joyce8/EMBER2024-capa huggingface dataset:
Function at 0xb6fadf
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc07cf8], 1
jne 0xb6fb1d
or dword [0xc07cf8], 1
mov dword [0xc06f08], 0xe4dcf8c2
mov dword [0xc06f0c], 0xdbbfbdfc
mov dword [0xc06f10], 0xeee8e4f9
mov word [0xc06f14], 0xf8f8
mov byte [0xc06f16], 0x8b
xor eax, eax
mov cl, byte [eax + 0xc06f08]
xor cl, 0x8b
mov byte [eax + 0xc07640], cl
inc eax
cmp eax, 0xf
jb 0xb6fb1f
mov eax, 0xc07640
ret

Function at 0xb6fc35
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc07cf4], 1
jne 0xb6fc9e
or dword [0xc07cf4], 1
mov dword [0xc06f18], 0xe4e7e7ca
mov dword [0xc06f1c], 0xeeffeae8
mov dword [0xc06f20], 0xc2efe5ca
mov dword [0xc06f24], 0xe2ffe2e5
mov dword [0xc06f28], 0xf1e2e7ea
mov dword [0xc06f2c], 0xefe2d8ee
mov dword [0xc06f30], 0xe2eaedab
mov dword [0xc06f34], 0xb1efeee7
mov word [0xc06f38], 0x8bab
xor eax, eax
mov cl, byte [eax + 0xc06f18]
xor cl, 0x8b
mov byte [eax + 0xc07650], cl
inc eax
cmp eax, 0x22
jb 0xb6fca0
mov eax, 0xc07650
ret

Function at 0xb6fcbb
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc07cf0], 1
jne 0xb6fd1a
or dword [0xc07cf0], 1
mov dword [0xc06f3c], 0xe8eee3c8
mov dword [0xc06f40], 0xe0e4dfe0
mov dword [0xc06f44], 0xeec6e5ee
mov dword [0xc06f48], 0xf9eee9e6
mov dword [0xc06f4c], 0xfbe2e3f8
mov dword [0xc06f50], 0xe2eaedab
mov dword [0xc06f54], 0xb1efeee7
mov word [0xc06f58], 0x8bab
xor eax, eax
mov cl, byte [eax + 0xc06f3c]
xor cl, 0x8b
mov byte [eax + 0xc07674], cl
inc eax
cmp eax, 0x1e
jb 0xb6fd1c
mov eax, 0xc07674
ret

Function at 0xb6feb4
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc07cec], 1
jne 0xb6ff39
or dword [0xc07cec], 1
mov dword [0xc06f5c], 0xe5e5eac8
mov dword [0xc06f60], 0xfaabffe4
mov dword [0xc06f64], 0xf2f9eefe
mov dword [0xc06f68], 0xbdabeaab
mov dword [0xc06f6c], 0xe2e9abbf
mov dword [0xc06f70], 0xe2fdabff
mov dword [0xc06f74], 0xe4abfcee
mov dword [0xc06f78], 0xb9b8abe5
mov dword [0xc06f7c], 0xffe2e9ab
mov dword [0xc06f80], 0xe5e2fcab
mov dword [0xc06f84], 0xf8fce4ef
mov byte [0xc06f88], 0x8b
xor eax, eax
mov cl, byte [eax + 0xc06f5c]
xor cl, 0x8b
mov byte [eax + 0xc07694], cl
inc eax
cmp eax, 0x2d
jb 0xb6ff3b
mov eax, 0xc07694
ret

Function at 0xb6ff56
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc07ce8], 1
jne 0xb7000a
push ebx
push esi
or dword [0xc07ce8], 1
mov eax, 0xc4c3
mov word [0xc06f8c], ax
add eax, 0xfffffffd
mov word [0xc06f8e], ax
push edi
mov edi, 0xc4ce
mov eax, edi
mov word [0xc06f90], ax
add eax, 4
mov word [0xc06f92], ax
lea esi, [edi + 6]
mov eax, esi
mov word [0xc06f94], ax
lea edx, [edi - 7]
mov eax, edx
mov word [0xc06f96], ax
add eax, 0xfffffffd
mov word [0xc06f98], ax
lea ecx, [edi - 6]
mov eax, ecx
mov word [0xc06f9a], ax
add eax, 2
mov ebx, eax
lea eax, [edi - 0xc]
pop edi
mov word [0xc06faa], ax
add eax, 0xffffffc9
pop esi
mov word [0xc06f9c], bx
mov dword [0xc06f9e], 0xc4d4c4c7
mov dword [0xc06fa2], 0xc4cac4c6
mov dword [0xc06fa6], 0xc4c3c4c8
mov dword [0xc06fac], 0xc4cec4c5
mov word [0xc06fb0], ax
pop ebx
xor eax, eax
mov ecx, 0xc48b
xor cx, word [eax + 0xc06f8c]
add eax, 2
mov word [eax + 0xc076c2], cx
cmp eax, 0x26
jb 0xb7000c
mov eax, 0xc076c4
ret
Function at 0xb7002d
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc07ce4], 1
jne 0xb700de
or dword [0xc07ce4], 1
mov eax, 0xc4c3
mov word [0xc06fb4], ax
add eax, 0xfffffffd
mov word [0xc06fb6], ax
mov ecx, 0xc4ce
push ebx
mov eax, ecx
mov word [0xc06fb8], ax
add eax, 4
push esi
mov word [0xc06fba], ax
lea esi, [ecx + 6]
mov eax, esi
mov word [0xc06fbc], ax
add eax, 0xfffffff4
mov word [0xc06fbe], ax
lea edx, [ecx + 0x10]
mov eax, edx
mov word [0xc06fc0], ax
add eax, 0xfffffffb
mov ebx, eax
mov word [0xc06fc2], bx
mov word [0xc06fc4], bx
mov ebx, ecx
mov word [0xc06fc6], bx
add ebx, 0xfffffff7
mov word [0xc06fd4], ax
lea eax, [ecx - 0x43]
pop esi
mov word [0xc06fc8], bx
mov dword [0xc06fca], 0xc4d4c4df
mov word [0xc06fce], dx
mov dword [0xc06fd0], 0xc4cec4d8
mov word [0xc06fd6], ax
pop ebx
xor eax, eax
mov ecx, 0xc48b
xor cx, word [eax + 0xc06fb4]
add eax, 2
mov word [eax + 0xc076ea], cx
cmp eax, 0x24
jb 0xb700e0
mov eax, 0xc076ec
ret

Function at 0xb70101
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc07ce0], 1
mov edx, 0xc48b
jne 0xb70175
or dword [0xc07ce0], 1
lea eax, [edx + 0x38]
mov word [0xc06fd8], ax
add eax, 0xfffffffd
mov word [0xc06fda], ax
lea ecx, [edx + 0x43]
mov eax, ecx
mov word [0xc06fdc], ax
add eax, 4
mov word [0xc06fde], ax
lea eax, [edx + 0x49]
mov word [0xc06fe0], ax
add eax, 0xa
mov word [0xc06fe2], ax
lea eax, [edx + 0x4d]
push esi
mov esi, eax
mov eax, edx
mov word [0xc06fe4], si
mov word [0xc06fe6], cx
mov dword [0xc06fe8], 0xc4d8c4d9
mov word [0xc06fec], ax
pop esi
xor eax, eax
mov ecx, edx
xor cx, word [eax + 0xc06fd8]
add eax, 2
mov word [eax + 0xc0770e], cx
cmp eax, 0x16
jb 0xb70177
mov eax, 0xc07710
ret

Function at 0xb70195
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc07cdc], 1
jne 0xb70257
push ebx
mov eax, 0xc4c3
mov word [0xc06ff0], ax
add eax, 0xfffffffd
mov word [0xc06ff2], ax
push esi
mov esi, 0xc4ce
or dword [0xc07cdc], 1
mov eax, esi
mov word [0xc06ff4], ax
add eax, 4
mov word [0xc06ff6], ax
lea edx, [esi + 6]
lea ecx, [esi - 6]
mov eax, edx
mov word [0xc06ff8], ax
mov eax, ecx
mov word [0xc06ffa], ax
add eax, 0x16
mov word [0xc06ffc], ax
lea eax, [esi + 0xb]
mov ebx, eax
add eax, 0xffffffec
mov esi, eax
lea eax, [edx - 7]
mov word [0xc07010], ax
add eax, 0xfffffff5
mov word [0xc07012], ax
lea eax, [edx - 8]
mov word [0xc07004], si
mov word [0xc07014], ax
add eax, 0xffffffbf
pop esi
mov word [0xc06ffe], bx
mov dword [0xc07000], 0xc4cec4d9
mov dword [0xc07006], 0xc4d4c4df
mov word [0xc0700a], cx
mov dword [0xc0700c], 0xc4c5c4c4
mov word [0xc07016], ax
pop ebx
xor eax, eax
mov ecx, 0xc48b
xor cx, word [eax + 0xc06ff0]
add eax, 2
mov word [eax + 0xc07726], cx
cmp eax, 0x28
jb 0xb70259
mov eax, 0xc07728
ret
Function at 0xb7027a
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc07cd8], 1
jne 0xb7032b
mov eax, 0xc4c3
mov word [0xc07018], ax
add eax, 0xfffffffd
mov word [0xc0701a], ax
or dword [0xc07cd8], 1
mov edx, 0xc4ce
mov eax, edx
mov word [0xc0701c], ax
add eax, 4
mov word [0xc0701e], ax
lea ecx, [edx + 6]
mov eax, ecx
mov word [0xc07020], ax
add eax, 0xfffffff4
mov word [0xc07022], ax
lea eax, [edx - 7]
mov word [0xc07024], ax
add eax, 3
mov word [0xc07026], ax
lea eax, [edx + 0xa]
push edi
mov edi, eax
add eax, 0xffffffec
mov ecx, eax
mov word [0xc07036], ax
lea eax, [edx + 0x11]
mov word [0xc07038], ax
add eax, 0xffffffac
mov word [0xc07028], di
mov word [0xc0702a], di
mov dword [0xc0702c], 0xc4d8c4ce
mov dword [0xc07030], 0xc4d9c4d4
mov word [0xc07034], cx
mov word [0xc0703a], ax
pop edi
xor eax, eax
mov ecx, 0xc48b
xor cx, word [eax + 0xc07018]
add eax, 2
mov word [eax + 0xc0774e], cx
cmp eax, 0x24
jb 0xb7032d
mov eax, 0xc07750
ret

Function at 0xb706f9
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc07cc0], 1
jne 0xb7074e
or dword [0xc07cc0], 1
mov dword [0xc070c8], 0xc8eceed9
mov dword [0xc070cc], 0xffeaeef9
mov dword [0xc070d0], 0xf2eec0ee
mov dword [0xc070d4], 0xa2a3f3ce
mov dword [0xc070d8], 0xe2eaedab
mov dword [0xc070dc], 0xb1efeee7
mov word [0xc070e0], 0x8bab
xor eax, eax
mov cl, byte [eax + 0xc070c8]
xor cl, 0x8b
mov byte [eax + 0xc077ac], cl
inc eax
cmp eax, 0x1a
jb 0xb70750
mov eax, 0xc077ac
ret

Function at 0xb70830
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc07cbc], 1
jne 0xb70896
or dword [0xc07cbc], 1
mov dword [0xc070e4], 0xe6fee5ce
mov dword [0xc070e8], 0xffeaf9ee
mov dword [0xc070ec], 0xabe5e4e2
mov dword [0xc070f0], 0xeeefe5e2
mov dword [0xc070f4], 0xfee4abf3
mov dword [0xc070f8], 0xede4abff
mov dword [0xc070fc], 0xe5eaf9ab
mov word [0xc07100], 0xeeec
mov byte [0xc07102], 0x8b
xor eax, eax
mov cl, byte [eax + 0xc070e4]
xor cl, 0x8b
mov byte [eax + 0xc077c8], cl
inc eax
cmp eax, 0x1f
jb 0xb70898
mov eax, 0xc077c8
ret

Function at 0xb708b3
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc07cb8], 1
jne 0xb708ff
or dword [0xc07cb8], 1
mov dword [0xc07104], 0xceeceed9
mov dword [0xc07108], 0xc0e6fee5
mov dword [0xc0710c], 0xf3cef2ee
mov dword [0xc07110], 0xedaba2a3
mov dword [0xc07114], 0xeee7e2ea
mov dword [0xc07118], 0x8babb1ef
xor eax, eax
mov cl, byte [eax + 0xc07104]
xor cl, 0x8b
mov byte [eax + 0xc077e8], cl
inc eax
cmp eax, 0x18
jb 0xb70901
mov eax, 0xc077e8
ret

Function at 0xb70a64
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc07cb4], 1
jne 0xb70a99
or dword [0xc07cb4], 1
mov dword [0xc0711c], 0xe7e7fec5
mov dword [0xc07120], 0xe5e4e8ab
mov dword [0xc07124], 0xfff3eeff
mov byte [0xc07128], 0x8b
xor eax, eax
mov cl, byte [eax + 0xc0711c]
xor cl, 0x8b
mov byte [eax + 0xc07800], cl
inc eax
cmp eax, 0xd
jb 0xb70a9b
mov eax, 0xc07800
ret
Function at 0xb70ab6
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc07cb0], 1
jne 0xb70b02
or dword [0xc07cb0], 1
mov dword [0xc0712c], 0xc4eceed9
mov dword [0xc07130], 0xc0e5eefb
mov dword [0xc07134], 0xf3cef2ee
mov dword [0xc07138], 0xedaba2a3
mov dword [0xc0713c], 0xeee7e2ea
mov dword [0xc07140], 0x8babb1ef
xor eax, eax
mov cl, byte [eax + 0xc0712c]
xor cl, 0x8b
mov byte [eax + 0xc07810], cl
inc eax
cmp eax, 0x18
jb 0xb70b04
mov eax, 0xc07810
ret

Function at 0xb70b1f
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc07cac], 1
jne 0xb70b7b
or dword [0xc07cac], 1
mov dword [0xc07144], 0xdaeceed9
mov dword [0xc07148], 0xf2f9eefe
mov dword [0xc0714c], 0xe4ede5c2
mov dword [0xc07150], 0xa3f2eec0
mov dword [0xc07154], 0xeaedaba2
mov dword [0xc07158], 0xefeee7e2
mov word [0xc0715c], 0xabb1
mov byte [0xc0715e], 0x8b
xor eax, eax
mov cl, byte [eax + 0xc07144]
xor cl, 0x8b
mov byte [eax + 0xc07828], cl
inc eax
cmp eax, 0x1b
jb 0xb70b7d
mov eax, 0xc07828
ret

Function at 0xb70c6e
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc07ca8], 1
jne 0xb70cd4
or dword [0xc07ca8], 1
mov dword [0xc07160], 0xe6fee5ce
mov dword [0xc07164], 0xffeaf9ee
mov dword [0xc07168], 0xabe5e4e2
mov dword [0xc0716c], 0xeeefe5e2
mov dword [0xc07170], 0xfee4abf3
mov dword [0xc07174], 0xede4abff
mov dword [0xc07178], 0xe5eaf9ab
mov word [0xc0717c], 0xeeec
mov byte [0xc0717e], 0x8b
xor eax, eax
mov cl, byte [eax + 0xc07160]
xor cl, 0x8b
mov byte [eax + 0xc07844], cl
inc eax
cmp eax, 0x1f
jb 0xb70cd6
mov eax, 0xc07844
ret

Function at 0xb70cf1
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc07ca4], 1
jne 0xb70d4d
or dword [0xc07ca4], 1
mov dword [0xc07180], 0xdaeceed9
mov dword [0xc07184], 0xf2f9eefe
mov dword [0xc07188], 0xe4ede5c2
mov dword [0xc0718c], 0xa3f2eec0
mov dword [0xc07190], 0xeaedaba2
mov dword [0xc07194], 0xefeee7e2
mov word [0xc07198], 0xabb1
mov byte [0xc0719a], 0x8b
xor eax, eax
mov cl, byte [eax + 0xc07180]
xor cl, 0x8b
mov byte [eax + 0xc07864], cl
inc eax
cmp eax, 0x1b
jb 0xb70d4f
mov eax, 0xc07864
ret

Function at 0xb70eaf
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc07ca0], 1
jne 0xb70ee4
or dword [0xc07ca0], 1
mov dword [0xc0719c], 0xe7e7fec5
mov dword [0xc071a0], 0xe5e4e8ab
mov dword [0xc071a4], 0xfff3eeff
mov byte [0xc071a8], 0x8b
xor eax, eax
mov cl, byte [eax + 0xc0719c]
xor cl, 0x8b
mov byte [eax + 0xc07880], cl
inc eax
cmp eax, 0xd
jb 0xb70ee6
mov eax, 0xc07880
ret

Function at 0xb70f01
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc07c9c], 1
jne 0xb70f4d
or dword [0xc07c9c], 1
mov dword [0xc071ac], 0xc4eceed9
mov dword [0xc071b0], 0xc0e5eefb
mov dword [0xc071b4], 0xf3cef2ee
mov dword [0xc071b8], 0xedaba2a3
mov dword [0xc071bc], 0xeee7e2ea
mov dword [0xc071c0], 0x8babb1ef
xor eax, eax
mov cl, byte [eax + 0xc071ac]
xor cl, 0x8b
mov byte [eax + 0xc07890], cl
inc eax
cmp eax, 0x18
jb 0xb70f4f
mov eax, 0xc07890
ret
Function at 0xb70f6a
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc07c98], 1
jne 0xb70fc6
or dword [0xc07c98], 1
mov dword [0xc071c4], 0xdaeceed9
mov dword [0xc071c8], 0xf2f9eefe
mov dword [0xc071cc], 0xe4ede5c2
mov dword [0xc071d0], 0xa3f2eec0
mov dword [0xc071d4], 0xeaedaba2
mov dword [0xc071d8], 0xefeee7e2
mov word [0xc071dc], 0xabb1
mov byte [0xc071de], 0x8b
xor eax, eax
mov cl, byte [eax + 0xc071c4]
xor cl, 0x8b
mov byte [eax + 0xc078a8], cl
inc eax
cmp eax, 0x1b
jb 0xb70fc8
mov eax, 0xc078a8
ret

Function at 0xb71274
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc07c94], 1
mov ecx, 0xc48b
jne 0xb712e0
or dword [0xc07c94], 1
lea eax, [ecx + 0x18]
mov word [0xc071e0], ax
add eax, 0x2c
mov word [0xc071e2], ax
lea eax, [ecx + 0x63]
mov word [0xc071e4], ax
dec eax
mov word [0xc071e6], ax
lea eax, [ecx + 0x5f]
mov word [0xc071e8], ax
add eax, 0x14
mov word [0xc071ea], ax
lea eax, [ecx + 0x5c]
mov word [0xc071ec], ax
add eax, 0x18
mov word [0xc071ee], ax
lea eax, [ecx + 0x17]
mov word [0xc071f0], ax
mov eax, ecx
mov word [0xc071f2], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0xc071e0]
add eax, 2
mov word [eax + 0xc078c2], dx
cmp eax, 0x14
jb 0xb712e2
mov eax, 0xc078c4
ret

Function at 0xb71300
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc07c90], 1
mov ecx, 0xc48b
jne 0xb7136c
or dword [0xc07c90], 1
lea eax, [ecx + 0x18]
mov word [0xc071f4], ax
add eax, 0x4c
mov word [0xc071f6], ax
lea eax, [ecx + 0x63]
mov word [0xc071f8], ax
dec eax
mov word [0xc071fa], ax
lea eax, [ecx + 0x5f]
mov word [0xc071fc], ax
add eax, 0x14
mov word [0xc071fe], ax
lea eax, [ecx + 0x5c]
mov word [0xc07200], ax
add eax, 0x18
mov word [0xc07202], ax
lea eax, [ecx + 0x17]
mov word [0xc07204], ax
mov eax, ecx
mov word [0xc07206], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0xc071f4]
add eax, 2
mov word [eax + 0xc078d6], dx
cmp eax, 0x14
jb 0xb7136e
mov eax, 0xc078d8
ret

Function at 0xb7138c
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc07c8c], 1
jne 0xb713d8
or dword [0xc07c8c], 1
mov dword [0xc07208], 0xc4eceed9
mov dword [0xc0720c], 0xc0e5eefb
mov dword [0xc07210], 0xf3cef2ee
mov dword [0xc07214], 0xedaba2a3
mov dword [0xc07218], 0xeee7e2ea
mov dword [0xc0721c], 0x8babb1ef
xor eax, eax
mov cl, byte [eax + 0xc07208]
xor cl, 0x8b
mov byte [eax + 0xc078ec], cl
inc eax
cmp eax, 0x18
jb 0xb713da
mov eax, 0xc078ec
ret

Function at 0xb713f5
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc07c88], 1
jne 0xb71451
or dword [0xc07c88], 1
mov dword [0xc07220], 0xdaeceed9
mov dword [0xc07224], 0xf2f9eefe
mov dword [0xc07228], 0xfee7eadd
mov dword [0xc0722c], 0xa3f3ceee
mov dword [0xc07230], 0xeaedaba2
mov dword [0xc07234], 0xefeee7e2
mov word [0xc07238], 0xabb1
mov byte [0xc0723a], 0x8b
xor eax, eax
mov cl, byte [eax + 0xc07220]
xor cl, 0x8b
mov byte [eax + 0xc07904], cl
inc eax
cmp eax, 0x1b
jb 0xb71453
mov eax, 0xc07904
ret
Function at 0xb7146e
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc07c84], 1
jne 0xb714ca
or dword [0xc07c84], 1
mov dword [0xc0723c], 0xdaeceed9
mov dword [0xc07240], 0xf2f9eefe
mov dword [0xc07244], 0xfee7eadd
mov dword [0xc07248], 0xa3f3ceee
mov dword [0xc0724c], 0xeaedaba2
mov dword [0xc07250], 0xefeee7e2
mov word [0xc07254], 0xabb1
mov byte [0xc07256], 0x8b
xor eax, eax
mov cl, byte [eax + 0xc0723c]
xor cl, 0x8b
mov byte [eax + 0xc07920], cl
inc eax
cmp eax, 0x1b
jb 0xb714cc
mov eax, 0xc07920
ret

Function at 0xb7154c
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc07c80], 1
jne 0xb71597
or dword [0xc07c80], 1
mov dword [0xc07258], 0xeefbf2df
mov dword [0xc0725c], 0xf8eafcab
mov dword [0xc07260], 0xffe4e5ab
mov dword [0xc07264], 0xf8abeaab
mov dword [0xc07268], 0xe5e2f9ff
mov word [0xc0726c], 0x8bec
xor eax, eax
mov cl, byte [eax + 0xc07258]
xor cl, 0x8b
mov byte [eax + 0xc0793c], cl
inc eax
cmp eax, 0x16
jb 0xb71599
mov eax, 0xc0793c
ret

Function at 0xb715b4
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc07c7c], 1
jne 0xb7161d
or dword [0xc07c7c], 1
mov dword [0xc07270], 0xeafde5c2
mov dword [0xc07274], 0xabefe2e7
mov dword [0xc07278], 0xeaffeaef
mov dword [0xc0727c], 0xf1e2f8ab
mov dword [0xc07280], 0xe4edabee
mov dword [0xc07284], 0xe2fcabf9
mov dword [0xc07288], 0xd9abeeef
mov dword [0xc0728c], 0xd8d4ccce
mov word [0xc07290], 0x8bd1
xor eax, eax
mov cl, byte [eax + 0xc07270]
xor cl, 0x8b
mov byte [eax + 0xc07954], cl
inc eax
cmp eax, 0x22
jb 0xb7161f
mov eax, 0xc07954
ret

Function at 0xb71799
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc07c78], 1
jne 0xb717e5
or dword [0xc07c78], 1
mov dword [0xc07294], 0xc4eceed9
mov dword [0xc07298], 0xc0e5eefb
mov dword [0xc0729c], 0xf3cef2ee
mov dword [0xc072a0], 0xedaba2a3
mov dword [0xc072a4], 0xeee7e2ea
mov dword [0xc072a8], 0x8babb1ef
xor eax, eax
mov cl, byte [eax + 0xc07294]
xor cl, 0x8b
mov byte [eax + 0xc07978], cl
inc eax
cmp eax, 0x18
jb 0xb717e7
mov eax, 0xc07978
ret

Function at 0xb71802
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc07c74], 1
jne 0xb71868
or dword [0xc07c74], 1
mov dword [0xc072ac], 0xd8eceed9
mov dword [0xc072b0], 0xeaddffee
mov dword [0xc072b4], 0xceeefee7
mov dword [0xc072b8], 0xfff8a3f3
mov dword [0xc072bc], 0xece5e2f9
mov dword [0xc072c0], 0xeaedaba2
mov dword [0xc072c4], 0xefeee7e2
mov word [0xc072c8], 0xabb1
mov byte [0xc072ca], 0x8b
xor eax, eax
mov cl, byte [eax + 0xc072ac]
xor cl, 0x8b
mov byte [eax + 0xc07990], cl
inc eax
cmp eax, 0x1f
jb 0xb7186a
mov eax, 0xc07990
ret

Function at 0xb719d4
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc07c70], 1
jne 0xb71a20
or dword [0xc07c70], 1
mov dword [0xc072cc], 0xc4eceed9
mov dword [0xc072d0], 0xc0e5eefb
mov dword [0xc072d4], 0xf3cef2ee
mov dword [0xc072d8], 0xedaba2a3
mov dword [0xc072dc], 0xeee7e2ea
mov dword [0xc072e0], 0x8babb1ef
xor eax, eax
mov cl, byte [eax + 0xc072cc]
xor cl, 0x8b
mov byte [eax + 0xc079b0], cl
inc eax
cmp eax, 0x18
jb 0xb71a22
mov eax, 0xc079b0
ret
Function at 0xb71a3d
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc07c6c], 1
jne 0xb71a9c
or dword [0xc07c6c], 1
mov dword [0xc072e4], 0xd8eceed9
mov dword [0xc072e8], 0xeaddffee
mov dword [0xc072ec], 0xceeefee7
mov dword [0xc072f0], 0xfcefa3f3
mov dword [0xc072f4], 0xa2eff9e4
mov dword [0xc072f8], 0xe2eaedab
mov dword [0xc072fc], 0xb1efeee7
mov word [0xc07300], 0x8bab
xor eax, eax
mov cl, byte [eax + 0xc072e4]
xor cl, 0x8b
mov byte [eax + 0xc079c8], cl
inc eax
cmp eax, 0x1e
jb 0xb71a9e
mov eax, 0xc079c8
ret

Function at 0xb71c09
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc07c68], 1
jne 0xb71c83
or dword [0xc07c68], 1
mov dword [0xc07304], 0xfff8fec6
mov dword [0xc07308], 0xeefbf8ab
mov dword [0xc0730c], 0xf2ede2e8
mov dword [0xc07310], 0xe5abeaab
mov dword [0xc07314], 0xeea6e5e4
mov dword [0xc07318], 0xf2fffbe6
mov dword [0xc0731c], 0xe9fef8ab
mov dword [0xc07320], 0xabf2eee0
mov dword [0xc07324], 0xe2f9fff8
mov word [0xc07328], 0xece5
mov byte [0xc0732a], 0x8b
xor eax, eax
mov cl, byte [eax + 0xc07304]
xor cl, 0x8b
mov byte [eax + 0xc079e8], cl
inc eax
cmp eax, 0x27
jb 0xb71c85
mov eax, 0xc079e8
ret

Function at 0xb71ca0
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc07c64], 1
jne 0xb71cec
or dword [0xc07c64], 1
mov dword [0xc0732c], 0xc4eceed9
mov dword [0xc07330], 0xc0e5eefb
mov dword [0xc07334], 0xf3cef2ee
mov dword [0xc07338], 0xedaba2a3
mov dword [0xc0733c], 0xeee7e2ea
mov dword [0xc07340], 0x8babb1ef
xor eax, eax
mov cl, byte [eax + 0xc0732c]
xor cl, 0x8b
mov byte [eax + 0xc07a10], cl
inc eax
cmp eax, 0x18
jb 0xb71cee
mov eax, 0xc07a10
ret

Function at 0xb71d09
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc07c60], 1
jne 0xb71d5b
or dword [0xc07c60], 1
mov dword [0xc07344], 0xeecfc3d8
mov dword [0xc07348], 0xeeffeee7
mov dword [0xc0734c], 0xa3f2eec0
mov dword [0xc07350], 0xeaedaba2
mov dword [0xc07354], 0xefeee7e2
mov word [0xc07358], 0xabb1
mov byte [0xc0735a], 0x8b
xor eax, eax
mov cl, byte [eax + 0xc07344]
xor cl, 0x8b
mov byte [eax + 0xc07a28], cl
inc eax
cmp eax, 0x17
jb 0xb71d5d
mov eax, 0xc07a28
ret

Function at 0xb71eaa
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc07c5c], 1
jne 0xb71ef6
or dword [0xc07c5c], 1
mov dword [0xc0735c], 0xc4eceed9
mov dword [0xc07360], 0xc0e5eefb
mov dword [0xc07364], 0xf3cef2ee
mov dword [0xc07368], 0xedaba2a3
mov dword [0xc0736c], 0xeee7e2ea
mov dword [0xc07370], 0x8babb1ef
xor eax, eax
mov cl, byte [eax + 0xc0735c]
xor cl, 0x8b
mov byte [eax + 0xc07a40], cl
inc eax
cmp eax, 0x18
jb 0xb71ef8
mov eax, 0xc07a40
ret

Function at 0xb71f13
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc07c58], 1
jne 0xb71f66
or dword [0xc07c58], 1
mov dword [0xc07374], 0xeecfc3d8
mov dword [0xc07378], 0xeeffeee7
mov dword [0xc0737c], 0xfee7eadd
mov dword [0xc07380], 0xaba2a3ee
mov dword [0xc07384], 0xe7e2eaed
mov dword [0xc07388], 0xabb1efee
mov byte [0xc0738c], 0x8b
xor eax, eax
mov cl, byte [eax + 0xc07374]
xor cl, 0x8b
mov byte [eax + 0xc07a58], cl
inc eax
cmp eax, 0x19
jb 0xb71f68
mov eax, 0xc07a58
ret
Function at 0xb71f86
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc07c54], 1
jne 0xb72041
or dword [0xc07c54], 1
mov dword [0xc07390], 0xcfc8c9ca
mov dword [0xc07394], 0xc3cccdce
mov dword [0xc07398], 0xc7c0c1c2
mov dword [0xc0739c], 0xdbc4c5c6
mov dword [0xc073a0], 0xdfd8d9da
mov dword [0xc073a4], 0xd3dcddde
mov dword [0xc073a8], 0xe9ead1d2
mov dword [0xc073ac], 0xedeeefe8
mov dword [0xc073b0], 0xe1e2e3ec
mov dword [0xc073b4], 0xe5e6e7e0
mov dword [0xc073b8], 0xf9fafbe4
mov dword [0xc073bc], 0xfdfefff8
mov dword [0xc073c0], 0xf1f2f3fc
mov dword [0xc073c4], 0xb8b9babb
mov dword [0xc073c8], 0xbcbdbebf
mov dword [0xc073cc], 0xa4a0b2b3
mov byte [0xc073d0], 0x8b
xor eax, eax
mov cl, byte [eax + 0xc07390]
xor cl, 0x8b
mov byte [eax + 0xc07a78], cl
inc eax
cmp eax, 0x41
jb 0xb72043
mov eax, 0xc07a78
ret

Function at 0xb720ee
Capabilities:
Encode data using base64

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, dword [ebp + 8]
push ebx
push esi
push edi
mov edi, eax
xor edx, edx
push 3
lea eax, [ecx + 2]
pop ebx
div ebx
mov esi, dword [ebp + 0x10]
shl eax, 2
inc eax
cmp dword [esi], eax
jae 0xb72118
mov dword [esi], eax
xor al, al
jmp 0xb721f0
mov eax, ecx
xor edx, edx
push 3
pop ecx
div ecx
mov esi, dword [ebp + 0xc]
mov ecx, dword [0xc01a7c]
xor edx, edx
imul eax, eax, 3
test eax, eax
je 0xb72194
dec eax
push 3
pop ebx
div ebx
inc eax
mov edx, eax
mov dword [ebp - 4], eax
imul edx, edx, 3
movzx eax, byte [edi]
shr eax, 2
mov al, byte [eax + ecx]
mov byte [esi], al
movzx eax, byte [edi + 1]
movzx ebx, byte [edi]
shr eax, 4
shl ebx, 4
add eax, ebx
and eax, 0x3f
mov al, byte [eax + ecx]
mov byte [esi + 1], al
movzx eax, byte [edi + 2]
movzx ebx, byte [edi + 1]
shr eax, 6
lea eax, [eax + ebx*4]
and eax, 0x3f
mov al, byte [eax + ecx]
mov byte [esi + 2], al
movzx eax, byte [edi + 2]
and eax, 0x3f
mov al, byte [eax + ecx]
mov byte [esi + 3], al
add esi, 4
add edi, 3
dec dword [ebp - 4]
jne 0xb72142
cmp edx, dword [ebp + 8]
jae 0xb721e3
movzx eax, byte [edi]
inc edx
cmp edx, dword [ebp + 8]
jae 0xb721a8
movzx edi, byte [edi + 1]
jmp 0xb721aa
xor edi, edi
mov ebx, eax
shr ebx, 2
and ebx, 0x3f
mov bl, byte [ebx + ecx]
mov byte [esi], bl
mov ebx, edi
shr ebx, 4
shl eax, 4
add ebx, eax
and ebx, 0x3f
mov al, byte [ebx + ecx]
mov byte [esi + 1], al
cmp edx, dword [ebp + 8]
jae 0xb721d7
and edi, 0xf
mov cl, byte [ecx + edi*4]
jmp 0xb721d9
mov cl, 0x3d
mov byte [esi + 2], cl
mov byte [esi + 3], 0x3d
add esi, 4
mov eax, dword [ebp + 0x10]
mov byte [esi], 0
sub esi, dword [ebp + 0xc]
mov dword [eax], esi
mov al, 1
pop edi
pop esi
pop ebx
leave
ret

Function at 0xb72e4c
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc07c50], 1
jne 0xb72eb3
or dword [0xc07c50], 1
mov dword [0xc07abc], 0xf5d0f5e2
mov dword [0xc07ac0], 0xfdd0ffe6
mov dword [0xc07ac4], 0xeaebeeea
mov dword [0xc07ac8], 0xe1e6d0fd
mov dword [0xc07acc], 0xe9d0fbe6
mov dword [0xc07ad0], 0xa7eae3e6
mov dword [0xc07ad4], 0xeee9afa6
mov dword [0xc07ad8], 0xebeae3e6
mov byte [0xc07adc], 0x8f
xor eax, eax
mov cl, byte [eax + 0xc07abc]
xor cl, 0x8f
mov byte [eax + 0xc07b7c], cl
inc eax
cmp eax, 0x21
jb 0xb72eb5
mov eax, 0xc07b7c
ret