joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400044b0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x61], 0
mov r8, rcx
je 0x140004547
mov r9, 0xfffffffffffffffe
lea rax, [rcx + 2]
sub r9, rcx
nop dword [rax + rax]
lea edx, [r9 + rax]
lea ecx, [rdx + 0x1d]
xor byte [rax - 2], cl
lea rax, [rax + 0x10]
lea ecx, [rdx + 0x1e]
xor byte [rax - 0x11], cl
lea ecx, [rdx + 0x1f]
xor byte [rax - 0x10], cl
lea ecx, [rdx + 0x20]
xor byte [rax - 0xf], cl
lea ecx, [rdx + 0x21]
xor byte [rax - 0xe], cl
lea ecx, [rdx + 0x22]
xor byte [rax - 0xd], cl
lea ecx, [rdx + 0x23]
xor byte [rax - 0xc], cl
lea ecx, [rdx + 0x24]
xor byte [rax - 0xb], cl
lea ecx, [rdx + 0x25]
xor byte [rax - 0xa], cl
lea ecx, [rdx + 0x26]
xor byte [rax - 9], cl
lea ecx, [rdx + 0x27]
xor byte [rax - 8], cl
lea ecx, [rdx + 0x28]
xor byte [rax - 7], cl
lea ecx, [rdx + 0x29]
xor byte [rax - 6], cl
lea ecx, [rdx + 0x2a]
xor byte [rax - 5], cl
lea ecx, [rdx + 0x2b]
xor byte [rax - 4], cl
add dl, 0x2c
xor byte [rax - 3], dl
lea rcx, [rax + r9]
cmp rcx, 0x60
jb 0x1400044d0
mov byte [r8 + 0x61], 0
mov rax, r8
ret

Function at 0x140004570
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x44], 0
je 0x140004593
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1d]
xor byte [rcx + rax], dl
inc rax
cmp rax, 0x43
jb 0x140004580
mov byte [rcx + 0x44], 0
mov rax, rcx
ret

Function at 0x1400045a0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x56], 0
mov r8, rcx
je 0x14000463d
mov r9, 0xfffffffffffffffe
lea rax, [rcx + 2]
sub r9, rcx
nop dword [rax + rax]
lea edx, [r9 + rax]
lea ecx, [rdx + 0x1d]
xor byte [rax - 2], cl
lea rax, [rax + 0x11]
lea ecx, [rdx + 0x1e]
xor byte [rax - 0x12], cl
lea ecx, [rdx + 0x1f]
xor byte [rax - 0x11], cl
lea ecx, [rdx + 0x20]
xor byte [rax - 0x10], cl
lea ecx, [rdx + 0x21]
xor byte [rax - 0xf], cl
lea ecx, [rdx + 0x22]
xor byte [rax - 0xe], cl
lea ecx, [rdx + 0x23]
xor byte [rax - 0xd], cl
lea ecx, [rdx + 0x24]
xor byte [rax - 0xc], cl
lea ecx, [rdx + 0x25]
xor byte [rax - 0xb], cl
lea ecx, [rdx + 0x26]
xor byte [rax - 0xa], cl
lea ecx, [rdx + 0x27]
xor byte [rax - 9], cl
lea ecx, [rdx + 0x28]
xor byte [rax - 8], cl
lea ecx, [rdx + 0x29]
xor byte [rax - 7], cl
lea ecx, [rdx + 0x2a]
xor byte [rax - 6], cl
lea ecx, [rdx + 0x2b]
xor byte [rax - 5], cl
lea ecx, [rdx + 0x2c]
xor byte [rax - 4], cl
add dl, 0x2d
xor byte [rax - 3], dl
lea rcx, [rax + r9]
cmp rcx, 0x55
jb 0x1400045c0
mov byte [r8 + 0x56], 0
mov rax, r8
ret

Function at 0x140004a10
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x6c], 0
je 0x140004a33
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1d]
xor byte [rcx + rax], dl
inc rax
cmp rax, 0x6b
jb 0x140004a20
mov byte [rcx + 0x6c], 0
mov rax, rcx
ret
Function at 0x140004bd0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x59], 0
mov r8, rcx
je 0x140004c49
mov r9, 0xfffffffffffffffe
lea rax, [rcx + 2]
sub r9, rcx
nop word [rax + rax]
lea edx, [rax + r9]
lea ecx, [rdx + 0x1d]
xor byte [rax - 2], cl
lea rax, [rax + 0xb]
lea ecx, [rdx + 0x1e]
xor byte [rax - 0xc], cl
lea ecx, [rdx + 0x1f]
xor byte [rax - 0xb], cl
lea ecx, [rdx + 0x20]
xor byte [rax - 0xa], cl
lea ecx, [rdx + 0x21]
xor byte [rax - 9], cl
lea ecx, [rdx + 0x22]
xor byte [rax - 8], cl
lea ecx, [rdx + 0x23]
xor byte [rax - 7], cl
lea ecx, [rdx + 0x24]
xor byte [rax - 6], cl
lea ecx, [rdx + 0x25]
xor byte [rax - 5], cl
lea ecx, [rdx + 0x26]
xor byte [rax - 4], cl
add dl, 0x27
xor byte [rax - 3], dl
lea rcx, [r9 + rax]
cmp rcx, 0x58
jb 0x140004bf0
mov byte [r8 + 0x59], 0
mov rax, r8
ret

Function at 0x140004c50
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x66], 0
je 0x140004c73
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1d]
xor byte [rcx + rax], dl
inc rax
cmp rax, 0x65
jb 0x140004c60
mov byte [rcx + 0x66], 0
mov rax, rcx
ret

Function at 0x140004c80
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x5a], 0
je 0x140004ca3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1d]
xor byte [rcx + rax], dl
inc rax
cmp rax, 0x59
jb 0x140004c90
mov byte [rcx + 0x5a], 0
mov rax, rcx
ret

Function at 0x140004cb0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x6f], 0
mov r8, rcx
je 0x140004d29
mov r9, 0xfffffffffffffffe
lea rax, [rcx + 2]
sub r9, rcx
nop word [rax + rax]
lea edx, [rax + r9]
lea ecx, [rdx + 0x1d]
xor byte [rax - 2], cl
lea rax, [rax + 0xb]
lea ecx, [rdx + 0x1e]
xor byte [rax - 0xc], cl
lea ecx, [rdx + 0x1f]
xor byte [rax - 0xb], cl
lea ecx, [rdx + 0x20]
xor byte [rax - 0xa], cl
lea ecx, [rdx + 0x21]
xor byte [rax - 9], cl
lea ecx, [rdx + 0x22]
xor byte [rax - 8], cl
lea ecx, [rdx + 0x23]
xor byte [rax - 7], cl
lea ecx, [rdx + 0x24]
xor byte [rax - 6], cl
lea ecx, [rdx + 0x25]
xor byte [rax - 5], cl
lea ecx, [rdx + 0x26]
xor byte [rax - 4], cl
add dl, 0x27
xor byte [rax - 3], dl
lea rcx, [r9 + rax]
cmp rcx, 0x6e
jb 0x140004cd0
mov byte [r8 + 0x6f], 0
mov rax, r8
ret
Function at 0x140004d50
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x4d], 0
mov r8, rcx
je 0x140004dfd
mov r9, 0xfffffffffffffffe
lea rax, [rcx + 2]
sub r9, rcx
nop dword [rax + rax]
lea edx, [rax + r9]
lea ecx, [rdx + 0x1d]
xor byte [rax - 2], cl
lea rax, [rax + 0x13]
lea ecx, [rdx + 0x1e]
xor byte [rax - 0x14], cl
lea ecx, [rdx + 0x1f]
xor byte [rax - 0x13], cl
lea ecx, [rdx + 0x20]
xor byte [rax - 0x12], cl
lea ecx, [rdx + 0x21]
xor byte [rax - 0x11], cl
lea ecx, [rdx + 0x22]
xor byte [rax - 0x10], cl
lea ecx, [rdx + 0x23]
xor byte [rax - 0xf], cl
lea ecx, [rdx + 0x24]
xor byte [rax - 0xe], cl
lea ecx, [rdx + 0x25]
xor byte [rax - 0xd], cl
lea ecx, [rdx + 0x26]
xor byte [rax - 0xc], cl
lea ecx, [rdx + 0x27]
xor byte [rax - 0xb], cl
lea ecx, [rdx + 0x28]
xor byte [rax - 0xa], cl
lea ecx, [rdx + 0x29]
xor byte [rax - 9], cl
lea ecx, [rdx + 0x2a]
xor byte [rax - 8], cl
lea ecx, [rdx + 0x2b]
xor byte [rax - 7], cl
lea ecx, [rdx + 0x2c]
xor byte [rax - 6], cl
lea ecx, [rdx + 0x2d]
xor byte [rax - 5], cl
lea ecx, [rdx + 0x2e]
xor byte [rax - 4], cl
add dl, 0x2f
xor byte [rax - 3], dl
lea rcx, [r9 + rax]
cmp rcx, 0x4c
jb 0x140004d70
mov byte [r8 + 0x4d], 0
mov rax, r8
ret

Function at 0x140004e10
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x48], 0
je 0x140004e33
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1d]
xor byte [rcx + rax], dl
inc rax
cmp rax, 0x47
jb 0x140004e20
mov byte [rcx + 0x48], 0
mov rax, rcx
ret

Function at 0x140004f30
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x5c], 0
mov r8, rcx
je 0x140004fb5
mov r9, 0xfffffffffffffffe
lea rax, [rcx + 2]
sub r9, rcx
nop word [rax + rax]
lea edx, [rax + r9]
lea ecx, [rdx + 0x1d]
xor byte [rax - 2], cl
lea rax, [rax + 0xd]
lea ecx, [rdx + 0x1e]
xor byte [rax - 0xe], cl
lea ecx, [rdx + 0x1f]
xor byte [rax - 0xd], cl
lea ecx, [rdx + 0x20]
xor byte [rax - 0xc], cl
lea ecx, [rdx + 0x21]
xor byte [rax - 0xb], cl
lea ecx, [rdx + 0x22]
xor byte [rax - 0xa], cl
lea ecx, [rdx + 0x23]
xor byte [rax - 9], cl
lea ecx, [rdx + 0x24]
xor byte [rax - 8], cl
lea ecx, [rdx + 0x25]
xor byte [rax - 7], cl
lea ecx, [rdx + 0x26]
xor byte [rax - 6], cl
lea ecx, [rdx + 0x27]
xor byte [rax - 5], cl
lea ecx, [rdx + 0x28]
xor byte [rax - 4], cl
add dl, 0x29
xor byte [rax - 3], dl
lea rcx, [r9 + rax]
cmp rcx, 0x5b
jb 0x140004f50
mov byte [r8 + 0x5c], 0
mov rax, r8
ret

Function at 0x140004fc0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x74], 0
mov r8, rcx
je 0x140005015
mov r9, 0xfffffffffffffffe
lea rax, [rcx + 2]
sub r9, rcx
nop word [rax + rax]
lea edx, [rax + r9]
lea ecx, [rdx + 0x1d]
xor byte [rax - 2], cl
lea rax, [rax + 5]
lea ecx, [rdx + 0x1e]
xor byte [rax - 6], cl
lea ecx, [rdx + 0x1f]
xor byte [rax - 5], cl
lea ecx, [rdx + 0x20]
xor byte [rax - 4], cl
add dl, 0x21
xor byte [rax - 3], dl
lea rcx, [r9 + rax]
cmp rcx, 0x73
jb 0x140004fe0
mov byte [r8 + 0x74], 0
mov rax, r8
ret
Function at 0x140005020
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x5b], 0
mov r8, rcx
je 0x1400050c3
mov r9, 0xfffffffffffffffe
lea rax, [rcx + 2]
sub r9, rcx
nop dword [rax + rax]
lea edx, [r9 + rax]
lea ecx, [rdx + 0x1d]
xor byte [rax - 2], cl
lea rax, [rax + 0x12]
lea ecx, [rdx + 0x1e]
xor byte [rax - 0x13], cl
lea ecx, [rdx + 0x1f]
xor byte [rax - 0x12], cl
lea ecx, [rdx + 0x20]
xor byte [rax - 0x11], cl
lea ecx, [rdx + 0x21]
xor byte [rax - 0x10], cl
lea ecx, [rdx + 0x22]
xor byte [rax - 0xf], cl
lea ecx, [rdx + 0x23]
xor byte [rax - 0xe], cl
lea ecx, [rdx + 0x24]
xor byte [rax - 0xd], cl
lea ecx, [rdx + 0x25]
xor byte [rax - 0xc], cl
lea ecx, [rdx + 0x26]
xor byte [rax - 0xb], cl
lea ecx, [rdx + 0x27]
xor byte [rax - 0xa], cl
lea ecx, [rdx + 0x28]
xor byte [rax - 9], cl
lea ecx, [rdx + 0x29]
xor byte [rax - 8], cl
lea ecx, [rdx + 0x2a]
xor byte [rax - 7], cl
lea ecx, [rdx + 0x2b]
xor byte [rax - 6], cl
lea ecx, [rdx + 0x2c]
xor byte [rax - 5], cl
lea ecx, [rdx + 0x2d]
xor byte [rax - 4], cl
add dl, 0x2e
xor byte [rax - 3], dl
lea rcx, [rax + r9]
cmp rcx, 0x5a
jb 0x140005040
mov byte [r8 + 0x5b], 0
mov rax, r8
ret

Function at 0x140005110
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x71], 0
mov r8, rcx
je 0x1400051a7
mov r9, 0xfffffffffffffffe
lea rax, [rcx + 2]
sub r9, rcx
nop dword [rax + rax]
lea edx, [r9 + rax]
lea ecx, [rdx + 0x1d]
xor byte [rax - 2], cl
lea rax, [rax + 0x10]
lea ecx, [rdx + 0x1e]
xor byte [rax - 0x11], cl
lea ecx, [rdx + 0x1f]
xor byte [rax - 0x10], cl
lea ecx, [rdx + 0x20]
xor byte [rax - 0xf], cl
lea ecx, [rdx + 0x21]
xor byte [rax - 0xe], cl
lea ecx, [rdx + 0x22]
xor byte [rax - 0xd], cl
lea ecx, [rdx + 0x23]
xor byte [rax - 0xc], cl
lea ecx, [rdx + 0x24]
xor byte [rax - 0xb], cl
lea ecx, [rdx + 0x25]
xor byte [rax - 0xa], cl
lea ecx, [rdx + 0x26]
xor byte [rax - 9], cl
lea ecx, [rdx + 0x27]
xor byte [rax - 8], cl
lea ecx, [rdx + 0x28]
xor byte [rax - 7], cl
lea ecx, [rdx + 0x29]
xor byte [rax - 6], cl
lea ecx, [rdx + 0x2a]
xor byte [rax - 5], cl
lea ecx, [rdx + 0x2b]
xor byte [rax - 4], cl
add dl, 0x2c
xor byte [rax - 3], dl
lea rcx, [rax + r9]
cmp rcx, 0x70
jb 0x140005130
mov byte [r8 + 0x71], 0
mov rax, r8
ret

Function at 0x1400051b0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x72], 0
je 0x1400051d3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1d]
xor byte [rcx + rax], dl
inc rax
cmp rax, 0x71
jb 0x1400051c0
mov byte [rcx + 0x72], 0
mov rax, rcx
ret

Function at 0x140005220
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x7b], 0
mov r8, rcx
mov rax, rcx
je 0x140005265
mov r9, rcx
neg r9
nop dword [rax]
nop word [rax + rax]
lea edx, [rax + r9]
lea ecx, [rdx + 0x1d]
add dl, 0x1e
xor byte [rax], cl
xor byte [rax + 1], dl
lea rax, [rax + 2]
lea rcx, [r9 + rax]
cmp rcx, 0x7a
jb 0x140005240
mov byte [r8 + 0x7b], 0
mov rax, r8
ret
Function at 0x140005270
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x79], 0
mov r8, rcx
je 0x140005301
mov r9, 0xfffffffffffffffe
lea rax, [rcx + 2]
sub r9, rcx
nop dword [rax + rax]
lea edx, [r9 + rax]
lea ecx, [rdx + 0x1d]
xor byte [rax - 2], cl
lea rax, [rax + 0xf]
lea ecx, [rdx + 0x1e]
xor byte [rax - 0x10], cl
lea ecx, [rdx + 0x1f]
xor byte [rax - 0xf], cl
lea ecx, [rdx + 0x20]
xor byte [rax - 0xe], cl
lea ecx, [rdx + 0x21]
xor byte [rax - 0xd], cl
lea ecx, [rdx + 0x22]
xor byte [rax - 0xc], cl
lea ecx, [rdx + 0x23]
xor byte [rax - 0xb], cl
lea ecx, [rdx + 0x24]
xor byte [rax - 0xa], cl
lea ecx, [rdx + 0x25]
xor byte [rax - 9], cl
lea ecx, [rdx + 0x26]
xor byte [rax - 8], cl
lea ecx, [rdx + 0x27]
xor byte [rax - 7], cl
lea ecx, [rdx + 0x28]
xor byte [rax - 6], cl
lea ecx, [rdx + 0x29]
xor byte [rax - 5], cl
lea ecx, [rdx + 0x2a]
xor byte [rax - 4], cl
add dl, 0x2b
xor byte [rax - 3], dl
lea rcx, [rax + r9]
cmp rcx, 0x78
jb 0x140005290
mov byte [r8 + 0x79], 0
mov rax, r8
ret

Function at 0x140005310
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x49], 0
mov r8, rcx
je 0x1400053b3
mov r9, 0xfffffffffffffffe
lea rax, [rcx + 2]
sub r9, rcx
nop dword [rax + rax]
lea edx, [r9 + rax]
lea ecx, [rdx + 0x1d]
xor byte [rax - 2], cl
lea rax, [rax + 0x12]
lea ecx, [rdx + 0x1e]
xor byte [rax - 0x13], cl
lea ecx, [rdx + 0x1f]
xor byte [rax - 0x12], cl
lea ecx, [rdx + 0x20]
xor byte [rax - 0x11], cl
lea ecx, [rdx + 0x21]
xor byte [rax - 0x10], cl
lea ecx, [rdx + 0x22]
xor byte [rax - 0xf], cl
lea ecx, [rdx + 0x23]
xor byte [rax - 0xe], cl
lea ecx, [rdx + 0x24]
xor byte [rax - 0xd], cl
lea ecx, [rdx + 0x25]
xor byte [rax - 0xc], cl
lea ecx, [rdx + 0x26]
xor byte [rax - 0xb], cl
lea ecx, [rdx + 0x27]
xor byte [rax - 0xa], cl
lea ecx, [rdx + 0x28]
xor byte [rax - 9], cl
lea ecx, [rdx + 0x29]
xor byte [rax - 8], cl
lea ecx, [rdx + 0x2a]
xor byte [rax - 7], cl
lea ecx, [rdx + 0x2b]
xor byte [rax - 6], cl
lea ecx, [rdx + 0x2c]
xor byte [rax - 5], cl
lea ecx, [rdx + 0x2d]
xor byte [rax - 4], cl
add dl, 0x2e
xor byte [rax - 3], dl
lea rcx, [rax + r9]
cmp rcx, 0x48
jb 0x140005330
mov byte [r8 + 0x49], 0
mov rax, r8
ret

Function at 0x1400053c0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x4c], 0
mov r8, rcx
je 0x140005451
mov r9, 0xfffffffffffffffe
lea rax, [rcx + 2]
sub r9, rcx
nop dword [rax + rax]
lea edx, [r9 + rax]
lea ecx, [rdx + 0x1d]
xor byte [rax - 2], cl
lea rax, [rax + 0xf]
lea ecx, [rdx + 0x1e]
xor byte [rax - 0x10], cl
lea ecx, [rdx + 0x1f]
xor byte [rax - 0xf], cl
lea ecx, [rdx + 0x20]
xor byte [rax - 0xe], cl
lea ecx, [rdx + 0x21]
xor byte [rax - 0xd], cl
lea ecx, [rdx + 0x22]
xor byte [rax - 0xc], cl
lea ecx, [rdx + 0x23]
xor byte [rax - 0xb], cl
lea ecx, [rdx + 0x24]
xor byte [rax - 0xa], cl
lea ecx, [rdx + 0x25]
xor byte [rax - 9], cl
lea ecx, [rdx + 0x26]
xor byte [rax - 8], cl
lea ecx, [rdx + 0x27]
xor byte [rax - 7], cl
lea ecx, [rdx + 0x28]
xor byte [rax - 6], cl
lea ecx, [rdx + 0x29]
xor byte [rax - 5], cl
lea ecx, [rdx + 0x2a]
xor byte [rax - 4], cl
add dl, 0x2b
xor byte [rax - 3], dl
lea rcx, [rax + r9]
cmp rcx, 0x4b
jb 0x1400053e0
mov byte [r8 + 0x4c], 0
mov rax, r8
ret
Function at 0x140005460
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x4a], 0
je 0x140005483
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1d]
xor byte [rcx + rax], dl
inc rax
cmp rax, 0x49
jb 0x140005470
mov byte [rcx + 0x4a], 0
mov rax, rcx
ret

Function at 0x140005490
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x52], 0
mov r8, rcx
je 0x1400054fd
mov r9, 0xfffffffffffffffe
lea rax, [rcx + 2]
sub r9, rcx
nop word [rax + rax]
lea edx, [rax + r9]
lea ecx, [rdx + 0x1d]
xor byte [rax - 2], cl
lea rax, [rax + 9]
lea ecx, [rdx + 0x1e]
xor byte [rax - 0xa], cl
lea ecx, [rdx + 0x1f]
xor byte [rax - 9], cl
lea ecx, [rdx + 0x20]
xor byte [rax - 8], cl
lea ecx, [rdx + 0x21]
xor byte [rax - 7], cl
lea ecx, [rdx + 0x22]
xor byte [rax - 6], cl
lea ecx, [rdx + 0x23]
xor byte [rax - 5], cl
lea ecx, [rdx + 0x24]
xor byte [rax - 4], cl
add dl, 0x25
xor byte [rax - 3], dl
lea rcx, [r9 + rax]
cmp rcx, 0x51
jb 0x1400054b0
mov byte [r8 + 0x52], 0
mov rax, r8
ret

Function at 0x140005510
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x4f], 0
mov r8, rcx
je 0x140005595
mov r9, 0xfffffffffffffffe
lea rax, [rcx + 2]
sub r9, rcx
nop word [rax + rax]
lea edx, [rax + r9]
lea ecx, [rdx + 0x1d]
xor byte [rax - 2], cl
lea rax, [rax + 0xd]
lea ecx, [rdx + 0x1e]
xor byte [rax - 0xe], cl
lea ecx, [rdx + 0x1f]
xor byte [rax - 0xd], cl
lea ecx, [rdx + 0x20]
xor byte [rax - 0xc], cl
lea ecx, [rdx + 0x21]
xor byte [rax - 0xb], cl
lea ecx, [rdx + 0x22]
xor byte [rax - 0xa], cl
lea ecx, [rdx + 0x23]
xor byte [rax - 9], cl
lea ecx, [rdx + 0x24]
xor byte [rax - 8], cl
lea ecx, [rdx + 0x25]
xor byte [rax - 7], cl
lea ecx, [rdx + 0x26]
xor byte [rax - 6], cl
lea ecx, [rdx + 0x27]
xor byte [rax - 5], cl
lea ecx, [rdx + 0x28]
xor byte [rax - 4], cl
add dl, 0x29
xor byte [rax - 3], dl
lea rcx, [r9 + rax]
cmp rcx, 0x4e
jb 0x140005530
mov byte [r8 + 0x4f], 0
mov rax, r8
ret

Function at 0x1400055a0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x4e], 0
mov r8, rcx
je 0x140005619
mov r9, 0xfffffffffffffffe
lea rax, [rcx + 2]
sub r9, rcx
nop word [rax + rax]
lea edx, [rax + r9]
lea ecx, [rdx + 0x1d]
xor byte [rax - 2], cl
lea rax, [rax + 0xb]
lea ecx, [rdx + 0x1e]
xor byte [rax - 0xc], cl
lea ecx, [rdx + 0x1f]
xor byte [rax - 0xb], cl
lea ecx, [rdx + 0x20]
xor byte [rax - 0xa], cl
lea ecx, [rdx + 0x21]
xor byte [rax - 9], cl
lea ecx, [rdx + 0x22]
xor byte [rax - 8], cl
lea ecx, [rdx + 0x23]
xor byte [rax - 7], cl
lea ecx, [rdx + 0x24]
xor byte [rax - 6], cl
lea ecx, [rdx + 0x25]
xor byte [rax - 5], cl
lea ecx, [rdx + 0x26]
xor byte [rax - 4], cl
add dl, 0x27
xor byte [rax - 3], dl
lea rcx, [r9 + rax]
cmp rcx, 0x4d
jb 0x1400055c0
mov byte [r8 + 0x4e], 0
mov rax, r8
ret
Function at 0x140005620
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x47], 0
mov r8, rcx
je 0x1400056ab
mov r9, 0xfffffffffffffffe
lea rax, [rcx + 2]
sub r9, rcx
nop dword [rax + rax]
lea edx, [rax + r9]
lea ecx, [rdx + 0x1d]
xor byte [rax - 2], cl
lea rax, [rax + 0xe]
lea ecx, [rdx + 0x1e]
xor byte [rax - 0xf], cl
lea ecx, [rdx + 0x1f]
xor byte [rax - 0xe], cl
lea ecx, [rdx + 0x20]
xor byte [rax - 0xd], cl
lea ecx, [rdx + 0x21]
xor byte [rax - 0xc], cl
lea ecx, [rdx + 0x22]
xor byte [rax - 0xb], cl
lea ecx, [rdx + 0x23]
xor byte [rax - 0xa], cl
lea ecx, [rdx + 0x24]
xor byte [rax - 9], cl
lea ecx, [rdx + 0x25]
xor byte [rax - 8], cl
lea ecx, [rdx + 0x26]
xor byte [rax - 7], cl
lea ecx, [rdx + 0x27]
xor byte [rax - 6], cl
lea ecx, [rdx + 0x28]
xor byte [rax - 5], cl
lea ecx, [rdx + 0x29]
xor byte [rax - 4], cl
add dl, 0x2a
xor byte [rax - 3], dl
lea rcx, [r9 + rax]
cmp rcx, 0x46
jb 0x140005640
mov byte [r8 + 0x47], 0
mov rax, r8
ret

Function at 0x1400056b0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x55], 0
mov r8, rcx
je 0x14000573b
mov r9, 0xfffffffffffffffe
lea rax, [rcx + 2]
sub r9, rcx
nop dword [rax + rax]
lea edx, [rax + r9]
lea ecx, [rdx + 0x1d]
xor byte [rax - 2], cl
lea rax, [rax + 0xe]
lea ecx, [rdx + 0x1e]
xor byte [rax - 0xf], cl
lea ecx, [rdx + 0x1f]
xor byte [rax - 0xe], cl
lea ecx, [rdx + 0x20]
xor byte [rax - 0xd], cl
lea ecx, [rdx + 0x21]
xor byte [rax - 0xc], cl
lea ecx, [rdx + 0x22]
xor byte [rax - 0xb], cl
lea ecx, [rdx + 0x23]
xor byte [rax - 0xa], cl
lea ecx, [rdx + 0x24]
xor byte [rax - 9], cl
lea ecx, [rdx + 0x25]
xor byte [rax - 8], cl
lea ecx, [rdx + 0x26]
xor byte [rax - 7], cl
lea ecx, [rdx + 0x27]
xor byte [rax - 6], cl
lea ecx, [rdx + 0x28]
xor byte [rax - 5], cl
lea ecx, [rdx + 0x29]
xor byte [rax - 4], cl
add dl, 0x2a
xor byte [rax - 3], dl
lea rcx, [r9 + rax]
cmp rcx, 0x54
jb 0x1400056d0
mov byte [r8 + 0x55], 0
mov rax, r8
ret

Function at 0x140005760
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x69], 0
mov r8, rcx
je 0x1400057e5
mov r9, 0xfffffffffffffffe
lea rax, [rcx + 2]
sub r9, rcx
nop word [rax + rax]
lea edx, [rax + r9]
lea ecx, [rdx + 0x1d]
xor byte [rax - 2], cl
lea rax, [rax + 0xd]
lea ecx, [rdx + 0x1e]
xor byte [rax - 0xe], cl
lea ecx, [rdx + 0x1f]
xor byte [rax - 0xd], cl
lea ecx, [rdx + 0x20]
xor byte [rax - 0xc], cl
lea ecx, [rdx + 0x21]
xor byte [rax - 0xb], cl
lea ecx, [rdx + 0x22]
xor byte [rax - 0xa], cl
lea ecx, [rdx + 0x23]
xor byte [rax - 9], cl
lea ecx, [rdx + 0x24]
xor byte [rax - 8], cl
lea ecx, [rdx + 0x25]
xor byte [rax - 7], cl
lea ecx, [rdx + 0x26]
xor byte [rax - 6], cl
lea ecx, [rdx + 0x27]
xor byte [rax - 5], cl
lea ecx, [rdx + 0x28]
xor byte [rax - 4], cl
add dl, 0x29
xor byte [rax - 3], dl
lea rcx, [r9 + rax]
cmp rcx, 0x68
jb 0x140005780
mov byte [r8 + 0x69], 0
mov rax, r8
ret
Function at 0x140005810
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x45], 0
mov r8, rcx
je 0x1400058ad
mov r9, 0xfffffffffffffffe
lea rax, [rcx + 2]
sub r9, rcx
nop dword [rax + rax]
lea edx, [r9 + rax]
lea ecx, [rdx + 0x1d]
xor byte [rax - 2], cl
lea rax, [rax + 0x11]
lea ecx, [rdx + 0x1e]
xor byte [rax - 0x12], cl
lea ecx, [rdx + 0x1f]
xor byte [rax - 0x11], cl
lea ecx, [rdx + 0x20]
xor byte [rax - 0x10], cl
lea ecx, [rdx + 0x21]
xor byte [rax - 0xf], cl
lea ecx, [rdx + 0x22]
xor byte [rax - 0xe], cl
lea ecx, [rdx + 0x23]
xor byte [rax - 0xd], cl
lea ecx, [rdx + 0x24]
xor byte [rax - 0xc], cl
lea ecx, [rdx + 0x25]
xor byte [rax - 0xb], cl
lea ecx, [rdx + 0x26]
xor byte [rax - 0xa], cl
lea ecx, [rdx + 0x27]
xor byte [rax - 9], cl
lea ecx, [rdx + 0x28]
xor byte [rax - 8], cl
lea ecx, [rdx + 0x29]
xor byte [rax - 7], cl
lea ecx, [rdx + 0x2a]
xor byte [rax - 6], cl
lea ecx, [rdx + 0x2b]
xor byte [rax - 5], cl
lea ecx, [rdx + 0x2c]
xor byte [rax - 4], cl
add dl, 0x2d
xor byte [rax - 3], dl
lea rcx, [rax + r9]
cmp rcx, 0x44
jb 0x140005830
mov byte [r8 + 0x45], 0
mov rax, r8
ret

Function at 0x1400058c0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x54], 0
je 0x1400058e3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1d]
xor byte [rcx + rax], dl
inc rax
cmp rax, 0x53
jb 0x1400058d0
mov byte [rcx + 0x54], 0
mov rax, rcx
ret
Function at 0x140005e50
Capabilities:
Parse pe header

Disassembly:
cmp byte [rcx + 0x42], 0
je 0x140005f61
xor byte [rcx], 0x1d
xor byte [rcx + 1], 0x1e
xor byte [rcx + 2], 0x1f
xor byte [rcx + 3], 0x20
xor byte [rcx + 4], 0x21
xor byte [rcx + 5], 0x22
xor byte [rcx + 6], 0x23
xor byte [rcx + 7], 0x24
xor byte [rcx + 8], 0x25
xor byte [rcx + 9], 0x26
xor byte [rcx + 0xa], 0x27
xor byte [rcx + 0xb], 0x28
xor byte [rcx + 0xc], 0x29
xor byte [rcx + 0xd], 0x2a
xor byte [rcx + 0xe], 0x2b
xor byte [rcx + 0xf], 0x2c
xor byte [rcx + 0x10], 0x2d
xor byte [rcx + 0x11], 0x2e
xor byte [rcx + 0x12], 0x2f
xor byte [rcx + 0x13], 0x30
xor byte [rcx + 0x14], 0x31
xor byte [rcx + 0x15], 0x32
xor byte [rcx + 0x16], 0x33
xor byte [rcx + 0x17], 0x34
xor byte [rcx + 0x18], 0x35
xor byte [rcx + 0x19], 0x36
xor byte [rcx + 0x1a], 0x37
xor byte [rcx + 0x1b], 0x38
xor byte [rcx + 0x1c], 0x39
xor byte [rcx + 0x1d], 0x3a
xor byte [rcx + 0x1e], 0x3b
xor byte [rcx + 0x1f], 0x3c
xor byte [rcx + 0x20], 0x3d
xor byte [rcx + 0x21], 0x3e
xor byte [rcx + 0x22], 0x3f
xor byte [rcx + 0x23], 0x40
xor byte [rcx + 0x24], 0x41
xor byte [rcx + 0x25], 0x42
xor byte [rcx + 0x26], 0x43
xor byte [rcx + 0x27], 0x44
xor byte [rcx + 0x28], 0x45
xor byte [rcx + 0x29], 0x46
xor byte [rcx + 0x2a], 0x47
xor byte [rcx + 0x2b], 0x48
xor byte [rcx + 0x2c], 0x49
xor byte [rcx + 0x2d], 0x4a
xor byte [rcx + 0x2e], 0x4b
xor byte [rcx + 0x2f], 0x4c
xor byte [rcx + 0x30], 0x4d
xor byte [rcx + 0x31], 0x4e
xor byte [rcx + 0x32], 0x4f
xor byte [rcx + 0x33], 0x50
xor byte [rcx + 0x34], 0x51
xor byte [rcx + 0x35], 0x52
xor byte [rcx + 0x36], 0x53
xor byte [rcx + 0x37], 0x54
xor byte [rcx + 0x38], 0x55
xor byte [rcx + 0x39], 0x56
xor byte [rcx + 0x3a], 0x57
xor byte [rcx + 0x3b], 0x58
xor byte [rcx + 0x3c], 0x59
xor byte [rcx + 0x3d], 0x5a
xor byte [rcx + 0x3e], 0x5b
xor byte [rcx + 0x3f], 0x5c
xor byte [rcx + 0x40], 0x5d
mov byte [rcx + 0x42], 0
ret