joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14007db4a
Capabilities:
Get thread local storage value

Disassembly:
push rsi
sub rsp, 0x20
mov rsi, rcx
mov ecx, dword [0x1402bebf4]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x14007db74
cmp qword [rax], rsi
je 0x14007db78
mov rcx, qword [rax + 0x10]
mov rax, rcx
test rcx, rcx
jne 0x14007db63
xor eax, eax
jmp 0x14007db7c
mov rax, qword [rax + 8]
add rsp, 0x20
pop rsi
ret

Function at 0x14007de92
Capabilities:
Get thread local storage value

Disassembly:
push rsi
sub rsp, 0x20
mov rsi, rdx
mov ecx, dword [0x1402bebf4]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x14007deb1
mov rdx, qword [rax + 8]
jmp 0x14007deb3
xor edx, edx
mov rax, qword [0x1402ac8e8]
mov rcx, qword [0x1402ac8f0]
shrd rcx, rax, 0x20
movabs rax, 0xbbb9bd78300b94be
xor rax, rcx
imul rsi, rax
movabs rax, 0x408fcb7ada89f0a7
imul rax, qword [0x1402ac8f8]
movabs rcx, 0x6f9a320dbe14204d
imul rcx, qword [0x1402ac900]
add rcx, rax
movabs r9, 0xcfd0304e7605cccb
add r9, rcx
mov r8, rsi
add rsp, 0x20
pop rsi
jmp fcn.14007df18

Function at 0x14007e5ba
Capabilities:
Get thread local storage value

Disassembly:
push rsi
push rdi
sub rsp, 0x28
mov rdi, r8
mov rsi, rdx
mov ecx, dword [0x1402bebf4]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x14007e5dd
mov rdx, qword [rax + 8]
jmp 0x14007e5df
xor edx, edx
mov rax, qword [0x1402ac9e0]
mov rcx, qword [0x1402ac9e8]
shrd rcx, rax, 0x10
movabs rax, 0x555f7c8ff273045d
xor rax, rcx
imul rdi, rax
mov r8, rsi
mov r9, rdi
add rsp, 0x28
pop rdi
pop rsi
jmp 0x14007e614
test rdx, rdx
je 0x14007e64b
mov rax, qword [0x1402ac9f0]
mov rcx, qword [0x1402ac9f8]
shrd rcx, rax, 3
movabs rax, 0xa703e5da2f420eaf
xor rax, rcx
cmp r9, rax
jae 0x14007e64b
cmp qword [rdx], 0
je 0x14007e653
cmp qword [rdx + 8], 0
je 0x14007e657
mov rcx, r8
jmp fcn.1401ab460
xor eax, eax
jmp 0x14007e65c
mov eax, 1
mov cl, byte [r8 + r9]
mov byte [r8], cl
mov qword [rdx + rax*8], r8
ret
Function at 0x14008e5ca
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rsi
push rdi
push rbx
sub rsp, 0x38
lea rbp, [rsp + 0x30]
mov qword [rbp], 0xfffffffffffffffe
mov rbx, r8
mov rsi, rdx
mov rdi, rcx
mov rax, qword [rcx + 0x40]
mov rcx, qword [rax + 8]
mov qword [rdx + 8], rcx
mov rax, qword [rcx]
mov qword [rbp - 8], rcx
call qword [rax + reloc.WS2_32.dll_htonl]
mov rcx, qword [rdi + 0x40]
mov rdx, rbx
call fcn.14008a320
mov rbx, qword [rdi + 0x38]
test rbx, rbx
je 0x14008e640
mov r8d, dword [rbx + 8]
mov eax, dword [0x1402af6c4]
mov ecx, dword [0x1402af6c8]
shrd ecx, eax, 0x18
xor ecx, 0x4efcd88
nop
mov rdx, rdi
call qword [rbx + reloc.WS2_32.dll_recv]
nop
mov rax, qword [rbx]
mov rbx, rax
test rax, rax
jne 0x14008e613
mov rax, rsi
add rsp, 0x38
pop rbx
pop rdi
pop rsi
pop rbp
ret
Function at 0x14009dd70
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov r8, rdx
imul eax, dword [0x1402b1a34], 0xff024d3c
imul edx, dword [0x1402b1a38], 0xb8c5267d
lea eax, [rax + rdx + 0x587abb97]
cmp dword [0x1402c04c4], eax
je 0x14009de42
lea r10, [r8 + 0x1b]
xor eax, eax
nop word cs:[rax + rax]
nop dword [rax]
movsxd r11, eax
movzx ebx, byte [r10 + r11]
imul eax, dword [0x1402b1a3c], 0xda33b363
imul edx, dword [0x1402b1a40], 0xa03b3205
lea esi, [rax + rdx - 0x6f4356d0]
mov r9d, r11d
mov eax, r11d
xor edx, edx
div esi
movsxd rax, edx
xor bl, byte [r8 + rax]
mov byte [rcx + r11], bl
imul eax, dword [0x1402b1a44], 0x6a1b0f3b
imul edx, dword [0x1402b1a48], 0x12b1dd44
add edx, eax
mov eax, r11d
lea eax, [rax + rdx + 0xa96c335]
mov edx, dword [0x1402b1a4c]
mov r9d, dword [0x1402b1a50]
shrd r9d, edx, 3
xor r9d, 0x7abe5559
cmp eax, r9d
jne 0x14009ddb0
mov eax, dword [0x1402b1a54]
mov ecx, dword [0x1402b1a58]
shrd ecx, eax, 3
xor ecx, 0x5420f59f
mov dword [0x1402c04c4], ecx
imul eax, dword [0x1402b1a5c], 0x4a23e3d6
imul ecx, dword [0x1402b1a60], 0x9300d759
lea eax, [rax + rcx + 0x7ac33412]
pop rbx
pop rsi
ret

Function at 0x14009de60
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov r8, rdx
imul eax, dword [0x1402b1a64], 0xa5c26fb4
imul edx, dword [0x1402b1a68], 0x621e03bb
lea eax, [rax + rdx - 0x23b3c8d9]
cmp dword [0x1402c04d0], eax
je 0x14009df2d
lea r10, [r8 + 0x1a]
xor eax, eax
nop word cs:[rax + rax]
nop dword [rax]
movsxd r11, eax
movzx ebx, byte [r10 + r11]
mov eax, dword [0x1402b1a6c]
mov edx, dword [0x1402b1a70]
shrd edx, eax, 1
mov esi, edx
xor esi, 0xb1deab01
mov r9d, r11d
mov eax, r11d
xor edx, edx
div esi
movsxd rax, edx
xor bl, byte [r8 + rax]
mov byte [rcx + r11], bl
mov eax, dword [0x1402b1a74]
mov edx, dword [0x1402b1a78]
shrd edx, eax, 0xb
xor edx, 0x2ce87d24
add edx, r11d
imul eax, dword [0x1402b1a7c], 0x2cd031fb
imul r9d, dword [0x1402b1a80], 0x26fc3e49
lea eax, [rax + r9 + 0x3e6d626e]
cmp edx, eax
mov eax, edx
jne 0x14009dea0
mov eax, dword [0x1402b1a84]
mov ecx, dword [0x1402b1a88]
shrd ecx, eax, 0x15
xor ecx, 0x550d0c6
mov dword [0x1402c04d0], ecx
imul eax, dword [0x1402b1a8c], 0xddfce3a4
imul ecx, dword [0x1402b1a90], 0x6754940c
lea eax, [rax + rcx + 0x3530cd44]
pop rbx
pop rsi
ret
Function at 0x14009df50
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov r8, rdx
mov eax, dword [0x1402b1a94]
mov edx, dword [0x1402b1a98]
shrd edx, eax, 0xb
xor edx, 0x8de70f57
cmp dword [0x1402c04e8], edx
je 0x14009e014
lea r10, [r8 + 0x1a]
xor eax, eax
nop dword [rax]
movsxd r11, eax
movzx ebx, byte [r10 + r11]
mov eax, dword [0x1402b1a9c]
mov edx, dword [0x1402b1aa0]
shrd edx, eax, 0x1f
mov esi, edx
xor esi, 0x5d6929f0
mov r9d, r11d
mov eax, r11d
xor edx, edx
div esi
movsxd rax, edx
xor bl, byte [r8 + rax]
mov byte [rcx + r11], bl
imul eax, dword [0x1402b1aa4], 0xde0dba2d
imul edx, dword [0x1402b1aa8], 0xa0a6f034
add edx, eax
mov eax, r11d
lea eax, [rax + rdx + 0x4b44e370]
mov edx, dword [0x1402b1aac]
mov r9d, dword [0x1402b1ab0]
shrd r9d, edx, 0x18
xor r9d, 0x7ad47470
cmp eax, r9d
jne 0x14009df80
imul eax, dword [0x1402b1ab4], 0xce6a007c
imul ecx, dword [0x1402b1ab8], 0x540523dc
lea eax, [rax + rcx - 0x76c4f287]
mov dword [0x1402c04e8], eax
imul eax, dword [0x1402b1abc], 0x78045c3b
imul ecx, dword [0x1402b1ac0], 0x752cabe2
lea eax, [rax + rcx + 0x5e88b437]
pop rbx
pop rsi
ret

Function at 0x14009e040
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov r8, rdx
imul eax, dword [str.M_2P_r], 0xe1797da1
imul edx, dword [0x1402b1ac8], 0xaa207768
lea eax, [rax + rdx + 0x167d49fc]
cmp dword [0x1402c04fc], eax
je 0x14009e115
lea r10, [r8 + 0x17]
xor eax, eax
nop word cs:[rax + rax]
nop dword [rax]
movsxd r11, eax
movzx ebx, byte [r10 + r11]
imul eax, dword [0x1402b1acc], 0x2892fe96
imul edx, dword [0x1402b1ad0], 0xf39897dc
lea esi, [rax + rdx + 0x40e50dbd]
mov r9d, r11d
mov eax, r11d
xor edx, edx
div esi
movsxd rax, edx
xor bl, byte [r8 + rax]
mov byte [rcx + r11], bl
imul eax, dword [0x1402b1ad4], 0xfcafe16e
imul edx, dword [0x1402b1ad8], 0xfd63f0ff
add edx, eax
mov eax, r11d
lea eax, [rax + rdx + 0x11a0becf]
imul edx, dword [0x1402b1adc], 0xf91555fd
imul r9d, dword [0x1402b1ae0], 0x6887d092
lea edx, [rdx + r9 - 0x66ae7360]
cmp eax, edx
jne 0x14009e080
mov eax, dword [0x1402b1ae4]
mov ecx, dword [0x1402b1ae8]
shrd ecx, eax, 0x15
xor ecx, 0xbc686f0c
mov dword [0x1402c04fc], ecx
mov eax, dword [0x1402b1aec]
mov ecx, dword [0x1402b1af0]
shrd ecx, eax, 4
mov eax, ecx
xor eax, 0xe892d2ca
pop rbx
pop rsi
ret
Function at 0x14009e130
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov r8, rdx
mov eax, dword [0x1402b1af4]
mov edx, dword [0x1402b1af8]
shrd edx, eax, 0xc
xor edx, 0x627bbce1
cmp dword [0x1402c0510], edx
je 0x14009e1f2
lea r10, [r8 + 0x1b]
xor eax, eax
nop dword [rax]
movsxd r11, eax
movzx ebx, byte [r10 + r11]
mov eax, dword [0x1402b1afc]
mov edx, dword [0x1402b1b00]
shrd edx, eax, 0x13
mov esi, edx
xor esi, 0x1cb262c2
mov r9d, r11d
mov eax, r11d
xor edx, edx
div esi
movsxd rax, edx
xor bl, byte [r8 + rax]
mov byte [rcx + r11], bl
imul eax, dword [0x1402b1b04], 0x17055bce
imul edx, dword [0x1402b1b08], 0xbd654ad7
add edx, eax
mov eax, r11d
lea eax, [rax + rdx + 0x4ef272d1]
imul edx, dword [0x1402b1b0c], 0x42facc8c
imul r9d, dword [0x1402b1b10], 0x938e3260
lea edx, [rdx + r9 + 0x51fe07b9]
cmp eax, edx
jne 0x14009e160
mov eax, dword [0x1402b1b14]
mov ecx, dword [0x1402b1b18]
shrd ecx, eax, 0x11
xor ecx, 0x1d781e40
mov dword [0x1402c0510], ecx
imul eax, dword [0x1402b1b1c], 0xbaf185cd
imul ecx, dword [0x1402b1b20], 0x4ef29648
lea eax, [rax + rcx + 0x656224a2]
pop rbx
pop rsi
ret

Function at 0x14009e210
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov r8, rdx
imul eax, dword [0x1402b1b24], 0x8df68b80
imul edx, dword [0x1402b1b28], 0x79b3e677
lea eax, [rax + rdx + 0x66e306c2]
cmp dword [0x1402c054c], eax
je 0x14009e2df
lea r10, [r8 + 0x18]
xor eax, eax
nop word cs:[rax + rax]
nop dword [rax]
movsxd r11, eax
movzx ebx, byte [r10 + r11]
mov eax, dword [0x1402b1b2c]
mov edx, dword [0x1402b1b30]
shrd edx, eax, 0x18
mov esi, edx
xor esi, 0xa3c54f1e
mov r9d, r11d
mov eax, r11d
xor edx, edx
div esi
movsxd rax, edx
xor bl, byte [r8 + rax]
mov byte [rcx + r11], bl
mov eax, dword [0x1402b1b34]
mov edx, dword [0x1402b1b38]
shrd edx, eax, 0x14
xor edx, 0x8ff9d5ca
add edx, r11d
mov eax, dword [0x1402b1b3c]
mov r9d, dword [0x1402b1b40]
shrd r9d, eax, 1
xor r9d, 0x8119abc7
cmp edx, r9d
mov eax, edx
jne 0x14009e250
imul eax, dword [0x1402b1b44], 0x69face34
imul ecx, dword [0x1402b1b48], 0xd2c4783b
lea eax, [rax + rcx + 0x27e27222]
mov dword [0x1402c054c], eax
imul eax, dword [0x1402b1b4c], 0xde26957c
imul ecx, dword [0x1402b1b50], 0xf293be0c
lea eax, [rax + rcx - 0x7b3025b]
pop rbx
pop rsi
ret
Function at 0x14009e300
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov r8, rdx
imul eax, dword [0x1402b1b54], 0x1c764800
imul edx, dword [0x1402b1b58], 0x61c51eb7
lea eax, [rax + rdx - 0xe21f5b9]
cmp dword [0x1402c057c], eax
je 0x14009e3d2
lea r10, [r8 + 0x16]
xor eax, eax
nop word cs:[rax + rax]
nop dword [rax]
movsxd r11, eax
movzx ebx, byte [r10 + r11]
imul eax, dword [0x1402b1b5c], 0xfa4e0102
imul edx, dword [0x1402b1b60], 0x27d2c30b
lea esi, [rax + rdx - 0x2df96874]
mov r9d, r11d
mov eax, r11d
xor edx, edx
div esi
movsxd rax, edx
xor bl, byte [r8 + rax]
mov byte [rcx + r11], bl
mov eax, dword [0x1402b1b64]
mov edx, dword [0x1402b1b68]
shrd edx, eax, 0x12
xor edx, 0xa7b64a60
add edx, r11d
mov eax, dword [0x1402b1b6c]
mov r9d, dword [0x1402b1b70]
shrd r9d, eax, 0x12
xor r9d, 0x74a57423
cmp edx, r9d
mov eax, edx
jne 0x14009e340
imul eax, dword [0x1402b1b74], 0x2a7299b6
imul ecx, dword [0x1402b1b78], 0xa2394510
lea eax, [rax + rcx + 0x4ae9efb3]
mov dword [0x1402c057c], eax
imul eax, dword [0x1402b1b7c], 0x1e3c773f
imul ecx, dword [0x1402b1b80], 0x79a5
lea eax, [rax + rcx + 0x1af7860b]
pop rbx
pop rsi
ret

Function at 0x14009e3f0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov r8, rdx
mov eax, dword [0x1402b1b84]
mov edx, dword [0x1402b1b88]
shrd edx, eax, 0x1d
xor edx, 0x7da72ac7
cmp dword [0x1402c05d4], edx
je 0x14009e4b5
lea r10, [r8 + 0x13]
xor eax, eax
nop dword [rax]
movsxd r11, eax
movzx ebx, byte [r10 + r11]
imul eax, dword [0x1402b1b8c], 0x25dcf73f
imul edx, dword [0x1402b1b90], 0x316464b1
lea esi, [rax + rdx + 0x6071f299]
mov r9d, r11d
mov eax, r11d
xor edx, edx
div esi
movsxd rax, edx
xor bl, byte [r8 + rax]
mov byte [rcx + r11], bl
mov eax, dword [0x1402b1b94]
mov edx, dword [0x1402b1b98]
shrd edx, eax, 0x15
xor edx, 0xf55a27b0
add edx, r11d
imul eax, dword [0x1402b1b9c], 0x77f523bc
imul r9d, dword [str._R_a.6e_], 0x94a6c115
lea eax, [rax + r9 + 0x74744ce9]
cmp edx, eax
mov eax, edx
jne 0x14009e420
imul eax, dword [0x1402b1ba4], 0x42aa2f06
imul ecx, dword [0x1402b1ba8], 0x62f180bb
lea eax, [rax + rcx + 0x74e6903f]
mov dword [0x1402c05d4], eax
imul eax, dword [0x1402b1bac], 0xf55330b2
imul ecx, dword [0x1402b1bb0], 0x1d31603a
lea eax, [rax + rcx + 0x4864d879]
pop rbx
pop rsi
ret
Function at 0x14009e4e0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov r8, rdx
mov eax, dword [0x1402b1bb4]
mov edx, dword [0x1402b1bb8]
shrd edx, eax, 0xe
xor edx, 0x4151ee01
cmp dword [0x1402c0674], edx
je 0x14009e59f
lea r10, [r8 + 0x17]
xor eax, eax
nop dword [rax]
movsxd r11, eax
movzx ebx, byte [r10 + r11]
mov eax, dword [0x1402b1bbc]
mov edx, dword [0x1402b1bc0]
shrd edx, eax, 0x17
mov esi, edx
xor esi, 0x4b2584c4
mov r9d, r11d
mov eax, r11d
xor edx, edx
div esi
movsxd rax, edx
xor bl, byte [r8 + rax]
mov byte [rcx + r11], bl
imul eax, dword [0x1402b1bc4], 0x86b126c
imul edx, dword [0x1402b1bc8], 0x565dc78
add edx, eax
mov eax, r11d
lea eax, [rax + rdx + 0x4e214cbd]
mov edx, dword [0x1402b1bcc]
mov r9d, dword [0x1402b1bd0]
shrd r9d, edx, 0xd
xor r9d, 0xa24c231e
cmp eax, r9d
jne 0x14009e510
mov eax, dword [0x1402b1bd4]
mov ecx, dword [0x1402b1bd8]
shrd ecx, eax, 0x16
xor ecx, 0xed029098
mov dword [0x1402c0674], ecx
imul eax, dword [0x1402b1bdc], 0x898e2421
imul ecx, dword [0x1402b1be0], 0x4f5ee104
lea eax, [rax + rcx + 0x722d141d]
pop rbx
pop rsi
ret

Function at 0x14009e5c0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov r8, rdx
mov eax, dword [0x1402b1be4]
mov edx, dword [0x1402b1be8]
shrd edx, eax, 4
xor edx, 0x8f37c51d
cmp dword [0x1402c06c8], edx
je 0x14009e67f
lea r10, [r8 + 0x18]
xor eax, eax
nop dword [rax]
movsxd r11, eax
movzx ebx, byte [r10 + r11]
mov eax, dword [0x1402b1bec]
mov edx, dword [0x1402b1bf0]
shrd edx, eax, 0x11
mov esi, edx
xor esi, 0x613b5008
mov r9d, r11d
mov eax, r11d
xor edx, edx
div esi
movsxd rax, edx
xor bl, byte [r8 + rax]
mov byte [rcx + r11], bl
imul eax, dword [0x1402b1bf4], 0xea586420
imul edx, dword [0x1402b1bf8], 0xadded4be
add edx, eax
mov eax, r11d
lea eax, [rax + rdx + 0x56470dad]
mov edx, dword [0x1402b1bfc]
mov r9d, dword [0x1402b1c00]
shrd r9d, edx, 0xd
xor r9d, 0xea768d34
cmp eax, r9d
jne 0x14009e5f0
mov eax, dword [str.:DV]
mov ecx, dword [0x1402b1c08]
shrd ecx, eax, 0x16
xor ecx, 0xb70e84a
mov dword [0x1402c06c8], ecx
mov eax, dword [0x1402b1c0c]
mov ecx, dword [0x1402b1c10]
shrd ecx, eax, 0x18
mov eax, ecx
xor eax, 0x6c7ac3af
pop rbx
pop rsi
ret
Function at 0x14009e6a0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov r8, rdx
mov eax, dword [0x1402b1c14]
mov edx, dword [0x1402b1c18]
shrd edx, eax, 0x17
xor edx, 0xd0480a03
cmp dword [0x1402c06d4], edx
je 0x14009e760
lea r10, [r8 + 0x13]
xor eax, eax
nop dword [rax]
movsxd r11, eax
movzx ebx, byte [r10 + r11]
imul eax, dword [0x1402b1c1c], 0x9b6d9359
imul edx, dword [0x1402b1c20], 0xabde7f60
lea esi, [rax + rdx - 0x4e7c77cb]
mov r9d, r11d
mov eax, r11d
xor edx, edx
div esi
movsxd rax, edx
xor bl, byte [r8 + rax]
mov byte [rcx + r11], bl
mov eax, dword [0x1402b1c24]
mov edx, dword [0x1402b1c28]
shrd edx, eax, 0x1b
xor edx, 0xeace34a6
add edx, r11d
imul eax, dword [0x1402b1c2c], 0x74d156bc
imul r9d, dword [0x1402b1c30], 0x59474ea1
lea eax, [rax + r9 + 0x458339fa]
cmp edx, eax
mov eax, edx
jne 0x14009e6d0
mov eax, dword [0x1402b1c34]
mov ecx, dword [0x1402b1c38]
shrd ecx, eax, 7
xor ecx, 0x4d1c618c
mov dword [0x1402c06d4], ecx
imul eax, dword [0x1402b1c3c], 0xab7a98a1
imul ecx, dword [0x1402b1c40], 0xf82b0cb5
lea eax, [rax + rcx + 0x74770e98]
pop rbx
pop rsi
ret

Function at 0x14009e780
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov r8, rdx
mov eax, dword [0x1402b1c44]
mov edx, dword [0x1402b1c48]
shrd edx, eax, 0x1e
xor edx, 0x8c0e81d8
cmp dword [0x1402c06e0], edx
je 0x14009e84a
lea r10, [r8 + 0x13]
xor eax, eax
nop dword [rax]
movsxd r11, eax
movzx ebx, byte [r10 + r11]
imul eax, dword [0x1402b1c4c], 0xa1cc0d45
imul edx, dword [0x1402b1c50], 0x4382832d
lea esi, [rax + rdx + 0xde2e06c]
mov r9d, r11d
mov eax, r11d
xor edx, edx
div esi
movsxd rax, edx
xor bl, byte [r8 + rax]
mov byte [rcx + r11], bl
imul eax, dword [0x1402b1c54], 0x906f6e02
imul edx, dword [0x1402b1c58], 0x77042b7c
add edx, eax
mov eax, r11d
lea eax, [rax + rdx - 0x16b73987]
imul edx, dword [0x1402b1c5c], 0x6667695b
imul r9d, dword [0x1402b1c60], 0xb3ce1f78
lea edx, [rdx + r9 + 0x701b551]
cmp eax, edx
jne 0x14009e7b0
imul eax, dword [0x1402b1c64], 0x3164631e
imul ecx, dword [0x1402b1c68], 0x756be92
lea eax, [rax + rcx + 0x1738b9bd]
mov dword [0x1402c06e0], eax
imul eax, dword [0x1402b1c6c], 0x18123495
imul ecx, dword [0x1402b1c70], 0x4757310b
lea eax, [rax + rcx + 0x53906085]
pop rbx
pop rsi
ret
Function at 0x14009e870
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov r8, rdx
imul eax, dword [0x1402b1c74], 0xe6d4d0f9
imul edx, dword [0x1402b1c78], 0x7a6c27ac
lea eax, [rax + rdx + 0x4d7333b2]
cmp dword [0x1402c06ec], eax
je 0x14009e942
lea r10, [r8 + 0x1a]
xor eax, eax
nop word cs:[rax + rax]
nop dword [rax]
movsxd r11, eax
movzx ebx, byte [r10 + r11]
mov eax, dword [0x1402b1c7c]
mov edx, dword [str.cBE]
shrd edx, eax, 0x10
mov esi, edx
xor esi, 0xd87f4558
mov r9d, r11d
mov eax, r11d
xor edx, edx
div esi
movsxd rax, edx
xor bl, byte [r8 + rax]
mov byte [rcx + r11], bl
mov eax, dword [0x1402b1c84]
mov edx, dword [0x1402b1c88]
shrd edx, eax, 0x1d
xor edx, 0x9f4ce7e8
add edx, r11d
imul eax, dword [0x1402b1c8c], 0x825e2fdd
imul r9d, dword [0x1402b1c90], 0xa2cbfdb8
lea eax, [rax + r9 + 0xc27af7d]
cmp edx, eax
mov eax, edx
jne 0x14009e8b0
imul eax, dword [0x1402b1c94], 0xd9966cdc
imul ecx, dword [0x1402b1c98], 0xd6df801e
lea eax, [rax + rcx - 0x3c2cf2b7]
mov dword [0x1402c06ec], eax
mov eax, dword [0x1402b1c9c]
mov ecx, dword [0x1402b1ca0]
shrd ecx, eax, 0x1e
mov eax, ecx
xor eax, 0xd2eb8a3a
pop rbx
pop rsi
ret

Function at 0x14009e960
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov r8, rdx
imul eax, dword [0x1402b1ca4], 0x34c5031c
imul edx, dword [0x1402b1ca8], 0x242b6c68
lea eax, [rax + rdx + 0x512c9b55]
cmp dword [0x1402c0700], eax
je 0x14009ea32
lea r10, [r8 + 0x15]
xor eax, eax
nop word cs:[rax + rax]
nop dword [rax]
movsxd r11, eax
movzx ebx, byte [r10 + r11]
mov eax, dword [0x1402b1cac]
mov edx, dword [0x1402b1cb0]
shrd edx, eax, 1
mov esi, edx
xor esi, 0x6f81fd40
mov r9d, r11d
mov eax, r11d
xor edx, edx
div esi
movsxd rax, edx
xor bl, byte [r8 + rax]
mov byte [rcx + r11], bl
imul eax, dword [0x1402b1cb4], 0x546b0ec3
imul edx, dword [0x1402b1cb8], 0xb878b2e6
add edx, eax
mov eax, r11d
lea eax, [rax + rdx - 0x770703fb]
imul edx, dword [0x1402b1cbc], 0x5e60bfe0
imul r9d, dword [0x1402b1cc0], 0x62dd53f7
lea edx, [rdx + r9 + 0x59095435]
cmp eax, edx
jne 0x14009e9a0
mov eax, dword [0x1402b1cc4]
mov ecx, dword [0x1402b1cc8]
shrd ecx, eax, 0x18
xor ecx, 0x5c891641
mov dword [0x1402c0700], ecx
imul eax, dword [0x1402b1ccc], 0x34590ec4
imul ecx, dword [0x1402b1cd0], 0x8cab7774
lea eax, [rax + rcx + 0x341ff2b8]
pop rbx
pop rsi
ret
Function at 0x14009ea50
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov r8, rdx
mov eax, dword [0x1402b1cd4]
mov edx, dword [0x1402b1cd8]
shrd edx, eax, 8
xor edx, 0x25a4ad94
cmp dword [0x1402c0720], edx
je 0x14009eb0d
lea r10, [r8 + 0x19]
xor eax, eax
nop dword [rax]
movsxd r11, eax
movzx ebx, byte [r10 + r11]
mov eax, dword [0x1402b1cdc]
mov edx, dword [0x1402b1ce0]
shrd edx, eax, 0x1a
mov esi, edx
xor esi, 0x67dd469a
mov r9d, r11d
mov eax, r11d
xor edx, edx
div esi
movsxd rax, edx
xor bl, byte [r8 + rax]
mov byte [rcx + r11], bl
mov eax, dword [0x1402b1ce4]
mov edx, dword [0x1402b1ce8]
shrd edx, eax, 0xd
xor edx, 0x71237fcc
add edx, r11d
imul eax, dword [0x1402b1cec], 0xf4d1a8a7
imul r9d, dword [0x1402b1cf0], 0x950aa3a1
lea eax, [rax + r9 - 0xfb8f05e]
cmp edx, eax
mov eax, edx
jne 0x14009ea80
mov eax, dword [0x1402b1cf4]
mov ecx, dword [0x1402b1cf8]
shrd ecx, eax, 0x1a
xor ecx, 0xbca8e005
mov dword [0x1402c0720], ecx
imul eax, dword [0x1402b1cfc], 0xf0753f0b
imul ecx, dword [0x1402b1d00], 0x57d77f7c
lea eax, [rax + rcx + 0x5eea2c92]
pop rbx
pop rsi
ret

Function at 0x14009eb30
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov r8, rdx
imul eax, dword [0x1402b1d04], 0x5b1851f4
imul edx, dword [0x1402b1d08], 0x5e316268
lea eax, [rax + rdx + 0x3a76eb71]
cmp dword [0x1402c0740], eax
je 0x14009ec02
lea r10, [r8 + 0x14]
xor eax, eax
nop word cs:[rax + rax]
nop dword [rax]
movsxd r11, eax
movzx ebx, byte [r10 + r11]
imul eax, dword [0x1402b1d0c], 0x2ff5f756
imul edx, dword [0x1402b1d10], 0x2180ca2d
lea esi, [rax + rdx - 0x1355964b]
mov r9d, r11d
mov eax, r11d
xor edx, edx
div esi
movsxd rax, edx
xor bl, byte [r8 + rax]
mov byte [rcx + r11], bl
imul eax, dword [0x1402b1d14], 0xa65b0236
imul edx, dword [0x1402b1d18], 0x2198ef53
add edx, eax
mov eax, r11d
lea eax, [rax + rdx - 0x6da77cf9]
mov edx, dword [0x1402b1d1c]
mov r9d, dword [0x1402b1d20]
shrd r9d, edx, 5
xor r9d, 0x9af32d
cmp eax, r9d
jne 0x14009eb70
mov eax, dword [0x1402b1d24]
mov ecx, dword [0x1402b1d28]
shrd ecx, eax, 0xb
xor ecx, 0xcaf4148a
mov dword [0x1402c0740], ecx
imul eax, dword [0x1402b1d2c], 0x31bfef8
imul ecx, dword [0x1402b1d30], 0x3b92e57b
lea eax, [rax + rcx + 0x5748d8c8]
pop rbx
pop rsi
ret
Function at 0x14009ec20
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov r8, rdx
mov eax, dword [0x1402b1d34]
mov edx, dword [0x1402b1d38]
shrd edx, eax, 0x16
xor edx, 0xe273eea7
cmp dword [0x1402c0750], edx
je 0x14009ece4
lea r10, [r8 + 0x19]
xor eax, eax
nop dword [rax]
movsxd r11, eax
movzx ebx, byte [r10 + r11]
mov eax, dword [0x1402b1d3c]
mov edx, dword [0x1402b1d40]
shrd edx, eax, 6
mov esi, edx
xor esi, 0xfa2ac5b
mov r9d, r11d
mov eax, r11d
xor edx, edx
div esi
movsxd rax, edx
xor bl, byte [r8 + rax]
mov byte [rcx + r11], bl
imul eax, dword [0x1402b1d44], 0x1f6a38bd
imul edx, dword [0x1402b1d48], 0x5b4a5a18
add edx, eax
mov eax, r11d
lea eax, [rax + rdx - 0x7c594b82]
mov edx, dword [0x1402b1d4c]
mov r9d, dword [0x1402b1d50]
shrd r9d, edx, 0xa
xor r9d, 0xe310103b
cmp eax, r9d
jne 0x14009ec50
imul eax, dword [0x1402b1d54], 0xd0592d98
imul ecx, dword [0x1402b1d58], 0xffd4afb9
lea eax, [rax + rcx + 0x50eed6da]
mov dword [0x1402c0750], eax
mov eax, dword [0x1402b1d5c]
mov ecx, dword [0x1402b1d60]
shrd ecx, eax, 2
mov eax, ecx
xor eax, 0x46a210fc
pop rbx
pop rsi
ret

Function at 0x14009ed00
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov r8, rdx
imul eax, dword [0x1402b1d64], 0x6bb9c54e
imul edx, dword [0x1402b1d68], 0xab4d04ba
lea eax, [rax + rdx - 0x22fd4fa3]
cmp dword [0x1402c0770], eax
je 0x14009edd5
lea r10, [r8 + 0x13]
xor eax, eax
nop word cs:[rax + rax]
nop dword [rax]
movsxd r11, eax
movzx ebx, byte [r10 + r11]
imul eax, dword [0x1402b1d6c], 0x89e7d3b7
imul edx, dword [0x1402b1d70], 0x88a91858
lea esi, [rax + rdx - 0x9963e25]
mov r9d, r11d
mov eax, r11d
xor edx, edx
div esi
movsxd rax, edx
xor bl, byte [r8 + rax]
mov byte [rcx + r11], bl
mov eax, dword [0x1402b1d74]
mov edx, dword [0x1402b1d78]
shrd edx, eax, 2
xor edx, 0xe64c84ca
add edx, r11d
imul eax, dword [0x1402b1d7c], 0x6f9c6276
imul r9d, dword [0x1402b1d80], 0x7f76b381
lea eax, [rax + r9 + 0x5ecaf8e7]
cmp edx, eax
mov eax, edx
jne 0x14009ed40
imul eax, dword [0x1402b1d84], 0x95d4ab43
imul ecx, dword [0x1402b1d88], 0xed08e9d8
lea eax, [rax + rcx + 0x59360f47]
mov dword [0x1402c0770], eax
mov eax, dword [0x1402b1d8c]
mov ecx, dword [0x1402b1d90]
shrd ecx, eax, 0xf
mov eax, ecx
xor eax, 0x84ac7389
pop rbx
pop rsi
ret
Function at 0x14009edf0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov r8, rdx
imul eax, dword [0x1402b1d94], 0x2e3ae6a2
imul edx, dword [0x1402b1d98], 0xf9f5de17
lea eax, [rax + rdx + 0x53f5b3e1]
cmp dword [0x1402c07b4], eax
je 0x14009eebd
lea r10, [r8 + 0x12]
xor eax, eax
nop word cs:[rax + rax]
nop dword [rax]
movsxd r11, eax
movzx ebx, byte [r10 + r11]
imul eax, dword [0x1402b1d9c], 0x1d9a9bdd
imul edx, dword [0x1402b1da0], 0x4ec85090
lea esi, [rax + rdx - 0x45f33b02]
mov r9d, r11d
mov eax, r11d
xor edx, edx
div esi
movsxd rax, edx
xor bl, byte [r8 + rax]
mov byte [rcx + r11], bl
mov eax, dword [0x1402b1da4]
mov edx, dword [0x1402b1da8]
shrd edx, eax, 6
xor edx, 0xff0d6304
add edx, r11d
mov eax, dword [0x1402b1dac]
mov r9d, dword [0x1402b1db0]
shrd r9d, eax, 0xd
xor r9d, 0xed8d46a7
cmp edx, r9d
mov eax, edx
jne 0x14009ee30
mov eax, dword [0x1402b1db4]
mov ecx, dword [0x1402b1db8]
shrd ecx, eax, 0x1f
xor ecx, 0xfd1505c7
mov dword [0x1402c07b4], ecx
imul eax, dword [0x1402b1dbc], 0x72fc52ab
imul ecx, dword [0x1402b1dc0], 0xc200dfd3
lea eax, [rax + rcx + 0x3ea443e5]
pop rbx
pop rsi
ret