joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14007c780
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, rdi
mov qword [rsp + 8], rdi
xchg rbx, rdi
mov qword [rsp + 0x10], rdx
nop
push r8
mov qword [rsp], rdi
sub rsp, 0x20
xchg rdi, r13
mov r13, rcx
xchg r13, rdi
lea rbx, [rdx + 0x1c]
xchg rdx, rbx
mov rbx, rdx
xchg rbx, rdx
call fcn.14007aaf0
nop
xor eax, eax
mov byte [rbx + rax], 0x49
xor byte [rbx + rax], 0x69
add byte [rbx + rax], 0x1c
add byte [rbx + rax], 0x3e
xor byte [rbx + rax], 0x30
add byte [rbx + rax], 0x23
add byte [rbx + rax], 1
sub byte [rbx + rax], 0x4d
sub byte [rbx + rax], 0x21
inc rax
cmp rax, 0x36
jb 0x14007c7b9
mov rax, rdi
xchg rbx, rdi
mov rdi, qword [rsp + 0x30]
xchg rdi, rbx
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
ret

Function at 0x14007c810
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg rdx, rsi
mov qword [rsp + 0x10], rsi
xchg rdx, rsi
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg rcx, rdi
mov rcx, rdi
xchg rdi, rcx
lea rbx, [rdx + 0x1e]
xchg r12, rbx
mov rdx, r12
xchg rbx, r12
call fcn.14007aaf0
nop
xor eax, eax
mov byte [rbx + rax], 0x6e
add byte [rbx + rax], 0x10
xor byte [rbx + rax], 0x3b
sub byte [rbx + rax], 0xa
xor byte [rbx + rax], 0x23
add byte [rbx + rax], 0x13
xor byte [rbx + rax], 0x2b
inc rax
cmp rax, 0x38
jb 0x14007c84b
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c8a0
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r13
mov qword [rsp + 8], r13
xchg r13, rbx
xchg rdx, r13
mov qword [rsp + 0x10], r13
xchg rdx, r13
push rdi
sub rsp, 0x20
xchg r8, rcx
mov rdi, r8
xchg rcx, r8
lea rbx, [rdx + 0x20]
xchg rdx, rdi
mov rdi, rbx
xchg rdi, rdx
call fcn.14007aaf0
nop
xor eax, eax
mov byte [rbx + rax], 0x67
sub byte [rbx + rax], 0x2d
sub byte [rbx + rax], 0x30
add byte [rbx + rax], 0
xor byte [rbx + rax], 4
sub byte [rbx + rax], 0xe
inc rax
cmp rax, 0x3e
jb 0x14007c8d9
xchg r9, rax
mov r9, rdi
xchg r9, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c920
Capabilities:
Encode data using xor

Disassembly:
xchg rbp, rbx
mov qword [rsp + 8], rbp
xchg rbx, rbp
xchg rdx, r10
mov qword [rsp + 0x10], r10
xchg r10, rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x22]
mov rdx, rbx
call fcn.14007aaf0
nop
xor eax, eax
mov byte [rbx + rax], 0x13
add byte [rbx + rax], 0x34
sub byte [rbx + rax], 9
sub byte [rbx + rax], 0x1a
add byte [rbx + rax], 0x4c
sub byte [rbx + rax], 0x1f
xor byte [rbx + rax], 0x23
sub byte [rbx + rax], 0x72
inc rax
cmp rax, 0x40
jb 0x14007c956
xchg rbx, rdi
mov rax, rbx
xchg rdi, rbx
xchg r10, rbx
mov r10, qword [rsp + 0x30]
xchg r10, rbx
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
nop
add rsp, 8
jmp qword [rsp - 8]
Function at 0x14007c9b0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg rdi, rcx
mov rcx, rdi
xchg rdi, rcx
lea rbx, [rdx + 0x22]
xchg rdx, r15
mov r15, rbx
xchg r15, rdx
call fcn.14007aaf0
nop
xor eax, eax
mov byte [rbx + rax], 0x4b
xor byte [rbx + rax], 0x5d
add byte [rbx + rax], 0x61
sub byte [rbx + rax], 7
xor byte [rbx + rax], 0xc
sub byte [rbx + rax], 0x7c
inc rax
cmp rax, 0x42
jb 0x14007c9e6
xchg r15, rax
mov r15, rdi
xchg r15, rax
xchg rbx, r14
mov r14, qword [rsp + 0x30]
xchg r14, rbx
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007ca30
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg r15, rdx
mov qword [rsp + 0x10], r15
xchg r15, rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg r14, rdi
mov r14, rcx
xchg r14, rdi
lea rbx, [rdx + 0x24]
xchg rbx, r12
mov rdx, r12
xchg r12, rbx
call fcn.14007aaf0
nop
xor eax, eax
mov byte [rbx + rax], 0x3a
xor byte [rbx + rax], 0x19
add byte [rbx + rax], 0x2e
add byte [rbx + rax], 0x1b
xor byte [rbx + rax], 0xd
sub byte [rbx + rax], 0x25
add byte [rbx + rax], 9
sub byte [rbx + rax], 0x34
sub byte [rbx + rax], 0x11
inc rax
cmp rax, 0x46
jb 0x14007ca6c
xchg r13, rdi
mov rax, r13
xchg r13, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rcx
xchg qword [rsp + 8], rdi
add rsp, 0x10
ret

Function at 0x14007cac0
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r10
mov qword [rsp + 8], r10
xchg r10, rbx
xchg r9, rdx
mov qword [rsp + 0x10], r9
xchg rdx, r9
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg r9, rdi
mov r9, rcx
xchg rdi, r9
lea rbx, [rdx + 0x28]
mov rdx, rbx
call fcn.14007aaf0
nop
xor eax, eax
mov byte [rbx + rax], 0x17
add byte [rbx + rax], 0x51
xor byte [rbx + rax], 0x60
add byte [rbx + rax], 0x6f
sub byte [rbx + rax], 0x10
sub byte [rbx + rax], 0x58
sub byte [rbx + rax], 0xf
inc rax
cmp rax, 0x4c
jb 0x14007cafc
xchg r9, rax
mov r9, rdi
xchg r9, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007cb50
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg rbx, rdx
mov qword [rsp + 0x10], rbx
xchg rbx, rdx
push rdi
sub rsp, 0x20
xchg r9, rdi
mov r9, rcx
xchg r9, rdi
lea rbx, [rdx + 0x2a]
xchg rdx, rbp
mov rbp, rbx
xchg rbp, rdx
call fcn.14007aaf0
nop
xor eax, eax
mov byte [rbx + rax], 0x69
xor byte [rbx + rax], 0x43
xor byte [rbx + rax], 0x4f
sub byte [rbx + rax], 0x49
add byte [rbx + rax], 0x5f
sub byte [rbx + rax], 0x19
sub byte [rbx + rax], 0x2f
sub byte [rbx + rax], 0x18
sub byte [rbx + rax], 0x1b
inc rax
cmp rax, 0x50
jb 0x14007cb83
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
xchg rbx, rbp
mov rbp, qword [rsp + 0x30]
xchg rbx, rbp
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
nop
add rsp, 8
jmp qword [rsp - 8]
Function at 0x14007cbe0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg rdi, r11
mov r11, rcx
xchg rdi, r11
lea rbx, [rdx + 0x2a]
xchg rbx, rdx
mov rbx, rdx
xchg rdx, rbx
call fcn.14007aaf0
nop
xor eax, eax
mov byte [rbx + rax], 0x70
add byte [rbx + rax], 9
sub byte [rbx + rax], 0x1a
add byte [rbx + rax], 0x10
sub byte [rbx + rax], 0x1c
sub byte [rbx + rax], 0x3f
sub byte [rbx + rax], 0xb
xor byte [rbx + rax], 0x11
sub byte [rbx + rax], 0x18
inc rax
cmp rax, 0x52
jb 0x14007cc0d
xchg rsi, rax
mov rsi, rdi
xchg rsi, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007cc60
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg r14, rdx
mov qword [rsp + 0x10], r14
xchg r14, rdx
nop
push 0x48d6e679
mov qword [rsp], rdi
sub rsp, 0x20
xchg rdi, rcx
mov rcx, rdi
xchg rcx, rdi
lea rbx, [rdx + 0x2c]
xchg rbx, rcx
mov rdx, rcx
xchg rcx, rbx
call fcn.14007aaf0
nop
xor eax, eax
mov byte [rbx + rax], 7
xor byte [rbx + rax], 0x5b
sub byte [rbx + rax], 0x25
add byte [rbx + rax], 0x1f
sub byte [rbx + rax], 0x25
sub byte [rbx + rax], 0x2c
add byte [rbx + rax], 0x4d
sub byte [rbx + rax], 3
sub byte [rbx + rax], 0x4f
inc rax
cmp rax, 0x54
jb 0x14007cc9c
xchg r8, rax
mov r8, rdi
xchg r8, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007cd70
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r15
mov qword [rsp + 8], r15
xchg rbx, r15
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg r15, rcx
mov rdi, r15
xchg r15, rcx
lea rbx, [rdx + 0x2e]
xchg r14, rdx
mov r14, rbx
xchg r14, rdx
call fcn.14007aaf0
nop
xor eax, eax
mov byte [rbx + rax], 7
xor byte [rbx + rax], 0x1e
add byte [rbx + rax], 0x2e
add byte [rbx + rax], 0x26
add byte [rbx + rax], 7
xor byte [rbx + rax], 0x6a
xor byte [rbx + rax], 0x4b
sub byte [rbx + rax], 0x55
inc rax
cmp rax, 0x5a
jb 0x14007cda3
xchg r12, rax
mov r12, rdi
xchg r12, rax
xchg rbx, r8
mov r8, qword [rsp + 0x30]
xchg rbx, r8
add rsp, 0x20
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret

Function at 0x14007cdf0
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r13
mov qword [rsp + 8], r13
xchg rbx, r13
xchg r9, rdx
mov qword [rsp + 0x10], r9
xchg r9, rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg rcx, r12
mov rdi, r12
xchg r12, rcx
lea rbx, [rdx + 0x30]
xchg rdx, rsi
mov rsi, rbx
xchg rsi, rdx
call fcn.14007aaf0
nop
xor eax, eax
mov byte [rbx + rax], 0x6e
sub byte [rbx + rax], 0x34
xor byte [rbx + rax], 0xe
sub byte [rbx + rax], 0x10
add byte [rbx + rax], 0x55
sub byte [rbx + rax], 0x79
inc rax
cmp rax, 0x5c
jb 0x14007ce32
xchg r14, rax
mov r14, rdi
xchg r14, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
nop
add rsp, 8
jmp qword [rsp - 8]
Function at 0x14007ce80
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r11
mov qword [rsp + 8], r11
xchg r11, rbx
mov qword [rsp + 0x10], rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg rcx, rdi
mov rcx, rdi
xchg rcx, rdi
lea rbx, [rdx + 0x30]
mov rdx, rbx
call fcn.14007aaf0
nop
xor eax, eax
mov byte [rbx + rax], 3
add byte [rbx + rax], 0x20
add byte [rbx + rax], 0x27
xor byte [rbx + rax], 3
xor byte [rbx + rax], 0x3c
xor byte [rbx + rax], 0x6a
add byte [rbx + rax], 0x13
xor byte [rbx + rax], 3
xor byte [rbx + rax], 0x31
inc rax
cmp rax, 0x5e
jb 0x14007ceb6
mov rax, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rbx
push rax
push rax
xchg qword [rsp + 0x18], rdi
add rsp, 0x20
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007cfa0
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r10
mov qword [rsp + 8], r10
xchg r10, rbx
xchg r12, rdx
mov qword [rsp + 0x10], r12
xchg r12, rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg rdi, rcx
mov rcx, rdi
xchg rcx, rdi
lea rbx, [rdx + 0x34]
xchg rbx, r8
mov rdx, r8
xchg rbx, r8
call fcn.14007aaf0
nop
xor eax, eax
mov byte [rbx + rax], 0x44
sub byte [rbx + rax], 0x25
sub byte [rbx + rax], 0xc
add byte [rbx + rax], 0x15
xor byte [rbx + rax], 0xa
xor byte [rbx + rax], 0x6c
sub byte [rbx + rax], 0x37
sub byte [rbx + rax], 0x15
xor byte [rbx + rax], 2
inc rax
cmp rax, 0x64
jb 0x14007cfe1
xchg rdi, rcx
mov rax, rcx
xchg rcx, rdi
xchg rbx, rdx
mov rdx, qword [rsp + 0x30]
xchg rdx, rbx
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
ret

Function at 0x14007d030
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg r10, rdi
mov r10, rcx
xchg r10, rdi
lea rbx, [rdx + 0x38]
xchg rdi, rdx
mov rdi, rbx
xchg rdx, rdi
call fcn.14007aaf0
nop
xor eax, eax
mov byte [rbx + rax], 0x60
xor byte [rbx + rax], 0x4b
xor byte [rbx + rax], 0x65
xor byte [rbx + rax], 0x71
xor byte [rbx + rax], 0x52
sub byte [rbx + rax], 0x43
sub byte [rbx + rax], 0x23
sub byte [rbx + rax], 7
inc rax
cmp rax, 0x6e
jb 0x14007d05d
xchg rdi, r15
mov rax, r15
xchg rdi, r15
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007d0b0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg rdx, rbp
mov qword [rsp + 0x10], rbp
xchg rbp, rdx
push rdi
sub rsp, 0x20
xchg rdi, rcx
mov rcx, rdi
xchg rcx, rdi
lea rbx, [rdx + 0x4e]
xchg rbx, rsi
mov rdx, rsi
xchg rbx, rsi
call fcn.14007aaf0
nop
xor eax, eax
mov byte [rbx + rax], 6
add byte [rbx + rax], 0x4e
sub byte [rbx + rax], 0x32
xor byte [rbx + rax], 0xf
add byte [rbx + rax], 0x34
sub byte [rbx + rax], 0x24
sub byte [rbx + rax], 0x3d
inc rax
cmp rax, 0x98
jb 0x14007d0e3
xchg r9, rax
mov r9, rdi
xchg r9, rax
xchg rsi, rbx
mov rsi, qword [rsp + 0x30]
xchg rsi, rbx
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]
Function at 0x14007d140
Capabilities:
Encode data using xor

Disassembly:
xchg r8, rbx
mov qword [rsp + 8], r8
xchg rbx, r8
mov qword [rsp + 0x10], rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x56]
xchg rbx, r11
mov rdx, r11
xchg r11, rbx
call fcn.14007aaf0
nop
xor eax, eax
mov byte [rbx + rax], 0x1c
add byte [rbx + rax], 0x2f
xor byte [rbx + rax], 0x5e
add byte [rbx + rax], 8
add byte [rbx + rax], 0x5b
sub byte [rbx + rax], 0x59
xor byte [rbx + rax], 0x1c
sub byte [rbx + rax], 3
inc rax
cmp rax, 0xa8
jb 0x14007d175
xchg r8, rax
mov r8, rdi
xchg r8, rax
xchg r8, rbx
mov r8, qword [rsp + 0x30]
xchg r8, rbx
add rsp, 0x20
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007d1d0
Capabilities:
Encode data using xor

Disassembly:
xchg r12, rbx
mov qword [rsp + 8], r12
xchg rbx, r12
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg rbx, rcx
mov rdi, rbx
xchg rcx, rbx
lea rbx, [rdx + 0x5a]
xchg rcx, rdx
mov rcx, rbx
xchg rcx, rdx
call fcn.14007aaf0
nop
xor eax, eax
mov byte [rbx + rax], 0x2b
add byte [rbx + rax], 0x39
sub byte [rbx + rax], 0x19
xor byte [rbx + rax], 0x79
sub byte [rbx + rax], 0x1d
add byte [rbx + rax], 0x47
sub byte [rbx + rax], 0x59
add byte [rbx + rax], 0x4a
sub byte [rbx + rax], 0x4d
inc rax
cmp rax, 0xb0
jb 0x14007d203
xchg r12, rax
mov r12, rdi
xchg r12, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007d260
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rbx
mov qword [rsp], rdi
sub rsp, 0x20
xchg r12, rdi
mov r12, rcx
xchg r12, rdi
lea rbx, [rdx + 0x70]
xchg rbx, rdx
mov rbx, rdx
xchg rdx, rbx
call fcn.14007aaf0
nop
xor eax, eax
mov byte [rbx + rax], 0x60
sub byte [rbx + rax], 0x36
xor byte [rbx + rax], 0x52
sub byte [rbx + rax], 0xf
xor byte [rbx + rax], 0x2e
sub byte [rbx + rax], 5
sub byte [rbx + rax], 0x29
xor byte [rbx + rax], 0x7d
sub byte [rbx + rax], 0x64
inc rax
cmp rax, 0xdc
jb 0x14007d291
mov rax, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
ret

Function at 0x14007d2e0
Capabilities:
Encode data using xor

Disassembly:
xchg r12, rbx
mov qword [rsp + 8], r12
xchg rbx, r12
xchg rdx, r11
mov qword [rsp + 0x10], r11
xchg r11, rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg rsi, rdi
mov rsi, rcx
xchg rdi, rsi
lea rbx, [rdx + 0x70]
xchg rdx, rsi
mov rsi, rbx
xchg rsi, rdx
call fcn.14007aaf0
nop
xor eax, eax
mov byte [rbx + rax], 0x67
sub byte [rbx + rax], 0x1a
add byte [rbx + rax], 0x29
xor byte [rbx + rax], 0x18
sub byte [rbx + rax], 0x25
xor byte [rbx + rax], 0x3e
sub byte [rbx + rax], 0x67
add byte [rbx + rax], 4
sub byte [rbx + rax], 0x14
inc rax
cmp rax, 0xde
jb 0x14007d321
xchg rcx, rdi
mov rax, rcx
xchg rcx, rdi
xchg rbx, rsi
mov rsi, qword [rsp + 0x30]
xchg rsi, rbx
add rsp, 0x20
push rcx
push rdx
push rbx
push rbx
push rcx
push rcx
push rdx
xchg qword [rsp + 0x38], rdi
add rsp, 0x40
ret
Function at 0x14007d380
Capabilities:
Encode data using xor

Disassembly:
xchg r14, rbx
mov qword [rsp + 8], r14
xchg rbx, r14
xchg rdx, rbx
mov qword [rsp + 0x10], rbx
xchg rdx, rbx
push rdi
sub rsp, 0x20
xchg rcx, r10
mov rdi, r10
xchg r10, rcx
lea rbx, [rdx + 0x76]
xchg r14, rbx
mov rdx, r14
xchg r14, rbx
call fcn.14007aaf0
nop
xor eax, eax
mov byte [rbx + rax], 0x3f
xor byte [rbx + rax], 0x7d
sub byte [rbx + rax], 0x19
sub byte [rbx + rax], 0x13
add byte [rbx + rax], 0x62
sub byte [rbx + rax], 0x1a
xor byte [rbx + rax], 0x5e
inc rax
cmp rax, 0xea
jb 0x14007d3b9
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rdx
push rax
push rcx
push rcx
xchg qword [rsp + 0x20], rdi
pop rcx
pop rcx
pop rax
pop rdx
add rsp, 8
ret

Function at 0x14007d410
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r9
mov qword [rsp + 8], r9
xchg rbx, r9
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg rcx, rdx
mov rdi, rdx
xchg rcx, rdx
lea rbx, [rdx + 0x7c]
mov rdx, rbx
call fcn.14007aaf0
nop
xor eax, eax
mov byte [rbx + rax], 0x23
sub byte [rbx + rax], 0x10
add byte [rbx + rax], 0x2c
xor byte [rbx + rax], 0xd
xor byte [rbx + rax], 3
xor byte [rbx + rax], 0xe
sub byte [rbx + rax], 0x1b
xor byte [rbx + rax], 0x75
xor byte [rbx + rax], 0x51
inc rax
cmp rax, 0xf4
jb 0x14007d43d
mov rax, rdi
xchg rbx, r12
mov r12, qword [rsp + 0x30]
xchg rbx, r12
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007d490
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg rcx, rsi
mov rdi, rsi
xchg rsi, rcx
lea rbx, [rdx + 0x9a]
xchg rdi, rdx
mov rdi, rbx
xchg rdx, rdi
call fcn.14007aaf0
nop
xor eax, eax
nop dword [rax]
nop dword [rax + rax]
mov byte [rbx + rax], 0x43
add byte [rbx + rax], 0x36
sub byte [rbx + rax], 0x19
sub byte [rbx + rax], 0x19
xor byte [rbx + rax], 0x6b
add byte [rbx + rax], 0x24
sub byte [rbx + rax], 0x50
inc rax
cmp rax, 0x130
jb 0x14007d4d5
xchg r14, rax
mov r14, rdi
xchg r14, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007d520
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg r9, rdx
mov qword [rsp + 0x10], r9
xchg r9, rdx
push rdi
sub rsp, 0x20
xchg rdx, rdi
mov rdx, rcx
xchg rdx, rdi
lea rbx, [rdx + 0xc]
mov rdx, rbx
call fcn.14007aaf0
nop
xor eax, eax
mov byte [rbx + rax], 0x59
sub byte [rbx + rax], 0x32
sub byte [rbx + rax], 9
add byte [rbx + rax], 0xf
add byte [rbx + rax], 0x44
xor byte [rbx + rax], 0x71
inc rax
cmp rax, 0x14
jb 0x14007d54d
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]
Function at 0x14007d590
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r13
mov qword [rsp + 8], r13
xchg rbx, r13
xchg r14, rdx
mov qword [rsp + 0x10], r14
xchg r14, rdx
push rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0xe]
mov rdx, rbx
call fcn.14007aaf0
nop
xor eax, eax
mov byte [rbx + rax], 0x73
sub byte [rbx + rax], 0x13
xor byte [rbx + rax], 0x39
sub byte [rbx + rax], 0x4a
add byte [rbx + rax], 0x34
sub byte [rbx + rax], 0x30
sub byte [rbx + rax], 0x13
inc rax
cmp rax, 0x18
jb 0x14007d5bd
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
xchg rbx, r15
mov r15, qword [rsp + 0x30]
xchg rbx, r15
add rsp, 0x20
push rdx
push rcx
push rbx
push rcx
push rdx
push rcx
push rax
push rcx
xchg qword [rsp + 0x40], rdi
add rsp, 0x48
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007d620
Capabilities:
Encode data using xor

Disassembly:
xchg rbp, rbx
mov qword [rsp + 8], rbp
xchg rbp, rbx
mov qword [rsp + 0x10], rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg rdi, r10
mov r10, rcx
xchg rdi, r10
lea rbx, [rdx + 0xe]
xchg rdx, rdi
mov rdi, rbx
xchg rdi, rdx
call fcn.14007aaf0
nop
xor eax, eax
mov byte [rbx + rax], 0x31
sub byte [rbx + rax], 6
xor byte [rbx + rax], 0x42
sub byte [rbx + rax], 0x40
add byte [rbx + rax], 0x29
xor byte [rbx + rax], 0x52
inc rax
cmp rax, 0x1a
jb 0x14007d65c
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rcx
push rcx
push rax
push rcx
push rdx
xchg qword [rsp + 0x28], rdi
pop rdx
pop rcx
pop rax
pop rcx
pop rcx
add rsp, 8
ret

Function at 0x140081040
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r9
mov qword [rsp + 0x10], r9
xchg r9, rbx
mov qword [rsp + 0x18], rbp
nop
sub rsp, 8
mov qword [rsp], rsi
sub rsp, 0x20
cmp byte [r8 + 0x19], 0
xchg r9, rbx
mov r9, r8
xchg rbx, r9
mov rsi, rdx
xchg rcx, rbx
mov rbp, rbx
xchg rcx, rbx
jne 0x140081104
mov qword [rsp + 0x30], rdi
nop dword [rax]
nop dword [rax + rax]
mov r8, qword [rbx + 0x10]
xchg r13, rsi
mov rdx, r13
xchg r13, rsi
xchg rbp, r8
mov rcx, r8
xchg rbp, r8
call fcn.140081040
xchg rbx, rdi
mov rbx, rdi
xchg rdi, rbx
mov rbx, qword [rbx]
lea rcx, [rdi + 0x28]
call fcn.140091580
mov edx, 0x44ac1ba6
sub edx, 0x9dcad5c
sub edx, 0x38b386a
sub edx, 0x15347244
xor edx, 0x2b2aaa18
sub edx, 0x92568ec
xchg rbp, rcx
mov rbp, rdi
xchg rcx, rbp
call fcn.1401fc804
cmp byte [rbx + 0x19], 0
je 0x14008108e
xchg rdi, rbp
mov rbp, qword [rsp + 0x30]
xchg rbp, rdi
xchg r14, rbx
mov r14, qword [rsp + 0x38]
xchg rbx, r14
xchg rbx, rbp
mov rbx, qword [rsp + 0x40]
xchg rbp, rbx
add rsp, 0x20
nop
mov rsi, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]
Function at 0x140083cf0
Capabilities:
Encode data using xor

Disassembly:
mov r8d, edx
nop dword [rax]
nop word [rax + rax]
sub rcx, 2
mov eax, 0x38ea3601
sub eax, 0x209e7f24
add eax, 0x394ee124
add eax, 0x2bec214a
xor eax, 0x26efa295
xor eax, 0x1659a44b
add eax, 0x1ed42db2
sub eax, 0x69bfd0cf
add eax, 0xca87b055
mul r8d
shr edx, 2
shr edx, 1
movzx eax, dx
shl ax, 1
shl ax, 1
lea r9d, [rax + rdx]
add r9w, r9w
sub r8w, r9w
neg r8w
add r8w, 0xffd0
neg r8w
mov word [rcx], r8w
mov r8d, edx
test edx, edx
jne 0x140083d00
xchg r8, rcx
mov rax, r8
xchg rcx, r8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x140083fe0
Capabilities:
Encode data using xor

Disassembly:
mov rax, r8
cmp rcx, rdx
je 0x140084132
xchg r14, rax
mov r9, r14
xchg r14, rax
lea r8, [rcx + 0x38]
sub r9, rcx
xor r10d, r10d
nop dword [rax]
xorps xmm0, xmm0
lea r8, [r8 + 0x48]
xchg r8, rax
movups xmmword [r8], xmm0
xchg r8, rax
mov qword [r9 + r8 - 0x70], r10
xchg r15, r10
mov qword [r9 + r8 - 0x68], r15
xchg r15, r10
movups xmm0, xmmword [r8 - 0x80]
movups xmmword [rax], xmm0
movups xmm1, xmmword [r8 - 0x70]
xorps xmm0, xmm0
xchg r10, rax
movups xmmword [r10 + 0x10], xmm1
xchg r10, rax
xchg r10, r11
mov qword [r8 - 0x70], r11
xchg r11, r10
nop
sub rax, 0x7c15b251
add rax, 0x7c15b299
mov qword [r8 - 0x68], 0x196b63f
add qword [r8 - 0x68], 0x72310aee
xor qword [r8 - 0x68], 0x31809654
xor qword [r8 - 0x68], 0x77abc706
add qword [r8 - 0x68], 0x352c51f8
sub qword [r8 - 0x68], 0x19599887
xor qword [r8 - 0x68], 0x78cdfe6c
sub qword [r8 - 0x68], 0x2972b795
mov word [r8 - 0x80], r10w
xchg rdx, r9
movups xmmword [rdx + r8 - 0x60], xmm0
xchg r9, rdx
mov qword [r9 + r8 - 0x50], r10
mov qword [r9 + r8 - 0x48], r10
xchg r8, rdi
movups xmm0, xmmword [rdi - 0x60]
xchg rdi, r8
xchg r13, r9
movups xmmword [r13 + r8 - 0x60], xmm0
xchg r13, r9
movups xmm1, xmmword [r8 - 0x50]
xchg rdx, r9
movups xmmword [rdx + r8 - 0x50], xmm1
xchg rdx, r9
xchg rdi, r10
mov qword [r8 - 0x50], rdi
xchg r10, rdi
mov qword [r8 - 0x48], 0x518ba155
add qword [r8 - 0x48], 0x1a388537
add qword [r8 - 0x48], 0x1049a2fa
sub qword [r8 - 0x48], 0x3149f226
sub qword [r8 - 0x48], 0x2b2f81b9
xor qword [r8 - 0x48], 0x2e5a8578
sub qword [r8 - 0x48], 0x31ced0d8
mov word [r8 - 0x60], r10w
mov ecx, dword [r8 - 0x40]
mov dword [r9 + r8 - 0x40], ecx
lea rcx, [r8 - 0x38]
cmp rcx, rdx
jne 0x140084004
nop
add rsp, 8
jmp qword [rsp - 8]