joyce8/EMBER2024-capa huggingface dataset:
Function at 0x13159d1
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x13b7de4], 1
jne 0x1315aa2
or dword [0x13b7de4], 1
mov dword [0x13b62d8], 0x1c3a3d03
mov dword [0x13b62dc], 0x7242020
mov dword [0x13b62e0], 0x241b2031
mov dword [0x13b62e4], 0x3a3b3d20
mov dword [0x13b62e8], 0x1a1d037c
mov dword [0x13b62ec], 0x400001c
mov dword [0x13b62f0], 0x41b0b
mov dword [0x13b62f4], 0xb1a1b1d
mov dword [0x13b62f8], 0x1171107
mov dword [0x13b62fc], 0xd001d06
mov dword [0x13b6300], 0x1518120b
mov dword [0x13b6304], 0x747d0713
mov dword [0x13b6308], 0x26743a3b
mov dword [0x13b630c], 0x31212531
mov dword [0x13b6310], 0x3c742027
mov dword [0x13b6314], 0x38303a35
mov dword [0x13b6318], 0x35327431
mov dword [0x13b631c], 0x3031383d
mov byte [0x13b6320], 0x54
mov cl, byte [eax + 0x13b62d8]
xor cl, 0x54
mov byte [eax + 0x13b6590], cl
inc eax
cmp eax, 0x49
jb 0x1315aa2
mov eax, 0x13b6590
ret

Function at 0x1315abd
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x13b7de0], 1
jne 0x1315b8d
or dword [0x13b7de0], 1
mov dword [0x13b6328], 0x1c3a3d03
mov dword [0x13b632c], 0x7242020
mov dword [0x13b6330], 0x241b2031
mov dword [0x13b6334], 0x3a3b3d20
mov dword [0x13b6338], 0x1a1d037c
mov dword [0x13b633c], 0x400001c
mov dword [0x13b6340], 0x41b0b
mov dword [0x13b6344], 0xb1a1b1d
mov dword [0x13b6348], 0x101a1107
mov dword [0x13b634c], 0x191d000b
mov dword [0x13b6350], 0x11b11
mov dword [0x13b6354], 0x3a3b747d
mov dword [0x13b6358], 0x25312674
mov dword [0x13b635c], 0x20273121
mov dword [0x13b6360], 0x3a353c74
mov dword [0x13b6364], 0x74313830
mov dword [0x13b6368], 0x383d3532
mov word [0x13b636c], 0x3031
mov byte [0x13b636e], 0x54
mov cl, byte [eax + 0x13b6328]
xor cl, 0x54
mov byte [eax + 0x13b65e0], cl
inc eax
cmp eax, 0x47
jb 0x1315b8d
mov eax, 0x13b65e0
ret

Function at 0x1315ba8
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b7ddc], 1
jne 0x1315c11
or dword [0x13b7ddc], 1
mov dword [0x13b6370], 0x1c3a3d03
mov dword [0x13b6374], 0x15242020
mov dword [0x13b6378], 0x31063030
mov dword [0x13b637c], 0x27312125
mov dword [0x13b6380], 0x35311c20
mov dword [0x13b6384], 0x27263130
mov dword [0x13b6388], 0x32747d7c
mov dword [0x13b638c], 0x31383d35
mov word [0x13b6390], 0x5430
xor eax, eax
mov cl, byte [eax + 0x13b6370]
xor cl, 0x54
mov byte [eax + 0x13b6628], cl
inc eax
cmp eax, 0x22
jb 0x1315c13
mov eax, 0x13b6628
ret

Function at 0x1315c2e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b7dd8], 1
jne 0x1315c81
or dword [0x13b7dd8], 1
mov dword [0x13b6394], 0x2420201c
mov dword [0x13b6398], 0x303a3107
mov dword [0x13b639c], 0x21253106
mov dword [0x13b63a0], 0x7c202731
mov dword [0x13b63a4], 0x3532747d
mov dword [0x13b63a8], 0x3031383d
mov byte [0x13b63ac], 0x54
xor eax, eax
mov cl, byte [eax + 0x13b6394]
xor cl, 0x54
mov byte [eax + 0x13b664c], cl
inc eax
cmp eax, 0x19
jb 0x1315c83
mov eax, 0x13b664c
ret
Function at 0x1315c9e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b7dd4], 1
jne 0x1315cf0
or dword [0x13b7dd4], 1
mov dword [0x13b63b0], 0x2420201c
mov dword [0x13b63b4], 0x26312105
mov dword [0x13b63b8], 0x323a1d2d
mov dword [0x13b63bc], 0x747d7c3b
mov dword [0x13b63c0], 0x383d3532
mov word [0x13b63c4], 0x3031
mov byte [0x13b63c6], 0x54
xor eax, eax
mov cl, byte [eax + 0x13b63b0]
xor cl, 0x54
mov byte [eax + 0x13b6668], cl
inc eax
cmp eax, 0x17
jb 0x1315cf2
mov eax, 0x13b6668
ret
Function at 0x13164d7
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b7dcc], 1
jne 0x1316547
or dword [0x13b7dcc], 1
mov dword [0x13b63cc], 0x1c3a3d03
mov dword [0x13b63d0], 0x5242020
mov dword [0x13b63d4], 0x2d263121
mov dword [0x13b63d8], 0x35203510
mov dword [0x13b63dc], 0x3d352215
mov dword [0x13b63e0], 0x38363538
mov dword [0x13b63e4], 0x747d7c31
mov dword [0x13b63e8], 0x383d3532
mov word [0x13b63ec], 0x3031
mov byte [0x13b63ee], 0x54
xor eax, eax
mov cl, byte [eax + 0x13b63cc]
xor cl, 0x54
mov byte [eax + 0x13b6684], cl
inc eax
cmp eax, 0x23
jb 0x1316549
mov eax, 0x13b6684
ret

Function at 0x1316564
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b7dc8], 1
jne 0x13165b9
or dword [0x13b7dc8], 1
mov dword [0x13b63f0], 0x31203a1d
mov dword [0x13b63f4], 0x20313a26
mov dword [0x13b63f8], 0x30353106
mov dword [0x13b63fc], 0x31383d12
mov dword [0x13b6400], 0x32747d7c
mov dword [0x13b6404], 0x31383d35
mov word [0x13b6408], 0x5430
xor eax, eax
mov cl, byte [eax + 0x13b63f0]
xor cl, 0x54
mov byte [eax + 0x13b66a8], cl
inc eax
cmp eax, 0x1a
jb 0x13165bb
mov eax, 0x13b66a8
ret

Function at 0x1317378
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b7dac], 1
jne 0x13173ff
or dword [0x13b7dac], 1
mov dword [0x13b66e0], 0x22773916
mov dword [0x13b66e4], 0x34322539
mov dword [0x13b66e8], 0x3e393038
mov dword [0x13b66ec], 0x7733322d
mov dword [0x13b66f0], 0x323c3823
mov dword [0x13b66f4], 0x36207739
mov dword [0x13b66f8], 0x38317724
mov dword [0x13b66fc], 0x77333922
mov dword [0x13b6700], 0x34772336
mov dword [0x13b6704], 0x3625363f
mov dword [0x13b6708], 0x25322334
mov word [0x13b670c], 0x5777
xor eax, eax
mov cl, byte [eax + 0x13b66e0]
xor cl, 0x57
mov byte [eax + 0x13b6830], cl
inc eax
cmp eax, 0x2e
jb 0x1317401
mov eax, 0x13b6830
ret
Function at 0x1317845
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b7da8], 1
jne 0x13178a1
or dword [0x13b7da8], 1
mov dword [0x13b6710], 0x24243e1a
mov dword [0x13b6714], 0x7730393e
mov dword [0x13b6718], 0x323b7736
mov dword [0x13b671c], 0x27772331
mov dword [0x13b6720], 0x39322536
mov dword [0x13b6724], 0x24323f23
mov word [0x13b6728], 0x243e
mov byte [0x13b672a], 0x57
xor eax, eax
mov cl, byte [eax + 0x13b6710]
xor cl, 0x57
mov byte [eax + 0x13b6860], cl
inc eax
cmp eax, 0x1b
jb 0x13178a3
mov eax, 0x13b6860
ret

Function at 0x13178be
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b7da4], 1
jne 0x1317927
or dword [0x13b7da4], 1
mov dword [0x13b672c], 0x77233819
mov dword [0x13b6730], 0x22383932
mov dword [0x13b6734], 0x38773f30
mov dword [0x13b6738], 0x36253227
mov dword [0x13b673c], 0x77243339
mov dword [0x13b6740], 0x3277393e
mov dword [0x13b6744], 0x3225272f
mov dword [0x13b6748], 0x383e2424
mov word [0x13b674c], 0x5739
xor eax, eax
mov cl, byte [eax + 0x13b672c]
xor cl, 0x57
mov byte [eax + 0x13b687c], cl
inc eax
cmp eax, 0x22
jb 0x1317929
mov eax, 0x13b687c
ret

Function at 0x1317944
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b7da0], 1
jne 0x13179a4
or dword [0x13b7da0], 1
mov dword [0x13b6750], 0x77383803
mov dword [0x13b6754], 0x2e39363a
mov dword [0x13b6758], 0x32273877
mov dword [0x13b675c], 0x33393625
mov dword [0x13b6760], 0x393e7724
mov dword [0x13b6764], 0x272f3277
mov dword [0x13b6768], 0x24243225
mov dword [0x13b676c], 0x5739383e
xor eax, eax
mov cl, byte [eax + 0x13b6750]
xor cl, 0x57
mov byte [eax + 0x13b68a0], cl
inc eax
cmp eax, 0x20
jb 0x13179a6
mov eax, 0x13b68a0
ret

Function at 0x13179c1
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b7d9c], 1
jne 0x1317a17
or dword [0x13b7d9c], 1
mov dword [0x13b6770], 0x24243e1a
mov dword [0x13b6774], 0x7730393e
mov dword [0x13b6778], 0x3e257736
mov dword [0x13b677c], 0x77233f30
mov dword [0x13b6780], 0x32253627
mov dword [0x13b6784], 0x323f2339
mov dword [0x13b6788], 0x57243e24
xor eax, eax
mov cl, byte [eax + 0x13b6770]
xor cl, 0x57
mov byte [eax + 0x13b68c0], cl
inc eax
cmp eax, 0x1c
jb 0x1317a19
mov eax, 0x13b68c0
ret

Function at 0x1317a34
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b7d98], 1
jne 0x1317aa5
or dword [0x13b7d98], 1
mov dword [0x13b678c], 0x25363902
mov dword [0x13b6790], 0x2738772e
mov dword [0x13b6794], 0x23362532
mov dword [0x13b6798], 0x3a772538
mov dword [0x13b679c], 0x77232422
mov dword [0x13b67a0], 0x3221363f
mov dword [0x13b67a4], 0x32393877
mov dword [0x13b67a8], 0x32273877
mov dword [0x13b67ac], 0x33393625
mov byte [0x13b67b0], 0x57
xor eax, eax
mov cl, byte [eax + 0x13b678c]
xor cl, 0x57
mov byte [eax + 0x13b68dc], cl
inc eax
cmp eax, 0x25
jb 0x1317aa7
mov eax, 0x13b68dc
ret
Function at 0x1317ac2
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b7d94], 1
jne 0x1317b3c
or dword [0x13b7d94], 1
mov dword [0x13b67b4], 0x36393e15
mov dword [0x13b67b8], 0x38772e25
mov dword [0x13b67bc], 0x36253227
mov dword [0x13b67c0], 0x77253823
mov dword [0x13b67c4], 0x2324223a
mov dword [0x13b67c8], 0x21363f77
mov dword [0x13b67cc], 0x20237732
mov dword [0x13b67d0], 0x27387738
mov dword [0x13b67d4], 0x39362532
mov word [0x13b67d8], 0x2433
mov byte [0x13b67da], 0x57
xor eax, eax
mov cl, byte [eax + 0x13b67b4]
xor cl, 0x57
mov byte [eax + 0x13b6904], cl
inc eax
cmp eax, 0x27
jb 0x1317b3e
mov eax, 0x13b6904
ret

Function at 0x1317b59
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b7d90], 1
jne 0x1317bc2
or dword [0x13b7d90], 1
mov dword [0x13b67dc], 0x36393e15
mov dword [0x13b67e0], 0x38772e25
mov dword [0x13b67e4], 0x36253227
mov dword [0x13b67e8], 0x77253823
mov dword [0x13b67ec], 0x77233839
mov dword [0x13b67f0], 0x3b273a3e
mov dword [0x13b67f4], 0x39323a32
mov dword [0x13b67f8], 0x6d333223
mov word [0x13b67fc], 0x5777
xor eax, eax
mov cl, byte [eax + 0x13b67dc]
xor cl, 0x57
mov byte [eax + 0x13b692c], cl
inc eax
cmp eax, 0x22
jb 0x1317bc4
mov eax, 0x13b692c
ret

Function at 0x1318af8
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b7d80], 1
mov edx, 0xac5a
jne 0x1318b8a
or dword [0x13b7d80], 1
lea ecx, [edx + 0x25]
push esi
mov eax, ecx
mov word [0x13b698c], ax
add eax, 0xffffff8a
mov esi, eax
mov word [0x13b698e], si
lea eax, [edx - 0x4c]
mov word [0x13b6994], ax
add eax, 0x11
mov esi, eax
mov word [0x13b6996], si
lea esi, [edx - 0x43]
mov word [0x13b6998], si
add esi, 7
mov word [0x13b699a], si
lea esi, [edx - 0x52]
mov word [0x13b699c], si
add esi, 0xb
mov eax, edx
mov word [0x13b699e], si
mov dword [0x13b6990], 0xac09ac03
mov dword [0x13b69a0], 0xac1fac0c
mov word [0x13b69a4], cx
mov word [0x13b69a6], ax
pop esi
xor eax, eax
mov ecx, edx
xor cx, word [eax + 0x13b698c]
add eax, 2
mov word [eax + 0x13b6a46], cx
cmp eax, 0x1c
jb 0x1318b8c
mov eax, 0x13b6a48
ret

Function at 0x1318baa
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b7d7c], 1
jne 0x1318c09
or dword [0x13b7d7c], 1
mov dword [0x13b69a8], 0xc2e3f1d
mov dword [0x13b69ac], 0x372f3635
mov dword [0x13b69b0], 0x3c34133f
mov dword [0x13b69b4], 0x3b372835
mov dword [0x13b69b8], 0x3435332e
mov dword [0x13b69bc], 0x333b1c7a
mov dword [0x13b69c0], 0x603e3f36
mov word [0x13b69c4], 0x5a7a
xor eax, eax
mov cl, byte [eax + 0x13b69a8]
xor cl, 0x5a
mov byte [eax + 0x13b6a64], cl
inc eax
cmp eax, 0x1e
jb 0x1318c0b
mov eax, 0x13b6a64
ret
Function at 0x1318de8
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b7d78], 1
jne 0x1319008
or dword [0x13b7d78], 1
push ebx
push esi
push edi
mov edi, 0xac12
mov eax, edi
mov word [0x13b69c8], ax
dec eax
mov word [0x13b69ca], ax
lea esi, [edi + 0xd]
mov eax, esi
mov word [0x13b69cc], ax
add eax, 0xffffffe4
mov word [0x13b69ce], ax
lea edx, [edi - 0xd]
mov eax, edx
mov word [0x13b69d0], ax
lea ecx, [edi + 4]
mov eax, ecx
mov word [0x13b69d2], ax
dec eax
mov word [0x13b69d4], ax
lea eax, [edi + 7]
mov word [0x13b69d6], ax
add eax, 2
mov ebx, eax
mov word [0x13b69d8], bx
mov word [0x13b69e0], ax
lea ebx, [edi + 5]
mov ecx, ebx
lea eax, [edi + 1]
mov word [0x13b69e6], ax
inc edx
mov eax, edx
mov word [0x13b69ec], ax
lea eax, [edi - 9]
mov word [0x13b69ee], ax
mov word [0x13b69de], cx
add ecx, 0x1e
mov eax, ecx
mov word [0x13b69f0], ax
lea eax, [edi + 0x2a]
mov word [0x13b69f2], ax
add eax, 0xfffffff2
mov word [0x13b69f4], ax
lea eax, [edi + 0x1b]
add edi, 0x29
mov word [0x13b69f6], ax
mov eax, edi
mov word [0x13b69f8], ax
lea eax, [esi + 9]
mov esi, eax
mov word [0x13b69fa], si
add esi, 0x17
mov word [0x13b6a00], bx
mov word [0x13b69fc], si
mov esi, edx
mov word [0x13b69fe], si
lea esi, [ebx + 0x1c]
mov ebx, esi
mov word [0x13b6a02], bx
add ebx, 6
mov word [0x13b6a04], bx
mov ebx, eax
mov word [0x13b6a06], bx
mov ebx, ecx
mov word [0x13b6a08], bx
lea ebx, [eax + 1]
mov word [0x13b6a0a], bx
mov ebx, ecx
mov word [0x13b6a0c], bx
lea ebx, [eax + 0x14]
mov word [0x13b6a0e], bx
add ebx, 0xfffffff2
mov word [0x13b6a10], bx
mov ebx, edx
mov word [0x13b6a12], bx
mov dword [0x13b69da], 0xac05ac16
mov dword [0x13b69e2], 0xac12ac19
mov dword [0x13b69e8], 0xac1fac14
lea ebx, [eax - 0xf]
mov word [0x13b6a14], bx
mov ebx, eax
mov word [0x13b6a16], bx
add ebx, 0xfffffffb
mov word [0x13b6a18], bx
lea ebx, [eax + 2]
mov eax, edi
mov word [0x13b6a24], ax
mov eax, ebx
mov word [0x13b6a26], ax
add eax, 8
mov ecx, eax
mov eax, esi
mov word [0x13b6a36], ax
inc eax
mov word [0x13b6a38], ax
lea eax, [esi + 0xc]
mov word [0x13b6a3a], ax
add eax, 0xffffffde
mov word [0x13b6a3c], ax
lea eax, [esi + 0xb]
pop edi
mov word [0x13b6a42], ax
add eax, 0x1c
pop esi
mov word [0x13b6a1a], bx
mov dword [0x13b6a1c], 0xac35ac2e
mov dword [0x13b6a20], 0xac28ac3d
mov word [0x13b6a28], cx
mov dword [0x13b6a2a], 0xac06ac23
mov dword [0x13b6a2e], 0xac3bac17
mov dword [0x13b6a32], 0xac32ac39
mov dword [0x13b6a3e], 0xac33ac2f
mov word [0x13b6a44], ax
pop ebx
xor eax, eax
mov ecx, 0xac5a
xor cx, word [eax + 0x13b69c8]
add eax, 2
mov word [eax + 0x13b6a86], cx
cmp eax, 0x7e
jb 0x131900a
mov eax, 0x13b6a88
ret
Function at 0x1319aac
Capabilities:
Hash data with md5

Disassembly:
and dword [eax], 0
and dword [eax + 4], 0
mov dword [eax + 8], 0x67452301
mov dword [eax + 0xc], 0xefcdab89
mov dword [eax + 0x10], 0x98badcfe
mov dword [eax + 0x14], 0x10325476
ret

Function at 0x1319c6e
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
or eax, 0xffffffff
cmp dword [ebp + 8], 0
je 0x1319cb0
push esi
mov cl, byte [edx]
dec dword [ebp + 8]
movzx ecx, cl
mov esi, ecx
xor esi, eax
and esi, 0xf
shr eax, 4
xor eax, dword [esi*4 + 0x139fee0]
shr ecx, 4
mov esi, eax
and esi, 0xf
xor ecx, esi
shr eax, 4
xor eax, dword [ecx*4 + 0x139fee0]
inc edx
cmp dword [ebp + 8], 0
jne 0x1319c7b
pop esi
not eax
pop ebp
ret

Function at 0x131b8fb
Capabilities:
Enumerate pe sections

Disassembly:
push ebx
xor ebx, ebx
push edi
cmp ecx, ebx
je 0x131b920
cmp dword [ecx + 0x38], ebx
je 0x131b920
cmp eax, dword [ecx + 0x10]
jae 0x131b920
cmp dword [ecx + 0x14], 1
jne 0x131b920
mov edx, dword [ecx + 0x38]
mov edi, dword [edx + 0x10]
mov edi, dword [edi + eax*4]
add edi, dword [edx]
jmp 0x131b922
xor edi, edi
cmp edi, ebx
je 0x131ba05
cmp esi, ebx
je 0x131ba05
mov dword [esi], eax
mov ecx, dword [ecx + 0x38]
mov ecx, dword [ecx + 0x10]
mov eax, dword [ecx + eax*4]
mov dword [esi + 4], eax
mov ax, word [edi + 4]
mov word [esi + 8], ax
mov ax, word [edi + 6]
mov word [esi + 0xa], ax
mov ax, word [edi + 8]
mov word [esi + 0xc], ax
mov ax, word [edi + 0xa]
mov word [esi + 0xe], ax
movzx eax, word [edi + 0xe]
movzx edx, word [edi + 0xc]
call fcn.0131b0a4
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], edx
mov eax, dword [edi + 0x10]
mov dword [esi + 0x18], eax
mov eax, dword [edi + 0x14]
mov dword [esi + 0x20], eax
mov dword [esi + 0x24], ebx
mov eax, dword [edi + 0x18]
mov dword [esi + 0x28], eax
mov dword [esi + 0x2c], ebx
mov ax, word [edi + 0x24]
mov word [esi + 0x30], ax
mov eax, dword [edi + 0x26]
mov dword [esi + 0x34], eax
mov eax, dword [edi + 0x2a]
mov dword [esi + 0x38], eax
mov dword [esi + 0x3c], ebx
movzx ebx, word [edi + 0x1c]
mov eax, 0x103
cmp ebx, eax
jb 0x131b9b1
mov ebx, eax
push ebx
lea eax, [edi + 0x2e]
push eax
lea eax, [esi + 0x44]
push eax
call fcn.01359f40
mov byte [ebx + esi + 0x44], 0
movzx ebx, word [edi + 0x20]
mov eax, 0xff
add esp, 0xc
cmp ebx, eax
jb 0x131b9d6
mov ebx, eax
mov dword [esi + 0x40], ebx
movzx eax, word [edi + 0x1e]
movzx ecx, word [edi + 0x1c]
add eax, edi
lea eax, [ecx + eax + 0x2e]
push ebx
push eax
lea eax, [esi + 0x148]
push eax
call fcn.01359f40
xor eax, eax
add esp, 0xc
mov byte [ebx + esi + 0x148], 0
inc eax
jmp 0x131ba07
xor eax, eax
pop edi
pop ebx
ret
Function at 0x131cca0
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b7d70], 1
jne 0x131cd25
or dword [0x13b7d70], 1
mov dword [0x13b6b0c], 0x32373f18
mov dword [0x13b6b10], 0x2a7e3a3b
mov dword [0x13b6b14], 0x2c3d7e31
mov dword [0x13b6b18], 0x3b2a3f3b
mov dword [0x13b6b1c], 0x3f2b327e
mov dword [0x13b6b20], 0x3f2a2d7e
mov dword [0x13b6b24], 0x767e3b2a
mov dword [0x13b6b28], 0x352c3129
mov dword [0x13b6b2c], 0x2a7e2c3b
mov dword [0x13b6b30], 0x3f3b2c36
mov dword [0x13b6b34], 0x7e64773a
mov byte [0x13b6b38], 0x5e
xor eax, eax
mov cl, byte [eax + 0x13b6b0c]
xor cl, 0x5e
mov byte [eax + 0x13b6bd4], cl
inc eax
cmp eax, 0x2d
jb 0x131cd27
mov eax, 0x13b6bd4
ret

Function at 0x131cd42
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b7d60], 1
jne 0x131cda9
or dword [0x13b7d60], 1
mov dword [0x13b6b48], 0x3b7e3110
mov dword [0x13b6b4c], 0x2c312c2c
mov dword [0x13b6b50], 0x2d3b337e
mov dword [0x13b6b54], 0x3b393f2d
mov dword [0x13b6b58], 0x2a3b2c7e
mov dword [0x13b6b5c], 0x3b302c2b
mov dword [0x13b6b60], 0x273c7e3a
mov dword [0x13b6b64], 0x3c31347e
mov byte [0x13b6b68], 0x5e
xor eax, eax
mov cl, byte [eax + 0x13b6b48]
xor cl, 0x5e
mov byte [eax + 0x13b6c10], cl
inc eax
cmp eax, 0x21
jb 0x131cdab
mov eax, 0x13b6c10
ret

Function at 0x131cdc6
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b7d54], 1
jne 0x131ce2f
or dword [0x13b7d54], 1
mov dword [0x13b6b94], 0x7e3f2b12
mov dword [0x13b6b98], 0x312c2c3b
mov dword [0x13b6b9c], 0x2b2c7e2c
mov dword [0x13b6ba0], 0x30373030
mov dword [0x13b6ba4], 0x2c3b7e39
mov dword [0x13b6ba8], 0x7e2c312c
mov dword [0x13b6bac], 0x3a303f36
mov dword [0x13b6bb0], 0x642c3b32
mov word [0x13b6bb4], 0x5e7e
xor eax, eax
mov cl, byte [eax + 0x13b6b94]
xor cl, 0x5e
mov byte [eax + 0x13b6c5c], cl
inc eax
cmp eax, 0x22
jb 0x131ce31
mov eax, 0x13b6c5c
ret

Function at 0x131ce4c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b7d50], 1
jne 0x131ce9e
or dword [0x13b7d50], 1
mov dword [0x13b6bb8], 0x123f2b32
mov dword [0x13b6bbc], 0x3f313201
mov dword [0x13b6bc0], 0x2c2a2d3a
mov dword [0x13b6bc4], 0x7e393037
mov dword [0x13b6bc8], 0x32373f38
mov word [0x13b6bcc], 0x3a3b
mov byte [0x13b6bce], 0x5e
xor eax, eax
mov cl, byte [eax + 0x13b6bb8]
xor cl, 0x5e
mov byte [eax + 0x13b6c80], cl
inc eax
cmp eax, 0x17
jb 0x131cea0
mov eax, 0x13b6c80
ret
Function at 0x131dc13
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x137dbed
call fcn.0137cc58
sub esp, 0xb0
push ebx
push esi
push edi
xor ebx, ebx
push ebx
push ebx
lea eax, [ebp - 0x10]
push eax
push ebx
push dword [ebp + 0xc]
mov dword [ebp - 0x10], ebx
push ebx
push 0x1300
call dword [0x1386134]
test eax, eax
jne 0x131dc5b
call fcn.0131ddb4
mov ecx, dword [ebp + 8]
push eax
call fcn.012f6aba
mov eax, dword [ebp + 8]
jmp 0x131dda5
test byte [0x13b7d44], 1
jne 0x131dc7c
or dword [0x13b7d44], 1
mov dword [0x13b6cbc], 0x416b6c68
mov byte [0x13b6cc0], 0x61
xor eax, eax
mov cl, byte [eax + 0x13b6cbc]
xor cl, 0x61
mov byte [eax + 0x13b73fc], cl
inc eax
cmp eax, 5
jb 0x131dc7e
push 0xf
mov esi, 0x13b73fc
pop edi
mov eax, esi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x48], bl
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x131dca9
sub eax, ecx
push eax
push esi
lea ecx, [ebp - 0x48]
call fcn.012f4e4d
mov dword [ebp - 4], ebx
push dword [ebp - 0x10]
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.012f4c68
lea eax, [ebp - 0x2c]
push eax
lea edi, [ebp - 0x48]
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 1
call fcn.01322311
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.012f4c89
push ebx
push 1
mov ecx, edi
mov byte [ebp - 4], 4
call fcn.012f4c89
push dword [ebp - 0x10]
call dword [0x13860e8]
push ebx
push dword [ebp + 0xc]
lea esi, [ebp - 0xb8]
call fcn.0131e0ff
pop ecx
pop ecx
push eax
mov byte [ebp - 4], 5
call fcn.0131de1d
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.012f6af7
add esp, 0xc
push 0x13a139c
push eax
lea eax, [ebp - 0x9c]
push eax
mov byte [ebp - 4], 6
call fcn.012fef48
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea esi, [ebp - 0x64]
mov byte [ebp - 4], 7
call fcn.012fc965
push ebx
push 1
lea ecx, [ebp - 0x9c]
call fcn.012f4c89
push ebx
push 1
lea ecx, [ebp - 0x80]
call fcn.012f4c89
push ebx
push 1
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 4
call fcn.012f4c89
mov edi, dword [ebp + 8]
mov dword [edi + 0x14], 0xf
mov dword [edi + 0x10], ebx
mov byte [edi], bl
call fcn.012f4c1e
push ebx
push 1
mov ecx, esi
call fcn.012f4c89
mov eax, edi
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret

Function at 0x131ddb4
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b7d48], 1
jne 0x131de00
or dword [0x13b7d48], 1
mov dword [0x13b6ca4], 0x4130f34
mov dword [0x13b6ca8], 0xf060e02
mov dword [0x13b6cac], 0x5041b08
mov dword [0x13b6cb0], 0x13130441
mov dword [0x13b6cb4], 0x241130e
mov dword [0x13b6cb8], 0x6104050e
xor eax, eax
mov cl, byte [eax + 0x13b6ca4]
xor cl, 0x61
mov byte [eax + 0x13b73e4], cl
inc eax
cmp eax, 0x18
jb 0x131de02
mov eax, 0x13b73e4
ret
Function at 0x131de1d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b7d40], 1
jne 0x131de5b
or dword [0x13b7d40], 1
mov dword [0x13b6cc4], 0x13044941
mov dword [0x13b6cc8], 0x41130e13
mov dword [0x13b6ccc], 0x4050e02
mov word [0x13b6cd0], 0x415b
mov byte [0x13b6cd2], 0x61
xor eax, eax
mov cl, byte [eax + 0x13b6cc4]
xor cl, 0x61
mov byte [eax + 0x13b7404], cl
inc eax
cmp eax, 0xf
jb 0x131de5d
mov eax, 0x13b7404
ret

Function at 0x131e0ff
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
and dword [ebp - 4], 0
test byte [0x13b7d3c], 1
jne 0x131e12a
or dword [0x13b7d3c], 1
mov dword [0x13b6cd4], 0x50d0d44
mov byte [0x13b6cd8], 0x61
xor eax, eax
mov cl, byte [eax + 0x13b6cd4]
xor cl, 0x61
mov byte [eax + 0x13b7414], cl
inc eax
cmp eax, 5
jb 0x131e12c
push dword [ebp + 0xc]
lea eax, [ebp - 0x48]
push dword [ebp + 8]
push 0x13b7414
push eax
call fcn.0132236a
and dword [esi + 0x10], 0
add esp, 0x10
lea eax, [ebp - 0x48]
mov dword [esi + 0x14], 0xf
push eax
mov ecx, esi
mov byte [esi], 0
call fcn.012f4c68
mov eax, esi
leave
ret

Function at 0x131e2ce
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x13b7d38], 1
jne 0x131e32c
or dword [0x13b7d38], 1
mov dword [0x13b6cdc], 0x2c150426
mov dword [0x13b6ce0], 0xd14050e
mov dword [0x13b6ce4], 0xd082704
mov dword [0x13b6ce8], 0xc002f04
mov dword [0x13b6cec], 0x74104
mov dword [0x13b6cf0], 0x5040d08
mov word [0x13b6cf4], 0x415b
mov byte [0x13b6cf6], 0x61
mov cl, byte [eax + 0x13b6cdc]
xor cl, 0x61
mov byte [eax + 0x13b741c], cl
inc eax
cmp eax, 0x1b
jb 0x131e32c
mov eax, 0x13b741c
ret

Function at 0x131e347
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x13b7d34], 1
jne 0x131e3a6
or dword [0x13b7d34], 1
mov dword [0x13b6cf8], 0x22150432
mov dword [0x13b6cfc], 0x4131314
mov dword [0x13b6d00], 0x825150f
mov dword [0x13b6d04], 0x15020413
mov dword [0x13b6d08], 0x4118130e
mov dword [0x13b6d0c], 0xd080007
mov dword [0x13b6d10], 0x415b0504
mov byte [0x13b6d14], 0x61
mov cl, byte [eax + 0x13b6cf8]
xor cl, 0x61
mov byte [eax + 0x13b7438], cl
inc eax
cmp eax, 0x1d
jb 0x131e3a6
mov eax, 0x13b7438
ret

Function at 0x131e4b8
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x13b7d30], 1
jne 0x131e517
or dword [0x13b7d30], 1
mov dword [0x13b6d18], 0x22150426
mov dword [0x13b6d1c], 0x4131314
mov dword [0x13b6d20], 0x825150f
mov dword [0x13b6d24], 0x15020413
mov dword [0x13b6d28], 0x4118130e
mov dword [0x13b6d2c], 0xd080007
mov dword [0x13b6d30], 0x415b0504
mov byte [0x13b6d34], 0x61
mov cl, byte [eax + 0x13b6d18]
xor cl, 0x61
mov byte [eax + 0x13b7458], cl
inc eax
cmp eax, 0x1d
jb 0x131e517
mov eax, 0x13b7458
ret