joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140074d50
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x100], 0
mov rax, rcx
je 0x140074d9e
xor r10d, r10d
nop
mov r9d, r10d
lea r8d, [r10 + 0x10]
xor r8b, byte [rax + r10]
and r9d, 7
movzx edx, r8b
mov ecx, 8
sub ecx, r9d
shl dl, cl
movzx ecx, r9b
shr r8b, cl
or dl, r8b
mov byte [rax + r10], dl
inc r10
cmp r10, 0xff
jb 0x140074d60
mov byte [rax + 0x100], 0
ret

Function at 0x140074dc0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x1e], 0
mov rax, rcx
je 0x140074e08
xor r10d, r10d
nop dword [rax]
mov r9d, r10d
lea r8d, [r10 + 0x10]
xor r8b, byte [rax + r10]
and r9d, 7
movzx edx, r8b
mov ecx, 8
sub ecx, r9d
shl dl, cl
movzx ecx, r9b
shr r8b, cl
or dl, r8b
mov byte [rax + r10], dl
inc r10
cmp r10, 0x1d
jb 0x140074dd0
mov byte [rax + 0x1e], 0
ret

Function at 0x140074f10
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 8
cmp byte [rcx + 0x1d], 0
mov rax, rcx
je 0x14007508f
mov qword [rsp], rbx
lea r11, [rcx + 2]
mov rbx, 0xfffffffffffffffe
sub rbx, rcx
nop dword [rax]
nop word [rax + rax]
lea r10, [rbx + r11]
mov ecx, 8
lea r8d, [r10 + 0x10]
mov r9d, r10d
xor r8b, byte [r11 - 2]
and r9d, 7
sub ecx, r9d
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
lea r9d, [r10 + 1]
or dl, r8b
and r9d, 7
mov byte [r11 - 2], dl
lea r8d, [r10 + 0x11]
xor r8b, byte [r11 - 1]
mov ecx, 8
sub ecx, r9d
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
lea r9d, [r10 + 2]
or dl, r8b
and r9d, 7
mov byte [r11 - 1], dl
lea r8d, [r10 + 0x12]
xor r8b, byte [r11]
mov ecx, 8
sub ecx, r9d
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
lea r9d, [r10 + 3]
or dl, r8b
and r9d, 7
mov byte [r11], dl
lea r8d, [r10 + 0x13]
xor r8b, byte [r11 + 1]
mov ecx, 8
sub ecx, r9d
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
lea r9d, [r10 - 4]
or dl, r8b
and r9d, 7
mov byte [r11 + 1], dl
lea r8d, [r10 + 0x14]
xor r8b, byte [r11 + 2]
mov ecx, 8
sub ecx, r9d
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
lea r9d, [r10 - 3]
or dl, r8b
and r9d, 7
mov byte [r11 + 2], dl
lea r8d, [r10 + 0x15]
xor r8b, byte [r11 + 3]
mov ecx, 8
sub ecx, r9d
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
mov ecx, 8
or dl, r8b
lea r8d, [r10 - 2]
add r10b, 0x16
mov byte [r11 + 3], dl
xor r10b, byte [r11 + 4]
and r8d, 7
movzx edx, r10b
sub ecx, r8d
shl dl, cl
movzx ecx, r8b
lea r11, [r11 + 7]
shr r10b, cl
lea rcx, [rbx + r11]
or dl, r10b
mov byte [r11 - 3], dl
cmp rcx, 0x1c
jb 0x140074f40
mov rbx, qword [rsp]
mov byte [rax + 0x1d], 0
add rsp, 8
ret

Function at 0x1400750a0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x100], 0
mov r10, rcx
je 0x1400750ee
xor eax, eax
nop
mov r9d, eax
lea r8d, [rax + 0x10]
xor r8b, byte [r10 + rax]
and r9d, 7
movzx edx, r8b
mov ecx, 8
sub ecx, r9d
shl dl, cl
movzx ecx, r9b
shr r8b, cl
or dl, r8b
mov byte [r10 + rax], dl
inc rax
cmp rax, 0xff
jb 0x1400750b0
mov byte [r10 + 0x100], 0
ret
Function at 0x1400750f0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 8
cmp byte [rcx + 0x3d], 0
mov rax, rcx
je 0x14007533b
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov rsi, 0xfffffffffffffffe
mov qword [rsp], rdi
sub rsi, rcx
lea rdi, [rcx + 2]
nop dword [rax]
lea rbx, [rsi + rdi]
mov r10d, 8
lea r8d, [rbx + 0x10]
mov r11d, ebx
xor r8b, byte [rdi - 2]
lea r9d, [rbx + 1]
movzx edx, r8b
and r9d, 7
and r11d, 7
sub r10d, r11d
mov ecx, r10d
shl dl, cl
movzx ecx, r11b
shr r8b, cl
mov ecx, 8
or dl, r8b
sub ecx, r9d
mov byte [rdi - 2], dl
lea r8d, [rbx + 0x11]
xor r8b, byte [rdi - 1]
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
lea r9d, [rbx + 2]
or dl, r8b
and r9d, 7
mov byte [rdi - 1], dl
lea r8d, [rbx + 0x12]
xor r8b, byte [rdi]
mov ecx, 8
sub ecx, r9d
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
lea r9d, [rbx + 3]
or dl, r8b
and r9d, 7
mov byte [rdi], dl
lea r8d, [rbx + 0x13]
xor r8b, byte [rdi + 1]
mov ecx, 8
sub ecx, r9d
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
lea r9d, [rbx - 4]
or dl, r8b
and r9d, 7
mov byte [rdi + 1], dl
lea r8d, [rbx + 0x14]
xor r8b, byte [rdi + 2]
mov ecx, 8
sub ecx, r9d
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
lea r9d, [rbx - 3]
or dl, r8b
and r9d, 7
mov byte [rdi + 2], dl
lea r8d, [rbx + 0x15]
xor r8b, byte [rdi + 3]
mov ecx, 8
sub ecx, r9d
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
lea r9d, [rbx - 2]
or dl, r8b
and r9d, 7
lea r8d, [rbx + 0x16]
mov byte [rdi + 3], dl
xor r8b, byte [rdi + 4]
mov ecx, 8
sub ecx, r9d
movzx edx, r8b
shl dl, cl
lea rdi, [rdi + 0xc]
movzx ecx, r9b
lea r9d, [rbx - 1]
shr r8b, cl
and r9d, 7
or dl, r8b
mov ecx, 8
sub ecx, r9d
mov byte [rdi - 8], dl
lea r8d, [rbx + 0x17]
xor r8b, byte [rdi - 7]
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
lea r9d, [rbx + 1]
or dl, r8b
and r9d, 7
mov byte [rdi - 7], dl
lea r8d, [rbx + 0x18]
xor r8b, byte [rdi - 6]
mov ecx, r10d
movzx edx, r8b
shl dl, cl
movzx ecx, r11b
shr r8b, cl
mov ecx, 8
or dl, r8b
sub ecx, r9d
mov byte [rdi - 6], dl
lea r8d, [rbx + 0x19]
xor r8b, byte [rdi - 5]
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
lea r9d, [rbx + 2]
or dl, r8b
and r9d, 7
mov byte [rdi - 5], dl
lea r8d, [rbx + 0x1a]
xor r8b, byte [rdi - 4]
mov ecx, 8
sub ecx, r9d
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
mov ecx, 8
or dl, r8b
lea r8d, [rbx + 3]
mov byte [rdi - 4], dl
add bl, 0x1b
xor bl, byte [rdi - 3]
and r8d, 7
sub ecx, r8d
movzx edx, bl
shl dl, cl
movzx ecx, r8b
shr bl, cl
lea rcx, [rsi + rdi]
or dl, bl
mov byte [rdi - 3], dl
cmp rcx, 0x3c
jb 0x140075120
mov rdi, qword [rsp]
mov rsi, qword [rsp + 0x18]
mov rbx, qword [rsp + 0x10]
mov byte [rax + 0x3d], 0
add rsp, 8
ret
Function at 0x140075340
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
cmp byte [rcx + 0x3b], 0
lea rbx, [rcx + 0x3b]
mov rax, rcx
je 0x1400753c9
mov r11, rcx
neg r11
nop dword [rax + rax]
lea r10, [r11 + rax]
mov ecx, 8
lea r8d, [r10 + 0x10]
mov r9d, r10d
xor r8b, byte [rax]
lea rax, [rax + 2]
movzx edx, r8b
and r9d, 7
sub ecx, r9d
shl dl, cl
movzx ecx, r9b
shr r8b, cl
mov ecx, 8
or dl, r8b
lea r8d, [r10 + 1]
mov byte [rax - 2], dl
add r10b, 0x11
xor r10b, byte [rax - 1]
and r8d, 7
sub ecx, r8d
movzx edx, r10b
shl dl, cl
movzx ecx, r8b
shr r10b, cl
lea rcx, [r11 + rax]
or dl, r10b
mov byte [rax - 1], dl
cmp rcx, 0x3a
jb 0x140075360
mov byte [rbx], 0
mov rbx, qword [rsp + 8]
ret

Function at 0x1400753d0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x3c], 0
mov r10, rcx
je 0x140075419
xor eax, eax
nop dword [rax + rax]
mov r9d, eax
lea r8d, [rax + 0x10]
xor r8b, byte [r10 + rax]
and r9d, 7
movzx edx, r8b
mov ecx, 8
sub ecx, r9d
shl dl, cl
movzx ecx, r9b
shr r8b, cl
or dl, r8b
mov byte [r10 + rax], dl
inc rax
cmp rax, 0x3b
jb 0x1400753e0
mov byte [r10 + 0x3c], 0
ret
Function at 0x140075420
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 8
cmp byte [rcx + 0x1f], 0
mov rax, rcx
je 0x140075615
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov rsi, 0xfffffffffffffffe
mov qword [rsp], rdi
sub rsi, rcx
lea rdi, [rcx + 2]
nop dword [rax]
lea rbx, [rsi + rdi]
mov r10d, 8
lea r8d, [rbx + 0x10]
mov r11d, ebx
xor r8b, byte [rdi - 2]
lea r9d, [rbx + 1]
movzx edx, r8b
and r9d, 7
and r11d, 7
sub r10d, r11d
mov ecx, r10d
shl dl, cl
movzx ecx, r11b
shr r8b, cl
mov ecx, 8
or dl, r8b
sub ecx, r9d
mov byte [rdi - 2], dl
lea r8d, [rbx + 0x11]
xor r8b, byte [rdi - 1]
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
lea r9d, [rbx + 2]
or dl, r8b
and r9d, 7
mov byte [rdi - 1], dl
lea r8d, [rbx + 0x12]
xor r8b, byte [rdi]
mov ecx, 8
sub ecx, r9d
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
lea r9d, [rbx + 3]
or dl, r8b
and r9d, 7
mov byte [rdi], dl
lea r8d, [rbx + 0x13]
xor r8b, byte [rdi + 1]
mov ecx, 8
sub ecx, r9d
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
lea r9d, [rbx - 4]
or dl, r8b
and r9d, 7
mov byte [rdi + 1], dl
lea r8d, [rbx + 0x14]
xor r8b, byte [rdi + 2]
mov ecx, 8
sub ecx, r9d
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
lea r9d, [rbx - 3]
or dl, r8b
and r9d, 7
mov byte [rdi + 2], dl
lea r8d, [rbx + 0x15]
xor r8b, byte [rdi + 3]
mov ecx, 8
sub ecx, r9d
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
lea r9d, [rbx - 2]
or dl, r8b
and r9d, 7
lea r8d, [rbx + 0x16]
mov byte [rdi + 3], dl
xor r8b, byte [rdi + 4]
mov ecx, 8
sub ecx, r9d
movzx edx, r8b
shl dl, cl
lea rdi, [rdi + 0xa]
movzx ecx, r9b
lea r9d, [rbx - 1]
shr r8b, cl
and r9d, 7
or dl, r8b
mov ecx, 8
mov byte [rdi - 6], dl
lea r8d, [rbx + 0x17]
xor r8b, byte [rdi - 5]
sub ecx, r9d
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
mov ecx, r10d
or dl, r8b
lea r8d, [rbx + 0x18]
xor r8b, byte [rdi - 4]
mov byte [rdi - 5], dl
movzx edx, r8b
shl dl, cl
movzx ecx, r11b
shr r8b, cl
mov ecx, 8
or dl, r8b
lea r8d, [rbx + 1]
mov byte [rdi - 4], dl
add bl, 0x19
xor bl, byte [rdi - 3]
and r8d, 7
sub ecx, r8d
movzx edx, bl
shl dl, cl
movzx ecx, r8b
shr bl, cl
lea rcx, [rsi + rdi]
or dl, bl
mov byte [rdi - 3], dl
cmp rcx, 0x1e
jb 0x140075450
mov rdi, qword [rsp]
mov rsi, qword [rsp + 0x18]
mov rbx, qword [rsp + 0x10]
mov byte [rax + 0x1f], 0
add rsp, 8
ret
Function at 0x140075620
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 8
cmp byte [rcx + 0x4d], 0
mov rax, rcx
je 0x14007571d
mov qword [rsp], rbx
lea r11, [rcx + 2]
mov rbx, 0xfffffffffffffffe
sub rbx, rcx
nop dword [rax]
nop word [rax + rax]
lea r10, [rbx + r11]
mov ecx, 8
lea r8d, [r10 + 0x10]
mov r9d, r10d
xor r8b, byte [r11 - 2]
lea r11, [r11 + 4]
movzx edx, r8b
and r9d, 7
sub ecx, r9d
shl dl, cl
movzx ecx, r9b
shr r8b, cl
lea r9d, [r10 + 1]
or dl, r8b
and r9d, 7
mov byte [r11 - 6], dl
lea r8d, [r10 + 0x11]
xor r8b, byte [r11 - 5]
mov ecx, 8
sub ecx, r9d
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
lea r9d, [r10 + 2]
or dl, r8b
and r9d, 7
mov byte [r11 - 5], dl
lea r8d, [r10 + 0x12]
xor r8b, byte [r11 - 4]
mov ecx, 8
sub ecx, r9d
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
mov ecx, 8
or dl, r8b
lea r8d, [r10 + 3]
mov byte [r11 - 4], dl
add r10b, 0x13
xor r10b, byte [r11 - 3]
and r8d, 7
sub ecx, r8d
movzx edx, r10b
shl dl, cl
movzx ecx, r8b
shr r10b, cl
lea rcx, [rbx + r11]
or dl, r10b
mov byte [r11 - 3], dl
cmp rcx, 0x4c
jb 0x140075650
mov rbx, qword [rsp]
mov byte [rax + 0x4d], 0
add rsp, 8
ret
Function at 0x140075730
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 8
cmp byte [rcx + 0x1c], 0
mov rax, rcx
je 0x1400758fa
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov rsi, 0xfffffffffffffffe
mov qword [rsp], rdi
sub rsi, rcx
lea rdi, [rcx + 2]
nop dword [rax]
lea rbx, [rsi + rdi]
mov r10d, 8
lea r8d, [rbx + 0x10]
mov r11d, ebx
xor r8b, byte [rdi - 2]
lea r9d, [rbx + 1]
movzx edx, r8b
and r9d, 7
and r11d, 7
movzx ecx, r11b
sub r10d, r11d
shr dl, cl
mov ecx, r10d
shl r8b, cl
mov ecx, 8
or dl, r8b
sub ecx, r9d
mov byte [rdi - 2], dl
lea r8d, [rbx + 0x11]
xor r8b, byte [rdi - 1]
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
lea r9d, [rbx + 2]
or dl, r8b
and r9d, 7
mov byte [rdi - 1], dl
lea r8d, [rbx + 0x12]
xor r8b, byte [rdi]
mov ecx, 8
sub ecx, r9d
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
lea r9d, [rbx + 3]
or dl, r8b
and r9d, 7
mov byte [rdi], dl
lea r8d, [rbx + 0x13]
xor r8b, byte [rdi + 1]
mov ecx, 8
sub ecx, r9d
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
lea r9d, [rbx - 4]
or dl, r8b
and r9d, 7
mov byte [rdi + 1], dl
lea r8d, [rbx + 0x14]
xor r8b, byte [rdi + 2]
mov ecx, 8
sub ecx, r9d
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
lea r9d, [rbx - 3]
or dl, r8b
and r9d, 7
mov byte [rdi + 2], dl
lea r8d, [rbx + 0x15]
xor r8b, byte [rdi + 3]
mov ecx, 8
sub ecx, r9d
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
lea r9d, [rbx - 2]
or dl, r8b
and r9d, 7
lea r8d, [rbx + 0x16]
mov byte [rdi + 3], dl
xor r8b, byte [rdi + 4]
mov ecx, 8
sub ecx, r9d
movzx edx, r8b
shl dl, cl
lea rdi, [rdi + 9]
movzx ecx, r9b
lea r9d, [rbx - 1]
shr r8b, cl
and r9d, 7
or dl, r8b
mov ecx, 8
mov byte [rdi - 5], dl
lea r8d, [rbx + 0x17]
xor r8b, byte [rdi - 4]
sub ecx, r9d
add bl, 0x18
movzx edx, r8b
xor bl, byte [rdi - 3]
shl dl, cl
movzx ecx, r9b
shr r8b, cl
movzx ecx, r11b
or dl, r8b
mov byte [rdi - 4], dl
movzx edx, bl
shr dl, cl
mov ecx, r10d
shl bl, cl
lea rcx, [rsi + rdi]
or dl, bl
mov byte [rdi - 3], dl
cmp rcx, 0x1b
jb 0x140075760
mov rdi, qword [rsp]
mov rsi, qword [rsp + 0x18]
mov rbx, qword [rsp + 0x10]
mov byte [rax + 0x1c], 0
add rsp, 8
ret

Function at 0x140075900
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x4a], 0
mov r10, rcx
je 0x140075949
xor eax, eax
nop dword [rax + rax]
mov r9d, eax
lea r8d, [rax + 0x10]
xor r8b, byte [r10 + rax]
and r9d, 7
movzx edx, r8b
mov ecx, 8
sub ecx, r9d
shl dl, cl
movzx ecx, r9b
shr r8b, cl
or dl, r8b
mov byte [r10 + rax], dl
inc rax
cmp rax, 0x49
jb 0x140075910
mov byte [r10 + 0x4a], 0
ret
Function at 0x140075950
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 8
cmp byte [rcx + 0x33], 0
mov rax, rcx
je 0x140075b45
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov rsi, 0xfffffffffffffffe
mov qword [rsp], rdi
sub rsi, rcx
lea rdi, [rcx + 2]
nop dword [rax]
lea rbx, [rsi + rdi]
mov r10d, 8
lea r8d, [rbx + 0x10]
mov r11d, ebx
xor r8b, byte [rdi - 2]
lea r9d, [rbx + 1]
movzx edx, r8b
and r9d, 7
and r11d, 7
sub r10d, r11d
mov ecx, r10d
shl dl, cl
movzx ecx, r11b
shr r8b, cl
mov ecx, 8
or dl, r8b
sub ecx, r9d
mov byte [rdi - 2], dl
lea r8d, [rbx + 0x11]
xor r8b, byte [rdi - 1]
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
lea r9d, [rbx + 2]
or dl, r8b
and r9d, 7
mov byte [rdi - 1], dl
lea r8d, [rbx + 0x12]
xor r8b, byte [rdi]
mov ecx, 8
sub ecx, r9d
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
lea r9d, [rbx + 3]
or dl, r8b
and r9d, 7
mov byte [rdi], dl
lea r8d, [rbx + 0x13]
xor r8b, byte [rdi + 1]
mov ecx, 8
sub ecx, r9d
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
lea r9d, [rbx - 4]
or dl, r8b
and r9d, 7
mov byte [rdi + 1], dl
lea r8d, [rbx + 0x14]
xor r8b, byte [rdi + 2]
mov ecx, 8
sub ecx, r9d
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
lea r9d, [rbx - 3]
or dl, r8b
and r9d, 7
mov byte [rdi + 2], dl
lea r8d, [rbx + 0x15]
xor r8b, byte [rdi + 3]
mov ecx, 8
sub ecx, r9d
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
lea r9d, [rbx - 2]
or dl, r8b
and r9d, 7
lea r8d, [rbx + 0x16]
mov byte [rdi + 3], dl
xor r8b, byte [rdi + 4]
mov ecx, 8
sub ecx, r9d
movzx edx, r8b
shl dl, cl
lea rdi, [rdi + 0xa]
movzx ecx, r9b
lea r9d, [rbx - 1]
shr r8b, cl
and r9d, 7
or dl, r8b
mov ecx, 8
mov byte [rdi - 6], dl
lea r8d, [rbx + 0x17]
xor r8b, byte [rdi - 5]
sub ecx, r9d
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
mov ecx, r10d
or dl, r8b
lea r8d, [rbx + 0x18]
xor r8b, byte [rdi - 4]
mov byte [rdi - 5], dl
movzx edx, r8b
shl dl, cl
movzx ecx, r11b
shr r8b, cl
mov ecx, 8
or dl, r8b
lea r8d, [rbx + 1]
mov byte [rdi - 4], dl
add bl, 0x19
xor bl, byte [rdi - 3]
and r8d, 7
sub ecx, r8d
movzx edx, bl
shl dl, cl
movzx ecx, r8b
shr bl, cl
lea rcx, [rsi + rdi]
or dl, bl
mov byte [rdi - 3], dl
cmp rcx, 0x32
jb 0x140075980
mov rdi, qword [rsp]
mov rsi, qword [rsp + 0x18]
mov rbx, qword [rsp + 0x10]
mov byte [rax + 0x33], 0
add rsp, 8
ret
Function at 0x140075b50
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 8
cmp byte [rcx + 0x42], 0
mov rax, rcx
je 0x140075c79
mov qword [rsp], rbx
lea r11, [rcx + 2]
mov rbx, 0xfffffffffffffffe
sub rbx, rcx
nop dword [rax]
nop word [rax + rax]
lea r10, [rbx + r11]
mov ecx, 8
lea r8d, [r10 + 0x10]
mov r9d, r10d
xor r8b, byte [r11 - 2]
lea r11, [r11 + 5]
movzx edx, r8b
and r9d, 7
sub ecx, r9d
shl dl, cl
movzx ecx, r9b
shr r8b, cl
lea r9d, [r10 + 1]
or dl, r8b
and r9d, 7
mov byte [r11 - 7], dl
lea r8d, [r10 + 0x11]
xor r8b, byte [r11 - 6]
mov ecx, 8
sub ecx, r9d
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
lea r9d, [r10 + 2]
or dl, r8b
and r9d, 7
mov byte [r11 - 6], dl
lea r8d, [r10 + 0x12]
xor r8b, byte [r11 - 5]
mov ecx, 8
sub ecx, r9d
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
lea r9d, [r10 + 3]
or dl, r8b
and r9d, 7
mov byte [r11 - 5], dl
lea r8d, [r10 + 0x13]
xor r8b, byte [r11 - 4]
mov ecx, 8
sub ecx, r9d
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
mov ecx, 8
or dl, r8b
lea r8d, [r10 - 4]
mov byte [r11 - 4], dl
add r10b, 0x14
xor r10b, byte [r11 - 3]
and r8d, 7
sub ecx, r8d
movzx edx, r10b
shl dl, cl
movzx ecx, r8b
shr r10b, cl
lea rcx, [rbx + r11]
or dl, r10b
mov byte [r11 - 3], dl
cmp rcx, 0x41
jb 0x140075b80
mov rbx, qword [rsp]
mov byte [rax + 0x42], 0
add rsp, 8
ret

Function at 0x140075c80
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
cmp byte [rcx + 0x1b], 0
lea rbx, [rcx + 0x1b]
mov rax, rcx
je 0x140075d09
mov r11, rcx
neg r11
nop dword [rax + rax]
lea r10, [r11 + rax]
mov ecx, 8
lea r8d, [r10 + 0x10]
mov r9d, r10d
xor r8b, byte [rax]
lea rax, [rax + 2]
movzx edx, r8b
and r9d, 7
sub ecx, r9d
shl dl, cl
movzx ecx, r9b
shr r8b, cl
mov ecx, 8
or dl, r8b
lea r8d, [r10 + 1]
mov byte [rax - 2], dl
add r10b, 0x11
xor r10b, byte [rax - 1]
and r8d, 7
sub ecx, r8d
movzx edx, r10b
shl dl, cl
movzx ecx, r8b
shr r10b, cl
lea rcx, [r11 + rax]
or dl, r10b
mov byte [rax - 1], dl
cmp rcx, 0x1a
jb 0x140075ca0
mov byte [rbx], 0
mov rbx, qword [rsp + 8]
ret

Function at 0x140075d10
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
cmp byte [rcx + 0x3f], 0
lea rbx, [rcx + 0x3f]
mov rax, rcx
je 0x140075d99
mov r11, rcx
neg r11
nop dword [rax + rax]
lea r10, [r11 + rax]
mov ecx, 8
lea r8d, [r10 + 0x10]
mov r9d, r10d
xor r8b, byte [rax]
lea rax, [rax + 2]
movzx edx, r8b
and r9d, 7
sub ecx, r9d
shl dl, cl
movzx ecx, r9b
shr r8b, cl
mov ecx, 8
or dl, r8b
lea r8d, [r10 + 1]
mov byte [rax - 2], dl
add r10b, 0x11
xor r10b, byte [rax - 1]
and r8d, 7
sub ecx, r8d
movzx edx, r10b
shl dl, cl
movzx ecx, r8b
shr r10b, cl
lea rcx, [r11 + rax]
or dl, r10b
mov byte [rax - 1], dl
cmp rcx, 0x3e
jb 0x140075d30
mov byte [rbx], 0
mov rbx, qword [rsp + 8]
ret
Function at 0x140075da0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 8
cmp byte [rcx + 0x5b], 0
mov rax, rcx
je 0x140075f95
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov rsi, 0xfffffffffffffffe
mov qword [rsp], rdi
sub rsi, rcx
lea rdi, [rcx + 2]
nop dword [rax]
lea rbx, [rsi + rdi]
mov r10d, 8
lea r8d, [rbx + 0x10]
mov r11d, ebx
xor r8b, byte [rdi - 2]
lea r9d, [rbx + 1]
movzx edx, r8b
and r9d, 7
and r11d, 7
sub r10d, r11d
mov ecx, r10d
shl dl, cl
movzx ecx, r11b
shr r8b, cl
mov ecx, 8
or dl, r8b
sub ecx, r9d
mov byte [rdi - 2], dl
lea r8d, [rbx + 0x11]
xor r8b, byte [rdi - 1]
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
lea r9d, [rbx + 2]
or dl, r8b
and r9d, 7
mov byte [rdi - 1], dl
lea r8d, [rbx + 0x12]
xor r8b, byte [rdi]
mov ecx, 8
sub ecx, r9d
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
lea r9d, [rbx + 3]
or dl, r8b
and r9d, 7
mov byte [rdi], dl
lea r8d, [rbx + 0x13]
xor r8b, byte [rdi + 1]
mov ecx, 8
sub ecx, r9d
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
lea r9d, [rbx - 4]
or dl, r8b
and r9d, 7
mov byte [rdi + 1], dl
lea r8d, [rbx + 0x14]
xor r8b, byte [rdi + 2]
mov ecx, 8
sub ecx, r9d
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
lea r9d, [rbx - 3]
or dl, r8b
and r9d, 7
mov byte [rdi + 2], dl
lea r8d, [rbx + 0x15]
xor r8b, byte [rdi + 3]
mov ecx, 8
sub ecx, r9d
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
lea r9d, [rbx - 2]
or dl, r8b
and r9d, 7
lea r8d, [rbx + 0x16]
mov byte [rdi + 3], dl
xor r8b, byte [rdi + 4]
mov ecx, 8
sub ecx, r9d
movzx edx, r8b
shl dl, cl
lea rdi, [rdi + 0xa]
movzx ecx, r9b
lea r9d, [rbx - 1]
shr r8b, cl
and r9d, 7
or dl, r8b
mov ecx, 8
mov byte [rdi - 6], dl
lea r8d, [rbx + 0x17]
xor r8b, byte [rdi - 5]
sub ecx, r9d
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
mov ecx, r10d
or dl, r8b
lea r8d, [rbx + 0x18]
xor r8b, byte [rdi - 4]
mov byte [rdi - 5], dl
movzx edx, r8b
shl dl, cl
movzx ecx, r11b
shr r8b, cl
mov ecx, 8
or dl, r8b
lea r8d, [rbx + 1]
mov byte [rdi - 4], dl
add bl, 0x19
xor bl, byte [rdi - 3]
and r8d, 7
sub ecx, r8d
movzx edx, bl
shl dl, cl
movzx ecx, r8b
shr bl, cl
lea rcx, [rsi + rdi]
or dl, bl
mov byte [rdi - 3], dl
cmp rcx, 0x5a
jb 0x140075dd0
mov rdi, qword [rsp]
mov rsi, qword [rsp + 0x18]
mov rbx, qword [rsp + 0x10]
mov byte [rax + 0x5b], 0
add rsp, 8
ret
Function at 0x140075fc0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 8
cmp byte [rcx + 0x3a], 0
mov rax, rcx
je 0x140076091
mov qword [rsp], rbx
lea r11, [rcx + 2]
mov rbx, 0xfffffffffffffffe
sub rbx, rcx
nop dword [rax]
nop word [rax + rax]
lea r10, [rbx + r11]
mov ecx, 8
lea r8d, [r10 + 0x10]
mov r9d, r10d
xor r8b, byte [r11 - 2]
lea r11, [r11 + 3]
movzx edx, r8b
and r9d, 7
sub ecx, r9d
shl dl, cl
movzx ecx, r9b
shr r8b, cl
lea r9d, [r10 + 1]
or dl, r8b
and r9d, 7
mov byte [r11 - 5], dl
lea r8d, [r10 + 0x11]
xor r8b, byte [r11 - 4]
mov ecx, 8
sub ecx, r9d
movzx edx, r8b
shl dl, cl
movzx ecx, r9b
shr r8b, cl
mov ecx, 8
or dl, r8b
lea r8d, [r10 + 2]
mov byte [r11 - 4], dl
add r10b, 0x12
xor r10b, byte [r11 - 3]
and r8d, 7
sub ecx, r8d
movzx edx, r10b
shl dl, cl
movzx ecx, r8b
shr r10b, cl
lea rcx, [rbx + r11]
or dl, r10b
mov byte [r11 - 3], dl
cmp rcx, 0x39
jb 0x140075ff0
mov rbx, qword [rsp]
mov byte [rax + 0x3a], 0
add rsp, 8
ret

Function at 0x1400760a0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x5a], 0
mov r10, rcx
je 0x1400760e9
xor eax, eax
nop dword [rax + rax]
mov r9d, eax
lea r8d, [rax + 0x10]
xor r8b, byte [r10 + rax]
and r9d, 7
movzx edx, r8b
mov ecx, 8
sub ecx, r9d
shl dl, cl
movzx ecx, r9b
shr r8b, cl
or dl, r8b
mov byte [r10 + rax], dl
inc rax
cmp rax, 0x59
jb 0x1400760b0
mov byte [r10 + 0x5a], 0
ret