joyce8/EMBER2024-capa huggingface dataset:
Function at 0x12f4903
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x16c4
call fcn.01369a80
push ebx
push esi
push edi
call dword [0x1386094]
test byte [0x13b83f0], 1
mov dword [ebp - 4], eax
jne 0x12f494a
or dword [0x13b83f0], 1
mov dword [0x13b20fc], 0x7f747627
mov dword [0x13b2100], 0x247e776e
mov dword [0x13b2104], 0x1b252424
xor edi, edi
xor eax, eax
mov cl, byte [eax + 0x13b20fc]
xor cl, 0x1b
mov byte [eax + 0x13b27a8], cl
inc eax
cmp eax, 0xc
jb 0x12f494e
test byte [0x13b83ec], 1
mov dword [ebp - 8], 0x13b27a8
jne 0x12f4998
or dword [0x13b83ec], 1
mov dword [0x13b2108], 0x76626827
mov dword [0x13b210c], 0x24777479
mov dword [0x13b2110], 0x1b252424
xor eax, eax
mov cl, byte [eax + 0x13b2108]
xor cl, 0x1b
mov byte [eax + 0x13b27b4], cl
inc eax
cmp eax, 0xc
jb 0x12f499a
mov esi, 0x688
push esi
lea eax, [ebp - 0x6c0]
push edi
push eax
mov dword [ebp - 0x1c], 0x13b27b4
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], edi
call fcn.0135b890
mov eax, dword [ebp + 8]
cdq
add esp, 0xc
mov dword [ebp - 0x6c0], esi
mov esi, eax
lea eax, [ebp - 0x6c0]
push eax
mov ebx, edx
push ebx
push esi
push dword [ebp - 4]
call dword [0x13863bc]
test eax, eax
je 0x12f49ff
lea eax, [ebp - 0x69c]
mov dword [ebp - 8], eax
push 0xffa
lea eax, [ebp - 0x16c0]
push edi
push eax
call fcn.0135b890
add esp, 0xc
lea eax, [ebp - 0x16c0]
push eax
lea eax, [ebp - 0x18]
push eax
push ebx
push esi
push dword [ebp - 4]
mov dword [ebp - 0x16c0], 0x58
mov dword [ebp - 0x1670], 0x7d0
call dword [0x13863c4]
lea ecx, [ebp - 0x166c]
test eax, eax
jne 0x12f4a4b
mov ecx, dword [ebp - 0x1c]
test byte [0x13b83e8], 1
jne 0x12f4a82
or dword [0x13b83e8], 1
mov dword [0x13b2114], 0x3e3b6b3e
mov dword [0x13b2118], 0x683e3a68
mov dword [0x13b211c], 0x3e632b30
mov word [0x13b2120], 0x1b63
xor eax, eax
mov dl, byte [eax + 0x13b2114]
xor dl, 0x1b
mov byte [eax + 0x13b27c0], dl
inc eax
cmp eax, 0xe
jb 0x12f4a84
push dword [ebp - 0x14]
push dword [ebp - 0x18]
push ecx
push dword [ebp - 8]
push dword [ebp + 8]
push 0x13b27c0
push dword [ebp + 0xc]
call fcn.0135716e
add esp, 0x1c
push 6
pop ecx
mov dword [ebp - 0xc], edi
xor eax, eax
lea edi, [ebp - 0x38]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0xc]
push eax
push ebx
push esi
push dword [ebp - 4]
mov dword [ebp - 0x38], 0x18
call dword [0x13863c8]
test eax, eax
je 0x12f4afb
push dword [ebp - 0xc]
push dword [ebp - 0x30]
push dword [ebp - 0x2c]
call fcn.012f4b48
push eax
push dword [ebp + 0xc]
call fcn.0135716e
add esp, 0x14
test byte [0x13b83e0], 1
jne 0x12f4b1b
or dword [0x13b83e0], 1
mov word [0x13b2134], 0x1116
mov byte [0x13b2136], 0x1b
xor eax, eax
mov cl, byte [eax + 0x13b2134]
xor cl, 0x1b
mov byte [eax + 0x13b27e0], cl
inc eax
cmp eax, 3
jb 0x12f4b1d
push dword [ebp + 0xc]
push 0x13b27e0
call fcn.01356de1
pop ecx
pop ecx
pop edi
pop esi
pop ebx
leave
ret 8
Function at 0x12f4b48
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b83e4], 1
jne 0x12f4b80
or dword [0x13b83e4], 1
mov dword [0x13b2124], 0x683e333b
mov dword [0x13b2128], 0x3b7f3e21
mov dword [0x13b212c], 0x632b3b30
mov dword [0x13b2130], 0x1b32633e
xor eax, eax
mov cl, byte [eax + 0x13b2124]
xor cl, 0x1b
mov byte [eax + 0x13b27d0], cl
inc eax
cmp eax, 0x10
jb 0x12f4b82
mov eax, 0x13b27d0
ret

Function at 0x12f5e0f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b83d4], 1
jne 0x12f5e64
or dword [0x13b83d4], 1
mov dword [0x13b2804], 0x5b4d5e57
mov dword [0x13b2808], 0x5a4d5e48
mov dword [0x13b280c], 0x4f5c5e43
mov dword [0x13b2810], 0x4c5b4356
mov dword [0x13b2814], 0x49434b5b
mov dword [0x13b2818], 0x4047505d
mov word [0x13b281c], 0x1f40
xor eax, eax
mov cl, byte [eax + 0x13b2804]
xor cl, 0x1f
mov byte [eax + 0x13b2a04], cl
inc eax
cmp eax, 0x1a
jb 0x12f5e66
mov eax, 0x13b2a04
ret

Function at 0x12f5f75
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b83d0], 1
jne 0x12f5f9f
or dword [0x13b83d0], 1
mov dword [0x13b2820], 0x7e485249
mov word [0x13b2824], 0x7a6d
mov byte [0x13b2826], 0x1f
xor eax, eax
mov cl, byte [eax + 0x13b2820]
xor cl, 0x1f
mov byte [eax + 0x13b2a20], cl
inc eax
cmp eax, 7
jb 0x12f5fa1
mov eax, 0x13b2a20
ret

Function at 0x12f5fbc
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b83cc], 1
jne 0x12f5fe9
or dword [0x13b83cc], 1
mov dword [0x13b2828], 0x6b6d7649
mov dword [0x13b282c], 0x4f737e6a
mov word [0x13b2830], 0x1f5c
xor eax, eax
mov cl, byte [eax + 0x13b2828]
xor cl, 0x1f
mov byte [eax + 0x13b2a28], cl
inc eax
cmp eax, 0xa
jb 0x12f5feb
mov eax, 0x13b2a28
ret

Function at 0x12f6006
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b83c8], 1
jne 0x12f603a
or dword [0x13b83c8], 1
mov dword [0x13b2834], 0x6b6d7649
mov dword [0x13b2838], 0x5d737e6a
mov word [0x13b283c], 0x6770
mov byte [0x13b283e], 0x1f
xor eax, eax
mov cl, byte [eax + 0x13b2834]
xor cl, 0x1f
mov byte [eax + 0x13b2a34], cl
inc eax
cmp eax, 0xb
jb 0x12f603c
mov eax, 0x13b2a34
ret

Function at 0x12f6057
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b83c4], 1
jne 0x12f607b
or dword [0x13b83c4], 1
mov dword [0x13b2840], 0x7a717a58
mov dword [0x13b2844], 0x1f7c766d
xor eax, eax
mov cl, byte [eax + 0x13b2840]
xor cl, 0x1f
mov byte [eax + 0x13b2a40], cl
inc eax
cmp eax, 8
jb 0x12f607d
mov eax, 0x13b2a40
ret
Function at 0x12f6098
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x137e0f1
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xa8
and dword [esp], 0
test byte [0x13b83c0], 1
push esi
jne 0x12f60eb
or dword [0x13b83c0], 1
mov dword [0x13b2848], 0x737b6b71
mov dword [0x13b284c], 0x737b3173
mov word [0x13b2850], 0x1f73
xor eax, eax
mov cl, byte [eax + 0x13b2848]
xor cl, 0x1f
mov byte [eax + 0x13b2a48], cl
inc eax
cmp eax, 0xa
jb 0x12f60ed
push 0x13b2a48
call dword [0x13860cc]
mov esi, eax
test esi, esi
jne 0x12f615f
call dword [0x13860a8]
push eax
lea eax, [esp + 0x40]
push eax
call fcn.0131dc13
pop ecx
pop ecx
and dword [esp + 0xb4], esi
push eax
call fcn.012f62a6
push eax
lea eax, [esp + 0x28]
push eax
call fcn.012f6af7
add esp, 0xc
lea esi, [esp + 8]
mov byte [esp + 0xb4], 1
call fcn.012f5be0
push 0x13a2d18
mov eax, esi
push eax
call fcn.01360895
call fcn.012f630c
push eax
push esi
call dword [0x13860c8]
test eax, eax
jne 0x12f61bc
call dword [0x13860a8]
push eax
lea eax, [esp + 0x24]
push eax
call fcn.0131dc13
pop ecx
pop ecx
push eax
mov dword [esp + 0xb8], 2
call fcn.012f637e
push eax
lea eax, [esp + 0x44]
push eax
call fcn.012f6af7
add esp, 0xc
lea esi, [esp + 8]
mov byte [esp + 0xb4], 3
call fcn.012f5be0
push 0x13a2d18
mov eax, esi
jmp 0x12f6159
lea ecx, [esp + 4]
push ecx
push 0x18
lea ecx, [esp + 0x60]
push ecx
push 0
push dword [ebp + 8]
call eax
test eax, eax
jne 0x12f6244
cmp dword [esp + 4], 0x18
jne 0x12f6244
push dword [esp + 0x6c]
push eax
push 0x410
call dword [0x13860c4]
test eax, eax
jne 0x12f6293
call dword [0x13860a8]
push eax
lea eax, [esp + 0x74]
push eax
call fcn.0131dc13
pop ecx
pop ecx
push eax
mov dword [esp + 0xb8], 6
call fcn.012f64be
push eax
lea eax, [esp + 0x94]
push eax
call fcn.012f6af7
add esp, 0xc
lea esi, [esp + 0x14]
mov byte [esp + 0xb4], 7
call fcn.012f5be0
push 0x13a2d18
mov eax, esi
jmp 0x12f6159
call dword [0x13860a8]
push eax
lea eax, [esp + 0x24]
push eax
call fcn.0131dc13
pop ecx
pop ecx
push eax
mov dword [esp + 0xb8], 4
call fcn.012f6431
push eax
lea eax, [esp + 0x44]
push eax
call fcn.012f6af7
add esp, 0xc
lea esi, [esp + 8]
mov byte [esp + 0xb4], 5
call fcn.012f5be0
push 0x13a2d18
mov eax, esi
jmp 0x12f6159
mov ecx, dword [esp + 0xac]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret

Function at 0x12f62a6
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b83bc], 1
jne 0x12f62ef
or dword [0x13b83bc], 1
mov dword [0x13b2854], 0x7b7e7053
mov dword [0x13b2858], 0x6d7d7653
mov dword [0x13b285c], 0x3f666d7e
mov dword [0x13b2860], 0x73767e79
mov dword [0x13b2864], 0x3f257b7a
mov byte [0x13b2868], 0x1f
xor eax, eax
mov cl, byte [eax + 0x13b2854]
xor cl, 0x1f
mov byte [eax + 0x13b2a54], cl
inc eax
cmp eax, 0x15
jb 0x12f62f1
mov eax, 0x13b2a54
ret
Function at 0x12f630c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b83b8], 1
jne 0x12f6361
or dword [0x13b83b8], 1
mov dword [0x13b286c], 0x6a4e6b51
mov dword [0x13b2870], 0x56666d7a
mov dword [0x13b2874], 0x6d707971
mov dword [0x13b2878], 0x766b7e72
mov dword [0x13b287c], 0x6d4f7170
mov dword [0x13b2880], 0x6c7a7c70
mov word [0x13b2884], 0x1f6c
xor eax, eax
mov cl, byte [eax + 0x13b286c]
xor cl, 0x1f
mov byte [eax + 0x13b2a6c], cl
inc eax
cmp eax, 0x1a
jb 0x12f6363
mov eax, 0x13b2a6c
ret

Function at 0x12f637e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b83b4], 1
jne 0x12f6414
or dword [0x13b83b4], 1
mov dword [0x13b2888], 0x4f6b7a58
mov dword [0x13b288c], 0x5e7c706d
mov dword [0x13b2890], 0x7a6d7b7b
mov dword [0x13b2894], 0x793f6c6c
mov dword [0x13b2898], 0x7a73767e
mov dword [0x13b289c], 0x51373f7b
mov dword [0x13b28a0], 0x7a6a4e6b
mov dword [0x13b28a4], 0x7156666d
mov dword [0x13b28a8], 0x726d7079
mov dword [0x13b28ac], 0x70766b7e
mov dword [0x13b28b0], 0x706d4f71
mov dword [0x13b28b4], 0x6c6c7a7c
mov dword [0x13b28b8], 0x1f3f2536
xor eax, eax
mov cl, byte [eax + 0x13b2888]
xor cl, 0x1f
mov byte [eax + 0x13b2a88], cl
inc eax
cmp eax, 0x34
jb 0x12f6416
mov eax, 0x13b2a88
ret

Function at 0x12f6431
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b83b0], 1
jne 0x12f64a1
or dword [0x13b83b0], 1
mov dword [0x13b28bc], 0x6a4e6b51
mov dword [0x13b28c0], 0x56666d7a
mov dword [0x13b28c4], 0x6d707971
mov dword [0x13b28c8], 0x766b7e72
mov dword [0x13b28cc], 0x6d4f7170
mov dword [0x13b28d0], 0x6c7a7c70
mov dword [0x13b28d4], 0x7e793f6c
mov dword [0x13b28d8], 0x7b7a7376
mov word [0x13b28dc], 0x3f25
mov byte [0x13b28de], 0x1f
xor eax, eax
mov cl, byte [eax + 0x13b28bc]
xor cl, 0x1f
mov byte [eax + 0x13b2abc], cl
inc eax
cmp eax, 0x23
jb 0x12f64a3
mov eax, 0x13b2abc
ret

Function at 0x12f64be
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b83ac], 1
jne 0x12f6507
or dword [0x13b83ac], 1
mov dword [0x13b28e0], 0x717a6f50
mov dword [0x13b28e4], 0x7c706d4f
mov dword [0x13b28e8], 0x3f6c6c7a
mov dword [0x13b28ec], 0x73767e79
mov dword [0x13b28f0], 0x3f257b7a
mov byte [0x13b28f4], 0x1f
xor eax, eax
mov cl, byte [eax + 0x13b28e0]
xor cl, 0x1f
mov byte [eax + 0x13b2ae0], cl
inc eax
cmp eax, 0x15
jb 0x12f6509
mov eax, 0x13b2ae0
ret
Function at 0x12f6524
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x137e09e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x254
and dword [esp + 0xc], 0
test byte [0x13b83a8], 1
push esi
push edi
jne 0x12f6581
or dword [0x13b83a8], 1
mov dword [0x13b28f8], 0x716d7a74
mov dword [0x13b28fc], 0x2d2c737a
mov dword [0x13b2900], 0x73737b31
mov byte [0x13b2904], 0x1f
xor eax, eax
mov cl, byte [eax + 0x13b28f8]
xor cl, 0x1f
mov byte [eax + 0x13b2af8], cl
inc eax
cmp eax, 0xd
jb 0x12f6583
mov edi, dword [reloc.KERNEL32.dll_LoadLibraryA]
push 0x13b2af8
call edi
mov esi, eax
test esi, esi
jne 0x12f65f7
call dword [0x13860a8]
push eax
lea eax, [esp + 0x1c]
push eax
call fcn.0131dc13
pop ecx
pop ecx
and dword [esp + 0x264], esi
push eax
call fcn.012f6759
push eax
lea eax, [esp + 0x3c]
push eax
call fcn.012f6af7
add esp, 0xc
lea esi, [esp + 8]
mov byte [esp + 0x264], 1
call fcn.012f5be0
push 0x13a2d18
mov eax, esi
push eax
call fcn.01360895
call fcn.012f67d6
push eax
push esi
mov esi, dword [reloc.KERNEL32.dll_GetProcAddress]
call esi
test eax, eax
jne 0x12f66c4
call fcn.012f6849
push eax
call edi
mov edi, eax
test edi, edi
jne 0x12f6668
call dword [0x13860a8]
push eax
lea eax, [esp + 0x38]
push eax
call fcn.0131dc13
pop ecx
pop ecx
push eax
mov dword [esp + 0x268], 2
call fcn.012f6893
push eax
lea eax, [esp + 0x20]
push eax
call fcn.012f6af7
add esp, 0xc
lea esi, [esp + 8]
mov byte [esp + 0x264], 3
call fcn.012f5be0
push 0x13a2d18
mov eax, esi
jmp 0x12f65f1
call fcn.012f690d
push eax
push edi
call esi
test eax, eax
jne 0x12f66c4
call dword [0x13860a8]
push eax
lea eax, [esp + 0x38]
push eax
call fcn.0131dc13
pop ecx
pop ecx
push eax
mov dword [esp + 0x268], 4
call fcn.012f697d
push eax
lea eax, [esp + 0x20]
push eax
call fcn.012f6af7
add esp, 0xc
lea esi, [esp + 8]
mov byte [esp + 0x264], 5
call fcn.012f5be0
push 0x13a2d18
mov eax, esi
jmp 0x12f65f1
push 0x208
lea ecx, [esp + 0x54]
push ecx
push dword [ebp + 0xc]
call eax
test eax, eax
jne 0x12f6726
call dword [0x13860a8]
push eax
lea eax, [esp + 0x38]
push eax
call fcn.0131dc13
pop ecx
pop ecx
push eax
mov dword [esp + 0x268], 6
call fcn.012f6a36
push eax
lea eax, [esp + 0x20]
push eax
call fcn.012f6af7
add esp, 0xc
lea esi, [esp + 8]
mov byte [esp + 0x264], 7
call fcn.012f5be0
push 0x13a2d18
mov eax, esi
jmp 0x12f65f1
mov esi, dword [ebp + 8]
and dword [esi + 0x10], 0
lea eax, [esp + 0x50]
mov dword [esi + 0x14], 0xf
push eax
mov ecx, esi
mov byte [esi], 0
call fcn.012f4c68
mov ecx, dword [esp + 0x25c]
pop edi
mov eax, esi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x12f6759
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b83a4], 1
jne 0x12f67b9
or dword [0x13b83a4], 1
mov dword [0x13b2908], 0x7b7e7053
mov dword [0x13b290c], 0x6d7d7653
mov dword [0x13b2910], 0x3f666d7e
mov dword [0x13b2914], 0x73767e79
mov dword [0x13b2918], 0x373f7b7a
mov dword [0x13b291c], 0x716d7a74
mov dword [0x13b2920], 0x2d2c737a
mov dword [0x13b2924], 0x1f3f2536
xor eax, eax
mov cl, byte [eax + 0x13b2908]
xor cl, 0x1f
mov byte [eax + 0x13b2b08], cl
inc eax
cmp eax, 0x20
jb 0x12f67bb
mov eax, 0x13b2b08
ret

Function at 0x12f67d6
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b83a0], 1
jne 0x12f682c
or dword [0x13b83a0], 1
mov dword [0x13b2928], 0x582d2c54
mov dword [0x13b292c], 0x6d4f6b7a
mov dword [0x13b2930], 0x6c7a7c70
mov dword [0x13b2934], 0x7e72566c
mov dword [0x13b2938], 0x76597a78
mov dword [0x13b293c], 0x7e517a73
mov dword [0x13b2940], 0x1f5e7a72
xor eax, eax
mov cl, byte [eax + 0x13b2928]
xor cl, 0x1f
mov byte [eax + 0x13b2b28], cl
inc eax
cmp eax, 0x1c
jb 0x12f682e
mov eax, 0x13b2b28
ret

Function at 0x12f6849
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b839c], 1
jne 0x12f6876
or dword [0x13b839c], 1
mov dword [0x13b2944], 0x6f7e6c6f
mov dword [0x13b2948], 0x737b3176
mov word [0x13b294c], 0x1f73
xor eax, eax
mov cl, byte [eax + 0x13b2944]
xor cl, 0x1f
mov byte [eax + 0x13b2b44], cl
inc eax
cmp eax, 0xa
jb 0x12f6878
mov eax, 0x13b2b44
ret

Function at 0x12f6893
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b8398], 1
jne 0x12f68f0
or dword [0x13b8398], 1
mov dword [0x13b2950], 0x7b7e7053
mov dword [0x13b2954], 0x6d7d7653
mov dword [0x13b2958], 0x3f666d7e
mov dword [0x13b295c], 0x73767e79
mov dword [0x13b2960], 0x373f7b7a
mov dword [0x13b2964], 0x6f7e6c6f
mov dword [0x13b2968], 0x3f253676
mov byte [0x13b296c], 0x1f
xor eax, eax
mov cl, byte [eax + 0x13b2950]
xor cl, 0x1f
mov byte [eax + 0x13b2b50], cl
inc eax
cmp eax, 0x1d
jb 0x12f68f2
mov eax, 0x13b2b50
ret

Function at 0x12f690d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b8394], 1
jne 0x12f6960
or dword [0x13b8394], 1
mov dword [0x13b2970], 0x4f6b7a58
mov dword [0x13b2974], 0x7a7c706d
mov dword [0x13b2978], 0x72566c6c
mov dword [0x13b297c], 0x597a787e
mov dword [0x13b2980], 0x517a7376
mov dword [0x13b2984], 0x5e7a727e
mov byte [0x13b2988], 0x1f
xor eax, eax
mov cl, byte [eax + 0x13b2970]
xor cl, 0x1f
mov byte [eax + 0x13b2b70], cl
inc eax
cmp eax, 0x19
jb 0x12f6962
mov eax, 0x13b2b70
ret
Function at 0x12f697d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b8390], 1
jne 0x12f6a19
or dword [0x13b8390], 1
mov dword [0x13b298c], 0x4f6b7a58
mov dword [0x13b2990], 0x5e7c706d
mov dword [0x13b2994], 0x7a6d7b7b
mov dword [0x13b2998], 0x793f6c6c
mov dword [0x13b299c], 0x7a73767e
mov dword [0x13b29a0], 0x58373f7b
mov dword [0x13b29a4], 0x6d4f6b7a
mov dword [0x13b29a8], 0x6c7a7c70
mov dword [0x13b29ac], 0x7e72566c
mov dword [0x13b29b0], 0x76597a78
mov dword [0x13b29b4], 0x7e517a73
mov dword [0x13b29b8], 0x365e7a72
mov word [0x13b29bc], 0x3f25
mov byte [0x13b29be], 0x1f
xor eax, eax
mov cl, byte [eax + 0x13b298c]
xor cl, 0x1f
mov byte [eax + 0x13b2b8c], cl
inc eax
cmp eax, 0x33
jb 0x12f6a1b
mov eax, 0x13b2b8c
ret

Function at 0x12f6a36
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b838c], 1
jne 0x12f6a9d
or dword [0x13b838c], 1
mov dword [0x13b29c0], 0x4f6b7a58
mov dword [0x13b29c4], 0x7a7c706d
mov dword [0x13b29c8], 0x72566c6c
mov dword [0x13b29cc], 0x597a787e
mov dword [0x13b29d0], 0x717a7376
mov dword [0x13b29d4], 0x3f7a727e
mov dword [0x13b29d8], 0x73767e79
mov dword [0x13b29dc], 0x3f257b7a
mov byte [0x13b29e0], 0x1f
xor eax, eax
mov cl, byte [eax + 0x13b29c0]
xor cl, 0x1f
mov byte [eax + 0x13b2bc0], cl
inc eax
cmp eax, 0x21
jb 0x12f6a9f
mov eax, 0x13b2bc0
ret

Function at 0x12f766b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b8388], 1
jne 0x12f7851
or dword [0x13b8388], 1
mov dword [0x13b2be8], 0x520f4e48
mov dword [0x13b2bec], 0x544e4555
mov dword [0x13b2bf0], 0x44521b55
mov dword [0x13b2bf4], 0x54435755
mov dword [0x13b2bf8], 0x4f060947
mov dword [0x13b2bfc], 0x2b08064e
mov dword [0x13b2c00], 0x4a424051
mov dword [0x13b2c04], 0xf444640
mov dword [0x13b2c08], 0x49554051
mov dword [0x13b2c0c], 0x6011c01
mov dword [0x13b2c10], 0x44532b06
mov dword [0x13b2c14], 0x53485450
mov dword [0x13b2c18], 0x52060944
mov dword [0x13b2c1c], 0x42485355
mov dword [0x13b2c20], 0x2b080655
mov dword [0x13b2c24], 0x40424e4d
mov dword [0x13b2c28], 0xd52014d
mov dword [0x13b2c2c], 0x1c015301
mov dword [0x13b2c30], 0x42515901
mov dword [0x13b2c34], 0x94d4d40
mov dword [0x13b2c38], 0x424f5447
mov dword [0x13b2c3c], 0x4f4e4855
mov dword [0x13b2c40], 0x53010809
mov dword [0x13b2c44], 0x53545544
mov dword [0x13b2c48], 0x4453014f
mov dword [0x13b2c4c], 0x53485450
mov dword [0x13b2c50], 0x4060944
mov dword [0x13b2c54], 0xf08066c
mov dword [0x13b2c58], 0x4f48404c
mov dword [0x13b2c5c], 0x407e7e09
mov dword [0x13b2c60], 0x8524653
mov dword [0x13b2c64], 0x454f4401
mov dword [0x13b2c68], 0x4445010d
mov dword [0x13b2c6c], 0xf465443
mov dword [0x13b2c70], 0x42405355
mov dword [0x13b2c74], 0x42404344
mov dword [0x13b2c78], 0x482b084a
mov dword [0x13b2c7c], 0x4e4f0147
mov dword [0x13b2c80], 0x1520155
mov dword [0x13b2c84], 0x4f444955
mov dword [0x13b2c88], 0x53534401
mov dword [0x13b2c8c], 0x5309534e
mov dword [0x13b2c90], 0x4f440108
mov dword [0x13b2c94], 0x44532b45
mov dword [0x13b2c98], 0x4f535455
mov word [0x13b2c9c], 0x5301
mov byte [0x13b2c9e], 0x21
xor eax, eax
mov cl, byte [eax + 0x13b2be8]
xor cl, 0x21
mov byte [eax + 0x13b3318], cl
inc eax
cmp eax, 0xb7
jb 0x12f7853
mov eax, 0x13b3318
ret
Function at 0x12f7870
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b8384], 1
jne 0x12f7af6
or dword [0x13b8384], 1
mov dword [0x13b2ca0], 0x520f4e48
mov dword [0x13b2ca4], 0x544e4555
mov dword [0x13b2ca8], 0x44521b55
mov dword [0x13b2cac], 0x54435755
mov dword [0x13b2cb0], 0x4f060947
mov dword [0x13b2cb4], 0x2b08064e
mov dword [0x13b2cb8], 0x4a424051
mov dword [0x13b2cbc], 0xf444640
mov dword [0x13b2cc0], 0x49554051
mov dword [0x13b2cc4], 0x2b06061c
mov dword [0x13b2cc8], 0x54504453
mov dword [0x13b2ccc], 0x9445348
mov dword [0x13b2cd0], 0x53555206
mov dword [0x13b2cd4], 0x6554248
mov dword [0x13b2cd8], 0x4e4d2b08
mov dword [0x13b2cdc], 0x14d4042
mov dword [0x13b2ce0], 0x1c014d4c
mov dword [0x13b2ce4], 0x50445301
mov dword [0x13b2ce8], 0x44534854
mov dword [0x13b2cec], 0x4d4c0609
mov dword [0x13b2cf0], 0x4d2b0806
mov dword [0x13b2cf4], 0x4d40424e
mov dword [0x13b2cf8], 0x530d5201
mov dword [0x13b2cfc], 0x1c01440d
mov dword [0x13b2d00], 0x42515901
mov dword [0x13b2d04], 0x94d4d40
mov dword [0x13b2d08], 0x424f5447
mov dword [0x13b2d0c], 0x4f4e4855
mov dword [0x13b2d10], 0x53010809
mov dword [0x13b2d14], 0x53545544
mov dword [0x13b2d18], 0x4453014f
mov dword [0x13b2d1c], 0x53485450
mov dword [0x13b2d20], 0x4060944
mov dword [0x13b2d24], 0xf08066c
mov dword [0x13b2d28], 0x4096704
mov dword [0x13b2d2c], 0x44010860
mov dword [0x13b2d30], 0x10d454f
mov dword [0x13b2d34], 0x54434445
mov dword [0x13b2d38], 0x53550f46
mov dword [0x13b2d3c], 0x43444240
mov dword [0x13b2d40], 0x84a4240
mov dword [0x13b2d44], 0x147482b
mov dword [0x13b2d48], 0x1554e4f
mov dword [0x13b2d4c], 0x49550152
mov dword [0x13b2d50], 0x53014f44
mov dword [0x13b2d54], 0x53545544
mov dword [0x13b2d58], 0x484f014f
mov dword [0x13b2d5c], 0x53010d4d
mov dword [0x13b2d60], 0x454f4401
mov dword [0x13b2d64], 0x147482b
mov dword [0x13b2d68], 0x1c5f0153
mov dword [0x13b2d6c], 0x4d484f01
mov dword [0x13b2d70], 0x44495501
mov dword [0x13b2d74], 0x153014f
mov dword [0x13b2d78], 0x4d4c011c
mov dword [0x13b2d7c], 0x5552550f
mov dword [0x13b2d80], 0x464f4853
mov dword [0x13b2d84], 0x1085309
mov dword [0x13b2d88], 0x2b454f44
mov dword [0x13b2d8c], 0x54554453
mov dword [0x13b2d90], 0x53014f53
mov word [0x13b2d94], 0x440d
mov byte [0x13b2d96], 0x21
xor eax, eax
mov cl, byte [eax + 0x13b2ca0]
xor cl, 0x21
mov byte [eax + 0x13b33d0], cl
inc eax
cmp eax, 0xf7
jb 0x12f7af8
mov eax, 0x13b33d0
ret
Function at 0x12f7b15
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
test byte [0x13b8344], 1
jne 0x12f7b3c
or dword [0x13b8344], 1
mov dword [0x13b2e8c], 0x4a424051
mov dword [0x13b2e90], 0x21444640
xor eax, eax
mov cl, byte [eax + 0x13b2e8c]
xor cl, 0x21
mov byte [eax + 0x13b35bc], cl
inc eax
cmp eax, 8
jb 0x12f7b3e
push 0x13b35bc
push dword [ebp + 8]
call fcn.01343bc6
test byte [0x13b8340], 1
pop ecx
pop ecx
jne 0x12f7b86
or dword [0x13b8340], 1
mov dword [0x13b2e94], 0x4d445351
mov dword [0x13b2e98], 0x2145404e
xor eax, eax
mov cl, byte [eax + 0x13b2e94]
xor cl, 0x21
mov byte [eax + 0x13b35c4], cl
inc eax
cmp eax, 8
jb 0x12f7b88
push esi
push 0x13b35c4
push 0xffffffffffffffff
push dword [ebp + 8]
call fcn.01343c3a
add esp, 0xc
cmp dword [0x13adc20], 0
mov esi, 0x13adc20
je 0x12f7be8
push edi
mov edi, esi
push 0
push dword [esi + 4]
push dword [ebp + 8]
call fcn.01343ae6
push dword [esi]
push 0xfffffffffffffffe
push dword [ebp + 8]
call fcn.01343e67
add edi, 8
add esp, 0x18
cmp dword [edi], 0
mov esi, edi
jne 0x12f7bc1
pop edi
push 0xfffffffffffffffd
push dword [ebp + 8]
call fcn.0134333b
pop ecx
pop ecx
pop esi
pop ebp
ret