joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14007c6b0
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, rdi
mov qword [rsp + 8], rdi
xchg rdi, rbx
xchg r8, rdx
mov qword [rsp + 0x10], r8
xchg rdx, r8
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x12]
xchg rdx, r11
mov r11, rbx
xchg rdx, r11
call fcn.14007af20
nop
xor eax, eax
mov byte [rbx + rax], 0x51
sub byte [rbx + rax], 0x29
xor byte [rbx + rax], 0x20
xor byte [rbx + rax], 0x1b
add byte [rbx + rax], 0x20
sub byte [rbx + rax], 0x33
inc rax
cmp rax, 0x20
jb 0x14007c6eb
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
xchg rdi, rbx
mov rdi, qword [rsp + 0x30]
xchg rbx, rdi
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
ret

Function at 0x14007c730
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, rsi
mov qword [rsp + 8], rsi
xchg rbx, rsi
xchg r13, rdx
mov qword [rsp + 0x10], r13
xchg rdx, r13
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x12]
xchg rbx, r9
mov rdx, r9
xchg r9, rbx
call fcn.14007af20
nop
xor eax, eax
mov byte [rbx + rax], 0x6c
sub byte [rbx + rax], 0x37
add byte [rbx + rax], 0x39
xor byte [rbx + rax], 0x27
sub byte [rbx + rax], 0x43
xor byte [rbx + rax], 6
inc rax
cmp rax, 0x22
jb 0x14007c76c
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
xchg rbx, r11
mov r11, qword [rsp + 0x30]
xchg r11, rbx
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c7c0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg rdx, r11
mov qword [rsp + 0x10], r11
xchg rdx, r11
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x14]
xchg rdx, rbx
mov rbx, rdx
xchg rbx, rdx
call fcn.14007af20
nop
xor eax, eax
mov byte [rbx + rax], 0xe
xor byte [rbx + rax], 4
add byte [rbx + rax], 0x70
sub byte [rbx + rax], 8
xor byte [rbx + rax], 8
sub byte [rbx + rax], 0x3a
xor byte [rbx + rax], 0x3c
sub byte [rbx + rax], 0x7c
inc rax
cmp rax, 0x24
jb 0x14007c7f6
xchg rcx, rdi
mov rax, rcx
xchg rdi, rcx
xchg rbx, r9
mov r9, qword [rsp + 0x30]
xchg rbx, r9
add rsp, 0x20
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c850
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg rdx, rcx
mov qword [rsp + 0x10], rcx
xchg rdx, rcx
nop
push 0x54626abc
mov qword [rsp], rdi
sub rsp, 0x20
xchg rcx, rdi
mov rcx, rdi
xchg rcx, rdi
lea rbx, [rdx + 0x14]
mov rdx, rbx
call fcn.14007af20
nop
xor eax, eax
mov byte [rbx + rax], 0x19
add byte [rbx + rax], 0x29
xor byte [rbx + rax], 0x4d
xor byte [rbx + rax], 0x61
xor byte [rbx + rax], 0x36
xor byte [rbx + rax], 0x58
inc rax
cmp rax, 0x26
jb 0x14007c886
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
ret
Function at 0x14007c8d0
Capabilities:
Encode data using xor

Disassembly:
xchg r15, rbx
mov qword [rsp + 8], r15
xchg r15, rbx
xchg rdx, r11
mov qword [rsp + 0x10], r11
xchg rdx, r11
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x16]
mov rdx, rbx
call fcn.14007af20
nop
xor eax, eax
mov byte [rbx + rax], 0x34
sub byte [rbx + rax], 0x24
xor byte [rbx + rax], 0x1b
add byte [rbx + rax], 0x46
xor byte [rbx + rax], 0x64
sub byte [rbx + rax], 0x35
inc rax
cmp rax, 0x28
jb 0x14007c906
xchg r12, rax
mov r12, rdi
xchg r12, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c950
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
nop
push r8
mov qword [rsp], rdi
sub rsp, 0x20
xchg rcx, rdi
mov rcx, rdi
xchg rdi, rcx
lea rbx, [rdx + 0x16]
xchg rbx, rdx
mov rbx, rdx
xchg rbx, rdx
call fcn.14007af20
nop
xor eax, eax
mov byte [rbx + rax], 0x18
sub byte [rbx + rax], 0xc
add byte [rbx + rax], 0x5b
xor byte [rbx + rax], 0x24
sub byte [rbx + rax], 0x39
xor byte [rbx + rax], 0x1e
sub byte [rbx + rax], 0x14
inc rax
cmp rax, 0x2a
jb 0x14007c983
xchg r11, rax
mov r11, rdi
xchg r11, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rax
push rax
xchg qword [rsp + 0x10], rdi
pop rax
pop rax
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c9d0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg r12, rdx
mov qword [rsp + 0x10], r12
xchg rdx, r12
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg rcx, rdi
mov rcx, rdi
xchg rdi, rcx
lea rbx, [rdx + 0x18]
xchg rbx, rcx
mov rdx, rcx
xchg rcx, rbx
call fcn.14007af20
nop
xor eax, eax
mov byte [rbx + rax], 0x51
sub byte [rbx + rax], 5
xor byte [rbx + rax], 0x7e
add byte [rbx + rax], 0x37
xor byte [rbx + rax], 0x59
xor byte [rbx + rax], 0x35
add byte [rbx + rax], 0x54
xor byte [rbx + rax], 0x28
sub byte [rbx + rax], 0x71
inc rax
cmp rax, 0x2e
jb 0x14007ca0b
xchg r10, rax
mov r10, rdi
xchg r10, rax
xchg r14, rbx
mov r14, qword [rsp + 0x30]
xchg r14, rbx
add rsp, 0x20
push rax
push rax
push rax
xchg qword [rsp + 0x18], rdi
pop rax
pop rax
pop rax
add rsp, 8
ret

Function at 0x14007ca60
Capabilities:
Encode data using xor

Disassembly:
xchg r9, rbx
mov qword [rsp + 8], r9
xchg rbx, r9
xchg rbx, rdx
mov qword [rsp + 0x10], rbx
xchg rdx, rbx
push rdi
sub rsp, 0x20
xchg rsi, rcx
mov rdi, rsi
xchg rsi, rcx
lea rbx, [rdx + 0x1a]
xchg rdx, rbx
mov rbx, rdx
xchg rdx, rbx
call fcn.14007af20
nop
xor eax, eax
mov byte [rbx + rax], 0x6e
sub byte [rbx + rax], 0x33
add byte [rbx + rax], 0x35
xor byte [rbx + rax], 0x66
add byte [rbx + rax], 0x4e
sub byte [rbx + rax], 0x1d
add byte [rbx + rax], 0x16
add byte [rbx + rax], 2
xor byte [rbx + rax], 0x5f
inc rax
cmp rax, 0x32
jb 0x14007ca99
xchg rdi, r14
mov rax, r14
xchg r14, rdi
xchg rbp, rbx
mov rbp, qword [rsp + 0x30]
xchg rbp, rbx
add rsp, 0x20
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
add rsp, 8
jmp qword [rsp - 8]
Function at 0x14007cb00
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r11
mov qword [rsp + 8], r11
xchg r11, rbx
xchg r10, rdx
mov qword [rsp + 0x10], r10
xchg rdx, r10
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg rcx, r10
mov rdi, r10
xchg rcx, r10
lea rbx, [rdx + 0x1c]
xchg rbx, rdx
mov rbx, rdx
xchg rbx, rdx
call fcn.14007af20
nop
xor eax, eax
mov byte [rbx + rax], 0x3a
add byte [rbx + rax], 0x3f
sub byte [rbx + rax], 0x2d
add byte [rbx + rax], 0x2a
xor byte [rbx + rax], 6
sub byte [rbx + rax], 5
sub byte [rbx + rax], 0x6b
inc rax
cmp rax, 0x34
jb 0x14007cb41
xchg rbx, rdi
mov rax, rbx
xchg rdi, rbx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007cb90
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg r12, rdx
mov qword [rsp + 0x10], r12
xchg rdx, r12
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg rdi, rcx
mov rcx, rdi
xchg rcx, rdi
lea rbx, [rdx + 0x1c]
xchg r10, rdx
mov r10, rbx
xchg rdx, r10
call fcn.14007af20
nop
xor eax, eax
mov byte [rbx + rax], 0x34
xor byte [rbx + rax], 0x40
sub byte [rbx + rax], 0x44
sub byte [rbx + rax], 0x2c
add byte [rbx + rax], 0x2b
xor byte [rbx + rax], 0x2f
inc rax
cmp rax, 0x36
jb 0x14007cbcc
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007cc10
Capabilities:
Encode data using xor

Disassembly:
xchg r13, rbx
mov qword [rsp + 8], r13
xchg rbx, r13
xchg rdx, r14
mov qword [rsp + 0x10], r14
xchg rdx, r14
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg rcx, r12
mov rdi, r12
xchg r12, rcx
lea rbx, [rdx + 0x1e]
mov rdx, rbx
call fcn.14007af20
nop
xor eax, eax
mov byte [rbx + rax], 0x7e
xor byte [rbx + rax], 0x35
sub byte [rbx + rax], 6
xor byte [rbx + rax], 0x39
sub byte [rbx + rax], 0x1b
add byte [rbx + rax], 2
sub byte [rbx + rax], 0x5b
xor byte [rbx + rax], 0x7f
sub byte [rbx + rax], 0x77
inc rax
cmp rax, 0x38
jb 0x14007cc4b
mov rax, rdi
xchg rbx, rdi
mov rdi, qword [rsp + 0x30]
xchg rbx, rdi
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
ret

Function at 0x14007cca0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg r15, rdx
mov qword [rsp + 0x10], r15
xchg rdx, r15
nop
push 0x7c95a638
mov qword [rsp], rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x20]
xchg r14, rdx
mov r14, rbx
xchg r14, rdx
call fcn.14007af20
nop
xor eax, eax
mov byte [rbx + rax], 0x72
sub byte [rbx + rax], 0x6a
add byte [rbx + rax], 0x34
sub byte [rbx + rax], 0x15
xor byte [rbx + rax], 0x74
sub byte [rbx + rax], 0x53
inc rax
cmp rax, 0x3e
jb 0x14007ccd6
mov rax, rdi
xchg rbx, r11
mov r11, qword [rsp + 0x30]
xchg r11, rbx
add rsp, 0x20
push rdx
push rax
push rbx
push rax
push rcx
push rbx
push rax
push rbx
xchg qword [rsp + 0x40], rdi
pop rbx
pop rax
pop rbx
pop rcx
pop rax
pop rbx
pop rax
pop rdx
add rsp, 8
ret
Function at 0x14007cd30
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg rcx, r12
mov rdi, r12
xchg rcx, r12
lea rbx, [rdx + 0x22]
xchg rbx, r8
mov rdx, r8
xchg rbx, r8
call fcn.14007af20
nop
xor eax, eax
mov byte [rbx + rax], 0x14
xor byte [rbx + rax], 0x5f
xor byte [rbx + rax], 0x58
add byte [rbx + rax], 0x34
xor byte [rbx + rax], 0x30
sub byte [rbx + rax], 0x77
inc rax
cmp rax, 0x40
jb 0x14007cd5d
mov rax, rdi
xchg rbx, rdx
mov rdx, qword [rsp + 0x30]
xchg rbx, rdx
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007cdb0
Capabilities:
Encode data using xor

Disassembly:
xchg r14, rbx
mov qword [rsp + 8], r14
xchg r14, rbx
mov qword [rsp + 0x10], rdx
nop
push 0x70522426
mov qword [rsp], rdi
sub rsp, 0x20
xchg rdi, r12
mov r12, rcx
xchg rdi, r12
lea rbx, [rdx + 0x22]
mov rdx, rbx
call fcn.14007af20
nop
xor eax, eax
mov byte [rbx + rax], 8
add byte [rbx + rax], 0x42
xor byte [rbx + rax], 0x1d
add byte [rbx + rax], 4
sub byte [rbx + rax], 0x2c
xor byte [rbx + rax], 0x2f
inc rax
cmp rax, 0x42
jb 0x14007cde6
mov rax, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rcx
xchg qword [rsp + 8], rdi
pop rcx
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007ce30
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg rdi, rcx
mov rcx, rdi
xchg rcx, rdi
lea rbx, [rdx + 0x24]
xchg rdi, rdx
mov rdi, rbx
xchg rdi, rdx
call fcn.14007af20
nop
xor eax, eax
mov byte [rbx + rax], 7
xor byte [rbx + rax], 0x48
xor byte [rbx + rax], 0x2b
sub byte [rbx + rax], 0x2a
xor byte [rbx + rax], 0x62
add byte [rbx + rax], 0x1e
sub byte [rbx + rax], 0x76
inc rax
cmp rax, 0x46
jb 0x14007ce5d
xchg rdi, r12
mov rax, r12
xchg rdi, r12
xchg rbx, r13
mov r13, qword [rsp + 0x30]
xchg rbx, r13
add rsp, 0x20
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007ceb0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg rbp, rdx
mov qword [rsp + 0x10], rbp
xchg rdx, rbp
nop
push 0x63bac60e
mov qword [rsp], rdi
sub rsp, 0x20
xchg rcx, rdi
mov rcx, rdi
xchg rcx, rdi
lea rbx, [rdx + 0x28]
xchg r14, rdx
mov r14, rbx
xchg r14, rdx
call fcn.14007af20
nop
xor eax, eax
mov byte [rbx + rax], 0x33
sub byte [rbx + rax], 2
sub byte [rbx + rax], 0x2d
xor byte [rbx + rax], 0x76
sub byte [rbx + rax], 0x68
add byte [rbx + rax], 0x68
sub byte [rbx + rax], 0x3d
sub byte [rbx + rax], 0x35
inc rax
cmp rax, 0x4c
jb 0x14007ceec
xchg r11, rax
mov r11, rdi
xchg r11, rax
xchg rdx, rbx
mov rdx, qword [rsp + 0x30]
xchg rdx, rbx
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
ret
Function at 0x14007cf40
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
xchg r9, rbx
mov qword [rsp + 8], r9
xchg rbx, r9
mov qword [rsp + 0x10], rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg r15, rcx
mov rdi, r15
xchg r15, rcx
lea rbx, [rdx + 0x2a]
xchg rdi, rbx
mov rdx, rdi
xchg rdi, rbx
call fcn.14007af20
nop
xor eax, eax
mov byte [rbx + rax], 9
xor byte [rbx + rax], 0x7e
xor byte [rbx + rax], 0x52
add byte [rbx + rax], 0xe
xor byte [rbx + rax], 0x70
sub byte [rbx + rax], 0x43
inc rax
cmp rax, 0x50
jb 0x14007cf7b
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007cfc0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg r15, rdi
mov r15, rcx
xchg rdi, r15
lea rbx, [rdx + 0x2a]
mov rdx, rbx
call fcn.14007af20
nop
xor eax, eax
mov byte [rbx + rax], 0x53
xor byte [rbx + rax], 0x52
add byte [rbx + rax], 0x59
xor byte [rbx + rax], 0x47
xor byte [rbx + rax], 0x1c
add byte [rbx + rax], 0x74
xor byte [rbx + rax], 0x35
sub byte [rbx + rax], 0x40
inc rax
cmp rax, 0x52
jb 0x14007cfe7
xchg r12, rax
mov r12, rdi
xchg r12, rax
xchg rbx, r14
mov r14, qword [rsp + 0x30]
xchg r14, rbx
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
ret

Function at 0x14007d030
Capabilities:
Encode data using xor

Disassembly:
xchg rcx, rbx
mov qword [rsp + 8], rcx
xchg rbx, rcx
xchg r12, rdx
mov qword [rsp + 0x10], r12
xchg rdx, r12
push rdi
sub rsp, 0x20
xchg r15, rcx
mov rdi, r15
xchg rcx, r15
lea rbx, [rdx + 0x2c]
xchg rdx, rbx
mov rbx, rdx
xchg rdx, rbx
call fcn.14007af20
nop
xor eax, eax
mov byte [rbx + rax], 0x31
xor byte [rbx + rax], 0x66
sub byte [rbx + rax], 8
xor byte [rbx + rax], 0x53
add byte [rbx + rax], 0x3b
xor byte [rbx + rax], 0x34
xor byte [rbx + rax], 0x5b
sub byte [rbx + rax], 0x15
xor byte [rbx + rax], 0x23
inc rax
cmp rax, 0x54
jb 0x14007d069
mov rax, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rcx
push rax
push rax
push rbx
push rcx
push rdx
push rdx
xchg qword [rsp + 0x38], rdi
pop rdx
pop rdx
pop rcx
pop rbx
pop rax
pop rax
pop rcx
add rsp, 8
ret

Function at 0x14007d0c0
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
xchg rsi, rbx
mov qword [rsp + 8], rsi
xchg rsi, rbx
xchg rdi, rdx
mov qword [rsp + 0x10], rdi
xchg rdi, rdx
nop
push 0x72c14625
mov qword [rsp], rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x2e]
mov rdx, rbx
call fcn.14007af20
nop
xor eax, eax
mov byte [rbx + rax], 0x7c
xor byte [rbx + rax], 0xa
sub byte [rbx + rax], 0x3f
xor byte [rbx + rax], 9
add byte [rbx + rax], 0x30
xor byte [rbx + rax], 0x6e
inc rax
cmp rax, 0x58
jb 0x14007d0f6
xchg r9, rdi
mov rax, r9
xchg r9, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
ret
Function at 0x14007d140
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r15
mov qword [rsp + 8], r15
xchg rbx, r15
xchg rdx, r8
mov qword [rsp + 0x10], r8
xchg rdx, r8
nop
push 0x5451abd1
mov qword [rsp], rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x2e]
xchg rbx, rdx
mov rbx, rdx
xchg rdx, rbx
call fcn.14007af20
nop
xor eax, eax
mov byte [rbx + rax], 0x70
xor byte [rbx + rax], 0x7d
add byte [rbx + rax], 0x5b
sub byte [rbx + rax], 0x48
add byte [rbx + rax], 0x45
sub byte [rbx + rax], 1
xor byte [rbx + rax], 0x2c
add byte [rbx + rax], 0xb
xor byte [rbx + rax], 0x53
inc rax
cmp rax, 0x5a
jb 0x14007d17c
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
ret

Function at 0x14007d1d0
Capabilities:
Encode data using xor

Disassembly:
xchg r10, rbx
mov qword [rsp + 8], r10
xchg rbx, r10
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg rdi, rcx
mov rcx, rdi
xchg rdi, rcx
lea rbx, [rdx + 0x30]
mov rdx, rbx
call fcn.14007af20
nop
xor eax, eax
mov byte [rbx + rax], 0x26
sub byte [rbx + rax], 0x24
add byte [rbx + rax], 0x62
add byte [rbx + rax], 0x15
sub byte [rbx + rax], 0x2a
add byte [rbx + rax], 0xf
xor byte [rbx + rax], 0x18
xor byte [rbx + rax], 0x46
inc rax
cmp rax, 0x5c
jb 0x14007d1fd
xchg r8, rax
mov r8, rdi
xchg r8, rax
xchg rcx, rbx
mov rcx, qword [rsp + 0x30]
xchg rbx, rcx
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007d250
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, rbp
mov qword [rsp + 8], rbp
xchg rbp, rbx
xchg rdx, r11
mov qword [rsp + 0x10], r11
xchg r11, rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x30]
xchg rdx, rbp
mov rbp, rbx
xchg rbp, rdx
call fcn.14007af20
nop
xor eax, eax
mov byte [rbx + rax], 0x6e
add byte [rbx + rax], 7
sub byte [rbx + rax], 7
sub byte [rbx + rax], 0x1f
xor byte [rbx + rax], 0x3f
xor byte [rbx + rax], 0x70
inc rax
cmp rax, 0x5e
jb 0x14007d28c
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
xchg rbx, r12
mov r12, qword [rsp + 0x30]
xchg r12, rbx
add rsp, 0x20
push rdx
push rax
push rax
push rcx
push rdx
push rbx
push rcx
xchg qword [rsp + 0x38], rdi
add rsp, 0x40
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007d2e0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg rdx, r14
mov qword [rsp + 0x10], r14
xchg r14, rdx
push rdi
sub rsp, 0x20
xchg r8, rdi
mov r8, rcx
xchg r8, rdi
lea rbx, [rdx + 0x32]
mov rdx, rbx
call fcn.14007af20
nop
xor eax, eax
mov byte [rbx + rax], 0x2d
add byte [rbx + rax], 0x4d
sub byte [rbx + rax], 0x36
xor byte [rbx + rax], 0x3d
xor byte [rbx + rax], 0x38
sub byte [rbx + rax], 7
xor byte [rbx + rax], 0x26
xor byte [rbx + rax], 0x30
sub byte [rbx + rax], 0x2c
inc rax
cmp rax, 0x60
jb 0x14007d30d
mov rax, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rax
push rbx
push rbx
push rbx
push rax
push rax
push rax
xchg qword [rsp + 0x38], rdi
add rsp, 0x40
nop
add rsp, 8
jmp qword [rsp - 8]
Function at 0x14007d360
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, rsi
mov qword [rsp + 8], rsi
xchg rbx, rsi
mov qword [rsp + 0x10], rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg rbx, rcx
mov rdi, rbx
xchg rbx, rcx
lea rbx, [rdx + 0x34]
xchg rdx, rbx
mov rbx, rdx
xchg rdx, rbx
call fcn.14007af20
nop
xor eax, eax
mov byte [rbx + rax], 0x48
add byte [rbx + rax], 0x20
add byte [rbx + rax], 4
xor byte [rbx + rax], 0x4c
sub byte [rbx + rax], 4
add byte [rbx + rax], 0x25
xor byte [rbx + rax], 0x67
xor byte [rbx + rax], 0x4a
sub byte [rbx + rax], 0x6c
inc rax
cmp rax, 0x64
jb 0x14007d39c
xchg rdi, rcx
mov rax, rcx
xchg rdi, rcx
xchg r15, rbx
mov r15, qword [rsp + 0x30]
xchg rbx, r15
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007d400
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg rbx, rdx
mov qword [rsp + 0x10], rbx
xchg rdx, rbx
push rdi
sub rsp, 0x20
xchg rdi, r8
mov r8, rcx
xchg rdi, r8
lea rbx, [rdx + 0x38]
xchg rdx, r13
mov r13, rbx
xchg r13, rdx
call fcn.14007af20
nop
xor eax, eax
mov byte [rbx + rax], 3
add byte [rbx + rax], 0x7b
sub byte [rbx + rax], 0x6c
xor byte [rbx + rax], 0x20
sub byte [rbx + rax], 0x14
add byte [rbx + rax], 0x30
sub byte [rbx + rax], 0x41
xor byte [rbx + rax], 0xd
inc rax
cmp rax, 0x6e
jb 0x14007d433
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
ret

Function at 0x14007d480
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg r14, rdx
mov qword [rsp + 0x10], r14
xchg r14, rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg rdi, rcx
mov rcx, rdi
xchg rdi, rcx
lea rbx, [rdx + 0x4e]
xchg rbx, rdx
mov rbx, rdx
xchg rbx, rdx
call fcn.14007af20
nop
xor eax, eax
mov byte [rbx + rax], 0x3f
add byte [rbx + rax], 0x37
xor byte [rbx + rax], 0x12
xor byte [rbx + rax], 0x63
add byte [rbx + rax], 0x43
xor byte [rbx + rax], 0x4b
xor byte [rbx + rax], 0x61
sub byte [rbx + rax], 0x60
inc rax
cmp rax, 0x98
jb 0x14007d4bb
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rcx
xchg qword [rsp + 8], rdi
pop rcx
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007d510
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg rdi, rcx
mov rcx, rdi
xchg rdi, rcx
lea rbx, [rdx + 0x56]
xchg rdx, r9
mov r9, rbx
xchg rdx, r9
call fcn.14007af20
nop
xor eax, eax
mov byte [rbx + rax], 0x36
xor byte [rbx + rax], 0xd
xor byte [rbx + rax], 1
sub byte [rbx + rax], 0x16
xor byte [rbx + rax], 0x76
sub byte [rbx + rax], 0x10
xor byte [rbx + rax], 0x54
add byte [rbx + rax], 0x35
sub byte [rbx + rax], 0x4b
inc rax
cmp rax, 0xa8
jb 0x14007d545
xchg rcx, rax
mov rcx, rdi
xchg rcx, rax
xchg r15, rbx
mov r15, qword [rsp + 0x30]
xchg rbx, r15
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]
Function at 0x14007d5a0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x5a]
mov rdx, rbx
call fcn.14007af20
nop
xor eax, eax
mov byte [rbx + rax], 0x20
sub byte [rbx + rax], 2
xor byte [rbx + rax], 0x3b
xor byte [rbx + rax], 0x1e
add byte [rbx + rax], 3
add byte [rbx + rax], 0x2d
sub byte [rbx + rax], 0x29
xor byte [rbx + rax], 0x42
inc rax
cmp rax, 0xb0
jb 0x14007d5c1
mov rax, rdi
xchg r12, rbx
mov r12, qword [rsp + 0x30]
xchg r12, rbx
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007d610
Capabilities:
Encode data using xor

Disassembly:
xchg rbp, rbx
mov qword [rsp + 8], rbp
xchg rbp, rbx
xchg rbx, rdx
mov qword [rsp + 0x10], rbx
xchg rdx, rbx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg r12, rcx
mov rdi, r12
xchg rcx, r12
lea rbx, [rdx + 0x70]
xchg r9, rbx
mov rdx, r9
xchg r9, rbx
call fcn.14007af20
nop
xor eax, eax
mov byte [rbx + rax], 0x7a
xor byte [rbx + rax], 9
sub byte [rbx + rax], 0x21
sub byte [rbx + rax], 0x44
xor byte [rbx + rax], 0x37
xor byte [rbx + rax], 0x39
inc rax
cmp rax, 0xdc
jb 0x14007d651
xchg r13, rax
mov r13, rdi
xchg r13, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rcx
push rcx
push rbx
push rax
push rdx
xchg qword [rsp + 0x28], rdi
add rsp, 0x30
ret

Function at 0x14007d6a0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x70]
xchg r12, rbx
mov rdx, r12
xchg r12, rbx
call fcn.14007af20
nop
xor eax, eax
mov byte [rbx + rax], 0x1b
xor byte [rbx + rax], 0x59
add byte [rbx + rax], 2
sub byte [rbx + rax], 6
add byte [rbx + rax], 6
sub byte [rbx + rax], 0xf
xor byte [rbx + rax], 0x34
xor byte [rbx + rax], 1
inc rax
cmp rax, 0xde
jb 0x14007d6c7
xchg rbp, rax
mov rbp, rdi
xchg rbp, rax
xchg rbp, rbx
mov rbp, qword [rsp + 0x30]
xchg rbp, rbx
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007d720
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg r10, rdx
mov qword [rsp + 0x10], r10
xchg r10, rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg r14, rdi
mov r14, rcx
xchg rdi, r14
lea rbx, [rdx + 0x76]
xchg rbx, rdx
mov rbx, rdx
xchg rdx, rbx
call fcn.14007af20
nop
xor eax, eax
mov byte [rbx + rax], 0x22
xor byte [rbx + rax], 0x66
sub byte [rbx + rax], 0xb
xor byte [rbx + rax], 0x29
add byte [rbx + rax], 0x69
sub byte [rbx + rax], 0x79
inc rax
cmp rax, 0xea
jb 0x14007d75b
mov rax, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rdx
push rcx
push rdx
xchg qword [rsp + 0x18], rdi
pop rdx
pop rcx
pop rdx
add rsp, 8
ret