joyce8/EMBER2024-capa huggingface dataset:
Function at 0xb427f0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x7c
test byte [0xc084e0], 1
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
mov ecx, 0xc45b
jne 0xb4282e
or dword [0xc084e0], 1
lea eax, [ecx - 0x2f]
mov word [0xc01ae8], ax
add eax, 0xd
mov word [0xc01aea], ax
mov eax, ecx
mov word [0xc01aec], ax
xor esi, esi
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0xc01ae8]
add eax, 2
mov word [eax + 0xc02192], dx
cmp eax, 6
jb 0xb42832
lea eax, [ebx + 0xc]
cmp dword [eax + 0x14], 8
jb 0xb42855
mov eax, dword [eax]
push 0xc02194
push eax
lea eax, [esp + 0x18]
push eax
call fcn.00ba6857
add esp, 0xc
test eax, eax
jne 0xb42920
push dword [esp + 0x10]
push dword [ebp + 0xc]
push ebx
call fcn.00b43583
push dword [esp + 0x10]
call fcn.00b42929
push eax
call fcn.00ba6db1
push dword [esp + 0x18]
call fcn.00ba733c
add esp, 0xc
push 0x44
pop edi
push edi
lea eax, [esp + 0x44]
push esi
push eax
call fcn.00bab860
add esp, 0xc
mov dword [esp + 0x40], edi
xor eax, eax
lea ecx, [esp + 0x14]
push ecx
lea edi, [esp + 0x18]
stosd dword es:[edi], eax
lea ecx, [esp + 0x44]
push ecx
push esi
push esi
stosd dword es:[edi], eax
push esi
push esi
stosd dword es:[edi], eax
push esi
stosd dword es:[edi], eax
mov eax, dword [ebx + 0x28]
push esi
push eax
push esi
call dword [0xbd608c]
test eax, eax
jne 0xb4290e
call dword [0xbd60a8]
push eax
lea eax, [esp + 0x28]
push eax
call fcn.00b6dbe9
cmp dword [eax + 0x14], 0x10
pop ecx
pop ecx
jb 0xb428f2
mov eax, dword [eax]
push eax
call fcn.00b42969
push eax
call fcn.00ba7080
pop ecx
pop ecx
push esi
push 1
lea ecx, [esp + 0x2c]
call fcn.00b44c93
jmp 0xb42920
push dword [esp + 0x18]
mov esi, dword [0xbd60bc]
call esi
push dword [esp + 0x14]
call esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8

Function at 0xb42929
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc084dc], 1
jne 0xb4294c
or dword [0xc084dc], 1
mov dword [0xc01af0], 0x151e5156
mov word [0xc01af4], 0x5b1f
xor eax, eax
mov cl, byte [eax + 0xc01af0]
xor cl, 0x5b
mov byte [eax + 0xc0219c], cl
inc eax
cmp eax, 6
jb 0xb4294e
mov eax, 0xc0219c
ret

Function at 0xb42969
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc084d8], 1
jne 0xb429ee
or dword [0xc084d8], 1
mov dword [0xc01af8], 0x37323a1d
mov dword [0xc01afc], 0x2f7b3f3e
mov dword [0xc01b00], 0x29387b34
mov dword [0xc01b04], 0x3e2f3a3e
mov dword [0xc01b08], 0x3a29387b
mov dword [0xc01b0c], 0x297b3328
mov dword [0xc01b10], 0x29342b3e
mov dword [0xc01b14], 0x7b293e2f
mov dword [0xc01b18], 0x3834292b
mov dword [0xc01b1c], 0x6128283e
mov dword [0xc01b20], 0x51287e7b
mov byte [0xc01b24], 0x5b
xor eax, eax
mov cl, byte [eax + 0xc01af8]
xor cl, 0x5b
mov byte [eax + 0xc021a4], cl
inc eax
cmp eax, 0x2d
jb 0xb429f0
mov eax, 0xc021a4
ret
Function at 0xb43ab8
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc08478], 1
jne 0xb43aed
or dword [0xc08478], 1
mov dword [0xc01da4], 0x2e3f3416
mov dword [0xc01da8], 0x7b613e37
mov dword [0xc01dac], 0x5156287e
mov byte [0xc01db0], 0x5b
xor eax, eax
mov cl, byte [eax + 0xc01da4]
xor cl, 0x5b
mov byte [eax + 0xc02450], cl
inc eax
cmp eax, 0xd
jb 0xb43aef
mov eax, 0xc02450
ret

Function at 0xb43b0a
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc08474], 1
jne 0xb43b49
or dword [0xc08474], 1
mov dword [0xc01db4], 0x3e29330f
mov dword [0xc01db8], 0x7b613f3a
mov dword [0xc01dbc], 0x237e236b
mov dword [0xc01dc0], 0x51565156
mov byte [0xc01dc4], 0x5b
xor eax, eax
mov cl, byte [eax + 0xc01db4]
xor cl, 0x5b
mov byte [eax + 0xc02460], cl
inc eax
cmp eax, 0x11
jb 0xb43b4b
mov eax, 0xc02460
ret

Function at 0xb43b66
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc08470], 1
jne 0xb43ba4
or dword [0xc08470], 1
mov dword [0xc01dc8], 0x3e38231e
mov dword [0xc01dcc], 0x34322f2b
mov dword [0xc01dd0], 0x3f7e7b35
mov word [0xc01dd4], 0x5156
mov byte [0xc01dd6], 0x5b
xor eax, eax
mov cl, byte [eax + 0xc01dc8]
xor cl, 0x5b
mov byte [eax + 0xc02474], cl
inc eax
cmp eax, 0xf
jb 0xb43ba6
mov eax, 0xc02474
ret

Function at 0xb43bc1
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc0846c], 1
jne 0xb43bff
or dword [0xc0846c], 1
mov dword [0xc01dd8], 0x3a383417
mov dword [0xc01ddc], 0x3534322f
mov dword [0xc01de0], 0x2b7e7b61
mov word [0xc01de4], 0x5156
mov byte [0xc01de6], 0x5b
xor eax, eax
mov cl, byte [eax + 0xc01dd8]
xor cl, 0x5b
mov byte [eax + 0xc02484], cl
inc eax
cmp eax, 0xf
jb 0xb43c01
mov eax, 0xc02484
ret

Function at 0xb43c1c
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc08468], 1
jne 0xb43c5d
or dword [0xc08468], 1
mov dword [0xc01de8], 0x3e2b220f
mov dword [0xc01dec], 0x287e7b61
mov dword [0xc01df0], 0x236b737b
mov dword [0xc01df4], 0x5672237e
mov word [0xc01df8], 0x5b51
xor eax, eax
mov cl, byte [eax + 0xc01de8]
xor cl, 0x5b
mov byte [eax + 0xc02494], cl
inc eax
cmp eax, 0x12
jb 0xb43c5f
mov eax, 0xc02494
ret

Function at 0xb43c7a
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc08464], 1
jne 0xb43d02
or dword [0xc08464], 1
mov dword [0xc01dfc], 0x3a2f3e1f
mov dword [0xc01e00], 0x61283732
mov dword [0xc01e04], 0x32290f7b
mov dword [0xc01e08], 0x2f7b3f3e
mov dword [0xc01e0c], 0x3e297b34
mov dword [0xc01e10], 0x3d7b3f3a
mov dword [0xc01e14], 0x7b363429
mov dword [0xc01e18], 0x34363e36
mov dword [0xc01e1c], 0x3a7b2229
mov dword [0xc01e20], 0x3e293f3f
mov dword [0xc01e24], 0x7e7b2828
mov dword [0xc01e28], 0x5b51562b
xor eax, eax
mov cl, byte [eax + 0xc01dfc]
xor cl, 0x5b
mov byte [eax + 0xc024a8], cl
inc eax
cmp eax, 0x30
jb 0xb43d04
mov eax, 0xc024a8
ret
Function at 0xb43d1f
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc08460], 1
jne 0xb43db1
or dword [0xc08460], 1
mov dword [0xc01e2c], 0x3a2f3e1f
mov dword [0xc01e30], 0x61283732
mov dword [0xc01e34], 0x32290f7b
mov dword [0xc01e38], 0x2f7b3f3e
mov dword [0xc01e3c], 0x292c7b34
mov dword [0xc01e40], 0x7b3e2f32
mov dword [0xc01e44], 0x367b342f
mov dword [0xc01e48], 0x2934363e
mov dword [0xc01e4c], 0x3f3a7b22
mov dword [0xc01e50], 0x283e293f
mov dword [0xc01e54], 0x2b7e7b28
mov word [0xc01e58], 0x5156
mov byte [0xc01e5a], 0x5b
xor eax, eax
mov cl, byte [eax + 0xc01e2c]
xor cl, 0x5b
mov byte [eax + 0xc024d8], cl
inc eax
cmp eax, 0x2f
jb 0xb43db3
mov eax, 0xc024d8
ret

Function at 0xb43dce
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc0845c], 1
jne 0xb43e61
or dword [0xc0845c], 1
mov dword [0xc01e5c], 0x3a2f3e1f
mov dword [0xc01e60], 0x61283732
mov dword [0xc01e64], 0x32290f7b
mov dword [0xc01e68], 0x2f7b3f3e
mov dword [0xc01e6c], 0x233e7b34
mov dword [0xc01e70], 0x2f2e383e
mov dword [0xc01e74], 0x3e367b3e
mov dword [0xc01e78], 0x22293436
mov dword [0xc01e7c], 0x7b2f3a7b
mov dword [0xc01e80], 0x293f3f3a
mov dword [0xc01e84], 0x7b28283e
mov dword [0xc01e88], 0x51562b7e
mov byte [0xc01e8c], 0x5b
xor eax, eax
mov cl, byte [eax + 0xc01e5c]
xor cl, 0x5b
mov byte [eax + 0xc02508], cl
inc eax
cmp eax, 0x31
jb 0xb43e63
mov eax, 0xc02508
ret

Function at 0xb43e7e
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc08458], 1
jne 0xb43eb5
or dword [0xc08458], 1
mov dword [0xc01e90], 0x3c3a371d
mov dword [0xc01e94], 0x6b7b6128
mov dword [0xc01e98], 0x56237e23
mov word [0xc01e9c], 0x5b51
xor eax, eax
mov cl, byte [eax + 0xc01e90]
xor cl, 0x5b
mov byte [eax + 0xc0253c], cl
inc eax
cmp eax, 0xe
jb 0xb43eb7
mov eax, 0xc0253c
ret

Function at 0xb43ed2
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc08454], 1
jne 0xb43f09
or dword [0xc08454], 1
mov dword [0xc01ea0], 0x3a293a0b
mov dword [0xc01ea4], 0x3e2f3e36
mov dword [0xc01ea8], 0x56612829
mov word [0xc01eac], 0x5b51
xor eax, eax
mov cl, byte [eax + 0xc01ea0]
xor cl, 0x5b
mov byte [eax + 0xc0254c], cl
inc eax
cmp eax, 0xe
jb 0xb43f0b
mov eax, 0xc0254c
ret

Function at 0xb43f26
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0xc08450], 1
jne 0xb43f71
or dword [0xc08450], 1
mov dword [0xc01eb0], 0x293a0b52
mov dword [0xc01eb4], 0x2f3e363a
mov dword [0xc01eb8], 0x7e00293e
mov dword [0xc01ebc], 0x7b61063f
mov dword [0xc01ec0], 0x51562b7e
mov byte [0xc01ec4], 0x5b
mov cl, byte [eax + 0xc01eb0]
xor cl, 0x5b
mov byte [eax + 0xc0255c], cl
inc eax
cmp eax, 0x15
jb 0xb43f71
mov eax, 0xc0255c
ret

Function at 0xb43f8c
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc0844c], 1
jne 0xb43fc4
or dword [0xc0844c], 1
mov dword [0xc01ec8], 0x7b131e08
mov dword [0xc01ecc], 0x373a351a
mov dword [0xc01ed0], 0x28322822
mov dword [0xc01ed4], 0x5b515661
xor eax, eax
mov cl, byte [eax + 0xc01ec8]
xor cl, 0x5b
mov byte [eax + 0xc02574], cl
inc eax
cmp eax, 0x10
jb 0xb43fc6
mov eax, 0xc02574
ret
Function at 0xb43fe4
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc08448], 1
jne 0xb4402c
or dword [0xc08448], 1
mov dword [0xc01ed8], 0x31391452
mov dword [0xc01edc], 0x7b2f383e
mov dword [0xc01ee0], 0x3e2b222f
mov dword [0xc01ee4], 0x287e7b61
mov word [0xc01ee8], 0x5156
mov byte [0xc01eea], 0x5b
xor eax, eax
mov cl, byte [eax + 0xc01ed8]
xor cl, 0x5b
mov byte [eax + 0xc02584], cl
inc eax
cmp eax, 0x13
jb 0xb4402e
mov eax, 0xc02584
ret

Function at 0xb44049
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc08444], 1
jne 0xb440b2
or dword [0xc08444], 1
mov dword [0xc01eec], 0x323a1d52
mov dword [0xc01ef0], 0x7b3f3e37
mov dword [0xc01ef4], 0x3d7b342f
mov dword [0xc01ef8], 0x34373734
mov dword [0xc01efc], 0x342b7b2c
mov dword [0xc01f00], 0x3e2f3532
mov dword [0xc01f04], 0x33387b29
mov dword [0xc01f08], 0x5635323a
mov word [0xc01f0c], 0x5b51
xor eax, eax
mov cl, byte [eax + 0xc01eec]
xor cl, 0x5b
mov byte [eax + 0xc02598], cl
inc eax
cmp eax, 0x22
jb 0xb440b4
mov eax, 0xc02598
ret

Function at 0xb440cf
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc08440], 1
jne 0xb440f2
or dword [0xc08440], 1
mov dword [0xc01f10], 0x3f2f281b
mov word [0xc01f14], 0x5b1b
xor eax, eax
mov cl, byte [eax + 0xc01f10]
xor cl, 0x5b
mov byte [eax + 0xc025bc], cl
inc eax
cmp eax, 6
jb 0xb440f4
mov eax, 0xc025bc
ret

Function at 0xb4410f
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc0843c], 1
jne 0xb44146
or dword [0xc0843c], 1
mov dword [0xc01f18], 0x2f352e29
mov dword [0xc01f1c], 0x43e3632
mov dword [0xc01f20], 0x3429293e
mov word [0xc01f24], 0x5b29
xor eax, eax
mov cl, byte [eax + 0xc01f18]
xor cl, 0x5b
mov byte [eax + 0xc025c4], cl
inc eax
cmp eax, 0xe
jb 0xb44148
mov eax, 0xc025c4
ret

Function at 0xb44163
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc08438], 1
jne 0xb44191
or dword [0xc08438], 1
mov dword [0xc01f28], 0x3c353a29
mov dword [0xc01f2c], 0x293e043e
mov dword [0xc01f30], 0x5b293429
xor eax, eax
mov cl, byte [eax + 0xc01f28]
xor cl, 0x5b
mov byte [eax + 0xc025d4], cl
inc eax
cmp eax, 0xc
jb 0xb44193
mov eax, 0xc025d4
ret

Function at 0xb441ae
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc08434], 1
jne 0xb441ec
or dword [0xc08434], 1
mov dword [0xc01f34], 0x293e2d34
mov dword [0xc01f38], 0x2c34373d
mov dword [0xc01f3c], 0x29293e04
mov word [0xc01f40], 0x2934
mov byte [0xc01f42], 0x5b
xor eax, eax
mov cl, byte [eax + 0xc01f34]
xor cl, 0x5b
mov byte [eax + 0xc025e0], cl
inc eax
cmp eax, 0xf
jb 0xb441ee
mov eax, 0xc025e0
ret

Function at 0xb44209
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc08430], 1
jne 0xb44241
or dword [0xc08430], 1
mov dword [0xc01f44], 0x3e3f352e
mov dword [0xc01f48], 0x34373d29
mov dword [0xc01f4c], 0x293e042c
mov dword [0xc01f50], 0x5b293429
xor eax, eax
mov cl, byte [eax + 0xc01f44]
xor cl, 0x5b
mov byte [eax + 0xc025f0], cl
inc eax
cmp eax, 0x10
jb 0xb44243
mov eax, 0xc025f0
ret
Function at 0xb4425e
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc0842c], 1
jne 0xb4428c
or dword [0xc0842c], 1
mov dword [0xc01f54], 0x323c3437
mov dword [0xc01f58], 0x293e0438
mov dword [0xc01f5c], 0x5b293429
xor eax, eax
mov cl, byte [eax + 0xc01f54]
xor cl, 0x5b
mov byte [eax + 0xc02600], cl
inc eax
cmp eax, 0xc
jb 0xb4428e
mov eax, 0xc02600
ret

Function at 0xb442a9
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc08428], 1
jne 0xb442de
or dword [0xc08428], 1
mov dword [0xc01f60], 0x3a36343f
mov dword [0xc01f64], 0x3e043532
mov dword [0xc01f68], 0x29342929
mov byte [0xc01f6c], 0x5b
xor eax, eax
mov cl, byte [eax + 0xc01f60]
xor cl, 0x5b
mov byte [eax + 0xc0260c], cl
inc eax
cmp eax, 0xd
jb 0xb442e0
mov eax, 0xc0260c
ret

Function at 0xb442fb
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc08424], 1
jne 0xb4433a
or dword [0xc08424], 1
mov dword [0xc01f70], 0x3a2d3532
mov dword [0xc01f74], 0x43f3237
mov dword [0xc01f78], 0x2e3c293a
mov dword [0xc01f7c], 0x2f353e36
mov byte [0xc01f80], 0x5b
xor eax, eax
mov cl, byte [eax + 0xc01f70]
xor cl, 0x5b
mov byte [eax + 0xc0261c], cl
inc eax
cmp eax, 0x11
jb 0xb4433c
mov eax, 0xc0261c
ret

Function at 0xb44357
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc08420], 1
jne 0xb4438c
or dword [0xc08420], 1
mov dword [0xc01f84], 0x3c353e37
mov dword [0xc01f88], 0x3e04332f
mov dword [0xc01f8c], 0x29342929
mov byte [0xc01f90], 0x5b
xor eax, eax
mov cl, byte [eax + 0xc01f84]
xor cl, 0x5b
mov byte [eax + 0xc02630], cl
inc eax
cmp eax, 0xd
jb 0xb4438e
mov eax, 0xc02630
ret

Function at 0xb443a9
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc0841c], 1
jne 0xb443de
or dword [0xc0841c], 1
mov dword [0xc01f94], 0x42f2e34
mov dword [0xc01f98], 0x29043d34
mov dword [0xc01f9c], 0x3e3c353a
mov byte [0xc01fa0], 0x5b
xor eax, eax
mov cl, byte [eax + 0xc01f94]
xor cl, 0x5b
mov byte [eax + 0xc02640], cl
inc eax
cmp eax, 0xd
jb 0xb443e0
mov eax, 0xc02640
ret

Function at 0xb443fb
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc08418], 1
jne 0xb44428
or dword [0xc08418], 1
mov dword [0xc01fa4], 0x3e38233e
mov dword [0xc01fa8], 0x34322f2b
mov word [0xc01fac], 0x5b35
xor eax, eax
mov cl, byte [eax + 0xc01fa4]
xor cl, 0x5b
mov byte [eax + 0xc02650], cl
inc eax
cmp eax, 0xa
jb 0xb4442a
mov eax, 0xc02650
ret

Function at 0xb44445
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc08414], 1
jne 0xb444a4
or dword [0xc08414], 1
mov dword [0xc01fb0], 0x3f2f2852
mov dword [0xc01fb4], 0x233e6161
mov dword [0xc01fb8], 0x2f2b3e38
mov dword [0xc01fbc], 0x61353432
mov dword [0xc01fc0], 0x3a332c61
mov dword [0xc01fc4], 0x6172732f
mov dword [0xc01fc8], 0x56287e7b
mov word [0xc01fcc], 0x5b51
xor eax, eax
mov cl, byte [eax + 0xc01fb0]
xor cl, 0x5b
mov byte [eax + 0xc0265c], cl
inc eax
cmp eax, 0x1e
jb 0xb444a6
mov eax, 0xc0265c
ret
Function at 0xb444c1
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc08410], 1
jne 0xb44535
or dword [0xc08410], 1
mov dword [0xc01fd0], 0x323a1d52
mov dword [0xc01fd4], 0x7b3f3e37
mov dword [0xc01fd8], 0x3c7b342f
mov dword [0xc01fdc], 0x287b2f3e
mov dword [0xc01fe0], 0x61613f2f
mov dword [0xc01fe4], 0x3e38233e
mov dword [0xc01fe8], 0x34322f2b
mov dword [0xc01fec], 0x2c616135
mov dword [0xc01ff0], 0x732f3a33
mov dword [0xc01ff4], 0x5b515672
xor eax, eax
mov cl, byte [eax + 0xc01fd0]
xor cl, 0x5b
mov byte [eax + 0xc0267c], cl
inc eax
cmp eax, 0x28
jb 0xb44537
mov eax, 0xc0267c
ret

Function at 0xb44552
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc0840c], 1
jne 0xb44586
or dword [0xc0840c], 1
mov dword [0xc01ff8], 0x36343804
mov dword [0xc01ffc], 0x29293e04
mov word [0xc02000], 0x2934
mov byte [0xc02002], 0x5b
xor eax, eax
mov cl, byte [eax + 0xc01ff8]
xor cl, 0x5b
mov byte [eax + 0xc026a4], cl
inc eax
cmp eax, 0xb
jb 0xb44588
mov eax, 0xc026a4
ret

Function at 0xb445a3
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc08408], 1
jne 0xb4460c
or dword [0xc08408], 1
mov dword [0xc02004], 0x34380452
mov dword [0xc02008], 0x293e0436
mov dword [0xc0200c], 0x61293429
mov dword [0xc02010], 0x29291e61
mov dword [0xc02014], 0x3e162934
mov dword [0xc02018], 0x3c3a2828
mov dword [0xc0201c], 0x6172733e
mov dword [0xc02020], 0x56287e7b
mov word [0xc02024], 0x5b51
xor eax, eax
mov cl, byte [eax + 0xc02004]
xor cl, 0x5b
mov byte [eax + 0xc026b0], cl
inc eax
cmp eax, 0x22
jb 0xb4460e
mov eax, 0xc026b0
ret

Function at 0xb44629
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc08404], 1
jne 0xb446a7
or dword [0xc08404], 1
mov dword [0xc02028], 0x323a1d52
mov dword [0xc0202c], 0x7b3f3e37
mov dword [0xc02030], 0x3c7b342f
mov dword [0xc02034], 0x47b2f3e
mov dword [0xc02038], 0x4363438
mov dword [0xc0203c], 0x3429293e
mov dword [0xc02040], 0x1e616129
mov dword [0xc02044], 0x29342929
mov dword [0xc02048], 0x28283e16
mov dword [0xc0204c], 0x733e3c3a
mov dword [0xc02050], 0x5b515672
xor eax, eax
mov cl, byte [eax + 0xc02028]
xor cl, 0x5b
mov byte [eax + 0xc026d4], cl
inc eax
cmp eax, 0x2c
jb 0xb446a9
mov eax, 0xc026d4
ret

Function at 0xb446c4
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc08400], 1
jne 0xb4473f
or dword [0xc08400], 1
mov dword [0xc02054], 0x383a2f08
mov dword [0xc02058], 0x2e3f7b30
mov dword [0xc0205c], 0x3e7b2b36
mov dword [0xc02060], 0x29342929
mov dword [0xc02064], 0x34187b61
mov dword [0xc02068], 0x233e2f35
mov dword [0xc0206c], 0x383e092f
mov dword [0xc02070], 0x7b3f2934
mov dword [0xc02074], 0x7b283a2c
mov dword [0xc02078], 0x37372e35
mov byte [0xc0207c], 0x5b
xor eax, eax
mov cl, byte [eax + 0xc02054]
xor cl, 0x5b
mov byte [eax + 0xc02700], cl
inc eax
cmp eax, 0x29
jb 0xb44741
mov eax, 0xc02700
ret
Function at 0xb4475c
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc083fc], 1
jne 0xb447d6
or dword [0xc083fc], 1
mov dword [0xc02080], 0x383a2f08
mov dword [0xc02084], 0x2e3f7b30
mov dword [0xc02088], 0x3e7b2b36
mov dword [0xc0208c], 0x29342929
mov dword [0xc02090], 0x22087b61
mov dword [0xc02094], 0x32351236
mov dword [0xc02098], 0x373a322f
mov dword [0xc0209c], 0x7b3e2132
mov dword [0xc020a0], 0x37323a3d
mov word [0xc020a4], 0x3f3e
mov byte [0xc020a6], 0x5b
xor eax, eax
mov cl, byte [eax + 0xc02080]
xor cl, 0x5b
mov byte [eax + 0xc0272c], cl
inc eax
cmp eax, 0x27
jb 0xb447d8
mov eax, 0xc0272c
ret

Function at 0xb447f3
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc083f8], 1
jne 0xb44859
or dword [0xc083f8], 1
mov dword [0xc020a8], 0x32302867
mov dword [0xc020ac], 0x3f3e2b2b
mov dword [0xc020b0], 0x3a293d7b
mov dword [0xc020b4], 0x7b773e36
mov dword [0xc020b8], 0x2c7b180b
mov dword [0xc020bc], 0x357b283a
mov dword [0xc020c0], 0x6537372e
mov word [0xc020c4], 0x5156
mov byte [0xc020c6], 0x5b
xor eax, eax
mov cl, byte [eax + 0xc020a8]
xor cl, 0x5b
mov byte [eax + 0xc02754], cl
inc eax
cmp eax, 0x1f
jb 0xb4485b
mov eax, 0xc02754
ret

Function at 0xb44876
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc083f4], 1
jne 0xb44909
or dword [0xc083f4], 1
mov dword [0xc020c8], 0x32302867
mov dword [0xc020cc], 0x3f3e2b2b
mov dword [0xc020d0], 0x3a293d7b
mov dword [0xc020d4], 0x7b773e36
mov dword [0xc020d8], 0x2c7b180b
mov dword [0xc020dc], 0x287b283a
mov dword [0xc020e0], 0x7b3e363a
mov dword [0xc020e4], 0x297b283a
mov dword [0xc020e8], 0x292e2f3e
mov dword [0xc020ec], 0x3f3a7b35
mov dword [0xc020f0], 0x283e293f
mov dword [0xc020f4], 0x51566528
mov byte [0xc020f8], 0x5b
xor eax, eax
mov cl, byte [eax + 0xc020c8]
xor cl, 0x5b
mov byte [eax + 0xc02774], cl
inc eax
cmp eax, 0x31
jb 0xb4490b
mov eax, 0xc02774
ret
Function at 0xb44926
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x16c4
call fcn.00bb9a50
push ebx
push esi
push edi
call dword [0xbd6094]
test byte [0xc083f0], 1
mov dword [ebp - 4], eax
jne 0xb4496d
or dword [0xc083f0], 1
mov dword [0xc020fc], 0x3f343667
mov dword [0xc02100], 0x643e372e
mov dword [0xc02104], 0x5b656464
xor edi, edi
xor eax, eax
mov cl, byte [eax + 0xc020fc]
xor cl, 0x5b
mov byte [eax + 0xc027a8], cl
inc eax
cmp eax, 0xc
jb 0xb44971
test byte [0xc083ec], 1
mov dword [ebp - 8], 0xc027a8
jne 0xb449bb
or dword [0xc083ec], 1
mov dword [0xc02108], 0x36222867
mov dword [0xc0210c], 0x64373439
mov dword [0xc02110], 0x5b656464
xor eax, eax
mov cl, byte [eax + 0xc02108]
xor cl, 0x5b
mov byte [eax + 0xc027b4], cl
inc eax
cmp eax, 0xc
jb 0xb449bd
mov esi, 0x688
push esi
lea eax, [ebp - 0x6c0]
push edi
push eax
mov dword [ebp - 0x1c], 0xc027b4
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], edi
call fcn.00bab860
mov eax, dword [ebp + 8]
cdq
add esp, 0xc
mov dword [ebp - 0x6c0], esi
mov esi, eax
lea eax, [ebp - 0x6c0]
push eax
mov ebx, edx
push ebx
push esi
push dword [ebp - 4]
call dword [0xbd63bc]
test eax, eax
je 0xb44a22
lea eax, [ebp - 0x69c]
mov dword [ebp - 8], eax
push 0xffa
lea eax, [ebp - 0x16c0]
push edi
push eax
call fcn.00bab860
add esp, 0xc
lea eax, [ebp - 0x16c0]
push eax
lea eax, [ebp - 0x18]
push eax
push ebx
push esi
push dword [ebp - 4]
mov dword [ebp - 0x16c0], 0x58
mov dword [ebp - 0x1670], 0x7d0
call dword [0xbd63c4]
lea ecx, [ebp - 0x166c]
test eax, eax
jne 0xb44a6e
mov ecx, dword [ebp - 0x1c]
test byte [0xc083e8], 1
jne 0xb44aa5
or dword [0xc083e8], 1
mov dword [0xc02114], 0x7e7b2b7e
mov dword [0xc02118], 0x287e7a28
mov dword [0xc0211c], 0x7e236b70
mov word [0xc02120], 0x5b23
xor eax, eax
mov dl, byte [eax + 0xc02114]
xor dl, 0x5b
mov byte [eax + 0xc027c0], dl
inc eax
cmp eax, 0xe
jb 0xb44aa7
push dword [ebp - 0x14]
push dword [ebp - 0x18]
push ecx
push dword [ebp - 8]
push dword [ebp + 8]
push 0xc027c0
push dword [ebp + 0xc]
call fcn.00ba713d
add esp, 0x1c
push 6
pop ecx
mov dword [ebp - 0xc], edi
xor eax, eax
lea edi, [ebp - 0x38]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0xc]
push eax
push ebx
push esi
push dword [ebp - 4]
mov dword [ebp - 0x38], 0x18
call dword [0xbd63c8]
test eax, eax
je 0xb44b1e
push dword [ebp - 0xc]
push dword [ebp - 0x30]
push dword [ebp - 0x2c]
call fcn.00b44b6b
push eax
push dword [ebp + 0xc]
call fcn.00ba713d
add esp, 0x14
test byte [0xc083e0], 1
jne 0xb44b3e
or dword [0xc083e0], 1
mov word [0xc02134], 0x5156
mov byte [0xc02136], 0x5b
xor eax, eax
mov cl, byte [eax + 0xc02134]
xor cl, 0x5b
mov byte [eax + 0xc027e0], cl
inc eax
cmp eax, 3
jb 0xb44b40
push dword [ebp + 0xc]
push 0xc027e0
call fcn.00ba6db1
pop ecx
pop ecx
pop edi
pop esi
pop ebx
leave
ret 8
Function at 0xb44b6b
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc083e4], 1
jne 0xb44ba3
or dword [0xc083e4], 1
mov dword [0xc02124], 0x287e737b
mov dword [0xc02128], 0x7b3f7e61
mov dword [0xc0212c], 0x236b7b70
mov dword [0xc02130], 0x5b72237e
xor eax, eax
mov cl, byte [eax + 0xc02124]
xor cl, 0x5b
mov byte [eax + 0xc027d0], cl
inc eax
cmp eax, 0x10
jb 0xb44ba5
mov eax, 0xc027d0
ret

Function at 0xb45e19
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc083d4], 1
jne 0xb45e6e
or dword [0xc083d4], 1
mov dword [0xc02804], 0x190f1c15
mov dword [0xc02808], 0x180f1c0a
mov dword [0xc0280c], 0xd1e1c01
mov dword [0xc02810], 0xe190114
mov dword [0xc02814], 0xb010919
mov dword [0xc02818], 0x205121f
mov word [0xc0281c], 0x5d02
xor eax, eax
mov cl, byte [eax + 0xc02804]
xor cl, 0x5d
mov byte [eax + 0xc02a04], cl
inc eax
cmp eax, 0x1a
jb 0xb45e70
mov eax, 0xc02a04
ret

Function at 0xb45f7f
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc083d0], 1
jne 0xb45fa9
or dword [0xc083d0], 1
mov dword [0xc02820], 0x3c0a100b
mov word [0xc02824], 0x382f
mov byte [0xc02826], 0x5d
xor eax, eax
mov cl, byte [eax + 0xc02820]
xor cl, 0x5d
mov byte [eax + 0xc02a20], cl
inc eax
cmp eax, 7
jb 0xb45fab
mov eax, 0xc02a20
ret

Function at 0xb45fc6
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc083cc], 1
jne 0xb45ff3
or dword [0xc083cc], 1
mov dword [0xc02828], 0x292f340b
mov dword [0xc0282c], 0xd313c28
mov word [0xc02830], 0x5d1e
xor eax, eax
mov cl, byte [eax + 0xc02828]
xor cl, 0x5d
mov byte [eax + 0xc02a28], cl
inc eax
cmp eax, 0xa
jb 0xb45ff5
mov eax, 0xc02a28
ret

Function at 0xb46010
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc083c8], 1
jne 0xb46044
or dword [0xc083c8], 1
mov dword [0xc02834], 0x292f340b
mov dword [0xc02838], 0x1f313c28
mov word [0xc0283c], 0x2532
mov byte [0xc0283e], 0x5d
xor eax, eax
mov cl, byte [eax + 0xc02834]
xor cl, 0x5d
mov byte [eax + 0xc02a34], cl
inc eax
cmp eax, 0xb
jb 0xb46046
mov eax, 0xc02a34
ret

Function at 0xb46061
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc083c4], 1
jne 0xb46085
or dword [0xc083c4], 1
mov dword [0xc02840], 0x3833381a
mov dword [0xc02844], 0x5d3e342f
xor eax, eax
mov cl, byte [eax + 0xc02840]
xor cl, 0x5d
mov byte [eax + 0xc02a40], cl
inc eax
cmp eax, 8
jb 0xb46087
mov eax, 0xc02a40
ret