joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14007b210
Capabilities:
Encode data using xor

Disassembly:
mov rax, qword [rcx + 0x10]
xchg r11, rdx
mov r11, rcx
xchg r11, rdx
test rax, rax
jne 0x14007b231
xor r8d, r8d
mov eax, r8d
nop
add rsp, 8
jmp qword [rsp - 8]
cmp byte [rcx], 0
jne 0x14007b277
xor r8d, r8d
cmp qword [rcx + 8], r8
jbe 0x14007b262
xchg r14, rcx
mov r14, qword [rdx + 0x10]
xchg r14, rcx
movzx eax, byte [rdx + 1]
xor byte [rcx + r8], al
inc r8
cmp r8, qword [rdx + 8]
jb 0x14007b23f
xchg rbx, rax
mov rbx, qword [rdx + 0x10]
xchg rbx, rax
mov byte [rdx], 0x59
sub byte [rdx], 0x2b
sub byte [rdx], 0x2a
add byte [rdx], 0x27
add byte [rdx], 0x37
xor byte [rdx], 0x4a
sub byte [rdx], 0x27
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007b5c0
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, rax
mov rbx, qword [rcx + 0x10]
xchg rbx, rax
mov rdx, rcx
test rax, rax
jne 0x14007b5d9
nop
add rsp, 8
jmp qword [rsp - 8]
cmp byte [rcx], 0
jne 0x14007b622
xor r8d, r8d
cmp qword [rcx + 8], r8
jbe 0x14007b610
nop dword [rax + rax]
xchg r10, rax
mov r10, qword [rdx + 0x10]
xchg r10, rax
lea rcx, [rax + r8*2]
movzx eax, word [rdx + 2]
xor word [rcx], ax
inc r8
cmp r8, qword [rdx + 8]
jb 0x14007b5ec
xchg rsi, rax
mov rsi, qword [rdx + 0x10]
xchg rsi, rax
mov byte [rdx], 0x51
add byte [rdx], 0x18
xor byte [rdx], 0x35
sub byte [rdx], 0x28
add byte [rdx], 0x2d
xor byte [rdx], 0x60
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007be50
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg rdi, rcx
mov rcx, rdi
xchg rcx, rdi
lea rbx, [rdx + 4]
xchg rdx, r14
mov r14, rbx
xchg rdx, r14
call fcn.14007aa00
nop
xor eax, eax
mov byte [rbx + rax], 0x6b
sub byte [rbx + rax], 0x1b
xor byte [rbx + rax], 0x3a
sub byte [rbx + rax], 0x67
add byte [rbx + rax], 0x1e
xor byte [rbx + rax], 0x21
inc rax
cmp rax, 6
jb 0x14007be7d
mov rax, rdi
xchg r9, rbx
mov r9, qword [rsp + 0x30]
xchg rbx, r9
add rsp, 0x20
push rbx
push rbx
push rbx
push rcx
push rcx
push rax
push rcx
push rdx
xchg qword [rsp + 0x40], rdi
pop rdx
pop rcx
pop rax
pop rcx
pop rcx
pop rbx
pop rbx
pop rbx
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007bee0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg r9, rcx
mov rdi, r9
xchg r9, rcx
lea rbx, [rdx + 6]
xchg rbx, rsi
mov rdx, rsi
xchg rbx, rsi
call fcn.14007aa00
nop
xor eax, eax
mov byte [rbx + rax], 8
xor byte [rbx + rax], 0x3e
sub byte [rbx + rax], 0x22
xor byte [rbx + rax], 0x70
xor byte [rbx + rax], 0x2f
sub byte [rbx + rax], 0x13
sub byte [rbx + rax], 0x38
inc rax
cmp rax, 8
jb 0x14007bf15
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
xchg r14, rbx
mov r14, qword [rsp + 0x30]
xchg r14, rbx
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]
Function at 0x14007bf70
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r10
mov qword [rsp + 8], r10
xchg r10, rbx
mov qword [rsp + 0x10], rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg rcx, rdi
mov rcx, rdi
xchg rdi, rcx
lea rbx, [rdx + 6]
xchg rbx, r11
mov rdx, r11
xchg rbx, r11
call fcn.14007aa00
nop
xor eax, eax
mov byte [rbx + rax], 0x43
sub byte [rbx + rax], 0x35
add byte [rbx + rax], 0x51
sub byte [rbx + rax], 0x52
add byte [rbx + rax], 0x25
sub byte [rbx + rax], 0x21
add byte [rbx + rax], 0x12
xor byte [rbx + rax], 0x1f
xor byte [rbx + rax], 0x3c
inc rax
cmp rax, 0xa
jb 0x14007bfab
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
ret

Function at 0x14007c000
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg rdi, rcx
mov rcx, rdi
xchg rdi, rcx
lea rbx, [rdx + 8]
xchg rbx, rdi
mov rdx, rdi
xchg rdi, rbx
call fcn.14007aa00
nop
xor eax, eax
mov byte [rbx + rax], 0x6d
sub byte [rbx + rax], 0x63
add byte [rbx + rax], 0xd
add byte [rbx + rax], 0x1f
add byte [rbx + rax], 0x1b
add byte [rbx + rax], 0xf
xor byte [rbx + rax], 0x2b
xor byte [rbx + rax], 0x5d
xor byte [rbx + rax], 0x16
inc rax
cmp rax, 0xe
jb 0x14007c036
xchg r15, rax
mov r15, rdi
xchg r15, rax
xchg r13, rbx
mov r13, qword [rsp + 0x30]
xchg r13, rbx
add rsp, 0x20
push rbx
push rdx
push rbx
push rax
push rdx
push rdx
xchg qword [rsp + 0x30], rdi
pop rdx
pop rdx
pop rax
pop rbx
pop rdx
pop rbx
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c0a0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg rdi, r8
mov r8, rcx
xchg rdi, r8
lea rbx, [rdx + 0xa]
mov rdx, rbx
call fcn.14007aa00
nop
xor eax, eax
mov byte [rbx + rax], 0x5a
xor byte [rbx + rax], 0x5a
add byte [rbx + rax], 4
add byte [rbx + rax], 6
add byte [rbx + rax], 0x62
sub byte [rbx + rax], 0x6c
inc rax
cmp rax, 0x10
jb 0x14007c0d0
mov rax, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rcx
push rbx
push rax
push rbx
push rcx
push rax
xchg qword [rsp + 0x30], rdi
pop rax
pop rcx
pop rbx
pop rax
pop rbx
pop rcx
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c120
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg rdi, rdx
mov qword [rsp + 0x10], rdi
xchg rdx, rdi
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg r12, rcx
mov rdi, r12
xchg r12, rcx
lea rbx, [rdx + 0xa]
xchg rbx, rdx
mov rbx, rdx
xchg rdx, rbx
call fcn.14007aa00
nop
xor eax, eax
mov byte [rbx + rax], 0x7b
xor byte [rbx + rax], 0x4b
sub byte [rbx + rax], 0x16
add byte [rbx + rax], 0x16
xor byte [rbx + rax], 8
xor byte [rbx + rax], 0x38
inc rax
cmp rax, 0x12
jb 0x14007c15c
xchg r10, rax
mov r10, rdi
xchg r10, rax
xchg r14, rbx
mov r14, qword [rsp + 0x30]
xchg r14, rbx
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]
Function at 0x14007c1b0
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, rcx
mov qword [rsp + 8], rcx
xchg rcx, rbx
xchg rdx, r8
mov qword [rsp + 0x10], r8
xchg r8, rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg rbp, rdi
mov rbp, rcx
xchg rdi, rbp
lea rbx, [rdx + 0x10]
xchg rbx, rbp
mov rdx, rbp
xchg rbp, rbx
call fcn.14007aa00
nop
xor eax, eax
mov byte [rbx + rax], 0x69
xor byte [rbx + rax], 0x4c
add byte [rbx + rax], 0x43
xor byte [rbx + rax], 0x5f
add byte [rbx + rax], 0x16
add byte [rbx + rax], 0x2d
sub byte [rbx + rax], 0x64
xor byte [rbx + rax], 0x16
inc rax
cmp rax, 0x1e
jb 0x14007c1f1
xchg r11, rdi
mov rax, r11
xchg r11, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret

Function at 0x14007c240
Capabilities:
Encode data using xor

Disassembly:
xchg r9, rbx
mov qword [rsp + 8], r9
xchg r9, rbx
mov qword [rsp + 0x10], rdx
nop
push r11
mov qword [rsp], rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x12]
xchg rbx, rdx
mov rbx, rdx
xchg rbx, rdx
call fcn.14007aa00
nop
xor eax, eax
mov byte [rbx + rax], 0x4c
xor byte [rbx + rax], 0x13
xor byte [rbx + rax], 0x2d
xor byte [rbx + rax], 0x38
xor byte [rbx + rax], 0x2f
xor byte [rbx + rax], 0x65
inc rax
cmp rax, 0x20
jb 0x14007c273
xchg r13, rax
mov r13, rdi
xchg r13, rax
xchg r9, rbx
mov r9, qword [rsp + 0x30]
xchg r9, rbx
add rsp, 0x20
push rbx
push rbx
push rdx
push rcx
push rcx
push rbx
push rbx
push rdx
xchg qword [rsp + 0x40], rdi
pop rdx
pop rbx
pop rbx
pop rcx
pop rcx
pop rdx
pop rbx
pop rbx
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c2d0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg r14, rdi
mov r14, rcx
xchg rdi, r14
lea rbx, [rdx + 0x12]
xchg rbx, rdx
mov rbx, rdx
xchg rdx, rbx
call fcn.14007aa00
nop
xor eax, eax
mov byte [rbx + rax], 0x71
sub byte [rbx + rax], 0x10
add byte [rbx + rax], 3
sub byte [rbx + rax], 0x12
xor byte [rbx + rax], 0x36
sub byte [rbx + rax], 1
add byte [rbx + rax], 9
sub byte [rbx + rax], 0x6c
inc rax
cmp rax, 0x22
jb 0x14007c306
mov rax, rdi
xchg r10, rbx
mov r10, qword [rsp + 0x30]
xchg rbx, r10
add rsp, 0x20
push rdx
push rcx
push rcx
push rbx
push rcx
push rdx
push rdx
xchg qword [rsp + 0x38], rdi
pop rdx
pop rdx
pop rcx
pop rbx
pop rcx
pop rcx
pop rdx
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]
Function at 0x14007c370
Capabilities:
Encode data using xor

Disassembly:
xchg rdx, rbx
mov qword [rsp + 8], rdx
xchg rdx, rbx
xchg rdx, r13
mov qword [rsp + 0x10], r13
xchg rdx, r13
push rdi
sub rsp, 0x20
xchg rdi, rcx
mov rcx, rdi
xchg rcx, rdi
lea rbx, [rdx + 0x14]
xchg r8, rdx
mov r8, rbx
xchg r8, rdx
call fcn.14007aa00
nop
xor eax, eax
mov byte [rbx + rax], 0x25
add byte [rbx + rax], 0x21
add byte [rbx + rax], 0x28
xor byte [rbx + rax], 0x7b
xor byte [rbx + rax], 0x6b
sub byte [rbx + rax], 0x5e
sub byte [rbx + rax], 0x13
sub byte [rbx + rax], 0xd
inc rax
cmp rax, 0x24
jb 0x14007c3a9
xchg r13, rax
mov r13, rdi
xchg r13, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rax
push rcx
push rcx
push rbx
push rax
push rbx
push rdx
push rdx
xchg qword [rsp + 0x40], rdi
add rsp, 0x48
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c400
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r12
mov qword [rsp + 8], r12
xchg rbx, r12
xchg rdx, r12
mov qword [rsp + 0x10], r12
xchg rdx, r12
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg rcx, r13
mov rdi, r13
xchg rcx, r13
lea rbx, [rdx + 0x14]
xchg r12, rdx
mov r12, rbx
xchg r12, rdx
call fcn.14007aa00
nop
xor eax, eax
mov byte [rbx + rax], 8
add byte [rbx + rax], 0x2d
add byte [rbx + rax], 0x20
sub byte [rbx + rax], 0x3d
xor byte [rbx + rax], 0x34
add byte [rbx + rax], 7
xor byte [rbx + rax], 0x10
add byte [rbx + rax], 0x30
xor byte [rbx + rax], 0x53
inc rax
cmp rax, 0x26
jb 0x14007c441
mov rax, rdi
xchg rsi, rbx
mov rsi, qword [rsp + 0x30]
xchg rsi, rbx
add rsp, 0x20
push rcx
push rcx
push rcx
push rbx
push rbx
push rdx
push rdx
push rdx
xchg qword [rsp + 0x40], rdi
pop rdx
pop rdx
pop rdx
pop rbx
pop rbx
pop rcx
pop rcx
pop rcx
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c4b0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg rdx, rdi
mov qword [rsp + 0x10], rdi
xchg rdi, rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg rdi, r11
mov r11, rcx
xchg rdi, r11
lea rbx, [rdx + 0x16]
mov rdx, rbx
call fcn.14007aa00
nop
xor eax, eax
mov byte [rbx + rax], 0x6c
xor byte [rbx + rax], 0x16
sub byte [rbx + rax], 0x61
add byte [rbx + rax], 0x22
add byte [rbx + rax], 0x3e
xor byte [rbx + rax], 0x25
sub byte [rbx + rax], 0x36
add byte [rbx + rax], 0xe
sub byte [rbx + rax], 0x34
inc rax
cmp rax, 0x28
jb 0x14007c4e6
xchg rdi, rdx
mov rax, rdx
xchg rdx, rdi
xchg rbx, r11
mov r11, qword [rsp + 0x30]
xchg rbx, r11
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c540
Capabilities:
Encode data using xor

Disassembly:
xchg r13, rbx
mov qword [rsp + 8], r13
xchg r13, rbx
xchg r8, rdx
mov qword [rsp + 0x10], r8
xchg r8, rdx
push rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x16]
xchg rbx, rdx
mov rbx, rdx
xchg rdx, rbx
call fcn.14007aa00
nop
xor eax, eax
mov byte [rbx + rax], 0x46
sub byte [rbx + rax], 0x3c
xor byte [rbx + rax], 2
xor byte [rbx + rax], 0x45
sub byte [rbx + rax], 0x31
sub byte [rbx + rax], 0x1c
inc rax
cmp rax, 0x2a
jb 0x14007c573
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
ret
Function at 0x14007c5b0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg r12, rdx
mov qword [rsp + 0x10], r12
xchg rdx, r12
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x18]
xchg rdx, rbx
mov rbx, rdx
xchg rbx, rdx
call fcn.14007aa00
nop
xor eax, eax
mov byte [rbx + rax], 0x10
xor byte [rbx + rax], 0x39
add byte [rbx + rax], 0x21
add byte [rbx + rax], 0x1f
sub byte [rbx + rax], 0x66
sub byte [rbx + rax], 3
inc rax
cmp rax, 0x2e
jb 0x14007c5e6
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rax
push rcx
push rdx
push rax
push rcx
push rax
push rcx
xchg qword [rsp + 0x38], rdi
pop rcx
pop rax
pop rcx
pop rax
pop rdx
pop rcx
pop rax
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c6c0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg rdi, r10
mov r10, rcx
xchg r10, rdi
lea rbx, [rdx + 0x1c]
mov rdx, rbx
call fcn.14007aa00
nop
xor eax, eax
mov byte [rbx + rax], 0xd
xor byte [rbx + rax], 0x51
xor byte [rbx + rax], 0x4d
add byte [rbx + rax], 0x25
sub byte [rbx + rax], 0x1b
add byte [rbx + rax], 0x1e
add byte [rbx + rax], 0x1e
add byte [rbx + rax], 0x17
sub byte [rbx + rax], 0x6e
inc rax
cmp rax, 0x34
jb 0x14007c6e7
xchg rdi, r8
mov rax, r8
xchg rdi, r8
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
ret

Function at 0x14007c730
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r14
mov qword [rsp + 8], r14
xchg rbx, r14
mov qword [rsp + 0x10], rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x1c]
xchg rbx, rsi
mov rdx, rsi
xchg rbx, rsi
call fcn.14007aa00
nop
xor eax, eax
mov byte [rbx + rax], 0x62
xor byte [rbx + rax], 2
xor byte [rbx + rax], 0x6a
add byte [rbx + rax], 0x18
xor byte [rbx + rax], 3
xor byte [rbx + rax], 0x21
inc rax
cmp rax, 0x36
jb 0x14007c765
mov rax, rdi
xchg rbx, r13
mov r13, qword [rsp + 0x30]
xchg rbx, r13
add rsp, 0x20
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c7b0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg rcx, rdi
mov rcx, rdi
xchg rcx, rdi
lea rbx, [rdx + 0x1e]
xchg rbx, rdx
mov rbx, rdx
xchg rbx, rdx
call fcn.14007aa00
nop
xor eax, eax
mov byte [rbx + rax], 0x42
xor byte [rbx + rax], 0x20
sub byte [rbx + rax], 0x49
xor byte [rbx + rax], 0x47
sub byte [rbx + rax], 0x38
add byte [rbx + rax], 0x21
add byte [rbx + rax], 6
sub byte [rbx + rax], 0x4d
inc rax
cmp rax, 0x38
jb 0x14007c7e5
xchg rdi, rsi
mov rax, rsi
xchg rdi, rsi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]
Function at 0x14007c840
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
nop
push r8
mov qword [rsp], rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x20]
xchg rcx, rbx
mov rdx, rcx
xchg rcx, rbx
call fcn.14007aa00
nop
xor eax, eax
mov byte [rbx + rax], 0x53
xor byte [rbx + rax], 0x3f
sub byte [rbx + rax], 0x64
xor byte [rbx + rax], 0x6c
sub byte [rbx + rax], 0x2e
sub byte [rbx + rax], 0x1b
xor byte [rbx + rax], 0x1b
inc rax
cmp rax, 0x3e
jb 0x14007c86d
xchg rdi, rdx
mov rax, rdx
xchg rdx, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c8c0
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r10
mov qword [rsp + 8], r10
xchg r10, rbx
mov qword [rsp + 0x10], rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg r9, rdi
mov r9, rcx
xchg r9, rdi
lea rbx, [rdx + 0x22]
xchg rdx, rbx
mov rbx, rdx
xchg rdx, rbx
call fcn.14007aa00
nop
xor eax, eax
mov byte [rbx + rax], 0x74
xor byte [rbx + rax], 0x1a
xor byte [rbx + rax], 0
sub byte [rbx + rax], 0x27
sub byte [rbx + rax], 0xa
add byte [rbx + rax], 0x3d
xor byte [rbx + rax], 0x7a
inc rax
cmp rax, 0x40
jb 0x14007c8fb
xchg rsi, rax
mov rsi, rdi
xchg rsi, rax
xchg rbx, rdi
mov rdi, qword [rsp + 0x30]
xchg rbx, rdi
add rsp, 0x20
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret

Function at 0x14007c950
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg rdx, r8
mov qword [rsp + 0x10], r8
xchg r8, rdx
push rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x22]
xchg rdx, rbx
mov rbx, rdx
xchg rdx, rbx
call fcn.14007aa00
nop
xor eax, eax
mov byte [rbx + rax], 0x59
sub byte [rbx + rax], 0x2d
add byte [rbx + rax], 0x38
xor byte [rbx + rax], 0x6d
xor byte [rbx + rax], 0xc
add byte [rbx + rax], 9
xor byte [rbx + rax], 0x58
sub byte [rbx + rax], 0x11
xor byte [rbx + rax], 0x45
inc rax
cmp rax, 0x42
jb 0x14007c97d
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c9d0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg r9, rdx
mov qword [rsp + 0x10], r9
xchg rdx, r9
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x24]
xchg rdx, r11
mov r11, rbx
xchg r11, rdx
call fcn.14007aa00
nop
xor eax, eax
mov byte [rbx + rax], 0x39
xor byte [rbx + rax], 6
sub byte [rbx + rax], 0x18
xor byte [rbx + rax], 0x18
xor byte [rbx + rax], 0x2e
sub byte [rbx + rax], 0x11
inc rax
cmp rax, 0x46
jb 0x14007ca05
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
xchg rbx, r14
mov r14, qword [rsp + 0x30]
xchg rbx, r14
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
ret
Function at 0x14007ca50
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg rcx, rdi
mov rcx, rdi
xchg rcx, rdi
lea rbx, [rdx + 0x28]
xchg rdx, rdi
mov rdi, rbx
xchg rdx, rdi
call fcn.14007aa00
nop
xor eax, eax
mov byte [rbx + rax], 2
add byte [rbx + rax], 0x2c
add byte [rbx + rax], 0x44
sub byte [rbx + rax], 0xf
xor byte [rbx + rax], 0x7f
sub byte [rbx + rax], 0x1c
inc rax
cmp rax, 0x4c
jb 0x14007ca7d
xchg r12, rax
mov r12, rdi
xchg r12, rax
xchg rbx, r9
mov r9, qword [rsp + 0x30]
xchg rbx, r9
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007cad0
Capabilities:
Encode data using xor

Disassembly:
xchg r9, rbx
mov qword [rsp + 8], r9
xchg r9, rbx
xchg rdx, rbp
mov qword [rsp + 0x10], rbp
xchg rbp, rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg rcx, rdi
mov rcx, rdi
xchg rcx, rdi
lea rbx, [rdx + 0x2a]
xchg rbx, r9
mov rdx, r9
xchg r9, rbx
call fcn.14007aa00
nop
xor eax, eax
mov byte [rbx + rax], 2
add byte [rbx + rax], 0xe
add byte [rbx + rax], 0x4e
sub byte [rbx + rax], 0x24
xor byte [rbx + rax], 0x60
xor byte [rbx + rax], 0x7b
xor byte [rbx + rax], 0x21
inc rax
cmp rax, 0x50
jb 0x14007cb11
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
ret

Function at 0x14007cb60
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg r9, rdx
mov qword [rsp + 0x10], r9
xchg r9, rdx
push rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x2a]
mov rdx, rbx
call fcn.14007aa00
nop
xor eax, eax
mov byte [rbx + rax], 0x4a
xor byte [rbx + rax], 0x5d
sub byte [rbx + rax], 0xf
add byte [rbx + rax], 0x62
sub byte [rbx + rax], 0x40
add byte [rbx + rax], 0x1f
sub byte [rbx + rax], 0x40
add byte [rbx + rax], 0x18
xor byte [rbx + rax], 0x21
inc rax
cmp rax, 0x52
jb 0x14007cb87
xchg rcx, rax
mov rcx, rdi
xchg rcx, rax
xchg rdi, rbx
mov rdi, qword [rsp + 0x30]
xchg rdi, rbx
add rsp, 0x20
push rax
push rdx
push rdx
push rbx
push rax
push rdx
push rax
push rax
xchg qword [rsp + 0x40], rdi
pop rax
pop rax
pop rdx
pop rax
pop rbx
pop rdx
pop rdx
pop rax
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007cc60
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg rdi, r11
mov r11, rcx
xchg r11, rdi
lea rbx, [rdx + 0x2e]
mov rdx, rbx
call fcn.14007aa00
nop
xor eax, eax
mov byte [rbx + rax], 0x3e
add byte [rbx + rax], 0x25
xor byte [rbx + rax], 0x14
xor byte [rbx + rax], 0x4f
add byte [rbx + rax], 0
add byte [rbx + rax], 0xd
xor byte [rbx + rax], 0x59
xor byte [rbx + rax], 0x46
sub byte [rbx + rax], 0x5a
inc rax
cmp rax, 0x58
jb 0x14007cc87
xchg r11, rax
mov r11, rdi
xchg r11, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
ret
Function at 0x14007ccd0
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r11
mov qword [rsp + 8], r11
xchg r11, rbx
xchg rdx, r13
mov qword [rsp + 0x10], r13
xchg r13, rdx
push rdi
sub rsp, 0x20
xchg r14, rdi
mov r14, rcx
xchg r14, rdi
lea rbx, [rdx + 0x2e]
mov rdx, rbx
call fcn.14007aa00
nop
xor eax, eax
mov byte [rbx + rax], 0x4b
sub byte [rbx + rax], 0x38
xor byte [rbx + rax], 0x22
add byte [rbx + rax], 0x26
xor byte [rbx + rax], 0x77
xor byte [rbx + rax], 0x53
sub byte [rbx + rax], 0x4d
sub byte [rbx + rax], 0x26
inc rax
cmp rax, 0x5a
jb 0x14007cd03
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
xchg r11, rbx
mov r11, qword [rsp + 0x30]
xchg rbx, r11
add rsp, 0x20
push rbx
push rax
push rdx
push rbx
push rcx
push rbx
xchg qword [rsp + 0x30], rdi
add rsp, 0x38
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007cd60
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg rdx, r14
mov qword [rsp + 0x10], r14
xchg r14, rdx
push rdi
sub rsp, 0x20
xchg rcx, r13
mov rdi, r13
xchg r13, rcx
lea rbx, [rdx + 0x30]
xchg rsi, rdx
mov rsi, rbx
xchg rdx, rsi
call fcn.14007aa00
nop
xor eax, eax
mov byte [rbx + rax], 0x6f
sub byte [rbx + rax], 0x2b
add byte [rbx + rax], 0x38
sub byte [rbx + rax], 0x7a
xor byte [rbx + rax], 0x6c
sub byte [rbx + rax], 0x6e
inc rax
cmp rax, 0x5c
jb 0x14007cd93
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
xchg rbx, rcx
mov rcx, qword [rsp + 0x30]
xchg rbx, rcx
add rsp, 0x20
push rax
push rax
push rdx
push rbx
push rcx
push rdx
xchg qword [rsp + 0x30], rdi
pop rdx
pop rcx
pop rbx
pop rdx
pop rax
pop rax
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007cdf0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg r10, rdx
mov qword [rsp + 0x10], r10
xchg r10, rdx
push rdi
sub rsp, 0x20
xchg rdi, rcx
mov rcx, rdi
xchg rdi, rcx
lea rbx, [rdx + 0x30]
xchg rdx, rcx
mov rcx, rbx
xchg rcx, rdx
call fcn.14007aa00
nop
xor eax, eax
mov byte [rbx + rax], 0x3a
add byte [rbx + rax], 0x2a
sub byte [rbx + rax], 0xd
xor byte [rbx + rax], 0x5e
xor byte [rbx + rax], 7
add byte [rbx + rax], 0x3f
xor byte [rbx + rax], 0x4d
inc rax
cmp rax, 0x5e
jb 0x14007ce23
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
xchg rbx, rsi
mov rsi, qword [rsp + 0x30]
xchg rsi, rbx
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007ce70
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r11
mov qword [rsp + 8], r11
xchg r11, rbx
xchg r15, rdx
mov qword [rsp + 0x10], r15
xchg r15, rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x32]
mov rdx, rbx
call fcn.14007aa00
nop
xor eax, eax
mov byte [rbx + rax], 0x60
sub byte [rbx + rax], 0x30
sub byte [rbx + rax], 3
xor byte [rbx + rax], 0x70
xor byte [rbx + rax], 0x35
sub byte [rbx + rax], 0xd
sub byte [rbx + rax], 0xd
sub byte [rbx + rax], 0x4e
inc rax
cmp rax, 0x60
jb 0x14007cea6
xchg rdi, rdx
mov rax, rdx
xchg rdx, rdi
xchg r8, rbx
mov r8, qword [rsp + 0x30]
xchg r8, rbx
add rsp, 0x20
push rdx
xchg qword [rsp + 8], rdi
add rsp, 0x10
nop
add rsp, 8
jmp qword [rsp - 8]