joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14004bfc0
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
mov byte [rcx + rax + 6], 0x3e
sub byte [rcx + rax + 6], 0xe
add byte [rcx + rax + 6], 0x37
sub byte [rcx + rax + 6], 0xc
add byte [rcx + rax + 6], 0xa
xor byte [rcx + rax + 6], 0x3b
xor byte [rcx + rax + 6], 0x73
xor byte [rcx + rax + 6], 0x2d
inc rax
cmp rax, 8
jb 0x14004bfc2
ret

Function at 0x14004c000
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
mov byte [rcx + rax + 6], 0x54
sub byte [rcx + rax + 6], 0x38
sub byte [rcx + rax + 6], 9
xor byte [rcx + rax + 6], 0x5d
add byte [rcx + rax + 6], 0x10
xor byte [rcx + rax + 6], 0x53
sub byte [rcx + rax + 6], 0xd
inc rax
cmp rax, 0xa
jb 0x14004c002
nop
add rsp, 8
jmp qword [rsp - 8]
Function at 0x140076110
Capabilities:
Encode data using xor

Disassembly:
xchg r9, rbp
mov rbp, rcx
xchg r9, rbp
mov r8d, 0x1e192e33
xor r8d, 0x593f3925
xor r8d, 0x35e2933a
xor r8d, 0x3b343060
sub r8d, 0x22e1eab6
add r8d, 0xd8f13669
test rcx, rcx
je 0x14007622c
cmp byte [rcx], 0
je 0x14007622c
test rdx, rdx
jne 0x1400761be
nop
movabs rdx, 0xffffffff183bfea6
add rdx, 0x378d94c7
sub rdx, 0x4671414f
add rdx, 0x66800caf
xor rdx, 0x7da57b28
sub rdx, 0xbc2e2bf
xor rdx, 0xd5fadc0
add rdx, 0x377a233b
add rdx, 0x7fffffff
xor rdx, 0x3c9feddf
nop
inc rdx
cmp byte [rcx + rdx], 0
jne 0x1400761a8
test rdx, rdx
je 0x140076229
xor r10d, r10d
lea r11, [0x140002dd0]
nop dword [rax + rax]
movsx eax, byte [r9]
lea r9, [r9 + 1]
movzx ecx, r8b
inc r10d
push rcx
xor ecx, eax
push rcx
xor rcx, qword [rsp + 8]
shr rcx, 0x20
ror rax, 0x20
xor ecx, eax
ror rax, 0x20
shl rcx, 0x20
xor rcx, qword [rsp]
add rsp, 0x10
shr r8d, 6
shr r8d, 1
shr r8d, 1
and ecx, 0x3ff
mov eax, r10d
xor r8d, dword [r11 + rcx*4]
xor r8d, 0x3948a593
cmp rax, rdx
jb 0x1400761d0
not r8d
mov eax, r8d
ret
Function at 0x14007afb0
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, rax
mov rbx, qword [rcx + 0x10]
xchg rbx, rax
mov rdx, rcx
test rax, rax
jne 0x14007afcf
xor r8d, r8d
mov eax, r8d
nop
add rsp, 8
jmp qword [rsp - 8]
cmp byte [rcx], 0
jne 0x14007b00f
xor r8d, r8d
cmp qword [rcx + 8], r8
jbe 0x14007affd
mov rax, qword [rdx + 0x10]
lea rcx, [rax + r8*2]
movzx eax, word [rdx + 2]
xor word [rcx], ax
inc r8
cmp r8, qword [rdx + 8]
jb 0x14007afdd
xchg r15, rax
mov r15, qword [rdx + 0x10]
xchg r15, rax
mov byte [rdx], 0xe
sub byte [rdx], 0xe
add byte [rdx], 0x3d
xor byte [rdx], 0x5f
xor byte [rdx], 0x4f
sub byte [rdx], 0x2c
ret

Function at 0x14007b010
Capabilities:
Encode data using xor

Disassembly:
xchg r12, rax
mov r12, qword [rcx + 0x10]
xchg r12, rax
xchg rcx, rdi
mov rdx, rdi
xchg rdi, rcx
test rax, rax
jne 0x14007b035
xor r8d, r8d
mov eax, r8d
nop
add rsp, 8
jmp qword [rsp - 8]
cmp byte [rcx], 0
jne 0x14007b077
xor r8d, r8d
cmp qword [rcx + 8], r8
jbe 0x14007b062
xchg r9, rcx
mov r9, qword [rdx + 0x10]
xchg rcx, r9
movzx eax, byte [rdx + 1]
xor byte [rcx + r8], al
inc r8
cmp r8, qword [rdx + 8]
jb 0x14007b043
mov rax, qword [rdx + 0x10]
mov byte [rdx], 0x3d
add byte [rdx], 5
add byte [rdx], 0x3a
sub byte [rdx], 0x7a
add byte [rdx], 0x50
add byte [rdx], 0x24
xor byte [rdx], 0x77
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007b390
Capabilities:
Encode data using xor

Disassembly:
xchg r9, rax
mov r9, qword [rcx + 0x10]
xchg r9, rax
xchg rdx, rcx
mov rcx, rdx
xchg rdx, rcx
test rax, rax
jne 0x14007b3af
nop
add rsp, 8
jmp qword [rsp - 8]
cmp byte [rcx], 0
jne 0x14007b3f4
xor r8d, r8d
cmp qword [rcx + 8], r8
jbe 0x14007b3e2
nop dword [rax + rax]
xchg r14, rax
mov r14, qword [rdx + 0x10]
xchg r14, rax
lea rcx, [rax + r8*2]
movzx eax, word [rdx + 2]
xor word [rcx], ax
inc r8
cmp r8, qword [rdx + 8]
jb 0x14007b3c2
mov rax, qword [rdx + 0x10]
mov byte [rdx], 0x78
sub byte [rdx], 0x5e
xor byte [rdx], 0x55
sub byte [rdx], 0x3b
xor byte [rdx], 0x39
xor byte [rdx], 0x2c
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007bcd0
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r15
mov qword [rsp + 8], r15
xchg rbx, r15
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg r13, rdi
mov r13, rcx
xchg rdi, r13
lea rbx, [rdx + 6]
xchg rdx, rsi
mov rsi, rbx
xchg rsi, rdx
call fcn.14007a840
nop
xor eax, eax
mov byte [rbx + rax], 0x1c
xor byte [rbx + rax], 0x18
add byte [rbx + rax], 0x2a
sub byte [rbx + rax], 0x28
add byte [rbx + rax], 8
add byte [rbx + rax], 0x15
add byte [rbx + rax], 0x5b
sub byte [rbx + rax], 0x7e
inc rax
cmp rax, 8
jb 0x14007bd03
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
xchg rdx, rbx
mov rdx, qword [rsp + 0x30]
xchg rdx, rbx
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
nop
add rsp, 8
jmp qword [rsp - 8]
Function at 0x14007bd60
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 6]
mov rdx, rbx
call fcn.14007a840
nop
xor eax, eax
mov byte [rbx + rax], 0x78
sub byte [rbx + rax], 0x69
add byte [rbx + rax], 8
add byte [rbx + rax], 0x12
xor byte [rbx + rax], 0x46
xor byte [rbx + rax], 0x66
xor byte [rbx + rax], 9
inc rax
cmp rax, 0xa
jb 0x14007bd89
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007bdd0
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, rdi
mov qword [rsp + 8], rdi
xchg rdi, rbx
mov qword [rsp + 0x10], rdx
nop
push 0x111fa638
mov qword [rsp], rdi
sub rsp, 0x20
xchg rdi, rsi
mov rsi, rcx
xchg rdi, rsi
lea rbx, [rdx + 8]
xchg rbx, rcx
mov rdx, rcx
xchg rcx, rbx
call fcn.14007a840
nop
xor eax, eax
mov byte [rbx + rax], 0x6a
sub byte [rbx + rax], 0x48
add byte [rbx + rax], 0x21
add byte [rbx + rax], 0x3b
xor byte [rbx + rax], 0x70
xor byte [rbx + rax], 0xe
inc rax
cmp rax, 0xe
jb 0x14007be0c
xchg rdi, r10
mov rax, r10
xchg r10, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rdx
push rax
xchg qword [rsp + 0x10], rdi
add rsp, 0x18
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007be60
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r13
mov qword [rsp + 8], r13
xchg rbx, r13
mov qword [rsp + 0x10], rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0xa]
xchg rdx, rbx
mov rbx, rdx
xchg rdx, rbx
call fcn.14007a840
nop
xor eax, eax
mov byte [rbx + rax], 0x1f
add byte [rbx + rax], 0x4f
xor byte [rbx + rax], 0x42
add byte [rbx + rax], 0x17
xor byte [rbx + rax], 0x69
add byte [rbx + rax], 0x35
xor byte [rbx + rax], 0x30
sub byte [rbx + rax], 0x6f
inc rax
cmp rax, 0x10
jb 0x14007be95
xchg rdx, rax
mov rdx, rdi
xchg rdx, rax
xchg rbp, rbx
mov rbp, qword [rsp + 0x30]
xchg rbp, rbx
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007bef0
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r12
mov qword [rsp + 8], r12
xchg r12, rbx
xchg rdx, r13
mov qword [rsp + 0x10], r13
xchg r13, rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg rcx, r10
mov rdi, r10
xchg rcx, r10
lea rbx, [rdx + 0xa]
mov rdx, rbx
call fcn.14007a840
nop
xor eax, eax
mov byte [rbx + rax], 0x4a
xor byte [rbx + rax], 0x11
sub byte [rbx + rax], 0x42
xor byte [rbx + rax], 0x41
sub byte [rbx + rax], 1
add byte [rbx + rax], 0x24
sub byte [rbx + rax], 0x43
sub byte [rbx + rax], 0x38
inc rax
cmp rax, 0x12
jb 0x14007bf2b
xchg rdi, rcx
mov rax, rcx
xchg rcx, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
ret
Function at 0x14007bf70
Capabilities:
Encode data using xor

Disassembly:
xchg r8, rbx
mov qword [rsp + 8], r8
xchg r8, rbx
xchg rdx, r13
mov qword [rsp + 0x10], r13
xchg r13, rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg r12, rcx
mov rdi, r12
xchg rcx, r12
lea rbx, [rdx + 0x10]
xchg rbx, rdx
mov rbx, rdx
xchg rbx, rdx
call fcn.14007a840
nop
xor eax, eax
mov byte [rbx + rax], SHCreateMemStream
xor byte [rbx + rax], 0xd
add byte [rbx + rax], 0x5b
sub byte [rbx + rax], 0x2c
sub byte [rbx + rax], 0xc
sub byte [rbx + rax], 0x10
add byte [rbx + rax], 0x3b
sub byte [rbx + rax], 0x54
inc rax
cmp rax, 0x1e
jb 0x14007bfb1
xchg rdi, r9
mov rax, r9
xchg r9, rdi
xchg rbx, r10
mov r10, qword [rsp + 0x30]
xchg rbx, r10
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c010
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r8
mov qword [rsp + 8], r8
xchg rbx, r8
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg rcx, rdi
mov rcx, rdi
xchg rcx, rdi
lea rbx, [rdx + 0x12]
xchg rdx, rbx
mov rbx, rdx
xchg rbx, rdx
call fcn.14007a840
nop
xor eax, eax
mov byte [rbx + rax], 0x16
add byte [rbx + rax], 0x59
xor byte [rbx + rax], 0x61
add byte [rbx + rax], 0x46
sub byte [rbx + rax], 0x1c
xor byte [rbx + rax], 0x78
xor byte [rbx + rax], 0x79
xor byte [rbx + rax], 0x13
sub byte [rbx + rax], 0x2a
inc rax
cmp rax, 0x20
jb 0x14007c043
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
xchg rbx, r8
mov r8, qword [rsp + 0x30]
xchg rbx, r8
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c0a0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x12]
xchg rbx, rdx
mov rbx, rdx
xchg rbx, rdx
call fcn.14007a840
nop
xor eax, eax
mov byte [rbx + rax], 0x36
xor byte [rbx + rax], 0x1f
add byte [rbx + rax], 1
sub byte [rbx + rax], 0xc
sub byte [rbx + rax], 0x1a
add byte [rbx + rax], 1
add byte [rbx + rax], 0x17
xor byte [rbx + rax], 0x1c
inc rax
cmp rax, 0x22
jb 0x14007c0d0
xchg r11, rax
mov r11, rdi
xchg r11, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
ret

Function at 0x14007c120
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x14]
mov rdx, rbx
call fcn.14007a840
nop
xor eax, eax
mov byte [rbx + rax], 0x14
add byte [rbx + rax], 0x41
add byte [rbx + rax], 8
add byte [rbx + rax], 0x20
xor byte [rbx + rax], 0x2f
sub byte [rbx + rax], 0x52
inc rax
cmp rax, 0x24
jb 0x14007c149
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rax
xchg qword [rsp + 8], rdi
add rsp, 0x10
nop
add rsp, 8
jmp qword [rsp - 8]
Function at 0x14007c190
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg r8, rdx
mov qword [rsp + 0x10], r8
xchg r8, rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg rbp, rcx
mov rdi, rbp
xchg rcx, rbp
lea rbx, [rdx + 0x14]
mov rdx, rbx
call fcn.14007a840
nop
xor eax, eax
mov byte [rbx + rax], 0x7e
xor byte [rbx + rax], 0x1e
add byte [rbx + rax], 9
sub byte [rbx + rax], 0x43
add byte [rbx + rax], 3
xor byte [rbx + rax], 0x69
add byte [rbx + rax], 0x18
sub byte [rbx + rax], 0x58
inc rax
cmp rax, 0x26
jb 0x14007c1c6
xchg rsi, rdi
mov rax, rsi
xchg rsi, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c220
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg rdi, rcx
mov rcx, rdi
xchg rdi, rcx
lea rbx, [rdx + 0x16]
xchg rcx, rdx
mov rcx, rbx
xchg rcx, rdx
call fcn.14007a840
nop
xor eax, eax
mov byte [rbx + rax], 0x46
add byte [rbx + rax], 2
sub byte [rbx + rax], 0x42
sub byte [rbx + rax], 1
add byte [rbx + rax], 0x59
sub byte [rbx + rax], 0xe
xor byte [rbx + rax], 0x53
add byte [rbx + rax], 0x5b
sub byte [rbx + rax], 0x5e
inc rax
cmp rax, 0x28
jb 0x14007c24d
xchg rdx, rdi
mov rax, rdx
xchg rdx, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rbx
push rax
push rax
push rbx
xchg qword [rsp + 0x20], rdi
pop rbx
pop rax
pop rax
pop rbx
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c2b0
Capabilities:
Encode data using xor

Disassembly:
xchg r11, rbx
mov qword [rsp + 8], r11
xchg rbx, r11
mov qword [rsp + 0x10], rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg r9, rdi
mov r9, rcx
xchg r9, rdi
lea rbx, [rdx + 0x16]
mov rdx, rbx
call fcn.14007a840
nop
xor eax, eax
mov byte [rbx + rax], 6
add byte [rbx + rax], 0x10
add byte [rbx + rax], 0x5f
sub byte [rbx + rax], 0x15
xor byte [rbx + rax], 0x67
sub byte [rbx + rax], 7
inc rax
cmp rax, 0x2a
jb 0x14007c2e5
mov rax, rdi
xchg rbx, r11
mov r11, qword [rsp + 0x30]
xchg r11, rbx
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
ret

Function at 0x14007c330
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x18]
xchg rdx, rbx
mov rbx, rdx
xchg rdx, rbx
call fcn.14007a840
nop
xor eax, eax
mov byte [rbx + rax], 0x7d
add byte [rbx + rax], 0
sub byte [rbx + rax], 0x73
add byte [rbx + rax], 0
xor byte [rbx + rax], 0x48
sub byte [rbx + rax], 0xc
add byte [rbx + rax], 0x1c
sub byte [rbx + rax], 0x52
inc rax
cmp rax, 0x2e
jb 0x14007c360
mov rax, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
ret
Function at 0x14007c3a0
Capabilities:
Encode data using xor

Disassembly:
xchg r15, rbx
mov qword [rsp + 8], r15
xchg rbx, r15
xchg rbx, rdx
mov qword [rsp + 0x10], rbx
xchg rbx, rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg rdi, rcx
mov rcx, rdi
xchg rcx, rdi
lea rbx, [rdx + 0x1a]
xchg rbx, rdx
mov rbx, rdx
xchg rdx, rbx
call fcn.14007a840
nop
xor eax, eax
mov byte [rbx + rax], 0x5b
add byte [rbx + rax], 7
sub byte [rbx + rax], 0x31
xor byte [rbx + rax], 0x6e
xor byte [rbx + rax], 0x28
xor byte [rbx + rax], 0x5b
add byte [rbx + rax], 0x17
sub byte [rbx + rax], 4
sub byte [rbx + rax], 0x3f
inc rax
cmp rax, 0x32
jb 0x14007c3e2
xchg rdi, rbp
mov rax, rbp
xchg rbp, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rbx
push rdx
push rbx
xchg qword [rsp + 0x18], rdi
pop rbx
pop rdx
pop rbx
add rsp, 8
ret

Function at 0x14007c4c0
Capabilities:
Encode data using xor

Disassembly:
xchg rsi, rbx
mov qword [rsp + 8], rsi
xchg rsi, rbx
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg rdi, rcx
mov rcx, rdi
xchg rcx, rdi
lea rbx, [rdx + 0x1c]
mov rdx, rbx
call fcn.14007a840
nop
xor eax, eax
mov byte [rbx + rax], 0x29
add byte [rbx + rax], 4
add byte [rbx + rax], 0x4f
xor byte [rbx + rax], 0xd
sub byte [rbx + rax], 0x3f
add byte [rbx + rax], 0x18
sub byte [rbx + rax], 0x3c
add byte [rbx + rax], 0x55
xor byte [rbx + rax], 0x63
inc rax
cmp rax, 0x36
jb 0x14007c4ed
mov rax, rdi
xchg rbx, r15
mov r15, qword [rsp + 0x30]
xchg rbx, r15
add rsp, 0x20
push rdx
push rbx
push rbx
xchg qword [rsp + 0x18], rdi
add rsp, 0x20
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c550
Capabilities:
Encode data using xor

Disassembly:
xchg rdi, rbx
mov qword [rsp + 8], rdi
xchg rbx, rdi
mov qword [rsp + 0x10], rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg rbx, rcx
mov rdi, rbx
xchg rbx, rcx
lea rbx, [rdx + 0x1e]
xchg rbx, rsi
mov rdx, rsi
xchg rsi, rbx
call fcn.14007a840
nop
xor eax, eax
mov byte [rbx + rax], 0x67
xor byte [rbx + rax], 0x39
xor byte [rbx + rax], 0x24
xor byte [rbx + rax], 0x6b
add byte [rbx + rax], 0x29
xor byte [rbx + rax], 0x44
sub byte [rbx + rax], 0x59
sub byte [rbx + rax], 0x25
inc rax
cmp rax, 0x38
jb 0x14007c58b
mov rax, rdi
xchg rdx, rbx
mov rdx, qword [rsp + 0x30]
xchg rbx, rdx
add rsp, 0x20
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret

Function at 0x14007c5e0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg r11, rdx
mov qword [rsp + 0x10], r11
xchg r11, rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg rcx, rdi
mov rcx, rdi
xchg rdi, rcx
lea rbx, [rdx + 0x20]
mov rdx, rbx
call fcn.14007a840
nop
xor eax, eax
mov byte [rbx + rax], 0x3b
add byte [rbx + rax], 0x41
sub byte [rbx + rax], 0x5b
xor byte [rbx + rax], 0x22
add byte [rbx + rax], 0x5f
sub byte [rbx + rax], 0x5a
add byte [rbx + rax], 0x67
xor byte [rbx + rax], 0x3d
xor byte [rbx + rax], 0x52
inc rax
cmp rax, 0x3e
jb 0x14007c616
xchg rdi, r12
mov rax, r12
xchg r12, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]
Function at 0x14007c670
Capabilities:
Encode data using xor

Disassembly:
xchg r13, rbx
mov qword [rsp + 8], r13
xchg rbx, r13
xchg r8, rdx
mov qword [rsp + 0x10], r8
xchg r8, rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x22]
mov rdx, rbx
call fcn.14007a840
nop
xor eax, eax
mov byte [rbx + rax], 8
add byte [rbx + rax], 0x50
xor byte [rbx + rax], 0x39
xor byte [rbx + rax], 0x32
xor byte [rbx + rax], 0x27
sub byte [rbx + rax], 8
sub byte [rbx + rax], 0x6c
inc rax
cmp rax, 0x40
jb 0x14007c6a5
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
xchg rbx, r13
mov r13, qword [rsp + 0x30]
xchg rbx, r13
add rsp, 0x20
push rbx
xchg qword [rsp + 8], rdi
pop rbx
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c700
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg rcx, rdi
mov rcx, rdi
xchg rcx, rdi
lea rbx, [rdx + 0x22]
mov rdx, rbx
call fcn.14007a840
nop
xor eax, eax
mov byte [rbx + rax], 0x7b
sub byte [rbx + rax], 0x6b
xor byte [rbx + rax], 0x15
add byte [rbx + rax], 0x35
add byte [rbx + rax], 0x17
sub byte [rbx + rax], 0x3c
add byte [rbx + rax], 4
add byte [rbx + rax], 0x52
xor byte [rbx + rax], 0x6b
inc rax
cmp rax, 0x42
jb 0x14007c72f
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
xchg rbx, rcx
mov rcx, qword [rsp + 0x30]
xchg rbx, rcx
add rsp, 0x20
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c790
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg rdi, r15
mov r15, rcx
xchg r15, rdi
lea rbx, [rdx + 0x24]
mov rdx, rbx
call fcn.14007a840
nop
xor eax, eax
mov byte [rbx + rax], 0x16
xor byte [rbx + rax], 0x4b
add byte [rbx + rax], 1
sub byte [rbx + rax], 0xb
xor byte [rbx + rax], 7
add byte [rbx + rax], 0xc
sub byte [rbx + rax], 0x24
xor byte [rbx + rax], 0x30
sub byte [rbx + rax], 0xc
inc rax
cmp rax, 0x46
jb 0x14007c7c0
mov rax, rdi
xchg rsi, rbx
mov rsi, qword [rsp + 0x30]
xchg rsi, rbx
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
ret

Function at 0x14007c810
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x28]
xchg r9, rbx
mov rdx, r9
xchg rbx, r9
call fcn.14007a840
nop
xor eax, eax
mov byte [rbx + rax], 0x7a
sub byte [rbx + rax], 0x1d
sub byte [rbx + rax], 0x15
sub byte [rbx + rax], 9
xor byte [rbx + rax], 0x5e
xor byte [rbx + rax], 0x4a
add byte [rbx + rax], 0x3e
xor byte [rbx + rax], 0x69
inc rax
cmp rax, 0x4c
jb 0x14007c840
xchg rdx, rax
mov rdx, rdi
xchg rdx, rax
xchg rbx, r15
mov r15, qword [rsp + 0x30]
xchg rbx, r15
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
ret
Function at 0x14007c900
Capabilities:
Encode data using xor

Disassembly:
xchg rbp, rbx
mov qword [rsp + 8], rbp
xchg rbp, rbx
mov qword [rsp + 0x10], rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg r11, rcx
mov rdi, r11
xchg rcx, r11
lea rbx, [rdx + 0x2a]
mov rdx, rbx
call fcn.14007a840
nop
xor eax, eax
mov byte [rbx + rax], 1
add byte [rbx + rax], 0x63
sub byte [rbx + rax], 0x5a
xor byte [rbx + rax], 0x70
sub byte [rbx + rax], 0x27
add byte [rbx + rax], 0x1c
xor byte [rbx + rax], 0x13
sub byte [rbx + rax], 0x7c
inc rax
cmp rax, 0x52
jb 0x14007c936
xchg r14, rax
mov r14, rdi
xchg r14, rax
xchg rbx, rbp
mov rbp, qword [rsp + 0x30]
xchg rbp, rbx
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c990
Capabilities:
Encode data using xor

Disassembly:
xchg r10, rbx
mov qword [rsp + 8], r10
xchg r10, rbx
mov qword [rsp + 0x10], rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg r14, rcx
mov rdi, r14
xchg rcx, r14
lea rbx, [rdx + 0x2c]
xchg rdi, rbx
mov rdx, rdi
xchg rdi, rbx
call fcn.14007a840
nop
xor eax, eax
mov byte [rbx + rax], 0x2a
add byte [rbx + rax], 0x49
sub byte [rbx + rax], 0x60
xor byte [rbx + rax], 0x1c
add byte [rbx + rax], 0x46
add byte [rbx + rax], 0x13
xor byte [rbx + rax], 0x79
sub byte [rbx + rax], 0x11
inc rax
cmp rax, 0x54
jb 0x14007c9cb
xchg rbx, rax
mov rbx, rdi
xchg rbx, rax
xchg rbx, rcx
mov rcx, qword [rsp + 0x30]
xchg rcx, rbx
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
ret

Function at 0x14007ca20
Capabilities:
Encode data using xor

Disassembly:
xchg r9, rbx
mov qword [rsp + 8], r9
xchg r9, rbx
xchg rdx, r9
mov qword [rsp + 0x10], r9
xchg r9, rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg r14, rdi
mov r14, rcx
xchg rdi, r14
lea rbx, [rdx + 0x2e]
mov rdx, rbx
call fcn.14007a840
nop
xor eax, eax
mov byte [rbx + rax], 0x6c
add byte [rbx + rax], 7
xor byte [rbx + rax], 0x65
add byte [rbx + rax], 0x20
sub byte [rbx + rax], 0x2e
sub byte [rbx + rax], 8
inc rax
cmp rax, 0x58
jb 0x14007ca5c
xchg rdx, rax
mov rdx, rdi
xchg rdx, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rcx
xchg qword [rsp + 8], rdi
add rsp, 0x10
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007caa0
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r10
mov qword [rsp + 8], r10
xchg rbx, r10
xchg r12, rdx
mov qword [rsp + 0x10], r12
xchg rdx, r12
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg rdx, rdi
mov rdx, rcx
xchg rdi, rdx
lea rbx, [rdx + 0x2e]
xchg r10, rbx
mov rdx, r10
xchg rbx, r10
call fcn.14007a840
nop
xor eax, eax
mov byte [rbx + rax], 0xf
add byte [rbx + rax], 0x4d
xor byte [rbx + rax], 0x4e
add byte [rbx + rax], 0x34
xor byte [rbx + rax], 0x28
sub byte [rbx + rax], 0x21
xor byte [rbx + rax], 8
xor byte [rbx + rax], 0x72
xor byte [rbx + rax], 0x37
inc rax
cmp rax, 0x5a
jb 0x14007cae1
xchg rdi, r12
mov rax, r12
xchg rdi, r12
xchg rbx, r14
mov r14, qword [rsp + 0x30]
xchg r14, rbx
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]