0x14001ac30
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x6b], 0
je 0x14001ac53
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x6a
jb 0x14001ac40
mov byte [rcx + 0x6b], 0
ret

Function at 0x14001ac60
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x78], 0
je 0x14001ac83
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x77
jb 0x14001ac70
mov byte [rcx + 0x78], 0
ret

Function at 0x14001ac90
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xaf], 0
je 0x14001acb8
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xae
jb 0x14001aca0
mov byte [rcx + 0xaf], 0
ret

Function at 0x14001acc0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xb0], 0
je 0x14001ace8
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xaf
jb 0x14001acd0
mov byte [rcx + 0xb0], 0
ret

Function at 0x14001acf0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x3c], 0
je 0x14001ad13
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x3b
jb 0x14001ad00
mov byte [rcx + 0x3c], 0
ret

Function at 0x14001ad20
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x70], 0
je 0x14001ad43
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x6f
jb 0x14001ad30
mov byte [rcx + 0x70], 0
ret

Function at 0x14001ad50
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x90], 0
je 0x14001ad78
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x8f
jb 0x14001ad60
mov byte [rcx + 0x90], 0
ret

Function at 0x14001ad80
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x8f], 0
je 0x14001ada8
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x8e
jb 0x14001ad90
mov byte [rcx + 0x8f], 0
ret

Function at 0x14001adb0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x5c], 0
je 0x14001add3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x5b
jb 0x14001adc0
mov byte [rcx + 0x5c], 0
ret

Function at 0x14001ade0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x8b], 0
je 0x14001ae08
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x8a
jb 0x14001adf0
mov byte [rcx + 0x8b], 0
ret

Function at 0x14001ae10
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x51], 0
je 0x14001ae33
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x50
jb 0x14001ae20
mov byte [rcx + 0x51], 0
ret
Function at 0x14001ae40
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x88], 0
je 0x14001ae68
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x87
jb 0x14001ae50
mov byte [rcx + 0x88], 0
ret

Function at 0x14001ae70
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x92], 0
je 0x14001ae98
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x91
jb 0x14001ae80
mov byte [rcx + 0x92], 0
ret

Function at 0x14001aea0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x59], 0
je 0x14001aec3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x58
jb 0x14001aeb0
mov byte [rcx + 0x59], 0
ret

Function at 0x14001aed0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x53], 0
je 0x14001aef3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x52
jb 0x14001aee0
mov byte [rcx + 0x53], 0
ret

Function at 0x14001af00
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x5e], 0
je 0x14001af23
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x5d
jb 0x14001af10
mov byte [rcx + 0x5e], 0
ret

Function at 0x14001af30
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x57], 0
je 0x14001af53
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x56
jb 0x14001af40
mov byte [rcx + 0x57], 0
ret

Function at 0x14001af60
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x36], 0
je 0x14001af83
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x35
jb 0x14001af70
mov byte [rcx + 0x36], 0
ret

Function at 0x14001af90
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x2a], 0
je 0x14001afb3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x29
jb 0x14001afa0
mov byte [rcx + 0x2a], 0
ret

Function at 0x14001afc0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x35], 0
je 0x14001afe3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x34
jb 0x14001afd0
mov byte [rcx + 0x35], 0
ret

Function at 0x14001aff0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x32], 0
je 0x14001b013
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x31
jb 0x14001b000
mov byte [rcx + 0x32], 0
ret

Function at 0x14001b020
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x3b], 0
je 0x14001b043
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x3a
jb 0x14001b030
mov byte [rcx + 0x3b], 0
ret

Function at 0x14001b050
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xa2], 0
je 0x14001b078
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xa1
jb 0x14001b060
mov byte [rcx + 0xa2], 0
ret
Function at 0x14001b080
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x29], 0
je 0x14001b0a3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x28
jb 0x14001b090
mov byte [rcx + 0x29], 0
ret

Function at 0x14001b0b0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x64], 0
je 0x14001b0d3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x63
jb 0x14001b0c0
mov byte [rcx + 0x64], 0
ret

Function at 0x14001b0e0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x75], 0
je 0x14001b103
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x74
jb 0x14001b0f0
mov byte [rcx + 0x75], 0
ret

Function at 0x14001b110
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x69], 0
je 0x14001b133
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x68
jb 0x14001b120
mov byte [rcx + 0x69], 0
ret

Function at 0x14001b140
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x6f], 0
je 0x14001b163
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x6e
jb 0x14001b150
mov byte [rcx + 0x6f], 0
ret

Function at 0x14001b170
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x68], 0
je 0x14001b193
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x67
jb 0x14001b180
mov byte [rcx + 0x68], 0
ret

Function at 0x14001b1a0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x62], 0
je 0x14001b1c3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x61
jb 0x14001b1b0
mov byte [rcx + 0x62], 0
ret

Function at 0x14001b1d0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x9d], 0
je 0x14001b1f8
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x9c
jb 0x14001b1e0
mov byte [rcx + 0x9d], 0
ret

Function at 0x14001b200
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xa6], 0
je 0x14001b228
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xa5
jb 0x14001b210
mov byte [rcx + 0xa6], 0
ret

Function at 0x14001b230
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x63], 0
je 0x14001b253
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x62
jb 0x14001b240
mov byte [rcx + 0x63], 0
ret

Function at 0x14001b260
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x6d], 0
je 0x14001b283
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x6c
jb 0x14001b270
mov byte [rcx + 0x6d], 0
ret

Function at 0x14001b290
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x72], 0
je 0x14001b2b3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x71
jb 0x14001b2a0
mov byte [rcx + 0x72], 0
ret
Function at 0x14001b2c0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xa9], 0
je 0x14001b2e8
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xa8
jb 0x14001b2d0
mov byte [rcx + 0xa9], 0
ret

Function at 0x14001b2f0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xb3], 0
je 0x14001b318
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xb2
jb 0x14001b300
mov byte [rcx + 0xb3], 0
ret

Function at 0x14001b320
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x81], 0
je 0x14001b348
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x80
jb 0x14001b330
mov byte [rcx + 0x81], 0
ret

Function at 0x14001b350
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x82], 0
je 0x14001b378
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x81
jb 0x14001b360
mov byte [rcx + 0x82], 0
ret

Function at 0x14001b380
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x84], 0
je 0x14001b3a8
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x83
jb 0x14001b390
mov byte [rcx + 0x84], 0
ret

Function at 0x14001b3b0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xad], 0
je 0x14001b3d8
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xac
jb 0x14001b3c0
mov byte [rcx + 0xad], 0
ret

Function at 0x14001b3e0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x91], 0
je 0x14001b408
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x90
jb 0x14001b3f0
mov byte [rcx + 0x91], 0
ret

Function at 0x14001b410
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x93], 0
je 0x14001b438
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x92
jb 0x14001b420
mov byte [rcx + 0x93], 0
ret

Function at 0x14001b440
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x71], 0
je 0x14001b463
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x70
jb 0x14001b450
mov byte [rcx + 0x71], 0
ret

Function at 0x14001b470
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x54], 0
je 0x14001b493
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x53
jb 0x14001b480
mov byte [rcx + 0x54], 0
ret

Function at 0x14001b4a0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x52], 0
je 0x14001b4c3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x51
jb 0x14001b4b0
mov byte [rcx + 0x52], 0
ret

Function at 0x14001b4d0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x6e], 0
je 0x14001b4f3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x6d
jb 0x14001b4e0
mov byte [rcx + 0x6e], 0
ret
Function at 0x14001b500
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x5a], 0
je 0x14001b523
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x59
jb 0x14001b510
mov byte [rcx + 0x5a], 0
ret

Function at 0x14001b530
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x8d], 0
je 0x14001b558
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x8c
jb 0x14001b540
mov byte [rcx + 0x8d], 0
ret

Function at 0x14001b560
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x7f], 0
je 0x14001b583
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x7e
jb 0x14001b570
mov byte [rcx + 0x7f], 0
ret

Function at 0x14001b590
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x79], 0
je 0x14001b5b3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x78
jb 0x14001b5a0
mov byte [rcx + 0x79], 0
ret

Function at 0x14001b5c0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xab], 0
je 0x14001b5e8
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xaa
jb 0x14001b5d0
mov byte [rcx + 0xab], 0
ret

Function at 0x14001b5f0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x42], 0
je 0x14001b613
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x41
jb 0x14001b600
mov byte [rcx + 0x42], 0
ret

Function at 0x14001b620
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xd7], 0
je 0x14001b648
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xd6
jb 0x14001b630
mov byte [rcx + 0xd7], 0
ret

Function at 0x14001b650
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x48], 0
je 0x14001b673
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x5e]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x47
jb 0x14001b660
mov byte [rcx + 0x48], 0
ret
Function at 0x1400555a0
Capabilities:
Encode data using base64

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r12
sub rsp, 0x50
mov r12, r9
mov rsi, r8
mov rbx, rdx
mov rdi, rcx
test r8, r8
jne 0x1400555cd
xor al, al
jmp 0x14005572f
mov rax, qword [0x1400756b0]
lea rcx, [rsp]
xor r11d, r11d
mov qword [rcx], rax
mov rax, qword [0x1400756b8]
mov qword [rsp + 0x60], rbp
mov qword [rcx + 8], rax
mov rax, qword [0x1400756c0]
mov rdx, r11
mov qword [rcx + 0x10], rax
mov rax, qword [0x1400756c8]
mov qword [rcx + 0x18], rax
mov rax, qword [0x1400756d0]
mov qword [rcx + 0x20], rax
mov rax, qword [0x1400756d8]
mov qword [rcx + 0x28], rax
mov rax, qword [0x1400756e0]
mov qword [rcx + 0x30], rax
mov rax, qword [0x1400756e8]
mov qword [rcx + 0x38], rax
movzx eax, byte [0x1400756f0]
mov byte [rcx + 0x40], al
mov rax, qword [r9]
mov rcx, r8
lea rbp, [r8 + rax]
test rbx, rbx
je 0x140055721
add r8, 4
nop word [rax + rax]
movzx r9d, byte [rdx + rdi]
inc rdx
shl r9d, 0x10
cmp rdx, rbx
jne 0x140055679
mov r11d, 2
jmp 0x14005569d
movzx eax, byte [rdx + rdi]
inc rdx
shl eax, 8
or r9d, eax
cmp rdx, rbx
jne 0x140055693
mov r11d, 1
jmp 0x14005569d
movzx eax, byte [rdx + rdi]
or r9d, eax
inc rdx
mov r10d, r9d
and r9d, 0x3f
cmp r8, rbp
ja 0x140055745
mov rax, r10
shr rax, 0x12
and eax, 0x3f
movzx eax, byte [rsp + rax]
mov byte [rcx], al
mov rax, r10
shr rax, 0xc
and eax, 0x3f
movzx eax, byte [rsp + rax]
mov byte [rcx + 1], al
cmp r11, 1
jbe 0x1400556e2
mov byte [rcx + 2], 0x3d
add rcx, 3
add r8, 3
jmp 0x1400556fa
shr r10, 6
add rcx, 3
and r10d, 0x3f
add r8, 3
movzx eax, byte [rsp + r10]
mov byte [rcx - 1], al
test r11, r11
je 0x14005570a
mov byte [rcx], 0x3d
inc rcx
inc r8
jmp 0x140055718
movzx eax, byte [rsp + r9]
inc rcx
inc r8
mov byte [rcx - 1], al
cmp rdx, rbx
jb 0x140055660
sub rcx, rsi
mov al, 1
mov qword [r12], rcx
mov rbp, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x78]
add rsp, 0x50
pop r12
ret
xor al, al
jmp 0x14005572a
Function at 0x180001fd0
Capabilities:
Acquire debug privileges

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x40
xor ebx, ebx
mov rsi, r8
cmp qword [0x18003b0a0], rbx
je 0x18000207d
mov edx, 0x1ce
lea rcx, [rsp + 0x20]
call fcn.1800087ec
cmp qword [rax + 0x18], 0x10
jb 0x18000200a
mov rax, qword [rax]
mov rcx, qword [0x18003b0a0]
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdx, qword [rsp + 0x38]
mov rdi, rax
cmp rdx, 0x10
jb 0x180002056
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002051
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000208f
call fcn.180010240
movdqa xmm0, xmmword [0x180030f00]
mov byte [rsp + 0x20], bl
movdqu xmmword [rsp + 0x30], xmm0
test rdi, rdi
je 0x18000207d
mov r8, rsi
lea rdx, str.SeDebugPrivilege
xor ecx, ecx
call rdi
mov ebx, eax
mov rsi, qword [rsp + 0x58]
mov eax, ebx
mov rbx, qword [rsp + 0x50]
add rsp, 0x40
pop rdi
ret
call fcn.180016b64
int3

Function at 0x180003188
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
mov eax, dword [rcx]
mov rdi, rcx
mov r10d, 4
xor ebx, ebx
xor r9d, r9d
test eax, eax
jle 0x1800031c2
mov r11, r8
mov al, byte [r11]
inc ebx
mov rcx, qword [rdx]
lea r11, [r11 + 4]
xor byte [rcx + r9], al
inc r9
mov eax, dword [rdi]
cmp ebx, eax
jl 0x1800031a9
add rdx, 8
inc r8
sub r10, 1
jne 0x18000319d
mov rbx, qword [rsp + 8]
mov rdi, qword [rsp + 0x10]
ret