joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140035c70
Capabilities:
Encode data using xor

Disassembly:
xchg r15, rbx
mov qword [rsp + 8], r15
xchg rbx, r15
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
mov rdi, rdx
xchg rcx, rbx
mov rcx, rbx
xchg rcx, rbx
test rdx, rdx
je 0x140035cd8
nop word [rax + rax]
mov byte [rbx], 0x3b
xor byte [rbx], 0xe
sub byte [rbx], 0x2b
add byte [rbx], 0x27
sub byte [rbx], 7
add byte [rbx], 0x3a
xor byte [rbx], 0x50
sub byte [rbx], 0x34
lea rcx, [rbx + 8]
xor edx, edx
call fcn.14004ba30
nop
neg rbx
add rbx, 0xfffffffffffffff0
neg rbx
sub rdi, 1
jne 0x140035ca4
mov rax, rbx
xchg r9, rbx
mov r9, qword [rsp + 0x30]
xchg r9, rbx
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]
Function at 0x14004c220
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
mov byte [rcx + rax + 6], 0x13
xor byte [rcx + rax + 6], 0x65
sub byte [rcx + rax + 6], 0x5e
add byte [rcx + rax + 6], 0x34
sub byte [rcx + rax + 6], 2
sub byte [rcx + rax + 6], 0x4a
inc rax
cmp rax, 8
jb 0x14004c222
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14004c260
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
xor eax, eax
mov byte [rcx + rax + 6], 0x73
xor byte [rcx + rax + 6], 0x43
add byte [rcx + rax + 6], 0x39
sub byte [rcx + rax + 6], 0xc
xor byte [rcx + rax + 6], 9
xor byte [rcx + rax + 6], 0x3a
xor byte [rcx + rax + 6], 0x2c
xor byte [rcx + rax + 6], 0x42
inc rax
cmp rax, 0xa
jb 0x14004c262
nop
add rsp, 8
jmp qword [rsp - 8]
Function at 0x140071170
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x40
lea r10, [rsp + 0x3d]
mov r8d, edx
mov rbx, rcx
test edx, edx
jns 0x140071219
neg r8d
nop dword [rax + rax]
dec r10
mov eax, 0x6ca5d067
sub eax, 0x3bddf8f2
xor eax, 0x15891a74
xor eax, 0x26f94732
add eax, 0x5258fc75
add eax, 0x76bc4625
mul r8d
shr edx, 2
shr edx, 1
movzx eax, dl
shl al, 1
shl al, 1
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
neg r8b
add r8b, 0xd0
neg r8b
mov byte [r10], r8b
mov r8d, edx
test edx, edx
jne 0x140071194
dec r10
mov byte [r10], 0x1f
add byte [r10], 0x16
add byte [r10], 0x3e
xor byte [r10], 0x6f
xor byte [r10], 0x5e
sub byte [r10], 0x16
add byte [r10], 1
add byte [r10], 0
jmp 0x14007126f
dec r10
mov eax, 0x6b3d6db
add eax, 0x3160fe3d
xor eax, 0x555ed4c9
sub eax, 0x8606677
sub eax, 0x20f802bd
sub eax, 0x4360bd35
add eax, 0x776aa310
add eax, 0x54d14e55
mul r8d
shr edx, 3
movzx eax, dl
shl al, 1
shl al, 1
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x61
sub r8b, 0x31
mov byte [r10], r8b
mov r8d, edx
test edx, edx
jne 0x140071219
lea r9, [rsp + 0x58]
xchg r10, r12
mov rdx, r12
xchg r10, r12
lea r8, [rsp + 0x3d]
mov rcx, rbx
call fcn.14002ff90
mov rax, rbx
add rsp, 0x40
nop
mov rbx, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]
Function at 0x140076380
Capabilities:
Encode data using xor

Disassembly:
xchg rdx, r9
mov rdx, rcx
xchg rdx, r9
mov r8d, 0x24c6fb6c
add r8d, 0x4e0555a8
xor r8d, 0x54e3ad9f
xor r8d, 0x902bea1
sub r8d, 0x18e2f829
add r8d, 0x2b3d0e3
xor r8d, 0xe701e51b
test rcx, rcx
je 0x140076495
cmp byte [rcx], 0
je 0x140076495
test rdx, rdx
jne 0x140076427
nop
movabs rdx, 0xffffffff73548d47
xor rdx, 0x1111e9be
add rdx, 0x1071413f
sub rdx, 0x1f1be93b
sub rdx, 0x17cd387
sub rdx, 0x2f4674d7
add rdx, 0x7fffffff
add rdx, 0x5d288b61
nop
inc rdx
cmp byte [rcx + rdx], 0
jne 0x140076411
test rdx, rdx
je 0x140076492
xor r10d, r10d
lea r11, [0x140002dd0]
nop dword [rax + rax]
movsx eax, byte [r9]
lea r9, [r9 + 1]
movzx ecx, r8b
inc r10d
push rcx
xor ecx, eax
push rcx
xor rcx, qword [rsp + 8]
shr rcx, 0x20
ror rax, 0x20
xor ecx, eax
ror rax, 0x20
shl rcx, 0x20
or rcx, qword [rsp]
add rsp, 0x10
shr r8d, 6
shr r8d, 1
shr r8d, 1
and ecx, 0x3ff
mov eax, r10d
xor r8d, dword [r11 + rcx*4]
xor r8d, 0x3948a593
cmp rax, rdx
jb 0x140076439
not r8d
mov eax, r8d
ret
Function at 0x14007b2b0
Capabilities:
Encode data using xor

Disassembly:
xchg rbp, rax
mov rbp, qword [rcx + 0x10]
xchg rbp, rax
xchg r13, rcx
mov rdx, r13
xchg r13, rcx
test rax, rax
jne 0x14007b2d5
xor r8d, r8d
mov eax, r8d
nop
add rsp, 8
jmp qword [rsp - 8]
cmp byte [rcx], 0
jne 0x14007b31e
xor r8d, r8d
cmp qword [rcx + 8], r8
jbe 0x14007b303
mov rax, qword [rdx + 0x10]
lea rcx, [rax + r8*2]
movzx eax, word [rdx + 2]
xor word [rcx], ax
inc r8
cmp r8, qword [rdx + 8]
jb 0x14007b2e3
xchg rsi, rax
mov rsi, qword [rdx + 0x10]
xchg rsi, rax
mov byte [rdx], 0x40
add byte [rdx], 0x24
sub byte [rdx], 0x30
sub byte [rdx], 0x1d
xor byte [rdx], 5
add byte [rdx], 0x65
xor byte [rdx], 0x76
add byte [rdx], 0x60
sub byte [rdx], 0x60
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007b330
Capabilities:
Encode data using xor

Disassembly:
mov rax, qword [rcx + 0x10]
mov rdx, rcx
test rax, rax
jne 0x14007b343
xor r8d, r8d
mov eax, r8d
ret
cmp byte [rcx], 0
jne 0x14007b388
xor r8d, r8d
cmp qword [rcx + 8], r8
jbe 0x14007b370
xchg r9, rcx
mov r9, qword [rdx + 0x10]
xchg rcx, r9
movzx eax, byte [rdx + 1]
xor byte [rcx + r8], al
inc r8
cmp r8, qword [rdx + 8]
jb 0x14007b351
mov rax, qword [rdx + 0x10]
mov byte [rdx], 0x78
add byte [rdx], 0
sub byte [rdx], 0x16
sub byte [rdx], 0x1a
sub byte [rdx], 0x16
add byte [rdx], 5
xor byte [rdx], 0x18
sub byte [rdx], 0x2e
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007b6c0
Capabilities:
Encode data using xor

Disassembly:
mov rax, qword [rcx + 0x10]
xchg rcx, rdx
mov rcx, rdx
xchg rdx, rcx
test rax, rax
jne 0x14007b6db
nop
add rsp, 8
jmp qword [rsp - 8]
cmp byte [rcx], 0
jne 0x14007b729
xor r8d, r8d
cmp qword [rcx + 8], r8
jbe 0x14007b70e
nop dword [rax + rax]
xchg r12, rax
mov r12, qword [rdx + 0x10]
xchg r12, rax
lea rcx, [rax + r8*2]
movzx eax, word [rdx + 2]
xor word [rcx], ax
inc r8
cmp r8, qword [rdx + 8]
jb 0x14007b6ee
mov rax, qword [rdx + 0x10]
mov byte [rdx], 0x63
sub byte [rdx], 0x3f
add byte [rdx], 0x45
xor byte [rdx], 0x50
xor byte [rdx], 6
sub byte [rdx], 3
sub byte [rdx], 0xa
xor byte [rdx], 0x5b
sub byte [rdx], 0x68
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007bf50
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r9
mov qword [rsp + 8], r9
xchg r9, rbx
mov qword [rsp + 0x10], rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg rdi, rcx
mov rcx, rdi
xchg rdi, rcx
lea rbx, [rdx + 4]
mov rdx, rbx
call fcn.14007ab60
nop
xor eax, eax
mov byte [rbx + rax], 9
xor byte [rbx + rax], 0x7e
xor byte [rbx + rax], 0x1b
sub byte [rbx + rax], 0x63
xor byte [rbx + rax], 0x5a
sub byte [rbx + rax], 0x39
add byte [rbx + rax], 0xe
xor byte [rbx + rax], 0x28
inc rax
cmp rax, 6
jb 0x14007bf85
mov rax, rdi
xchg r10, rbx
mov r10, qword [rsp + 0x30]
xchg rbx, r10
add rsp, 0x20
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
add rsp, 8
jmp qword [rsp - 8]
Function at 0x14007bfe0
Capabilities:
Encode data using xor

Disassembly:
xchg r14, rbx
mov qword [rsp + 8], r14
xchg r14, rbx
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg rsi, rdi
mov rsi, rcx
xchg rsi, rdi
lea rbx, [rdx + 6]
xchg rbx, rdi
mov rdx, rdi
xchg rdi, rbx
call fcn.14007ab60
nop
xor eax, eax
mov byte [rbx + rax], 0x6e
sub byte [rbx + rax], 0x17
sub byte [rbx + rax], 0x28
xor byte [rbx + rax], 0x5b
xor byte [rbx + rax], 0x52
xor byte [rbx + rax], 0x10
add byte [rbx + rax], 0x39
sub byte [rbx + rax], 0x6f
inc rax
cmp rax, 8
jb 0x14007c013
xchg rcx, rax
mov rcx, rdi
xchg rcx, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c060
Capabilities:
Encode data using xor

Disassembly:
xchg r13, rbx
mov qword [rsp + 8], r13
xchg rbx, r13
xchg rdx, rcx
mov qword [rsp + 0x10], rcx
xchg rcx, rdx
push rdi
sub rsp, 0x20
xchg rdi, r13
mov r13, rcx
xchg r13, rdi
lea rbx, [rdx + 6]
xchg rdx, rbx
mov rbx, rdx
xchg rdx, rbx
call fcn.14007ab60
nop
xor eax, eax
mov byte [rbx + rax], 0x25
add byte [rbx + rax], 0x17
add byte [rbx + rax], 0x31
sub byte [rbx + rax], 0x25
xor byte [rbx + rax], 0x62
xor byte [rbx + rax], 0x3e
add byte [rbx + rax], 0x52
xor byte [rbx + rax], 0x56
sub byte [rbx + rax], 0x30
inc rax
cmp rax, 0xa
jb 0x14007c099
mov rax, rdi
xchg rdi, rbx
mov rdi, qword [rsp + 0x30]
xchg rdi, rbx
add rsp, 0x20
push rbx
push rcx
push rax
push rax
push rcx
push rcx
push rdx
push rbx
xchg qword [rsp + 0x40], rdi
add rsp, 0x48
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c180
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
nop
push 0x4ea22ddb
mov qword [rsp], rdi
sub rsp, 0x20
xchg r8, rcx
mov rdi, r8
xchg r8, rcx
lea rbx, [rdx + 0xa]
mov rdx, rbx
call fcn.14007ab60
nop
xor eax, eax
mov byte [rbx + rax], 0xa
xor byte [rbx + rax], 0x2a
add byte [rbx + rax], 2
xor byte [rbx + rax], 0x2f
xor byte [rbx + rax], 9
add byte [rbx + rax], 0x2e
xor byte [rbx + rax], 0x32
inc rax
cmp rax, 0x10
jb 0x14007c1b0
xchg rdi, r12
mov rax, r12
xchg r12, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rcx
push rcx
push rax
xchg qword [rsp + 0x18], rdi
pop rax
pop rcx
pop rcx
add rsp, 8
ret

Function at 0x14007c200
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
xchg rbx, r12
mov qword [rsp + 8], r12
xchg rbx, r12
xchg rdx, r8
mov qword [rsp + 0x10], r8
xchg r8, rdx
nop
push 0x644a41dd
mov qword [rsp], rdi
sub rsp, 0x20
xchg r15, rcx
mov rdi, r15
xchg rcx, r15
lea rbx, [rdx + 0xa]
xchg r9, rbx
mov rdx, r9
xchg rbx, r9
call fcn.14007ab60
nop
xor eax, eax
mov byte [rbx + rax], 1
xor byte [rbx + rax], 0x2b
xor byte [rbx + rax], 0x42
xor byte [rbx + rax], 0x34
add byte [rbx + rax], 0x1e
sub byte [rbx + rax], 0x7a
inc rax
cmp rax, 0x12
jb 0x14007c242
xchg r8, rax
mov r8, rdi
xchg r8, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rcx
push rbx
push rdx
push rax
push rcx
push rdx
xchg qword [rsp + 0x30], rdi
pop rdx
pop rcx
pop rax
pop rdx
pop rbx
pop rcx
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]
Function at 0x14007c2a0
Capabilities:
Encode data using xor

Disassembly:
xchg r15, rbx
mov qword [rsp + 8], r15
xchg r15, rbx
xchg rdx, r15
mov qword [rsp + 0x10], r15
xchg r15, rdx
nop
push r11
mov qword [rsp], rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x10]
mov rdx, rbx
call fcn.14007ab60
nop
xor eax, eax
mov byte [rbx + rax], 0x68
sub byte [rbx + rax], 0x40
xor byte [rbx + rax], 0x14
add byte [rbx + rax], 0x2f
xor byte [rbx + rax], 0x79
xor byte [rbx + rax], 0x6a
sub byte [rbx + rax], 0x6f
xor byte [rbx + rax], 0x30
sub byte [rbx + rax], 0x39
inc rax
cmp rax, 0x1e
jb 0x14007c2d3
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
ret

Function at 0x14007c320
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r15
mov qword [rsp + 8], r15
xchg r15, rbx
mov qword [rsp + 0x10], rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x12]
mov rdx, rbx
call fcn.14007ab60
nop
xor eax, eax
mov byte [rbx + rax], 0x18
add byte [rbx + rax], 0x21
sub byte [rbx + rax], 0x1b
sub byte [rbx + rax], 3
xor byte [rbx + rax], 0x57
sub byte [rbx + rax], 0x4c
inc rax
cmp rax, 0x20
jb 0x14007c34f
xchg rbx, rdi
mov rax, rbx
xchg rbx, rdi
xchg r14, rbx
mov r14, qword [rsp + 0x30]
xchg r14, rbx
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c3a0
Capabilities:
Encode data using xor

Disassembly:
xchg rcx, rbx
mov qword [rsp + 8], rcx
xchg rbx, rcx
xchg rdx, rdi
mov qword [rsp + 0x10], rdi
xchg rdx, rdi
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg rbp, rdi
mov rbp, rcx
xchg rbp, rdi
lea rbx, [rdx + 0x12]
mov rdx, rbx
call fcn.14007ab60
nop
xor eax, eax
mov byte [rbx + rax], 0x3d
xor byte [rbx + rax], 0x3b
add byte [rbx + rax], 0x68
xor byte [rbx + rax], 0x30
xor byte [rbx + rax], 0x63
xor byte [rbx + rax], 0x3d
inc rax
cmp rax, 0x22
jb 0x14007c3db
xchg rbp, rax
mov rbp, rdi
xchg rbp, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c420
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg rsi, rcx
mov rdi, rsi
xchg rsi, rcx
lea rbx, [rdx + 0x14]
xchg rbx, rdx
mov rbx, rdx
xchg rbx, rdx
call fcn.14007ab60
nop
xor eax, eax
mov byte [rbx + rax], 0x45
sub byte [rbx + rax], 0x29
add byte [rbx + rax], 0x32
sub byte [rbx + rax], 0x17
add byte [rbx + rax], 0x47
sub byte [rbx + rax], 0x4e
sub byte [rbx + rax], 0xf
xor byte [rbx + rax], 0x21
inc rax
cmp rax, 0x24
jb 0x14007c455
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rax
push rcx
push rcx
push rdx
push rdx
push rbx
xchg qword [rsp + 0x30], rdi
pop rbx
pop rdx
pop rdx
pop rcx
pop rcx
pop rax
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]
Function at 0x14007c4b0
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, rdx
mov qword [rsp + 8], rdx
xchg rdx, rbx
xchg r11, rdx
mov qword [rsp + 0x10], r11
xchg rdx, r11
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x14]
xchg rdx, rbx
mov rbx, rdx
xchg rbx, rdx
call fcn.14007ab60
nop
xor eax, eax
mov byte [rbx + rax], 0x23
sub byte [rbx + rax], 0x21
add byte [rbx + rax], 0x4f
add byte [rbx + rax], 0x10
add byte [rbx + rax], 0xc
xor byte [rbx + rax], 0x41
xor byte [rbx + rax], 0
xor byte [rbx + rax], 0x2c
inc rax
cmp rax, 0x26
jb 0x14007c4ec
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
xchg rbx, rcx
mov rcx, qword [rsp + 0x30]
xchg rcx, rbx
add rsp, 0x20
push rcx
push rcx
xchg qword [rsp + 0x10], rdi
add rsp, 0x18
ret

Function at 0x14007c540
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg rdx, r13
mov qword [rsp + 0x10], r13
xchg r13, rdx
push rdi
sub rsp, 0x20
xchg r9, rdi
mov r9, rcx
xchg r9, rdi
lea rbx, [rdx + 0x16]
mov rdx, rbx
call fcn.14007ab60
nop
xor eax, eax
mov byte [rbx + rax], 8
add byte [rbx + rax], 0x3c
xor byte [rbx + rax], 0x2b
xor byte [rbx + rax], 0x6a
add byte [rbx + rax], 0x20
xor byte [rbx + rax], 0
xor byte [rbx + rax], 0x25
inc rax
cmp rax, 0x28
jb 0x14007c56d
xchg r11, rax
mov r11, rdi
xchg r11, rax
xchg rbx, rsi
mov rsi, qword [rsp + 0x30]
xchg rsi, rbx
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
ret

Function at 0x14007c5c0
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
xchg r11, rbx
mov qword [rsp + 8], r11
xchg rbx, r11
xchg rdx, rsi
mov qword [rsp + 0x10], rsi
xchg rdx, rsi
push rdi
sub rsp, 0x20
xchg rdi, r9
mov r9, rcx
xchg rdi, r9
lea rbx, [rdx + 0x16]
xchg rdx, rbx
mov rbx, rdx
xchg rdx, rbx
call fcn.14007ab60
nop
xor eax, eax
mov byte [rbx + rax], 0x3c
xor byte [rbx + rax], 0x11
xor byte [rbx + rax], 0x29
xor byte [rbx + rax], 1
add byte [rbx + rax], 0x1d
sub byte [rbx + rax], 0x22
inc rax
cmp rax, 0x2a
jb 0x14007c5f9
xchg rdi, r14
mov rax, r14
xchg r14, rdi
xchg r12, rbx
mov r12, qword [rsp + 0x30]
xchg rbx, r12
add rsp, 0x20
push rax
push rcx
push rbx
push rdx
xchg qword [rsp + 0x20], rdi
add rsp, 0x28
ret

Function at 0x14007c640
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg rdi, rcx
mov rcx, rdi
xchg rcx, rdi
lea rbx, [rdx + 0x18]
mov rdx, rbx
call fcn.14007ab60
nop
xor eax, eax
mov byte [rbx + rax], 0x25
add byte [rbx + rax], 0x37
xor byte [rbx + rax], 0x78
add byte [rbx + rax], 0x13
sub byte [rbx + rax], 0x29
xor byte [rbx + rax], 0x22
xor byte [rbx + rax], 0x2c
inc rax
cmp rax, 0x2e
jb 0x14007c667
xchg rcx, rdi
mov rax, rcx
xchg rdi, rcx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret
Function at 0x14007c6b0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x1a]
xchg rbx, r11
mov rdx, r11
xchg r11, rbx
call fcn.14007ab60
nop
xor eax, eax
mov byte [rbx + rax], 0
xor byte [rbx + rax], 0x1b
xor byte [rbx + rax], 0x7c
sub byte [rbx + rax], 0x22
sub byte [rbx + rax], 0x35
add byte [rbx + rax], 0x48
xor byte [rbx + rax], 0x1f
xor byte [rbx + rax], 0x2f
sub byte [rbx + rax], 0x68
inc rax
cmp rax, 0x32
jb 0x14007c6df
xchg r13, rax
mov r13, rdi
xchg r13, rax
xchg rdi, rbx
mov rdi, qword [rsp + 0x30]
xchg rdi, rbx
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c740
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg rcx, r10
mov rdi, r10
xchg r10, rcx
lea rbx, [rdx + 0x1c]
xchg rsi, rdx
mov rsi, rbx
xchg rsi, rdx
call fcn.14007ab60
nop
xor eax, eax
mov byte [rbx + rax], 0x6f
sub byte [rbx + rax], 0x12
sub byte [rbx + rax], 0x21
add byte [rbx + rax], 0xa
xor byte [rbx + rax], 0x73
sub byte [rbx + rax], 0x35
inc rax
cmp rax, 0x34
jb 0x14007c76d
mov rax, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rdx
push rcx
push rdx
push rax
xchg qword [rsp + 0x20], rdi
pop rax
pop rdx
pop rcx
pop rdx
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c860
Capabilities:
Encode data using xor

Disassembly:
xchg r10, rbx
mov qword [rsp + 8], r10
xchg r10, rbx
xchg rdx, r13
mov qword [rsp + 0x10], r13
xchg r13, rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg rdi, rcx
mov rcx, rdi
xchg rcx, rdi
lea rbx, [rdx + 0x1e]
xchg rdx, rcx
mov rcx, rbx
xchg rcx, rdx
call fcn.14007ab60
nop
xor eax, eax
mov byte [rbx + rax], 0x5e
add byte [rbx + rax], 0xc
xor byte [rbx + rax], 0x38
xor byte [rbx + rax], 0x7f
sub byte [rbx + rax], 0x24
xor byte [rbx + rax], 0x23
sub byte [rbx + rax], 0x10
sub byte [rbx + rax], 0x1a
inc rax
cmp rax, 0x38
jb 0x14007c8a1
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rbx
push rcx
push rbx
push rax
xchg qword [rsp + 0x20], rdi
pop rax
pop rbx
pop rcx
pop rbx
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c900
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r10
mov qword [rsp + 8], r10
xchg rbx, r10
xchg rcx, rdx
mov qword [rsp + 0x10], rcx
xchg rcx, rdx
nop
push r14
mov qword [rsp], rdi
sub rsp, 0x20
xchg rcx, r15
mov rdi, r15
xchg rcx, r15
lea rbx, [rdx + 0x20]
xchg rbx, rbp
mov rdx, rbp
xchg rbp, rbx
call fcn.14007ab60
nop
xor eax, eax
mov byte [rbx + rax], 0x6a
sub byte [rbx + rax], 0x2a
xor byte [rbx + rax], 0x1c
xor byte [rbx + rax], 0x29
sub byte [rbx + rax], 0xc
sub byte [rbx + rax], 0x14
sub byte [rbx + rax], 0x42
sub byte [rbx + rax], 0x13
inc rax
cmp rax, 0x3e
jb 0x14007c93f
xchg rdi, r10
mov rax, r10
xchg rdi, r10
xchg rbx, rdi
mov rdi, qword [rsp + 0x30]
xchg rdi, rbx
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
ret
Function at 0x14007c990
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg rbx, rcx
mov rdi, rbx
xchg rbx, rcx
lea rbx, [rdx + 0x22]
xchg rbx, r8
mov rdx, r8
xchg r8, rbx
call fcn.14007ab60
nop
xor eax, eax
mov byte [rbx + rax], 0x38
sub byte [rbx + rax], 0x21
add byte [rbx + rax], 0x34
add byte [rbx + rax], 8
xor byte [rbx + rax], 0x42
sub byte [rbx + rax], 7
add byte [rbx + rax], 0x6a
sub byte [rbx + rax], 0x59
xor byte [rbx + rax], 0x1b
inc rax
cmp rax, 0x40
jb 0x14007c9bd
xchg rbp, rdi
mov rax, rbp
xchg rbp, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007ca10
Capabilities:
Encode data using xor

Disassembly:
xchg r10, rbx
mov qword [rsp + 8], r10
xchg r10, rbx
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg r13, rdi
mov r13, rcx
xchg r13, rdi
lea rbx, [rdx + 0x22]
xchg rbx, rdx
mov rbx, rdx
xchg rdx, rbx
call fcn.14007ab60
nop
xor eax, eax
mov byte [rbx + rax], 0x4d
xor byte [rbx + rax], 0x27
xor byte [rbx + rax], 0x49
sub byte [rbx + rax], 0x1f
add byte [rbx + rax], 0x4f
xor byte [rbx + rax], 0x3d
sub byte [rbx + rax], 0x6e
inc rax
cmp rax, 0x42
jb 0x14007ca43
xchg rdx, rdi
mov rax, rdx
xchg rdx, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007ca90
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg rcx, r9
mov rdi, r9
xchg rcx, r9
lea rbx, [rdx + 0x24]
xchg rdx, r11
mov r11, rbx
xchg r11, rdx
call fcn.14007ab60
nop
xor eax, eax
mov byte [rbx + rax], 0x19
xor byte [rbx + rax], 0x3a
xor byte [rbx + rax], 0x5f
sub byte [rbx + rax], 4
sub byte [rbx + rax], 0x55
xor byte [rbx + rax], 0x22
add byte [rbx + rax], 0x6e
xor byte [rbx + rax], 0x6f
inc rax
cmp rax, 0x46
jb 0x14007cabd
mov rax, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007cb10
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg rdx, r11
mov qword [rsp + 0x10], r11
xchg rdx, r11
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg r11, rcx
mov rdi, r11
xchg r11, rcx
lea rbx, [rdx + 0x28]
mov rdx, rbx
call fcn.14007ab60
nop
xor eax, eax
mov byte [rbx + rax], 0x6a
sub byte [rbx + rax], 0x4f
sub byte [rbx + rax], 2
add byte [rbx + rax], 0x2a
add byte [rbx + rax], 0x16
xor byte [rbx + rax], 0x2f
sub byte [rbx + rax], 0x52
add byte [rbx + rax], 0xe
sub byte [rbx + rax], 0x32
inc rax
cmp rax, 0x4c
jb 0x14007cb45
xchg rsi, rdi
mov rax, rsi
xchg rdi, rsi
xchg rbx, rdx
mov rdx, qword [rsp + 0x30]
xchg rbx, rdx
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
ret
Function at 0x14007cba0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x2a]
mov rdx, rbx
call fcn.14007ab60
nop
xor eax, eax
mov byte [rbx + rax], 0x59
sub byte [rbx + rax], 0x3a
xor byte [rbx + rax], 0x6e
sub byte [rbx + rax], 0x24
xor byte [rbx + rax], 1
sub byte [rbx + rax], 0x4c
inc rax
cmp rax, 0x50
jb 0x14007cbc9
xchg r8, rdi
mov rax, r8
xchg rdi, r8
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rax
push rax
xchg qword [rsp + 0x10], rdi
pop rax
pop rax
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007cc20
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, rcx
mov qword [rsp + 8], rcx
xchg rcx, rbx
mov qword [rsp + 0x10], rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg rcx, r13
mov rdi, r13
xchg r13, rcx
lea rbx, [rdx + 0x2a]
xchg rbp, rdx
mov rbp, rbx
xchg rdx, rbp
call fcn.14007ab60
nop
xor eax, eax
mov byte [rbx + rax], 0x2d
sub byte [rbx + rax], 0x1c
xor byte [rbx + rax], 0xe
xor byte [rbx + rax], 0x1f
add byte [rbx + rax], 0x2c
sub byte [rbx + rax], 0x16
xor byte [rbx + rax], 0x21
sub byte [rbx + rax], 0x37
inc rax
cmp rax, 0x52
jb 0x14007cc5c
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rbx
push rdx
push rcx
push rcx
push rcx
xchg qword [rsp + 0x28], rdi
pop rcx
pop rcx
pop rcx
pop rdx
pop rbx
add rsp, 8
ret

Function at 0x14007ccb0
Capabilities:
Encode data using xor

Disassembly:
xchg r12, rbx
mov qword [rsp + 8], r12
xchg r12, rbx
xchg rdx, r15
mov qword [rsp + 0x10], r15
xchg rdx, r15
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg rdi, rcx
mov rcx, rdi
xchg rdi, rcx
lea rbx, [rdx + 0x2c]
mov rdx, rbx
call fcn.14007ab60
nop
xor eax, eax
mov byte [rbx + rax], 6
add byte [rbx + rax], 0x69
xor byte [rbx + rax], 0x7c
add byte [rbx + rax], 0x62
sub byte [rbx + rax], 0x4d
xor byte [rbx + rax], 0x3e
add byte [rbx + rax], 0x34
sub byte [rbx + rax], 0x1e
sub byte [rbx + rax], 0x2c
inc rax
cmp rax, 0x54
jb 0x14007ccec
mov rax, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007cd40
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, rbp
mov qword [rsp + 8], rbp
xchg rbx, rbp
xchg r8, rdx
mov qword [rsp + 0x10], r8
xchg rdx, r8
push rdi
sub rsp, 0x20
xchg r8, rcx
mov rdi, r8
xchg r8, rcx
lea rbx, [rdx + 0x2e]
xchg r10, rdx
mov r10, rbx
xchg r10, rdx
call fcn.14007ab60
nop
xor eax, eax
mov byte [rbx + rax], 0x38
add byte [rbx + rax], 0
xor byte [rbx + rax], 0x33
add byte [rbx + rax], 0x2f
xor byte [rbx + rax], 0x53
sub byte [rbx + rax], 0x29
xor byte [rbx + rax], 0x36
xor byte [rbx + rax], 0x1d
sub byte [rbx + rax], 0x6b
inc rax
cmp rax, 0x58
jb 0x14007cd79
xchg r11, rdi
mov rax, r11
xchg rdi, r11
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
ret