joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140035820
Capabilities:
Encode data using xor

Disassembly:
xchg rbp, rcx
mov qword [rsp + 8], rbp
xchg rbp, rcx
push rbx
nop
mov qword [rsp - 8], rsi
sub rsp, 8
nop
sub rsp, 8
mov qword [rsp], rdi
push r12
nop
mov qword [rsp - 8], r13
sub rsp, 8
push rsi
mov qword [rsp], r14
push r14
mov qword [rsp], r15
sub rsp, 0x30
xchg rbp, rdx
mov r15, rbp
xchg rbp, rdx
xchg rbp, rcx
mov r14, rbp
xchg rcx, rbp
movabs rsi, 0xfffffff66f18c21
sub rsi, 0x29aae321
add rsi, 0x21651d09
xor rsi, 0x6df24a95
sub rsi, 0x2d1d4fa5
add rsi, 0x7fffffff
add rsi, 0x79c3c309
cmp rdx, rsi
ja 0x140035a88
xchg r13, r12
mov r13, qword [rcx + 8]
xchg r12, r13
sub r12, qword [rcx]
sar r12, 4
mov rcx, qword [rcx + 0x10]
sub rcx, qword [r14]
sar rcx, 2
sar rcx, 1
sar rcx, 1
mov rdx, rcx
shr rdx, 1
xchg r14, rax
mov r14, rsi
xchg r14, rax
sub rax, rdx
cmp rcx, rax
ja 0x1400358ef
lea rsi, [rdx + rcx]
cmp rsi, r15
cmovb rsi, r15
xchg rsi, r11
mov qword [rsp + 0x88], r11
xchg r11, rsi
xchg r10, rdx
mov r10, rsi
xchg rdx, r10
mov rcx, r14
call fcn.140053860
mov r13, rax
xchg r10, rax
mov qword [rsp + 0x28], r10
xchg r10, rax
xchg rbx, r12
mov r12, rbx
xchg rbx, r12
shl rbx, 1
shl rbx, 1
shl rbx, 2
add rbx, rax
mov qword [rsp + 0x20], rbx
xchg rdi, r15
mov r15, rdi
xchg r15, rdi
sub rdi, r12
xchg rbx, r8
mov qword [rsp + 0x78], r8
xchg rbx, r8
je 0x1400359a7
nop word [rax + rax]
mov byte [rbx], 0x58
sub byte [rbx], 0x55
add byte [rbx], 0x2b
add byte [rbx], 0x3d
add byte [rbx], 0xc
sub byte [rbx], 0x66
add byte [rbx], 0x67
xor byte [rbx], 0x4e
sub byte [rbx], 0x36
lea rcx, [rbx + 8]
xor edx, edx
call fcn.14004ba80
nop
nop
add rbx, 0x5aabf6ec
sub rbx, 0x5aabf6dc
xchg rdi, rbx
mov qword [rsp + 0x78], rdi
xchg rdi, rbx
sub rdi, 1
jne 0x14003595c
xchg r8, r15
mov r15, qword [r14 + 8]
xchg r8, r15
xchg rdx, r13
mov r13, rdx
xchg rdx, r13
xchg r11, rcx
mov r11, qword [r14]
xchg r11, rcx
cmp rcx, r8
je 0x140035a03
xor r9d, r9d
movzx eax, byte [rcx]
mov byte [rdx], al
xchg r12, rax
mov r12, qword [rcx + 8]
xchg r12, rax
mov qword [rdx + 8], rax
mov byte [rcx], r9b
mov qword [rcx + 8], r9
lea rdx, [rdx + 0x10]
nop
add rcx, 0x3d2b3da1
sub rcx, 0x3d2b3d91
cmp rcx, r8
jne 0x1400359cf
xchg r9, rsi
mov rsi, r9
xchg r9, rsi
xchg r8, r14
mov r14, r15
xchg r8, r14
xchg r9, rdx
mov r9, r13
xchg rdx, r9
xchg r14, rcx
mov r14, rcx
xchg r14, rcx
add rsp, 0x30
nop
add rsp, 8
xchg qword [rsp - 8], r15
nop
add rsp, 8
xchg qword [rsp - 8], r14
push rax
push rbx
push rdx
xchg qword [rsp + 0x18], r13
pop rdx
pop rbx
pop rax
add rsp, 8
nop
mov r12, qword [rsp]
add rsp, 8
nop
add rsp, 8
xchg qword [rsp - 8], rdi
push rcx
push rcx
xchg qword [rsp + 0x10], rsi
pop rcx
pop rcx
add rsp, 8
push rcx
push rcx
push rdx
push rdx
push rcx
push rdx
xchg qword [rsp + 0x30], rbx
pop rdx
pop rcx
pop rdx
pop rdx
pop rcx
pop rcx
add rsp, 8
jmp fcn.140052970
call fcn.14002f860
int3
Function at 0x14004c260
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
mov byte [rcx + rax + 6], 0
add byte [rcx + rax + 6], 0x29
xor byte [rcx + rax + 6], 0x64
add byte [rcx + rax + 6], 0x14
add byte [rcx + rax + 6], 0x1a
sub byte [rcx + rax + 6], 0x7b
inc rax
cmp rax, 8
jb 0x14004c262
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14004c2a0
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
mov byte [rcx + rax + 6], 0x2e
xor byte [rcx + rax + 6], 3
add byte [rcx + rax + 6], 0x1c
sub byte [rcx + rax + 6], 0x40
add byte [rcx + rax + 6], 0x10
sub byte [rcx + rax + 6], 0x19
add byte [rcx + rax + 6], 0
inc rax
cmp rax, 0xa
jb 0x14004c2a2
nop
add rsp, 8
jmp qword [rsp - 8]
Function at 0x1400761e0
Capabilities:
Encode data using xor

Disassembly:
xchg r11, r9
mov r11, rcx
xchg r11, r9
mov r8d, 0x66ebaef6
xor r8d, 0x3107b290
sub r8d, 0xd785de2
sub r8d, 0x13c209f4
add r8d, 0x1dea8963
add r8d, 0x33ec05d
add r8d, 0xa82501af
test rcx, rcx
je 0x1400762f6
cmp byte [rcx], 0
je 0x1400762f6
test rdx, rdx
jne 0x14007628e
nop
movabs rdx, 0xffffffff27e77804
add rdx, 0x50526cac
xor rdx, 0x66605c5c
add rdx, 0x144e140
add rdx, 0x2a4c298a
xor rdx, 0x2bc9efe0
add rdx, 0x96512ac
add rdx, 0x7fffffff
add rdx, 0x1477c0fe
nop
inc rdx
cmp byte [rcx + rdx], 0
jne 0x140076278
test rdx, rdx
je 0x1400762f3
xor r10d, r10d
lea r11, [0x140002dd0]
nop dword [rax + rax]
movsx eax, byte [r9]
lea r9, [r9 + 1]
movzx ecx, r8b
inc r10d
push rcx
xor ecx, eax
push rcx
xor rcx, qword [rsp + 8]
shr rcx, 0x20
ror rax, 0x20
xor ecx, eax
ror rax, 0x20
shl rcx, 0x20
xor rcx, qword [rsp]
add rsp, 0x10
shr r8d, 8
and ecx, 0x3ff
mov eax, r10d
xor r8d, dword [r11 + rcx*4]
xor r8d, 0x3948a593
cmp rax, rdx
jb 0x1400762a0
not r8d
mov eax, r8d
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007b120
Capabilities:
Encode data using xor

Disassembly:
mov rax, qword [rcx + 0x10]
xchg rdx, rcx
mov rcx, rdx
xchg rdx, rcx
test rax, rax
jne 0x14007b141
xor r8d, r8d
mov eax, r8d
nop
add rsp, 8
jmp qword [rsp - 8]
cmp byte [rcx], 0
jne 0x14007b18b
xor r8d, r8d
cmp qword [rcx + 8], r8
jbe 0x14007b173
xchg rbx, rax
mov rbx, qword [rdx + 0x10]
xchg rbx, rax
lea rcx, [rax + r8*2]
movzx eax, word [rdx + 2]
xor word [rcx], ax
inc r8
cmp r8, qword [rdx + 8]
jb 0x14007b14f
xchg r13, rax
mov r13, qword [rdx + 0x10]
xchg r13, rax
mov byte [rdx], 0x37
add byte [rdx], 9
add byte [rdx], 0x2a
sub byte [rdx], 0x4c
add byte [rdx], 0x27
sub byte [rdx], 0x28
add byte [rdx], 0x1c
xor byte [rdx], 0x38
ret

Function at 0x14007b190
Capabilities:
Encode data using xor

Disassembly:
mov rax, qword [rcx + 0x10]
xchg rdx, rdi
mov rdi, rcx
xchg rdi, rdx
test rax, rax
jne 0x14007b1b1
xor r8d, r8d
mov eax, r8d
nop
add rsp, 8
jmp qword [rsp - 8]
cmp byte [rcx], 0
jne 0x14007b1fa
xor r8d, r8d
cmp qword [rcx + 8], r8
jbe 0x14007b1e2
xchg rcx, rbp
mov rbp, qword [rdx + 0x10]
xchg rbp, rcx
movzx eax, byte [rdx + 1]
xor byte [rcx + r8], al
inc r8
cmp r8, qword [rdx + 8]
jb 0x14007b1bf
xchg r14, rax
mov r14, qword [rdx + 0x10]
xchg r14, rax
mov byte [rdx], 0x4a
xor byte [rdx], 0x64
xor byte [rdx], 0x4d
xor byte [rdx], 0x75
xor byte [rdx], 0x58
xor byte [rdx], 0x10
xor byte [rdx], 0x47
sub byte [rdx], 0x18
ret
Function at 0x14007b530
Capabilities:
Encode data using xor

Disassembly:
xchg r14, rax
mov r14, qword [rcx + 0x10]
xchg r14, rax
xchg rcx, rdx
mov rcx, rdx
xchg rcx, rdx
test rax, rax
jne 0x14007b54f
nop
add rsp, 8
jmp qword [rsp - 8]
cmp byte [rcx], 0
jne 0x14007b596
xor r8d, r8d
cmp qword [rcx + 8], r8
jbe 0x14007b57e
nop dword [rax + rax]
mov rax, qword [rdx + 0x10]
lea rcx, [rax + r8*2]
movzx eax, word [rdx + 2]
xor word [rcx], ax
inc r8
cmp r8, qword [rdx + 8]
jb 0x14007b562
mov rax, qword [rdx + 0x10]
mov byte [rdx], 0x67
xor byte [rdx], 0xd
xor byte [rdx], 0x68
xor byte [rdx], 0x3a
add byte [rdx], 9
xor byte [rdx], 0x28
xor byte [rdx], 0x37
xor byte [rdx], 0x5f
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007bde0
Capabilities:
Encode data using xor

Disassembly:
xchg r12, rbx
mov qword [rsp + 8], r12
xchg rbx, r12
mov qword [rsp + 0x10], rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg rbx, rcx
mov rdi, rbx
xchg rcx, rbx
lea rbx, [rdx + 4]
mov rdx, rbx
call fcn.14007a9c0
nop
xor eax, eax
mov byte [rbx + rax], 0x27
sub byte [rbx + rax], 6
xor byte [rbx + rax], 0x54
sub byte [rbx + rax], 0x14
sub byte [rbx + rax], 0x52
sub byte [rbx + rax], 0xf
inc rax
cmp rax, 6
jb 0x14007be16
xchg rdx, rax
mov rdx, rdi
xchg rdx, rax
xchg rbx, r11
mov r11, qword [rsp + 0x30]
xchg rbx, r11
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007be60
Capabilities:
Encode data using xor

Disassembly:
xchg r10, rbx
mov qword [rsp + 8], r10
xchg r10, rbx
mov qword [rsp + 0x10], rdx
nop
push 0xeb4a2cf
mov qword [rsp], rdi
sub rsp, 0x20
xchg r12, rdi
mov r12, rcx
xchg rdi, r12
lea rbx, [rdx + 6]
xchg r10, rbx
mov rdx, r10
xchg rbx, r10
call fcn.14007a9c0
nop
xor eax, eax
mov byte [rbx + rax], 0x63
sub byte [rbx + rax], 7
sub byte [rbx + rax], 0xc
xor byte [rbx + rax], 0x15
sub byte [rbx + rax], 0x1b
sub byte [rbx + rax], 6
xor byte [rbx + rax], 0
xor byte [rbx + rax], 0x10
sub byte [rbx + rax], 0x34
inc rax
cmp rax, 8
jb 0x14007be9c
mov rax, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007bf80
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg r9, rdx
mov qword [rsp + 0x10], r9
xchg rdx, r9
push rbx
mov qword [rsp], rdi
sub rsp, 0x20
xchg rcx, r13
mov rdi, r13
xchg r13, rcx
lea rbx, [rdx + 8]
xchg rdx, rbx
mov rbx, rdx
xchg rdx, rbx
call fcn.14007a9c0
nop
xor eax, eax
mov byte [rbx + rax], 0x11
add byte [rbx + rax], 0x16
xor byte [rbx + rax], 0x15
add byte [rbx + rax], 0xb
xor byte [rbx + rax], 0x64
xor byte [rbx + rax], 0x55
sub byte [rbx + rax], 0xc
inc rax
cmp rax, 0xe
jb 0x14007bfb7
xchg rsi, rax
mov rsi, rdi
xchg rsi, rax
xchg rbx, r12
mov r12, qword [rsp + 0x30]
xchg r12, rbx
add rsp, 0x20
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret
Function at 0x14007c000
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg rbp, rdi
mov rbp, rcx
xchg rbp, rdi
lea rbx, [rdx + 0xa]
xchg rdx, rbx
mov rbx, rdx
xchg rbx, rdx
call fcn.14007a9c0
nop
xor eax, eax
mov byte [rbx + rax], 0x66
xor byte [rbx + rax], 0x48
sub byte [rbx + rax], 0xc
add byte [rbx + rax], 0x55
sub byte [rbx + rax], 0x74
add byte [rbx + rax], 0x5b
sub byte [rbx + rax], 0x5e
inc rax
cmp rax, 0x10
jb 0x14007c02d
xchg r9, rdi
mov rax, r9
xchg r9, rdi
xchg rbx, rdi
mov rdi, qword [rsp + 0x30]
xchg rdi, rbx
add rsp, 0x20
push rbx
xchg qword [rsp + 8], rdi
pop rbx
add rsp, 8
ret

Function at 0x14007c080
Capabilities:
Encode data using xor

Disassembly:
xchg r8, rbx
mov qword [rsp + 8], r8
xchg rbx, r8
xchg rdx, r12
mov qword [rsp + 0x10], r12
xchg rdx, r12
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg rcx, rdi
mov rcx, rdi
xchg rcx, rdi
lea rbx, [rdx + 0xa]
xchg rdx, r15
mov r15, rbx
xchg r15, rdx
call fcn.14007a9c0
nop
xor eax, eax
mov byte [rbx + rax], 0x48
add byte [rbx + rax], 0x23
sub byte [rbx + rax], 0x2e
sub byte [rbx + rax], 2
xor byte [rbx + rax], 0x76
sub byte [rbx + rax], 0x4d
inc rax
cmp rax, 0x12
jb 0x14007c0c2
mov rax, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c110
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg rdx, r9
mov qword [rsp + 0x10], r9
xchg rdx, r9
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg rdi, rcx
mov rcx, rdi
xchg rcx, rdi
lea rbx, [rdx + 0x10]
xchg rbx, rdx
mov rbx, rdx
xchg rbx, rdx
call fcn.14007a9c0
nop
xor eax, eax
mov byte [rbx + rax], 0x6d
xor byte [rbx + rax], 0x53
add byte [rbx + rax], 0x2e
sub byte [rbx + rax], 0x37
xor byte [rbx + rax], 6
sub byte [rbx + rax], 0x33
inc rax
cmp rax, 0x1e
jb 0x14007c14c
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
xchg r15, rbx
mov r15, qword [rsp + 0x30]
xchg rbx, r15
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c1a0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg r10, rdx
mov qword [rsp + 0x10], r10
xchg r10, rdx
nop
push 0x2f7081ea
mov qword [rsp], rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x12]
xchg rbx, r12
mov rdx, r12
xchg r12, rbx
call fcn.14007a9c0
nop
xor eax, eax
mov byte [rbx + rax], 6
add byte [rbx + rax], 0x2f
sub byte [rbx + rax], 6
add byte [rbx + rax], 0x4a
sub byte [rbx + rax], 0x38
xor byte [rbx + rax], 0x41
inc rax
cmp rax, 0x20
jb 0x14007c1d6
mov rax, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rdx
push rdx
push rcx
push rax
xchg qword [rsp + 0x20], rdi
add rsp, 0x28
nop
add rsp, 8
jmp qword [rsp - 8]
Function at 0x14007c220
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg rdi, rcx
mov rcx, rdi
xchg rcx, rdi
lea rbx, [rdx + 0x12]
mov rdx, rbx
call fcn.14007a9c0
nop
xor eax, eax
mov byte [rbx + rax], 0x2b
add byte [rbx + rax], 0x13
add byte [rbx + rax], 0x1e
add byte [rbx + rax], 0xc
xor byte [rbx + rax], 0xd
xor byte [rbx + rax], 0x65
inc rax
cmp rax, 0x22
jb 0x14007c247
xchg r8, rax
mov r8, rdi
xchg r8, rax
xchg r9, rbx
mov r9, qword [rsp + 0x30]
xchg rbx, r9
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c290
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg rdx, rdi
mov qword [rsp + 0x10], rdi
xchg rdx, rdi
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg rcx, rbp
mov rdi, rbp
xchg rbp, rcx
lea rbx, [rdx + 0x14]
mov rdx, rbx
call fcn.14007a9c0
nop
xor eax, eax
mov byte [rbx + rax], 0x3d
xor byte [rbx + rax], 0x17
add byte [rbx + rax], 0x13
sub byte [rbx + rax], 2
sub byte [rbx + rax], 0x28
sub byte [rbx + rax], 0x13
inc rax
cmp rax, 0x24
jb 0x14007c2c5
mov rax, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rcx
push rcx
push rdx
xchg qword [rsp + 0x18], rdi
add rsp, 0x20
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c310
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg rcx, r11
mov rdi, r11
xchg r11, rcx
lea rbx, [rdx + 0x14]
mov rdx, rbx
call fcn.14007a9c0
nop
xor eax, eax
mov byte [rbx + rax], 0x19
add byte [rbx + rax], 0x37
xor byte [rbx + rax], 0x10
xor byte [rbx + rax], 0x3a
sub byte [rbx + rax], 0x51
sub byte [rbx + rax], 0x29
inc rax
cmp rax, 0x26
jb 0x14007c337
xchg r14, rax
mov r14, rdi
xchg r14, rax
xchg rbx, r15
mov r15, qword [rsp + 0x30]
xchg r15, rbx
add rsp, 0x20
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c390
Capabilities:
Encode data using xor

Disassembly:
xchg r12, rbx
mov qword [rsp + 8], r12
xchg r12, rbx
xchg rdi, rdx
mov qword [rsp + 0x10], rdi
xchg rdx, rdi
push rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x16]
xchg rdx, rbx
mov rbx, rdx
xchg rbx, rdx
call fcn.14007a9c0
nop
xor eax, eax
mov byte [rbx + rax], 0x42
sub byte [rbx + rax], 0x29
xor byte [rbx + rax], 0x69
xor byte [rbx + rax], 0x2c
xor byte [rbx + rax], 0x3a
sub byte [rbx + rax], 0x66
inc rax
cmp rax, 0x28
jb 0x14007c3c3
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
xchg r8, rbx
mov r8, qword [rsp + 0x30]
xchg rbx, r8
add rsp, 0x20
push rax
push rax
xchg qword [rsp + 0x10], rdi
pop rax
pop rax
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]
Function at 0x14007c410
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg r8, rdx
mov qword [rsp + 0x10], r8
xchg rdx, r8
push rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x16]
xchg rbx, r9
mov rdx, r9
xchg r9, rbx
call fcn.14007a9c0
nop
xor eax, eax
mov byte [rbx + rax], 0x47
sub byte [rbx + rax], 0x14
xor byte [rbx + rax], 0x27
xor byte [rbx + rax], 9
sub byte [rbx + rax], 9
xor byte [rbx + rax], 0x14
inc rax
cmp rax, 0x2a
jb 0x14007c43d
xchg r12, rax
mov r12, rdi
xchg r12, rax
xchg rbx, r15
mov r15, qword [rsp + 0x30]
xchg r15, rbx
add rsp, 0x20
push rax
xchg qword [rsp + 8], rdi
add rsp, 0x10
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c510
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r15
mov qword [rsp + 8], r15
xchg r15, rbx
xchg rdx, rsi
mov qword [rsp + 0x10], rsi
xchg rsi, rdx
push rdi
sub rsp, 0x20
xchg r9, rdi
mov r9, rcx
xchg rdi, r9
lea rbx, [rdx + 0x1a]
mov rdx, rbx
call fcn.14007a9c0
nop
xor eax, eax
mov byte [rbx + rax], 0x47
sub byte [rbx + rax], 0x17
sub byte [rbx + rax], 0x29
add byte [rbx + rax], 0x4b
sub byte [rbx + rax], 7
xor byte [rbx + rax], 0x58
xor byte [rbx + rax], 0x4d
sub byte [rbx + rax], 0x44
sub byte [rbx + rax], 0x1a
inc rax
cmp rax, 0x32
jb 0x14007c543
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], rdi
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c5a0
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r11
mov qword [rsp + 8], r11
xchg r11, rbx
xchg r13, rdx
mov qword [rsp + 0x10], r13
xchg r13, rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg rsi, rcx
mov rdi, rsi
xchg rsi, rcx
lea rbx, [rdx + 0x1c]
mov rdx, rbx
call fcn.14007a9c0
nop
xor eax, eax
mov byte [rbx + rax], 0x3f
add byte [rbx + rax], 0x1b
sub byte [rbx + rax], 0x22
xor byte [rbx + rax], 0x59
xor byte [rbx + rax], 0x37
sub byte [rbx + rax], 0x2d
add byte [rbx + rax], 5
xor byte [rbx + rax], 0x2e
inc rax
cmp rax, 0x34
jb 0x14007c5db
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c630
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg r11, rdx
mov qword [rsp + 0x10], r11
xchg rdx, r11
nop
push r14
mov qword [rsp], rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x1c]
xchg rdx, rdi
mov rdi, rbx
xchg rdx, rdi
call fcn.14007a9c0
nop
xor eax, eax
mov byte [rbx + rax], 0x70
xor byte [rbx + rax], 0x7a
add byte [rbx + rax], 0x6c
add byte [rbx + rax], 2
sub byte [rbx + rax], 0x5c
sub byte [rbx + rax], 0x1c
inc rax
cmp rax, 0x36
jb 0x14007c663
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
xchg rdi, rbx
mov rdi, qword [rsp + 0x30]
xchg rbx, rdi
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
ret
Function at 0x14007c6b0
Capabilities:
Encode data using xor

Disassembly:
xchg r13, rbx
mov qword [rsp + 8], r13
xchg rbx, r13
xchg rdx, r9
mov qword [rsp + 0x10], r9
xchg r9, rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg rdi, r13
mov r13, rcx
xchg r13, rdi
lea rbx, [rdx + 0x1e]
mov rdx, rbx
call fcn.14007a9c0
nop
xor eax, eax
mov byte [rbx + rax], 0x4b
sub byte [rbx + rax], 0x29
sub byte [rbx + rax], 0x13
xor byte [rbx + rax], 0x46
add byte [rbx + rax], 0x34
sub byte [rbx + rax], 0x24
sub byte [rbx + rax], 0x4e
xor byte [rbx + rax], 0xb
inc rax
cmp rax, 0x38
jb 0x14007c6ec
xchg r14, rdi
mov rax, r14
xchg r14, rdi
xchg rbp, rbx
mov rbp, qword [rsp + 0x30]
xchg rbx, rbp
add rsp, 0x20
nop
xchg qword [rsp], rdi
add rsp, 8
ret

Function at 0x14007c740
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r13
mov qword [rsp + 8], r13
xchg r13, rbx
xchg rdx, r12
mov qword [rsp + 0x10], r12
xchg r12, rdx
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x20]
mov rdx, rbx
call fcn.14007a9c0
nop
xor eax, eax
mov byte [rbx + rax], 0x21
add byte [rbx + rax], 9
add byte [rbx + rax], 0x2a
sub byte [rbx + rax], 0x4d
xor byte [rbx + rax], 0x12
xor byte [rbx + rax], 3
add byte [rbx + rax], 0x65
xor byte [rbx + rax], 0x7b
inc rax
cmp rax, 0x3e
jb 0x14007c775
mov rax, rdi
xchg rbx, rsi
mov rsi, qword [rsp + 0x30]
xchg rsi, rbx
add rsp, 0x20
push rcx
push rax
push rbx
push rdx
push rax
push rcx
push rcx
push rax
xchg qword [rsp + 0x40], rdi
add rsp, 0x48
ret

Function at 0x14007c7d0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x22]
xchg rbx, rdx
mov rbx, rdx
xchg rdx, rbx
call fcn.14007a9c0
nop
xor eax, eax
mov byte [rbx + rax], 0x22
sub byte [rbx + rax], 0x13
add byte [rbx + rax], 0x37
xor byte [rbx + rax], 0x11
sub byte [rbx + rax], 0x44
xor byte [rbx + rax], 0x48
sub byte [rbx + rax], 5
sub byte [rbx + rax], 0x56
inc rax
cmp rax, 0x40
jb 0x14007c7f7
xchg r8, rdi
mov rax, r8
xchg r8, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rdx
push rbx
push rbx
xchg qword [rsp + 0x18], rdi
pop rbx
pop rbx
pop rdx
add rsp, 8
ret

Function at 0x14007c850
Capabilities:
Encode data using xor

Disassembly:
xchg rsi, rbx
mov qword [rsp + 8], rsi
xchg rbx, rsi
mov qword [rsp + 0x10], rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
xchg r12, rdi
mov r12, rcx
xchg rdi, r12
lea rbx, [rdx + 0x22]
mov rdx, rbx
call fcn.14007a9c0
nop
xor eax, eax
mov byte [rbx + rax], 0x43
sub byte [rbx + rax], 0xd
xor byte [rbx + rax], 0xe
xor byte [rbx + rax], 0x13
add byte [rbx + rax], 0x10
sub byte [rbx + rax], 0x3b
inc rax
cmp rax, 0x42
jb 0x14007c886
xchg r10, rax
mov r10, rdi
xchg r10, rax
xchg r8, rbx
mov r8, qword [rsp + 0x30]
xchg r8, rbx
add rsp, 0x20
push rdx
push rbx
push rbx
push rbx
push rax
push rbx
push rbx
push rcx
xchg qword [rsp + 0x40], rdi
add rsp, 0x48
ret
Function at 0x14007c8d0
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
xchg rbx, r9
mov qword [rsp + 8], r9
xchg r9, rbx
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg r12, rcx
mov rdi, r12
xchg rcx, r12
lea rbx, [rdx + 0x24]
xchg rdx, rbx
mov rbx, rdx
xchg rbx, rdx
call fcn.14007a9c0
nop
xor eax, eax
mov byte [rbx + rax], 0x3a
sub byte [rbx + rax], 0x38
xor byte [rbx + rax], 7
add byte [rbx + rax], 0x1a
xor byte [rbx + rax], 0x48
xor byte [rbx + rax], 0x70
xor byte [rbx + rax], 0x27
inc rax
cmp rax, 0x46
jb 0x14007c903
xchg rdi, r11
mov rax, r11
xchg rdi, r11
xchg r13, rbx
mov r13, qword [rsp + 0x30]
xchg rbx, r13
add rsp, 0x20
push rcx
push rcx
push rbx
push rcx
push rcx
push rbx
push rcx
push rax
xchg qword [rsp + 0x40], rdi
add rsp, 0x48
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007c960
Capabilities:
Encode data using xor

Disassembly:
xchg rdi, rbx
mov qword [rsp + 8], rdi
xchg rbx, rdi
xchg rdx, rbp
mov qword [rsp + 0x10], rbp
xchg rdx, rbp
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x20
xchg rsi, rcx
mov rdi, rsi
xchg rcx, rsi
lea rbx, [rdx + 0x28]
xchg rdx, rbx
mov rbx, rdx
xchg rdx, rbx
call fcn.14007a9c0
nop
xor eax, eax
mov byte [rbx + rax], 0xd
add byte [rbx + rax], 0x21
xor byte [rbx + rax], 0x4c
sub byte [rbx + rax], 0x57
add byte [rbx + rax], 0x37
sub byte [rbx + rax], 0x15
xor byte [rbx + rax], 0x53
sub byte [rbx + rax], 0x7e
inc rax
cmp rax, 0x4c
jb 0x14007c9a1
xchg r15, rax
mov r15, rdi
xchg r15, rax
xchg r9, rbx
mov r9, qword [rsp + 0x30]
xchg r9, rbx
add rsp, 0x20
push rdx
push rcx
push rcx
xchg qword [rsp + 0x18], rdi
pop rcx
pop rcx
pop rdx
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]

Function at 0x14007ca00
Capabilities:
Encode data using xor

Disassembly:
xchg r13, rbx
mov qword [rsp + 8], r13
xchg r13, rbx
mov qword [rsp + 0x10], rdx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
sub rsp, 0x20
mov rdi, rcx
lea rbx, [rdx + 0x2a]
xchg rdx, r15
mov r15, rbx
xchg rdx, r15
call fcn.14007a9c0
nop
xor eax, eax
mov byte [rbx + rax], 0x48
add byte [rbx + rax], 0x36
xor byte [rbx + rax], 0x53
sub byte [rbx + rax], 0x27
xor byte [rbx + rax], 7
sub byte [rbx + rax], 1
inc rax
cmp rax, 0x50
jb 0x14007ca36
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
push rdx
push rax
push rcx
push rcx
push rcx
push rbx
xchg qword [rsp + 0x30], rdi
add rsp, 0x38
ret

Function at 0x14007ca80
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
xchg rdi, r15
mov r15, rcx
xchg r15, rdi
lea rbx, [rdx + 0x2a]
xchg r10, rbx
mov rdx, r10
xchg r10, rbx
call fcn.14007a9c0
nop
xor eax, eax
mov byte [rbx + rax], 0x7c
sub byte [rbx + rax], 0x2a
sub byte [rbx + rax], 0x26
add byte [rbx + rax], 0x50
xor byte [rbx + rax], 8
sub byte [rbx + rax], 0x2f
add byte [rbx + rax], 0xd
sub byte [rbx + rax], 0x52
inc rax
cmp rax, 0x52
jb 0x14007caad
xchg rdi, r14
mov rax, r14
xchg rdi, r14
xchg rbx, rbp
mov rbp, qword [rsp + 0x30]
xchg rbx, rbp
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
ret