joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14013b9b0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xb0
mov rax, qword [0x1401be040]
xor rax, rsp
mov qword [rbp + 0x4f], rax
xor ebx, ebx
lea rax, [rbp - 0x21]
mov qword [rbp - 0x29], rax
lea rax, vtable.std::_Func_impl_no_alloc_class__public:_void___cdecl__public:_void___cdecl__void___cdecl_Rendering::Menu_void_::_2::_lambda_13_::operator___void_const___ptr64::_2::_lambda_1_::operator___void_const___ptr64::_2::_lambda_1___void___.0
mov qword [rbp - 0x21], rax
lea rax, [rbp - 0x21]
mov qword [rbp + 0x17], rax
mov dword [rbp + 0x1f], 0x556c774b
mov dword [rbp + 0x23], 0x1004e40
mov ecx, ebx
nop dword [rax]
lea eax, [rcx + 0x1d]
xor byte [rbp + rcx + 0x1f], al
inc rcx
cmp rcx, 6
jb 0x14013ba00
mov byte [rbp + 0x26], 0
lea r8, [rbp + 0x25]
lea rdx, [rbp + 0x1f]
lea rcx, [rbp + 0x2f]
call fcn.1401383f0
nop
lea rax, [rbp - 0x21]
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea rdx, [rbp + 0x2f]
call fcn.14013e2d0
nop
lea rcx, [rbp + 0x2f]
call fcn.1400de030
lea rax, [rbp - 0x21]
mov qword [rbp - 0x29], rax
lea rax, vtable.std::_Func_impl_no_alloc_class__public:_void___cdecl__public:_void___cdecl__void___cdecl_Rendering::Menu_void_::_2::_lambda_13_::operator___void_const___ptr64::_2::_lambda_1_::operator___void_const___ptr64::_2::_lambda_2___void___.0
mov qword [rbp - 0x21], rax
lea rax, [rbp - 0x21]
mov qword [rbp + 0x17], rax
mov dword [rbp + 0x1f], 0x546b7b4e
mov dword [rbp + 0x23], 0x57444c48
mov word [rbp + 0x27], 0x100
nop dword [rax]
nop dword [rax + rax]
lea eax, [rbx + 0x1d]
xor byte [rbp + rbx + 0x1f], al
inc rbx
cmp rbx, 8
jb 0x14013ba80
mov byte [rbp + 0x28], 0
lea r8, [rbp + 0x27]
lea rdx, [rbp + 0x1f]
lea rcx, [rbp + 0x2f]
call fcn.1401383f0
nop
lea rax, [rbp - 0x21]
mov qword [rsp + 0x20], rax
mov r8d, 2
lea rdx, [rbp + 0x2f]
call fcn.14013e2d0
nop
lea rcx, [rbp + 0x2f]
call fcn.1400de030
mov rcx, qword [rbp + 0x4f]
xor rcx, rsp
call fcn.14014b630
mov rbx, qword [rsp + 0xc0]
add rsp, 0xb0
pop rbp
ret

Function at 0x14013bb10
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0x90
mov rax, qword [0x1401be040]
xor rax, rsp
mov qword [rbp + 0x4f], rax
xor eax, eax
lea rcx, [rbp - 1]
mov qword [rbp - 9], rcx
xorps xmm0, xmm0
movups xmmword [rbp - 1], xmm0
mov qword [rbp + 0xf], 1
mov qword [rbp + 0x17], 0xf
mov word [rbp - 1], 0x25
mov dword [rbp + 0x1f], 0x507e6c49
mov dword [rbp + 0x23], 0x4d670252
mov dword [rbp + 0x27], 0x46465256
mov dword [rbp + 0x2b], 0x1004f4a
nop
lea ecx, [rax + 0x1d]
xor byte [rbp + rax + 0x1f], cl
inc rax
cmp rax, 0xe
jb 0x14013bb70
mov byte [rbp + 0x2e], 0
lea r8, [rbp + 0x2d]
lea rdx, [rbp + 0x1f]
lea rcx, [rbp + 0x2f]
call fcn.1401383f0
nop
lea rax, [rbp - 1]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x1f4
xor r9d, r9d
lea r8, [0x14023c8b0]
lea rdx, [rbp + 0x2f]
lea rcx, [0x14023d5c0]
call fcn.140146530
nop
lea rcx, [rbp + 0x2f]
call fcn.1400de030
mov rcx, qword [rbp + 0x4f]
xor rcx, rsp
call fcn.14014b630
add rsp, 0x90
pop rbp
ret
Function at 0x14013bc80
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xb0
mov rax, qword [0x1401be040]
xor rax, rsp
mov qword [rbp + 0x4f], rax
xor ebx, ebx
lea rax, [rbp - 0x21]
mov qword [rbp - 0x29], rax
lea rax, vtable.std::_Func_impl_no_alloc_class__public:_void___cdecl__public:_void___cdecl__void___cdecl_Rendering::Menu_void_::_2::_lambda_12_::operator___void_const___ptr64::_2::_lambda_1_::operator___void_const___ptr64::_2::_lambda_1___void___.0
mov qword [rbp - 0x21], rax
lea rax, [rbp - 0x21]
mov qword [rbp + 0x17], rax
mov dword [rbp + 0x1f], 0x556c774b
mov dword [rbp + 0x23], 0x1004e40
mov ecx, ebx
nop dword [rax]
lea eax, [rcx + 0x1d]
xor byte [rbp + rcx + 0x1f], al
inc rcx
cmp rcx, 6
jb 0x14013bcd0
mov byte [rbp + 0x26], 0
lea r8, [rbp + 0x25]
lea rdx, [rbp + 0x1f]
lea rcx, [rbp + 0x2f]
call fcn.1401383f0
nop
lea rax, [rbp - 0x21]
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea rdx, [rbp + 0x2f]
call fcn.14013e2d0
nop
lea rcx, [rbp + 0x2f]
call fcn.1400de030
lea rax, [rbp - 0x21]
mov qword [rbp - 0x29], rax
lea rax, vtable.std::_Func_impl_no_alloc_class__public:_void___cdecl__public:_void___cdecl__void___cdecl_Rendering::Menu_void_::_2::_lambda_12_::operator___void_const___ptr64::_2::_lambda_1_::operator___void_const___ptr64::_2::_lambda_2___void___.0
mov qword [rbp - 0x21], rax
lea rax, [rbp - 0x21]
mov qword [rbp + 0x17], rax
mov dword [rbp + 0x1f], 0x546b7b4e
mov dword [rbp + 0x23], 0x57444c48
mov word [rbp + 0x27], 0x100
nop dword [rax]
nop dword [rax + rax]
lea eax, [rbx + 0x1d]
xor byte [rbp + rbx + 0x1f], al
inc rbx
cmp rbx, 8
jb 0x14013bd50
mov byte [rbp + 0x28], 0
lea r8, [rbp + 0x27]
lea rdx, [rbp + 0x1f]
lea rcx, [rbp + 0x2f]
call fcn.1401383f0
nop
lea rax, [rbp - 0x21]
mov qword [rsp + 0x20], rax
mov r8d, 2
lea rdx, [rbp + 0x2f]
call fcn.14013e2d0
nop
lea rcx, [rbp + 0x2f]
call fcn.1400de030
mov rcx, qword [rbp + 0x4f]
xor rcx, rsp
call fcn.14014b630
mov rbx, qword [rsp + 0xc0]
add rsp, 0xb0
pop rbp
ret

Function at 0x14013bde0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0xa8
mov rax, qword [0x1401be040]
xor rax, rsp
mov qword [rsp + 0x90], rax
xor eax, eax
lea rcx, [rsp + 0x38]
mov qword [rsp + 0x30], rcx
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], 1
mov qword [rsp + 0x50], 0xf
mov word [rsp + 0x38], 0x25
movdqa xmm0, xmmword [0x1401af720]
movdqu xmmword [rsp + 0x58], xmm0
mov word [rsp + 0x68], 0x100
nop dword [rax + rax]
lea ecx, [rax + 0x1d]
xor byte [rsp + rax + 0x58], cl
inc rax
cmp rax, 0x10
jb 0x14013be40
mov byte [rsp + 0x69], 0
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x70]
call fcn.1401383f0
nop
lea rax, [rsp + 0x38]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x1f4
xor r9d, r9d
lea r8, [0x14023c8a4]
lea rdx, [rsp + 0x70]
lea rcx, [0x14023d5c0]
call fcn.140146530
nop
lea rcx, [rsp + 0x70]
call fcn.1400de030
mov rcx, qword [rsp + 0x90]
xor rcx, rsp
call fcn.14014b630
add rsp, 0xa8
ret
Function at 0x14013bf60
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xb0
mov rax, qword [0x1401be040]
xor rax, rsp
mov qword [rbp + 0x4f], rax
xor ebx, ebx
lea rax, [rbp - 0x21]
mov qword [rbp - 0x29], rax
lea rax, vtable.std::_Func_impl_no_alloc_class__public:_void___cdecl__public:_void___cdecl__void___cdecl_Rendering::Menu_void_::_2::_lambda_11_::operator___void_const___ptr64::_2::_lambda_1_::operator___void_const___ptr64::_2::_lambda_1___void___.0
mov qword [rbp - 0x21], rax
lea rax, [rbp - 0x21]
mov qword [rbp + 0x17], rax
mov dword [rbp + 0x1f], 0x556c774b
mov dword [rbp + 0x23], 0x1004e40
mov ecx, ebx
nop dword [rax]
lea eax, [rcx + 0x1d]
xor byte [rbp + rcx + 0x1f], al
inc rcx
cmp rcx, 6
jb 0x14013bfb0
mov byte [rbp + 0x26], 0
lea r8, [rbp + 0x25]
lea rdx, [rbp + 0x1f]
lea rcx, [rbp + 0x2f]
call fcn.1401383f0
nop
lea rax, [rbp - 0x21]
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea rdx, [rbp + 0x2f]
call fcn.14013e2d0
nop
lea rcx, [rbp + 0x2f]
call fcn.1400de030
lea rax, [rbp - 0x21]
mov qword [rbp - 0x29], rax
lea rax, vtable.std::_Func_impl_no_alloc_class__public:_void___cdecl__public:_void___cdecl__void___cdecl_Rendering::Menu_void_::_2::_lambda_11_::operator___void_const___ptr64::_2::_lambda_1_::operator___void_const___ptr64::_2::_lambda_2___void___.0
mov qword [rbp - 0x21], rax
lea rax, [rbp - 0x21]
mov qword [rbp + 0x17], rax
mov dword [rbp + 0x1f], 0x546b7b4e
mov dword [rbp + 0x23], 0x57444c48
mov word [rbp + 0x27], 0x100
nop dword [rax]
nop dword [rax + rax]
lea eax, [rbx + 0x1d]
xor byte [rbp + rbx + 0x1f], al
inc rbx
cmp rbx, 8
jb 0x14013c030
mov byte [rbp + 0x28], 0
lea r8, [rbp + 0x27]
lea rdx, [rbp + 0x1f]
lea rcx, [rbp + 0x2f]
call fcn.1401383f0
nop
lea rax, [rbp - 0x21]
mov qword [rsp + 0x20], rax
mov r8d, 2
lea rdx, [rbp + 0x2f]
call fcn.14013e2d0
nop
lea rcx, [rbp + 0x2f]
call fcn.1400de030
mov rcx, qword [rbp + 0x4f]
xor rcx, rsp
call fcn.14014b630
mov rbx, qword [rsp + 0xc0]
add rsp, 0xb0
pop rbp
ret

Function at 0x14013c0c0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0x90
mov rax, qword [0x1401be040]
xor rax, rsp
mov qword [rbp + 0x4f], rax
xor eax, eax
lea rcx, [rbp - 1]
mov qword [rbp - 9], rcx
xorps xmm0, xmm0
movups xmmword [rbp - 1], xmm0
mov qword [rbp + 0xf], 1
mov qword [rbp + 0x17], 0xf
mov word [rbp - 1], 0x25
mov dword [rbp + 0x1f], 0x5c4e5c
mov dword [rbp + 0x23], 0x50504b65
mov dword [rbp + 0x27], 0x4d444844
mov word [rbp + 0x2b], 0x100
nop
lea ecx, [rax + 0x1d]
xor byte [rbp + rax + 0x1f], cl
inc rax
cmp rax, 0xc
jb 0x14013c120
mov byte [rbp + 0x2c], 0
lea r8, [rbp + 0x2b]
lea rdx, [rbp + 0x1f]
lea rcx, [rbp + 0x2f]
call fcn.1401383f0
nop
lea rax, [rbp - 1]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x1388
xor r9d, r9d
lea r8, [0x14023c898]
lea rdx, [rbp + 0x2f]
lea rcx, [0x14023d5c0]
call fcn.140146530
nop
lea rcx, [rbp + 0x2f]
call fcn.1400de030
mov rcx, qword [rbp + 0x4f]
xor rcx, rsp
call fcn.14014b630
add rsp, 0x90
pop rbp
ret
Function at 0x14013c1b0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x1401be040]
xor rax, rsp
mov qword [rbp - 0x10], rax
xor ebx, ebx
movdqa xmm0, xmmword [0x1401af650]
movdqu xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x38], 0x1005c42
mov ecx, ebx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x1d]
xor byte [rbp + rcx - 0x48], al
inc rcx
cmp rcx, 0x12
jb 0x14012fad0
mov byte [rbp - 0x35], bl
lea r8, [rbp - 0x36]
lea rdx, [rbp - 0x48]
lea rcx, [rbp - 0x30]
call fcn.1401383f0
nop
mov r9b, 1
lea r8, [0x1401be4b8]
lea rdx, [rbp - 0x30]
lea rcx, [0x14023d5c0]
call fcn.1401407b0
nop
lea rcx, [rbp - 0x30]
call fcn.1400de030
mov dword [rbp - 0x48], 0x526b7f4d
mov dword [rbp - 0x44], 0x416b4e4e
mov dword [rbp - 0x40], 0x78664f49
mov word [rbp - 0x3c], 0x6a
mov byte [rbp - 0x3a], 1
mov rcx, rbx
nop dword [rax + rax]
lea eax, [rcx + 0x1d]
xor byte [rbp + rcx - 0x48], al
inc rcx
cmp rcx, 0xd
jb 0x14012fb40
mov byte [rbp - 0x3a], 0
lea r8, [rbp - 0x3b]
lea rdx, [rbp - 0x48]
lea rcx, [rbp - 0x30]
call fcn.1401383f0
nop
lea r8, [0x14023c890]
lea rdx, [rbp - 0x30]
lea rcx, [0x14023d5c0]
call fcn.14013fc60
nop
lea rcx, [rbp - 0x30]
call fcn.1400de030
movdqa xmm0, xmmword [str._lDMGZeuedGEEY]
movdqu xmmword [rbp - 0x48], xmm0
mov byte [rbp - 0x38], 1
mov rcx, rbx
nop dword [rax + rax]
lea eax, [rcx + 0x1d]
xor byte [rbp + rcx - 0x48], al
inc rcx
cmp rcx, 0xf
jb 0x14012fba0
mov byte [rbp - 0x38], 0
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x48]
lea rcx, [rbp - 0x30]
call fcn.1401383f0
nop
mov r9b, 1
lea r8, [0x1401be208]
lea rdx, [rbp - 0x30]
lea rcx, [0x14023d5c0]
call fcn.1401407b0
nop
lea rcx, [rbp - 0x30]
call fcn.1400de030
mov dword [rbp - 0x48], 0x447e6c5f
mov dword [rbp - 0x44], 0x655a474d
mov dword [rbp - 0x40], 0x1006575
nop
lea eax, [rbx + 0x1d]
xor byte [rbp + rbx - 0x48], al
inc rbx
cmp rbx, 0xa
jb 0x14012fc00
mov byte [rbp - 0x3d], 0
lea r8, [rbp - 0x3e]
lea rdx, [rbp - 0x48]
lea rcx, [rbp - 0x30]
call fcn.1401383f0
nop
lea r8, [0x14023c891]
lea rdx, [rbp - 0x30]
lea rcx, [0x14023d5c0]
call fcn.14013fc60
nop
lea rcx, [rbp - 0x30]
call fcn.1400de030
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.14014b630
mov rbx, qword [rsp + 0x80]
add rsp, 0x70
pop rbp
ret
jmp 0x14012fa90
Function at 0x14013c230
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xb0
mov rax, qword [0x1401be040]
xor rax, rsp
mov qword [rbp + 0x4f], rax
xor ebx, ebx
lea rax, [rbp - 0x21]
mov qword [rbp - 0x29], rax
lea rax, vtable.std::_Func_impl_no_alloc_class__public:_void___cdecl__public:_void___cdecl__void___cdecl_Rendering::Menu_void_::_2::_lambda_10_::operator___void_const___ptr64::_2::_lambda_1_::operator___void_const___ptr64::_2::_lambda_1___void___.0
mov qword [rbp - 0x21], rax
lea rax, [rbp - 0x21]
mov qword [rbp + 0x17], rax
mov dword [rbp + 0x1f], 0x556c774b
mov dword [rbp + 0x23], 0x1004e40
mov ecx, ebx
nop dword [rax]
lea eax, [rcx + 0x1d]
xor byte [rbp + rcx + 0x1f], al
inc rcx
cmp rcx, 6
jb 0x14013c280
mov byte [rbp + 0x26], 0
lea r8, [rbp + 0x25]
lea rdx, [rbp + 0x1f]
lea rcx, [rbp + 0x2f]
call fcn.1401383f0
nop
lea rax, [rbp - 0x21]
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea rdx, [rbp + 0x2f]
call fcn.14013e2d0
nop
lea rcx, [rbp + 0x2f]
call fcn.1400de030
lea rax, [rbp - 0x21]
mov qword [rbp - 0x29], rax
lea rax, vtable.std::_Func_impl_no_alloc_class__public:_void___cdecl__public:_void___cdecl__void___cdecl_Rendering::Menu_void_::_2::_lambda_10_::operator___void_const___ptr64::_2::_lambda_1_::operator___void_const___ptr64::_2::_lambda_2___void___.0
mov qword [rbp - 0x21], rax
lea rax, [rbp - 0x21]
mov qword [rbp + 0x17], rax
mov dword [rbp + 0x1f], 0x546b7b4e
mov dword [rbp + 0x23], 0x57444c48
mov word [rbp + 0x27], 0x100
nop dword [rax]
nop dword [rax + rax]
lea eax, [rbx + 0x1d]
xor byte [rbp + rbx + 0x1f], al
inc rbx
cmp rbx, 8
jb 0x14013c300
mov byte [rbp + 0x28], 0
lea r8, [rbp + 0x27]
lea rdx, [rbp + 0x1f]
lea rcx, [rbp + 0x2f]
call fcn.1401383f0
nop
lea rax, [rbp - 0x21]
mov qword [rsp + 0x20], rax
mov r8d, 2
lea rdx, [rbp + 0x2f]
call fcn.14013e2d0
nop
lea rcx, [rbp + 0x2f]
call fcn.1400de030
mov rcx, qword [rbp + 0x4f]
xor rcx, rsp
call fcn.14014b630
mov rbx, qword [rsp + 0xc0]
add rsp, 0xb0
pop rbp
ret

Function at 0x14013c390
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0xa8
mov rax, qword [0x1401be040]
xor rax, rsp
mov qword [rsp + 0x90], rax
xor eax, eax
lea rcx, [rsp + 0x38]
mov qword [rsp + 0x30], rcx
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], 1
mov qword [rsp + 0x50], 0xf
mov word [rsp + 0x38], 0x25
movdqa xmm0, xmmword [0x1401af730]
movdqu xmmword [rsp + 0x58], xmm0
mov word [rsp + 0x68], 0x100
nop dword [rax + rax]
lea ecx, [rax + 0x1d]
xor byte [rsp + rax + 0x58], cl
inc rax
cmp rax, 0x10
jb 0x14013c3f0
mov byte [rsp + 0x69], 0
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x70]
call fcn.1401383f0
nop
lea rax, [rsp + 0x38]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x1f4
xor r9d, r9d
lea r8, [0x14023c88c]
lea rdx, [rsp + 0x70]
lea rcx, [0x14023d5c0]
call fcn.140146530
nop
lea rcx, [rsp + 0x70]
call fcn.1400de030
mov rcx, qword [rsp + 0x90]
xor rcx, rsp
call fcn.14014b630
add rsp, 0xa8
ret
Function at 0x14013c510
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xb0
mov rax, qword [0x1401be040]
xor rax, rsp
mov qword [rbp + 0x4f], rax
xor ebx, ebx
lea rax, [rbp - 0x21]
mov qword [rbp - 0x29], rax
lea rax, vtable.std::_Func_impl_no_alloc_class__public:_void___cdecl__public:_void___cdecl__void___cdecl_Rendering::Menu_void_::_2::_lambda_9_::operator___void_const___ptr64::_2::_lambda_1_::operator___void_const___ptr64::_2::_lambda_1___void___.0
mov qword [rbp - 0x21], rax
lea rax, [rbp - 0x21]
mov qword [rbp + 0x17], rax
mov dword [rbp + 0x1f], 0x547e6c5e
mov dword [rbp + 0x23], 0x1005144
mov ecx, ebx
nop dword [rax]
lea eax, [rcx + 0x1d]
xor byte [rbp + rcx + 0x1f], al
inc rcx
cmp rcx, 6
jb 0x14013c560
mov byte [rbp + 0x26], 0
lea r8, [rbp + 0x25]
lea rdx, [rbp + 0x1f]
lea rcx, [rbp + 0x2f]
call fcn.1401383f0
nop
lea rax, [rbp - 0x21]
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea rdx, [rbp + 0x2f]
call fcn.14013e2d0
nop
lea rcx, [rbp + 0x2f]
call fcn.1400de030
lea rax, [rbp - 0x21]
mov qword [rbp - 0x29], rax
lea rax, vtable.std::_Func_impl_no_alloc_class__public:_void___cdecl__public:_void___cdecl__void___cdecl_Rendering::Menu_void_::_2::_lambda_9_::operator___void_const___ptr64::_2::_lambda_1_::operator___void_const___ptr64::_2::_lambda_2___void___.0
mov qword [rbp - 0x21], rax
lea rax, [rbp - 0x21]
mov qword [rbp + 0x17], rax
mov dword [rbp + 0x1f], 0x546b7b4e
mov dword [rbp + 0x23], 0x57444c48
mov word [rbp + 0x27], 0x100
nop dword [rax]
nop dword [rax + rax]
lea eax, [rbx + 0x1d]
xor byte [rbp + rbx + 0x1f], al
inc rbx
cmp rbx, 8
jb 0x14013c5e0
mov byte [rbp + 0x28], 0
lea r8, [rbp + 0x27]
lea rdx, [rbp + 0x1f]
lea rcx, [rbp + 0x2f]
call fcn.1401383f0
nop
lea rax, [rbp - 0x21]
mov qword [rsp + 0x20], rax
mov r8d, 2
lea rdx, [rbp + 0x2f]
call fcn.14013e2d0
nop
lea rcx, [rbp + 0x2f]
call fcn.1400de030
mov rcx, qword [rbp + 0x4f]
xor rcx, rsp
call fcn.14014b630
mov rbx, qword [rsp + 0xc0]
add rsp, 0xb0
pop rbp
ret
Function at 0x14013c670
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xa0
mov rax, qword [0x1401be040]
xor rax, rsp
mov qword [rbp + 0x47], rax
xor ebx, ebx
lea rax, [rbp - 0x19]
mov qword [rbp + 7], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
mov qword [rbp - 9], 1
mov qword [rbp - 1], 0xf
mov word [rbp - 0x19], 0x25
movdqa xmm0, xmmword [str.lTDQ]
movdqu xmmword [rbp + 0xf], xmm0
mov byte [rbp + 0x1f], 1
mov ecx, ebx
nop word [rax + rax]
lea eax, [rcx + 0x1d]
xor byte [rbp + rcx + 0xf], al
inc rcx
cmp rcx, 0xf
jb 0x14012f380
mov byte [rbp + 0x1f], 0
lea r8, [rbp + 0x1e]
lea rdx, [rbp + 0xf]
lea rcx, [rbp + 0x27]
call fcn.1401383f0
nop
lea rax, [rbp - 0x19]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x12c
xor r9d, r9d
lea r8, [0x14023c87c]
lea rdx, [rbp + 0x27]
lea rcx, [0x14023d5c0]
call fcn.140146530
nop
lea rcx, [rbp + 0x27]
call fcn.1400de030
lea rax, [rbp - 0x19]
mov qword [rbp + 7], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
mov qword [rbp - 9], 1
mov qword [rbp - 1], 0xf
mov word [rbp - 0x19], 0x25
movdqa xmm0, xmmword [0x1401af740]
movdqu xmmword [rbp + 0xf], xmm0
mov word [rbp + 0x1f], 0x100
nop dword [rax]
nop word [rax + rax]
lea eax, [rbx + 0x1d]
xor byte [rbp + rbx + 0xf], al
inc rbx
cmp rbx, 0x10
jb 0x14012f420
mov byte [rbp + 0x20], 0
lea r8, [rbp + 0x1f]
lea rdx, [rbp + 0xf]
lea rcx, [rbp + 0x27]
call fcn.1401383f0
nop
lea rax, [rbp - 0x19]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x12c
xor r9d, r9d
lea r8, [0x14023c880]
lea rdx, [rbp + 0x27]
lea rcx, [0x14023d5c0]
call fcn.140146530
nop
lea rcx, [rbp + 0x27]
call fcn.1400de030
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.14014b630
mov rbx, qword [rsp + 0xb0]
add rsp, 0xa0
pop rbp
ret
jmp 0x14012f320
Function at 0x14013c720
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xb0
mov rax, qword [0x1401be040]
xor rax, rsp
mov qword [rbp + 0x4f], rax
xor ebx, ebx
lea rax, [rbp - 0x21]
mov qword [rbp - 0x29], rax
lea rax, vtable.std::_Func_impl_no_alloc_class__public:_void___cdecl__public:_void___cdecl__void___cdecl_Rendering::Menu_void_::_2::_lambda_8_::operator___void_const___ptr64::_2::_lambda_1_::operator___void_const___ptr64::_2::_lambda_1___void___.0
mov qword [rbp - 0x21], rax
lea rax, [rbp - 0x21]
mov qword [rbp + 0x17], rax
mov dword [rbp + 0x1f], 0x4c6f7b59
mov dword [rbp + 0x23], 0x46425b4e
mov dword [rbp + 0x27], 0x544349
mov byte [rbp + 0x2b], 1
mov ecx, ebx
nop dword [rax + rax]
lea eax, [rcx + 0x1d]
xor byte [rbp + rcx + 0x1f], al
inc rcx
cmp rcx, 0xb
jb 0x14013c780
mov byte [rbp + 0x2b], 0
lea r8, [rbp + 0x2a]
lea rdx, [rbp + 0x1f]
lea rcx, [rbp + 0x2f]
call fcn.1401383f0
nop
lea rax, [rbp - 0x21]
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea rdx, [rbp + 0x2f]
call fcn.14013e2d0
nop
lea rcx, [rbp + 0x2f]
call fcn.1400de030
lea rax, [rbp - 0x21]
mov qword [rbp - 0x29], rax
lea rax, vtable.std::_Func_impl_no_alloc_class__public:_void___cdecl__public:_void___cdecl__void___cdecl_Rendering::Menu_void_::_2::_lambda_8_::operator___void_const___ptr64::_2::_lambda_1_::operator___void_const___ptr64::_2::_lambda_2___void___.0
mov qword [rbp - 0x21], rax
lea rax, [rbp - 0x21]
mov qword [rbp + 0x17], rax
mov dword [rbp + 0x1f], 0x546b7b4e
mov dword [rbp + 0x23], 0x57444c48
mov word [rbp + 0x27], 0x100
nop dword [rax]
nop dword [rax + rax]
lea eax, [rbx + 0x1d]
xor byte [rbp + rbx + 0x1f], al
inc rbx
cmp rbx, 8
jb 0x14013c800
mov byte [rbp + 0x28], 0
lea r8, [rbp + 0x27]
lea rdx, [rbp + 0x1f]
lea rcx, [rbp + 0x2f]
call fcn.1401383f0
nop
lea rax, [rbp - 0x21]
mov qword [rsp + 0x20], rax
mov r8d, 2
lea rdx, [rbp + 0x2f]
call fcn.14013e2d0
nop
lea rcx, [rbp + 0x2f]
call fcn.1400de030
mov rcx, qword [rbp + 0x4f]
xor rcx, rsp
call fcn.14014b630
mov rbx, qword [rsp + 0xc0]
add rsp, 0xb0
pop rbp
ret

Function at 0x14013c890
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0x90
mov rax, qword [0x1401be040]
xor rax, rsp
mov qword [rbp + 0x4f], rax
xor eax, eax
lea rcx, [rbp - 1]
mov qword [rbp - 9], rcx
xorps xmm0, xmm0
movups xmmword [rbp - 1], xmm0
mov qword [rbp + 0xf], 1
mov qword [rbp + 0x17], 0xf
mov word [rbp - 1], 0x25
mov dword [rbp + 0x1f], 0x677f50
mov dword [rbp + 0x23], 0x50504b65
mov dword [rbp + 0x27], 0x4d444844
mov word [rbp + 0x2b], 0x100
nop
lea ecx, [rax + 0x1d]
xor byte [rbp + rax + 0x1f], cl
inc rax
cmp rax, 0xc
jb 0x14013c8f0
mov byte [rbp + 0x2c], 0
lea r8, [rbp + 0x2b]
lea rdx, [rbp + 0x1f]
lea rcx, [rbp + 0x2f]
call fcn.1401383f0
nop
lea rax, [rbp - 1]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x12c
xor r9d, r9d
lea r8, [0x14023c868]
lea rdx, [rbp + 0x2f]
lea rcx, [0x14023d5c0]
call fcn.140146530
nop
lea rcx, [rbp + 0x2f]
call fcn.1400de030
mov rcx, qword [rbp + 0x4f]
xor rcx, rsp
call fcn.14014b630
add rsp, 0x90
pop rbp
ret