joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14007c470
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
nop
push 0x1f64437b
mov qword [rsp], rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x1a]
xchg rsi, rbx
mov rdx, rsi
xchg rsi, rbx
call fcn.14007a8d0
nop
xor eax, eax
mov byte [rbx + rax], 0x15
add byte [rbx + rax], 6
xor byte [rbx + rax], 0x50
add byte [rbx + rax], 0x2d
sub byte [rbx + rax], 0xa
sub byte [rbx + rax], 5
sub byte [rbx + rax], 0xd
xor byte [rbx + rax], 0x44
xor byte [rbx + rax], 0x18
inc rax
cmp rax, 0x32
jb 0x14007c4a0
xchg rbx, rdi
mov rax, rbx
xchg rdi, rbx
xchg rdx, rbx
mov rdx, qword [rsp + 0x30]
xchg rdx, rbx
add rsp, 0x20
push rbx
push rbx
push rdx
push rdx
push rdx
push rax
push rcx
push rcx
xchg qword [rsp + 0x40], rdi
add rsp, 0x48
ret

Function at 0x14007c500
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg rdx, r9
mov qword [rsp + 0x10], r9
xchg r9, rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg rcx, r10
mov rdi, r10
xchg r10, rcx
lea rbx, [rdx + 0x1c]
mov rdx, rbx
call fcn.14007a8d0
nop
xor eax, eax
mov byte [rbx + rax], 0x79
xor byte [rbx + rax], 0x2f
add byte [rbx + rax], 0x27
sub byte [rbx + rax], 0x7a
add byte [rbx + rax], 0x48
sub byte [rbx + rax], 0x34
sub byte [rbx + rax], 0x17
inc rax
cmp rax, 0x34
jb 0x14007c535
xchg r14, rax
mov r14, rdi
xchg r14, rax
xchg rbx, rsi
mov rsi, qword [rsp + 0x30]
xchg rsi, rbx
add rsp, 0x20
push rdx
push rcx
push rax
push rax
push rbx
push rcx
xchg qword [rsp + 0x30], rdi
add rsp, 0x38
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c590
Capabilities:
Encode data using xor

Disassembly:
xchg r9, rbx
mov qword [rsp + 8], r9
xchg rbx, r9
xchg r9, rdx
mov qword [rsp + 0x10], r9
xchg r9, rdx
nop
push 0x84ddd3a
mov qword [rsp], rdi
sub rsp, 0x20
xchg rcx, rdx
mov rdi, rdx
xchg rcx, rdx
lea rbx, [rdx + 0x1c]
xchg rbx, rdi
mov rdx, rdi
xchg rdi, rbx
call fcn.14007a8d0
nop
xor eax, eax
mov byte [rbx + rax], 0x53
add byte [rbx + rax], 0x2b
sub byte [rbx + rax], 0x26
sub byte [rbx + rax], 0x29
add byte [rbx + rax], 0x3b
sub byte [rbx + rax], 0x22
xor byte [rbx + rax], 0x48
inc rax
cmp rax, 0x36
jb 0x14007c5d2
xchg r13, rdi
mov rax, r13
xchg r13, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c620
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg rdx, r9
mov qword [rsp + 0x10], r9
xchg r9, rdx
push rdi
sub rsp, 0x20
xchg rcx, r9
mov rdi, r9
xchg rcx, r9
lea rbx, [rdx + 0x1e]
xchg rdx, r12
mov r12, rbx
xchg r12, rdx
call fcn.14007a8d0
nop
xor eax, eax
mov byte [rbx + rax], 0x64
xor byte [rbx + rax], 0x50
add byte [rbx + rax], 0x1d
sub byte [rbx + rax], 7
add byte [rbx + rax], 0x17
xor byte [rbx + rax], 0x61
inc rax
cmp rax, 0x38
jb 0x14007c653
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rcx
push rcx
xchg qword [rsp + 0x10], rdi
add rsp, 0x18
nop
add rsp, 8
jmp qword [rsp - 8]
Function at 0x14007c710
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg rdx, r9
mov qword [rsp + 0x10], r9
xchg rdx, r9
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg rdi, rbx
mov rbx, rcx
xchg rbx, rdi
lea rbx, [rdx + 0x22]
xchg rcx, rdx
mov rcx, rbx
xchg rcx, rdx
call fcn.14007a8d0
nop
xor eax, eax
mov byte [rbx + rax], 0x63
xor byte [rbx + rax], 0x54
xor byte [rbx + rax], 0x53
sub byte [rbx + rax], 0x36
sub byte [rbx + rax], 6
xor byte [rbx + rax], 0x2b
xor byte [rbx + rax], 0x18
sub byte [rbx + rax], 0x1b
inc rax
cmp rax, 0x40
jb 0x14007c74c
xchg rdi, r12
mov rax, r12
xchg rdi, r12
xchg rbx, r15
mov r15, qword [rsp + 0x30]
xchg r15, rbx
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
ret

Function at 0x14007c7a0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg rdx, rsi
mov qword [rsp + 0x10], rsi
xchg rdx, rsi
nop
push 0x29fc78d5
mov qword [rsp], rdi
sub rsp, 0x20
xchg rcx, rdx
mov rdi, rdx
xchg rcx, rdx
lea rbx, [rdx + 0x22]
xchg rdx, rbx
mov rbx, rdx
xchg rbx, rdx
call fcn.14007a8d0
nop
xor eax, eax
mov byte [rbx + rax], 0x4f
sub byte [rbx + rax], 0x38
xor byte [rbx + rax], 0x77
sub byte [rbx + rax], 0x20
add byte [rbx + rax], 0x32
add byte [rbx + rax], 0xa
xor byte [rbx + rax], 0x7c
inc rax
cmp rax, 0x42
jb 0x14007c7dc
xchg rbx, rax
mov rbx, rdi
xchg rbx, rax
xchg rcx, rbx
mov rcx, qword [rsp + 0x30]
xchg rcx, rbx
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c830
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg rdx, r9
mov qword [rsp + 0x10], r9
xchg rdx, r9
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg rdi, rbx
mov rbx, rcx
xchg rbx, rdi
lea rbx, [rdx + 0x24]
xchg rsi, rbx
mov rdx, rsi
xchg rbx, rsi
call fcn.14007a8d0
nop
xor eax, eax
mov byte [rbx + rax], 0x7e
xor byte [rbx + rax], 0x5e
xor byte [rbx + rax], 0
add byte [rbx + rax], 0x14
add byte [rbx + rax], 0x29
sub byte [rbx + rax], 0x54
xor byte [rbx + rax], 9
inc rax
cmp rax, 0x46
jb 0x14007c86b
xchg rdi, rbp
mov rax, rbp
xchg rbp, rdi
xchg rbx, r11
mov r11, qword [rsp + 0x30]
xchg r11, rbx
add rsp, 0x20
push rbx
push rdx
xchg qword [rsp + 0x10], rdi
pop rdx
pop rbx
add rsp, 8
ret

Function at 0x14007c8c0
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r14
mov qword [rsp + 8], r14
xchg rbx, r14
mov qword [rsp + 0x10], rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg rcx, rbp
mov rdi, rbp
xchg rbp, rcx
lea rbx, [rdx + 0x28]
xchg rdx, rbx
mov rbx, rdx
xchg rbx, rdx
call fcn.14007a8d0
nop
xor eax, eax
mov byte [rbx + rax], 0x64
xor byte [rbx + rax], 0x48
xor byte [rbx + rax], 0x2b
add byte [rbx + rax], 0x21
sub byte [rbx + rax], 0x12
xor byte [rbx + rax], 0x10
add byte [rbx + rax], 0xc
add byte [rbx + rax], 0xf
sub byte [rbx + rax], 0x21
inc rax
cmp rax, 0x4c
jb 0x14007c8fb
mov rax, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
add rsp, 8
jmp qword [rsp - 8]
Function at 0x14007c950
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, rsi
mov qword [rsp + 8], rsi
xchg rbx, rsi
mov qword [rsp + 0x10], rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x2a]
xchg rsi, rdx
mov rsi, rbx
xchg rsi, rdx
call fcn.14007a8d0
nop
xor eax, eax
mov byte [rbx + rax], 0x44
xor byte [rbx + rax], 0x7f
add byte [rbx + rax], 9
sub byte [rbx + rax], 0xe
sub byte [rbx + rax], 0x35
add byte [rbx + rax], 0x7a
sub byte [rbx + rax], 0x30
sub byte [rbx + rax], 0x3e
sub byte [rbx + rax], 0xd
inc rax
cmp rax, 0x50
jb 0x14007c985
mov rax, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
ret

Function at 0x14007c9d0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
nop
push 0x7bfff0f8
mov qword [rsp], rdi
sub rsp, 0x20
xchg r14, rdi
mov r14, rcx
xchg rdi, r14
lea rbx, [rdx + 0x2a]
xchg rdx, rbx
mov rbx, rdx
xchg rbx, rdx
call fcn.14007a8d0
nop
xor eax, eax
mov byte [rbx + rax], 4
xor byte [rbx + rax], 0xa
add byte [rbx + rax], 0x27
sub byte [rbx + rax], 0x2d
add byte [rbx + rax], 0x59
xor byte [rbx + rax], 0x38
sub byte [rbx + rax], 0x4e
add byte [rbx + rax], 6
sub byte [rbx + rax], 0x11
inc rax
cmp rax, 0x52
jb 0x14007ca06
mov rax, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rdx
xchg qword [rsp + 8], rdi
add rsp, 0x10
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007ca60
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r11
mov qword [rsp + 8], r11
xchg rbx, r11
mov qword [rsp + 0x10], rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg rcx, rdi
mov rcx, rdi
xchg rdi, rcx
lea rbx, [rdx + 0x2c]
xchg rbx, rsi
mov rdx, rsi
xchg rbx, rsi
call fcn.14007a8d0
nop
xor eax, eax
mov byte [rbx + rax], 0x6c
add byte [rbx + rax], 0xd
sub byte [rbx + rax], 0x6e
add byte [rbx + rax], 0x17
sub byte [rbx + rax], 0x1f
xor byte [rbx + rax], 6
add byte [rbx + rax], 0x61
sub byte [rbx + rax], 0x49
sub byte [rbx + rax], 0x1d
inc rax
cmp rax, 0x54
jb 0x14007ca9b
xchg rsi, rax
mov rsi, rdi
xchg rsi, rax
xchg r11, rbx
mov r11, qword [rsp + 0x30]
xchg r11, rbx
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
ret

Function at 0x14007caf0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg rdx, rcx
mov qword [rsp + 0x10], rcx
xchg rdx, rcx
push rdi
sub rsp, 0x20
xchg r14, rdi
mov r14, rcx
xchg r14, rdi
lea rbx, [rdx + 0x2e]
xchg r14, rdx
mov r14, rbx
xchg r14, rdx
call fcn.14007a8d0
nop
xor eax, eax
mov byte [rbx + rax], 7
xor byte [rbx + rax], 0x55
xor byte [rbx + rax], 0x6d
add byte [rbx + rax], 0x1e
add byte [rbx + rax], 0x17
xor byte [rbx + rax], 0x74
inc rax
cmp rax, 0x58
jb 0x14007cb23
xchg rsi, rax
mov rsi, rdi
xchg rsi, rax
xchg rbx, rsi
mov rsi, qword [rsp + 0x30]
xchg rsi, rbx
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
nop
add rsp, 8
jmp qword [rsp - 8]
Function at 0x14007cb70
Capabilities:
Encode data using xor

Disassembly:
xchg rbp, rbx
mov qword [rsp + 8], rbp
xchg rbx, rbp
mov qword [rsp + 0x10], rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg rsi, rdi
mov rsi, rcx
xchg rdi, rsi
lea rbx, [rdx + 0x2e]
mov rdx, rbx
call fcn.14007a8d0
nop
xor eax, eax
mov byte [rbx + rax], 0x51
sub byte [rbx + rax], 0x39
add byte [rbx + rax], 0x11
add byte [rbx + rax], 0x1f
xor byte [rbx + rax], 0x2c
sub byte [rbx + rax], 0x11
sub byte [rbx + rax], 0x26
sub byte [rbx + rax], 0x21
sub byte [rbx + rax], 0xc
inc rax
cmp rax, 0x5a
jb 0x14007cba5
xchg rdi, r12
mov rax, r12
xchg r12, rdi
xchg rcx, rbx
mov rcx, qword [rsp + 0x30]
xchg rcx, rbx
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007cc80
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg rcx, rdx
mov qword [rsp + 0x10], rcx
xchg rdx, rcx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg rdi, rsi
mov rsi, rcx
xchg rdi, rsi
lea rbx, [rdx + 0x30]
xchg rdx, r15
mov r15, rbx
xchg r15, rdx
call fcn.14007a8d0
nop
xor eax, eax
mov byte [rbx + rax], 0x53
add byte [rbx + rax], 0x23
sub byte [rbx + rax], 0x1a
sub byte [rbx + rax], 0x2d
sub byte [rbx + rax], 0x19
sub byte [rbx + rax], 3
xor byte [rbx + rax], 0x67
sub byte [rbx + rax], 0x53
sub byte [rbx + rax], 0x21
inc rax
cmp rax, 0x5e
jb 0x14007ccbc
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
xchg rbx, rdx
mov rdx, qword [rsp + 0x30]
xchg rdx, rbx
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007cd20
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg rbx, rcx
mov rdi, rbx
xchg rcx, rbx
lea rbx, [rdx + 0x32]
mov rdx, rbx
call fcn.14007a8d0
nop
xor eax, eax
mov byte [rbx + rax], 0x1c
sub byte [rbx + rax], 0x1a
sub byte [rbx + rax], 2
add byte [rbx + rax], 0x41
sub byte [rbx + rax], 0x1e
add byte [rbx + rax], 0x45
xor byte [rbx + rax], 0x68
inc rax
cmp rax, 0x60
jb 0x14007cd47
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
xchg r8, rbx
mov r8, qword [rsp + 0x30]
xchg rbx, r8
add rsp, 0x20
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret

Function at 0x14007cd90
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg rdi, rcx
mov rcx, rdi
xchg rcx, rdi
lea rbx, [rdx + 0x34]
xchg rbx, r12
mov rdx, r12
xchg rbx, r12
call fcn.14007a8d0
nop
xor eax, eax
mov byte [rbx + rax], 6
add byte [rbx + rax], 0x69
xor byte [rbx + rax], 0x6d
xor byte [rbx + rax], 0x5c
sub byte [rbx + rax], 0x35
add byte [rbx + rax], 0x2e
sub byte [rbx + rax], 0x57
inc rax
cmp rax, 0x64
jb 0x14007cdc6
xchg r9, rax
mov r9, rdi
xchg r9, rax
xchg r10, rbx
mov r10, qword [rsp + 0x30]
xchg r10, rbx
add rsp, 0x20
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret
Function at 0x14007ce10
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r14
mov qword [rsp + 8], r14
xchg rbx, r14
xchg rcx, rdx
mov qword [rsp + 0x10], rcx
xchg rcx, rdx
push rdi
sub rsp, 0x20
xchg rcx, rbx
mov rdi, rbx
xchg rcx, rbx
lea rbx, [rdx + 0x38]
xchg rbp, rdx
mov rbp, rbx
xchg rdx, rbp
call fcn.14007a8d0
nop
xor eax, eax
mov byte [rbx + rax], 9
xor byte [rbx + rax], 0x1c
xor byte [rbx + rax], 0x3a
sub byte [rbx + rax], 0x15
add byte [rbx + rax], 1
sub byte [rbx + rax], 0x1b
inc rax
cmp rax, 0x6e
jb 0x14007ce49
xchg rcx, rax
mov rcx, rdi
xchg rcx, rax
xchg rbx, r11
mov r11, qword [rsp + 0x30]
xchg r11, rbx
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007cea0
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, rsi
mov qword [rsp + 8], rsi
xchg rsi, rbx
mov qword [rsp + 0x10], rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg rdi, rcx
mov rcx, rdi
xchg rdi, rcx
lea rbx, [rdx + 0x4e]
xchg rdi, rbx
mov rdx, rdi
xchg rdi, rbx
call fcn.14007a8d0
nop
xor eax, eax
mov byte [rbx + rax], 0x4f
sub byte [rbx + rax], 0x38
sub byte [rbx + rax], 0xb
xor byte [rbx + rax], 0x5c
xor byte [rbx + rax], 0xa
sub byte [rbx + rax], 0x11
xor byte [rbx + rax], 0x63
xor byte [rbx + rax], 0x2a
inc rax
cmp rax, 0x98
jb 0x14007cedc
xchg r11, rax
mov r11, rdi
xchg r11, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007cf30
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg rdi, r13
mov r13, rcx
xchg r13, rdi
lea rbx, [rdx + 0x56]
xchg rbx, r10
mov rdx, r10
xchg r10, rbx
call fcn.14007a8d0
nop
xor eax, eax
mov byte [rbx + rax], 0x40
xor byte [rbx + rax], 0x4d
add byte [rbx + rax], 0x71
sub byte [rbx + rax], 0x66
add byte [rbx + rax], 0x66
sub byte [rbx + rax], 0x2b
xor byte [rbx + rax], 0x29
sub byte [rbx + rax], 0x7a
inc rax
cmp rax, 0xa8
jb 0x14007cf66
xchg r14, rdi
mov rax, r14
xchg r14, rdi
xchg r11, rbx
mov r11, qword [rsp + 0x30]
xchg rbx, r11
add rsp, 0x20
push rcx
push rbx
push rdx
push rdx
push rbx
push rbx
push rax
xchg qword [rsp + 0x38], rdi
pop rax
pop rbx
pop rbx
pop rdx
pop rdx
pop rbx
pop rcx
add rsp, 8
ret

Function at 0x14007cfd0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg r15, rdx
mov qword [rsp + 0x10], r15
xchg r15, rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg rcx, rdi
mov rcx, rdi
xchg rdi, rcx
lea rbx, [rdx + 0x5a]
xchg rbx, rdx
mov rbx, rdx
xchg rbx, rdx
call fcn.14007a8d0
nop
xor eax, eax
mov byte [rbx + rax], 0x71
xor byte [rbx + rax], 0x52
add byte [rbx + rax], 0x50
sub byte [rbx + rax], 0x10
sub byte [rbx + rax], 6
sub byte [rbx + rax], 0x5d
inc rax
cmp rax, 0xb0
jb 0x14007d00b
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
xchg rbx, r13
mov r13, qword [rsp + 0x30]
xchg r13, rbx
add rsp, 0x20
push rax
push rdx
xchg qword [rsp + 0x10], rdi
add rsp, 0x18
nop
add rsp, 8
jmp qword [rsp - 8]
Function at 0x14007d060
Capabilities:
Encode data using xor

Disassembly:
xchg r10, rbx
mov qword [rsp + 8], r10
xchg rbx, r10
xchg r10, rdx
mov qword [rsp + 0x10], r10
xchg rdx, r10
nop
push 0x96f804
mov qword [rsp], rdi
sub rsp, 0x20
xchg rdi, rcx
mov rcx, rdi
xchg rdi, rcx
lea rbx, [rdx + 0x70]
mov rdx, rbx
call fcn.14007a8d0
nop
xor eax, eax
mov byte [rbx + rax], 0x29
add byte [rbx + rax], 0x4e
sub byte [rbx + rax], 0x1d
xor byte [rbx + rax], 0x13
add byte [rbx + rax], 0x32
sub byte [rbx + rax], 0x15
sub byte [rbx + rax], 0x5c
add byte [rbx + rax], 7
sub byte [rbx + rax], 0x11
inc rax
cmp rax, 0xdc
jb 0x14007d09c
mov rax, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
ret

Function at 0x14007d0f0
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, rsi
mov qword [rsp + 8], rsi
xchg rsi, rbx
mov qword [rsp + 0x10], rdx
nop
push 0x643d3f6d
mov qword [rsp], rdi
sub rsp, 0x20
xchg rdi, rcx
mov rcx, rdi
xchg rcx, rdi
lea rbx, [rdx + 0x70]
xchg rbx, rdx
mov rbx, rdx
xchg rdx, rbx
call fcn.14007a8d0
nop
xor eax, eax
mov byte [rbx + rax], 0x62
sub byte [rbx + rax], 0x33
add byte [rbx + rax], 0x33
sub byte [rbx + rax], 0x4d
xor byte [rbx + rax], 0x16
sub byte [rbx + rax], 3
inc rax
cmp rax, 0xde
jb 0x14007d12c
xchg r14, rax
mov r14, rdi
xchg r14, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
ret

Function at 0x14007d170
Capabilities:
Encode data using xor

Disassembly:
xchg rcx, rbx
mov qword [rsp + 8], rcx
xchg rcx, rbx
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg r13, rdi
mov r13, rcx
xchg r13, rdi
lea rbx, [rdx + 0x76]
xchg rcx, rdx
mov rcx, rbx
xchg rcx, rdx
call fcn.14007a8d0
nop
xor eax, eax
mov byte [rbx + rax], 0x30
add byte [rbx + rax], 0x17
xor byte [rbx + rax], 0x3d
sub byte [rbx + rax], 0xd
sub byte [rbx + rax], 0xf
sub byte [rbx + rax], 0x5e
inc rax
cmp rax, 0xea
jb 0x14007d1a3
xchg rcx, rax
mov rcx, rdi
xchg rcx, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007d1f0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rdx
mov qword [rsp], rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x7c]
xchg rbx, rbp
mov rdx, rbp
xchg rbp, rbx
call fcn.14007a8d0
nop
xor eax, eax
mov byte [rbx + rax], 0x48
sub byte [rbx + rax], 0x33
add byte [rbx + rax], 0x2a
add byte [rbx + rax], 0xf
xor byte [rbx + rax], 0x2c
sub byte [rbx + rax], 0x40
xor byte [rbx + rax], 0x6e
sub byte [rbx + rax], 0x4c
inc rax
cmp rax, 0xf4
jb 0x14007d21b
xchg r9, rax
mov r9, rdi
xchg r9, rax
xchg rbx, r11
mov r11, qword [rsp + 0x30]
xchg r11, rbx
add rsp, 0x20
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
add rsp, 8
jmp qword [rsp - 8]
Function at 0x14007d270
Capabilities:
Encode data using xor

Disassembly:
xchg rcx, rbx
mov qword [rsp + 8], rcx
xchg rbx, rcx
xchg rdx, r12
mov qword [rsp + 0x10], r12
xchg r12, rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg rcx, rdi
mov rcx, rdi
xchg rdi, rcx
lea rbx, [rdx + 0x9a]
xchg r15, rbx
mov rdx, r15
xchg rbx, r15
call fcn.14007a8d0
nop
xor eax, eax
nop dword [rax]
nop dword [rax + rax]
mov byte [rbx + rax], 0x45
add byte [rbx + rax], 0x17
sub byte [rbx + rax], 0x14
sub byte [rbx + rax], 0x23
sub byte [rbx + rax], 0x1f
xor byte [rbx + rax], 0x47
sub byte [rbx + rax], 0x21
xor byte [rbx + rax], 0x62
sub byte [rbx + rax], 0x42
inc rax
cmp rax, 0x130
jb 0x14007d2c0
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
xchg rbx, r9
mov r9, qword [rsp + 0x30]
xchg rbx, r9
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007d320
Capabilities:
Encode data using xor

Disassembly:
xchg r10, rbx
mov qword [rsp + 8], r10
xchg rbx, r10
mov qword [rsp + 0x10], rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg r12, rdi
mov r12, rcx
xchg rdi, r12
lea rbx, [rdx + 0xc]
xchg rbx, rdx
mov rbx, rdx
xchg rdx, rbx
call fcn.14007a8d0
nop
xor eax, eax
mov byte [rbx + rax], 0x3c
xor byte [rbx + rax], 0x54
sub byte [rbx + rax], 0x4c
add byte [rbx + rax], 0x21
add byte [rbx + rax], 0x3a
sub byte [rbx + rax], 0xc
sub byte [rbx + rax], 0x49
add byte [rbx + rax], 0x18
xor byte [rbx + rax], 0x3a
inc rax
cmp rax, 0x14
jb 0x14007d35b
xchg r10, rdi
mov rax, r10
xchg r10, rdi
xchg r14, rbx
mov r14, qword [rsp + 0x30]
xchg rbx, r14
add rsp, 0x20
push rax
push rbx
push rax
push rbx
xchg qword [rsp + 0x20], rdi
pop rbx
pop rax
pop rbx
pop rax
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007d3c0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0xe]
xchg rdx, rsi
mov rsi, rbx
xchg rsi, rdx
call fcn.14007a8d0
nop
xor eax, eax
mov byte [rbx + rax], 0x5f
add byte [rbx + rax], 8
xor byte [rbx + rax], 0x1c
xor byte [rbx + rax], 0x5f
xor byte [rbx + rax], 0x57
xor byte [rbx + rax], 0x65
add byte [rbx + rax], 0x59
sub byte [rbx + rax], 0x6f
inc rax
cmp rax, 0x18
jb 0x14007d3ef
mov rax, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rcx
push rax
xchg qword [rsp + 0x10], rdi
add rsp, 0x18
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007d440
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r15
mov qword [rsp + 8], r15
xchg r15, rbx
xchg rbp, rdx
mov qword [rsp + 0x10], rbp
xchg rbp, rdx
push rdi
sub rsp, 0x20
xchg rcx, r13
mov rdi, r13
xchg rcx, r13
lea rbx, [rdx + 0xe]
mov rdx, rbx
call fcn.14007a8d0
nop
xor eax, eax
mov byte [rbx + rax], 0x75
sub byte [rbx + rax], 0x66
add byte [rbx + rax], 0x5b
xor byte [rbx + rax], 0x5f
add byte [rbx + rax], 0x16
sub byte [rbx + rax], 0x2c
add byte [rbx + rax], 0x56
xor byte [rbx + rax], 0
sub byte [rbx + rax], 0x75
inc rax
cmp rax, 0x1a
jb 0x14007d473
xchg r9, rax
mov r9, rdi
xchg r9, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret
Function at 0x140080e00
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
xchg r13, rbp
mov qword [rsp + 0x18], r13
xchg rbp, r13
nop
mov qword [rsp - 8], rsi
sub rsp, 8
sub rsp, 0x20
cmp byte [r8 + 0x19], 0
mov rbx, r8
xchg rdi, rsi
mov rdi, rdx
xchg rdi, rsi
xchg rcx, rbp
mov rcx, rbp
xchg rcx, rbp
jne 0x140080ecb
mov qword [rsp + 0x30], rdi
nop dword [rax]
nop dword [rax + rax]
xchg r8, r15
mov r15, qword [rbx + 0x10]
xchg r8, r15
xchg rdx, rsi
mov rsi, rdx
xchg rsi, rdx
mov rcx, rbp
call fcn.140080e00
mov rdi, rbx
mov rbx, qword [rbx]
lea rcx, [rdi + 0x28]
call fcn.1400912f0
mov edx, 0x634a9f38
xor edx, 0x3b837793
xor edx, 0xe990072
xor edx, 0x396fc8ec
sub edx, 0x4b455a93
add edx, 0x396f7949
sub edx, 0x4fb4d287
sub edx, 0xdb46bcc
xchg rdx, rdi
mov rcx, rdx
xchg rdi, rdx
call fcn.1401fc608
cmp byte [rbx + 0x19], 0
je 0x140080e4f
xchg r13, rdi
mov r13, qword [rsp + 0x30]
xchg r13, rdi
mov rbx, qword [rsp + 0x38]
xchg r15, rbp
mov r15, qword [rsp + 0x40]
xchg r15, rbp
add rsp, 0x20
push rax
push rdx
push rax
push rcx
push rcx
push rcx
push rcx
xchg qword [rsp + 0x38], rsi
add rsp, 0x40
nop
add rsp, 8
jmp qword [rsp - 8]