joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140035950
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rcx
push rbx
nop
push r12
mov qword [rsp], rsi
nop
mov qword [rsp - 8], rdi
sub rsp, 8
push r12
nop
mov qword [rsp - 8], r13
sub rsp, 8
nop
sub rsp, 8
mov qword [rsp], r14
push r15
sub rsp, 0x30
mov r15, rdx
mov r14, rcx
movabs rsi, 0xfffffff56f9ea94
sub rsi, 0x10c6a0a
sub rsi, 0x2548f8d6
add rsi, 0x3f0e402d
sub rsi, 0x3d6e0e12
add rsi, 0x7fffffff
xor rsi, 0x4dbb4631
cmp rdx, rsi
ja 0x140035b6b
mov r12, qword [rcx + 8]
sub r12, qword [rcx]
sar r12, 1
sar r12, 3
mov rcx, qword [rcx + 0x10]
sub rcx, qword [r14]
sar rcx, 4
mov rdx, rcx
shr rdx, 1
mov rax, rsi
sub rax, rdx
cmp rcx, rax
ja 0x1400359fe
lea rsi, [rdx + rcx]
cmp rsi, r15
cmovb rsi, r15
mov qword [rsp + 0x88], rsi
xchg rsi, r15
mov rdx, r15
xchg rsi, r15
mov rcx, r14
call fcn.140053870
xchg r9, r13
mov r9, rax
xchg r9, r13
xchg rcx, rax
mov qword [rsp + 0x28], rcx
xchg rcx, rax
xchg r12, r9
mov rbx, r9
xchg r12, r9
shl rbx, 4
add rbx, rax
xchg rbp, rbx
mov qword [rsp + 0x20], rbp
xchg rbx, rbp
mov rdi, r15
sub rdi, r12
mov qword [rsp + 0x78], rbx
je 0x140035aa4
nop word [rax + rax]
mov byte [rbx], 0x26
add byte [rbx], 0x2e
sub byte [rbx], 0x44
sub byte [rbx], 4
add byte [rbx], 4
xor byte [rbx], 0x3a
xor byte [rbx], 0x7d
xor byte [rbx], 0x56
xor byte [rbx], 1
lea rcx, [rbx + 8]
xor edx, edx
call fcn.14004bb90
nop
nop
add rbx, 0x1777ebdc
sub rbx, 0x1777ebcc
mov qword [rsp + 0x78], rbx
sub rdi, 1
jne 0x140035a5f
xchg r8, r13
mov r13, qword [r14 + 8]
xchg r8, r13
xchg r11, r13
mov rdx, r11
xchg r11, r13
mov rcx, qword [r14]
cmp rcx, r8
je 0x140035b00
xor r9d, r9d
movzx eax, byte [rcx]
mov byte [rdx], al
mov rax, qword [rcx + 8]
xchg r15, rax
mov qword [rdx + 8], r15
xchg r15, rax
mov byte [rcx], r9b
xchg r12, r9
mov qword [rcx + 8], r12
xchg r12, r9
lea rdx, [rdx + 0x10]
nop
add rcx, 0x285a3117
sub rcx, 0x285a3107
cmp rcx, r8
jne 0x140035ac6
xchg r9, r8
mov r8, rsi
xchg r8, r9
mov r8, r15
xchg r12, rdx
mov r12, r13
xchg rdx, r12
mov rcx, r14
add rsp, 0x30
nop
add rsp, 8
xchg qword [rsp - 8], r15
nop
mov r14, qword [rsp]
add rsp, 8
nop
mov r13, qword [rsp]
add rsp, 8
nop
mov r12, qword [rsp]
add rsp, 8
push rax
push rbx
xchg qword [rsp + 0x10], rdi
pop rbx
pop rax
add rsp, 8
push rbx
push rdx
push rdx
push rax
push rax
xchg qword [rsp + 0x28], rsi
add rsp, 0x30
nop
add rsp, 8
xchg qword [rsp - 8], rbx
jmp fcn.140052a00
call fcn.14002f8d0
int3
Function at 0x140035bf0
Capabilities:
Encode data using xor

Disassembly:
xchg rdx, rbx
mov qword [rsp + 8], rdx
xchg rbx, rdx
push rdi
sub rsp, 0x20
xchg rdx, rdi
mov rdx, rdi
xchg rdi, rdx
xchg rsi, rcx
mov rbx, rsi
xchg rsi, rcx
test rdx, rdx
je 0x140035c56
nop word [rax + rax]
mov byte [rbx], 2
add byte [rbx], 0x50
sub byte [rbx], 0x39
add byte [rbx], 0x41
add byte [rbx], 0x23
sub byte [rbx], 0x13
xor byte [rbx], 0x5a
sub byte [rbx], 0x30
lea rcx, [rbx + 8]
xor edx, edx
call fcn.14004bb90
nop
neg rbx
add rbx, 0xfffffffffffffff0
neg rbx
sub rdi, 1
jne 0x140035c22
xchg rbx, rax
mov rbx, rax
xchg rbx, rax
xchg rbx, rdi
mov rdi, qword [rsp + 0x30]
xchg rbx, rdi
add rsp, 0x20
push rdx
push rbx
push rbx
push rax
xchg qword [rsp + 0x20], rdi
add rsp, 0x28
nop
add rsp, 8
jmp qword [rsp - 8]
Function at 0x14004c370
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
mov byte [rcx + rax + 6], 0x31
add byte [rcx + rax + 6], 4
xor byte [rcx + rax + 6], 0xc
sub byte [rcx + rax + 6], 3
add byte [rcx + rax + 6], 0x2f
xor byte [rcx + rax + 6], 0x38
xor byte [rcx + rax + 6], 0x50
sub byte [rcx + rax + 6], 0xd
inc rax
cmp rax, 8
jb 0x14004c372
ret

Function at 0x14004c3b0
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
mov byte [rcx + rax + 6], 0x13
add byte [rcx + rax + 6], 0x55
xor byte [rcx + rax + 6], 0x3a
sub byte [rcx + rax + 6], 7
xor byte [rcx + rax + 6], 0x64
sub byte [rcx + rax + 6], 0xc
add byte [rcx + rax + 6], 0xe
add byte [rcx + rax + 6], 0x23
sub byte [rcx + rax + 6], 0x54
inc rax
cmp rax, 0xa
jb 0x14004c3b2
ret
Function at 0x140076380
Capabilities:
Encode data using xor

Disassembly:
xchg rdi, r9
mov rdi, rcx
xchg r9, rdi
mov r8d, 0x2f0c25ca
sub r8d, 0xaee7127
add r8d, 0x1c8f9caf
sub r8d, 0x22d7874d
xor r8d, 0x3d51b186
add r8d, 0x5846f33b
sub r8d, 0x4a7a55c7
add r8d, 0x1f3c4c24
add r8d, 0xb2729ae4
test rcx, rcx
je 0x1400764ad
cmp byte [rcx], 0
je 0x1400764ad
test rdx, rdx
jne 0x14007643c
nop
movabs rdx, 0xffffffff7835ca5d
sub rdx, 0x68ba2844
xor rdx, 0xc8da3c3
add rdx, 0x5847f714
add rdx, 0x926fc26
xor rdx, 0x7a724a02
xor rdx, 0x3b1872f3
add rdx, 0x7fffffff
add rdx, 0x5bf1321b
nop
inc rdx
cmp byte [rcx + rdx], 0
jne 0x140076426
test rdx, rdx
je 0x1400764aa
xor r10d, r10d
lea r11, [0x140002dd0]
nop dword [rax + rax]
movsx eax, byte [r9]
lea r9, [r9 + 1]
movzx ecx, r8b
inc r10d
push rcx
xor ecx, eax
push rcx
xor rcx, qword [rsp + 8]
shr rcx, 0x20
ror rax, 0x20
xor ecx, eax
ror rax, 0x20
shl rcx, 0x20
xor rcx, qword [rsp]
add rsp, 0x10
shr r8d, 1
shr r8d, 5
shr r8d, 1
shr r8d, 1
and ecx, 0x3ff
mov eax, r10d
xor r8d, dword [r11 + rcx*4]
xor r8d, 0x3948a593
cmp rax, rdx
jb 0x14007644e
not r8d
mov eax, r8d
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007b280
Capabilities:
Encode data using xor

Disassembly:
mov rax, qword [rcx + 0x10]
xchg rcx, rbx
mov rdx, rbx
xchg rbx, rcx
test rax, rax
jne 0x14007b2a1
xor r8d, r8d
mov eax, r8d
nop
add rsp, 8
jmp qword [rsp - 8]
cmp byte [rcx], 0
jne 0x14007b2ee
xor r8d, r8d
cmp qword [rcx + 8], r8
jbe 0x14007b2d3
xchg r11, rax
mov r11, qword [rdx + 0x10]
xchg r11, rax
lea rcx, [rax + r8*2]
movzx eax, word [rdx + 2]
xor word [rcx], ax
inc r8
cmp r8, qword [rdx + 8]
jb 0x14007b2af
xchg rdi, rax
mov rdi, qword [rdx + 0x10]
xchg rdi, rax
mov byte [rdx], 3
add byte [rdx], 0x52
xor byte [rdx], 0x4e
add byte [rdx], 0x3f
add byte [rdx], 3
xor byte [rdx], 0x70
xor byte [rdx], 0x3c
sub byte [rdx], 8
xor byte [rdx], 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007b300
Capabilities:
Encode data using xor

Disassembly:
xchg r10, rax
mov r10, qword [rcx + 0x10]
xchg r10, rax
mov rdx, rcx
test rax, rax
jne 0x14007b31f
xor r8d, r8d
mov eax, r8d
nop
add rsp, 8
jmp qword [rsp - 8]
cmp byte [rcx], 0
jne 0x14007b365
xor r8d, r8d
cmp qword [rcx + 8], r8
jbe 0x14007b34a
mov rcx, qword [rdx + 0x10]
movzx eax, byte [rdx + 1]
xor byte [rcx + r8], al
inc r8
cmp r8, qword [rdx + 8]
jb 0x14007b32d
xchg rdi, rax
mov rdi, qword [rdx + 0x10]
xchg rdi, rax
mov byte [rdx], 0x54
xor byte [rdx], 0x26
add byte [rdx], 6
sub byte [rdx], 0x50
xor byte [rdx], 0x4a
sub byte [rdx], 0x36
add byte [rdx], 6
sub byte [rdx], 0xc
sub byte [rdx], 0x25
ret

Function at 0x14007b6b0
Capabilities:
Encode data using xor

Disassembly:
mov rax, qword [rcx + 0x10]
xchg rsi, rdx
mov rsi, rcx
xchg rsi, rdx
test rax, rax
jne 0x14007b6c3
ret
cmp byte [rcx], 0
jne 0x14007b704
xor r8d, r8d
cmp qword [rcx + 8], r8
jbe 0x14007b6f2
nop dword [rax + rax]
mov rax, qword [rdx + 0x10]
lea rcx, [rax + r8*2]
movzx eax, word [rdx + 2]
xor word [rcx], ax
inc r8
cmp r8, qword [rdx + 8]
jb 0x14007b6d6
mov rax, qword [rdx + 0x10]
mov byte [rdx], 4
add byte [rdx], 0x6a
xor byte [rdx], 0x48
xor byte [rdx], 0x70
add byte [rdx], 3
xor byte [rdx], 0x58
ret
Function at 0x14007bf40
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg rdx, r9
mov qword [rsp + 0x10], r9
xchg r9, rdx
push rdi
sub rsp, 0x20
xchg rcx, rdx
mov rdi, rdx
xchg rdx, rcx
lea rbx, [rdx + 4]
xchg rdx, rdi
mov rdi, rbx
xchg rdi, rdx
call fcn.14007ab00
nop
xor eax, eax
mov byte [rbx + rax], 0x5c
sub byte [rbx + rax], 0x3d
xor byte [rbx + rax], 0x34
sub byte [rbx + rax], 7
xor byte [rbx + rax], 0x48
xor byte [rbx + rax], 0xb
sub byte [rbx + rax], 0x67
inc rax
cmp rax, 6
jb 0x14007bf73
xchg rbp, rdi
mov rax, rbp
xchg rbp, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
ret

Function at 0x14007bfc0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rdi
mov qword [rsp], rdi
sub rsp, 0x20
xchg rcx, r10
mov rdi, r10
xchg rcx, r10
lea rbx, [rdx + 6]
xchg rsi, rdx
mov rsi, rbx
xchg rsi, rdx
call fcn.14007ab00
nop
xor eax, eax
mov byte [rbx + rax], 0x25
xor byte [rbx + rax], 0x3b
add byte [rbx + rax], 0x53
sub byte [rbx + rax], 0x6d
add byte [rbx + rax], 0x3e
sub byte [rbx + rax], 0x42
inc rax
cmp rax, 8
jb 0x14007bff1
xchg rdi, r13
mov rax, r13
xchg r13, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c0d0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 8]
xchg rdx, rbx
mov rbx, rdx
xchg rdx, rbx
call fcn.14007ab00
nop
xor eax, eax
mov byte [rbx + rax], 0x47
sub byte [rbx + rax], 0x1c
add byte [rbx + rax], 0x21
sub byte [rbx + rax], 0x39
add byte [rbx + rax], 0x50
xor byte [rbx + rax], 0x48
add byte [rbx + rax], 0x2d
xor byte [rbx + rax], 0x7b
xor byte [rbx + rax], 0x23
inc rax
cmp rax, 0xe
jb 0x14007c0ff
xchg rdi, r13
mov rax, r13
xchg rdi, r13
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rdx
push rax
push rbx
push rax
xchg qword [rsp + 0x20], rdi
add rsp, 0x28
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c160
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg r8, rdi
mov r8, rcx
xchg r8, rdi
lea rbx, [rdx + 0xa]
xchg rdx, rbx
mov rbx, rdx
xchg rbx, rdx
call fcn.14007ab00
nop
xor eax, eax
mov byte [rbx + rax], 0x6e
xor byte [rbx + rax], 0x6e
xor byte [rbx + rax], 0x44
sub byte [rbx + rax], 0x28
add byte [rbx + rax], 0x2c
sub byte [rbx + rax], 0x45
add byte [rbx + rax], 0x51
sub byte [rbx + rax], 0x54
inc rax
cmp rax, 0x10
jb 0x14007c18d
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret
Function at 0x14007c1e0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg r10, rdi
mov r10, rcx
xchg rdi, r10
lea rbx, [rdx + 0xa]
xchg rdx, rcx
mov rcx, rbx
xchg rdx, rcx
call fcn.14007ab00
nop
xor eax, eax
mov byte [rbx + rax], 0x60
xor byte [rbx + rax], 0x15
sub byte [rbx + rax], 0x59
xor byte [rbx + rax], 0xc
xor byte [rbx + rax], 0x23
sub byte [rbx + rax], 0x33
inc rax
cmp rax, 0x12
jb 0x14007c215
xchg r9, rax
mov r9, rdi
xchg r9, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c260
Capabilities:
Encode data using xor

Disassembly:
xchg r8, rbx
mov qword [rsp + 8], r8
xchg r8, rbx
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg rcx, rdi
mov rcx, rdi
xchg rdi, rcx
lea rbx, [rdx + 0x10]
mov rdx, rbx
call fcn.14007ab00
nop
xor eax, eax
mov byte [rbx + rax], 0x20
xor byte [rbx + rax], 0x4c
sub byte [rbx + rax], 0x3d
xor byte [rbx + rax], 0x13
sub byte [rbx + rax], 0x28
add byte [rbx + rax], 0x1b
add byte [rbx + rax], 6
add byte [rbx + rax], 0x38
xor byte [rbx + rax], 0x6d
inc rax
cmp rax, 0x1e
jb 0x14007c28d
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
xchg rbx, r10
mov r10, qword [rsp + 0x30]
xchg r10, rbx
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
ret

Function at 0x14007c360
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg rdi, rcx
mov rcx, rdi
xchg rcx, rdi
lea rbx, [rdx + 0x12]
mov rdx, rbx
call fcn.14007ab00
nop
xor eax, eax
mov byte [rbx + rax], 0x45
add byte [rbx + rax], 2
xor byte [rbx + rax], 0x2c
sub byte [rbx + rax], 0x1d
sub byte [rbx + rax], 0x15
sub byte [rbx + rax], 0x1d
add byte [rbx + rax], 0x28
sub byte [rbx + rax], 0x11
sub byte [rbx + rax], 0x33
inc rax
cmp rax, 0x22
jb 0x14007c387
mov rax, rdi
xchg rbx, rdx
mov rdx, qword [rsp + 0x30]
xchg rdx, rbx
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c3e0
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
xchg rsi, rbx
mov qword [rsp + 8], rsi
xchg rsi, rbx
xchg rdx, r15
mov qword [rsp + 0x10], r15
xchg rdx, r15
push rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x14]
xchg rdx, rbx
mov rbx, rdx
xchg rdx, rbx
call fcn.14007ab00
nop
xor eax, eax
mov byte [rbx + rax], 0x4f
xor byte [rbx + rax], 0x2e
xor byte [rbx + rax], 0x22
xor byte [rbx + rax], 0x24
sub byte [rbx + rax], 0x14
xor byte [rbx + rax], 0x53
add byte [rbx + rax], 0
inc rax
cmp rax, 0x24
jb 0x14007c413
mov rax, rdi
xchg rbx, r8
mov r8, qword [rsp + 0x30]
xchg rbx, r8
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]
Function at 0x14007c460
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg rdx, r13
mov qword [rsp + 0x10], r13
xchg rdx, r13
push rdi
sub rsp, 0x20
xchg rsi, rdi
mov rsi, rcx
xchg rsi, rdi
lea rbx, [rdx + 0x14]
xchg rdx, rbx
mov rbx, rdx
xchg rdx, rbx
call fcn.14007ab00
nop
xor eax, eax
mov byte [rbx + rax], 0
add byte [rbx + rax], 2
add byte [rbx + rax], 0x2c
add byte [rbx + rax], 0x41
xor byte [rbx + rax], 6
sub byte [rbx + rax], 8
xor byte [rbx + rax], 0x66
xor byte [rbx + rax], 7
inc rax
cmp rax, 0x26
jb 0x14007c493
xchg r15, rax
mov r15, rdi
xchg r15, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c4e0
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r9
mov qword [rsp + 8], r9
xchg r9, rbx
mov qword [rsp + 0x10], rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg rbx, rdi
mov rbx, rcx
xchg rbx, rdi
lea rbx, [rdx + 0x16]
mov rdx, rbx
call fcn.14007ab00
nop
xor eax, eax
mov byte [rbx + rax], 0x30
sub byte [rbx + rax], 0x23
add byte [rbx + rax], 0x2d
xor byte [rbx + rax], 0x2b
add byte [rbx + rax], 0x47
sub byte [rbx + rax], 0x58
inc rax
cmp rax, 0x28
jb 0x14007c515
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c560
Capabilities:
Encode data using xor

Disassembly:
xchg rsi, rbx
mov qword [rsp + 8], rsi
xchg rsi, rbx
xchg rdx, rsi
mov qword [rsp + 0x10], rsi
xchg rsi, rdx
nop
push 0x349f51a6
mov qword [rsp], rdi
sub rsp, 0x20
xchg rcx, rdi
mov rcx, rdi
xchg rdi, rcx
lea rbx, [rdx + 0x16]
mov rdx, rbx
call fcn.14007ab00
nop
xor eax, eax
mov byte [rbx + rax], 0x16
add byte [rbx + rax], 0x44
xor byte [rbx + rax], 0x30
sub byte [rbx + rax], 0xf
xor byte [rbx + rax], 0x77
sub byte [rbx + rax], 0x2c
inc rax
cmp rax, 0x2a
jb 0x14007c59c
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rbx
xchg qword [rsp + 8], rdi
pop rbx
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c5f0
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r8
mov qword [rsp + 8], r8
xchg r8, rbx
xchg rdx, rbx
mov qword [rsp + 0x10], rbx
xchg rbx, rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x18]
xchg r8, rdx
mov r8, rbx
xchg rdx, r8
call fcn.14007ab00
nop
xor eax, eax
mov byte [rbx + rax], 0x79
xor byte [rbx + rax], 0x7f
sub byte [rbx + rax], 4
xor byte [rbx + rax], 0x22
xor byte [rbx + rax], 0x34
sub byte [rbx + rax], 0xf
add byte [rbx + rax], 0x54
add byte [rbx + rax], 0x15
sub byte [rbx + rax], 0x6e
inc rax
cmp rax, 0x2e
jb 0x14007c62c
xchg rdi, rbp
mov rax, rbp
xchg rdi, rbp
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rcx
push rdx
push rbx
push rdx
push rbx
push rcx
push rbx
xchg qword [rsp + 0x38], rdi
add rsp, 0x40
nop
add rsp, 8
jmp qword [rsp - 8]
Function at 0x14007c720
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg rdi, r14
mov r14, rcx
xchg r14, rdi
lea rbx, [rdx + 0x1c]
xchg rbx, rdx
mov rbx, rdx
xchg rdx, rbx
call fcn.14007ab00
nop
xor eax, eax
mov byte [rbx + rax], 6
xor byte [rbx + rax], 0x5f
sub byte [rbx + rax], 0x38
add byte [rbx + rax], 9
sub byte [rbx + rax], 0xe
sub byte [rbx + rax], 0x1c
inc rax
cmp rax, 0x34
jb 0x14007c756
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
xchg rbp, rbx
mov rbp, qword [rsp + 0x30]
xchg rbx, rbp
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c7a0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg r8, rcx
mov rdi, r8
xchg r8, rcx
lea rbx, [rdx + 0x1c]
xchg rbx, rdx
mov rbx, rdx
xchg rdx, rbx
call fcn.14007ab00
nop
xor eax, eax
mov byte [rbx + rax], 0x3f
xor byte [rbx + rax], 0x4c
xor byte [rbx + rax], 0x7e
add byte [rbx + rax], 0x27
xor byte [rbx + rax], 0x5e
sub byte [rbx + rax], 0x53
sub byte [rbx + rax], 0x17
inc rax
cmp rax, 0x36
jb 0x14007c7cd
xchg rcx, rax
mov rcx, rdi
xchg rcx, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
ret

Function at 0x14007c810
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r13
mov qword [rsp + 8], r13
xchg rbx, r13
xchg r10, rdx
mov qword [rsp + 0x10], r10
xchg rdx, r10
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg r15, rcx
mov rdi, r15
xchg r15, rcx
lea rbx, [rdx + 0x1e]
xchg rdx, r8
mov r8, rbx
xchg rdx, r8
call fcn.14007ab00
nop
xor eax, eax
mov byte [rbx + rax], 0x5f
xor byte [rbx + rax], 8
sub byte [rbx + rax], 0x28
xor byte [rbx + rax], 0x7b
xor byte [rbx + rax], 0x73
xor byte [rbx + rax], 0x11
xor byte [rbx + rax], 0x2f
xor byte [rbx + rax], 0x24
sub byte [rbx + rax], 0x3d
inc rax
cmp rax, 0x38
jb 0x14007c852
mov rax, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
ret

Function at 0x14007c8a0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg rdx, r15
mov qword [rsp + 0x10], r15
xchg rdx, r15
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x20]
xchg rcx, rdx
mov rcx, rbx
xchg rdx, rcx
call fcn.14007ab00
nop
xor eax, eax
mov byte [rbx + rax], 0x31
add byte [rbx + rax], 3
sub byte [rbx + rax], 0x32
add byte [rbx + rax], 0x5f
sub byte [rbx + rax], 0x3c
xor byte [rbx + rax], 0x25
inc rax
cmp rax, 0x3e
jb 0x14007c8d6
mov rax, rdi
xchg rbx, r11
mov r11, qword [rsp + 0x30]
xchg r11, rbx
add rsp, 0x20
push rcx
push rcx
xchg qword [rsp + 0x10], rdi
pop rcx
pop rcx
add rsp, 8
ret
Function at 0x14007c920
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg rdi, rcx
mov rcx, rdi
xchg rdi, rcx
lea rbx, [rdx + 0x22]
xchg rdx, rdi
mov rdi, rbx
xchg rdx, rdi
call fcn.14007ab00
nop
xor eax, eax
mov byte [rbx + rax], 0x6b
add byte [rbx + rax], 0
sub byte [rbx + rax], 0x11
sub byte [rbx + rax], 0xf
add byte [rbx + rax], 0x25
sub byte [rbx + rax], 0x3c
xor byte [rbx + rax], 0x73
xor byte [rbx + rax], 0x47
inc rax
cmp rax, 0x40
jb 0x14007c94d
xchg rdx, rax
mov rdx, rdi
xchg rdx, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rcx
push rbx
push rcx
xchg qword [rsp + 0x18], rdi
pop rcx
pop rbx
pop rcx
add rsp, 8
ret

Function at 0x14007c9a0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg rcx, rdi
mov rcx, rdi
xchg rcx, rdi
lea rbx, [rdx + 0x22]
xchg rdi, rdx
mov rdi, rbx
xchg rdx, rdi
call fcn.14007ab00
nop
xor eax, eax
mov byte [rbx + rax], 0x4e
sub byte [rbx + rax], 0x4b
xor byte [rbx + rax], 0
xor byte [rbx + rax], 0x46
sub byte [rbx + rax], 0x1f
add byte [rbx + rax], 0x29
add byte [rbx + rax], 0x19
xor byte [rbx + rax], 0x68
inc rax
cmp rax, 0x42
jb 0x14007c9cd
xchg r12, rax
mov r12, rdi
xchg r12, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007ca20
Capabilities:
Encode data using xor

Disassembly:
xchg r8, rbx
mov qword [rsp + 8], r8
xchg r8, rbx
mov qword [rsp + 0x10], rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg rbp, rcx
mov rdi, rbp
xchg rbp, rcx
lea rbx, [rdx + 0x24]
xchg rbx, r12
mov rdx, r12
xchg r12, rbx
call fcn.14007ab00
nop
xor eax, eax
mov byte [rbx + rax], 0x61
sub byte [rbx + rax], 0xc
xor byte [rbx + rax], 0x6c
add byte [rbx + rax], 0x24
xor byte [rbx + rax], 0x41
add byte [rbx + rax], 0xa
add byte [rbx + rax], 0x3d
sub byte [rbx + rax], 0x4a
sub byte [rbx + rax], 0x19
inc rax
cmp rax, 0x46
jb 0x14007ca5c
xchg r15, rax
mov r15, rdi
xchg r15, rax
xchg rbp, rbx
mov rbp, qword [rsp + 0x30]
xchg rbp, rbx
add rsp, 0x20
push rbx
push rdx
push rbx
push rdx
xchg qword [rsp + 0x20], rdi
add rsp, 0x28
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007cac0
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r10
mov qword [rsp + 8], r10
xchg rbx, r10
xchg rdx, rsi
mov qword [rsp + 0x10], rsi
xchg rsi, rdx
push rdi
sub rsp, 0x20
xchg rcx, rdi
mov rcx, rdi
xchg rdi, rcx
lea rbx, [rdx + 0x28]
xchg r15, rdx
mov r15, rbx
xchg rdx, r15
call fcn.14007ab00
nop
xor eax, eax
mov byte [rbx + rax], 0x6b
sub byte [rbx + rax], 0x2c
sub byte [rbx + rax], 0x16
add byte [rbx + rax], 0x4e
add byte [rbx + rax], 4
xor byte [rbx + rax], 0x7b
inc rax
cmp rax, 0x4c
jb 0x14007caf9
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
xchg rbx, r8
mov r8, qword [rsp + 0x30]
xchg rbx, r8
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]
Function at 0x14007cb50
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg rdx, rbx
mov qword [rsp + 0x10], rbx
xchg rbx, rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg rdi, rcx
mov rcx, rdi
xchg rcx, rdi
lea rbx, [rdx + 0x2a]
mov rdx, rbx
call fcn.14007ab00
nop
xor eax, eax
mov byte [rbx + rax], 0x3c
add byte [rbx + rax], 0x11
xor byte [rbx + rax], 0x5c
xor byte [rbx + rax], 0x6b
xor byte [rbx + rax], 0x73
add byte [rbx + rax], 0x42
add byte [rbx + rax], 0x2a
add byte [rbx + rax], 2
xor byte [rbx + rax], 0x77
inc rax
cmp rax, 0x50
jb 0x14007cb86
xchg rdi, rbx
mov rax, rbx
xchg rdi, rbx
xchg rbx, rbp
mov rbp, qword [rsp + 0x30]
xchg rbx, rbp
add rsp, 0x20
push rdx
push rcx
xchg qword [rsp + 0x10], rdi
pop rcx
pop rdx
add rsp, 8
ret

Function at 0x14007cbe0
Capabilities:
Encode data using xor

Disassembly:
xchg r11, rbx
mov qword [rsp + 8], r11
xchg rbx, r11
xchg rdx, r8
mov qword [rsp + 0x10], r8
xchg rdx, r8
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg rdi, r9
mov r9, rcx
xchg r9, rdi
lea rbx, [rdx + 0x2a]
xchg rcx, rdx
mov rcx, rbx
xchg rdx, rcx
call fcn.14007ab00
nop
xor eax, eax
mov byte [rbx + rax], 0x5b
xor byte [rbx + rax], 0x1c
xor byte [rbx + rax], 0x3c
xor byte [rbx + rax], 0x39
add byte [rbx + rax], 0x27
sub byte [rbx + rax], 0x2f
xor byte [rbx + rax], 0x7e
xor byte [rbx + rax], 0x44
add byte [rbx + rax], 0
inc rax
cmp rax, 0x52
jb 0x14007cc22
xchg r14, rax
mov r14, rdi
xchg r14, rax
xchg rdi, rbx
mov rdi, qword [rsp + 0x30]
xchg rdi, rbx
add rsp, 0x20
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007cc80
Capabilities:
Encode data using xor

Disassembly:
xchg r14, rbx
mov qword [rsp + 8], r14
xchg r14, rbx
xchg rbp, rdx
mov qword [rsp + 0x10], rbp
xchg rbp, rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x2c]
xchg rbx, rcx
mov rdx, rcx
xchg rbx, rcx
call fcn.14007ab00
nop
xor eax, eax
mov byte [rbx + rax], 0x64
add byte [rbx + rax], 0xe
sub byte [rbx + rax], 0x58
add byte [rbx + rax], 0x11
xor byte [rbx + rax], 3
sub byte [rbx + rax], 0xe
xor byte [rbx + rax], 0x2f
sub byte [rbx + rax], 0xe
sub byte [rbx + rax], 0x27
inc rax
cmp rax, 0x54
jb 0x14007ccbc
xchg r10, rdi
mov rax, r10
xchg r10, rdi
xchg rsi, rbx
mov rsi, qword [rsp + 0x30]
xchg rsi, rbx
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]