joyce8/EMBER2024-capa huggingface dataset:
Function at 0xf27d0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x7c
test byte [0x1b2e10], 1
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
mov ecx, 0x8397
jne 0xf280e
or dword [0x1b2e10], 1
lea eax, [ecx + 0x49]
mov word [0x1aca24], ax
add eax, 0x15
mov word [0x1aca26], ax
mov eax, ecx
mov word [0x1aca28], ax
xor esi, esi
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x1aca24]
add eax, 2
mov word [eax + 0x1ad0ce], dx
cmp eax, 6
jb 0xf2812
lea eax, [ebx + 0xc]
cmp dword [eax + 0x14], 8
jb 0xf2835
mov eax, dword [eax]
push 0x1ad0d0
push eax
lea eax, [esp + 0x18]
push eax
call fcn.001539e7
add esp, 0xc
test eax, eax
jne 0xf2900
push dword [esp + 0x10]
push dword [ebp + 0xc]
push ebx
call fcn.000f3563
push dword [esp + 0x10]
call fcn.000f2909
push eax
call fcn.00153f41
push dword [esp + 0x18]
call fcn.001544cc
add esp, 0xc
push 0x44
pop edi
push edi
lea eax, [esp + 0x44]
push esi
push eax
call fcn.001570a0
add esp, 0xc
mov dword [esp + 0x40], edi
xor eax, eax
lea ecx, [esp + 0x14]
push ecx
lea edi, [esp + 0x18]
stosd dword es:[edi], eax
lea ecx, [esp + 0x44]
push ecx
push esi
push esi
stosd dword es:[edi], eax
push esi
push esi
stosd dword es:[edi], eax
push esi
stosd dword es:[edi], eax
mov eax, dword [ebx + 0x28]
push esi
push eax
push esi
call dword [0x18208c]
test eax, eax
jne 0xf28ee
call dword [0x1820a8]
push eax
lea eax, [esp + 0x28]
push eax
call fcn.0011aa2a
cmp dword [eax + 0x14], 0x10
pop ecx
pop ecx
jb 0xf28d2
mov eax, dword [eax]
push eax
call fcn.000f2949
push eax
call fcn.00154210
pop ecx
pop ecx
push esi
push 1
lea ecx, [esp + 0x2c]
call fcn.000f4ce5
jmp 0xf2900
push dword [esp + 0x18]
mov esi, dword [0x1820bc]
call esi
push dword [esp + 0x14]
call esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8

Function at 0xf2909
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2e0c], 1
jne 0xf292c
or dword [0x1b2e0c], 1
mov dword [0x1aca2c], 0xd9d29d9a
mov word [0x1aca30], 0x97d3
xor eax, eax
mov cl, byte [eax + 0x1aca2c]
xor cl, 0x97
mov byte [eax + 0x1ad0d8], cl
inc eax
cmp eax, 6
jb 0xf292e
mov eax, 0x1ad0d8
ret

Function at 0xf2949
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2e08], 1
jne 0xf29ce
or dword [0x1b2e08], 1
mov dword [0x1aca34], 0xfbfef6d1
mov dword [0x1aca38], 0xe3b7f3f2
mov dword [0x1aca3c], 0xe5f4b7f8
mov dword [0x1aca40], 0xf2e3f6f2
mov dword [0x1aca44], 0xf6e5f4b7
mov dword [0x1aca48], 0xe5b7ffe4
mov dword [0x1aca4c], 0xe5f8e7f2
mov dword [0x1aca50], 0xb7e5f2e3
mov dword [0x1aca54], 0xf4f8e5e7
mov dword [0x1aca58], 0xade4e4f2
mov dword [0x1aca5c], 0x9de4b2b7
mov byte [0x1aca60], 0x97
xor eax, eax
mov cl, byte [eax + 0x1aca34]
xor cl, 0x97
mov byte [eax + 0x1ad0e0], cl
inc eax
cmp eax, 0x2d
jb 0xf29d0
mov eax, 0x1ad0e0
ret
Function at 0xf3a98
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2da8], 1
jne 0xf3acd
or dword [0x1b2da8], 1
mov dword [0x1acce0], 0xe2f3f8da
mov dword [0x1acce4], 0xb7adf2fb
mov dword [0x1acce8], 0x9d9ae4b2
mov byte [0x1accec], 0x97
xor eax, eax
mov cl, byte [eax + 0x1acce0]
xor cl, 0x97
mov byte [eax + 0x1ad38c], cl
inc eax
cmp eax, 0xd
jb 0xf3acf
mov eax, 0x1ad38c
ret

Function at 0xf3aea
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2da4], 1
jne 0xf3b29
or dword [0x1b2da4], 1
mov dword [0x1accf0], 0xf2e5ffc3
mov dword [0x1accf4], 0xb7adf3f6
mov dword [0x1accf8], 0xefb2efa7
mov dword [0x1accfc], 0x9d9a9d9a
mov byte [0x1acd00], 0x97
xor eax, eax
mov cl, byte [eax + 0x1accf0]
xor cl, 0x97
mov byte [eax + 0x1ad39c], cl
inc eax
cmp eax, 0x11
jb 0xf3b2b
mov eax, 0x1ad39c
ret

Function at 0xf3b46
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2da0], 1
jne 0xf3b84
or dword [0x1b2da0], 1
mov dword [0x1acd04], 0xf2f4efd2
mov dword [0x1acd08], 0xf8fee3e7
mov dword [0x1acd0c], 0xf3b2b7f9
mov word [0x1acd10], 0x9d9a
mov byte [0x1acd12], 0x97
xor eax, eax
mov cl, byte [eax + 0x1acd04]
xor cl, 0x97
mov byte [eax + 0x1ad3b0], cl
inc eax
cmp eax, 0xf
jb 0xf3b86
mov eax, 0x1ad3b0
ret

Function at 0xf3ba1
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2d9c], 1
jne 0xf3bdf
or dword [0x1b2d9c], 1
mov dword [0x1acd14], 0xf6f4f8db
mov dword [0x1acd18], 0xf9f8fee3
mov dword [0x1acd1c], 0xe7b2b7ad
mov word [0x1acd20], 0x9d9a
mov byte [0x1acd22], 0x97
xor eax, eax
mov cl, byte [eax + 0x1acd14]
xor cl, 0x97
mov byte [eax + 0x1ad3c0], cl
inc eax
cmp eax, 0xf
jb 0xf3be1
mov eax, 0x1ad3c0
ret

Function at 0xf3bfc
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2d98], 1
jne 0xf3c3d
or dword [0x1b2d98], 1
mov dword [0x1acd24], 0xf2e7eec3
mov dword [0x1acd28], 0xe4b2b7ad
mov dword [0x1acd2c], 0xefa7bfb7
mov dword [0x1acd30], 0x9abeefb2
mov word [0x1acd34], 0x979d
xor eax, eax
mov cl, byte [eax + 0x1acd24]
xor cl, 0x97
mov byte [eax + 0x1ad3d0], cl
inc eax
cmp eax, 0x12
jb 0xf3c3f
mov eax, 0x1ad3d0
ret

Function at 0xf3c5a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2d94], 1
jne 0xf3ce2
or dword [0x1b2d94], 1
mov dword [0x1acd38], 0xf6e3f2d3
mov dword [0x1acd3c], 0xade4fbfe
mov dword [0x1acd40], 0xfee5c3b7
mov dword [0x1acd44], 0xe3b7f3f2
mov dword [0x1acd48], 0xf2e5b7f8
mov dword [0x1acd4c], 0xf1b7f3f6
mov dword [0x1acd50], 0xb7faf8e5
mov dword [0x1acd54], 0xf8faf2fa
mov dword [0x1acd58], 0xf6b7eee5
mov dword [0x1acd5c], 0xf2e5f3f3
mov dword [0x1acd60], 0xb2b7e4e4
mov dword [0x1acd64], 0x979d9ae7
xor eax, eax
mov cl, byte [eax + 0x1acd38]
xor cl, 0x97
mov byte [eax + 0x1ad3e4], cl
inc eax
cmp eax, 0x30
jb 0xf3ce4
mov eax, 0x1ad3e4
ret
Function at 0xf3cff
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2d90], 1
jne 0xf3d91
or dword [0x1b2d90], 1
mov dword [0x1acd68], 0xf6e3f2d3
mov dword [0x1acd6c], 0xade4fbfe
mov dword [0x1acd70], 0xfee5c3b7
mov dword [0x1acd74], 0xe3b7f3f2
mov dword [0x1acd78], 0xe5e0b7f8
mov dword [0x1acd7c], 0xb7f2e3fe
mov dword [0x1acd80], 0xfab7f8e3
mov dword [0x1acd84], 0xe5f8faf2
mov dword [0x1acd88], 0xf3f6b7ee
mov dword [0x1acd8c], 0xe4f2e5f3
mov dword [0x1acd90], 0xe7b2b7e4
mov word [0x1acd94], 0x9d9a
mov byte [0x1acd96], 0x97
xor eax, eax
mov cl, byte [eax + 0x1acd68]
xor cl, 0x97
mov byte [eax + 0x1ad414], cl
inc eax
cmp eax, 0x2f
jb 0xf3d93
mov eax, 0x1ad414
ret

Function at 0xf3dae
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2d8c], 1
jne 0xf3e41
or dword [0x1b2d8c], 1
mov dword [0x1acd98], 0xf6e3f2d3
mov dword [0x1acd9c], 0xade4fbfe
mov dword [0x1acda0], 0xfee5c3b7
mov dword [0x1acda4], 0xe3b7f3f2
mov dword [0x1acda8], 0xeff2b7f8
mov dword [0x1acdac], 0xe3e2f4f2
mov dword [0x1acdb0], 0xf2fab7f2
mov dword [0x1acdb4], 0xeee5f8fa
mov dword [0x1acdb8], 0xb7e3f6b7
mov dword [0x1acdbc], 0xe5f3f3f6
mov dword [0x1acdc0], 0xb7e4e4f2
mov dword [0x1acdc4], 0x9d9ae7b2
mov byte [0x1acdc8], 0x97
xor eax, eax
mov cl, byte [eax + 0x1acd98]
xor cl, 0x97
mov byte [eax + 0x1ad444], cl
inc eax
cmp eax, 0x31
jb 0xf3e43
mov eax, 0x1ad444
ret

Function at 0xf3e5e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2d88], 1
jne 0xf3e95
or dword [0x1b2d88], 1
mov dword [0x1acdcc], 0xf0f6fbd1
mov dword [0x1acdd0], 0xa7b7ade4
mov dword [0x1acdd4], 0x9aefb2ef
mov word [0x1acdd8], 0x979d
xor eax, eax
mov cl, byte [eax + 0x1acdcc]
xor cl, 0x97
mov byte [eax + 0x1ad478], cl
inc eax
cmp eax, 0xe
jb 0xf3e97
mov eax, 0x1ad478
ret

Function at 0xf3eb2
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2d84], 1
jne 0xf3ee9
or dword [0x1b2d84], 1
mov dword [0x1acddc], 0xf6e5f6c7
mov dword [0x1acde0], 0xf2e3f2fa
mov dword [0x1acde4], 0x9aade4e5
mov word [0x1acde8], 0x979d
xor eax, eax
mov cl, byte [eax + 0x1acddc]
xor cl, 0x97
mov byte [eax + 0x1ad488], cl
inc eax
cmp eax, 0xe
jb 0xf3eeb
mov eax, 0x1ad488
ret

Function at 0xf3f06
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2d80], 1
jne 0xf3f4f
or dword [0x1b2d80], 1
mov dword [0x1acdec], 0xe5f6c79e
mov dword [0x1acdf0], 0xe3f2faf6
mov dword [0x1acdf4], 0xb2cce5f2
mov dword [0x1acdf8], 0xb7adcaf3
mov dword [0x1acdfc], 0x9d9ae7b2
mov byte [0x1ace00], 0x97
xor eax, eax
mov cl, byte [eax + 0x1acdec]
xor cl, 0x97
mov byte [eax + 0x1ad498], cl
inc eax
cmp eax, 0x15
jb 0xf3f51
mov eax, 0x1ad498
ret

Function at 0xf3f6c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2d7c], 1
jne 0xf3fa4
or dword [0x1b2d7c], 1
mov dword [0x1ace04], 0xb7dfd2c4
mov dword [0x1ace08], 0xfbf6f9d6
mov dword [0x1ace0c], 0xe4fee4ee
mov dword [0x1ace10], 0x979d9aad
xor eax, eax
mov cl, byte [eax + 0x1ace04]
xor cl, 0x97
mov byte [eax + 0x1ad4b0], cl
inc eax
cmp eax, 0x10
jb 0xf3fa6
mov eax, 0x1ad4b0
ret
Function at 0xf3fc1
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2d78], 1
jne 0xf4009
or dword [0x1b2d78], 1
mov dword [0x1ace14], 0xfdf5d89e
mov dword [0x1ace18], 0xb7e3f4f2
mov dword [0x1ace1c], 0xf2e7eee3
mov dword [0x1ace20], 0xe4b2b7ad
mov word [0x1ace24], 0x9d9a
mov byte [0x1ace26], 0x97
xor eax, eax
mov cl, byte [eax + 0x1ace14]
xor cl, 0x97
mov byte [eax + 0x1ad4c0], cl
inc eax
cmp eax, 0x13
jb 0xf400b
mov eax, 0x1ad4c0
ret

Function at 0xf4026
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2d74], 1
jne 0xf408f
or dword [0x1b2d74], 1
mov dword [0x1ace28], 0xfef6d19e
mov dword [0x1ace2c], 0xb7f3f2fb
mov dword [0x1ace30], 0xf1b7f8e3
mov dword [0x1ace34], 0xf8fbfbf8
mov dword [0x1ace38], 0xf8e7b7e0
mov dword [0x1ace3c], 0xf2e3f9fe
mov dword [0x1ace40], 0xfff4b7e5
mov dword [0x1ace44], 0x9af9fef6
mov word [0x1ace48], 0x979d
xor eax, eax
mov cl, byte [eax + 0x1ace28]
xor cl, 0x97
mov byte [eax + 0x1ad4d4], cl
inc eax
cmp eax, 0x22
jb 0xf4091
mov eax, 0x1ad4d4
ret

Function at 0xf40ac
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2d70], 1
jne 0xf40cf
or dword [0x1b2d70], 1
mov dword [0x1ace4c], 0xf3e3e4d7
mov word [0x1ace50], 0x97d7
xor eax, eax
mov cl, byte [eax + 0x1ace4c]
xor cl, 0x97
mov byte [eax + 0x1ad4f8], cl
inc eax
cmp eax, 6
jb 0xf40d1
mov eax, 0x1ad4f8
ret

Function at 0xf40ec
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2d6c], 1
jne 0xf4123
or dword [0x1b2d6c], 1
mov dword [0x1ace54], 0xe3f9e2e5
mov dword [0x1ace58], 0xc8f2fafe
mov dword [0x1ace5c], 0xf8e5e5f2
mov word [0x1ace60], 0x97e5
xor eax, eax
mov cl, byte [eax + 0x1ace54]
xor cl, 0x97
mov byte [eax + 0x1ad500], cl
inc eax
cmp eax, 0xe
jb 0xf4125
mov eax, 0x1ad500
ret

Function at 0xf4140
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2d68], 1
jne 0xf416e
or dword [0x1b2d68], 1
mov dword [0x1ace64], 0xf0f9f6e5
mov dword [0x1ace68], 0xe5f2c8f2
mov dword [0x1ace6c], 0x97e5f8e5
xor eax, eax
mov cl, byte [eax + 0x1ace64]
xor cl, 0x97
mov byte [eax + 0x1ad510], cl
inc eax
cmp eax, 0xc
jb 0xf4170
mov eax, 0x1ad510
ret

Function at 0xf418b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2d64], 1
jne 0xf41c9
or dword [0x1b2d64], 1
mov dword [0x1ace70], 0xe5f2e1f8
mov dword [0x1ace74], 0xe0f8fbf1
mov dword [0x1ace78], 0xe5e5f2c8
mov word [0x1ace7c], 0xe5f8
mov byte [0x1ace7e], 0x97
xor eax, eax
mov cl, byte [eax + 0x1ace70]
xor cl, 0x97
mov byte [eax + 0x1ad51c], cl
inc eax
cmp eax, 0xf
jb 0xf41cb
mov eax, 0x1ad51c
ret

Function at 0xf41e6
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2d60], 1
jne 0xf421e
or dword [0x1b2d60], 1
mov dword [0x1ace80], 0xf2f3f9e2
mov dword [0x1ace84], 0xf8fbf1e5
mov dword [0x1ace88], 0xe5f2c8e0
mov dword [0x1ace8c], 0x97e5f8e5
xor eax, eax
mov cl, byte [eax + 0x1ace80]
xor cl, 0x97
mov byte [eax + 0x1ad52c], cl
inc eax
cmp eax, 0x10
jb 0xf4220
mov eax, 0x1ad52c
ret
Function at 0xf423b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2d5c], 1
jne 0xf4269
or dword [0x1b2d5c], 1
mov dword [0x1ace90], 0xfef0f8fb
mov dword [0x1ace94], 0xe5f2c8f4
mov dword [0x1ace98], 0x97e5f8e5
xor eax, eax
mov cl, byte [eax + 0x1ace90]
xor cl, 0x97
mov byte [eax + 0x1ad53c], cl
inc eax
cmp eax, 0xc
jb 0xf426b
mov eax, 0x1ad53c
ret

Function at 0xf4286
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2d58], 1
jne 0xf42bb
or dword [0x1b2d58], 1
mov dword [0x1ace9c], 0xf6faf8f3
mov dword [0x1acea0], 0xf2c8f9fe
mov dword [0x1acea4], 0xe5f8e5e5
mov byte [0x1acea8], 0x97
xor eax, eax
mov cl, byte [eax + 0x1ace9c]
xor cl, 0x97
mov byte [eax + 0x1ad548], cl
inc eax
cmp eax, 0xd
jb 0xf42bd
mov eax, 0x1ad548
ret

Function at 0xf42d8
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2d54], 1
jne 0xf4317
or dword [0x1b2d54], 1
mov dword [0x1aceac], 0xf6e1f9fe
mov dword [0x1aceb0], 0xc8f3fefb
mov dword [0x1aceb4], 0xe2f0e5f6
mov dword [0x1aceb8], 0xe3f9f2fa
mov byte [0x1acebc], 0x97
xor eax, eax
mov cl, byte [eax + 0x1aceac]
xor cl, 0x97
mov byte [eax + 0x1ad558], cl
inc eax
cmp eax, 0x11
jb 0xf4319
mov eax, 0x1ad558
ret

Function at 0xf4334
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2d50], 1
jne 0xf4369
or dword [0x1b2d50], 1
mov dword [0x1acec0], 0xf0f9f2fb
mov dword [0x1acec4], 0xf2c8ffe3
mov dword [0x1acec8], 0xe5f8e5e5
mov byte [0x1acecc], 0x97
xor eax, eax
mov cl, byte [eax + 0x1acec0]
xor cl, 0x97
mov byte [eax + 0x1ad56c], cl
inc eax
cmp eax, 0xd
jb 0xf436b
mov eax, 0x1ad56c
ret

Function at 0xf4386
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2d4c], 1
jne 0xf43bb
or dword [0x1b2d4c], 1
mov dword [0x1aced0], 0xc8e3e2f8
mov dword [0x1aced4], 0xe5c8f1f8
mov dword [0x1aced8], 0xf2f0f9f6
mov byte [0x1acedc], 0x97
xor eax, eax
mov cl, byte [eax + 0x1aced0]
xor cl, 0x97
mov byte [eax + 0x1ad57c], cl
inc eax
cmp eax, 0xd
jb 0xf43bd
mov eax, 0x1ad57c
ret

Function at 0xf43d8
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2d48], 1
jne 0xf4405
or dword [0x1b2d48], 1
mov dword [0x1acee0], 0xf2f4eff2
mov dword [0x1acee4], 0xf8fee3e7
mov word [0x1acee8], 0x97f9
xor eax, eax
mov cl, byte [eax + 0x1acee0]
xor cl, 0x97
mov byte [eax + 0x1ad58c], cl
inc eax
cmp eax, 0xa
jb 0xf4407
mov eax, 0x1ad58c
ret

Function at 0xf4422
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2d44], 1
jne 0xf4481
or dword [0x1b2d44], 1
mov dword [0x1aceec], 0xf3e3e49e
mov dword [0x1acef0], 0xeff2adad
mov dword [0x1acef4], 0xe3e7f2f4
mov dword [0x1acef8], 0xadf9f8fe
mov dword [0x1acefc], 0xf6ffe0ad
mov dword [0x1acf00], 0xadbebfe3
mov dword [0x1acf04], 0x9ae4b2b7
mov word [0x1acf08], 0x979d
xor eax, eax
mov cl, byte [eax + 0x1aceec]
xor cl, 0x97
mov byte [eax + 0x1ad598], cl
inc eax
cmp eax, 0x1e
jb 0xf4483
mov eax, 0x1ad598
ret
Function at 0xf449e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2d40], 1
jne 0xf4512
or dword [0x1b2d40], 1
mov dword [0x1acf0c], 0xfef6d19e
mov dword [0x1acf10], 0xb7f3f2fb
mov dword [0x1acf14], 0xf0b7f8e3
mov dword [0x1acf18], 0xe4b7e3f2
mov dword [0x1acf1c], 0xadadf3e3
mov dword [0x1acf20], 0xf2f4eff2
mov dword [0x1acf24], 0xf8fee3e7
mov dword [0x1acf28], 0xe0adadf9
mov dword [0x1acf2c], 0xbfe3f6ff
mov dword [0x1acf30], 0x979d9abe
xor eax, eax
mov cl, byte [eax + 0x1acf0c]
xor cl, 0x97
mov byte [eax + 0x1ad5b8], cl
inc eax
cmp eax, 0x28
jb 0xf4514
mov eax, 0x1ad5b8
ret

Function at 0xf452f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2d3c], 1
jne 0xf4563
or dword [0x1b2d3c], 1
mov dword [0x1acf34], 0xfaf8f4c8
mov dword [0x1acf38], 0xe5e5f2c8
mov word [0x1acf3c], 0xe5f8
mov byte [0x1acf3e], 0x97
xor eax, eax
mov cl, byte [eax + 0x1acf34]
xor cl, 0x97
mov byte [eax + 0x1ad5e0], cl
inc eax
cmp eax, 0xb
jb 0xf4565
mov eax, 0x1ad5e0
ret

Function at 0xf4580
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2d38], 1
jne 0xf45e9
or dword [0x1b2d38], 1
mov dword [0x1acf40], 0xf8f4c89e
mov dword [0x1acf44], 0xe5f2c8fa
mov dword [0x1acf48], 0xade5f8e5
mov dword [0x1acf4c], 0xe5e5d2ad
mov dword [0x1acf50], 0xf2dae5f8
mov dword [0x1acf54], 0xf0f6e4e4
mov dword [0x1acf58], 0xadbebff2
mov dword [0x1acf5c], 0x9ae4b2b7
mov word [0x1acf60], 0x979d
xor eax, eax
mov cl, byte [eax + 0x1acf40]
xor cl, 0x97
mov byte [eax + 0x1ad5ec], cl
inc eax
cmp eax, 0x22
jb 0xf45eb
mov eax, 0x1ad5ec
ret

Function at 0xf4606
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2d34], 1
jne 0xf4684
or dword [0x1b2d34], 1
mov dword [0x1acf64], 0xfef6d19e
mov dword [0x1acf68], 0xb7f3f2fb
mov dword [0x1acf6c], 0xf0b7f8e3
mov dword [0x1acf70], 0xc8b7e3f2
mov dword [0x1acf74], 0xc8faf8f4
mov dword [0x1acf78], 0xf8e5e5f2
mov dword [0x1acf7c], 0xd2adade5
mov dword [0x1acf80], 0xe5f8e5e5
mov dword [0x1acf84], 0xe4e4f2da
mov dword [0x1acf88], 0xbff2f0f6
mov dword [0x1acf8c], 0x979d9abe
xor eax, eax
mov cl, byte [eax + 0x1acf64]
xor cl, 0x97
mov byte [eax + 0x1ad610], cl
inc eax
cmp eax, 0x2c
jb 0xf4686
mov eax, 0x1ad610
ret

Function at 0xf46a1
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2d30], 1
jne 0xf471c
or dword [0x1b2d30], 1
mov dword [0x1acf90], 0xf4f6e3c4
mov dword [0x1acf94], 0xe2f3b7fc
mov dword [0x1acf98], 0xf2b7e7fa
mov dword [0x1acf9c], 0xe5f8e5e5
mov dword [0x1acfa0], 0xf8d4b7ad
mov dword [0x1acfa4], 0xeff2e3f9
mov dword [0x1acfa8], 0xf4f2c5e3
mov dword [0x1acfac], 0xb7f3e5f8
mov dword [0x1acfb0], 0xb7e4f6e0
mov dword [0x1acfb4], 0xfbfbe2f9
mov byte [0x1acfb8], 0x97
xor eax, eax
mov cl, byte [eax + 0x1acf90]
xor cl, 0x97
mov byte [eax + 0x1ad63c], cl
inc eax
cmp eax, 0x29
jb 0xf471e
mov eax, 0x1ad63c
ret
Function at 0xf4739
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2d2c], 1
jne 0xf47b3
or dword [0x1b2d2c], 1
mov dword [0x1acfbc], 0xf4f6e3c4
mov dword [0x1acfc0], 0xe2f3b7fc
mov dword [0x1acfc4], 0xf2b7e7fa
mov dword [0x1acfc8], 0xe5f8e5e5
mov dword [0x1acfcc], 0xeec4b7ad
mov dword [0x1acfd0], 0xfef9defa
mov dword [0x1acfd4], 0xfbf6fee3
mov dword [0x1acfd8], 0xb7f2edfe
mov dword [0x1acfdc], 0xfbfef6f1
mov word [0x1acfe0], 0xf3f2
mov byte [0x1acfe2], 0x97
xor eax, eax
mov cl, byte [eax + 0x1acfbc]
xor cl, 0x97
mov byte [eax + 0x1ad668], cl
inc eax
cmp eax, 0x27
jb 0xf47b5
mov eax, 0x1ad668
ret

Function at 0xf47d0
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2d28], 1
jne 0xf4836
or dword [0x1b2d28], 1
mov dword [0x1acfe4], 0xfefce4ab
mov dword [0x1acfe8], 0xf3f2e7e7
mov dword [0x1acfec], 0xf6e5f1b7
mov dword [0x1acff0], 0xb7bbf2fa
mov dword [0x1acff4], 0xe0b7d4c7
mov dword [0x1acff8], 0xf9b7e4f6
mov dword [0x1acffc], 0xa9fbfbe2
mov word [0x1ad000], 0x9d9a
mov byte [0x1ad002], 0x97
xor eax, eax
mov cl, byte [eax + 0x1acfe4]
xor cl, 0x97
mov byte [eax + 0x1ad690], cl
inc eax
cmp eax, 0x1f
jb 0xf4838
mov eax, 0x1ad690
ret

Function at 0xf4853
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2d24], 1
jne 0xf48e6
or dword [0x1b2d24], 1
mov dword [0x1ad004], 0xfefce4ab
mov dword [0x1ad008], 0xf3f2e7e7
mov dword [0x1ad00c], 0xf6e5f1b7
mov dword [0x1ad010], 0xb7bbf2fa
mov dword [0x1ad014], 0xe0b7d4c7
mov dword [0x1ad018], 0xe4b7e4f6
mov dword [0x1ad01c], 0xb7f2faf6
mov dword [0x1ad020], 0xe5b7e4f6
mov dword [0x1ad024], 0xe5e2e3f2
mov dword [0x1ad028], 0xf3f6b7f9
mov dword [0x1ad02c], 0xe4f2e5f3
mov dword [0x1ad030], 0x9d9aa9e4
mov byte [0x1ad034], 0x97
xor eax, eax
mov cl, byte [eax + 0x1ad004]
xor cl, 0x97
mov byte [eax + 0x1ad6b0], cl
inc eax
cmp eax, 0x31
jb 0xf48e8
mov eax, 0x1ad6b0
ret
Function at 0xf4903
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x16c4
call fcn.00166bf0
push ebx
push esi
push edi
call dword [0x182094]
test byte [0x1b2d20], 1
mov dword [ebp - 4], eax
jne 0xf494a
or dword [0x1b2d20], 1
mov dword [0x1ad038], 0xf3f8faab
mov dword [0x1ad03c], 0xa8f2fbe2
mov dword [0x1ad040], 0x97a9a8a8
xor edi, edi
xor eax, eax
mov cl, byte [eax + 0x1ad038]
xor cl, 0x97
mov byte [eax + 0x1ad6e4], cl
inc eax
cmp eax, 0xc
jb 0xf494e
test byte [0x1b2d1c], 1
mov dword [ebp - 8], 0x1ad6e4
jne 0xf4998
or dword [0x1b2d1c], 1
mov dword [0x1ad044], 0xfaeee4ab
mov dword [0x1ad048], 0xa8fbf8f5
mov dword [0x1ad04c], 0x97a9a8a8
xor eax, eax
mov cl, byte [eax + 0x1ad044]
xor cl, 0x97
mov byte [eax + 0x1ad6f0], cl
inc eax
cmp eax, 0xc
jb 0xf499a
mov esi, 0x688
push esi
lea eax, [ebp - 0x6c0]
push edi
push eax
mov dword [ebp - 0x1c], 0x1ad6f0
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], edi
call fcn.001570a0
mov eax, dword [ebp + 8]
cdq
add esp, 0xc
mov dword [ebp - 0x6c0], esi
mov esi, eax
lea eax, [ebp - 0x6c0]
push eax
mov ebx, edx
push ebx
push esi
push dword [ebp - 4]
call dword [0x1823b0]
test eax, eax
je 0xf49ff
lea eax, [ebp - 0x69c]
mov dword [ebp - 8], eax
push 0xffa
lea eax, [ebp - 0x16c0]
push edi
push eax
call fcn.001570a0
add esp, 0xc
lea eax, [ebp - 0x16c0]
push eax
lea eax, [ebp - 0x18]
push eax
push ebx
push esi
push dword [ebp - 4]
mov dword [ebp - 0x16c0], 0x58
mov dword [ebp - 0x1670], 0x7d0
call dword [0x1823bc]
lea ecx, [ebp - 0x166c]
test eax, eax
jne 0xf4a4b
mov ecx, dword [ebp - 0x1c]
test byte [0x1b2d18], 1
jne 0xf4a82
or dword [0x1b2d18], 1
mov dword [0x1ad050], 0xb2b7e7b2
mov dword [0x1ad054], 0xe4b2b6e4
mov dword [0x1ad058], 0xb2efa7bc
mov word [0x1ad05c], 0x97ef
xor eax, eax
mov dl, byte [eax + 0x1ad050]
xor dl, 0x97
mov byte [eax + 0x1ad6fc], dl
inc eax
cmp eax, 0xe
jb 0xf4a84
push dword [ebp - 0x14]
push dword [ebp - 0x18]
push ecx
push dword [ebp - 8]
push dword [ebp + 8]
push 0x1ad6fc
push dword [ebp + 0xc]
call fcn.001542cd
add esp, 0x1c
push 6
pop ecx
mov dword [ebp - 0xc], edi
xor eax, eax
lea edi, [ebp - 0x38]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0xc]
push eax
push ebx
push esi
push dword [ebp - 4]
mov dword [ebp - 0x38], 0x18
call dword [0x1823a4]
test eax, eax
je 0xf4afb
push dword [ebp - 0xc]
push dword [ebp - 0x30]
push dword [ebp - 0x2c]
call fcn.000f4b48
push eax
push dword [ebp + 0xc]
call fcn.001542cd
add esp, 0x14
test byte [0x1b2d10], 1
jne 0xf4b1b
or dword [0x1b2d10], 1
mov word [0x1ad070], 0x9d9a
mov byte [0x1ad072], 0x97
xor eax, eax
mov cl, byte [eax + 0x1ad070]
xor cl, 0x97
mov byte [eax + 0x1ad71c], cl
inc eax
cmp eax, 3
jb 0xf4b1d
push dword [ebp + 0xc]
push 0x1ad71c
call fcn.00153f41
pop ecx
pop ecx
pop edi
pop esi
pop ebx
leave
ret 8
Function at 0xf4b48
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2d14], 1
jne 0xf4b80
or dword [0x1b2d14], 1
mov dword [0x1ad060], 0xe4b2bfb7
mov dword [0x1ad064], 0xb7f3b2ad
mov dword [0x1ad068], 0xefa7b7bc
mov dword [0x1ad06c], 0x97beefb2
xor eax, eax
mov cl, byte [eax + 0x1ad060]
xor cl, 0x97
mov byte [eax + 0x1ad70c], cl
inc eax
cmp eax, 0x10
jb 0xf4b82
mov eax, 0x1ad70c
ret

Function at 0xf5df8
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2d04], 1
jne 0xf5e4d
or dword [0x1b2d04], 1
mov dword [0x1ad740], 0xdec8dbd2
mov dword [0x1ad744], 0xdfc8dbcd
mov dword [0x1ad748], 0xcad9dbc6
mov dword [0x1ad74c], 0xc9dec6d3
mov dword [0x1ad750], 0xccc6cede
mov dword [0x1ad754], 0xc5c2d5d8
mov word [0x1ad758], 0x9ac5
xor eax, eax
mov cl, byte [eax + 0x1ad740]
xor cl, 0x9a
mov byte [eax + 0x1ad940], cl
inc eax
cmp eax, 0x1a
jb 0xf5e4f
mov eax, 0x1ad940
ret

Function at 0xf5f5e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2d00], 1
jne 0xf5f88
or dword [0x1b2d00], 1
mov dword [0x1ad75c], 0xfbcdd7cc
mov word [0x1ad760], 0xffe8
mov byte [0x1ad762], 0x9a
xor eax, eax
mov cl, byte [eax + 0x1ad75c]
xor cl, 0x9a
mov byte [eax + 0x1ad95c], cl
inc eax
cmp eax, 7
jb 0xf5f8a
mov eax, 0x1ad95c
ret

Function at 0xf5fa5
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2cfc], 1
jne 0xf5fd2
or dword [0x1b2cfc], 1
mov dword [0x1ad764], 0xeee8f3cc
mov dword [0x1ad768], 0xcaf6fbef
mov word [0x1ad76c], 0x9ad9
xor eax, eax
mov cl, byte [eax + 0x1ad764]
xor cl, 0x9a
mov byte [eax + 0x1ad964], cl
inc eax
cmp eax, 0xa
jb 0xf5fd4
mov eax, 0x1ad964
ret

Function at 0xf5fef
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2cf8], 1
jne 0xf6023
or dword [0x1b2cf8], 1
mov dword [0x1ad770], 0xeee8f3cc
mov dword [0x1ad774], 0xd8f6fbef
mov word [0x1ad778], 0xe2f5
mov byte [0x1ad77a], 0x9a
xor eax, eax
mov cl, byte [eax + 0x1ad770]
xor cl, 0x9a
mov byte [eax + 0x1ad970], cl
inc eax
cmp eax, 0xb
jb 0xf6025
mov eax, 0x1ad970
ret

Function at 0xf6040
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1b2cf4], 1
jne 0xf6064
or dword [0x1b2cf4], 1
mov dword [0x1ad77c], 0xfff4ffdd
mov dword [0x1ad780], 0x9af9f3e8
xor eax, eax
mov cl, byte [eax + 0x1ad77c]
xor cl, 0x9a
mov byte [eax + 0x1ad97c], cl
inc eax
cmp eax, 8
jb 0xf6066
mov eax, 0x1ad97c
ret