joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1d1c9d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2727e0], 1
jne 0x1d1d03
or dword [0x2727e0], 1
mov dword [0x2709a4], 0x9a80879b
mov dword [0x2709a8], 0x82b1dcdd
mov dword [0x2709ac], 0x9a868987
mov dword [0x2709b0], 0x9c8b9d9b
mov dword [0x2709b4], 0x8f9a8f8a
mov dword [0x2709b8], 0xb1819ab1
mov dword [0x2709bc], 0x8c839b80
mov word [0x2709c0], 0x9c8b
mov byte [0x2709c2], 0xee
xor eax, eax
mov cl, byte [eax + 0x2709a4]
xor cl, 0xee
mov byte [eax + 0x270b7c], cl
inc eax
cmp eax, 0x1f
jb 0x1d1d05
mov eax, 0x270b7c
ret

Function at 0x1d1d20
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2727dc], 1
jne 0x1d1d7f
or dword [0x2727dc], 1
mov dword [0x2709c4], 0xdd9a8087
mov dword [0x2709c8], 0x8782b1dc
mov dword [0x2709cc], 0x9b9a8689
mov dword [0x2709d0], 0x8a9c8b9d
mov dword [0x2709d4], 0xb18f9a8f
mov dword [0x2709d8], 0x80b1819a
mov dword [0x2709dc], 0x8b8c839b
mov word [0x2709e0], 0xee9c
xor eax, eax
mov cl, byte [eax + 0x2709c4]
xor cl, 0xee
mov byte [eax + 0x270b9c], cl
inc eax
cmp eax, 0x1e
jb 0x1d1d81
mov eax, 0x270b9c
ret

Function at 0x1d1d9c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2727d8], 1
jne 0x1d1dfb
or dword [0x2727d8], 1
mov dword [0x2709e4], 0x8f868d9e
mov dword [0x2709e8], 0x8782b19c
mov dword [0x2709ec], 0x9b9a8689
mov dword [0x2709f0], 0x8a9c8b9d
mov dword [0x2709f4], 0xb18f9a8f
mov dword [0x2709f8], 0x9db1819a
mov dword [0x2709fc], 0x80879c9a
mov word [0x270a00], 0xee89
xor eax, eax
mov cl, byte [eax + 0x2709e4]
xor cl, 0xee
mov byte [eax + 0x270bbc], cl
inc eax
cmp eax, 0x1e
jb 0x1d1dfd
mov eax, 0x270bbc
ret

Function at 0x1d1e18
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2727d4], 1
jne 0x1d1e7e
or dword [0x2727d4], 1
mov dword [0x270a04], 0x868d999e
mov dword [0x270a08], 0x82b19c8f
mov dword [0x270a0c], 0x9a868987
mov dword [0x270a10], 0x9c8b9d9b
mov dword [0x270a14], 0x8f9a8f8a
mov dword [0x270a18], 0xb1819ab1
mov dword [0x270a1c], 0x879c9a9d
mov word [0x270a20], 0x8980
mov byte [0x270a22], 0xee
xor eax, eax
mov cl, byte [eax + 0x270a04]
xor cl, 0xee
mov byte [eax + 0x270bdc], cl
inc eax
cmp eax, 0x1f
jb 0x1d1e80
mov eax, 0x270bdc
ret

Function at 0x1d1e9b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2727d0], 1
jne 0x1d1f02
or dword [0x2727d0], 1
mov dword [0x270a24], 0x86898782
mov dword [0x270a28], 0x8b9d9b9a
mov dword [0x270a2c], 0x9a8f8a9c
mov dword [0x270a30], 0x8b9db18f
mov dword [0x270a34], 0x8f98b19a
mov dword [0x270a38], 0x808f879c
mov dword [0x270a3c], 0x9a9db19a
mov dword [0x270a40], 0x8980879c
mov byte [0x270a44], 0xee
xor eax, eax
mov cl, byte [eax + 0x270a24]
xor cl, 0xee
mov byte [eax + 0x270bfc], cl
inc eax
cmp eax, 0x21
jb 0x1d1f04
mov eax, 0x270bfc
ret
Function at 0x1d1f1f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2727cc], 1
jne 0x1d1f86
or dword [0x2727cc], 1
mov dword [0x270a48], 0x86898782
mov dword [0x270a4c], 0x8b9d9b9a
mov dword [0x270a50], 0x9a8f8a9c
mov dword [0x270a54], 0x8b9db18f
mov dword [0x270a58], 0x8f98b19a
mov dword [0x270a5c], 0x808f879c
mov dword [0x270a60], 0x9b80b19a
mov dword [0x270a64], 0x9c8b8c83
mov byte [0x270a68], 0xee
xor eax, eax
mov cl, byte [eax + 0x270a48]
xor cl, 0xee
mov byte [eax + 0x270c20], cl
inc eax
cmp eax, 0x21
jb 0x1d1f88
mov eax, 0x270c20
ret

Function at 0x1d1fa3
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2727c8], 1
jne 0x1d200c
or dword [0x2727c8], 1
mov dword [0x270a6c], 0x86898782
mov dword [0x270a70], 0x8b9d9b9a
mov dword [0x270a74], 0x9a8f8a9c
mov dword [0x270a78], 0x8b9db18f
mov dword [0x270a7c], 0x8f98b19a
mov dword [0x270a80], 0x808f879c
mov dword [0x270a84], 0x818cb19a
mov dword [0x270a88], 0x8f8b8281
mov word [0x270a8c], 0xee80
xor eax, eax
mov cl, byte [eax + 0x270a6c]
xor cl, 0xee
mov byte [eax + 0x270c44], cl
inc eax
cmp eax, 0x22
jb 0x1d200e
mov eax, 0x270c44
ret

Function at 0x1d2029
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2727c4], 1
jne 0x1d208f
or dword [0x2727c4], 1
mov dword [0x270a90], 0x86898782
mov dword [0x270a94], 0x8b9d9b9a
mov dword [0x270a98], 0x9a8f8a9c
mov dword [0x270a9c], 0x8b9db18f
mov dword [0x270aa0], 0x8f98b19a
mov dword [0x270aa4], 0x808f879c
mov dword [0x270aa8], 0x9b80b19a
mov word [0x270aac], 0x8282
mov byte [0x270aae], 0xee
xor eax, eax
mov cl, byte [eax + 0x270a90]
xor cl, 0xee
mov byte [eax + 0x270c68], cl
inc eax
cmp eax, 0x1f
jb 0x1d2091
mov eax, 0x270c68
ret

Function at 0x1d2321
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x23aa3b
call fcn.00239c88
sub esp, 0x20
push esi
xor esi, esi
mov dword [ebp - 0x10], esi
push edi
mov dword [ebp - 0x10], esi
call dword [0x2420a8]
test byte [0x2727a4], 1
mov edi, eax
jne 0x1d236e
or dword [0x2727a4], 1
mov dword [0x270d04], 0x989f9886
mov dword [0x270d08], 0xdf85949f
mov dword [0x270d0c], 0xf19d9d95
xor ecx, ecx
mov al, byte [ecx + 0x270d04]
xor al, 0xf1
mov byte [ecx + 0x270fbc], al
inc ecx
cmp ecx, 0xc
jb 0x1d2370
push esi
push esi
lea eax, [ebp - 0x10]
push eax
push esi
push edi
push 0x270fbc
call dword [0x2420d4]
push eax
push 0x1b00
call dword [0x24212c]
test eax, eax
jne 0x1d23bc
call fcn.001d2432
mov ecx, dword [ebp + 0xc]
push eax
push dword [ebp + 8]
call fcn.001bd30e
pop ecx
pop ecx
jmp 0x1d2421
test byte [0x27279c], 1
jne 0x1d23dc
or dword [0x27279c], 1
mov word [0x270d2c], 0xd1cb
mov byte [0x270d2e], 0xf1
xor eax, eax
mov cl, byte [eax + 0x270d2c]
xor cl, 0xf1
mov byte [eax + 0x270fe4], cl
inc eax
cmp eax, 3
jb 0x1d23de
mov ecx, dword [ebp + 0xc]
lea eax, [ebp - 0x2c]
push 0x270fe4
push eax
call fcn.001bd30e
mov dword [ebp - 4], esi
push dword [ebp - 0x10]
push eax
push dword [ebp + 8]
call fcn.001bd6c1
add esp, 0x14
push esi
push 1
lea ecx, [ebp - 0x2c]
call fcn.001b4ce5
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword fs:[0], ecx
leave
ret
Function at 0x1d2432
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2727a0], 1
jne 0x1d2487
or dword [0x2727a0], 1
mov dword [0x270d10], 0x90b7d9d1
mov dword [0x270d14], 0x95949d98
mov dword [0x270d18], 0xd19e85d1
mov dword [0x270d1c], 0x9c839e97
mov dword [0x270d20], 0x94d18590
mov dword [0x270d24], 0x839e8383
mov word [0x270d28], 0xf1d8
xor eax, eax
mov cl, byte [eax + 0x270d10]
xor cl, 0xf1
mov byte [eax + 0x270fc8], cl
inc eax
cmp eax, 0x1a
jb 0x1d2489
mov eax, 0x270fc8
ret

Function at 0x1d25f2
Capabilities:
Encode data using xor

Disassembly:
test byte [0x272798], 1
jne 0x1d263b
or dword [0x272798], 1
mov dword [0x270d30], 0xb99f98a6
mov dword [0x270d34], 0xbe818585
mov dword [0x270d38], 0xd99f9481
mov dword [0x270d3c], 0x9097d1d8
mov dword [0x270d40], 0x95949d98
mov byte [0x270d44], 0xf1
xor eax, eax
mov cl, byte [eax + 0x270d30]
xor cl, 0xf1
mov byte [eax + 0x270fe8], cl
inc eax
cmp eax, 0x15
jb 0x1d263d
mov eax, 0x270fe8
ret

Function at 0x1d2902
Capabilities:
Encode data using xor

Disassembly:
test byte [0x272794], 1
jne 0x1d2955
or dword [0x272794], 1
mov dword [0x270d48], 0xb99f98a6
mov dword [0x270d4c], 0xb2818585
mov dword [0x270d50], 0x9a929083
mov dword [0x270d54], 0xd99d83a4
mov dword [0x270d58], 0x9097d1d8
mov dword [0x270d5c], 0x95949d98
mov byte [0x270d60], 0xf1
xor eax, eax
mov cl, byte [eax + 0x270d48]
xor cl, 0xf1
mov byte [eax + 0x271000], cl
inc eax
cmp eax, 0x19
jb 0x1d2957
mov eax, 0x271000
ret

Function at 0x1d2972
Capabilities:
Encode data using xor

Disassembly:
test byte [0x272790], 1
jne 0x1d29be
or dword [0x272790], 1
mov dword [0x270d64], 0xb99f98a6
mov dword [0x270d68], 0xb2818585
mov dword [0x270d6c], 0x949f9f9e
mov dword [0x270d70], 0xd8d98592
mov dword [0x270d74], 0x989097d1
mov dword [0x270d78], 0xf195949d
xor eax, eax
mov cl, byte [eax + 0x270d64]
xor cl, 0xf1
mov byte [eax + 0x27101c], cl
inc eax
cmp eax, 0x18
jb 0x1d29c0
mov eax, 0x27101c
ret

Function at 0x1d3317
Capabilities:
Encode data using xor

Disassembly:
test byte [0x27278c], 1
jne 0x1d33f0
or dword [0x27278c], 1
mov dword [0x270d80], 0x848094a3
mov dword [0x270d84], 0xd1858294
mov dword [0x270d88], 0xd19d8384
mov dword [0x270d8c], 0x95948284
mov dword [0x270d90], 0x95d190d1
mov dword [0x270d94], 0x94979798
mov dword [0x270d98], 0x859f9483
mov dword [0x270d9c], 0x999282d1
mov dword [0x270da0], 0xd1949c94
mov dword [0x270da4], 0x9f909985
mov dword [0x270da8], 0x949985d1
mov dword [0x270dac], 0x9f9e92d1
mov dword [0x270db0], 0x8592949f
mov dword [0x270db4], 0xd19f9e98
mov dword [0x270db8], 0xd1829086
mov dword [0x270dbc], 0x85989f98
mov dword [0x270dc0], 0x989d9098
mov dword [0x270dc4], 0xd195948b
mov dword [0x270dc8], 0x99859886
mov byte [0x270dcc], 0xf1
xor eax, eax
mov cl, byte [eax + 0x270d80]
xor cl, 0xf1
mov byte [eax + 0x271038], cl
inc eax
cmp eax, 0x4d
jb 0x1d33f2
mov eax, 0x271038
ret
Function at 0x1d340d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x272788], 1
jne 0x1d34e9
or dword [0x272788], 1
mov dword [0x270dd0], 0x848094a3
mov dword [0x270dd4], 0xd1858294
mov dword [0x270dd8], 0xd19d8384
mov dword [0x270ddc], 0x95948284
mov dword [0x270de0], 0x95d190d1
mov dword [0x270de4], 0x94979798
mov dword [0x270de8], 0x859f9483
mov dword [0x270dec], 0x829e99d1
mov dword [0x270df0], 0x909fd185
mov dword [0x270df4], 0x85d1949c
mov dword [0x270df8], 0xd19f9099
mov dword [0x270dfc], 0xd1949985
mov dword [0x270e00], 0x9f9f9e92
mov dword [0x270e04], 0x98859294
mov dword [0x270e08], 0x86d19f9e
mov dword [0x270e0c], 0x98d18290
mov dword [0x270e10], 0x9885989f
mov dword [0x270e14], 0x8b989d90
mov dword [0x270e18], 0x86d19594
mov dword [0x270e1c], 0xf1998598
xor eax, eax
mov cl, byte [eax + 0x270dd0]
xor cl, 0xf1
mov byte [eax + 0x271088], cl
inc eax
cmp eax, 0x50
jb 0x1d34eb
mov eax, 0x271088
ret

Function at 0x1d3506
Capabilities:
Encode data using xor

Disassembly:
test byte [0x272784], 1
jne 0x1d35de
or dword [0x272784], 1
mov dword [0x270e20], 0x848094a3
mov dword [0x270e24], 0xd1858294
mov dword [0x270e28], 0xd19d8384
mov dword [0x270e2c], 0x95948284
mov dword [0x270e30], 0x95d190d1
mov dword [0x270e34], 0x94979798
mov dword [0x270e38], 0x859f9483
mov dword [0x270e3c], 0x839e81d1
mov dword [0x270e40], 0x9985d185
mov dword [0x270e44], 0x85d19f90
mov dword [0x270e48], 0x92d19499
mov dword [0x270e4c], 0x949f9f9e
mov dword [0x270e50], 0x9e988592
mov dword [0x270e54], 0x9086d19f
mov dword [0x270e58], 0x9f98d182
mov dword [0x270e5c], 0x90988598
mov dword [0x270e60], 0x948b989d
mov dword [0x270e64], 0x9886d195
mov word [0x270e68], 0x9985
mov byte [0x270e6a], 0xf1
xor eax, eax
mov cl, byte [eax + 0x270e20]
xor cl, 0xf1
mov byte [eax + 0x2710d8], cl
inc eax
cmp eax, 0x4b
jb 0x1d35e0
mov eax, 0x2710d8
ret

Function at 0x1d35fb
Capabilities:
Encode data using xor

Disassembly:
test byte [0x272780], 1
jne 0x1d3651
or dword [0x272780], 1
mov dword [0x270e6c], 0xb99f98a6
mov dword [0x270e70], 0xbe818585
mov dword [0x270e74], 0xa39f9481
mov dword [0x270e78], 0x94848094
mov dword [0x270e7c], 0xd8d98582
mov dword [0x270e80], 0x989097d1
mov dword [0x270e84], 0xf195949d
xor eax, eax
mov cl, byte [eax + 0x270e6c]
xor cl, 0xf1
mov byte [eax + 0x271124], cl
inc eax
cmp eax, 0x1c
jb 0x1d3653
mov eax, 0x271124
ret
Function at 0x1d366e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x27277c], 1
jne 0x1d373d
or dword [0x27277c], 1
mov dword [0x270e88], 0xb99f98a6
mov dword [0x270e8c], 0xa2818585
mov dword [0x270e90], 0x81be8594
mov dword [0x270e94], 0x9f9e9885
mov dword [0x270e98], 0xbfb8a6d9
mov dword [0x270e9c], 0xa1a5a5b9
mov dword [0x270ea0], 0xa5a1beae
mov dword [0x270ea4], 0xaebfbeb8
mov dword [0x270ea8], 0xa4b2b4a2
mov dword [0x270eac], 0xa8a5b8a3
mov dword [0x270eb0], 0xb0bdb7ae
mov dword [0x270eb4], 0xd1d8a2b6
mov dword [0x270eb8], 0x83d19f9e
mov dword [0x270ebc], 0x94848094
mov dword [0x270ec0], 0x99d18582
mov dword [0x270ec4], 0x9d959f90
mov dword [0x270ec8], 0x9097d194
mov dword [0x270ecc], 0x95949d98
mov byte [0x270ed0], 0xf1
xor eax, eax
mov cl, byte [eax + 0x270e88]
xor cl, 0xf1
mov byte [eax + 0x271140], cl
inc eax
cmp eax, 0x49
jb 0x1d373f
mov eax, 0x271140
ret

Function at 0x1d375a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x272778], 1
jne 0x1d3828
or dword [0x272778], 1
mov dword [0x270ed8], 0xb99f98a6
mov dword [0x270edc], 0xa2818585
mov dword [0x270ee0], 0x81be8594
mov dword [0x270ee4], 0x9f9e9885
mov dword [0x270ee8], 0xbfb8a6d9
mov dword [0x270eec], 0xa1a5a5b9
mov dword [0x270ef0], 0xa5a1beae
mov dword [0x270ef4], 0xaebfbeb8
mov dword [0x270ef8], 0xb5bfb4a2
mov dword [0x270efc], 0xbcb8a5ae
mov dword [0x270f00], 0xa5a4beb4
mov dword [0x270f04], 0x9f9ed1d8
mov dword [0x270f08], 0x809483d1
mov dword [0x270f0c], 0x85829484
mov dword [0x270f10], 0x9f9099d1
mov dword [0x270f14], 0xd1949d95
mov dword [0x270f18], 0x9d989097
mov word [0x270f1c], 0x9594
mov byte [0x270f1e], 0xf1
xor eax, eax
mov cl, byte [eax + 0x270ed8]
xor cl, 0xf1
mov byte [eax + 0x271190], cl
inc eax
cmp eax, 0x47
jb 0x1d382a
mov eax, 0x271190
ret

Function at 0x1d3845
Capabilities:
Encode data using xor

Disassembly:
test byte [0x272774], 1
jne 0x1d38ae
or dword [0x272774], 1
mov dword [0x270f20], 0xb99f98a6
mov dword [0x270f24], 0xb0818585
mov dword [0x270f28], 0x94a39595
mov dword [0x270f2c], 0x82948480
mov dword [0x270f30], 0x9094b985
mov dword [0x270f34], 0x82839495
mov dword [0x270f38], 0x97d1d8d9
mov dword [0x270f3c], 0x949d9890
mov word [0x270f40], 0xf195
xor eax, eax
mov cl, byte [eax + 0x270f20]
xor cl, 0xf1
mov byte [eax + 0x2711d8], cl
inc eax
cmp eax, 0x22
jb 0x1d38b0
mov eax, 0x2711d8
ret

Function at 0x1d38cb
Capabilities:
Encode data using xor

Disassembly:
test byte [0x272770], 1
jne 0x1d391e
or dword [0x272770], 1
mov dword [0x270f44], 0x818585b9
mov dword [0x270f48], 0x959f94a2
mov dword [0x270f4c], 0x848094a3
mov dword [0x270f50], 0xd9858294
mov dword [0x270f54], 0x9097d1d8
mov dword [0x270f58], 0x95949d98
mov byte [0x270f5c], 0xf1
xor eax, eax
mov cl, byte [eax + 0x270f44]
xor cl, 0xf1
mov byte [eax + 0x2711fc], cl
inc eax
cmp eax, 0x19
jb 0x1d3920
mov eax, 0x2711fc
ret
Function at 0x1d393b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x27276c], 1
jne 0x1d398d
or dword [0x27276c], 1
mov dword [0x270f60], 0x818585b9
mov dword [0x270f64], 0x839484a0
mov dword [0x270f68], 0x979fb888
mov dword [0x270f6c], 0xd1d8d99e
mov dword [0x270f70], 0x9d989097
mov word [0x270f74], 0x9594
mov byte [0x270f76], 0xf1
xor eax, eax
mov cl, byte [eax + 0x270f60]
xor cl, 0xf1
mov byte [eax + 0x271218], cl
inc eax
cmp eax, 0x17
jb 0x1d398f
mov eax, 0x271218
ret
Function at 0x1d416d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x272764], 1
jne 0x1d41dd
or dword [0x272764], 1
mov dword [0x270f7c], 0xb99f98a6
mov dword [0x270f80], 0xa0818585
mov dword [0x270f84], 0x88839484
mov dword [0x270f88], 0x908590b5
mov dword [0x270f8c], 0x989087b0
mov dword [0x270f90], 0x9d93909d
mov dword [0x270f94], 0xd1d8d994
mov dword [0x270f98], 0x9d989097
mov word [0x270f9c], 0x9594
mov byte [0x270f9e], 0xf1
xor eax, eax
mov cl, byte [eax + 0x270f7c]
xor cl, 0xf1
mov byte [eax + 0x271234], cl
inc eax
cmp eax, 0x23
jb 0x1d41df
mov eax, 0x271234
ret

Function at 0x1d41fa
Capabilities:
Encode data using xor

Disassembly:
test byte [0x272760], 1
jne 0x1d424f
or dword [0x272760], 1
mov dword [0x270fa0], 0x94859fb8
mov dword [0x270fa4], 0x85949f83
mov dword [0x270fa8], 0x959094a3
mov dword [0x270fac], 0x949d98b7
mov dword [0x270fb0], 0x97d1d8d9
mov dword [0x270fb4], 0x949d9890
mov word [0x270fb8], 0xf195
xor eax, eax
mov cl, byte [eax + 0x270fa0]
xor cl, 0xf1
mov byte [eax + 0x271258], cl
inc eax
cmp eax, 0x1a
jb 0x1d4251
mov eax, 0x271258
ret

Function at 0x1d5037
Capabilities:
Encode data using xor

Disassembly:
test byte [0x272744], 1
jne 0x1d50be
or dword [0x272744], 1
mov dword [0x271290], 0x87d29cb3
mov dword [0x271294], 0x9197809c
mov dword [0x271298], 0x9b9c959d
mov dword [0x27129c], 0xd2969788
mov dword [0x2712a0], 0x97999d86
mov dword [0x2712a4], 0x9385d29c
mov dword [0x2712a8], 0x9d94d281
mov dword [0x2712ac], 0xd2969c87
mov dword [0x2712b0], 0x91d28693
mov dword [0x2712b4], 0x9380939a
mov dword [0x2712b8], 0x80978691
mov word [0x2712bc], 0xf2d2
xor eax, eax
mov cl, byte [eax + 0x271290]
xor cl, 0xf2
mov byte [eax + 0x2713e0], cl
inc eax
cmp eax, 0x2e
jb 0x1d50c0
mov eax, 0x2713e0
ret
Function at 0x1d5504
Capabilities:
Encode data using xor

Disassembly:
test byte [0x272740], 1
jne 0x1d5560
or dword [0x272740], 1
mov dword [0x2712c0], 0x81819bbf
mov dword [0x2712c4], 0xd2959c9b
mov dword [0x2712c8], 0x979ed293
mov dword [0x2712cc], 0x82d28694
mov dword [0x2712d0], 0x9c978093
mov dword [0x2712d4], 0x81979a86
mov word [0x2712d8], 0x819b
mov byte [0x2712da], 0xf2
xor eax, eax
mov cl, byte [eax + 0x2712c0]
xor cl, 0xf2
mov byte [eax + 0x271410], cl
inc eax
cmp eax, 0x1b
jb 0x1d5562
mov eax, 0x271410
ret

Function at 0x1d557d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x27273c], 1
jne 0x1d55e6
or dword [0x27273c], 1
mov dword [0x2712dc], 0xd2869dbc
mov dword [0x2712e0], 0x879d9c97
mov dword [0x2712e4], 0x9dd29a95
mov dword [0x2712e8], 0x93809782
mov dword [0x2712ec], 0xd281969c
mov dword [0x2712f0], 0x97d29c9b
mov dword [0x2712f4], 0x9780828a
mov dword [0x2712f8], 0x9d9b8181
mov word [0x2712fc], 0xf29c
xor eax, eax
mov cl, byte [eax + 0x2712dc]
xor cl, 0xf2
mov byte [eax + 0x27142c], cl
inc eax
cmp eax, 0x22
jb 0x1d55e8
mov eax, 0x27142c
ret

Function at 0x1d5603
Capabilities:
Encode data using xor

Disassembly:
test byte [0x272738], 1
jne 0x1d5663
or dword [0x272738], 1
mov dword [0x271300], 0xd29d9da6
mov dword [0x271304], 0x8b9c939f
mov dword [0x271308], 0x97829dd2
mov dword [0x27130c], 0x969c9380
mov dword [0x271310], 0x9c9bd281
mov dword [0x271314], 0x828a97d2
mov dword [0x271318], 0x81819780
mov dword [0x27131c], 0xf29c9d9b
xor eax, eax
mov cl, byte [eax + 0x271300]
xor cl, 0xf2
mov byte [eax + 0x271450], cl
inc eax
cmp eax, 0x20
jb 0x1d5665
mov eax, 0x271450
ret

Function at 0x1d5680
Capabilities:
Encode data using xor

Disassembly:
test byte [0x272734], 1
jne 0x1d56d6
or dword [0x272734], 1
mov dword [0x271320], 0x81819bbf
mov dword [0x271324], 0xd2959c9b
mov dword [0x271328], 0x9b80d293
mov dword [0x27132c], 0xd2869a95
mov dword [0x271330], 0x97809382
mov dword [0x271334], 0x979a869c
mov dword [0x271338], 0xf2819b81
xor eax, eax
mov cl, byte [eax + 0x271320]
xor cl, 0xf2
mov byte [eax + 0x271470], cl
inc eax
cmp eax, 0x1c
jb 0x1d56d8
mov eax, 0x271470
ret

Function at 0x1d56f3
Capabilities:
Encode data using xor

Disassembly:
test byte [0x272730], 1
jne 0x1d5764
or dword [0x272730], 1
mov dword [0x27133c], 0x80939ca7
mov dword [0x271340], 0x829dd28b
mov dword [0x271344], 0x86938097
mov dword [0x271348], 0x9fd2809d
mov dword [0x27134c], 0xd2868187
mov dword [0x271350], 0x9784939a
mov dword [0x271354], 0x979c9dd2
mov dword [0x271358], 0x97829dd2
mov dword [0x27135c], 0x969c9380
mov byte [0x271360], 0xf2
xor eax, eax
mov cl, byte [eax + 0x27133c]
xor cl, 0xf2
mov byte [eax + 0x27148c], cl
inc eax
cmp eax, 0x25
jb 0x1d5766
mov eax, 0x27148c
ret
Function at 0x1d5781
Capabilities:
Encode data using xor

Disassembly:
test byte [0x27272c], 1
jne 0x1d57fb
or dword [0x27272c], 1
mov dword [0x271364], 0x939c9bb0
mov dword [0x271368], 0x9dd28b80
mov dword [0x27136c], 0x93809782
mov dword [0x271370], 0xd2809d86
mov dword [0x271374], 0x8681879f
mov dword [0x271378], 0x84939ad2
mov dword [0x27137c], 0x8586d297
mov dword [0x271380], 0x829dd29d
mov dword [0x271384], 0x9c938097
mov word [0x271388], 0x8196
mov byte [0x27138a], 0xf2
xor eax, eax
mov cl, byte [eax + 0x271364]
xor cl, 0xf2
mov byte [eax + 0x2714b4], cl
inc eax
cmp eax, 0x27
jb 0x1d57fd
mov eax, 0x2714b4
ret

Function at 0x1d5818
Capabilities:
Encode data using xor

Disassembly:
test byte [0x272728], 1
jne 0x1d5881
or dword [0x272728], 1
mov dword [0x27138c], 0x939c9bb0
mov dword [0x271390], 0x9dd28b80
mov dword [0x271394], 0x93809782
mov dword [0x271398], 0xd2809d86
mov dword [0x27139c], 0xd2869d9c
mov dword [0x2713a0], 0x9e829f9b
mov dword [0x2713a4], 0x9c979f97
mov dword [0x2713a8], 0xc8969786
mov word [0x2713ac], 0xf2d2
xor eax, eax
mov cl, byte [eax + 0x27138c]
xor cl, 0xf2
mov byte [eax + 0x2714dc], cl
inc eax
cmp eax, 0x22
jb 0x1d5883
mov eax, 0x2714dc
ret
Function at 0x1d7233
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
or eax, 0xffffffff
cmp dword [ebp + 8], 0
je 0x1d7275
push esi
mov cl, byte [edx]
dec dword [ebp + 8]
movzx ecx, cl
mov esi, ecx
xor esi, eax
and esi, 0xf
shr eax, 4
xor eax, dword [esi*4 + 0x25be18]
shr ecx, 4
mov esi, eax
and esi, 0xf
xor ecx, esi
shr eax, 4
xor eax, dword [ecx*4 + 0x25be18]
inc edx
cmp dword [ebp + 8], 0
jne 0x1d7240
pop esi
not eax
pop ebp
ret

Function at 0x1d8ec0
Capabilities:
Enumerate pe sections

Disassembly:
push ebx
xor ebx, ebx
push edi
cmp ecx, ebx
je 0x1d8ee5
cmp dword [ecx + 0x38], ebx
je 0x1d8ee5
cmp eax, dword [ecx + 0x10]
jae 0x1d8ee5
cmp dword [ecx + 0x14], 1
jne 0x1d8ee5
mov edx, dword [ecx + 0x38]
mov edi, dword [edx + 0x10]
mov edi, dword [edi + eax*4]
add edi, dword [edx]
jmp 0x1d8ee7
xor edi, edi
cmp edi, ebx
je 0x1d8fca
cmp esi, ebx
je 0x1d8fca
mov dword [esi], eax
mov ecx, dword [ecx + 0x38]
mov ecx, dword [ecx + 0x10]
mov eax, dword [ecx + eax*4]
mov dword [esi + 4], eax
mov ax, word [edi + 4]
mov word [esi + 8], ax
mov ax, word [edi + 6]
mov word [esi + 0xa], ax
mov ax, word [edi + 8]
mov word [esi + 0xc], ax
mov ax, word [edi + 0xa]
mov word [esi + 0xe], ax
movzx eax, word [edi + 0xe]
movzx edx, word [edi + 0xc]
call fcn.001d8669
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], edx
mov eax, dword [edi + 0x10]
mov dword [esi + 0x18], eax
mov eax, dword [edi + 0x14]
mov dword [esi + 0x20], eax
mov dword [esi + 0x24], ebx
mov eax, dword [edi + 0x18]
mov dword [esi + 0x28], eax
mov dword [esi + 0x2c], ebx
mov ax, word [edi + 0x24]
mov word [esi + 0x30], ax
mov eax, dword [edi + 0x26]
mov dword [esi + 0x34], eax
mov eax, dword [edi + 0x2a]
mov dword [esi + 0x38], eax
mov dword [esi + 0x3c], ebx
movzx ebx, word [edi + 0x1c]
mov eax, 0x103
cmp ebx, eax
jb 0x1d8f76
mov ebx, eax
push ebx
lea eax, [edi + 0x2e]
push eax
lea eax, [esi + 0x44]
push eax
call fcn.00217030
mov byte [ebx + esi + 0x44], 0
movzx ebx, word [edi + 0x20]
mov eax, 0xff
add esp, 0xc
cmp ebx, eax
jb 0x1d8f9b
mov ebx, eax
mov dword [esi + 0x40], ebx
movzx eax, word [edi + 0x1e]
movzx ecx, word [edi + 0x1c]
add eax, edi
lea eax, [ecx + eax + 0x2e]
push ebx
push eax
lea eax, [esi + 0x148]
push eax
call fcn.00217030
xor eax, eax
add esp, 0xc
mov byte [ebx + esi + 0x148], 0
inc eax
jmp 0x1d8fcc
xor eax, eax
pop edi
pop ebx
ret

Function at 0x1d99fc
Capabilities:
Encode data using xor

Disassembly:
test byte [0x27271c], 1
jne 0x1d9a81
or dword [0x27271c], 1
mov dword [0x271518], 0x989d95b2
mov dword [0x27151c], 0x80d49091
mov dword [0x271520], 0x8697d49b
mov dword [0x271524], 0x91809591
mov dword [0x271528], 0x958198d4
mov dword [0x27152c], 0x958087d4
mov dword [0x271530], 0xdcd49180
mov dword [0x271534], 0x9f869b83
mov dword [0x271538], 0x80d48691
mov dword [0x27153c], 0x9591869c
mov dword [0x271540], 0xd4cedd90
mov byte [0x271544], 0xf4
xor eax, eax
mov cl, byte [eax + 0x271518]
xor cl, 0xf4
mov byte [eax + 0x2715e0], cl
inc eax
cmp eax, 0x2d
jb 0x1d9a83
mov eax, 0x2715e0
ret