joyce8/EMBER2024-capa huggingface dataset:
Function at 0x12f7e62
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x137db62
call fcn.0137cc58
sub esp, 0x64
test byte [0x13b832c], 1
jne 0x12f7e8f
or dword [0x13b832c], 1
mov word [0x13b2ec4], 0x6c04
mov byte [0x13b2ec6], 0x21
push ebx
push esi
xor ebx, ebx
push edi
xor eax, eax
mov cl, byte [eax + 0x13b2ec4]
xor cl, 0x21
mov byte [eax + 0x13b35f4], cl
inc eax
cmp eax, 3
jb 0x12f7e96
mov esi, 0x13b35f4
mov eax, esi
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x44], ebx
mov byte [ebp - 0x54], bl
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x12f7ec2
sub eax, edi
push eax
push esi
lea ecx, [ebp - 0x54]
call fcn.012f4e4d
push dword [ebp + 0x10]
lea eax, [ebp - 0x54]
push eax
push dword [ebp + 0xc]
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 4], ebx
call fcn.012fe915
add esp, 0x10
push ebx
push 1
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 2
call fcn.012f4c89
cmp dword [ebp - 0x5c], 0x10
mov eax, dword [ebp - 0x70]
jae 0x12f7f09
lea eax, [ebp - 0x70]
mov esi, dword [ebp + 8]
push eax
push esi
call fcn.01342739
pop ecx
pop ecx
cmp eax, ebx
je 0x12f7f5a
cmp eax, 3
jne 0x12f7f47
call fcn.012f8061
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x1c]
call fcn.01356985
mov dword [ebp - 0x1c], vtable.std::runtime_error.0
push 0x13a2d18
lea eax, [ebp - 0x1c]
push eax
call fcn.01360895
cmp eax, 4
jne 0x12f7f53
call fcn.012f8114
jmp 0x12f7f23
call fcn.012f81c7
jmp 0x12f7f23
push ebx
push ebx
push ebx
push 1
push ebx
push esi
call fcn.0134416f
mov edi, eax
add esp, 0x18
cmp edi, ebx
je 0x12f8011
push ebx
call fcn.012f824b
push eax
push 0xffffffffffffffff
push esi
call fcn.01342ed0
add esp, 0x10
push eax
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x24], 0xf
mov dword [ebp - 0x28], ebx
mov byte [ebp - 0x38], bl
call fcn.012f4c68
mov byte [ebp - 4], 3
cmp edi, 2
jne 0x12f7fc9
call fcn.012f8292
push eax
lea eax, [ebp - 0x54]
push eax
lea edi, [ebp - 0x38]
call fcn.012fe986
pop ecx
pop ecx
mov byte [ebp - 4], 4
lea esi, [ebp - 0x1c]
call fcn.012f5be0
jmp 0x12f7f39
cmp edi, 4
jne 0x12f7fe8
call fcn.012f82f1
push eax
lea eax, [ebp - 0x54]
push eax
lea edi, [ebp - 0x38]
call fcn.012fe986
pop ecx
pop ecx
mov byte [ebp - 4], 5
jmp 0x12f7fbc
cmp edi, 6
jne 0x12f8007
call fcn.012f8356
push eax
lea eax, [ebp - 0x54]
push eax
lea edi, [ebp - 0x38]
call fcn.012fe986
pop ecx
pop ecx
mov byte [ebp - 4], 6
jmp 0x12f7fbc
call fcn.012f83da
jmp 0x12f7f23
or edi, 0xffffffff
push edi
push esi
mov dword [ebp - 0x10], edi
call fcn.0134352b
pop ecx
pop ecx
test eax, eax
je 0x12f8032
push ebx
push edi
push esi
call fcn.013436ef
add esp, 0xc
mov dword [ebp - 0x10], eax
push esi
call fcn.01343325
sub edi, eax
push edi
push esi
call fcn.0134333b
add esp, 0xc
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.012f4c89
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x10]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret
Function at 0x12f8061
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b8328], 1
jne 0x12f80f7
or dword [0x13b8328], 1
mov dword [0x13b2ec8], 0x4d484067
mov dword [0x13b2ecc], 0x55014544
mov dword [0x13b2ed0], 0x5744014e
mov dword [0x13b2ed4], 0x40544d40
mov dword [0x13b2ed8], 0x43014455
mov dword [0x13b2edc], 0x52554e4e
mov dword [0x13b2ee0], 0x51405355
mov dword [0x13b2ee4], 0x40534701
mov dword [0x13b2ee8], 0x4f444c46
mov dword [0x13b2eec], 0x52010d55
mov dword [0x13b2ef0], 0x40554f58
mov dword [0x13b2ef4], 0x53440159
mov dword [0x13b2ef8], 0x21534e53
xor eax, eax
mov cl, byte [eax + 0x13b2ec8]
xor cl, 0x21
mov byte [eax + 0x13b35f8], cl
inc eax
cmp eax, 0x34
jb 0x12f80f9
mov eax, 0x13b35f8
ret

Function at 0x12f8114
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b8324], 1
jne 0x12f81aa
or dword [0x13b8324], 1
mov dword [0x13b2efc], 0x4d484067
mov dword [0x13b2f00], 0x55014544
mov dword [0x13b2f04], 0x5744014e
mov dword [0x13b2f08], 0x40544d40
mov dword [0x13b2f0c], 0x43014455
mov dword [0x13b2f10], 0x52554e4e
mov dword [0x13b2f14], 0x51405355
mov dword [0x13b2f18], 0x40534701
mov dword [0x13b2f1c], 0x4f444c46
mov dword [0x13b2f20], 0x4c010d55
mov dword [0x13b2f24], 0x534e4c44
mov dword [0x13b2f28], 0x53440158
mov dword [0x13b2f2c], 0x21534e53
xor eax, eax
mov cl, byte [eax + 0x13b2efc]
xor cl, 0x21
mov byte [eax + 0x13b362c], cl
inc eax
cmp eax, 0x34
jb 0x12f81ac
mov eax, 0x13b362c
ret

Function at 0x12f81c7
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b8320], 1
jne 0x12f822e
or dword [0x13b8320], 1
mov dword [0x13b2f30], 0x4f4a4f74
mov dword [0x13b2f34], 0x14f564e
mov dword [0x13b2f38], 0x4e535344
mov dword [0x13b2f3c], 0x4f480153
mov dword [0x13b2f40], 0x40544d01
mov dword [0x13b2f44], 0x4e4d7e6d
mov dword [0x13b2f48], 0x55524540
mov dword [0x13b2f4c], 0x464f4853
mov byte [0x13b2f50], 0x21
xor eax, eax
mov cl, byte [eax + 0x13b2f30]
xor cl, 0x21
mov byte [eax + 0x13b3660], cl
inc eax
cmp eax, 0x21
jb 0x12f8230
mov eax, 0x13b3660
ret

Function at 0x12f824b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b831c], 1
jne 0x12f8275
or dword [0x13b831c], 1
mov dword [0x13b2f54], 0x4f4e4f1d
mov word [0x13b2f58], 0x1f44
mov byte [0x13b2f5a], 0x21
xor eax, eax
mov cl, byte [eax + 0x13b2f54]
xor cl, 0x21
mov byte [eax + 0x13b3684], cl
inc eax
cmp eax, 7
jb 0x12f8277
mov eax, 0x13b3684
ret

Function at 0x12f8292
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b8318], 1
jne 0x12f82d4
or dword [0x13b8318], 1
mov dword [0x13b2f5c], 0x140546d
mov dword [0x13b2f60], 0x554f5453
mov dword [0x13b2f64], 0x1444c48
mov dword [0x13b2f68], 0x4e535344
mov dword [0x13b2f6c], 0x21011b53
xor eax, eax
mov cl, byte [eax + 0x13b2f5c]
xor cl, 0x21
mov byte [eax + 0x13b368c], cl
inc eax
cmp eax, 0x14
jb 0x12f82d6
mov eax, 0x13b368c
ret
Function at 0x12f82f1
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b8314], 1
jne 0x12f8339
or dword [0x13b8314], 1
mov dword [0x13b2f70], 0x140546d
mov dword [0x13b2f74], 0x4e4c444c
mov dword [0x13b2f78], 0x44015853
mov dword [0x13b2f7c], 0x534e5353
mov word [0x13b2f80], 0x11b
mov byte [0x13b2f82], 0x21
xor eax, eax
mov cl, byte [eax + 0x13b2f70]
xor cl, 0x21
mov byte [eax + 0x13b36a0], cl
inc eax
cmp eax, 0x13
jb 0x12f833b
mov eax, 0x13b36a0
ret

Function at 0x12f8356
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b8310], 1
jne 0x12f83bd
or dword [0x13b8310], 1
mov dword [0x13b2f84], 0x140546d
mov dword [0x13b2f88], 0x4e535344
mov dword [0x13b2f8c], 0x4f480153
mov dword [0x13b2f90], 0x44454852
mov dword [0x13b2f94], 0x53534401
mov dword [0x13b2f98], 0x4901534e
mov dword [0x13b2f9c], 0x4d454f40
mov dword [0x13b2fa0], 0x11b5344
mov byte [0x13b2fa4], 0x21
xor eax, eax
mov cl, byte [eax + 0x13b2f84]
xor cl, 0x21
mov byte [eax + 0x13b36b4], cl
inc eax
cmp eax, 0x21
jb 0x12f83bf
mov eax, 0x13b36b4
ret

Function at 0x12f83da
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b830c], 1
jne 0x12f8436
or dword [0x13b830c], 1
mov dword [0x13b2fa8], 0x4f4a4f74
mov dword [0x13b2fac], 0x14f564e
mov dword [0x13b2fb0], 0x4e535344
mov dword [0x13b2fb4], 0x4f480153
mov dword [0x13b2fb8], 0x40544d01
mov dword [0x13b2fbc], 0x4042517e
mov word [0x13b2fc0], 0x4d4d
mov byte [0x13b2fc2], 0x21
xor eax, eax
mov cl, byte [eax + 0x13b2fa8]
xor cl, 0x21
mov byte [eax + 0x13b36d8], cl
inc eax
cmp eax, 0x1b
jb 0x12f8438
mov eax, 0x13b36d8
ret

Function at 0x12f8674
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b8308], 1
jne 0x12f86bd
or dword [0x13b8308], 1
mov dword [0x13b2fc4], 0x44524063
mov dword [0x13b2fc8], 0x45011517
mov dword [0x13b2fcc], 0x454e4244
mov dword [0x13b2fd0], 0x40470144
mov dword [0x13b2fd4], 0x45444d48
mov byte [0x13b2fd8], 0x21
xor eax, eax
mov cl, byte [eax + 0x13b2fc4]
xor cl, 0x21
mov byte [eax + 0x13b36f4], cl
inc eax
cmp eax, 0x15
jb 0x12f86bf
mov eax, 0x13b36f4
ret
Function at 0x12f86da
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x137f2ef
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x50
push ebx
push esi
push edi
push dword [ebp + 0xc]
lea eax, [esp + 0x24]
xor ebx, ebx
push eax
mov dword [esp + 0x18], ebx
call fcn.0131faad
lea ecx, [esp + 0x44]
push ecx
mov ecx, eax
mov dword [esp + 0x70], ebx
call fcn.0131de78
add esp, 0xc
push 1
xor edi, edi
lea esi, [esp + 0x24]
call fcn.012f4dc7
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov byte [esp + 0x64], 3
mov esi, dword [esp + 0x4c]
lea eax, [esp + 0x20]
call fcn.012fbd1f
mov eax, dword [esp + 0x24]
sub eax, dword [esp + 0x20]
cmp dword [esp + 0x50], 0x10
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x3c]
jae 0x12f8767
lea eax, [esp + 0x3c]
lea ecx, [esp + 0xc]
push ecx
push dword [esp + 0x24]
push esi
push eax
call fcn.01322084
add esp, 0x10
test al, al
jne 0x12f87ac
call fcn.012f8823
mov dword [esp + 0xc], eax
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x18]
call fcn.01356985
push 0x13a2d18
lea eax, [esp + 0x18]
push eax
mov dword [esp + 0x1c], vtable.std::runtime_error.0
call fcn.01360895
mov esi, dword [esp + 0xc]
lea eax, [esp + 0x20]
call fcn.012fbd1f
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
xor esi, esi
sub ecx, eax
mov dword [esp + 0xc], ecx
je 0x12f87ec
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
mov edi, dword [eax + 4]
sub edi, ecx
xor edx, edx
mov eax, esi
div edi
mov eax, dword [esp + 0x20]
mov cl, byte [edx + ecx]
xor byte [eax + esi], cl
inc esi
cmp esi, dword [esp + 0xc]
jb 0x12f87cb
push dword [esp + 0xc]
mov esi, dword [ebp + 8]
push eax
call fcn.012fb061
lea esi, [esp + 0x20]
call fcn.012f4c05
push ebx
push 1
lea ecx, [esp + 0x44]
call fcn.012f4c89
mov ecx, dword [esp + 0x5c]
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x12f8823
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b8304], 1
jne 0x12f886c
or dword [0x13b8304], 1
mov dword [0x13b2fdc], 0x44524063
mov dword [0x13b2fe0], 0x45011517
mov dword [0x13b2fe4], 0x454e4244
mov dword [0x13b2fe8], 0x40470144
mov dword [0x13b2fec], 0x45444d48
mov byte [0x13b2ff0], 0x21
xor eax, eax
mov cl, byte [eax + 0x13b2fdc]
xor cl, 0x21
mov byte [eax + 0x13b370c], cl
inc eax
cmp eax, 0x15
jb 0x12f886e
mov eax, 0x13b370c
ret

Function at 0x12f8f2f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b8300], 1
jne 0x12f8f84
or dword [0x13b8300], 1
mov dword [0x13b2ff4], 0x4d544e62
mov dword [0x13b2ff8], 0x4e4f0145
mov dword [0x13b2ffc], 0x514e0155
mov dword [0x13b3000], 0x42014f44
mov dword [0x13b3004], 0x49524053
mov dword [0x13b3008], 0x4c544501
mov word [0x13b300c], 0x2151
xor eax, eax
mov cl, byte [eax + 0x13b2ff4]
xor cl, 0x21
mov byte [eax + 0x13b3724], cl
inc eax
cmp eax, 0x1a
jb 0x12f8f86
mov eax, 0x13b3724
ret
Function at 0x12f8fa1
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b82f8], 1
jne 0x12f8fc4
or dword [0x13b82f8], 1
mov dword [0x13b3014], 0x464e4d0e
mov word [0x13b3018], 0x210e
xor eax, eax
mov cl, byte [eax + 0x13b3014]
xor cl, 0x21
mov byte [eax + 0x13b3744], cl
inc eax
cmp eax, 6
jb 0x12f8fc6
mov eax, 0x13b3744
ret

Function at 0x12f8fe4
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b82f4], 1
jne 0x12f905f
or dword [0x13b82f4], 1
mov dword [0x13b301c], 0x51555549
mov dword [0x13b3020], 0x400e0e1b
mov dword [0x13b3024], 0x584d404f
mov dword [0x13b3028], 0x52424855
mov dword [0x13b302c], 0x5544460f
mov dword [0x13b3030], 0x4f564e45
mov dword [0x13b3034], 0x55524455
mov dword [0x13b3038], 0x4c4e420f
mov dword [0x13b303c], 0xe13570e
mov dword [0x13b3040], 0xe464e4d
mov byte [0x13b3044], 0x21
xor eax, eax
mov cl, byte [eax + 0x13b301c]
xor cl, 0x21
mov byte [eax + 0x13b374c], cl
inc eax
cmp eax, 0x29
jb 0x12f9061
mov eax, 0x13b374c
ret

Function at 0x12f907c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b82f0], 1
jne 0x12f90a7
or dword [0x13b82f0], 1
mov dword [0x13b3048], 0x52071c42
mov dword [0x13b304c], 0x1c55071c
mov byte [0x13b3050], 0x21
xor eax, eax
mov cl, byte [eax + 0x13b3048]
xor cl, 0x21
mov byte [eax + 0x13b3778], cl
inc eax
cmp eax, 9
jb 0x12f90a9
mov eax, 0x13b3778
ret

Function at 0x12f90c4
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b82e0], 1
jne 0x12f914c
or dword [0x13b82e0], 1
mov dword [0x13b3064], 0x554f4e62
mov dword [0x13b3068], 0xc554f44
mov dword [0x13b306c], 0x44515875
mov dword [0x13b3070], 0x5140011b
mov dword [0x13b3074], 0x42484d51
mov dword [0x13b3078], 0x4e485540
mov dword [0x13b307c], 0xc590e4f
mov dword [0x13b3080], 0xc565656
mov dword [0x13b3084], 0x4c534e47
mov dword [0x13b3088], 0x4d53540c
mov dword [0x13b308c], 0x4e424f44
mov dword [0x13b3090], 0x21454445
xor eax, eax
mov cl, byte [eax + 0x13b3064]
xor cl, 0x21
mov byte [eax + 0x13b3794], cl
inc eax
cmp eax, 0x30
jb 0x12f914e
mov eax, 0x13b3794
ret

Function at 0x12f9169
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b82dc], 1
jne 0x12f9194
or dword [0x13b82dc], 1
mov dword [0x13b3094], 0x75726e71
mov dword [0x13b3098], 0x14e5501
mov byte [0x13b309c], 0x21
xor eax, eax
mov cl, byte [eax + 0x13b3094]
xor cl, 0x21
mov byte [eax + 0x13b37c4], cl
inc eax
cmp eax, 9
jb 0x12f9196
mov eax, 0x13b37c4
ret

Function at 0x12f91b1
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b82d8], 1
jne 0x12f91fa
or dword [0x13b82d8], 1
mov dword [0x13b30a0], 0x48404701
mov dword [0x13b30a4], 0x145444d
mov dword [0x13b30a8], 0x49554856
mov dword [0x13b30ac], 0x40555201
mov dword [0x13b30b0], 0x1525455
mov byte [0x13b30b4], 0x21
xor eax, eax
mov cl, byte [eax + 0x13b30a0]
xor cl, 0x21
mov byte [eax + 0x13b37d0], cl
inc eax
cmp eax, 0x15
jb 0x12f91fc
mov eax, 0x13b37d0
ret
Function at 0x12f9b3e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b82b0], 1
jne 0x12f9b9a
or dword [0x13b82b0], 1
mov dword [0x13b3120], 0x4d484067
mov dword [0x13b3124], 0x55014544
mov dword [0x13b3128], 0x4453014e
mov dword [0x13b312c], 0x4e014540
mov dword [0x13b3130], 0x4e015354
mov dword [0x13b3134], 0x44014f56
mov word [0x13b3138], 0x4459
mov byte [0x13b313a], 0x21
xor eax, eax
mov cl, byte [eax + 0x13b3120]
xor cl, 0x21
mov byte [eax + 0x13b3850], cl
inc eax
cmp eax, 0x1b
jb 0x12f9b9c
mov eax, 0x13b3850
ret

Function at 0x12f9c18
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b82ac], 1
jne 0x12f9c64
or dword [0x13b82ac], 1
mov dword [0x13b313c], 0x6d554466
mov dword [0x13b3140], 0x68555240
mov dword [0x13b3144], 0x5554514f
mov dword [0x13b3148], 0x4e474f68
mov dword [0x13b314c], 0x48404701
mov dword [0x13b3150], 0x2145444d
xor eax, eax
mov cl, byte [eax + 0x13b313c]
xor cl, 0x21
mov byte [eax + 0x13b386c], cl
inc eax
cmp eax, 0x18
jb 0x12f9c66
mov eax, 0x13b386c
ret

Function at 0x12f9f78
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b82a8], 1
mov ecx, 0xac21
jne 0x12f9fdb
or dword [0x13b82a8], 1
lea eax, [ecx + 0x28]
mov word [0x13b3154], ax
add eax, 0xc
mov edx, eax
mov word [0x13b3158], ax
lea eax, [ecx + 0x30]
mov word [0x13b315a], ax
inc eax
mov word [0x13b315c], ax
lea eax, [ecx - 6]
mov word [0x13b315e], ax
add eax, 0xfffffff3
mov word [0x13b3156], dx
mov edx, eax
mov word [0x13b3162], ax
mov eax, ecx
mov word [0x13b3160], dx
mov word [0x13b3164], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x13b3154]
add eax, 2
mov word [eax + 0x13b3882], dx
cmp eax, 0x12
jb 0x12f9fdd
mov eax, 0x13b3884
ret

Function at 0x12f9ffe
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b82a4], 1
mov ecx, 0xac21
jne 0x12fa05a
or dword [0x13b82a4], 1
lea eax, [ecx + 0x28]
mov word [0x13b3168], ax
add eax, 0xc
mov edx, eax
mov word [0x13b316c], ax
lea eax, [ecx + 0x30]
mov word [0x13b316e], ax
add eax, 0xffffffca
mov word [0x13b3170], ax
lea eax, [ecx - 0x13]
mov word [0x13b316a], dx
mov edx, eax
mov word [0x13b3174], ax
mov eax, ecx
mov word [0x13b3172], dx
mov word [0x13b3176], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x13b3168]
add eax, 2
mov word [eax + 0x13b3896], dx
cmp eax, 0x10
jb 0x12fa05c
mov eax, 0x13b3898
ret

Function at 0x12fa07a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b829c], 1
jne 0x12fa0c3
or dword [0x13b829c], 1
mov dword [0x13b3184], 0x66524f65
mov dword [0x13b3188], 0x40625544
mov dword [0x13b318c], 0x65444942
mov dword [0x13b3190], 0x75405540
mov dword [0x13b3194], 0x444d4340
mov byte [0x13b3198], 0x21
xor eax, eax
mov cl, byte [eax + 0x13b3184]
xor cl, 0x21
mov byte [eax + 0x13b38b4], cl
inc eax
cmp eax, 0x15
jb 0x12fa0c5
mov eax, 0x13b38b4
ret
Function at 0x12fa9ab
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b8298], 1
mov ecx, 0xac21
jne 0x12faa35
or dword [0x13b8298], 1
lea eax, [ecx + 0x21]
mov word [0x13b319c], ax
add eax, 0x11
mov edx, eax
mov word [0x13b319e], dx
lea edx, [ecx + 0x1f]
mov word [0x13b31a0], dx
add edx, 0x12
mov word [0x13b31a2], dx
lea edx, [ecx + 0x28]
mov word [0x13b31a4], dx
add edx, 0x35
mov word [0x13b31a6], dx
mov edx, eax
mov word [0x13b31a8], dx
lea edx, [ecx + 0x23]
lea eax, [ecx + 0x34]
mov word [0x13b31aa], dx
mov word [0x13b31b2], ax
add edx, 0xd
mov eax, ecx
mov word [0x13b31ac], dx
mov dword [0x13b31ae], 0xac53ac4e
mov word [0x13b31b4], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x13b319c]
add eax, 2
mov word [eax + 0x13b38ca], dx
cmp eax, 0x1a
jb 0x12faa37
mov eax, 0x13b38cc
ret

Function at 0x12faa55
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b8294], 1
jne 0x12faacf
or dword [0x13b8294], 1
mov dword [0x13b31b8], 0x53534e72
mov dword [0x13b31bc], 0x55010d58
mov dword [0x13b31c0], 0x1524849
mov dword [0x13b31c4], 0x55474e52
mov dword [0x13b31c8], 0x44534056
mov dword [0x13b31cc], 0x1524801
mov dword [0x13b31d0], 0x1554e4f
mov dword [0x13b31d4], 0x48405740
mov dword [0x13b31d8], 0x4d43404d
mov word [0x13b31dc], 0xf44
mov byte [0x13b31de], 0x21
xor eax, eax
mov cl, byte [eax + 0x13b31b8]
xor cl, 0x21
mov byte [eax + 0x13b38e8], cl
inc eax
cmp eax, 0x27
jb 0x12faad1
mov eax, 0x13b38e8
ret

Function at 0x12faaec
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b8290], 1
jne 0x12fab0f
or dword [0x13b8290], 1
mov dword [0x13b31e0], 0x4e535364
mov word [0x13b31e4], 0x2153
xor eax, eax
mov cl, byte [eax + 0x13b31e0]
xor cl, 0x21
mov byte [eax + 0x13b3910], cl
inc eax
cmp eax, 6
jb 0x12fab11
mov eax, 0x13b3910
ret

Function at 0x12fab2c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b828c], 1
jne 0x12faba6
or dword [0x13b828c], 1
mov dword [0x13b31e8], 0x53534e72
mov dword [0x13b31ec], 0x55010d58
mov dword [0x13b31f0], 0x1524849
mov dword [0x13b31f4], 0x55474e52
mov dword [0x13b31f8], 0x44534056
mov dword [0x13b31fc], 0x1524801
mov dword [0x13b3200], 0x1554e4f
mov dword [0x13b3204], 0x48405740
mov dword [0x13b3208], 0x4d43404d
mov word [0x13b320c], 0xf44
mov byte [0x13b320e], 0x21
xor eax, eax
mov cl, byte [eax + 0x13b31e8]
xor cl, 0x21
mov byte [eax + 0x13b3918], cl
inc eax
cmp eax, 0x27
jb 0x12faba8
mov eax, 0x13b3918
ret

Function at 0x12fabc3
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b8288], 1
jne 0x12fabe6
or dword [0x13b8288], 1
mov dword [0x13b3210], 0x4e535364
mov word [0x13b3214], 0x2153
xor eax, eax
mov cl, byte [eax + 0x13b3210]
xor cl, 0x21
mov byte [eax + 0x13b3940], cl
inc eax
cmp eax, 6
jb 0x12fabe8
mov eax, 0x13b3940
ret
Function at 0x12fac03
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b8284], 1
jne 0x12fac59
or dword [0x13b8284], 1
mov dword [0x13b3218], 0x1444d6e
mov dword [0x13b321c], 0x55484f48
mov dword [0x13b3220], 0x484d4048
mov dword [0x13b3224], 0x4855405b
mov dword [0x13b3228], 0x47014f4e
mov dword [0x13b322c], 0x444d4840
mov dword [0x13b3230], 0x21011b45
xor eax, eax
mov cl, byte [eax + 0x13b3218]
xor cl, 0x21
mov byte [eax + 0x13b3948], cl
inc eax
cmp eax, 0x1c
jb 0x12fac5b
mov eax, 0x13b3948
ret

Function at 0x12fac76
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b8280], 1
jne 0x12faca1
or dword [0x13b8280], 1
mov dword [0x13b3234], 0x4f53444a
mov dword [0x13b3238], 0x13124d44
mov byte [0x13b323c], 0x21
xor eax, eax
mov cl, byte [eax + 0x13b3234]
xor cl, 0x21
mov byte [eax + 0x13b3964], cl
inc eax
cmp eax, 9
jb 0x12faca3
mov eax, 0x13b3964
ret

Function at 0x12facbe
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b827c], 1
jne 0x12fad27
or dword [0x13b827c], 1
mov dword [0x13b3240], 0x71554472
mov dword [0x13b3244], 0x44424e53
mov dword [0x13b3248], 0x52745252
mov dword [0x13b324c], 0x4e6c5344
mov dword [0x13b3250], 0x59644445
mov dword [0x13b3254], 0x55514442
mov dword [0x13b3258], 0x714f4e48
mov dword [0x13b325c], 0x42484d4e
mov word [0x13b3260], 0x2158
xor eax, eax
mov cl, byte [eax + 0x13b3240]
xor cl, 0x21
mov byte [eax + 0x13b3970], cl
inc eax
cmp eax, 0x22
jb 0x12fad29
mov eax, 0x13b3970
ret

Function at 0x12fad44
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b8278], 1
jne 0x12fadad
or dword [0x13b8278], 1
mov dword [0x13b3264], 0x71554466
mov dword [0x13b3268], 0x44424e53
mov dword [0x13b326c], 0x52745252
mov dword [0x13b3270], 0x4e6c5344
mov dword [0x13b3274], 0x59644445
mov dword [0x13b3278], 0x55514442
mov dword [0x13b327c], 0x714f4e48
mov dword [0x13b3280], 0x42484d4e
mov word [0x13b3284], 0x2158
xor eax, eax
mov cl, byte [eax + 0x13b3264]
xor cl, 0x21
mov byte [eax + 0x13b3994], cl
inc eax
cmp eax, 0x22
jb 0x12fadaf
mov eax, 0x13b3994
ret

Function at 0x12fadca
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b8274], 1
mov ecx, 0xac21
jne 0x12fadf9
or dword [0x13b8274], 1
lea eax, [ecx + 0x1f]
mov word [0x13b3288], ax
add eax, 0xffffffd3
mov word [0x13b328a], ax
mov eax, ecx
mov word [0x13b328c], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x13b3288]
add eax, 2
mov word [eax + 0x13b39b6], dx
cmp eax, 6
jb 0x12fadfb
mov eax, 0x13b39b8
ret

Function at 0x12fae19
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b826c], 1
jne 0x12fae89
or dword [0x13b826c], 1
mov dword [0x13b3298], 0x4d484067
mov dword [0x13b329c], 0x55014544
mov dword [0x13b32a0], 0x4f48014e
mov dword [0x13b32a4], 0x40485548
mov dword [0x13b32a8], 0x445b484d
mov dword [0x13b32ac], 0x574f4401
mov dword [0x13b32b0], 0x4f4e5348
mov dword [0x13b32b4], 0x554f444c
mov word [0x13b32b8], 0x11b
mov byte [0x13b32ba], 0x21
xor eax, eax
mov cl, byte [eax + 0x13b3298]
xor cl, 0x21
mov byte [eax + 0x13b39c8], cl
inc eax
cmp eax, 0x23
jb 0x12fae8b
mov eax, 0x13b39c8
ret
Function at 0x12faea6
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b8264], 1
mov ecx, 0xac21
jne 0x12faef0
or dword [0x13b8264], 1
lea eax, [ecx + 0x23]
mov word [0x13b32c4], ax
add eax, 0xb
mov word [0x13b32c6], ax
lea eax, [ecx + 0x34]
mov word [0x13b32c8], ax
add eax, 0xfffffffe
mov word [0x13b32ca], ax
lea eax, [ecx + 0x37]
mov word [0x13b32cc], ax
mov eax, ecx
mov word [0x13b32ce], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x13b32c4]
add eax, 2
mov word [eax + 0x13b39f2], dx
cmp eax, 0xc
jb 0x12faef2
mov eax, 0x13b39f4
ret

Function at 0x12faf10
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b8260], 1
jne 0x12faf5b
or dword [0x13b8260], 1
mov dword [0x13b32d0], 0x40494f74
mov dword [0x13b32d4], 0x444d454f
mov dword [0x13b32d8], 0x59440145
mov dword [0x13b32dc], 0x55514442
mov dword [0x13b32e0], 0x1b4f4e48
mov word [0x13b32e4], 0x2101
xor eax, eax
mov cl, byte [eax + 0x13b32d0]
xor cl, 0x21
mov byte [eax + 0x13b3a00], cl
inc eax
cmp eax, 0x16
jb 0x12faf5d
mov eax, 0x13b3a00
ret

Function at 0x12faf78
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b825c], 1
jne 0x12fafcb
or dword [0x13b825c], 1
mov dword [0x13b32e8], 0x40494f74
mov dword [0x13b32ec], 0x444d454f
mov dword [0x13b32f0], 0x59440145
mov dword [0x13b32f4], 0x55514442
mov dword [0x13b32f8], 0x1b4f4e48
mov dword [0x13b32fc], 0x2b520401
mov byte [0x13b3300], 0x21
xor eax, eax
mov cl, byte [eax + 0x13b32e8]
xor cl, 0x21
mov byte [eax + 0x13b3a18], cl
inc eax
cmp eax, 0x19
jb 0x12fafcd
mov eax, 0x13b3a18
ret

Function at 0x12fafe8
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b8258], 1
jne 0x12fb020
or dword [0x13b8258], 1
mov dword [0x13b3304], 0x43545572
mov dword [0x13b3308], 0x48594401
mov dword [0x13b330c], 0x4090155
mov dword [0x13b3310], 0x212b0845
xor eax, eax
mov cl, byte [eax + 0x13b3304]
xor cl, 0x21
mov byte [eax + 0x13b3a34], cl
inc eax
cmp eax, 0x10
jb 0x12fb022
mov eax, 0x13b3a34
ret