joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14000f5fa
Capabilities:
Allocate thread local storage

Disassembly:
push rbp
push r15
push r14
push r12
push rsi
push rdi
push rbx
sub rsp, 0x20
lea rbp, [rsp + 0x20]
mov qword [rbp - 8], 0xfffffffffffffffe
mov rsi, rcx
imul eax, dword [0x140296c1c], 0x45499a67
imul ecx, dword [0x140296c20], 0xdd7bc9d6
add eax, ecx
add eax, 0x54cf016
shl rax, 4
lea rax, [rax + rax*2]
call fcn.1400fe1d0
sub rsp, rax
mov r15, rsp
mov eax, dword [0x140296c24]
mov ecx, dword [0x140296c28]
shrd ecx, eax, 0xa
xor ecx, 0xb51cb3e1
mov eax, ecx
lea rax, [rax + rax*2]
lea rax, [rax*8 + 0xf]
and rax, 0xfffffffffffffff0
call fcn.1400fe1d0
sub rsp, rax
mov rbx, rsp
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_TlsAlloc]
add rsp, 0x20
mov ecx, dword [0x140296c2c]
mov edx, dword [0x140296c30]
shrd edx, ecx, 5
mov edi, eax
xor edx, 0x947bdf3
cmp eax, edx
jne 0x14000f886
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov r14d, eax
mov rcx, qword [0x140296c38]
mov rdx, qword [0x140296c40]
shrd rdx, rcx, 1
movabs rcx, 0x254de2aa191c52b
xor rcx, rdx
mov rdx, qword [0x140296c48]
mov r8, qword [0x140296c50]
shrd r8, rdx, 9
mov qword [rbx], rcx
movabs rcx, 0x782c84e1d2e88da1
xor rcx, r8
and rcx, qword [0x140294740]
mov rdx, qword [0x140296c58]
mov r8, qword [0x140296c60]
shrd r8, rdx, 0x21
movabs rdx, 0xd602525b84955b9
xor rdx, r8
cmp rcx, rdx
jne 0x14000f74a
imul ecx, dword [0x140296c68], 0x61e26753
imul edx, dword [0x140296c6c], 0xf679910
add ecx, edx
add ecx, 0x9345a541
cmp eax, ecx
setne al
jmp 0x14000f766
mov rax, qword [0x140294738]
lea rcx, [0x140294738]
sub rsp, 0x20
mov edx, r14d
call qword [rax + 0x30]
add rsp, 0x20
mov rcx, qword [0x140296c70]
mov rdx, qword [0x140296c78]
shrd rdx, rcx, 0xc
movabs rcx, 0xb4b5635e2a831bbc
xor rcx, rdx
movabs rdx, 0x1cd0e82025ec4b52
imul rdx, qword [0x140296c80]
movabs r8, 0x45e4c281d4ada8d9
imul r8, qword [0x140296c88]
add r8, rdx
movabs rdx, 0x2e0027610d41aa9c
add rdx, r8
test al, al
cmovne rdx, rcx
mov qword [rbx + 0x10], rdx
mov dword [rbx], r14d
lea rax, [0x140294738]
mov qword [rbx + 8], rax
mov rax, qword [0x140296c90]
mov rcx, qword [0x140296c98]
shrd rcx, rax, 0x34
movabs rax, 0x4c709843781a3d01
xor rax, rcx
and rax, rdx
mov rcx, qword [0x140296ca0]
mov rdx, qword [0x140296ca8]
shrd rdx, rcx, 0x3b
movabs rcx, 0x8c8368e74ff871b
xor rcx, rdx
cmp rax, rcx
je 0x14000f886
mov r12, r15
sub rsp, 0x20
lea r14, [0x1402bed9c]
lea rdx, [0x14021d299]
mov rcx, r14
call fcn.140013c60
mov rcx, r15
mov rdx, rbx
mov r8, r14
call fcn.140004210
add rsp, 0x20
nop
sub rsp, 0x20
mov qword [rbp - 0x18], r15
mov rcx, r15
mov qword [rbp - 0x10], r15
call fcn.1400041bf
add rsp, 0x20
nop
lea rax, [0x14021c750]
mov rcx, qword [rbp - 0x18]
mov qword [rcx], rax
mov rcx, qword [rbp - 0x10]
add rcx, 8
sub rsp, 0x20
call fcn.1401a0858
add rsp, 0x20
mov dword [rsi], edi
mov rax, rsi
mov rsp, rbp
pop rbx
pop rdi
pop rsi
pop r12
pop r14
pop r15
pop rbp
ret
Function at 0x140012090
Capabilities:
Terminate thread

Disassembly:
push rbp
push rsi
push rdi
push rbx
push rax
mov rbp, rsp
mov qword [rbp], 0xfffffffffffffffe
imul eax, dword [0x140297200], 0xfca022ca
mov rsi, rcx
imul ecx, dword [0x140297204], 0xef8146b4
add eax, ecx
add eax, 0x289e99f7
shl rax, 4
call fcn.1400fe1d0
sub rsp, rax
mov rbx, rsp
lea rax, [0x14021ca20]
mov qword [rsi], rax
lea rdi, [rsi + 0xa8]
cmp qword [rsi + 0xa8], 0
je 0x14001224b
nop
sub rsp, 0x20
mov rcx, rsi
call fcn.1400053ce
add rsp, 0x20
nop
mov rdx, rbx
mov rbx, qword [rdi]
mov rax, qword [rbx + 0x10]
mov qword [rdx], rax
mov rax, qword [rbx + 8]
imul ecx, dword [0x140297208], 0x9f88f024
mov qword [rdx + 8], rax
imul eax, dword [0x14029720c], 0xf0a36afa
add ecx, eax
add ecx, 0x97c3a57e
mov eax, dword [0x140297210]
mov r8d, dword [0x140297214]
shrd r8d, eax, 0x16
imul eax, dword [0x140297218], 0xd92c6624
imul r9d, dword [0x14029721c], 0xaf3c9b7b
xor r8d, 0xa61958f1
add r9d, eax
add r9d, 0xff0f4a73
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
add rsp, 0x20
mov rcx, qword [rbx + 0x10]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mfence
mov ecx, dword [0x1402bec2c]
imul eax, dword [0x140297220], 0xcd28738
imul edx, dword [0x140297224], 0x9265572f
add edx, eax
add edx, 0x846f31a1
mov rax, qword [rbx + 8]
cmp ecx, edx
jne 0x140012212
mov rcx, qword [0x140297230]
mov rdx, qword [0x140297238]
shrd rdx, rcx, 0xa
movabs r8, 0xb9455190fe1d324a
xor r8, rdx
sub rsp, 0x20
lea rcx, [0x14000dc59]
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_QueueUserAPC]
add rsp, 0x20
mov rcx, qword [rbx + 8]
mov eax, dword [0x140297240]
mov edx, dword [0x140297244]
shrd edx, eax, 1
xor edx, 0x82fd5ebd
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
jmp 0x140012235
mov ecx, dword [0x140297228]
mov edx, dword [str.OJ_tW]
shrd edx, ecx, 3
xor edx, 0xae12949
sub rsp, 0x20
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateThread]
add rsp, 0x20
sub rsp, 0x20
mov rcx, rdi
xor edx, edx
call fcn.14000844a
add rsp, 0x20
sub rsp, 0x20
mov rcx, rdi
call fcn.14001174c
add rsp, 0x20
lea rcx, [rsi + 0x90]
sub rsp, 0x20
call fcn.14000661a
add rsp, 0x20
lea rcx, [rsi + 0x60]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
add rsp, 0x20
mov rcx, qword [rsi + 0x50]
test rcx, rcx
je 0x140012298
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
lea rcx, [rsi + 0x48]
sub rsp, 0x20
call fcn.14001174c
add rsp, 0x20
mov rcx, qword [rsi + 0x28]
test rcx, rcx
je 0x1400122c0
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
lea rax, [0x14021c8b0]
mov qword [rsi], rax
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop rbp
ret
Function at 0x140012910
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov r8, rdx
mov eax, dword [0x14029735c]
mov edx, dword [0x140297360]
shrd edx, eax, 7
xor edx, 0xafde3653
cmp dword [0x1402bec50], edx
je 0x1400129d2
lea r10, [r8 + 0x10]
xor eax, eax
nop dword [rax]
movsxd r11, eax
movzx ebx, byte [r10 + r11]
mov eax, dword [0x140297364]
mov edx, dword [0x140297368]
shrd edx, eax, 4
mov esi, edx
xor esi, 0x3a861a46
mov r9d, r11d
mov eax, r11d
xor edx, edx
div esi
movsxd rax, edx
xor bl, byte [r8 + rax]
mov byte [rcx + r11], bl
mov eax, dword [0x14029736c]
mov edx, dword [0x140297370]
shrd edx, eax, 0x19
xor edx, 0x14f6e36c
add edx, r11d
imul eax, dword [str.I_u_], 0xf33c1356
imul r9d, dword [0x140297378], 0x366a0a07
lea eax, [rax + r9 - 0x3f871722]
cmp edx, eax
mov eax, edx
jne 0x140012940
imul eax, dword [0x14029737c], 0x93ff5e98
imul ecx, dword [0x140297380], 0x96d1e8e8
lea eax, [rax + rcx + 0x7b20a801]
mov dword [0x1402bec50], eax
imul eax, dword [0x140297384], 0x9d1f8e05
imul ecx, dword [0x140297388], 0x6ccec97a
lea eax, [rax + rcx - 0x64a7a04b]
pop rbx
pop rsi
ret

Function at 0x1400129f0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov r8, rdx
imul eax, dword [0x14029738c], 0x3fa73339
imul edx, dword [0x140297390], 0x2658fce3
lea eax, [rax + rdx + 0x3036bd59]
cmp dword [0x1402bec6c], eax
je 0x140012ac7
lea r10, [r8 + 0x11]
xor eax, eax
nop word cs:[rax + rax]
nop dword [rax]
movsxd r11, eax
movzx ebx, byte [r10 + r11]
mov eax, dword [0x140297394]
mov edx, dword [0x140297398]
shrd edx, eax, 5
mov esi, edx
xor esi, 0xcb8bbbe9
mov r9d, r11d
mov eax, r11d
xor edx, edx
div esi
movsxd rax, edx
xor bl, byte [r8 + rax]
mov byte [rcx + r11], bl
imul eax, dword [0x14029739c], 0x57448683
imul edx, dword [0x1402973a0], 0x4f4b6269
add edx, eax
mov eax, r11d
lea eax, [rax + rdx + 0x1fa2f984]
imul edx, dword [0x1402973a4], 0x4875770
imul r9d, dword [0x1402973a8], 0x4a7e4608
lea edx, [rdx + r9 + 0x151d2d37]
cmp eax, edx
jne 0x140012a30
imul eax, dword [0x1402973ac], 0x7d7b7ea8
imul ecx, dword [0x1402973b0], 0xdb659dc
lea eax, [rax + rcx - 0x247081b7]
mov dword [0x1402bec6c], eax
imul eax, dword [0x1402973b4], 0x3c1643fa
imul ecx, dword [0x1402973b8], 0xe2788af4
lea eax, [rax + rcx - 0x47cd06d4]
pop rbx
pop rsi
ret
Function at 0x140012af0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov r8, rdx
mov eax, dword [0x1402973bc]
mov edx, dword [0x1402973c0]
shrd edx, eax, 0x18
xor edx, 0x8ea4f870
cmp dword [0x1402bec78], edx
je 0x140012bb5
lea r10, [r8 + 0x1a]
xor eax, eax
nop dword [rax]
movsxd r11, eax
movzx ebx, byte [r10 + r11]
imul eax, dword [0x1402973c4], 0x34296d2f
imul edx, dword [0x1402973c8], 0x18d5b02c
lea esi, [rax + rdx - 0x1f5677b2]
mov r9d, r11d
mov eax, r11d
xor edx, edx
div esi
movsxd rax, edx
xor bl, byte [r8 + rax]
mov byte [rcx + r11], bl
imul eax, dword [0x1402973cc], 0x4863563d
imul edx, dword [0x1402973d0], 0x22ea2057
add edx, eax
mov eax, r11d
lea eax, [rax + rdx - 0x32c800aa]
imul edx, dword [0x1402973d4], 0xef49c53c
imul r9d, dword [0x1402973d8], 0x215df080
lea edx, [rdx + r9 + 0x3cba5ec1]
cmp eax, edx
jne 0x140012b20
mov eax, dword [0x1402973dc]
mov ecx, dword [0x1402973e0]
shrd ecx, eax, 0xe
xor ecx, 0xa91e3186
mov dword [0x1402bec78], ecx
mov eax, dword [0x1402973e4]
mov ecx, dword [0x1402973e8]
shrd ecx, eax, 0x1a
mov eax, ecx
xor eax, 0x5a8ce220
pop rbx
pop rsi
ret

Function at 0x140012bd0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov r8, rdx
mov eax, dword [0x1402973ec]
mov edx, dword [0x1402973f0]
shrd edx, eax, 0x1e
xor edx, 0xd060046a
cmp dword [0x1402bec88], edx
je 0x140012c90
lea r10, [r8 + 0x17]
xor eax, eax
nop dword [rax]
movsxd r11, eax
movzx ebx, byte [r10 + r11]
imul eax, dword [0x1402973f4], 0x74534eba
imul edx, dword [0x1402973f8], 0xe9636045
lea esi, [rax + rdx + 0x4fa4205]
mov r9d, r11d
mov eax, r11d
xor edx, edx
div esi
movsxd rax, edx
xor bl, byte [r8 + rax]
mov byte [rcx + r11], bl
mov eax, dword [0x1402973fc]
mov edx, dword [0x140297400]
shrd edx, eax, 0xa
xor edx, 0xfdc306b6
add edx, r11d
imul eax, dword [0x140297404], 0x7431c6d5
imul r9d, dword [0x140297408], 0x4b111a26
lea eax, [rax + r9 + 0x5ff7937a]
cmp edx, eax
mov eax, edx
jne 0x140012c00
mov eax, dword [0x14029740c]
mov ecx, dword [0x140297410]
shrd ecx, eax, 0xf
xor ecx, 0xf360d993
mov dword [0x1402bec88], ecx
mov eax, dword [0x140297414]
mov ecx, dword [0x140297418]
shrd ecx, eax, 0x10
mov eax, ecx
xor eax, 0xf2ff0f20
pop rbx
pop rsi
ret
Function at 0x140012cb0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov r8, rdx
imul eax, dword [0x14029741c], 0xe073dbe9
imul edx, dword [0x140297420], 0x66bfda3b
lea eax, [rax + rdx + 0x72d7bc79]
cmp dword [0x1402bec98], eax
je 0x140012d87
lea r10, [r8 + 0x1c]
xor eax, eax
nop word cs:[rax + rax]
nop dword [rax]
movsxd r11, eax
movzx ebx, byte [r10 + r11]
mov eax, dword [0x140297424]
mov edx, dword [0x140297428]
shrd edx, eax, 0x11
mov esi, edx
xor esi, 0x5da5c47b
mov r9d, r11d
mov eax, r11d
xor edx, edx
div esi
movsxd rax, edx
xor bl, byte [r8 + rax]
mov byte [rcx + r11], bl
imul eax, dword [0x14029742c], 0xe690c99f
imul edx, dword [0x140297430], 0x5046a5bd
add edx, eax
mov eax, r11d
lea eax, [rax + rdx - 0x150b3aab]
imul edx, dword [0x140297434], 0x589de25f
imul r9d, dword [0x140297438], 0x5b6b8b74
lea edx, [rdx + r9 - 0x103c94af]
cmp eax, edx
jne 0x140012cf0
imul eax, dword [0x14029743c], 0x9d562cd0
imul ecx, dword [0x140297440], 0x930258b
lea eax, [rax + rcx + 0x15a92585]
mov dword [0x1402bec98], eax
mov eax, dword [0x140297444]
mov ecx, dword [0x140297448]
shrd ecx, eax, 0x1a
mov eax, ecx
xor eax, 0x68b4beab
pop rbx
pop rsi
ret

Function at 0x140012db0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov r8, rdx
imul eax, dword [0x14029744c], 0xe5d862d3
imul edx, dword [0x140297450], 0xe15ab3cb
lea eax, [rax + rdx + 0x243159c6]
cmp dword [0x1402beca4], eax
je 0x140012e85
lea r10, [r8 + 0x12]
xor eax, eax
nop word cs:[rax + rax]
nop dword [rax]
movsxd r11, eax
movzx ebx, byte [r10 + r11]
imul eax, dword [0x140297454], 0xabd183ce
imul edx, dword [0x140297458], 0x6770101d
lea esi, [rax + rdx + 0x2d4afd61]
mov r9d, r11d
mov eax, r11d
xor edx, edx
div esi
movsxd rax, edx
xor bl, byte [r8 + rax]
mov byte [rcx + r11], bl
mov eax, dword [0x14029745c]
mov edx, dword [0x140297460]
shrd edx, eax, 0x1f
xor edx, 0x15891a63
add edx, r11d
imul eax, dword [0x140297464], 0x51cba6f1
imul r9d, dword [0x140297468], 0xd2d36451
lea eax, [rax + r9 + 0xff2d1a1]
cmp edx, eax
mov eax, edx
jne 0x140012df0
imul eax, dword [0x14029746c], 0x12059b61
imul ecx, dword [0x140297470], 0xb98b9ff3
lea eax, [rax + rcx - 0x5ea052c9]
mov dword [0x1402beca4], eax
mov eax, dword [0x140297474]
mov ecx, dword [0x140297478]
shrd ecx, eax, 0x17
mov eax, ecx
xor eax, 0xb42fe8d5
pop rbx
pop rsi
ret
Function at 0x140012ea0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov r8, rdx
imul eax, dword [0x14029747c], 0x352f0e31
imul edx, dword [0x140297480], 0x70348326
lea eax, [rax + rdx - 0x9ed01e7]
cmp dword [0x1402becb8], eax
je 0x140012f6f
lea r10, [r8 + 0x1f]
xor eax, eax
nop word cs:[rax + rax]
nop dword [rax]
movsxd r11, eax
movzx ebx, byte [r10 + r11]
mov eax, dword [0x140297484]
mov edx, dword [0x140297488]
shrd edx, eax, 0xf
mov esi, edx
xor esi, 0xd6999e9
mov r9d, r11d
mov eax, r11d
xor edx, edx
div esi
movsxd rax, edx
xor bl, byte [r8 + rax]
mov byte [rcx + r11], bl
mov eax, dword [0x14029748c]
mov edx, dword [0x140297490]
shrd edx, eax, 2
xor edx, 0x7a8e286
add edx, r11d
mov eax, dword [0x140297494]
mov r9d, dword [0x140297498]
shrd r9d, eax, 7
xor r9d, 0xffae4f9b
cmp edx, r9d
mov eax, edx
jne 0x140012ee0
imul eax, dword [0x14029749c], 0x1945351
imul ecx, dword [0x1402974a0], 0xe4c474b6
lea eax, [rax + rcx + 0x105423ae]
mov dword [0x1402becb8], eax
imul eax, dword [0x1402974a4], 0xea835d53
imul ecx, dword [0x1402974a8], 0xeb348958
lea eax, [rax + rcx + 0x2563c7a2]
pop rbx
pop rsi
ret

Function at 0x140012f90
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov r8, rdx
imul eax, dword [0x1402974ac], 0x4a140cb0
imul edx, dword [0x1402974b0], 0x5b245386
lea eax, [rax + rdx - 0x61fd5d45]
cmp dword [0x1402becd0], eax
je 0x14001305f
lea r10, [r8 + 0x1e]
xor eax, eax
nop word cs:[rax + rax]
nop dword [rax]
movsxd r11, eax
movzx ebx, byte [r10 + r11]
mov eax, dword [0x1402974b4]
mov edx, dword [0x1402974b8]
shrd edx, eax, 0xa
mov esi, edx
xor esi, 0xd0fc42da
mov r9d, r11d
mov eax, r11d
xor edx, edx
div esi
movsxd rax, edx
xor bl, byte [r8 + rax]
mov byte [rcx + r11], bl
imul eax, dword [0x1402974bc], 0xaa176865
imul edx, dword [0x1402974c0], 0x857ebeb4
add edx, eax
mov eax, r11d
lea eax, [rax + rdx - 0x5515f8df]
mov edx, dword [0x1402974c4]
mov r9d, dword [0x1402974c8]
shrd r9d, edx, 0x14
xor r9d, 0xf9cc8d1f
cmp eax, r9d
jne 0x140012fd0
mov eax, dword [0x1402974cc]
mov ecx, dword [0x1402974d0]
shrd ecx, eax, 0x1e
xor ecx, 0x386a11e8
mov dword [0x1402becd0], ecx
imul eax, dword [0x1402974d4], 0xaa9bb680
imul ecx, dword [0x1402974d8], 0xdee3050e
lea eax, [rax + rcx - 0xdd30dd3]
pop rbx
pop rsi
ret
Function at 0x140013080
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov r8, rdx
mov eax, dword [0x1402974dc]
mov edx, dword [0x1402974e0]
shrd edx, eax, 0x11
xor edx, 0x621162b1
cmp dword [0x1402becd8], edx
je 0x140013142
lea r10, [r8 + 0x18]
xor eax, eax
nop dword [rax]
movsxd r11, eax
movzx ebx, byte [r10 + r11]
mov eax, dword [0x1402974e4]
mov edx, dword [0x1402974e8]
shrd edx, eax, 0x12
mov esi, edx
xor esi, 0xa774c156
mov r9d, r11d
mov eax, r11d
xor edx, edx
div esi
movsxd rax, edx
xor bl, byte [r8 + rax]
mov byte [rcx + r11], bl
imul eax, dword [0x1402974ec], 0xb449f860
imul edx, dword [0x1402974f0], 0xe547aa8a
add edx, eax
mov eax, r11d
lea eax, [rax + rdx - 0x7051b097]
imul edx, dword [0x1402974f4], 0xff24dee8
imul r9d, dword [0x1402974f8], 0x83f2bb0e
lea edx, [rdx + r9 + 0x53c503ff]
cmp eax, edx
jne 0x1400130b0
mov eax, dword [0x1402974fc]
mov ecx, dword [0x140297500]
shrd ecx, eax, 0x11
xor ecx, 0x58c75da2
mov dword [0x1402becd8], ecx
imul eax, dword [0x140297504], 0x448c319d
imul ecx, dword [0x140297508], 0x54c8782f
lea eax, [rax + rcx + 0xdb4b21c]
pop rbx
pop rsi
ret

Function at 0x140013160
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov r8, rdx
mov eax, dword [0x14029750c]
mov edx, dword [0x140297510]
shrd edx, eax, 0x14
xor edx, 0xb1084f4d
cmp dword [0x1402bece4], edx
je 0x140013227
lea r10, [r8 + 0x16]
xor eax, eax
nop dword [rax]
movsxd r11, eax
movzx ebx, byte [r10 + r11]
imul eax, dword [0x140297514], 0x673a76ba
imul edx, dword [0x140297518], 0xc511c28f
lea esi, [rax + rdx + 0x107a6702]
mov r9d, r11d
mov eax, r11d
xor edx, edx
div esi
movsxd rax, edx
xor bl, byte [r8 + rax]
mov byte [rcx + r11], bl
imul eax, dword [0x14029751c], 0x620f9490
imul edx, dword [0x140297520], 0xb25c47ae
add edx, eax
mov eax, r11d
lea eax, [rax + rdx - 0x24a3f873]
mov edx, dword [0x140297524]
mov r9d, dword [0x140297528]
shrd r9d, edx, 0x12
xor r9d, 0xe738246
cmp eax, r9d
jne 0x140013190
imul eax, dword [0x14029752c], 0xa95c47f7
imul ecx, dword [0x140297530], 0xb1a401f6
lea eax, [rax + rcx - 0x70cb9a6c]
mov dword [0x1402bece4], eax
imul eax, dword [0x140297534], 0x81599b32
imul ecx, dword [0x140297538], 0xa9688220
lea eax, [rax + rcx + 0x1cfe83]
pop rbx
pop rsi
ret
Function at 0x140013250
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov r8, rdx
mov eax, dword [0x14029753c]
mov edx, dword [0x140297540]
shrd edx, eax, 0x12
xor edx, 0x408d2916
cmp dword [0x1402becec], edx
je 0x140013315
lea r10, [r8 + 0x1b]
xor eax, eax
nop dword [rax]
movsxd r11, eax
movzx ebx, byte [r10 + r11]
imul eax, dword [0x140297544], 0x51e3e022
imul edx, dword [0x140297548], 0xe0e114a
lea esi, [rax + rdx - 0x3c8cb6f1]
mov r9d, r11d
mov eax, r11d
xor edx, edx
div esi
movsxd rax, edx
xor bl, byte [r8 + rax]
mov byte [rcx + r11], bl
imul eax, dword [0x14029754c], 0xf291d21c
imul edx, dword [0x140297550], 0x2ca6baa0
add edx, eax
mov eax, r11d
lea eax, [rax + rdx - 0x154d257]
imul edx, dword [0x140297554], 0xcfe84bf3
imul r9d, dword [0x140297558], 0x5474428b
lea edx, [rdx + r9 + 0x2ff6ab3e]
cmp eax, edx
jne 0x140013280
mov eax, dword [0x14029755c]
mov ecx, dword [0x140297560]
shrd ecx, eax, 0x11
xor ecx, 0x7385912b
mov dword [0x1402becec], ecx
mov eax, dword [0x140297564]
mov ecx, dword [0x140297568]
shrd ecx, eax, 0xc
mov eax, ecx
xor eax, 0xad276fc
pop rbx
pop rsi
ret

Function at 0x140013330
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov r8, rdx
imul eax, dword [0x14029756c], 0x1b783725
imul edx, dword [0x140297570], 0x417e8d92
lea eax, [rax + rdx + 0x3de8740d]
cmp dword [0x1402becf8], eax
je 0x1400133ff
lea r10, [r8 + 0x16]
xor eax, eax
nop word cs:[rax + rax]
nop dword [rax]
movsxd r11, eax
movzx ebx, byte [r10 + r11]
mov eax, dword [0x140297574]
mov edx, dword [0x140297578]
shrd edx, eax, 0x13
mov esi, edx
xor esi, 0xd493e0cd
mov r9d, r11d
mov eax, r11d
xor edx, edx
div esi
movsxd rax, edx
xor bl, byte [r8 + rax]
mov byte [rcx + r11], bl
mov eax, dword [0x14029757c]
mov edx, dword [0x140297580]
shrd edx, eax, 0x19
xor edx, 0xe9e0f640
add edx, r11d
mov eax, dword [0x140297584]
mov r9d, dword [0x140297588]
shrd r9d, eax, 7
xor r9d, 0xa6ef6b5c
cmp edx, r9d
mov eax, edx
jne 0x140013370
imul eax, dword [0x14029758c], 0xfb93674
imul ecx, dword [0x140297590], 0x9bd27e1e
lea eax, [rax + rcx + 0x1550ddaf]
mov dword [0x1402becf8], eax
mov eax, dword [0x140297594]
mov ecx, dword [0x140297598]
shrd ecx, eax, 0xb
mov eax, ecx
xor eax, 0xf0378eef
pop rbx
pop rsi
ret
Function at 0x140013420
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov r8, rdx
imul eax, dword [0x14029759c], 0xca5dda26
imul edx, dword [0x1402975a0], 0xae0ee3d0
lea eax, [rax + rdx - 0x1c87e309]
cmp dword [0x1402bed00], eax
je 0x1400134fa
lea r10, [r8 + 0x1e]
xor eax, eax
nop word cs:[rax + rax]
nop dword [rax]
movsxd r11, eax
movzx ebx, byte [r10 + r11]
imul eax, dword [0x1402975a4], 0x2a7980a1
imul edx, dword [0x1402975a8], 0x8f810fa6
lea esi, [rax + rdx - 0x361a6b7]
mov r9d, r11d
mov eax, r11d
xor edx, edx
div esi
movsxd rax, edx
xor bl, byte [r8 + rax]
mov byte [rcx + r11], bl
imul eax, dword [0x1402975ac], 0x7e9bb912
imul edx, dword [0x1402975b0], 0x25b4a64f
add edx, eax
mov eax, r11d
lea eax, [rax + rdx + 0x65370563]
imul edx, dword [0x1402975b4], 0x3b111570
imul r9d, dword [0x1402975b8], 0x9e9c8f56
lea edx, [rdx + r9 + 0x60ab21b2]
cmp eax, edx
jne 0x140013460
imul eax, dword [0x1402975bc], 0x9cb932b0
imul ecx, dword [0x1402975c0], 0xd6f3ed10
lea eax, [rax + rcx + 0x49131911]
mov dword [0x1402bed00], eax
imul eax, dword [0x1402975c4], 0x65e917c3
imul ecx, dword [0x1402975c8], 0x20bd2b3
lea eax, [rax + rcx + 0x183b6c0c]
pop rbx
pop rsi
ret

Function at 0x140013520
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov r8, rdx
mov eax, dword [0x1402975cc]
mov edx, dword [0x1402975d0]
shrd edx, eax, 0x1c
xor edx, 0x92f29a68
cmp dword [0x1402bed20], edx
je 0x1400135e5
lea r10, [r8 + 0x1d]
xor eax, eax
nop dword [rax]
movsxd r11, eax
movzx ebx, byte [r10 + r11]
imul eax, dword [0x1402975d4], 0x7d0239ba
imul edx, dword [0x1402975d8], 0x121c4a7a
lea esi, [rax + rdx + 0x231721ff]
mov r9d, r11d
mov eax, r11d
xor edx, edx
div esi
movsxd rax, edx
xor bl, byte [r8 + rax]
mov byte [rcx + r11], bl
mov eax, dword [0x1402975dc]
mov edx, dword [0x1402975e0]
shrd edx, eax, 0x1f
xor edx, 0x8bc80985
add edx, r11d
imul eax, dword [0x1402975e4], 0xde0f0103
imul r9d, dword [0x1402975e8], 0x4d825359
lea eax, [rax + r9 - 0x19058296]
cmp edx, eax
mov eax, edx
jne 0x140013550
imul eax, dword [0x1402975ec], 0xfc56e7a5
imul ecx, dword [0x1402975f0], 0xb3944649
lea eax, [rax + rcx - 0x338d9bfa]
mov dword [0x1402bed20], eax
imul eax, dword [0x1402975f4], 0x5cc6a5c2
imul ecx, dword [0x1402975f8], 0x618c9068
lea eax, [rax + rcx + 0x50b84ab2]
pop rbx
pop rsi
ret
Function at 0x140013610
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov r8, rdx
mov eax, dword [0x1402975fc]
mov edx, dword [0x140297600]
shrd edx, eax, 0x16
xor edx, 0x147f059
cmp dword [0x1402bed2c], edx
je 0x1400136d5
lea r10, [r8 + 0x19]
xor eax, eax
nop dword [rax]
movsxd r11, eax
movzx ebx, byte [r10 + r11]
imul eax, dword [0x140297604], 0xea6b4236
imul edx, dword [0x140297608], 0x8188c9d1
lea esi, [rax + rdx - 0x1defb82e]
mov r9d, r11d
mov eax, r11d
xor edx, edx
div esi
movsxd rax, edx
xor bl, byte [r8 + rax]
mov byte [rcx + r11], bl
imul eax, dword [0x14029760c], 0xe3f57b0d
imul edx, dword [0x140297610], 0xc619eb36
add edx, eax
mov eax, r11d
lea eax, [rax + rdx - 0x3183da73]
imul edx, dword [0x140297614], 0x87069f45
imul r9d, dword [0x140297618], 0x75d8c2b7
lea edx, [rdx + r9 - 0x53a9253a]
cmp eax, edx
jne 0x140013640
mov eax, dword [0x14029761c]
mov ecx, dword [0x140297620]
shrd ecx, eax, 5
xor ecx, 0x8de40b0f
mov dword [0x1402bed2c], ecx
imul eax, dword [0x140297624], 0x3d7f9a74
imul ecx, dword [0x140297628], 0xd01dfca9
lea eax, [rax + rcx - 0x4d5273c8]
pop rbx
pop rsi
ret

Function at 0x140013700
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
mov r8, rdx
mov eax, dword [0x14029762c]
mov edx, dword [str._w_vn_f]
shrd edx, eax, 4
xor edx, 0xb6e0b775
cmp dword [0x1402bed40], edx
je 0x1400137c2
lea r10, [r8 + 0x19]
xor eax, eax
nop dword [rax]
movsxd r11, eax
movzx ebx, byte [r10 + r11]
imul eax, dword [0x140297634], 0xd0c38de3
imul edx, dword [0x140297638], 0xaca6e1f4
lea esi, [rax + rdx - 0x42333567]
mov r9d, r11d
mov eax, r11d
xor edx, edx
div esi
movsxd rax, edx
xor bl, byte [r8 + rax]
mov byte [rcx + r11], bl
imul eax, dword [str.xSg_e], 0x742e450e
imul edx, dword [0x140297640], 0x954f762a
add edx, eax
mov eax, r11d
lea eax, [rax + rdx + 0xf5fb03]
mov edx, dword [0x140297644]
mov r9d, dword [0x140297648]
shrd r9d, edx, 0x17
xor r9d, 0x54d548cc
cmp eax, r9d
jne 0x140013730
mov eax, dword [0x14029764c]
mov ecx, dword [str.3lV]
shrd ecx, eax, 4
xor ecx, 0xa566c336
mov dword [0x1402bed40], ecx
imul eax, dword [0x140297654], 0xe344921a
imul ecx, dword [0x140297658], 0xd78998c0
lea eax, [rax + rcx + 0x2197c23e]
pop rbx
pop rsi
ret