joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14007c510
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
nop
push 0x548beb3a
mov qword [rsp], rdi
sub rsp, 0x20
xchg rbp, rcx
mov rdi, rbp
xchg rcx, rbp
lea rbx, [rdx + 0x18]
xchg rcx, rbx
mov rdx, rcx
xchg rcx, rbx
call fcn.14007aa60
nop
xor eax, eax
mov byte [rbx + rax], 0x7a
xor byte [rbx + rax], 0x31
add byte [rbx + rax], 0xa
xor byte [rbx + rax], 0x63
sub byte [rbx + rax], 0x2d
xor byte [rbx + rax], 9
inc rax
cmp rax, 0x2e
jb 0x14007c546
mov rax, rdi
xchg r9, rbx
mov r9, qword [rsp + 0x30]
xchg r9, rbx
add rsp, 0x20
push rcx
push rbx
xchg qword [rsp + 0x10], rdi
pop rbx
pop rcx
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c590
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg r9, rdx
mov qword [rsp + 0x10], r9
xchg r9, rdx
push rdi
sub rsp, 0x20
xchg rsi, rcx
mov rdi, rsi
xchg rsi, rcx
lea rbx, [rdx + 0x1a]
xchg rbx, r12
mov rdx, r12
xchg r12, rbx
call fcn.14007aa60
nop
xor eax, eax
mov byte [rbx + rax], 0x49
xor byte [rbx + rax], 0x19
xor byte [rbx + rax], 0x50
add byte [rbx + rax], 0x28
add byte [rbx + rax], 0x32
sub byte [rbx + rax], 0x5a
inc rax
cmp rax, 0x32
jb 0x14007c5c3
mov rax, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rcx
push rcx
push rbx
push rax
push rax
push rcx
push rcx
push rdx
xchg qword [rsp + 0x40], rdi
pop rdx
pop rcx
pop rcx
pop rax
pop rax
pop rbx
pop rcx
pop rcx
add rsp, 8
ret

Function at 0x14007c610
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg rdi, rcx
mov rcx, rdi
xchg rdi, rcx
lea rbx, [rdx + 0x1c]
xchg rbp, rbx
mov rdx, rbp
xchg rbx, rbp
call fcn.14007aa60
nop
xor eax, eax
mov byte [rbx + rax], 0x3e
add byte [rbx + rax], 0x3f
xor byte [rbx + rax], 0x5b
add byte [rbx + rax], 0x23
sub byte [rbx + rax], 0xa
sub byte [rbx + rax], 0x3f
inc rax
cmp rax, 0x34
jb 0x14007c646
mov rax, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c690
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, rbp
mov qword [rsp + 8], rbp
xchg rbx, rbp
mov qword [rsp + 0x10], rdx
nop
push 0x5b5894c5
mov qword [rsp], rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x1c]
xchg rcx, rdx
mov rcx, rbx
xchg rcx, rdx
call fcn.14007aa60
nop
xor eax, eax
mov byte [rbx + rax], 0x6d
add byte [rbx + rax], 0xd
xor byte [rbx + rax], 0x4c
add byte [rbx + rax], 0x17
sub byte [rbx + rax], 0x16
xor byte [rbx + rax], 0x37
inc rax
cmp rax, 0x36
jb 0x14007c6c6
xchg rcx, rax
mov rcx, rdi
xchg rcx, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
nop
add rsp, 8
jmp qword [rsp - 8]
Function at 0x14007c710
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r15
mov qword [rsp + 8], r15
xchg r15, rbx
mov qword [rsp + 0x10], rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x1e]
xchg rdx, rbx
mov rbx, rdx
xchg rbx, rdx
call fcn.14007aa60
nop
xor eax, eax
mov byte [rbx + rax], 0x10
add byte [rbx + rax], 0x50
add byte [rbx + rax], 0x13
xor byte [rbx + rax], 0x68
xor byte [rbx + rax], 0x23
sub byte [rbx + rax], 2
sub byte [rbx + rax], 0x36
inc rax
cmp rax, 0x38
jb 0x14007c745
mov rax, rdi
xchg rdx, rbx
mov rdx, qword [rsp + 0x30]
xchg rdx, rbx
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c790
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg rdx, r11
mov qword [rsp + 0x10], r11
xchg rdx, r11
push rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x20]
xchg rdx, r9
mov r9, rbx
xchg r9, rdx
call fcn.14007aa60
nop
xor eax, eax
mov byte [rbx + rax], 0x5b
xor byte [rbx + rax], 0x39
xor byte [rbx + rax], 0x65
xor byte [rbx + rax], 0x55
sub byte [rbx + rax], 0x13
add byte [rbx + rax], 1
sub byte [rbx + rax], 0x40
inc rax
cmp rax, 0x3e
jb 0x14007c7bd
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c810
Capabilities:
Encode data using xor

Disassembly:
xchg rcx, rbx
mov qword [rsp + 8], rcx
xchg rbx, rcx
mov qword [rsp + 0x10], rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg r9, rcx
mov rdi, r9
xchg r9, rcx
lea rbx, [rdx + 0x22]
xchg rbx, rdx
mov rbx, rdx
xchg rdx, rbx
call fcn.14007aa60
nop
xor eax, eax
mov byte [rbx + rax], 0x66
xor byte [rbx + rax], 0xc
add byte [rbx + rax], 0
sub byte [rbx + rax], 3
sub byte [rbx + rax], 0x47
xor byte [rbx + rax], 0x78
add byte [rbx + rax], 7
add byte [rbx + rax], 0xd
sub byte [rbx + rax], 0x6c
inc rax
cmp rax, 0x40
jb 0x14007c84b
mov rax, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret

Function at 0x14007c890
Capabilities:
Encode data using xor

Disassembly:
xchg r11, rbx
mov qword [rsp + 8], r11
xchg rbx, r11
mov qword [rsp + 0x10], rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x22]
xchg rbx, rdx
mov rbx, rdx
xchg rbx, rdx
call fcn.14007aa60
nop
xor eax, eax
mov byte [rbx + rax], 0x60
sub byte [rbx + rax], 0xc
add byte [rbx + rax], 0x1a
xor byte [rbx + rax], 0xa
add byte [rbx + rax], 6
xor byte [rbx + rax], 0x55
add byte [rbx + rax], 0x1a
sub byte [rbx + rax], 0x59
inc rax
cmp rax, 0x42
jb 0x14007c8c5
mov rax, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rdx
push rdx
push rax
xchg qword [rsp + 0x18], rdi
add rsp, 0x20
nop
add rsp, 8
jmp qword [rsp - 8]
Function at 0x14007c910
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg r14, rdx
mov qword [rsp + 0x10], r14
xchg rdx, r14
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg rdi, rcx
mov rcx, rdi
xchg rdi, rcx
lea rbx, [rdx + 0x24]
mov rdx, rbx
call fcn.14007aa60
nop
xor eax, eax
mov byte [rbx + rax], 0x38
sub byte [rbx + rax], 0x18
add byte [rbx + rax], 0x12
xor byte [rbx + rax], 0xd
xor byte [rbx + rax], 0x42
xor byte [rbx + rax], 0x3b
xor byte [rbx + rax], 0x67
add byte [rbx + rax], 0x43
sub byte [rbx + rax], 0x64
inc rax
cmp rax, 0x46
jb 0x14007c945
xchg rdx, rax
mov rdx, rdi
xchg rdx, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret

Function at 0x14007c990
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, rbp
mov qword [rsp + 8], rbp
xchg rbp, rbx
xchg rdx, r12
mov qword [rsp + 0x10], r12
xchg rdx, r12
nop
push 0x6d92112
mov qword [rsp], rdi
sub rsp, 0x20
xchg r14, rdi
mov r14, rcx
xchg rdi, r14
lea rbx, [rdx + 0x28]
xchg r10, rbx
mov rdx, r10
xchg rbx, r10
call fcn.14007aa60
nop
xor eax, eax
mov byte [rbx + rax], 0x6e
xor byte [rbx + rax], 7
sub byte [rbx + rax], 0x49
xor byte [rbx + rax], 0x2b
add byte [rbx + rax], 0x4c
sub byte [rbx + rax], 0x15
sub byte [rbx + rax], 0x3e
sub byte [rbx + rax], 4
inc rax
cmp rax, 0x4c
jb 0x14007c9d2
xchg r14, rax
mov r14, rdi
xchg r14, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007ca20
Capabilities:
Encode data using xor

Disassembly:
xchg r12, rbx
mov qword [rsp + 8], r12
xchg r12, rbx
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg r15, rcx
mov rdi, r15
xchg r15, rcx
lea rbx, [rdx + 0x2a]
xchg rbx, rcx
mov rdx, rcx
xchg rcx, rbx
call fcn.14007aa60
nop
xor eax, eax
mov byte [rbx + rax], 0x1a
sub byte [rbx + rax], 0x17
add byte [rbx + rax], 0
add byte [rbx + rax], 0x1c
add byte [rbx + rax], 0x3c
xor byte [rbx + rax], 0x10
add byte [rbx + rax], 0x12
sub byte [rbx + rax], 0x5d
inc rax
cmp rax, 0x50
jb 0x14007ca53
mov rax, rdi
xchg rdi, rbx
mov rdi, qword [rsp + 0x30]
xchg rbx, rdi
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007cab0
Capabilities:
Encode data using xor

Disassembly:
xchg r11, rbx
mov qword [rsp + 8], r11
xchg r11, rbx
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg rcx, rdi
mov rcx, rdi
xchg rdi, rcx
lea rbx, [rdx + 0x2a]
xchg rsi, rbx
mov rdx, rsi
xchg rbx, rsi
call fcn.14007aa60
nop
xor eax, eax
mov byte [rbx + rax], 0x79
xor byte [rbx + rax], 0x3c
xor byte [rbx + rax], 0x20
xor byte [rbx + rax], 0x32
xor byte [rbx + rax], 0x15
sub byte [rbx + rax], 0xb
xor byte [rbx + rax], 0x10
sub byte [rbx + rax], 0x27
inc rax
cmp rax, 0x52
jb 0x14007cae3
xchg r12, rax
mov r12, rdi
xchg r12, rax
xchg r9, rbx
mov r9, qword [rsp + 0x30]
xchg rbx, r9
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]
Function at 0x14007cb40
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg r9, rdx
mov qword [rsp + 0x10], r9
xchg r9, rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg r15, rdi
mov r15, rcx
xchg rdi, r15
lea rbx, [rdx + 0x2c]
xchg r12, rdx
mov r12, rbx
xchg rdx, r12
call fcn.14007aa60
nop
xor eax, eax
mov byte [rbx + rax], 7
xor byte [rbx + rax], 0x29
xor byte [rbx + rax], 0x7b
xor byte [rbx + rax], 0x66
add byte [rbx + rax], 0x2a
add byte [rbx + rax], 0x13
add byte [rbx + rax], 9
sub byte [rbx + rax], 0x5c
xor byte [rbx + rax], 0x1d
inc rax
cmp rax, 0x54
jb 0x14007cb7c
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rdx
push rcx
push rax
xchg qword [rsp + 0x18], rdi
pop rax
pop rcx
pop rdx
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007cbe0
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r10
mov qword [rsp + 8], r10
xchg r10, rbx
mov qword [rsp + 0x10], rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x2e]
xchg rbx, r14
mov rdx, r14
xchg rbx, r14
call fcn.14007aa60
nop
xor eax, eax
mov byte [rbx + rax], 0x44
add byte [rbx + rax], 0x1c
sub byte [rbx + rax], 0x4c
xor byte [rbx + rax], 0x1f
add byte [rbx + rax], 0x13
xor byte [rbx + rax], 0x13
sub byte [rbx + rax], 0xd
inc rax
cmp rax, 0x58
jb 0x14007cc16
xchg rbx, rax
mov rbx, rdi
xchg rbx, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007cc60
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg rdx, r8
mov qword [rsp + 0x10], r8
xchg rdx, r8
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x2e]
xchg rbx, rdx
mov rbx, rdx
xchg rdx, rbx
call fcn.14007aa60
nop
xor eax, eax
mov byte [rbx + rax], 0x29
add byte [rbx + rax], 0x50
xor byte [rbx + rax], 0x7f
add byte [rbx + rax], 0x2e
sub byte [rbx + rax], 0x34
xor byte [rbx + rax], 0x17
add byte [rbx + rax], 0x4b
sub byte [rbx + rax], 0x1f
sub byte [rbx + rax], 0x43
inc rax
cmp rax, 0x5a
jb 0x14007cc95
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rax
xchg qword [rsp + 8], rdi
add rsp, 0x10
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007cd60
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg rdx, r14
mov qword [rsp + 0x10], r14
xchg r14, rdx
push rdi
sub rsp, 0x20
xchg rdi, rcx
mov rcx, rdi
xchg rdi, rcx
lea rbx, [rdx + 0x30]
xchg rbx, rdx
mov rbx, rdx
xchg rdx, rbx
call fcn.14007aa60
nop
xor eax, eax
mov byte [rbx + rax], 0x48
add byte [rbx + rax], 0x26
xor byte [rbx + rax], 7
sub byte [rbx + rax], 0x52
add byte [rbx + rax], 0x50
sub byte [rbx + rax], 0x67
inc rax
cmp rax, 0x5e
jb 0x14007cd93
xchg rsi, rdi
mov rax, rsi
xchg rdi, rsi
xchg rbx, r9
mov r9, qword [rsp + 0x30]
xchg rbx, r9
add rsp, 0x20
push rax
push rdx
push rcx
push rdx
push rax
push rbx
xchg qword [rsp + 0x30], rdi
pop rbx
pop rax
pop rdx
pop rcx
pop rdx
pop rax
add rsp, 8
ret
Function at 0x14007cdf0
Capabilities:
Encode data using xor

Disassembly:
xchg rdi, rbx
mov qword [rsp + 8], rdi
xchg rdi, rbx
xchg r8, rdx
mov qword [rsp + 0x10], r8
xchg r8, rdx
push rdi
sub rsp, 0x20
xchg rcx, rdi
mov rcx, rdi
xchg rcx, rdi
lea rbx, [rdx + 0x32]
mov rdx, rbx
call fcn.14007aa60
nop
xor eax, eax
mov byte [rbx + rax], 0x2c
xor byte [rbx + rax], 0x2a
xor byte [rbx + rax], 0x18
add byte [rbx + rax], 0x3c
xor byte [rbx + rax], 0x5a
xor byte [rbx + rax], 0x17
add byte [rbx + rax], 0x5b
sub byte [rbx + rax], 0x72
inc rax
cmp rax, 0x60
jb 0x14007ce23
xchg r10, rax
mov r10, rdi
xchg r10, rax
xchg r13, rbx
mov r13, qword [rsp + 0x30]
xchg rbx, r13
add rsp, 0x20
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007ce80
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg rdi, r9
mov r9, rcx
xchg rdi, r9
lea rbx, [rdx + 0x34]
xchg rdx, rcx
mov rcx, rbx
xchg rcx, rdx
call fcn.14007aa60
nop
xor eax, eax
mov byte [rbx + rax], 0x32
sub byte [rbx + rax], 0xb
xor byte [rbx + rax], 0x54
xor byte [rbx + rax], 0x6e
xor byte [rbx + rax], 0x5a
xor byte [rbx + rax], 0x79
sub byte [rbx + rax], 0x31
sub byte [rbx + rax], 0xd
inc rax
cmp rax, 0x64
jb 0x14007ceb6
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rdx
push rax
push rax
xchg qword [rsp + 0x18], rdi
add rsp, 0x20
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007cf10
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x38]
xchg rbx, rbp
mov rdx, rbp
xchg rbx, rbp
call fcn.14007aa60
nop
xor eax, eax
mov byte [rbx + rax], 0x38
xor byte [rbx + rax], 0x6c
sub byte [rbx + rax], 0x41
xor byte [rbx + rax], 0x14
add byte [rbx + rax], 0x19
xor byte [rbx + rax], 0x20
inc rax
cmp rax, 0x6e
jb 0x14007cf3f
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
xchg rbx, r12
mov r12, qword [rsp + 0x30]
xchg r12, rbx
add rsp, 0x20
push rbx
push rdx
push rax
xchg qword [rsp + 0x18], rdi
add rsp, 0x20
ret

Function at 0x14007cf90
Capabilities:
Encode data using xor

Disassembly:
xchg rsi, rbx
mov qword [rsp + 8], rsi
xchg rsi, rbx
xchg r14, rdx
mov qword [rsp + 0x10], r14
xchg rdx, r14
push rdi
sub rsp, 0x20
xchg rdi, r15
mov r15, rcx
xchg r15, rdi
lea rbx, [rdx + 0x4e]
xchg r15, rbx
mov rdx, r15
xchg rbx, r15
call fcn.14007aa60
nop
xor eax, eax
mov byte [rbx + rax], 0x55
xor byte [rbx + rax], 0x45
sub byte [rbx + rax], 6
xor byte [rbx + rax], 0x17
xor byte [rbx + rax], 0x7d
sub byte [rbx + rax], 0x60
inc rax
cmp rax, 0x98
jb 0x14007cfc9
xchg rdi, rdx
mov rax, rdx
xchg rdx, rdi
xchg rbx, rdx
mov rdx, qword [rsp + 0x30]
xchg rdx, rbx
add rsp, 0x20
push rcx
push rcx
push rdx
push rbx
push rdx
xchg qword [rsp + 0x28], rdi
pop rdx
pop rbx
pop rdx
pop rcx
pop rcx
add rsp, 8
ret
Function at 0x14007d020
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r9
mov qword [rsp + 8], r9
xchg r9, rbx
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x56]
xchg rdx, r13
mov r13, rbx
xchg r13, rdx
call fcn.14007aa60
nop
xor eax, eax
mov byte [rbx + rax], 0x3f
xor byte [rbx + rax], 0x71
sub byte [rbx + rax], 0x12
sub byte [rbx + rax], 0x22
add byte [rbx + rax], 0x5f
sub byte [rbx + rax], 0x16
xor byte [rbx + rax], 0x63
inc rax
cmp rax, 0xa8
jb 0x14007d04d
xchg rbp, rax
mov rbp, rdi
xchg rbp, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
ret

Function at 0x14007d090
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg rdi, rcx
mov rcx, rdi
xchg rdi, rcx
lea rbx, [rdx + 0x5a]
xchg rdx, rcx
mov rcx, rbx
xchg rdx, rcx
call fcn.14007aa60
nop
xor eax, eax
mov byte [rbx + rax], 6
xor byte [rbx + rax], 0x35
xor byte [rbx + rax], 0x33
xor byte [rbx + rax], 0x13
add byte [rbx + rax], 0x44
sub byte [rbx + rax], 0x57
inc rax
cmp rax, 0xb0
jb 0x14007d0bd
mov rax, rdi
xchg rbx, rdx
mov rdx, qword [rsp + 0x30]
xchg rbx, rdx
add rsp, 0x20
push rdx
push rax
push rbx
push rax
push rdx
push rcx
push rbx
push rax
xchg qword [rsp + 0x40], rdi
add rsp, 0x48
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007d110
Capabilities:
Encode data using xor

Disassembly:
xchg rdx, rbx
mov qword [rsp + 8], rdx
xchg rdx, rbx
mov qword [rsp + 0x10], rdx
nop
push 0x1c48d010
mov qword [rsp], rdi
sub rsp, 0x20
xchg rcx, r10
mov rdi, r10
xchg rcx, r10
lea rbx, [rdx + 0x70]
xchg rdx, rdi
mov rdi, rbx
xchg rdx, rdi
call fcn.14007aa60
nop
xor eax, eax
mov byte [rbx + rax], 0x3b
xor byte [rbx + rax], 0x6d
xor byte [rbx + rax], 0x3d
sub byte [rbx + rax], 0x52
xor byte [rbx + rax], 0x78
sub byte [rbx + rax], 2
sub byte [rbx + rax], 0x5f
inc rax
cmp rax, 0xdc
jb 0x14007d14c
mov rax, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
ret

Function at 0x14007d190
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg rdi, rbx
mov rbx, rcx
xchg rbx, rdi
lea rbx, [rdx + 0x70]
xchg rbx, rdx
mov rbx, rdx
xchg rdx, rbx
call fcn.14007aa60
nop
xor eax, eax
mov byte [rbx + rax], 0x6d
sub byte [rbx + rax], 0xa
xor byte [rbx + rax], 0xb
xor byte [rbx + rax], 0x4e
sub byte [rbx + rax], 0x24
xor byte [rbx + rax], 0x1d
add byte [rbx + rax], 0xc
xor byte [rbx + rax], 0x2b
inc rax
cmp rax, 0xde
jb 0x14007d1c6
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
ret
Function at 0x14007d210
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg rdx, r10
mov qword [rsp + 0x10], r10
xchg r10, rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg rcx, rdi
mov rcx, rdi
xchg rcx, rdi
lea rbx, [rdx + 0x76]
xchg rbx, rdx
mov rbx, rdx
xchg rdx, rbx
call fcn.14007aa60
nop
xor eax, eax
mov byte [rbx + rax], 0x12
xor byte [rbx + rax], 0x37
add byte [rbx + rax], 0x13
xor byte [rbx + rax], 0x7b
add byte [rbx + rax], 0x26
sub byte [rbx + rax], 1
xor byte [rbx + rax], 0x3f
sub byte [rbx + rax], 0x57
inc rax
cmp rax, 0xea
jb 0x14007d24b
xchg r14, rax
mov r14, rdi
xchg r14, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
ret

Function at 0x14007d2a0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg rdi, rdx
mov qword [rsp + 0x10], rdi
xchg rdx, rdi
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg rbp, rcx
mov rdi, rbp
xchg rcx, rbp
lea rbx, [rdx + 0x7c]
xchg rbx, r15
mov rdx, r15
xchg r15, rbx
call fcn.14007aa60
nop
xor eax, eax
mov byte [rbx + rax], 0x67
sub byte [rbx + rax], 0x44
xor byte [rbx + rax], 0x39
add byte [rbx + rax], 2
add byte [rbx + rax], 0x1e
sub byte [rbx + rax], 0x3a
inc rax
cmp rax, 0xf4
jb 0x14007d2db
mov rax, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
ret

Function at 0x14007d320
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r14
mov qword [rsp + 8], r14
xchg r14, rbx
xchg r11, rdx
mov qword [rsp + 0x10], r11
xchg r11, rdx
nop
push r9
mov qword [rsp], rdi
sub rsp, 0x20
xchg rcx, r11
mov rdi, r11
xchg r11, rcx
lea rbx, [rdx + 0x9a]
xchg rbx, rdx
mov rbx, rdx
xchg rbx, rdx
call fcn.14007aa60
nop
xor eax, eax
nop dword [rax]
nop dword [rax + rax]
mov byte [rbx + rax], 0x3e
xor byte [rbx + rax], 0x32
xor byte [rbx + rax], 0x61
sub byte [rbx + rax], 0x28
sub byte [rbx + rax], 0x32
sub byte [rbx + rax], 0x13
inc rax
cmp rax, 0x130
jb 0x14007d36e
xchg r8, rax
mov r8, rdi
xchg r8, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rax
xchg qword [rsp + 8], rdi
add rsp, 0x10
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007d3c0
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, rdi
mov qword [rsp + 8], rdi
xchg rbx, rdi
mov qword [rsp + 0x10], rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0xc]
xchg rdx, r14
mov r14, rbx
xchg rdx, r14
call fcn.14007aa60
nop
xor eax, eax
mov byte [rbx + rax], 0x19
add byte [rbx + rax], 0x2b
sub byte [rbx + rax], 0x1e
xor byte [rbx + rax], 0x39
sub byte [rbx + rax], 0x16
sub byte [rbx + rax], 9
inc rax
cmp rax, 0x14
jb 0x14007d3f6
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rdx
push rdx
push rcx
xchg qword [rsp + 0x18], rdi
add rsp, 0x20
ret
Function at 0x14007d440
Capabilities:
Encode data using xor

Disassembly:
xchg r15, rbx
mov qword [rsp + 8], r15
xchg r15, rbx
xchg rdx, r10
mov qword [rsp + 0x10], r10
xchg rdx, r10
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0xe]
xchg rbx, rdx
mov rbx, rdx
xchg rbx, rdx
call fcn.14007aa60
nop
xor eax, eax
mov byte [rbx + rax], 0x64
sub byte [rbx + rax], 0x21
xor byte [rbx + rax], 0
xor byte [rbx + rax], 0x41
add byte [rbx + rax], 0x47
sub byte [rbx + rax], 0xd
add byte [rbx + rax], 0x20
sub byte [rbx + rax], 0x5c
inc rax
cmp rax, 0x18
jb 0x14007d47c
mov rax, rdi
xchg rbx, r15
mov r15, qword [rsp + 0x30]
xchg rbx, r15
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007d4d0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg rdi, rdx
mov qword [rsp + 0x10], rdi
xchg rdi, rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg rcx, rdi
mov rcx, rdi
xchg rcx, rdi
lea rbx, [rdx + 0xe]
xchg r10, rdx
mov r10, rbx
xchg rdx, r10
call fcn.14007aa60
nop
xor eax, eax
mov byte [rbx + rax], 0x6b
xor byte [rbx + rax], 0x35
add byte [rbx + rax], 0x11
sub byte [rbx + rax], 0x2b
sub byte [rbx + rax], 0x3d
xor byte [rbx + rax], 2
add byte [rbx + rax], 0x26
sub byte [rbx + rax], 0x2b
inc rax
cmp rax, 0x1a
jb 0x14007d50b
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
xchg rbx, r8
mov r8, qword [rsp + 0x30]
xchg r8, rbx
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x140080ed0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
xchg rbp, r11
mov qword [rsp + 0x18], r11
xchg rbp, r11
push rsi
sub rsp, 0x20
cmp byte [r8 + 0x19], 0
xchg r8, rbx
mov r8, rbx
xchg r8, rbx
xchg rdx, r13
mov rsi, r13
xchg rdx, r13
mov rbp, rcx
jne 0x140080f8c
mov qword [rsp + 0x30], rdi
nop dword [rax]
nop dword [rax + rax]
mov r8, qword [rbx + 0x10]
xchg rdx, rsi
mov rsi, rdx
xchg rdx, rsi
mov rcx, rbp
call fcn.140080ed0
mov rdi, rbx
mov rbx, qword [rbx]
lea rcx, [rdi + 0x28]
call fcn.1400914c0
mov edx, 0x64cd7d4a
add edx, 0xe5e63d2
sub edx, 0x1b5189e0
add edx, 0x494c1e
xor edx, 0x5915bca6
add edx, 0x1770df50
add edx, 0x2c25b0fe
sub edx, 0x44ccafb2
xchg rdi, r15
mov rcx, r15
xchg rdi, r15
call fcn.1401fcb88
cmp byte [rbx + 0x19], 0
je 0x140080f16
xchg rdi, r9
mov r9, qword [rsp + 0x30]
xchg r9, rdi
mov rbx, qword [rsp + 0x38]
mov rbp, qword [rsp + 0x40]
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rsi
nop
add rsp, 8
jmp qword [rsp - 8]