joyce8/EMBER2024-capa huggingface dataset:
Function at 0xbd40fa
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0xc58754], 1
jne 0xbd416c
or dword [0xc58754], 1
mov dword [0xc56f6c], 0x193f3806
mov dword [0xc56f70], 0x212525
mov dword [0xc56f74], 0x28233424
mov dword [0xc56f78], 0x30253015
mov dword [0xc56f7c], 0x38302710
mov dword [0xc56f80], 0x3d33303d
mov dword [0xc56f84], 0x71787934
mov dword [0xc56f88], 0x3d383037
mov word [0xc56f8c], 0x3534
mov byte [0xc56f8e], 0x51
mov cl, byte [eax + 0xc56f6c]
xor cl, 0x51
mov byte [eax + 0xc57224], cl
inc eax
cmp eax, 0x23
jb 0xbd416c
mov eax, 0xc57224
ret

Function at 0xbd4187
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc58750], 1
jne 0xbd41dc
or dword [0xc58750], 1
mov dword [0xc56f90], 0x34253f18
mov dword [0xc56f94], 0x25343f23
mov dword [0xc56f98], 0x35303403
mov dword [0xc56f9c], 0x343d3817
mov dword [0xc56fa0], 0x37717879
mov dword [0xc56fa4], 0x343d3830
mov word [0xc56fa8], 0x5135
xor eax, eax
mov cl, byte [eax + 0xc56f90]
xor cl, 0x51
mov byte [eax + 0xc57248], cl
inc eax
cmp eax, 0x1a
jb 0xbd41de
mov eax, 0xc57248
ret

Function at 0xbd4fc6
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc58734], 1
jne 0xbd504d
or dword [0xc58734], 1
mov dword [0xc57280], 0x24713f10
mov dword [0xc57284], 0x3234233f
mov dword [0xc57288], 0x383f363e
mov dword [0xc5728c], 0x7135342b
mov dword [0xc57290], 0x343a3e25
mov dword [0xc57294], 0x3026713f
mov dword [0xc57298], 0x3e377122
mov dword [0xc5729c], 0x71353f24
mov dword [0xc572a0], 0x32712530
mov dword [0xc572a4], 0x30233039
mov dword [0xc572a8], 0x23342532
mov word [0xc572ac], 0x5171
xor eax, eax
mov cl, byte [eax + 0xc57280]
xor cl, 0x51
mov byte [eax + 0xc573d0], cl
inc eax
cmp eax, 0x2e
jb 0xbd504f
mov eax, 0xc573d0
ret
Function at 0xbd5493
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc58730], 1
jne 0xbd54ef
or dword [0xc58730], 1
mov dword [0xc572b0], 0x2222381c
mov dword [0xc572b4], 0x71363f38
mov dword [0xc572b8], 0x343d7130
mov dword [0xc572bc], 0x21712537
mov dword [0xc572c0], 0x3f342330
mov dword [0xc572c4], 0x22343925
mov word [0xc572c8], 0x2238
mov byte [0xc572ca], 0x51
xor eax, eax
mov cl, byte [eax + 0xc572b0]
xor cl, 0x51
mov byte [eax + 0xc57400], cl
inc eax
cmp eax, 0x1b
jb 0xbd54f1
mov eax, 0xc57400
ret

Function at 0xbd550c
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc5872c], 1
jne 0xbd5575
or dword [0xc5872c], 1
mov dword [0xc572cc], 0x71253e1f
mov dword [0xc572d0], 0x243e3f34
mov dword [0xc572d4], 0x3e713936
mov dword [0xc572d8], 0x30233421
mov dword [0xc572dc], 0x7122353f
mov dword [0xc572e0], 0x34713f38
mov dword [0xc572e4], 0x34232129
mov dword [0xc572e8], 0x3e382222
mov word [0xc572ec], 0x513f
xor eax, eax
mov cl, byte [eax + 0xc572cc]
xor cl, 0x51
mov byte [eax + 0xc5741c], cl
inc eax
cmp eax, 0x22
jb 0xbd5577
mov eax, 0xc5741c
ret

Function at 0xbd5592
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc58728], 1
jne 0xbd55f2
or dword [0xc58728], 1
mov dword [0xc572f0], 0x713e3e05
mov dword [0xc572f4], 0x283f303c
mov dword [0xc572f8], 0x34213e71
mov dword [0xc572fc], 0x353f3023
mov dword [0xc57300], 0x3f387122
mov dword [0xc57304], 0x21293471
mov dword [0xc57308], 0x22223423
mov dword [0xc5730c], 0x513f3e38
xor eax, eax
mov cl, byte [eax + 0xc572f0]
xor cl, 0x51
mov byte [eax + 0xc57440], cl
inc eax
cmp eax, 0x20
jb 0xbd55f4
mov eax, 0xc57440
ret

Function at 0xbd560f
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc58724], 1
jne 0xbd5665
or dword [0xc58724], 1
mov dword [0xc57310], 0x2222381c
mov dword [0xc57314], 0x71363f38
mov dword [0xc57318], 0x38237130
mov dword [0xc5731c], 0x71253936
mov dword [0xc57320], 0x34233021
mov dword [0xc57324], 0x3439253f
mov dword [0xc57328], 0x51223822
xor eax, eax
mov cl, byte [eax + 0xc57310]
xor cl, 0x51
mov byte [eax + 0xc57460], cl
inc eax
cmp eax, 0x1c
jb 0xbd5667
mov eax, 0xc57460
ret

Function at 0xbd5682
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc58720], 1
jne 0xbd56f3
or dword [0xc58720], 1
mov dword [0xc5732c], 0x23303f04
mov dword [0xc57330], 0x213e7128
mov dword [0xc57334], 0x25302334
mov dword [0xc57338], 0x3c71233e
mov dword [0xc5733c], 0x71252224
mov dword [0xc57340], 0x34273039
mov dword [0xc57344], 0x343f3e71
mov dword [0xc57348], 0x34213e71
mov dword [0xc5734c], 0x353f3023
mov byte [0xc57350], 0x51
xor eax, eax
mov cl, byte [eax + 0xc5732c]
xor cl, 0x51
mov byte [eax + 0xc5747c], cl
inc eax
cmp eax, 0x25
jb 0xbd56f5
mov eax, 0xc5747c
ret
Function at 0xbd5710
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc5871c], 1
jne 0xbd578a
or dword [0xc5871c], 1
mov dword [0xc57354], 0x303f3813
mov dword [0xc57358], 0x3e712823
mov dword [0xc5735c], 0x30233421
mov dword [0xc57360], 0x71233e25
mov dword [0xc57364], 0x2522243c
mov dword [0xc57368], 0x27303971
mov dword [0xc5736c], 0x26257134
mov dword [0xc57370], 0x213e713e
mov dword [0xc57374], 0x3f302334
mov word [0xc57378], 0x2235
mov byte [0xc5737a], 0x51
xor eax, eax
mov cl, byte [eax + 0xc57354]
xor cl, 0x51
mov byte [eax + 0xc574a4], cl
inc eax
cmp eax, 0x27
jb 0xbd578c
mov eax, 0xc574a4
ret

Function at 0xbd57a7
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc58718], 1
jne 0xbd5810
or dword [0xc58718], 1
mov dword [0xc5737c], 0x303f3813
mov dword [0xc57380], 0x3e712823
mov dword [0xc57384], 0x30233421
mov dword [0xc57388], 0x71233e25
mov dword [0xc5738c], 0x71253e3f
mov dword [0xc57390], 0x3d213c38
mov dword [0xc57394], 0x3f343c34
mov dword [0xc57398], 0x6b353425
mov word [0xc5739c], 0x5171
xor eax, eax
mov cl, byte [eax + 0xc5737c]
xor cl, 0x51
mov byte [eax + 0xc574cc], cl
inc eax
cmp eax, 0x22
jb 0xbd5812
mov eax, 0xc574cc
ret
Function at 0xbd71c2
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
or eax, 0xffffffff
cmp dword [ebp + 8], 0
je 0xbd7204
push esi
mov cl, byte [edx]
dec dword [ebp + 8]
movzx ecx, cl
mov esi, ecx
xor esi, eax
and esi, 0xf
shr eax, 4
xor eax, dword [esi*4 + 0xc41f00]
shr ecx, 4
mov esi, eax
and esi, 0xf
xor ecx, esi
shr eax, 4
xor eax, dword [ecx*4 + 0xc41f00]
inc edx
cmp dword [ebp + 8], 0
jne 0xbd71cf
pop esi
not eax
pop ebp
ret

Function at 0xbd8e4f
Capabilities:
Enumerate pe sections

Disassembly:
push ebx
xor ebx, ebx
push edi
cmp ecx, ebx
je 0xbd8e74
cmp dword [ecx + 0x38], ebx
je 0xbd8e74
cmp eax, dword [ecx + 0x10]
jae 0xbd8e74
cmp dword [ecx + 0x14], 1
jne 0xbd8e74
mov edx, dword [ecx + 0x38]
mov edi, dword [edx + 0x10]
mov edi, dword [edi + eax*4]
add edi, dword [edx]
jmp 0xbd8e76
xor edi, edi
cmp edi, ebx
je 0xbd8f59
cmp esi, ebx
je 0xbd8f59
mov dword [esi], eax
mov ecx, dword [ecx + 0x38]
mov ecx, dword [ecx + 0x10]
mov eax, dword [ecx + eax*4]
mov dword [esi + 4], eax
mov ax, word [edi + 4]
mov word [esi + 8], ax
mov ax, word [edi + 6]
mov word [esi + 0xa], ax
mov ax, word [edi + 8]
mov word [esi + 0xc], ax
mov ax, word [edi + 0xa]
mov word [esi + 0xe], ax
movzx eax, word [edi + 0xe]
movzx edx, word [edi + 0xc]
call fcn.00bd85f8
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], edx
mov eax, dword [edi + 0x10]
mov dword [esi + 0x18], eax
mov eax, dword [edi + 0x14]
mov dword [esi + 0x20], eax
mov dword [esi + 0x24], ebx
mov eax, dword [edi + 0x18]
mov dword [esi + 0x28], eax
mov dword [esi + 0x2c], ebx
mov ax, word [edi + 0x24]
mov word [esi + 0x30], ax
mov eax, dword [edi + 0x26]
mov dword [esi + 0x34], eax
mov eax, dword [edi + 0x2a]
mov dword [esi + 0x38], eax
mov dword [esi + 0x3c], ebx
movzx ebx, word [edi + 0x1c]
mov eax, 0x103
cmp ebx, eax
jb 0xbd8f05
mov ebx, eax
push ebx
lea eax, [edi + 0x2e]
push eax
lea eax, [esi + 0x44]
push eax
call fcn.00bff0d0
mov byte [ebx + esi + 0x44], 0
movzx ebx, word [edi + 0x20]
mov eax, 0xff
add esp, 0xc
cmp ebx, eax
jb 0xbd8f2a
mov ebx, eax
mov dword [esi + 0x40], ebx
movzx eax, word [edi + 0x1e]
movzx ecx, word [edi + 0x1c]
add eax, edi
lea eax, [ecx + eax + 0x2e]
push ebx
push eax
lea eax, [esi + 0x148]
push eax
call fcn.00bff0d0
xor eax, eax
add esp, 0xc
mov byte [ebx + esi + 0x148], 0
inc eax
jmp 0xbd8f5b
xor eax, eax
pop edi
pop ebx
ret

Function at 0xbd9970
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc5870c], 1
jne 0xbd99f5
or dword [0xc5870c], 1
mov dword [0xc57508], 0x3e3b3314
mov dword [0xc5750c], 0x26723637
mov dword [0xc57510], 0x2031723d
mov dword [0xc57514], 0x37263337
mov dword [0xc57518], 0x33273e72
mov dword [0xc5751c], 0x33262172
mov dword [0xc57520], 0x7a723726
mov dword [0xc57524], 0x39203d25
mov dword [0xc57528], 0x26722037
mov dword [0xc5752c], 0x3337203a
mov dword [0xc57530], 0x72687b36
mov byte [0xc57534], 0x52
xor eax, eax
mov cl, byte [eax + 0xc57508]
xor cl, 0x52
mov byte [eax + 0xc575d0], cl
inc eax
cmp eax, 0x2d
jb 0xbd99f7
mov eax, 0xc575d0
ret
Function at 0xbd9a12
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc586fc], 1
jne 0xbd9a79
or dword [0xc586fc], 1
mov dword [0xc57544], 0x37723d1c
mov dword [0xc57548], 0x203d2020
mov dword [0xc5754c], 0x21373f72
mov dword [0xc57550], 0x37353321
mov dword [0xc57554], 0x26372072
mov dword [0xc57558], 0x373c2027
mov dword [0xc5755c], 0x2b307236
mov dword [0xc57560], 0x303d3872
mov byte [0xc57564], 0x52
xor eax, eax
mov cl, byte [eax + 0xc57544]
xor cl, 0x52
mov byte [eax + 0xc5760c], cl
inc eax
cmp eax, 0x21
jb 0xbd9a7b
mov eax, 0xc5760c
ret

Function at 0xbd9a96
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc586f0], 1
jne 0xbd9aff
or dword [0xc586f0], 1
mov dword [0xc57590], 0x7233271e
mov dword [0xc57594], 0x3d202037
mov dword [0xc57598], 0x27207220
mov dword [0xc5759c], 0x3c3b3c3c
mov dword [0xc575a0], 0x20377235
mov dword [0xc575a4], 0x72203d20
mov dword [0xc575a8], 0x363c333a
mov dword [0xc575ac], 0x6820373e
mov word [0xc575b0], 0x5272
xor eax, eax
mov cl, byte [eax + 0xc57590]
xor cl, 0x52
mov byte [eax + 0xc57658], cl
inc eax
cmp eax, 0x22
jb 0xbd9b01
mov eax, 0xc57658
ret

Function at 0xbd9b1c
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc586ec], 1
jne 0xbd9b6e
or dword [0xc586ec], 1
mov dword [0xc575b4], 0x1e33273e
mov dword [0xc575b8], 0x333d3e0d
mov dword [0xc575bc], 0x20262136
mov dword [0xc575c0], 0x72353c3b
mov dword [0xc575c4], 0x3e3b3334
mov word [0xc575c8], 0x3637
mov byte [0xc575ca], 0x52
xor eax, eax
mov cl, byte [eax + 0xc575b4]
xor cl, 0x52
mov byte [eax + 0xc5767c], cl
inc eax
cmp eax, 0x17
jb 0xbd9b70
mov eax, 0xc5767c
ret
Function at 0xbda8bc
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0xc22e6d
call fcn.00c21d38
sub esp, 0xb0
push ebx
push esi
push edi
xor ebx, ebx
push ebx
push ebx
lea eax, [ebp - 0x10]
push eax
push ebx
push dword [ebp + 0xc]
mov dword [ebp - 0x10], ebx
push ebx
push 0x1300
call dword [0xc2a12c]
test eax, eax
jne 0xbda904
call fcn.00bdaa5d
mov ecx, dword [ebp + 8]
push eax
call fcn.00bb6adb
mov eax, dword [ebp + 8]
jmp 0xbdaa4e
test byte [0xc586e0], 1
jne 0xbda925
or dword [0xc586e0], 1
mov dword [0xc576b8], 0x73595e5a
mov byte [0xc576bc], 0x53
xor eax, eax
mov cl, byte [eax + 0xc576b8]
xor cl, 0x53
mov byte [eax + 0xc57e8c], cl
inc eax
cmp eax, 5
jb 0xbda927
push 0xf
mov esi, 0xc57e8c
pop edi
mov eax, esi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x48], bl
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0xbda952
sub eax, ecx
push eax
push esi
lea ecx, [ebp - 0x48]
call fcn.00bb4c12
mov dword [ebp - 4], ebx
push dword [ebp - 0x10]
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.00bb4c87
lea eax, [ebp - 0x2c]
push eax
lea edi, [ebp - 0x48]
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 1
call fcn.00bdfd75
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.00bb4ca8
push ebx
push 1
mov ecx, edi
mov byte [ebp - 4], 4
call fcn.00bb4ca8
push dword [ebp - 0x10]
call dword [0xc2a0e0]
push ebx
push dword [ebp + 0xc]
lea esi, [ebp - 0xb8]
call fcn.00bdada8
pop ecx
pop ecx
push eax
mov byte [ebp - 4], 5
call fcn.00bdaac6
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.00bb6b18
add esp, 0xc
push 0xc43388
push eax
lea eax, [ebp - 0x9c]
push eax
mov byte [ebp - 4], 6
call fcn.00bbd6c1
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea esi, [ebp - 0x64]
mov byte [ebp - 4], 7
call fcn.00bbb5e6
push ebx
push 1
lea ecx, [ebp - 0x9c]
call fcn.00bb4ca8
push ebx
push 1
lea ecx, [ebp - 0x80]
call fcn.00bb4ca8
push ebx
push 1
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 4
call fcn.00bb4ca8
mov edi, dword [ebp + 8]
mov dword [edi + 0x14], 0xf
mov dword [edi + 0x10], ebx
mov byte [edi], bl
call fcn.00bb4bc8
push ebx
push 1
mov ecx, esi
call fcn.00bb4ca8
mov eax, edi
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret

Function at 0xbdaa5d
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc586e4], 1
jne 0xbdaaa9
or dword [0xc586e4], 1
mov dword [0xc576a0], 0x36213d06
mov dword [0xc576a4], 0x3d343c30
mov dword [0xc576a8], 0x3736293a
mov dword [0xc576ac], 0x21213673
mov dword [0xc576b0], 0x3073213c
mov dword [0xc576b4], 0x5336373c
xor eax, eax
mov cl, byte [eax + 0xc576a0]
xor cl, 0x53
mov byte [eax + 0xc57e74], cl
inc eax
cmp eax, 0x18
jb 0xbdaaab
mov eax, 0xc57e74
ret

Function at 0xbdaac6
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc586dc], 1
jne 0xbdab04
or dword [0xc586dc], 1
mov dword [0xc576c0], 0x21367b73
mov dword [0xc576c4], 0x73213c21
mov dword [0xc576c8], 0x36373c30
mov word [0xc576cc], 0x7369
mov byte [0xc576ce], 0x53
xor eax, eax
mov cl, byte [eax + 0xc576c0]
xor cl, 0x53
mov byte [eax + 0xc57e94], cl
inc eax
cmp eax, 0xf
jb 0xbdab06
mov eax, 0xc57e94
ret
Function at 0xbdada8
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
and dword [ebp - 4], 0
test byte [0xc586d8], 1
jne 0xbdadd3
or dword [0xc586d8], 1
mov dword [0xc576d0], 0x373f3f76
mov byte [0xc576d4], 0x53
xor eax, eax
mov cl, byte [eax + 0xc576d0]
xor cl, 0x53
mov byte [eax + 0xc57ea4], cl
inc eax
cmp eax, 5
jb 0xbdadd5
push dword [ebp + 0xc]
lea eax, [ebp - 0x48]
push dword [ebp + 8]
push 0xc57ea4
push eax
call fcn.00bdfdce
and dword [esi + 0x10], 0
add esp, 0x10
lea eax, [ebp - 0x48]
mov dword [esi + 0x14], 0xf
push eax
mov ecx, esi
mov byte [esi], 0
call fcn.00bb4c87
mov eax, esi
leave
ret

Function at 0xbdaf77
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc586d4], 1
jne 0xbdafd3
or dword [0xc586d4], 1
mov dword [0xc576d8], 0x1e273614
mov dword [0xc576dc], 0x3f26373c
mov dword [0xc576e0], 0x3f3a1536
mov dword [0xc576e4], 0x3e321d36
mov dword [0xc576e8], 0x32357336
mov dword [0xc576ec], 0x37363f3a
mov word [0xc576f0], 0x7369
mov byte [0xc576f2], 0x53
xor eax, eax
mov cl, byte [eax + 0xc576d8]
xor cl, 0x53
mov byte [eax + 0xc57eac], cl
inc eax
cmp eax, 0x1b
jb 0xbdafd5
mov eax, 0xc57eac
ret

Function at 0xbdaff3
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0xc586d0], 1
jne 0xbdb052
or dword [0xc586d0], 1
mov dword [0xc576f4], 0x10273600
mov dword [0xc576f8], 0x36212126
mov dword [0xc576fc], 0x3a17273d
mov dword [0xc57700], 0x27303621
mov dword [0xc57704], 0x732a213c
mov dword [0xc57708], 0x3f3a3235
mov dword [0xc5770c], 0x73693736
mov byte [0xc57710], 0x53
mov cl, byte [eax + 0xc576f4]
xor cl, 0x53
mov byte [eax + 0xc57ec8], cl
inc eax
cmp eax, 0x1d
jb 0xbdb052
mov eax, 0xc57ec8
ret

Function at 0xbdb164
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc586cc], 1
jne 0xbdb1c1
or dword [0xc586cc], 1
mov dword [0xc57714], 0x10273614
mov dword [0xc57718], 0x36212126
mov dword [0xc5771c], 0x3a17273d
mov dword [0xc57720], 0x27303621
mov dword [0xc57724], 0x732a213c
mov dword [0xc57728], 0x3f3a3235
mov dword [0xc5772c], 0x73693736
mov byte [0xc57730], 0x53
xor eax, eax
mov cl, byte [eax + 0xc57714]
xor cl, 0x53
mov byte [eax + 0xc57ee8], cl
inc eax
cmp eax, 0x1d
jb 0xbdb1c3
mov eax, 0xc57ee8
ret
Function at 0xbdb37c
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc586c8], 1
jne 0xbdb4eb
mov eax, 0x780f
mov ecx, eax
mov word [0xc57738], cx
mov word [0xc5773a], cx
add ecx, 0xfffffff1
mov word [0xc5773c], cx
lea ecx, [eax + 0x18]
mov word [0xc5773e], cx
add ecx, 0xfffffffa
lea edx, [eax + 0x2b]
mov word [0xc57740], cx
push ebx
mov ecx, edx
mov word [0xc57742], cx
add ecx, 3
push esi
mov esi, ecx
lea ecx, [eax + 0x26]
mov word [0xc57744], si
lea esi, [eax + 0x25]
mov word [0xc57746], si
mov word [0xc57754], cx
add esi, 8
add edx, 5
mov ecx, esi
push edi
lea edi, [eax + 0x27]
mov word [0xc57756], cx
mov ecx, eax
mov word [0xc5774c], dx
mov edx, edi
mov word [0xc57758], cx
mov word [0xc5775a], cx
add ecx, 0x54
mov word [0xc5774e], dx
mov edx, ecx
or dword [0xc586c8], 1
mov word [0xc5775c], dx
lea edx, [eax + 0x58]
mov ebx, edx
mov word [0xc5775e], bx
mov ebx, ecx
mov word [0xc57760], bx
lea ebx, [eax + 0x5b]
mov word [0xc5776e], ax
mov word [0xc57762], bx
mov ebx, ecx
mov ecx, eax
add eax, 0xfffffff4
mov word [0xc57770], ax
lea eax, [ecx + 0x28]
mov word [0xc57776], ax
add eax, 0xffffffef
mov word [0xc57778], ax
lea eax, [ecx + 0x21]
mov word [0xc5777a], ax
add eax, 0xfffffff7
mov word [0xc5777c], ax
lea eax, [ecx + 0xe]
mov word [0xc5777e], ax
add eax, 0x15
pop edi
mov word [0xc57780], ax
lea eax, [ecx + 0x44]
pop esi
mov word [0xc57764], bx
mov dword [0xc57748], 0x783a7815
mov dword [0xc57750], 0x783d781a
mov word [0xc57766], dx
mov dword [0xc57768], 0x78637811
mov word [0xc5776c], cx
mov dword [0xc57772], 0x783c7821
mov dword [0xc57782], 0x7836783e
mov word [0xc57786], ax
pop ebx
xor eax, eax
mov ecx, 0x7853
xor cx, word [eax + 0xc57738]
add eax, 2
mov word [eax + 0xc57f06], cx
cmp eax, 0x50
jb 0xbdb4ed
mov eax, 0xc57f08
ret

Function at 0xbdb50e
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc586c4], 1
jne 0xbdb563
or dword [0xc586c4], 1
mov dword [0xc57788], 0x25733c1d
mov dword [0xc5778c], 0x3a202136
mov dword [0xc57790], 0x3a733d3c
mov dword [0xc57794], 0x733c353d
mov dword [0xc57798], 0x3a322532
mov dword [0xc5779c], 0x3f31323f
mov word [0xc577a0], 0x5336
xor eax, eax
mov cl, byte [eax + 0xc57788]
xor cl, 0x53
mov byte [eax + 0xc57f58], cl
inc eax
cmp eax, 0x1a
jb 0xbdb565
mov eax, 0xc57f58
ret

Function at 0xbdb752
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc586c0], 1
jne 0xbdb7a7
or dword [0xc586c0], 1
mov dword [0xc577a4], 0x25733c1d
mov dword [0xc577a8], 0x3a202136
mov dword [0xc577ac], 0x3a733d3c
mov dword [0xc577b0], 0x733c353d
mov dword [0xc577b4], 0x3a322532
mov dword [0xc577b8], 0x3f31323f
mov word [0xc577bc], 0x5336
xor eax, eax
mov cl, byte [eax + 0xc577a4]
xor cl, 0x53
mov byte [eax + 0xc57f74], cl
inc eax
cmp eax, 0x1a
jb 0xbdb7a9
mov eax, 0xc57f74
ret
Function at 0xbdb7c4
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc586bc], 1
jne 0xbdb82a
or dword [0xc586bc], 1
mov dword [0xc577c0], 0x32253d1a
mov dword [0xc577c4], 0x73373a3f
mov dword [0xc577c8], 0x20213625
mov dword [0xc577cc], 0x733d3c3a
mov dword [0xc577d0], 0x3c353d3a
mov dword [0xc577d4], 0x343a2073
mov dword [0xc577d8], 0x2627323d
mov word [0xc577dc], 0x3621
mov byte [0xc577de], 0x53
xor eax, eax
mov cl, byte [eax + 0xc577c0]
xor cl, 0x53
mov byte [eax + 0xc57f90], cl
inc eax
cmp eax, 0x1f
jb 0xbdb82c
mov eax, 0xc57f90
ret

Function at 0xbdbb31
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc586b8], 1
jne 0xbdbb97
or dword [0xc586b8], 1
mov dword [0xc577e0], 0x3f3a3215
mov dword [0xc577e4], 0x27733736
mov dword [0xc577e8], 0x3634733c
mov dword [0xc577ec], 0x36277327
mov dword [0xc577f0], 0x3573233e
mov dword [0xc577f4], 0x36373f3c
mov dword [0xc577f8], 0x32237321
mov word [0xc577fc], 0x3b27
mov byte [0xc577fe], 0x53
xor eax, eax
mov cl, byte [eax + 0xc577e0]
xor cl, 0x53
mov byte [eax + 0xc57fb0], cl
inc eax
cmp eax, 0x1f
jb 0xbdbb99
mov eax, 0xc57fb0
ret

Function at 0xbdbd09
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc586b4], 1
jne 0xbdbd5b
or dword [0xc586b4], 1
mov dword [0xc57800], 0x15273614
mov dword [0xc57804], 0x36373f3c
mov dword [0xc57808], 0x27320321
mov dword [0xc5780c], 0x3235733b
mov dword [0xc57810], 0x37363f3a
mov word [0xc57814], 0x7369
mov byte [0xc57816], 0x53
xor eax, eax
mov cl, byte [eax + 0xc57800]
xor cl, 0x53
mov byte [eax + 0xc57fd0], cl
inc eax
cmp eax, 0x17
jb 0xbdbd5d
mov eax, 0xc57fd0
ret

Function at 0xbdc025
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc586b0], 1
mov edx, 0x7853
jne 0xbdc0bc
or dword [0xc586b0], 1
lea ecx, [edx + 0x23]
mov eax, ecx
mov word [0xc57818], ax
add eax, 0xffffff8d
mov word [0xc5781a], ax
push esi
lea eax, [edx - 0x32]
mov esi, eax
add eax, 0x11
mov word [0xc57824], ax
lea eax, [edx - 0x15]
mov word [0xc57826], ax
add eax, 0xffffffc6
mov word [0xc57828], ax
lea eax, [edx + 0x12]
mov word [0xc5781c], si
add esi, 0x1b
mov word [0xc5782a], ax
add eax, 2
mov word [0xc5782c], ax
lea eax, [edx + 0xd]
mov word [0xc5782e], ax
mov eax, edx
mov word [0xc5781e], si
mov dword [0xc57820], 0x78217834
mov dword [0xc57830], 0x78767861
mov word [0xc57834], ax
pop esi
xor eax, eax
mov ecx, edx
xor cx, word [eax + 0xc57818]
add eax, 2
mov word [eax + 0xc57fe6], cx
cmp eax, 0x1e
jb 0xbdc0be
mov eax, 0xc57fe8
ret

Function at 0xbdc0dc
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc586ac], 1
mov ecx, 0x7853
jne 0xbdc11d
or dword [0xc586ac], 1
lea eax, [ecx - 0x2b]
mov word [0xc57838], ax
add eax, 0xfffffffb
mov word [0xc5783a], ax
lea eax, [ecx - 0x1e]
mov word [0xc5783c], ax
add eax, 0xfffffff9
mov word [0xc5783e], ax
mov eax, ecx
mov word [0xc57840], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0xc57838]
add eax, 2
mov word [eax + 0xc58006], dx
cmp eax, 0xa
jb 0xbdc11f
mov eax, 0xc58008
ret
Function at 0xbdc13d
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc586a8], 1
mov ecx, 0x7853
jne 0xbdc190
or dword [0xc586a8], 1
lea eax, [ecx - 0x2b]
mov word [0xc57844], ax
add eax, 0xfffffffb
mov word [0xc57846], ax
lea eax, [ecx - 0x1e]
mov word [0xc57848], ax
add eax, 0x2b
mov word [0xc5784a], ax
lea eax, [ecx + 0xe]
mov word [0xc5784c], ax
add eax, 0xffffffcd
mov word [0xc5784e], ax
mov eax, ecx
mov word [0xc57850], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0xc57844]
add eax, 2
mov word [eax + 0xc58012], dx
cmp eax, 0xe
jb 0xbdc192
mov eax, 0xc58014
ret

Function at 0xbdc1b0
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc586a4], 1
mov ecx, 0x7853
jne 0xbdc203
or dword [0xc586a4], 1
lea eax, [ecx - 0x2b]
mov word [0xc57854], ax
add eax, 0xfffffffb
mov word [0xc57856], ax
lea eax, [ecx - 0x1e]
mov word [0xc57858], ax
add eax, 0x30
mov word [0xc5785a], ax
lea eax, [ecx + 0x14]
mov word [0xc5785c], ax
add eax, 0xffffffc7
mov word [0xc5785e], ax
mov eax, ecx
mov word [0xc57860], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0xc57854]
add eax, 2
mov word [eax + 0xc58022], dx
cmp eax, 0xe
jb 0xbdc205
mov eax, 0xc58024
ret

Function at 0xbdc223
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc586a0], 1
mov ecx, 0x7853
jne 0xbdc264
or dword [0xc586a0], 1
lea eax, [ecx - 0x2b]
mov word [0xc57864], ax
add eax, 0xfffffffb
mov word [0xc57866], ax
lea eax, [ecx - 0x1e]
mov word [0xc57868], ax
add eax, 0xfffffff9
mov word [0xc5786a], ax
mov eax, ecx
mov word [0xc5786c], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0xc57864]
add eax, 2
mov word [eax + 0xc58032], dx
cmp eax, 0xa
jb 0xbdc266
mov eax, 0xc58034
ret

Function at 0xbdc284
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc5869c], 1
mov ecx, 0x7853
jne 0xbdc2d7
or dword [0xc5869c], 1
lea eax, [ecx - 0x2b]
mov word [0xc57870], ax
add eax, 0xfffffffb
mov word [0xc57872], ax
lea eax, [ecx - 0x1e]
mov word [0xc57874], ax
add eax, 0x2b
mov word [0xc57876], ax
lea eax, [ecx + 0xe]
mov word [0xc57878], ax
add eax, 0xffffffcd
mov word [0xc5787a], ax
mov eax, ecx
mov word [0xc5787c], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0xc57870]
add eax, 2
mov word [eax + 0xc5803e], dx
cmp eax, 0xe
jb 0xbdc2d9
mov eax, 0xc58040
ret