joyce8/EMBER2024-capa huggingface dataset:
Function at 0x303ad6
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2da8], 1
jne 0x303b0b
or dword [0x3c2da8], 1
mov dword [0x3bcce0], 0x60717a58
mov dword [0x3bcce4], 0x352f7079
mov dword [0x3bcce8], 0x1f186630
mov byte [0x3bccec], 0x15
xor eax, eax
mov cl, byte [eax + 0x3bcce0]
xor cl, 0x15
mov byte [eax + 0x3bd38c], cl
inc eax
cmp eax, 0xd
jb 0x303b0d
mov eax, 0x3bd38c
ret

Function at 0x303b28
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2da4], 1
jne 0x303b67
or dword [0x3c2da4], 1
mov dword [0x3bccf0], 0x70677d41
mov dword [0x3bccf4], 0x352f7174
mov dword [0x3bccf8], 0x6d306d25
mov dword [0x3bccfc], 0x1f181f18
mov byte [0x3bcd00], 0x15
xor eax, eax
mov cl, byte [eax + 0x3bccf0]
xor cl, 0x15
mov byte [eax + 0x3bd39c], cl
inc eax
cmp eax, 0x11
jb 0x303b69
mov eax, 0x3bd39c
ret

Function at 0x303b84
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2da0], 1
jne 0x303bc2
or dword [0x3c2da0], 1
mov dword [0x3bcd04], 0x70766d50
mov dword [0x3bcd08], 0x7a7c6165
mov dword [0x3bcd0c], 0x7130357b
mov word [0x3bcd10], 0x1f18
mov byte [0x3bcd12], 0x15
xor eax, eax
mov cl, byte [eax + 0x3bcd04]
xor cl, 0x15
mov byte [eax + 0x3bd3b0], cl
inc eax
cmp eax, 0xf
jb 0x303bc4
mov eax, 0x3bd3b0
ret

Function at 0x303bdf
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2d9c], 1
jne 0x303c1d
or dword [0x3c2d9c], 1
mov dword [0x3bcd14], 0x74767a59
mov dword [0x3bcd18], 0x7b7a7c61
mov dword [0x3bcd1c], 0x6530352f
mov word [0x3bcd20], 0x1f18
mov byte [0x3bcd22], 0x15
xor eax, eax
mov cl, byte [eax + 0x3bcd14]
xor cl, 0x15
mov byte [eax + 0x3bd3c0], cl
inc eax
cmp eax, 0xf
jb 0x303c1f
mov eax, 0x3bd3c0
ret

Function at 0x303c3a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2d98], 1
jne 0x303c7b
or dword [0x3c2d98], 1
mov dword [0x3bcd24], 0x70656c41
mov dword [0x3bcd28], 0x6630352f
mov dword [0x3bcd2c], 0x6d253d35
mov dword [0x3bcd30], 0x183c6d30
mov word [0x3bcd34], 0x151f
xor eax, eax
mov cl, byte [eax + 0x3bcd24]
xor cl, 0x15
mov byte [eax + 0x3bd3d0], cl
inc eax
cmp eax, 0x12
jb 0x303c7d
mov eax, 0x3bd3d0
ret

Function at 0x303c98
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2d94], 1
jne 0x303d20
or dword [0x3c2d94], 1
mov dword [0x3bcd38], 0x74617051
mov dword [0x3bcd3c], 0x2f66797c
mov dword [0x3bcd40], 0x7c674135
mov dword [0x3bcd44], 0x61357170
mov dword [0x3bcd48], 0x7067357a
mov dword [0x3bcd4c], 0x73357174
mov dword [0x3bcd50], 0x35787a67
mov dword [0x3bcd54], 0x7a787078
mov dword [0x3bcd58], 0x74356c67
mov dword [0x3bcd5c], 0x70677171
mov dword [0x3bcd60], 0x30356666
mov dword [0x3bcd64], 0x151f1865
xor eax, eax
mov cl, byte [eax + 0x3bcd38]
xor cl, 0x15
mov byte [eax + 0x3bd3e4], cl
inc eax
cmp eax, 0x30
jb 0x303d22
mov eax, 0x3bd3e4
ret
Function at 0x303d3d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2d90], 1
jne 0x303dcf
or dword [0x3c2d90], 1
mov dword [0x3bcd68], 0x74617051
mov dword [0x3bcd6c], 0x2f66797c
mov dword [0x3bcd70], 0x7c674135
mov dword [0x3bcd74], 0x61357170
mov dword [0x3bcd78], 0x6762357a
mov dword [0x3bcd7c], 0x3570617c
mov dword [0x3bcd80], 0x78357a61
mov dword [0x3bcd84], 0x677a7870
mov dword [0x3bcd88], 0x7174356c
mov dword [0x3bcd8c], 0x66706771
mov dword [0x3bcd90], 0x65303566
mov word [0x3bcd94], 0x1f18
mov byte [0x3bcd96], 0x15
xor eax, eax
mov cl, byte [eax + 0x3bcd68]
xor cl, 0x15
mov byte [eax + 0x3bd414], cl
inc eax
cmp eax, 0x2f
jb 0x303dd1
mov eax, 0x3bd414
ret

Function at 0x303dec
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2d8c], 1
jne 0x303e7f
or dword [0x3c2d8c], 1
mov dword [0x3bcd98], 0x74617051
mov dword [0x3bcd9c], 0x2f66797c
mov dword [0x3bcda0], 0x7c674135
mov dword [0x3bcda4], 0x61357170
mov dword [0x3bcda8], 0x6d70357a
mov dword [0x3bcdac], 0x61607670
mov dword [0x3bcdb0], 0x70783570
mov dword [0x3bcdb4], 0x6c677a78
mov dword [0x3bcdb8], 0x35617435
mov dword [0x3bcdbc], 0x67717174
mov dword [0x3bcdc0], 0x35666670
mov dword [0x3bcdc4], 0x1f186530
mov byte [0x3bcdc8], 0x15
xor eax, eax
mov cl, byte [eax + 0x3bcd98]
xor cl, 0x15
mov byte [eax + 0x3bd444], cl
inc eax
cmp eax, 0x31
jb 0x303e81
mov eax, 0x3bd444
ret

Function at 0x303e9c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2d88], 1
jne 0x303ed3
or dword [0x3c2d88], 1
mov dword [0x3bcdcc], 0x72747953
mov dword [0x3bcdd0], 0x25352f66
mov dword [0x3bcdd4], 0x186d306d
mov word [0x3bcdd8], 0x151f
xor eax, eax
mov cl, byte [eax + 0x3bcdcc]
xor cl, 0x15
mov byte [eax + 0x3bd478], cl
inc eax
cmp eax, 0xe
jb 0x303ed5
mov eax, 0x3bd478
ret

Function at 0x303ef0
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2d84], 1
jne 0x303f27
or dword [0x3c2d84], 1
mov dword [0x3bcddc], 0x74677445
mov dword [0x3bcde0], 0x70617078
mov dword [0x3bcde4], 0x182f6667
mov word [0x3bcde8], 0x151f
xor eax, eax
mov cl, byte [eax + 0x3bcddc]
xor cl, 0x15
mov byte [eax + 0x3bd488], cl
inc eax
cmp eax, 0xe
jb 0x303f29
mov eax, 0x3bd488
ret

Function at 0x303f44
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2d80], 1
jne 0x303f8d
or dword [0x3c2d80], 1
mov dword [0x3bcdec], 0x6774451c
mov dword [0x3bcdf0], 0x61707874
mov dword [0x3bcdf4], 0x304e6770
mov dword [0x3bcdf8], 0x352f4871
mov dword [0x3bcdfc], 0x1f186530
mov byte [0x3bce00], 0x15
xor eax, eax
mov cl, byte [eax + 0x3bcdec]
xor cl, 0x15
mov byte [eax + 0x3bd498], cl
inc eax
cmp eax, 0x15
jb 0x303f8f
mov eax, 0x3bd498
ret

Function at 0x303faa
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2d7c], 1
jne 0x303fe2
or dword [0x3c2d7c], 1
mov dword [0x3bce04], 0x355d5046
mov dword [0x3bce08], 0x79747b54
mov dword [0x3bce0c], 0x667c666c
mov dword [0x3bce10], 0x151f182f
xor eax, eax
mov cl, byte [eax + 0x3bce04]
xor cl, 0x15
mov byte [eax + 0x3bd4b0], cl
inc eax
cmp eax, 0x10
jb 0x303fe4
mov eax, 0x3bd4b0
ret
Function at 0x303fff
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2d78], 1
jne 0x304047
or dword [0x3c2d78], 1
mov dword [0x3bce14], 0x7f775a1c
mov dword [0x3bce18], 0x35617670
mov dword [0x3bce1c], 0x70656c61
mov dword [0x3bce20], 0x6630352f
mov word [0x3bce24], 0x1f18
mov byte [0x3bce26], 0x15
xor eax, eax
mov cl, byte [eax + 0x3bce14]
xor cl, 0x15
mov byte [eax + 0x3bd4c0], cl
inc eax
cmp eax, 0x13
jb 0x304049
mov eax, 0x3bd4c0
ret

Function at 0x304064
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2d74], 1
jne 0x3040cd
or dword [0x3c2d74], 1
mov dword [0x3bce28], 0x7c74531c
mov dword [0x3bce2c], 0x35717079
mov dword [0x3bce30], 0x73357a61
mov dword [0x3bce34], 0x7a79797a
mov dword [0x3bce38], 0x7a653562
mov dword [0x3bce3c], 0x70617b7c
mov dword [0x3bce40], 0x7d763567
mov dword [0x3bce44], 0x187b7c74
mov word [0x3bce48], 0x151f
xor eax, eax
mov cl, byte [eax + 0x3bce28]
xor cl, 0x15
mov byte [eax + 0x3bd4d4], cl
inc eax
cmp eax, 0x22
jb 0x3040cf
mov eax, 0x3bd4d4
ret

Function at 0x3040ea
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2d70], 1
jne 0x30410d
or dword [0x3c2d70], 1
mov dword [0x3bce4c], 0x71616655
mov word [0x3bce50], 0x1555
xor eax, eax
mov cl, byte [eax + 0x3bce4c]
xor cl, 0x15
mov byte [eax + 0x3bd4f8], cl
inc eax
cmp eax, 6
jb 0x30410f
mov eax, 0x3bd4f8
ret

Function at 0x30412a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2d6c], 1
jne 0x304161
or dword [0x3c2d6c], 1
mov dword [0x3bce54], 0x617b6067
mov dword [0x3bce58], 0x4a70787c
mov dword [0x3bce5c], 0x7a676770
mov word [0x3bce60], 0x1567
xor eax, eax
mov cl, byte [eax + 0x3bce54]
xor cl, 0x15
mov byte [eax + 0x3bd500], cl
inc eax
cmp eax, 0xe
jb 0x304163
mov eax, 0x3bd500
ret

Function at 0x30417e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2d68], 1
jne 0x3041ac
or dword [0x3c2d68], 1
mov dword [0x3bce64], 0x727b7467
mov dword [0x3bce68], 0x67704a70
mov dword [0x3bce6c], 0x15677a67
xor eax, eax
mov cl, byte [eax + 0x3bce64]
xor cl, 0x15
mov byte [eax + 0x3bd510], cl
inc eax
cmp eax, 0xc
jb 0x3041ae
mov eax, 0x3bd510
ret

Function at 0x3041c9
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2d64], 1
jne 0x304207
or dword [0x3c2d64], 1
mov dword [0x3bce70], 0x6770637a
mov dword [0x3bce74], 0x627a7973
mov dword [0x3bce78], 0x6767704a
mov word [0x3bce7c], 0x677a
mov byte [0x3bce7e], 0x15
xor eax, eax
mov cl, byte [eax + 0x3bce70]
xor cl, 0x15
mov byte [eax + 0x3bd51c], cl
inc eax
cmp eax, 0xf
jb 0x304209
mov eax, 0x3bd51c
ret

Function at 0x304224
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2d60], 1
jne 0x30425c
or dword [0x3c2d60], 1
mov dword [0x3bce80], 0x70717b60
mov dword [0x3bce84], 0x7a797367
mov dword [0x3bce88], 0x67704a62
mov dword [0x3bce8c], 0x15677a67
xor eax, eax
mov cl, byte [eax + 0x3bce80]
xor cl, 0x15
mov byte [eax + 0x3bd52c], cl
inc eax
cmp eax, 0x10
jb 0x30425e
mov eax, 0x3bd52c
ret
Function at 0x304279
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2d5c], 1
jne 0x3042a7
or dword [0x3c2d5c], 1
mov dword [0x3bce90], 0x7c727a79
mov dword [0x3bce94], 0x67704a76
mov dword [0x3bce98], 0x15677a67
xor eax, eax
mov cl, byte [eax + 0x3bce90]
xor cl, 0x15
mov byte [eax + 0x3bd53c], cl
inc eax
cmp eax, 0xc
jb 0x3042a9
mov eax, 0x3bd53c
ret

Function at 0x3042c4
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2d58], 1
jne 0x3042f9
or dword [0x3c2d58], 1
mov dword [0x3bce9c], 0x74787a71
mov dword [0x3bcea0], 0x704a7b7c
mov dword [0x3bcea4], 0x677a6767
mov byte [0x3bcea8], 0x15
xor eax, eax
mov cl, byte [eax + 0x3bce9c]
xor cl, 0x15
mov byte [eax + 0x3bd548], cl
inc eax
cmp eax, 0xd
jb 0x3042fb
mov eax, 0x3bd548
ret

Function at 0x304316
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2d54], 1
jne 0x304355
or dword [0x3c2d54], 1
mov dword [0x3bceac], 0x74637b7c
mov dword [0x3bceb0], 0x4a717c79
mov dword [0x3bceb4], 0x60726774
mov dword [0x3bceb8], 0x617b7078
mov byte [0x3bcebc], 0x15
xor eax, eax
mov cl, byte [eax + 0x3bceac]
xor cl, 0x15
mov byte [eax + 0x3bd558], cl
inc eax
cmp eax, 0x11
jb 0x304357
mov eax, 0x3bd558
ret

Function at 0x304372
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2d50], 1
jne 0x3043a7
or dword [0x3c2d50], 1
mov dword [0x3bcec0], 0x727b7079
mov dword [0x3bcec4], 0x704a7d61
mov dword [0x3bcec8], 0x677a6767
mov byte [0x3bcecc], 0x15
xor eax, eax
mov cl, byte [eax + 0x3bcec0]
xor cl, 0x15
mov byte [eax + 0x3bd56c], cl
inc eax
cmp eax, 0xd
jb 0x3043a9
mov eax, 0x3bd56c
ret

Function at 0x3043c4
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2d4c], 1
jne 0x3043f9
or dword [0x3c2d4c], 1
mov dword [0x3bced0], 0x4a61607a
mov dword [0x3bced4], 0x674a737a
mov dword [0x3bced8], 0x70727b74
mov byte [0x3bcedc], 0x15
xor eax, eax
mov cl, byte [eax + 0x3bced0]
xor cl, 0x15
mov byte [eax + 0x3bd57c], cl
inc eax
cmp eax, 0xd
jb 0x3043fb
mov eax, 0x3bd57c
ret

Function at 0x304416
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2d48], 1
jne 0x304443
or dword [0x3c2d48], 1
mov dword [0x3bcee0], 0x70766d70
mov dword [0x3bcee4], 0x7a7c6165
mov word [0x3bcee8], 0x157b
xor eax, eax
mov cl, byte [eax + 0x3bcee0]
xor cl, 0x15
mov byte [eax + 0x3bd58c], cl
inc eax
cmp eax, 0xa
jb 0x304445
mov eax, 0x3bd58c
ret

Function at 0x304460
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2d44], 1
jne 0x3044bf
or dword [0x3c2d44], 1
mov dword [0x3bceec], 0x7161661c
mov dword [0x3bcef0], 0x6d702f2f
mov dword [0x3bcef4], 0x61657076
mov dword [0x3bcef8], 0x2f7b7a7c
mov dword [0x3bcefc], 0x747d622f
mov dword [0x3bcf00], 0x2f3c3d61
mov dword [0x3bcf04], 0x18663035
mov word [0x3bcf08], 0x151f
xor eax, eax
mov cl, byte [eax + 0x3bceec]
xor cl, 0x15
mov byte [eax + 0x3bd598], cl
inc eax
cmp eax, 0x1e
jb 0x3044c1
mov eax, 0x3bd598
ret
Function at 0x3044dc
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2d40], 1
jne 0x304550
or dword [0x3c2d40], 1
mov dword [0x3bcf0c], 0x7c74531c
mov dword [0x3bcf10], 0x35717079
mov dword [0x3bcf14], 0x72357a61
mov dword [0x3bcf18], 0x66356170
mov dword [0x3bcf1c], 0x2f2f7161
mov dword [0x3bcf20], 0x70766d70
mov dword [0x3bcf24], 0x7a7c6165
mov dword [0x3bcf28], 0x622f2f7b
mov dword [0x3bcf2c], 0x3d61747d
mov dword [0x3bcf30], 0x151f183c
xor eax, eax
mov cl, byte [eax + 0x3bcf0c]
xor cl, 0x15
mov byte [eax + 0x3bd5b8], cl
inc eax
cmp eax, 0x28
jb 0x304552
mov eax, 0x3bd5b8
ret

Function at 0x30456d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2d3c], 1
jne 0x3045a1
or dword [0x3c2d3c], 1
mov dword [0x3bcf34], 0x787a764a
mov dword [0x3bcf38], 0x6767704a
mov word [0x3bcf3c], 0x677a
mov byte [0x3bcf3e], 0x15
xor eax, eax
mov cl, byte [eax + 0x3bcf34]
xor cl, 0x15
mov byte [eax + 0x3bd5e0], cl
inc eax
cmp eax, 0xb
jb 0x3045a3
mov eax, 0x3bd5e0
ret

Function at 0x3045be
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2d38], 1
jne 0x304627
or dword [0x3c2d38], 1
mov dword [0x3bcf40], 0x7a764a1c
mov dword [0x3bcf44], 0x67704a78
mov dword [0x3bcf48], 0x2f677a67
mov dword [0x3bcf4c], 0x6767502f
mov dword [0x3bcf50], 0x7058677a
mov dword [0x3bcf54], 0x72746666
mov dword [0x3bcf58], 0x2f3c3d70
mov dword [0x3bcf5c], 0x18663035
mov word [0x3bcf60], 0x151f
xor eax, eax
mov cl, byte [eax + 0x3bcf40]
xor cl, 0x15
mov byte [eax + 0x3bd5ec], cl
inc eax
cmp eax, 0x22
jb 0x304629
mov eax, 0x3bd5ec
ret

Function at 0x304644
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2d34], 1
jne 0x3046c2
or dword [0x3c2d34], 1
mov dword [0x3bcf64], 0x7c74531c
mov dword [0x3bcf68], 0x35717079
mov dword [0x3bcf6c], 0x72357a61
mov dword [0x3bcf70], 0x4a356170
mov dword [0x3bcf74], 0x4a787a76
mov dword [0x3bcf78], 0x7a676770
mov dword [0x3bcf7c], 0x502f2f67
mov dword [0x3bcf80], 0x677a6767
mov dword [0x3bcf84], 0x66667058
mov dword [0x3bcf88], 0x3d707274
mov dword [0x3bcf8c], 0x151f183c
xor eax, eax
mov cl, byte [eax + 0x3bcf64]
xor cl, 0x15
mov byte [eax + 0x3bd610], cl
inc eax
cmp eax, 0x2c
jb 0x3046c4
mov eax, 0x3bd610
ret

Function at 0x3046df
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2d30], 1
jne 0x30475a
or dword [0x3c2d30], 1
mov dword [0x3bcf90], 0x76746146
mov dword [0x3bcf94], 0x6071357e
mov dword [0x3bcf98], 0x70356578
mov dword [0x3bcf9c], 0x677a6767
mov dword [0x3bcfa0], 0x7a56352f
mov dword [0x3bcfa4], 0x6d70617b
mov dword [0x3bcfa8], 0x76704761
mov dword [0x3bcfac], 0x3571677a
mov dword [0x3bcfb0], 0x35667462
mov dword [0x3bcfb4], 0x7979607b
mov byte [0x3bcfb8], 0x15
xor eax, eax
mov cl, byte [eax + 0x3bcf90]
xor cl, 0x15
mov byte [eax + 0x3bd63c], cl
inc eax
cmp eax, 0x29
jb 0x30475c
mov eax, 0x3bd63c
ret
Function at 0x304777
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2d2c], 1
jne 0x3047f1
or dword [0x3c2d2c], 1
mov dword [0x3bcfbc], 0x76746146
mov dword [0x3bcfc0], 0x6071357e
mov dword [0x3bcfc4], 0x70356578
mov dword [0x3bcfc8], 0x677a6767
mov dword [0x3bcfcc], 0x6c46352f
mov dword [0x3bcfd0], 0x7c7b5c78
mov dword [0x3bcfd4], 0x79747c61
mov dword [0x3bcfd8], 0x35706f7c
mov dword [0x3bcfdc], 0x797c7473
mov word [0x3bcfe0], 0x7170
mov byte [0x3bcfe2], 0x15
xor eax, eax
mov cl, byte [eax + 0x3bcfbc]
xor cl, 0x15
mov byte [eax + 0x3bd668], cl
inc eax
cmp eax, 0x27
jb 0x3047f3
mov eax, 0x3bd668
ret

Function at 0x30480e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2d28], 1
jne 0x304874
or dword [0x3c2d28], 1
mov dword [0x3bcfe4], 0x7c7e6629
mov dword [0x3bcfe8], 0x71706565
mov dword [0x3bcfec], 0x74677335
mov dword [0x3bcff0], 0x35397078
mov dword [0x3bcff4], 0x62355645
mov dword [0x3bcff8], 0x7b356674
mov dword [0x3bcffc], 0x2b797960
mov word [0x3bd000], 0x1f18
mov byte [0x3bd002], 0x15
xor eax, eax
mov cl, byte [eax + 0x3bcfe4]
xor cl, 0x15
mov byte [eax + 0x3bd690], cl
inc eax
cmp eax, 0x1f
jb 0x304876
mov eax, 0x3bd690
ret

Function at 0x304891
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2d24], 1
jne 0x304924
or dword [0x3c2d24], 1
mov dword [0x3bd004], 0x7c7e6629
mov dword [0x3bd008], 0x71706565
mov dword [0x3bd00c], 0x74677335
mov dword [0x3bd010], 0x35397078
mov dword [0x3bd014], 0x62355645
mov dword [0x3bd018], 0x66356674
mov dword [0x3bd01c], 0x35707874
mov dword [0x3bd020], 0x67356674
mov dword [0x3bd024], 0x67606170
mov dword [0x3bd028], 0x7174357b
mov dword [0x3bd02c], 0x66706771
mov dword [0x3bd030], 0x1f182b66
mov byte [0x3bd034], 0x15
xor eax, eax
mov cl, byte [eax + 0x3bd004]
xor cl, 0x15
mov byte [eax + 0x3bd6b0], cl
inc eax
cmp eax, 0x31
jb 0x304926
mov eax, 0x3bd6b0
ret
Function at 0x304941
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x16c4
call fcn.00376a60
push ebx
push esi
push edi
call dword [0x392094]
test byte [0x3c2d20], 1
mov dword [ebp - 4], eax
jne 0x304988
or dword [0x3c2d20], 1
mov dword [0x3bd038], 0x717a7829
mov dword [0x3bd03c], 0x2a707960
mov dword [0x3bd040], 0x152b2a2a
xor edi, edi
xor eax, eax
mov cl, byte [eax + 0x3bd038]
xor cl, 0x15
mov byte [eax + 0x3bd6e4], cl
inc eax
cmp eax, 0xc
jb 0x30498c
test byte [0x3c2d1c], 1
mov dword [ebp - 8], 0x3bd6e4
jne 0x3049d6
or dword [0x3c2d1c], 1
mov dword [0x3bd044], 0x786c6629
mov dword [0x3bd048], 0x2a797a77
mov dword [0x3bd04c], 0x152b2a2a
xor eax, eax
mov cl, byte [eax + 0x3bd044]
xor cl, 0x15
mov byte [eax + 0x3bd6f0], cl
inc eax
cmp eax, 0xc
jb 0x3049d8
mov esi, 0x688
push esi
lea eax, [ebp - 0x6c0]
push edi
push eax
mov dword [ebp - 0x1c], 0x3bd6f0
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], edi
call fcn.00366f20
mov eax, dword [ebp + 8]
cdq
add esp, 0xc
mov dword [ebp - 0x6c0], esi
mov esi, eax
lea eax, [ebp - 0x6c0]
push eax
mov ebx, edx
push ebx
push esi
push dword [ebp - 4]
call dword [0x3923b0]
test eax, eax
je 0x304a3d
lea eax, [ebp - 0x69c]
mov dword [ebp - 8], eax
push 0xffa
lea eax, [ebp - 0x16c0]
push edi
push eax
call fcn.00366f20
add esp, 0xc
lea eax, [ebp - 0x16c0]
push eax
lea eax, [ebp - 0x18]
push eax
push ebx
push esi
push dword [ebp - 4]
mov dword [ebp - 0x16c0], 0x58
mov dword [ebp - 0x1670], 0x7d0
call dword [0x3923bc]
lea ecx, [ebp - 0x166c]
test eax, eax
jne 0x304a89
mov ecx, dword [ebp - 0x1c]
test byte [0x3c2d18], 1
jne 0x304ac0
or dword [0x3c2d18], 1
mov dword [0x3bd050], 0x30356530
mov dword [0x3bd054], 0x66303466
mov dword [0x3bd058], 0x306d253e
mov word [0x3bd05c], 0x156d
xor eax, eax
mov dl, byte [eax + 0x3bd050]
xor dl, 0x15
mov byte [eax + 0x3bd6fc], dl
inc eax
cmp eax, 0xe
jb 0x304ac2
push dword [ebp - 0x14]
push dword [ebp - 0x18]
push ecx
push dword [ebp - 8]
push dword [ebp + 8]
push 0x3bd6fc
push dword [ebp + 0xc]
call fcn.0036414d
add esp, 0x1c
push 6
pop ecx
mov dword [ebp - 0xc], edi
xor eax, eax
lea edi, [ebp - 0x38]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0xc]
push eax
push ebx
push esi
push dword [ebp - 4]
mov dword [ebp - 0x38], 0x18
call dword [0x3923a4]
test eax, eax
je 0x304b39
push dword [ebp - 0xc]
push dword [ebp - 0x30]
push dword [ebp - 0x2c]
call fcn.00304b86
push eax
push dword [ebp + 0xc]
call fcn.0036414d
add esp, 0x14
test byte [0x3c2d10], 1
jne 0x304b59
or dword [0x3c2d10], 1
mov word [0x3bd070], 0x1f18
mov byte [0x3bd072], 0x15
xor eax, eax
mov cl, byte [eax + 0x3bd070]
xor cl, 0x15
mov byte [eax + 0x3bd71c], cl
inc eax
cmp eax, 3
jb 0x304b5b
push dword [ebp + 0xc]
push 0x3bd71c
call fcn.00363dc1
pop ecx
pop ecx
pop edi
pop esi
pop ebx
leave
ret 8
Function at 0x304b86
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2d14], 1
jne 0x304bbe
or dword [0x3c2d14], 1
mov dword [0x3bd060], 0x66303d35
mov dword [0x3bd064], 0x3571302f
mov dword [0x3bd068], 0x6d25353e
mov dword [0x3bd06c], 0x153c6d30
xor eax, eax
mov cl, byte [eax + 0x3bd060]
xor cl, 0x15
mov byte [eax + 0x3bd70c], cl
inc eax
cmp eax, 0x10
jb 0x304bc0
mov eax, 0x3bd70c
ret

Function at 0x305dfd
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2d04], 1
jne 0x305e52
or dword [0x3c2d04], 1
mov dword [0x3bd740], 0x5244575e
mov dword [0x3bd744], 0x53445741
mov dword [0x3bd748], 0x4655574a
mov dword [0x3bd74c], 0x45524a5f
mov dword [0x3bd750], 0x404a4252
mov dword [0x3bd754], 0x494e5954
mov word [0x3bd758], 0x1649
xor eax, eax
mov cl, byte [eax + 0x3bd740]
xor cl, 0x16
mov byte [eax + 0x3bd940], cl
inc eax
cmp eax, 0x1a
jb 0x305e54
mov eax, 0x3bd940
ret

Function at 0x305f63
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2d00], 1
jne 0x305f8d
or dword [0x3c2d00], 1
mov dword [0x3bd75c], 0x77415b40
mov word [0x3bd760], 0x7364
mov byte [0x3bd762], 0x16
xor eax, eax
mov cl, byte [eax + 0x3bd75c]
xor cl, 0x16
mov byte [eax + 0x3bd95c], cl
inc eax
cmp eax, 7
jb 0x305f8f
mov eax, 0x3bd95c
ret

Function at 0x305faa
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2cfc], 1
jne 0x305fd7
or dword [0x3c2cfc], 1
mov dword [0x3bd764], 0x62647f40
mov dword [0x3bd768], 0x467a7763
mov word [0x3bd76c], 0x1655
xor eax, eax
mov cl, byte [eax + 0x3bd764]
xor cl, 0x16
mov byte [eax + 0x3bd964], cl
inc eax
cmp eax, 0xa
jb 0x305fd9
mov eax, 0x3bd964
ret

Function at 0x305ff5
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2cf8], 1
jne 0x306029
or dword [0x3c2cf8], 1
mov dword [0x3bd770], 0x62647f40
mov dword [0x3bd774], 0x547a7763
mov word [0x3bd778], 0x6e79
mov byte [0x3bd77a], 0x16
xor eax, eax
mov cl, byte [eax + 0x3bd770]
xor cl, 0x16
mov byte [eax + 0x3bd970], cl
inc eax
cmp eax, 0xb
jb 0x30602b
mov eax, 0x3bd970
ret

Function at 0x306046
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2cf4], 1
jne 0x30606a
or dword [0x3c2cf4], 1
mov dword [0x3bd77c], 0x73787351
mov dword [0x3bd780], 0x16757f64
xor eax, eax
mov cl, byte [eax + 0x3bd77c]
xor cl, 0x16
mov byte [eax + 0x3bd97c], cl
inc eax
cmp eax, 8
jb 0x30606c
mov eax, 0x3bd97c
ret
Function at 0x306087
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x38b28f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xa8
and dword [esp], 0
test byte [0x3c2cf0], 1
push esi
jne 0x3060da
or dword [0x3c2cf0], 1
mov dword [0x3bd784], 0x7a726278
mov dword [0x3bd788], 0x7a72387a
mov word [0x3bd78c], 0x167a
xor eax, eax
mov cl, byte [eax + 0x3bd784]
xor cl, 0x16
mov byte [eax + 0x3bd984], cl
inc eax
cmp eax, 0xa
jb 0x3060dc
push 0x3bd984
call dword [0x3920cc]
mov esi, eax
test esi, esi
jne 0x30614e
call dword [0x3920a8]
push eax
lea eax, [esp + 0x40]
push eax
call fcn.0032a8dc
pop ecx
pop ecx
and dword [esp + 0xb4], esi
push eax
call fcn.00306295
push eax
lea eax, [esp + 0x28]
push eax
call fcn.00306ae6
add esp, 0xc
lea esi, [esp + 8]
mov byte [esp + 0xb4], 1
call fcn.00305bce
push 0x3aec28
mov eax, esi
push eax
call fcn.0036d875
call fcn.003062fb
push eax
push esi
call dword [0x3920c8]
test eax, eax
jne 0x3061ab
call dword [0x3920a8]
push eax
lea eax, [esp + 0x24]
push eax
call fcn.0032a8dc
pop ecx
pop ecx
push eax
mov dword [esp + 0xb8], 2
call fcn.0030636d
push eax
lea eax, [esp + 0x44]
push eax
call fcn.00306ae6
add esp, 0xc
lea esi, [esp + 8]
mov byte [esp + 0xb4], 3
call fcn.00305bce
push 0x3aec28
mov eax, esi
jmp 0x306148
lea ecx, [esp + 4]
push ecx
push 0x18
lea ecx, [esp + 0x60]
push ecx
push 0
push dword [ebp + 8]
call eax
test eax, eax
jne 0x306233
cmp dword [esp + 4], 0x18
jne 0x306233
push dword [esp + 0x6c]
push eax
push 0x410
call dword [0x3920c4]
test eax, eax
jne 0x306282
call dword [0x3920a8]
push eax
lea eax, [esp + 0x74]
push eax
call fcn.0032a8dc
pop ecx
pop ecx
push eax
mov dword [esp + 0xb8], 6
call fcn.003064ad
push eax
lea eax, [esp + 0x94]
push eax
call fcn.00306ae6
add esp, 0xc
lea esi, [esp + 0x14]
mov byte [esp + 0xb4], 7
call fcn.00305bce
push 0x3aec28
mov eax, esi
jmp 0x306148
call dword [0x3920a8]
push eax
lea eax, [esp + 0x24]
push eax
call fcn.0032a8dc
pop ecx
pop ecx
push eax
mov dword [esp + 0xb8], 4
call fcn.00306420
push eax
lea eax, [esp + 0x44]
push eax
call fcn.00306ae6
add esp, 0xc
lea esi, [esp + 8]
mov byte [esp + 0xb4], 5
call fcn.00305bce
push 0x3aec28
mov eax, esi
jmp 0x306148
mov ecx, dword [esp + 0xac]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret

Function at 0x306295
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2cec], 1
jne 0x3062de
or dword [0x3c2cec], 1
mov dword [0x3bd790], 0x7277795a
mov dword [0x3bd794], 0x64747f5a
mov dword [0x3bd798], 0x366f6477
mov dword [0x3bd79c], 0x7a7f7770
mov dword [0x3bd7a0], 0x362c7273
mov byte [0x3bd7a4], 0x16
xor eax, eax
mov cl, byte [eax + 0x3bd790]
xor cl, 0x16
mov byte [eax + 0x3bd990], cl
inc eax
cmp eax, 0x15
jb 0x3062e0
mov eax, 0x3bd990
ret