joyce8/EMBER2024-capa huggingface dataset:
Function at 0xb1cffe
Capabilities:
Encode data using xor

Disassembly:
test byte [0xbb2690], 1
jne 0xb1d03c
or dword [0xbb2690], 1
mov dword [0xbb19d0], 0x162e0a30
mov dword [0xbb19d4], 0x294d4f0e
mov dword [0xbb19d8], 0x1c1a160b
mov word [0xbb19dc], 0xa0a
mov byte [0xbb19de], 0x79
xor eax, eax
mov cl, byte [eax + 0xbb19d0]
xor cl, 0x79
mov byte [eax + 0xbb2198], cl
inc eax
cmp eax, 0xf
jb 0xb1d03e
mov eax, 0xbb2198
ret

Function at 0xb1d154
Capabilities:
Encode data using xor

Disassembly:
test byte [0xbb268c], 1
jne 0xb1d1bd
or dword [0xbb268c], 1
mov dword [0xbb19e0], 0x16151538
mov dword [0xbb19e4], 0x1c0d181a
mov dword [0xbb19e8], 0x301d1738
mov dword [0xbb19ec], 0x100d1017
mov dword [0xbb19f0], 0x3101518
mov dword [0xbb19f4], 0x1d102a1c
mov dword [0xbb19f8], 0x10181f59
mov dword [0xbb19fc], 0x431d1c15
mov word [0xbb1a00], 0x7959
xor eax, eax
mov cl, byte [eax + 0xbb19e0]
xor cl, 0x79
mov byte [eax + 0xbb21a8], cl
inc eax
cmp eax, 0x22
jb 0xb1d1bf
mov eax, 0xbb21a8
ret

Function at 0xb1d1da
Capabilities:
Encode data using xor

Disassembly:
test byte [0xbb2688], 1
jne 0xb1d239
or dword [0xbb2688], 1
mov dword [0xbb1a04], 0x1a1c113a
mov dword [0xbb1a08], 0x12162d12
mov dword [0xbb1a0c], 0x1c34171c
mov dword [0xbb1a10], 0xb1c1b14
mov dword [0xbb1a14], 0x910110a
mov dword [0xbb1a18], 0x10181f59
mov dword [0xbb1a1c], 0x431d1c15
mov word [0xbb1a20], 0x7959
xor eax, eax
mov cl, byte [eax + 0xbb1a04]
xor cl, 0x79
mov byte [eax + 0xbb21cc], cl
inc eax
cmp eax, 0x1e
jb 0xb1d23b
mov eax, 0xbb21cc
ret

Function at 0xb1d49f
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0xbb267c], 1
jne 0xb1d526
or dword [0xbb267c], 1
mov dword [0xbb1a38], 0x1717183a
mov dword [0xbb1a3c], 0x8590d16
mov dword [0xbb1a40], 0xb1c0c
mov dword [0xbb1a44], 0x4f591859
mov dword [0xbb1a48], 0x101b594d
mov dword [0xbb1a4c], 0x100f590d
mov dword [0xbb1a50], 0x16590e1c
mov dword [0xbb1a54], 0x4b4a5917
mov dword [0xbb1a58], 0xd101b59
mov dword [0xbb1a5c], 0x17100e59
mov dword [0xbb1a60], 0xa0e161d
mov byte [0xbb1a64], 0x79
mov cl, byte [eax + 0xbb1a38]
xor cl, 0x79
mov byte [eax + 0xbb2200], cl
inc eax
cmp eax, 0x2d
jb 0xb1d526
mov eax, 0xbb2200
ret

Function at 0xb1d541
Capabilities:
Encode data using xor

Disassembly:
test byte [0xbb2678], 1
jne 0xb1d5f1
or dword [0xbb2678], 1
push ebx
push esi
mov eax, 0xd831
mov word [0xbb1a68], ax
inc eax
mov word [0xbb1a6a], ax
push edi
mov edi, 0xd83c
mov eax, edi
mov word [0xbb1a6c], ax
add eax, 0xffffffe4
mov word [0xbb1a6e], ax
lea esi, [edi - 0x16]
mov eax, esi
mov word [0xbb1a70], ax
lea edx, [edi - 7]
mov eax, edx
mov word [0xbb1a72], ax
inc eax
mov word [0xbb1a74], ax
lea ecx, [edi - 2]
mov eax, ecx
mov word [0xbb1a76], ax
add eax, 0xfffffffe
mov ebx, eax
lea eax, [edi - 0xc]
pop edi
mov word [0xbb1a86], ax
add eax, 0x49
pop esi
mov word [0xbb1a78], bx
mov dword [0xbb1a7a], 0xd826d835
mov dword [0xbb1a7e], 0xd838d834
mov dword [0xbb1a82], 0xd831d83a
mov dword [0xbb1a88], 0xd83cd837
mov word [0xbb1a8c], ax
pop ebx
xor eax, eax
mov ecx, 0xd879
xor cx, word [eax + 0xbb1a68]
add eax, 2
mov word [eax + 0xbb222e], cx
cmp eax, 0x26
jb 0xb1d5f3
mov eax, 0xbb2230
ret
Function at 0xb1d614
Capabilities:
Encode data using xor

Disassembly:
test byte [0xbb2674], 1
jne 0xb1d6c1
or dword [0xbb2674], 1
mov eax, 0xd831
mov word [0xbb1a90], ax
inc eax
mov word [0xbb1a92], ax
mov ecx, 0xd83c
push ebx
mov eax, ecx
mov word [0xbb1a94], ax
add eax, 0xffffffe4
push esi
mov word [0xbb1a96], ax
lea esi, [ecx - 0x16]
mov eax, esi
mov word [0xbb1a98], ax
add eax, 0x14
mov word [0xbb1a9a], ax
lea edx, [ecx - 0x10]
mov eax, edx
mov word [0xbb1a9c], ax
dec eax
mov ebx, eax
mov word [0xbb1a9e], bx
mov word [0xbb1aa0], bx
mov ebx, ecx
mov word [0xbb1aa2], bx
add ebx, 0xfffffffb
mov word [0xbb1ab0], ax
lea eax, [ecx + 0x3d]
pop esi
mov word [0xbb1aa4], bx
mov dword [0xbb1aa6], 0xd826d82d
mov word [0xbb1aaa], dx
mov dword [0xbb1aac], 0xd83cd82a
mov word [0xbb1ab2], ax
pop ebx
xor eax, eax
mov ecx, 0xd879
xor cx, word [eax + 0xbb1a90]
add eax, 2
mov word [eax + 0xbb2256], cx
cmp eax, 0x24
jb 0xb1d6c3
mov eax, 0xbb2258
ret

Function at 0xb1d6e4
Capabilities:
Encode data using xor

Disassembly:
test byte [0xbb2670], 1
mov edx, 0xd879
jne 0xb1d756
or dword [0xbb2670], 1
lea eax, [edx - 0x48]
mov word [0xbb1ab4], ax
inc eax
mov word [0xbb1ab6], ax
lea ecx, [edx - 0x3d]
mov eax, ecx
mov word [0xbb1ab8], ax
add eax, 0xffffffe4
mov word [0xbb1aba], ax
lea eax, [edx - 0x53]
mov word [0xbb1abc], ax
add eax, 6
mov word [0xbb1abe], ax
lea eax, [edx - 0x4f]
push esi
mov esi, eax
mov eax, edx
mov word [0xbb1ac0], si
mov word [0xbb1ac2], cx
mov dword [0xbb1ac4], 0xd82ad82b
mov word [0xbb1ac8], ax
pop esi
xor eax, eax
mov ecx, edx
xor cx, word [eax + 0xbb1ab4]
add eax, 2
mov word [eax + 0xbb227a], cx
cmp eax, 0x16
jb 0xb1d758
mov eax, 0xbb227c
ret

Function at 0xb1d776
Capabilities:
Encode data using xor

Disassembly:
test byte [0xbb266c], 1
jne 0xb1d836
or dword [0xbb266c], 1
push ebx
mov eax, 0xd831
mov word [0xbb1acc], ax
inc eax
mov word [0xbb1ace], ax
push esi
mov esi, 0xd83c
mov eax, esi
mov word [0xbb1ad0], ax
add eax, 0xffffffe4
mov word [0xbb1ad2], ax
lea edx, [esi - 0x16]
lea ecx, [esi - 2]
mov eax, edx
mov word [0xbb1ad4], ax
mov eax, ecx
mov word [0xbb1ad6], ax
add eax, 0xfffffff2
mov word [0xbb1ad8], ax
lea eax, [esi - 0x11]
mov ebx, eax
add eax, 0xc
mov esi, eax
lea eax, [edx + 0x19]
mov word [0xbb1aec], ax
add eax, 0xfffffff1
mov word [0xbb1aee], ax
lea eax, [edx + 0x18]
mov word [0xbb1ae0], si
mov word [0xbb1af0], ax
add eax, 0x3b
pop esi
mov word [0xbb1ada], bx
mov dword [0xbb1adc], 0xd83cd82b
mov dword [0xbb1ae2], 0xd826d82d
mov word [0xbb1ae6], cx
mov dword [0xbb1ae8], 0xd837d836
mov word [0xbb1af2], ax
pop ebx
xor eax, eax
mov ecx, 0xd879
xor cx, word [eax + 0xbb1acc]
add eax, 2
mov word [eax + 0xbb2292], cx
cmp eax, 0x28
jb 0xb1d838
mov eax, 0xbb2294
ret
Function at 0xb1d859
Capabilities:
Encode data using xor

Disassembly:
test byte [0xbb2668], 1
jne 0xb1d908
or dword [0xbb2668], 1
mov eax, 0xd831
mov word [0xbb1af4], ax
inc eax
mov word [0xbb1af6], ax
mov edx, 0xd83c
mov eax, edx
mov word [0xbb1af8], ax
add eax, 0xffffffe4
mov word [0xbb1afa], ax
lea ecx, [edx - 0x16]
mov eax, ecx
mov word [0xbb1afc], ax
add eax, 0x14
mov word [0xbb1afe], ax
lea eax, [edx - 7]
mov word [0xbb1b00], ax
add eax, 3
mov word [0xbb1b02], ax
lea eax, [edx - 0x12]
push edi
mov edi, eax
add eax, 0xc
mov ecx, eax
mov word [0xbb1b12], ax
lea eax, [edx - 0xf]
mov word [0xbb1b14], ax
add eax, 0x4c
mov word [0xbb1b04], di
mov word [0xbb1b06], di
mov dword [0xbb1b08], 0xd82ad83c
mov dword [0xbb1b0c], 0xd82bd826
mov word [0xbb1b10], cx
mov word [0xbb1b16], ax
pop edi
xor eax, eax
mov ecx, 0xd879
xor cx, word [eax + 0xbb1af4]
add eax, 2
mov word [eax + 0xbb22ba], cx
cmp eax, 0x24
jb 0xb1d90a
mov eax, 0xbb22bc
ret

Function at 0xb1dcd6
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0xbb2650], 1
jne 0xb1dd2d
or dword [0xbb2650], 1
mov dword [0xbb1ba0], 0x3a1e1c2b
mov dword [0xbb1ba4], 0xd181c0b
mov dword [0xbb1ba8], 0x1c321c
mov dword [0xbb1bac], 0x5051013c
mov dword [0xbb1bb0], 0x10181f59
mov dword [0xbb1bb4], 0x431d1c15
mov word [0xbb1bb8], 0x7959
mov cl, byte [eax + 0xbb1ba0]
xor cl, 0x79
mov byte [eax + 0xbb2318], cl
inc eax
cmp eax, 0x1a
jb 0xb1dd2d
mov eax, 0xbb2318
ret

Function at 0xb1de0d
Capabilities:
Encode data using xor

Disassembly:
test byte [0xbb264c], 1
jne 0xb1de73
or dword [0xbb264c], 1
mov dword [0xbb1bbc], 0x140c173c
mov dword [0xbb1bc0], 0xd180b1c
mov dword [0xbb1bc4], 0x59171610
mov dword [0xbb1bc8], 0x1c1d1710
mov dword [0xbb1bcc], 0xc165901
mov dword [0xbb1bd0], 0x1f16590d
mov dword [0xbb1bd4], 0x17180b59
mov word [0xbb1bd8], 0x1c1e
mov byte [0xbb1bda], 0x79
xor eax, eax
mov cl, byte [eax + 0xbb1bbc]
xor cl, 0x79
mov byte [eax + 0xbb2334], cl
inc eax
cmp eax, 0x1f
jb 0xb1de75
mov eax, 0xbb2334
ret

Function at 0xb1de90
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0xbb2648], 1
jne 0xb1dede
or dword [0xbb2648], 1
mov dword [0xbb1bdc], 0x3c1e1c2b
mov dword [0xbb1be0], 0x32140c17
mov dword [0xbb1be4], 0x13c001c
mov dword [0xbb1be8], 0x1f595051
mov dword [0xbb1bec], 0x1c151018
mov dword [0xbb1bf0], 0x7959431d
mov cl, byte [eax + 0xbb1bdc]
xor cl, 0x79
mov byte [eax + 0xbb2354], cl
inc eax
cmp eax, 0x18
jb 0xb1dede
mov eax, 0xbb2354
ret

Function at 0xb1e041
Capabilities:
Encode data using xor

Disassembly:
test byte [0xbb2644], 1
jne 0xb1e076
or dword [0xbb2644], 1
mov dword [0xbb1bf4], 0x15150c37
mov dword [0xbb1bf8], 0x17161a59
mov dword [0xbb1bfc], 0xd011c0d
mov byte [0xbb1c00], 0x79
xor eax, eax
mov cl, byte [eax + 0xbb1bf4]
xor cl, 0x79
mov byte [eax + 0xbb236c], cl
inc eax
cmp eax, 0xd
jb 0xb1e078
mov eax, 0xbb236c
ret
Function at 0xb1e093
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0xbb2640], 1
jne 0xb1e0e1
or dword [0xbb2640], 1
mov dword [0xbb1c04], 0x361e1c2b
mov dword [0xbb1c08], 0x32171c09
mov dword [0xbb1c0c], 0x13c001c
mov dword [0xbb1c10], 0x1f595051
mov dword [0xbb1c14], 0x1c151018
mov dword [0xbb1c18], 0x7959431d
mov cl, byte [eax + 0xbb1c04]
xor cl, 0x79
mov byte [eax + 0xbb237c], cl
inc eax
cmp eax, 0x18
jb 0xb1e0e1
mov eax, 0xbb237c
ret

Function at 0xb1e0fc
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0xbb263c], 1
jne 0xb1e15a
or dword [0xbb263c], 1
mov dword [0xbb1c1c], 0x281e1c2b
mov dword [0xbb1c20], 0xb1c0c
mov dword [0xbb1c24], 0x161f1730
mov dword [0xbb1c28], 0x51001c32
mov dword [0xbb1c2c], 0x181f5950
mov dword [0xbb1c30], 0x1d1c1510
mov word [0xbb1c34], 0x5943
mov byte [0xbb1c36], 0x79
mov cl, byte [eax + 0xbb1c1c]
xor cl, 0x79
mov byte [eax + 0xbb2394], cl
inc eax
cmp eax, 0x1b
jb 0xb1e15a
mov eax, 0xbb2394
ret

Function at 0xb1e24b
Capabilities:
Encode data using xor

Disassembly:
test byte [0xbb2638], 1
jne 0xb1e2b1
or dword [0xbb2638], 1
mov dword [0xbb1c38], 0x140c173c
mov dword [0xbb1c3c], 0xd180b1c
mov dword [0xbb1c40], 0x59171610
mov dword [0xbb1c44], 0x1c1d1710
mov dword [0xbb1c48], 0xc165901
mov dword [0xbb1c4c], 0x1f16590d
mov dword [0xbb1c50], 0x17180b59
mov word [0xbb1c54], 0x1c1e
mov byte [0xbb1c56], 0x79
xor eax, eax
mov cl, byte [eax + 0xbb1c38]
xor cl, 0x79
mov byte [eax + 0xbb23b0], cl
inc eax
cmp eax, 0x1f
jb 0xb1e2b3
mov eax, 0xbb23b0
ret

Function at 0xb1e2ce
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0xbb2634], 1
jne 0xb1e32c
or dword [0xbb2634], 1
mov dword [0xbb1c58], 0x281e1c2b
mov dword [0xbb1c5c], 0xb1c0c
mov dword [0xbb1c60], 0x161f1730
mov dword [0xbb1c64], 0x51001c32
mov dword [0xbb1c68], 0x181f5950
mov dword [0xbb1c6c], 0x1d1c1510
mov word [0xbb1c70], 0x5943
mov byte [0xbb1c72], 0x79
mov cl, byte [eax + 0xbb1c58]
xor cl, 0x79
mov byte [eax + 0xbb23d0], cl
inc eax
cmp eax, 0x1b
jb 0xb1e32c
mov eax, 0xbb23d0
ret

Function at 0xb1e48c
Capabilities:
Encode data using xor

Disassembly:
test byte [0xbb2630], 1
jne 0xb1e4c1
or dword [0xbb2630], 1
mov dword [0xbb1c74], 0x15150c37
mov dword [0xbb1c78], 0x17161a59
mov dword [0xbb1c7c], 0xd011c0d
mov byte [0xbb1c80], 0x79
xor eax, eax
mov cl, byte [eax + 0xbb1c74]
xor cl, 0x79
mov byte [eax + 0xbb23ec], cl
inc eax
cmp eax, 0xd
jb 0xb1e4c3
mov eax, 0xbb23ec
ret

Function at 0xb1e4de
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0xbb262c], 1
jne 0xb1e52c
or dword [0xbb262c], 1
mov dword [0xbb1c84], 0x361e1c2b
mov dword [0xbb1c88], 0x32171c09
mov dword [0xbb1c8c], 0x13c001c
mov dword [0xbb1c90], 0x1f595051
mov dword [0xbb1c94], 0x1c151018
mov dword [0xbb1c98], 0x7959431d
mov cl, byte [eax + 0xbb1c84]
xor cl, 0x79
mov byte [eax + 0xbb23fc], cl
inc eax
cmp eax, 0x18
jb 0xb1e52c
mov eax, 0xbb23fc
ret
Function at 0xb1e547
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0xbb2628], 1
jne 0xb1e5a5
or dword [0xbb2628], 1
mov dword [0xbb1c9c], 0x281e1c2b
mov dword [0xbb1ca0], 0xb1c0c
mov dword [0xbb1ca4], 0x161f1730
mov dword [0xbb1ca8], 0x51001c32
mov dword [0xbb1cac], 0x181f5950
mov dword [0xbb1cb0], 0x1d1c1510
mov word [0xbb1cb4], 0x5943
mov byte [0xbb1cb6], 0x79
mov cl, byte [eax + 0xbb1c9c]
xor cl, 0x79
mov byte [eax + 0xbb2414], cl
inc eax
cmp eax, 0x1b
jb 0xb1e5a5
mov eax, 0xbb2414
ret

Function at 0xb1e851
Capabilities:
Encode data using xor

Disassembly:
test byte [0xbb2624], 1
mov ecx, 0xd879
jne 0xb1e8bf
or dword [0xbb2624], 1
lea eax, [ecx - 0x28]
mov word [0xbb1cb8], ax
add eax, 0xffffffec
mov word [0xbb1cba], ax
lea eax, [ecx - 0x5d]
mov word [0xbb1cbc], ax
add eax, 3
mov word [0xbb1cbe], ax
lea eax, [ecx - 0x61]
mov word [0xbb1cc0], ax
add eax, 0xfffffff4
mov word [0xbb1cc2], ax
lea eax, [ecx - 0x64]
mov word [0xbb1cc4], ax
add eax, 0xfffffff8
mov word [0xbb1cc6], ax
lea eax, [ecx - 0x29]
mov word [0xbb1cc8], ax
mov eax, ecx
mov word [0xbb1cca], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0xbb1cb8]
add eax, 2
mov word [eax + 0xbb242e], dx
cmp eax, 0x14
jb 0xb1e8c1
mov eax, 0xbb2430
ret

Function at 0xb1e8df
Capabilities:
Encode data using xor

Disassembly:
test byte [0xbb2620], 1
mov ecx, 0xd879
jne 0xb1e94d
or dword [0xbb2620], 1
lea eax, [ecx - 0x28]
mov word [0xbb1ccc], ax
add eax, 0xffffffcc
mov word [0xbb1cce], ax
lea eax, [ecx - 0x5d]
mov word [0xbb1cd0], ax
add eax, 3
mov word [0xbb1cd2], ax
lea eax, [ecx - 0x61]
mov word [0xbb1cd4], ax
add eax, 0xfffffff4
mov word [0xbb1cd6], ax
lea eax, [ecx - 0x64]
mov word [0xbb1cd8], ax
add eax, 0xfffffff8
mov word [0xbb1cda], ax
lea eax, [ecx - 0x29]
mov word [0xbb1cdc], ax
mov eax, ecx
mov word [0xbb1cde], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0xbb1ccc]
add eax, 2
mov word [eax + 0xbb2442], dx
cmp eax, 0x14
jb 0xb1e94f
mov eax, 0xbb2444
ret

Function at 0xb1e96d
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0xbb261c], 1
jne 0xb1e9bb
or dword [0xbb261c], 1
mov dword [0xbb1ce0], 0x361e1c2b
mov dword [0xbb1ce4], 0x32171c09
mov dword [0xbb1ce8], 0x13c001c
mov dword [0xbb1cec], 0x1f595051
mov dword [0xbb1cf0], 0x1c151018
mov dword [0xbb1cf4], 0x7959431d
mov cl, byte [eax + 0xbb1ce0]
xor cl, 0x79
mov byte [eax + 0xbb2458], cl
inc eax
cmp eax, 0x18
jb 0xb1e9bb
mov eax, 0xbb2458
ret

Function at 0xb1e9d6
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0xbb2618], 1
jne 0xb1ea34
or dword [0xbb2618], 1
mov dword [0xbb1cf8], 0x281e1c2b
mov dword [0xbb1cfc], 0xb1c0c
mov dword [0xbb1d00], 0xc15182f
mov dword [0xbb1d04], 0x51013c1c
mov dword [0xbb1d08], 0x181f5950
mov dword [0xbb1d0c], 0x1d1c1510
mov word [0xbb1d10], 0x5943
mov byte [0xbb1d12], 0x79
mov cl, byte [eax + 0xbb1cf8]
xor cl, 0x79
mov byte [eax + 0xbb2470], cl
inc eax
cmp eax, 0x1b
jb 0xb1ea34
mov eax, 0xbb2470
ret
Function at 0xb1ea4f
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0xbb2614], 1
jne 0xb1eaad
or dword [0xbb2614], 1
mov dword [0xbb1d14], 0x281e1c2b
mov dword [0xbb1d18], 0xb1c0c
mov dword [0xbb1d1c], 0xc15182f
mov dword [0xbb1d20], 0x51013c1c
mov dword [0xbb1d24], 0x181f5950
mov dword [0xbb1d28], 0x1d1c1510
mov word [0xbb1d2c], 0x5943
mov byte [0xbb1d2e], 0x79
mov cl, byte [eax + 0xbb1d14]
xor cl, 0x79
mov byte [eax + 0xbb248c], cl
inc eax
cmp eax, 0x1b
jb 0xb1eaad
mov eax, 0xbb248c
ret

Function at 0xb1ec27
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0xbb2610], 1
jne 0xb1ec75
or dword [0xbb2610], 1
mov dword [0xbb1d30], 0x361e1c2b
mov dword [0xbb1d34], 0x32171c09
mov dword [0xbb1d38], 0x13c001c
mov dword [0xbb1d3c], 0x1f595051
mov dword [0xbb1d40], 0x1c151018
mov dword [0xbb1d44], 0x7959431d
mov cl, byte [eax + 0xbb1d30]
xor cl, 0x79
mov byte [eax + 0xbb24a8], cl
inc eax
cmp eax, 0x18
jb 0xb1ec75
mov eax, 0xbb24a8
ret

Function at 0xb1ec90
Capabilities:
Encode data using xor

Disassembly:
test byte [0xbb260c], 1
jne 0xb1ecf6
or dword [0xbb260c], 1
mov dword [0xbb1d48], 0x2a1e1c2b
mov dword [0xbb1d4c], 0x182f0d1c
mov dword [0xbb1d50], 0x3c1c0c15
mov dword [0xbb1d54], 0xd0a5101
mov dword [0xbb1d58], 0x1e17100b
mov dword [0xbb1d5c], 0x181f5950
mov dword [0xbb1d60], 0x1d1c1510
mov word [0xbb1d64], 0x5943
mov byte [0xbb1d66], 0x79
xor eax, eax
mov cl, byte [eax + 0xbb1d48]
xor cl, 0x79
mov byte [eax + 0xbb24c0], cl
inc eax
cmp eax, 0x1f
jb 0xb1ecf8
mov eax, 0xbb24c0
ret

Function at 0xb1ee62
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0xbb2608], 1
jne 0xb1eeb0
or dword [0xbb2608], 1
mov dword [0xbb1d68], 0x361e1c2b
mov dword [0xbb1d6c], 0x32171c09
mov dword [0xbb1d70], 0x13c001c
mov dword [0xbb1d74], 0x1f595051
mov dword [0xbb1d78], 0x1c151018
mov dword [0xbb1d7c], 0x7959431d
mov cl, byte [eax + 0xbb1d68]
xor cl, 0x79
mov byte [eax + 0xbb24e0], cl
inc eax
cmp eax, 0x18
jb 0xb1eeb0
mov eax, 0xbb24e0
ret

Function at 0xb1eecb
Capabilities:
Encode data using xor

Disassembly:
test byte [0xbb2604], 1
jne 0xb1ef2a
or dword [0xbb2604], 1
mov dword [0xbb1d80], 0x2a1e1c2b
mov dword [0xbb1d84], 0x182f0d1c
mov dword [0xbb1d88], 0x3c1c0c15
mov dword [0xbb1d8c], 0xe1d5101
mov dword [0xbb1d90], 0x501d0b16
mov dword [0xbb1d94], 0x10181f59
mov dword [0xbb1d98], 0x431d1c15
mov word [0xbb1d9c], 0x7959
xor eax, eax
mov cl, byte [eax + 0xbb1d80]
xor cl, 0x79
mov byte [eax + 0xbb24f8], cl
inc eax
cmp eax, 0x1e
jb 0xb1ef2c
mov eax, 0xbb24f8
ret

Function at 0xb1f097
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0xbb2600], 1
jne 0xb1f113
or dword [0xbb2600], 1
mov dword [0xbb1da0], 0xd0a0c34
mov dword [0xbb1da4], 0x1c090a59
mov dword [0xbb1da8], 0x1f101a
mov dword [0xbb1dac], 0x17591859
mov dword [0xbb1db0], 0x1c541716
mov dword [0xbb1db4], 0xd0914
mov dword [0xbb1db8], 0x1b0c0a59
mov dword [0xbb1dbc], 0x59001c12
mov dword [0xbb1dc0], 0x100b0d0a
mov word [0xbb1dc4], 0x1e17
mov byte [0xbb1dc6], 0x79
mov cl, byte [eax + 0xbb1da0]
xor cl, 0x79
mov byte [eax + 0xbb2518], cl
inc eax
cmp eax, 0x27
jb 0xb1f113
mov eax, 0xbb2518
ret
Function at 0xb1f12e
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0xbb25fc], 1
jne 0xb1f17c
or dword [0xbb25fc], 1
mov dword [0xbb1dc8], 0x361e1c2b
mov dword [0xbb1dcc], 0x32171c09
mov dword [0xbb1dd0], 0x13c001c
mov dword [0xbb1dd4], 0x1f595051
mov dword [0xbb1dd8], 0x1c151018
mov dword [0xbb1ddc], 0x7959431d
mov cl, byte [eax + 0xbb1dc8]
xor cl, 0x79
mov byte [eax + 0xbb2540], cl
inc eax
cmp eax, 0x18
jb 0xb1f17c
mov eax, 0xbb2540
ret

Function at 0xb1f197
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0xbb25f8], 1
jne 0xb1f1eb
or dword [0xbb25f8], 1
mov dword [0xbb1de0], 0x1c3d312a
mov dword [0xbb1de4], 0x1c0d1c15
mov dword [0xbb1de8], 0x51001c32
mov dword [0xbb1dec], 0x181f5950
mov dword [0xbb1df0], 0x1d1c1510
mov word [0xbb1df4], 0x5943
mov byte [0xbb1df6], 0x79
mov cl, byte [eax + 0xbb1de0]
xor cl, 0x79
mov byte [eax + 0xbb2558], cl
inc eax
cmp eax, 0x17
jb 0xb1f1eb
mov eax, 0xbb2558
ret

Function at 0xb1f338
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0xbb25f4], 1
jne 0xb1f386
or dword [0xbb25f4], 1
mov dword [0xbb1df8], 0x361e1c2b
mov dword [0xbb1dfc], 0x32171c09
mov dword [0xbb1e00], 0x13c001c
mov dword [0xbb1e04], 0x1f595051
mov dword [0xbb1e08], 0x1c151018
mov dword [0xbb1e0c], 0x7959431d
mov cl, byte [eax + 0xbb1df8]
xor cl, 0x79
mov byte [eax + 0xbb2570], cl
inc eax
cmp eax, 0x18
jb 0xb1f386
mov eax, 0xbb2570
ret

Function at 0xb1f3a1
Capabilities:
Encode data using xor

Disassembly:
test byte [0xbb25f0], 1
jne 0xb1f3f4
or dword [0xbb25f0], 1
mov dword [0xbb1e10], 0x1c3d312a
mov dword [0xbb1e14], 0x1c0d1c15
mov dword [0xbb1e18], 0xc15182f
mov dword [0xbb1e1c], 0x5950511c
mov dword [0xbb1e20], 0x1510181f
mov dword [0xbb1e24], 0x59431d1c
mov byte [0xbb1e28], 0x79
xor eax, eax
mov cl, byte [eax + 0xbb1e10]
xor cl, 0x79
mov byte [eax + 0xbb2588], cl
inc eax
cmp eax, 0x19
jb 0xb1f3f6
mov eax, 0xbb2588
ret

Function at 0xb1f6cd
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0xbb25ec], 1
jne 0xb1f78a
or dword [0xbb25ec], 1
mov dword [0xbb1e30], 0x3d3a3b38
mov dword [0xbb1e34], 0x313e3f3c
mov dword [0xbb1e38], 0x35323330
mov dword [0xbb1e3c], 0x29363734
mov dword [0xbb1e40], 0x2d2a2b28
mov dword [0xbb1e44], 0x212e2f2c
mov dword [0xbb1e48], 0x1b182320
mov dword [0xbb1e4c], 0x1f1c1d1a
mov dword [0xbb1e50], 0x1310111e
mov dword [0xbb1e54], 0x17141512
mov dword [0xbb1e58], 0xb080916
mov dword [0xbb1e5c], 0xf0c0d0a
mov dword [0xbb1e60], 0x300010e
mov dword [0xbb1e64], 0x4a4b4849
mov dword [0xbb1e68], 0x4e4f4c4d
mov dword [0xbb1e6c], 0x56524041
mov byte [0xbb1e70], 0x79
mov cl, byte [eax + 0xbb1e30]
xor cl, 0x79
mov byte [eax + 0xbb25a8], cl
inc eax
cmp eax, 0x41
jb 0xb1f78a
mov eax, 0xbb25a8
ret
Function at 0xb1f835
Capabilities:
Encode data using base64

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, dword [ebp + 8]
push ebx
push esi
push edi
mov edi, eax
xor edx, edx
push 3
lea eax, [ecx + 2]
pop ebx
div ebx
mov esi, dword [ebp + 0x10]
shl eax, 2
inc eax
cmp dword [esi], eax
jae 0xb1f85f
mov dword [esi], eax
xor al, al
jmp 0xb1f937
mov eax, ecx
xor edx, edx
push 3
pop ecx
div ecx
mov esi, dword [ebp + 0xc]
mov ecx, dword [0xbac9b8]
xor edx, edx
imul eax, eax, 3
test eax, eax
je 0xb1f8db
dec eax
push 3
pop ebx
div ebx
inc eax
mov edx, eax
mov dword [ebp - 4], eax
imul edx, edx, 3
movzx eax, byte [edi]
shr eax, 2
mov al, byte [eax + ecx]
mov byte [esi], al
movzx eax, byte [edi + 1]
movzx ebx, byte [edi]
shr eax, 4
shl ebx, 4
add eax, ebx
and eax, 0x3f
mov al, byte [eax + ecx]
mov byte [esi + 1], al
movzx eax, byte [edi + 2]
movzx ebx, byte [edi + 1]
shr eax, 6
lea eax, [eax + ebx*4]
and eax, 0x3f
mov al, byte [eax + ecx]
mov byte [esi + 2], al
movzx eax, byte [edi + 2]
and eax, 0x3f
mov al, byte [eax + ecx]
mov byte [esi + 3], al
add esi, 4
add edi, 3
dec dword [ebp - 4]
jne 0xb1f889
cmp edx, dword [ebp + 8]
jae 0xb1f92a
movzx eax, byte [edi]
inc edx
cmp edx, dword [ebp + 8]
jae 0xb1f8ef
movzx edi, byte [edi + 1]
jmp 0xb1f8f1
xor edi, edi
mov ebx, eax
shr ebx, 2
and ebx, 0x3f
mov bl, byte [ebx + ecx]
mov byte [esi], bl
mov ebx, edi
shr ebx, 4
shl eax, 4
add ebx, eax
and ebx, 0x3f
mov al, byte [ebx + ecx]
mov byte [esi + 1], al
cmp edx, dword [ebp + 8]
jae 0xb1f91e
and edi, 0xf
mov cl, byte [ecx + edi*4]
jmp 0xb1f920
mov cl, 0x3d
mov byte [esi + 2], cl
mov byte [esi + 3], 0x3d
add esi, 4
mov eax, dword [ebp + 0x10]
mov byte [esi], 0
sub esi, dword [ebp + 0xc]
mov dword [eax], esi
mov al, 1
pop edi
pop esi
pop ebx
leave
ret
Function at 0xb28bf0
Capabilities:
Encode data using xor

Disassembly:
mov cl, byte [edx]
mov eax, dword [eax + 0x1f0]
test cl, cl
je 0xb28c12
lea esp, [esp]
imul eax, eax, 0xf4243
movzx ecx, cl
inc edx
xor eax, ecx
mov cl, byte [edx]
test cl, cl
jne 0xb28c00
ret