joyce8/EMBER2024-capa huggingface dataset:
Function at 0x12fcf7d
Capabilities:
Write file on windows

Disassembly:
mov eax, 0x137dd9c
call fcn.0137cc58
sub esp, 0x20
push ebx
xor ebx, ebx
cmp dword [edi + 0x44], ebx
je 0x12fd061
cmp byte [edi + 0x49], bl
je 0x12fd061
mov eax, dword [edi]
push 0xffffffffffffffff
mov ecx, edi
call dword [eax + 0xc]
cmp eax, 0xffffffff
jne 0x12fcfb4
xor al, al
jmp 0x12fd063
push esi
lea esi, [ebp - 0x2c]
call fcn.012fc922
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x18], 0x10
mov eax, dword [ebp - 0x2c]
jae 0x12fd004
lea eax, [ebp - 0x2c]
mov edx, eax
mov ecx, dword [edi + 0x44]
mov esi, dword [ecx]
lea ebx, [ebp - 0x10]
push ebx
mov ebx, dword [ebp - 0x1c]
add eax, ebx
push eax
push edx
lea eax, [edi + 0x4c]
push eax
call dword [esi + 0x18]
sub eax, 0
je 0x12fd009
dec eax
je 0x12fd00d
dec eax
dec eax
je 0x12fd05d
xor bl, bl
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.012f4c89
mov al, bl
pop esi
jmp 0x12fd063
mov edx, dword [ebp - 0x2c]
jmp 0x12fcfce
mov byte [edi + 0x49], 0
cmp dword [ebp - 0x18], 0x10
mov eax, dword [ebp - 0x2c]
jae 0x12fd019
lea eax, [ebp - 0x2c]
mov esi, dword [ebp - 0x10]
sub esi, eax
je 0x12fd03f
cmp dword [ebp - 0x18], 0x10
mov eax, dword [ebp - 0x2c]
jae 0x12fd02c
lea eax, [ebp - 0x2c]
push dword [edi + 0x54]
push esi
push 1
push eax
call fcn.0135889f
add esp, 0x10
cmp esi, eax
jne 0x12fcff1
cmp byte [edi + 0x49], 0
je 0x12fd05d
test esi, esi
jne 0x12fcfc0
push esi
push 8
lea esi, [ebp - 0x2c]
call fcn.012fc9fb
jmp 0x12fcfc0
mov bl, 1
jmp 0x12fcff3
mov al, 1
mov ecx, dword [ebp - 0xc]
pop ebx
mov dword fs:[0], ecx
leave
ret

Function at 0x13027df
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b8254], 1
jne 0x1302853
or dword [0x13b8254], 1
mov dword [0x13b3a54], 0x4a534965
mov dword [0x13b3a58], 0x49480642
mov dword [0x13b3a5c], 0x43410652
mov dword [0x13b3a60], 0x4f420652
mov dword [0x13b3a64], 0x424f5655
mov dword [0x13b3a68], 0x6404906
mov dword [0x13b3a6c], 0x4e52434b
mov dword [0x13b3a70], 0x1064249
mov dword [0x13b3a74], 0x4a4a4745
mov dword [0x13b3a78], 0x26061c01
xor eax, eax
mov cl, byte [eax + 0x13b3a54]
xor cl, 0x26
mov byte [eax + 0x13b3b98], cl
inc eax
cmp eax, 0x28
jb 0x1302855
mov eax, 0x13b3b98
ret

Function at 0x1302870
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b8250], 1
jne 0x13028d7
or dword [0x13b8250], 1
mov dword [0x13b3a7c], 0x4a4f4760
mov dword [0x13b3a80], 0x52064243
mov dword [0x13b3a84], 0x484f0649
mov dword [0x13b3a88], 0x434d4950
mov dword [0x13b3a8c], 0x52434b06
mov dword [0x13b3a90], 0x642494e
mov dword [0x13b3a94], 0x4a474501
mov dword [0x13b3a98], 0x61c014a
mov byte [0x13b3a9c], 0x26
xor eax, eax
mov cl, byte [eax + 0x13b3a7c]
xor cl, 0x26
mov byte [eax + 0x13b3bc0], cl
inc eax
cmp eax, 0x21
jb 0x13028d9
mov eax, 0x13b3bc0
ret
Function at 0x13028f4
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b824c], 1
jne 0x1302954
or dword [0x13b824c], 1
mov dword [0x13b3aa0], 0x4954762c
mov dword [0x13b3aa4], 0x4a444744
mov dword [0x13b3aa8], 0x5342065f
mov dword [0x13b3aac], 0x49520643
mov dword [0x13b3ab0], 0x54455506
mov dword [0x13b3ab4], 0x652564f
mov dword [0x13b3ab8], 0x49545443
mov dword [0x13b3abc], 0x26061c54
xor eax, eax
mov cl, byte [eax + 0x13b3aa0]
xor cl, 0x26
mov byte [eax + 0x13b3be4], cl
inc eax
cmp eax, 0x20
jb 0x1302956
mov eax, 0x13b3be4
ret

Function at 0x1302f1c
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ecx
and dword [ebp - 4], 0
cmp dword [ebp + 0xc], 0
push ebx
push esi
push edi
mov edi, eax
jbe 0x1303061
mov ebx, dword [ebp + 8]
push 4
sub ebx, edi
pop esi
test byte [0x13b8248], 1
jne 0x1302f7e
or dword [0x13b8248], 1
mov eax, 0xac55
mov word [0x13b3ac0], ax
add eax, 0xffffffee
mov word [0x13b3ac2], ax
mov eax, 0xac48
mov word [0x13b3ac4], ax
add eax, 0xfffffffa
mov word [0x13b3ac6], ax
mov eax, 0xac26
mov word [0x13b3ac8], ax
xor eax, eax
mov ecx, 0xac26
xor cx, word [eax + 0x13b3ac0]
add eax, 2
mov word [eax + 0x13b3c02], cx
cmp eax, 0xa
jb 0x1302f80
mov eax, dword [ebx + edi]
mov ecx, 0x13b3c04
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x1302fc7
test dx, dx
je 0x1302fc3
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x1302fc7
add eax, esi
add ecx, esi
test dx, dx
jne 0x1302fa3
xor eax, eax
jmp 0x1302fcc
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1302fd8
mov dword [edi], 0x385
jmp 0x1303050
call fcn.01303071
mov ecx, dword [ebx + edi]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x1303004
test dx, dx
je 0x1303000
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x1303004
add ecx, esi
add eax, esi
test dx, dx
jne 0x1302fe0
xor eax, eax
jmp 0x1303009
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1303015
mov dword [edi], 0x386
jmp 0x1303050
call fcn.01303144
mov ecx, dword [ebx + edi]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x1303041
test dx, dx
je 0x130303d
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x1303041
add ecx, esi
add eax, esi
test dx, dx
jne 0x130301d
xor eax, eax
jmp 0x1303046
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x130306a
mov dword [edi], 0x387
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
add edi, esi
cmp eax, dword [ebp + 0xc]
jb 0x1302f3b
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 8
mov eax, 0x80020006
jmp 0x1303063
Function at 0x1303071
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b8244], 1
jne 0x1303121
or dword [0x13b8244], 1
mov eax, 0xac47
mov word [0x13b3acc], ax
add eax, 0xfffffffb
mov ecx, eax
mov word [0x13b3ad0], ax
mov eax, 0xac63
mov word [0x13b3ad2], ax
add eax, 0xffffffed
mov word [0x13b3ad4], ax
mov eax, 0xac43
mov word [0x13b3ace], cx
mov ecx, eax
lea edx, [eax + 5]
mov word [0x13b3ad6], cx
mov ecx, edx
push edi
mov word [0x13b3ad8], cx
add ecx, 0xa
mov edi, ecx
mov word [0x13b3ada], di
lea edi, [eax + 0x27]
mov word [0x13b3adc], di
add edi, 0xffffffe5
mov ecx, eax
add eax, 0x11
mov word [0x13b3aea], ax
lea eax, [ecx - 0x1d]
mov word [0x13b3ade], di
mov dword [0x13b3ae0], 0xac52ac55
mov word [0x13b3ae4], cx
mov dword [0x13b3ae6], 0xac43ac48
mov word [0x13b3aec], ax
pop edi
xor eax, eax
mov ecx, 0xac26
xor cx, word [eax + 0x13b3acc]
add eax, 2
mov word [eax + 0x13b3c0e], cx
cmp eax, 0x22
jb 0x1303123
mov eax, 0x13b3c10
ret

Function at 0x1303144
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b8240], 1
mov ecx, 0xac26
jne 0x130319e
or dword [0x13b8240], 1
lea eax, [ecx + 0x2a]
mov word [0x13b3af0], ax
add eax, 0xfffffff3
mov word [0x13b3af2], ax
lea eax, [ecx + 0x2e]
mov word [0x13b3af4], ax
inc eax
mov word [0x13b3af6], ax
lea eax, [ecx + 0x29]
mov word [0x13b3af8], ax
add eax, 0xfffffffa
mov word [0x13b3afa], ax
lea eax, [ecx + 0x22]
mov word [0x13b3afc], ax
mov eax, ecx
mov word [0x13b3afe], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x13b3af0]
add eax, 2
mov word [eax + 0x13b3c32], dx
cmp eax, 0x10
jb 0x13031a0
mov eax, 0x13b3c34
ret

Function at 0x1303b11
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b823c], 1
mov edx, 0xac26
jne 0x1303b74
or dword [0x13b823c], 1
lea ecx, [edx + 0x1d]
mov eax, ecx
mov word [0x13b3b00], ax
add eax, 0x11
push esi
mov esi, eax
lea eax, [edx + 0x44]
mov word [0x13b3b0a], ax
add eax, 0xffffffe5
mov word [0x13b3b0c], ax
mov eax, edx
mov word [0x13b3b02], si
mov word [0x13b3b04], si
mov dword [0x13b3b06], 0xac54ac49
mov dword [0x13b3b0e], 0xac43ac48
mov word [0x13b3b12], ax
pop esi
xor eax, eax
mov ecx, edx
xor cx, word [eax + 0x13b3b00]
add eax, 2
mov word [eax + 0x13b3c42], cx
cmp eax, 0x14
jb 0x1303b76
mov eax, 0x13b3c44
ret

Function at 0x1303b94
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b8238], 1
jne 0x1303c30
or dword [0x13b8238], 1
mov edx, 0xac43
mov eax, edx
mov word [0x13b3b14], ax
add eax, 0x11
mov ecx, eax
mov word [0x13b3b16], cx
mov word [0x13b3b18], cx
lea ecx, [edx + 6]
mov word [0x13b3b1a], cx
mov ecx, eax
mov word [0x13b3b1c], cx
lea ecx, [edx + 0x22]
mov word [0x13b3b1e], cx
add ecx, 0xffffffe9
mov word [0x13b3b20], cx
lea ecx, [edx + 4]
push edi
mov edi, ecx
mov word [0x13b3b22], di
mov edi, eax
mov word [0x13b3b26], cx
mov word [0x13b3b2e], ax
add ecx, 0xfffffffe
lea eax, [edx - 0x1d]
mov word [0x13b3b24], di
mov word [0x13b3b28], cx
mov dword [0x13b3b2a], 0xac43ac52
mov word [0x13b3b30], ax
pop edi
xor eax, eax
mov ecx, 0xac26
xor cx, word [eax + 0x13b3b14]
add eax, 2
mov word [eax + 0x13b3c56], cx
cmp eax, 0x1e
jb 0x1303c32
mov eax, 0x13b3c58
ret
Function at 0x1303c53
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b8234], 1
jne 0x1303cb4
or dword [0x13b8234], 1
mov edx, 0xac43
mov eax, edx
mov word [0x13b3b34], ax
add eax, 0x11
mov ecx, eax
mov word [0x13b3b36], cx
mov word [0x13b3b38], cx
push edi
lea ecx, [edx + 6]
mov edi, ecx
mov word [0x13b3b3c], ax
lea eax, [edx - 0x1d]
mov word [0x13b3b3a], di
mov dword [0x13b3b3e], 0xac49ac65
mov dword [0x13b3b42], 0xac43ac42
mov word [0x13b3b46], ax
pop edi
xor eax, eax
mov ecx, 0xac26
xor cx, word [eax + 0x13b3b34]
add eax, 2
mov word [eax + 0x13b3c76], cx
cmp eax, 0x14
jb 0x1303cb6
mov eax, 0x13b3c78
ret

Function at 0x1303cd7
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b8230], 1
mov edx, 0xac26
jne 0x1303d54
or dword [0x13b8230], 1
lea ecx, [edx + 0x1d]
mov eax, ecx
mov word [0x13b3b48], ax
add eax, 0x11
push esi
mov esi, eax
lea eax, [edx + 0x45]
mov word [0x13b3b52], ax
mov eax, ecx
mov word [0x13b3b54], ax
add eax, 0x12
mov word [0x13b3b4a], si
mov word [0x13b3b4c], si
mov esi, eax
mov word [0x13b3b58], ax
lea eax, [edx + 0x21]
mov word [0x13b3b5a], ax
mov eax, edx
mov word [0x13b3b56], si
mov dword [0x13b3b4e], 0xac54ac49
mov dword [0x13b3b5c], 0xac43ac41
mov word [0x13b3b60], ax
pop esi
xor eax, eax
mov ecx, edx
xor cx, word [eax + 0x13b3b48]
add eax, 2
mov word [eax + 0x13b3c8a], cx
cmp eax, 0x1a
jb 0x1303d56
mov eax, 0x13b3c8c
ret

Function at 0x1303d74
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b822c], 1
mov ecx, 0xac26
jne 0x1303dd3
or dword [0x13b822c], 1
lea eax, [ecx + 0x1d]
mov word [0x13b3b64], ax
add eax, 0x11
mov edx, eax
mov word [0x13b3b66], dx
mov word [0x13b3b68], dx
lea edx, [ecx + 0x23]
mov word [0x13b3b6a], dx
mov edx, eax
lea eax, [ecx + 0x24]
mov word [0x13b3b72], ax
mov eax, ecx
mov word [0x13b3b6c], dx
mov dword [0x13b3b6e], 0xac54ac73
mov word [0x13b3b74], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x13b3b64]
add eax, 2
mov word [eax + 0x13b3ca6], dx
cmp eax, 0x12
jb 0x1303dd5
mov eax, 0x13b3ca8
ret

Function at 0x1304478
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b8228], 1
jne 0x13044a2
or dword [0x13b8228], 1
mov dword [0x13b3b78], 0x4a53481a
mov word [0x13b3b7c], 0x184a
mov byte [0x13b3b7e], 0x26
xor eax, eax
mov cl, byte [eax + 0x13b3b78]
xor cl, 0x26
mov byte [eax + 0x13b3cbc], cl
inc eax
cmp eax, 7
jb 0x13044a4
mov eax, 0x13b3cbc
ret

Function at 0x13044bf
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b8224], 1
jne 0x13044e9
or dword [0x13b8224], 1
mov dword [0x13b3b80], 0x4a53481a
mov word [0x13b3b84], 0x184a
mov byte [0x13b3b86], 0x26
xor eax, eax
mov cl, byte [eax + 0x13b3b80]
xor cl, 0x26
mov byte [eax + 0x13b3cc4], cl
inc eax
cmp eax, 7
jb 0x13044eb
mov eax, 0x13b3cc4
ret

Function at 0x1304506
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b821c], 1
jne 0x130452a
or dword [0x13b821c], 1
mov dword [0x13b3b8c], 0x49457d06
mov dword [0x13b3b90], 0x261b4342
xor eax, eax
mov cl, byte [eax + 0x13b3b8c]
xor cl, 0x26
mov byte [eax + 0x13b3cd0], cl
inc eax
cmp eax, 8
jb 0x130452c
mov eax, 0x13b3cd0
ret
Function at 0x1305221
Capabilities:
Encode data using xor

Disassembly:
push esi
push edi
push 0x31
pop ecx
mov esi, 0x1386d38
mov edi, 0x13b8620
push 0x1386dfc
rep movsd dword es:[edi], dword [esi]
call fcn.0133f3e0
pop ecx
pop edi
pop esi
cmp eax, 0xffffffff
jne 0x1305247
xor al, al
ret
push 0x1386bc0
call fcn.0133f330
pop ecx
cmp eax, 0xffffffff
je 0x1305244
push 0x1386e90
call fcn.0133e580
pop ecx
cmp eax, 0xffffffff
je 0x1305244
test byte [0x13b8210], 1
jne 0x1305288
or dword [0x13b8210], 1
mov dword [0x13b3cf0], 0x1b4b4259
mov byte [0x13b3cf4], 0x2a
xor eax, eax
mov cl, byte [eax + 0x13b3cf0]
xor cl, 0x2a
mov byte [eax + 0x13b3dbc], cl
inc eax
cmp eax, 5
jb 0x130528a
push 0x13b3dbc
call fcn.0133f450
pop ecx
mov dword [0x13ad928], eax
test eax, eax
js 0x1305244
call fcn.01305313
push eax
call fcn.0133e5f0
pop ecx
mov dword [0x13ad92c], eax
test eax, eax
js 0x1305244
test byte [0x13b8208], 1
jne 0x13052e6
or dword [0x13b8208], 1
mov dword [0x13b3d00], 0x2a594f4b
xor eax, eax
mov cl, byte [eax + 0x13b3d00]
xor cl, 0x2a
mov byte [eax + 0x13b3dcc], cl
inc eax
cmp eax, 4
jb 0x13052e8
push 0x13b3dcc
call fcn.0133f3a0
test eax, eax
mov dword [0x13ad930], eax
pop ecx
setns al
ret

Function at 0x1305313
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b820c], 1
jne 0x1305337
or dword [0x13b820c], 1
mov dword [0x13b3cf8], 0x5e58454c
mov dword [0x13b3cfc], 0x2a4b445f
xor eax, eax
mov cl, byte [eax + 0x13b3cf8]
xor cl, 0x2a
mov byte [eax + 0x13b3dc4], cl
inc eax
cmp eax, 8
jb 0x1305339
mov eax, 0x13b3dc4
ret

Function at 0x13055b7
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b8204], 1
jne 0x13055f5
or dword [0x13b8204], 1
mov dword [0x13b3d04], 0x430a5a47
mov dword [0x13b3d08], 0xa5e4344
mov dword [0x13b3d0c], 0x46434b4c
mov word [0x13b3d10], 0x4e4f
mov byte [0x13b3d12], 0x2a
xor eax, eax
mov cl, byte [eax + 0x13b3d04]
xor cl, 0x2a
mov byte [eax + 0x13b3dd0], cl
inc eax
cmp eax, 0xf
jb 0x13055f7
mov eax, 0x13b3dd0
ret

Function at 0x1305612
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b8200], 1
jne 0x1305650
or dword [0x13b8200], 1
mov dword [0x13b3d14], 0x430a5a47
mov dword [0x13b3d18], 0xa5e4344
mov dword [0x13b3d1c], 0x46434b4c
mov word [0x13b3d20], 0x4e4f
mov byte [0x13b3d22], 0x2a
xor eax, eax
mov cl, byte [eax + 0x13b3d14]
xor cl, 0x2a
mov byte [eax + 0x13b3de0], cl
inc eax
cmp eax, 0xf
jb 0x1305652
mov eax, 0x13b3de0
ret

Function at 0x130566d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b81fc], 1
jne 0x13056ab
or dword [0x13b81fc], 1
mov dword [0x13b3d24], 0x755e4f59
mov dword [0x13b3d28], 0xa5e4443
mov dword [0x13b3d2c], 0x46434b4c
mov word [0x13b3d30], 0x4e4f
mov byte [0x13b3d32], 0x2a
xor eax, eax
mov cl, byte [eax + 0x13b3d24]
xor cl, 0x2a
mov byte [eax + 0x13b3df0], cl
inc eax
cmp eax, 0xf
jb 0x13056ad
mov eax, 0x13b3df0
ret
Function at 0x13056c8
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b81f8], 1
jne 0x1305711
or dword [0x13b81f8], 1
mov dword [0x13b3d34], 0x4359445f
mov dword [0x13b3d38], 0x4e4f444d
mov dword [0x13b3d3c], 0x4b4f5875
mov dword [0x13b3d40], 0x4b4c0a4e
mov dword [0x13b3d44], 0x4e4f4643
mov byte [0x13b3d48], 0x2a
xor eax, eax
mov cl, byte [eax + 0x13b3d34]
xor cl, 0x2a
mov byte [eax + 0x13b3e00], cl
inc eax
cmp eax, 0x15
jb 0x1305713
mov eax, 0x13b3e00
ret

Function at 0x130572e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b81f4], 1
jne 0x130576d
or dword [0x13b81f4], 1
mov dword [0x13b3d4c], 0x4d44585a
mov dword [0x13b3d50], 0x414b470a
mov dword [0x13b3d54], 0x4b4c0a4f
mov dword [0x13b3d58], 0x4e4f4643
mov byte [0x13b3d5c], 0x2a
xor eax, eax
mov cl, byte [eax + 0x13b3d4c]
xor cl, 0x2a
mov byte [eax + 0x13b3e18], cl
inc eax
cmp eax, 0x11
jb 0x130576f
mov eax, 0x13b3e18
ret

Function at 0x130578a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b81f0], 1
jne 0x13057cc
or dword [0x13b81f0], 1
mov dword [0x13b3d60], 0x5e58454c
mov dword [0x13b3d64], 0x754b445f
mov dword [0x13b3d68], 0x4e4b4f58
mov dword [0x13b3d6c], 0x434b4c0a
mov dword [0x13b3d70], 0x2a4e4f46
xor eax, eax
mov cl, byte [eax + 0x13b3d60]
xor cl, 0x2a
mov byte [eax + 0x13b3e2c], cl
inc eax
cmp eax, 0x14
jb 0x13057ce
mov eax, 0x13b3e2c
ret

Function at 0x13057e9
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b81ec], 1
jne 0x1305831
or dword [0x13b81ec], 1
mov dword [0x13b3d74], 0x5a535849
mov dword [0x13b3d78], 0x430a455e
mov dword [0x13b3d7c], 0xa5e4344
mov dword [0x13b3d80], 0x46434b4c
mov word [0x13b3d84], 0x4e4f
mov byte [0x13b3d86], 0x2a
xor eax, eax
mov cl, byte [eax + 0x13b3d74]
xor cl, 0x2a
mov byte [eax + 0x13b3e40], cl
inc eax
cmp eax, 0x13
jb 0x1305833
mov eax, 0x13b3e40
ret

Function at 0x1305a46
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b81e8], 1
jne 0x1305a69
or dword [0x13b81e8], 1
mov dword [0x13b3d88], 0x4e595943
mov word [0x13b3d8c], 0x2a41
xor eax, eax
mov cl, byte [eax + 0x13b3d88]
xor cl, 0x2a
mov byte [eax + 0x13b3e54], cl
inc eax
cmp eax, 6
jb 0x1305a6b
mov eax, 0x13b3e54
ret

Function at 0x1305a86
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b81e4], 1
jne 0x1305ab3
or dword [0x13b81e4], 1
mov dword [0x13b3d90], 0x48585f42
mov dword [0x13b3d94], 0x585f4e4b
mov word [0x13b3d98], 0x2a58
xor eax, eax
mov cl, byte [eax + 0x13b3d90]
xor cl, 0x2a
mov byte [eax + 0x13b3e5c], cl
inc eax
cmp eax, 0xa
jb 0x1305ab5
mov eax, 0x13b3e5c
ret

Function at 0x1305b93
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b81e0], 1
jne 0x1305bc0
or dword [0x13b81e0], 1
mov dword [0x13b3d9c], 0x48585f42
mov dword [0x13b3da0], 0x585f4e4b
mov word [0x13b3da4], 0x2a58
xor eax, eax
mov cl, byte [eax + 0x13b3d9c]
xor cl, 0x2a
mov byte [eax + 0x13b3e68], cl
inc eax
cmp eax, 0xa
jb 0x1305bc2
mov eax, 0x13b3e68
ret
Function at 0x13062a4
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b81dc], 1
jne 0x13062ec
or dword [0x13b81dc], 1
mov dword [0x13b3e74], 0x5d545f4e
mov dword [0x13b3e78], 0x440d4259
mov dword [0x13b3e7c], 0xd594443
mov dword [0x13b3e80], 0x41444c4b
mov word [0x13b3e84], 0x4948
mov byte [0x13b3e86], 0x2d
xor eax, eax
mov cl, byte [eax + 0x13b3e74]
xor cl, 0x2d
mov byte [eax + 0x13b3f88], cl
inc eax
cmp eax, 0x13
jb 0x13062ee
mov eax, 0x13b3f88
ret

Function at 0x1306309
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b81d8], 1
jne 0x1306351
or dword [0x13b81d8], 1
mov dword [0x13b3e88], 0x5d545f4e
mov dword [0x13b3e8c], 0x440d4259
mov dword [0x13b3e90], 0xd594443
mov dword [0x13b3e94], 0x41444c4b
mov word [0x13b3e98], 0x4948
mov byte [0x13b3e9a], 0x2d
xor eax, eax
mov cl, byte [eax + 0x13b3e88]
xor cl, 0x2d
mov byte [eax + 0x13b3f9c], cl
inc eax
cmp eax, 0x13
jb 0x1306353
mov eax, 0x13b3f9c
ret

Function at 0x130636e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b81d0], 1
jne 0x13063b6
or dword [0x13b81d0], 1
mov dword [0x13b3ea4], 0x5d545f4e
mov dword [0x13b3ea8], 0x440d4259
mov dword [0x13b3eac], 0xd594443
mov dword [0x13b3eb0], 0x41444c4b
mov word [0x13b3eb4], 0x4948
mov byte [0x13b3eb6], 0x2d
xor eax, eax
mov cl, byte [eax + 0x13b3ea4]
xor cl, 0x2d
mov byte [eax + 0x13b3fb8], cl
inc eax
cmp eax, 0x13
jb 0x13063b8
mov eax, 0x13b3fb8
ret

Function at 0x13063d3
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b81c8], 1
jne 0x130641b
or dword [0x13b81c8], 1
mov dword [0x13b3ebc], 0x5d545f4e
mov dword [0x13b3ec0], 0x440d4259
mov dword [0x13b3ec4], 0xd594443
mov dword [0x13b3ec8], 0x41444c4b
mov word [0x13b3ecc], 0x4948
mov byte [0x13b3ece], 0x2d
xor eax, eax
mov cl, byte [eax + 0x13b3ebc]
xor cl, 0x2d
mov byte [eax + 0x13b3fd0], cl
inc eax
cmp eax, 0x13
jb 0x130641d
mov eax, 0x13b3fd0
ret

Function at 0x1306438
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b81c4], 1
jne 0x130646f
or dword [0x13b81c4], 1
mov dword [0x13b3ed0], 0x5d545f4e
mov dword [0x13b3ed4], 0x4b0d4259
mov dword [0x13b3ed8], 0x4841444c
mov word [0x13b3edc], 0x2d49
xor eax, eax
mov cl, byte [eax + 0x13b3ed0]
xor cl, 0x2d
mov byte [eax + 0x13b3fe4], cl
inc eax
cmp eax, 0xe
jb 0x1306471
mov eax, 0x13b3fe4
ret

Function at 0x130648c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b81c0], 1
jne 0x13064c3
or dword [0x13b81c0], 1
mov dword [0x13b3ee0], 0x5d545f4e
mov dword [0x13b3ee4], 0x4b0d4259
mov dword [0x13b3ee8], 0x4841444c
mov word [0x13b3eec], 0x2d49
xor eax, eax
mov cl, byte [eax + 0x13b3ee0]
xor cl, 0x2d
mov byte [eax + 0x13b3ff4], cl
inc eax
cmp eax, 0xe
jb 0x13064c5
mov eax, 0x13b3ff4
ret

Function at 0x13064e0
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b81bc], 1
jne 0x130650d
or dword [0x13b81bc], 1
mov dword [0x13b3ef0], 0x5d5f4845
mov dword [0x13b3ef4], 0x5f484906
mov word [0x13b3ef8], 0x2d5d
xor eax, eax
mov cl, byte [eax + 0x13b3ef0]
xor cl, 0x2d
mov byte [eax + 0x13b4004], cl
inc eax
cmp eax, 0xa
jb 0x130650f
mov eax, 0x13b4004
ret
Function at 0x130652a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b81b8], 1
jne 0x1306561
or dword [0x13b81b8], 1
mov dword [0x13b3efc], 0x5d545f4e
mov dword [0x13b3f00], 0x4b0d4259
mov dword [0x13b3f04], 0x4841444c
mov word [0x13b3f08], 0x2d49
xor eax, eax
mov cl, byte [eax + 0x13b3efc]
xor cl, 0x2d
mov byte [eax + 0x13b4010], cl
inc eax
cmp eax, 0xe
jb 0x1306563
mov eax, 0x13b4010
ret

Function at 0x130657e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b81b4], 1
jne 0x13065b5
or dword [0x13b81b4], 1
mov dword [0x13b3f0c], 0x5d545f4e
mov dword [0x13b3f10], 0x4b0d4259
mov dword [0x13b3f14], 0x4841444c
mov word [0x13b3f18], 0x2d49
xor eax, eax
mov cl, byte [eax + 0x13b3f0c]
xor cl, 0x2d
mov byte [eax + 0x13b4020], cl
inc eax
cmp eax, 0xe
jb 0x13065b7
mov eax, 0x13b4020
ret

Function at 0x1306683
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b81b0], 1
jne 0x13066ba
or dword [0x13b81b0], 1
mov dword [0x13b3f1c], 0x5d545f4e
mov dword [0x13b3f20], 0x4b0d4259
mov dword [0x13b3f24], 0x4841444c
mov word [0x13b3f28], 0x2d49
xor eax, eax
mov cl, byte [eax + 0x13b3f1c]
xor cl, 0x2d
mov byte [eax + 0x13b4030], cl
inc eax
cmp eax, 0xe
jb 0x13066bc
mov eax, 0x13b4030
ret

Function at 0x1306869
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b81ac], 1
jne 0x13068a0
or dword [0x13b81ac], 1
mov dword [0x13b3f2c], 0x5d545f4e
mov dword [0x13b3f30], 0x4b0d4259
mov dword [0x13b3f34], 0x4841444c
mov word [0x13b3f38], 0x2d49
xor eax, eax
mov cl, byte [eax + 0x13b3f2c]
xor cl, 0x2d
mov byte [eax + 0x13b4040], cl
inc eax
cmp eax, 0xe
jb 0x13068a2
mov eax, 0x13b4040
ret

Function at 0x13068bd
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b81a8], 1
jne 0x13068f4
or dword [0x13b81a8], 1
mov dword [0x13b3f3c], 0x5d545f4e
mov dword [0x13b3f40], 0x4b0d4259
mov dword [0x13b3f44], 0x4841444c
mov word [0x13b3f48], 0x2d49
xor eax, eax
mov cl, byte [eax + 0x13b3f3c]
xor cl, 0x2d
mov byte [eax + 0x13b4050], cl
inc eax
cmp eax, 0xe
jb 0x13068f6
mov eax, 0x13b4050
ret