joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1320ece
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b7ca0], 1
jne 0x1320f03
or dword [0x13b7ca0], 1
mov dword [0x13b719c], 0xd0d142f
mov dword [0x13b71a0], 0xf0e0241
mov dword [0x13b71a4], 0x15190415
mov byte [0x13b71a8], 0x61
xor eax, eax
mov cl, byte [eax + 0x13b719c]
xor cl, 0x61
mov byte [eax + 0x13b7880], cl
inc eax
cmp eax, 0xd
jb 0x1320f05
mov eax, 0x13b7880
ret

Function at 0x1320f20
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x13b7c9c], 1
jne 0x1320f6e
or dword [0x13b7c9c], 1
mov dword [0x13b71ac], 0x2e060433
mov dword [0x13b71b0], 0x2a0f0411
mov dword [0x13b71b4], 0x19241804
mov dword [0x13b71b8], 0x7414849
mov dword [0x13b71bc], 0x40d0800
mov dword [0x13b71c0], 0x61415b05
mov cl, byte [eax + 0x13b71ac]
xor cl, 0x61
mov byte [eax + 0x13b7890], cl
inc eax
cmp eax, 0x18
jb 0x1320f6e
mov eax, 0x13b7890
ret

Function at 0x1320f8c
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x13b7c98], 1
jne 0x1320fea
or dword [0x13b7c98], 1
mov dword [0x13b71c4], 0x30060433
mov dword [0x13b71c8], 0x18130414
mov dword [0x13b71cc], 0xe070f28
mov dword [0x13b71d0], 0x4918042a
mov dword [0x13b71d4], 0x74148
mov dword [0x13b71d8], 0x5040d08
mov word [0x13b71dc], 0x415b
mov byte [0x13b71de], 0x61
mov cl, byte [eax + 0x13b71c4]
xor cl, 0x61
mov byte [eax + 0x13b78a8], cl
inc eax
cmp eax, 0x1b
jb 0x1320fea
mov eax, 0x13b78a8
ret

Function at 0x1321296
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b7c94], 1
mov ecx, 0xac61
jne 0x1321304
or dword [0x13b7c94], 1
lea eax, [ecx - 0x18]
mov word [0x13b71e0], ax
add eax, 0xffffffdc
mov word [0x13b71e2], ax
lea eax, [ecx - 0x5d]
mov word [0x13b71e4], ax
add eax, 3
mov word [0x13b71e6], ax
lea eax, [ecx - 0x61]
mov word [0x13b71e8], ax
add eax, 0x14
mov word [0x13b71ea], ax
lea eax, [ecx - 0x54]
mov word [0x13b71ec], ax
add eax, 8
mov word [0x13b71ee], ax
lea eax, [ecx - 0x19]
mov word [0x13b71f0], ax
mov eax, ecx
mov word [0x13b71f2], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x13b71e0]
add eax, 2
mov word [eax + 0x13b78c2], dx
cmp eax, 0x14
jb 0x1321306
mov eax, 0x13b78c4
ret

Function at 0x1321324
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b7c90], 1
mov ecx, 0xac61
jne 0x1321392
or dword [0x13b7c90], 1
lea eax, [ecx - 0x18]
mov word [0x13b71f4], ax
add eax, 0xffffffbc
mov word [0x13b71f6], ax
lea eax, [ecx - 0x5d]
mov word [0x13b71f8], ax
add eax, 3
mov word [0x13b71fa], ax
lea eax, [ecx - 0x61]
mov word [0x13b71fc], ax
add eax, 0x14
mov word [0x13b71fe], ax
lea eax, [ecx - 0x54]
mov word [0x13b7200], ax
add eax, 8
mov word [0x13b7202], ax
lea eax, [ecx - 0x19]
mov word [0x13b7204], ax
mov eax, ecx
mov word [0x13b7206], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x13b71f4]
add eax, 2
mov word [eax + 0x13b78d6], dx
cmp eax, 0x14
jb 0x1321394
mov eax, 0x13b78d8
ret
Function at 0x13213b2
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x13b7c8c], 1
jne 0x1321400
or dword [0x13b7c8c], 1
mov dword [0x13b7208], 0x2e060433
mov dword [0x13b720c], 0x2a0f0411
mov dword [0x13b7210], 0x19241804
mov dword [0x13b7214], 0x7414849
mov dword [0x13b7218], 0x40d0800
mov dword [0x13b721c], 0x61415b05
mov cl, byte [eax + 0x13b7208]
xor cl, 0x61
mov byte [eax + 0x13b78ec], cl
inc eax
cmp eax, 0x18
jb 0x1321400
mov eax, 0x13b78ec
ret

Function at 0x132141b
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x13b7c88], 1
jne 0x1321479
or dword [0x13b7c88], 1
mov dword [0x13b7220], 0x30060433
mov dword [0x13b7224], 0x18130414
mov dword [0x13b7228], 0x140d0037
mov dword [0x13b722c], 0x49192404
mov dword [0x13b7230], 0x74148
mov dword [0x13b7234], 0x5040d08
mov word [0x13b7238], 0x415b
mov byte [0x13b723a], 0x61
mov cl, byte [eax + 0x13b7220]
xor cl, 0x61
mov byte [eax + 0x13b7904], cl
inc eax
cmp eax, 0x1b
jb 0x1321479
mov eax, 0x13b7904
ret

Function at 0x1321494
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x13b7c84], 1
jne 0x13214f2
or dword [0x13b7c84], 1
mov dword [0x13b723c], 0x30060433
mov dword [0x13b7240], 0x18130414
mov dword [0x13b7244], 0x140d0037
mov dword [0x13b7248], 0x49192404
mov dword [0x13b724c], 0x74148
mov dword [0x13b7250], 0x5040d08
mov word [0x13b7254], 0x415b
mov byte [0x13b7256], 0x61
mov cl, byte [eax + 0x13b723c]
xor cl, 0x61
mov byte [eax + 0x13b7920], cl
inc eax
cmp eax, 0x1b
jb 0x13214f2
mov eax, 0x13b7920
ret

Function at 0x1321572
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x13b7c80], 1
jne 0x13215bf
or dword [0x13b7c80], 1
mov dword [0x13b7258], 0x4111835
mov dword [0x13b725c], 0x12001641
mov dword [0x13b7260], 0x150e0f41
mov dword [0x13b7264], 0x12410041
mov dword [0x13b7268], 0xf081315
mov word [0x13b726c], 0x6106
mov cl, byte [eax + 0x13b7258]
xor cl, 0x61
mov byte [eax + 0x13b793c], cl
inc eax
cmp eax, 0x16
jb 0x13215bf
mov eax, 0x13b793c
ret

Function at 0x13215da
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x13b7c7c], 1
jne 0x1321645
or dword [0x13b7c7c], 1
mov dword [0x13b7270], 0x170f28
mov dword [0x13b7274], 0x4105080d
mov dword [0x13b7278], 0x150005
mov dword [0x13b727c], 0x1b081241
mov dword [0x13b7280], 0xe074104
mov dword [0x13b7284], 0x8164113
mov dword [0x13b7288], 0x33410405
mov dword [0x13b728c], 0x323e2624
mov word [0x13b7290], 0x613b
mov cl, byte [eax + 0x13b7270]
xor cl, 0x61
mov byte [eax + 0x13b7954], cl
inc eax
cmp eax, 0x22
jb 0x1321645
mov eax, 0x13b7954
ret

Function at 0x13217bf
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x13b7c78], 1
jne 0x132180d
or dword [0x13b7c78], 1
mov dword [0x13b7294], 0x2e060433
mov dword [0x13b7298], 0x2a0f0411
mov dword [0x13b729c], 0x19241804
mov dword [0x13b72a0], 0x7414849
mov dword [0x13b72a4], 0x40d0800
mov dword [0x13b72a8], 0x61415b05
mov cl, byte [eax + 0x13b7294]
xor cl, 0x61
mov byte [eax + 0x13b7978], cl
inc eax
cmp eax, 0x18
jb 0x132180d
mov eax, 0x13b7978
ret
Function at 0x1321828
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x13b7c74], 1
jne 0x1321890
or dword [0x13b7c74], 1
mov dword [0x13b72ac], 0x32060433
mov dword [0x13b72b0], 0x371504
mov dword [0x13b72b4], 0x2404140d
mov dword [0x13b72b8], 0x15124919
mov dword [0x13b72bc], 0x60f0813
mov dword [0x13b72c0], 0x74148
mov dword [0x13b72c4], 0x5040d08
mov word [0x13b72c8], 0x415b
mov byte [0x13b72ca], 0x61
mov cl, byte [eax + 0x13b72ac]
xor cl, 0x61
mov byte [eax + 0x13b7990], cl
inc eax
cmp eax, 0x1f
jb 0x1321890
mov eax, 0x13b7990
ret

Function at 0x13219fa
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x13b7c70], 1
jne 0x1321a48
or dword [0x13b7c70], 1
mov dword [0x13b72cc], 0x2e060433
mov dword [0x13b72d0], 0x2a0f0411
mov dword [0x13b72d4], 0x19241804
mov dword [0x13b72d8], 0x7414849
mov dword [0x13b72dc], 0x40d0800
mov dword [0x13b72e0], 0x61415b05
mov cl, byte [eax + 0x13b72cc]
xor cl, 0x61
mov byte [eax + 0x13b79b0], cl
inc eax
cmp eax, 0x18
jb 0x1321a48
mov eax, 0x13b79b0
ret

Function at 0x1321a63
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x13b7c6c], 1
jne 0x1321ac4
or dword [0x13b7c6c], 1
mov dword [0x13b72e4], 0x32060433
mov dword [0x13b72e8], 0x371504
mov dword [0x13b72ec], 0x2404140d
mov dword [0x13b72f0], 0x16054919
mov dword [0x13b72f4], 0x4805130e
mov dword [0x13b72f8], 0x8000741
mov dword [0x13b72fc], 0x5b05040d
mov word [0x13b7300], 0x6141
mov cl, byte [eax + 0x13b72e4]
xor cl, 0x61
mov byte [eax + 0x13b79c8], cl
inc eax
cmp eax, 0x1e
jb 0x1321ac4
mov eax, 0x13b79c8
ret

Function at 0x1321c2f
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x13b7c68], 1
jne 0x1321cab
or dword [0x13b7c68], 1
mov dword [0x13b7304], 0x1512142c
mov dword [0x13b7308], 0x4111241
mov dword [0x13b730c], 0x18070802
mov dword [0x13b7310], 0xf410041
mov dword [0x13b7314], 0x44c0f0e
mov dword [0x13b7318], 0x1815110c
mov dword [0x13b731c], 0x3141241
mov dword [0x13b7320], 0x4118040a
mov dword [0x13b7324], 0x8131512
mov word [0x13b7328], 0x60f
mov byte [0x13b732a], 0x61
mov cl, byte [eax + 0x13b7304]
xor cl, 0x61
mov byte [eax + 0x13b79e8], cl
inc eax
cmp eax, 0x27
jb 0x1321cab
mov eax, 0x13b79e8
ret

Function at 0x1321cc6
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x13b7c64], 1
jne 0x1321d14
or dword [0x13b7c64], 1
mov dword [0x13b732c], 0x2e060433
mov dword [0x13b7330], 0x2a0f0411
mov dword [0x13b7334], 0x19241804
mov dword [0x13b7338], 0x7414849
mov dword [0x13b733c], 0x40d0800
mov dword [0x13b7340], 0x61415b05
mov cl, byte [eax + 0x13b732c]
xor cl, 0x61
mov byte [eax + 0x13b7a10], cl
inc eax
cmp eax, 0x18
jb 0x1321d14
mov eax, 0x13b7a10
ret
Function at 0x1321d2f
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x13b7c60], 1
jne 0x1321d83
or dword [0x13b7c60], 1
mov dword [0x13b7344], 0x4252932
mov dword [0x13b7348], 0x415040d
mov dword [0x13b734c], 0x4918042a
mov dword [0x13b7350], 0x74148
mov dword [0x13b7354], 0x5040d08
mov word [0x13b7358], 0x415b
mov byte [0x13b735a], 0x61
mov cl, byte [eax + 0x13b7344]
xor cl, 0x61
mov byte [eax + 0x13b7a28], cl
inc eax
cmp eax, 0x17
jb 0x1321d83
mov eax, 0x13b7a28
ret

Function at 0x1321ed0
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x13b7c5c], 1
jne 0x1321f1e
or dword [0x13b7c5c], 1
mov dword [0x13b735c], 0x2e060433
mov dword [0x13b7360], 0x2a0f0411
mov dword [0x13b7364], 0x19241804
mov dword [0x13b7368], 0x7414849
mov dword [0x13b736c], 0x40d0800
mov dword [0x13b7370], 0x61415b05
mov cl, byte [eax + 0x13b735c]
xor cl, 0x61
mov byte [eax + 0x13b7a40], cl
inc eax
cmp eax, 0x18
jb 0x1321f1e
mov eax, 0x13b7a40
ret

Function at 0x1321f39
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x13b7c58], 1
jne 0x1321f8e
or dword [0x13b7c58], 1
mov dword [0x13b7374], 0x4252932
mov dword [0x13b7378], 0x415040d
mov dword [0x13b737c], 0x140d0037
mov dword [0x13b7380], 0x41484904
mov dword [0x13b7384], 0xd080007
mov dword [0x13b7388], 0x415b0504
mov byte [0x13b738c], 0x61
mov cl, byte [eax + 0x13b7374]
xor cl, 0x61
mov byte [eax + 0x13b7a58], cl
inc eax
cmp eax, 0x19
jb 0x1321f8e
mov eax, 0x13b7a58
ret

Function at 0x1321fac
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x13b7c54], 1
jne 0x1322069
or dword [0x13b7c54], 1
mov dword [0x13b7390], 0x25222320
mov dword [0x13b7394], 0x29262724
mov dword [0x13b7398], 0x2d2a2b28
mov dword [0x13b739c], 0x312e2f2c
mov dword [0x13b73a0], 0x35323330
mov dword [0x13b73a4], 0x39363734
mov dword [0x13b73a8], 0x3003b38
mov dword [0x13b73ac], 0x7040502
mov dword [0x13b73b0], 0xb080906
mov dword [0x13b73b4], 0xf0c0d0a
mov dword [0x13b73b8], 0x1310110e
mov dword [0x13b73bc], 0x17141512
mov dword [0x13b73c0], 0x1b181916
mov dword [0x13b73c4], 0x52535051
mov dword [0x13b73c8], 0x56575455
mov dword [0x13b73cc], 0x4e4a5859
mov byte [0x13b73d0], 0x61
mov cl, byte [eax + 0x13b7390]
xor cl, 0x61
mov byte [eax + 0x13b7a78], cl
inc eax
cmp eax, 0x41
jb 0x1322069
mov eax, 0x13b7a78
ret
Function at 0x1322114
Capabilities:
Encode data using base64

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, dword [ebp + 8]
push ebx
push esi
push edi
mov edi, eax
xor edx, edx
push 3
lea eax, [ecx + 2]
pop ebx
div ebx
mov esi, dword [ebp + 0x10]
shl eax, 2
inc eax
cmp dword [esi], eax
jae 0x132213e
mov dword [esi], eax
xor al, al
jmp 0x1322216
mov eax, ecx
xor edx, edx
push 3
pop ecx
div ecx
mov esi, dword [ebp + 0xc]
mov ecx, dword [0x13b1a7c]
xor edx, edx
imul eax, eax, 3
test eax, eax
je 0x13221ba
dec eax
push 3
pop ebx
div ebx
inc eax
mov edx, eax
mov dword [ebp - 4], eax
imul edx, edx, 3
movzx eax, byte [edi]
shr eax, 2
mov al, byte [eax + ecx]
mov byte [esi], al
movzx eax, byte [edi + 1]
movzx ebx, byte [edi]
shr eax, 4
shl ebx, 4
add eax, ebx
and eax, 0x3f
mov al, byte [eax + ecx]
mov byte [esi + 1], al
movzx eax, byte [edi + 2]
movzx ebx, byte [edi + 1]
shr eax, 6
lea eax, [eax + ebx*4]
and eax, 0x3f
mov al, byte [eax + ecx]
mov byte [esi + 2], al
movzx eax, byte [edi + 2]
and eax, 0x3f
mov al, byte [eax + ecx]
mov byte [esi + 3], al
add esi, 4
add edi, 3
dec dword [ebp - 4]
jne 0x1322168
cmp edx, dword [ebp + 8]
jae 0x1322209
movzx eax, byte [edi]
inc edx
cmp edx, dword [ebp + 8]
jae 0x13221ce
movzx edi, byte [edi + 1]
jmp 0x13221d0
xor edi, edi
mov ebx, eax
shr ebx, 2
and ebx, 0x3f
mov bl, byte [ebx + ecx]
mov byte [esi], bl
mov ebx, edi
shr ebx, 4
shl eax, 4
add ebx, eax
and ebx, 0x3f
mov al, byte [ebx + ecx]
mov byte [esi + 1], al
cmp edx, dword [ebp + 8]
jae 0x13221fd
and edi, 0xf
mov cl, byte [ecx + edi*4]
jmp 0x13221ff
mov cl, 0x3d
mov byte [esi + 2], cl
mov byte [esi + 3], 0x3d
add esi, 4
mov eax, dword [ebp + 0x10]
mov byte [esi], 0
sub esi, dword [ebp + 0xc]
mov dword [eax], esi
mov al, 1
pop edi
pop esi
pop ebx
leave
ret

Function at 0x1322e72
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b7c50], 1
jne 0x1322ed9
or dword [0x13b7c50], 1
mov dword [0x13b7abc], 0x1d381d0a
mov dword [0x13b7ac0], 0x1538170e
mov dword [0x13b7ac4], 0x2030602
mov dword [0x13b7ac8], 0x90e3815
mov dword [0x13b7acc], 0x138130e
mov dword [0x13b7ad0], 0x4f020b0e
mov dword [0x13b7ad4], 0x601474e
mov dword [0x13b7ad8], 0x3020b0e
mov byte [0x13b7adc], 0x67
xor eax, eax
mov cl, byte [eax + 0x13b7abc]
xor cl, 0x67
mov byte [eax + 0x13b7b7c], cl
inc eax
cmp eax, 0x21
jb 0x1322edb
mov eax, 0x13b7b7c
ret

Function at 0x1322ef6
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b7c4c], 1
jne 0x1322f5d
or dword [0x13b7c4c], 1
mov dword [0x13b7ae0], 0x1d381d0a
mov dword [0x13b7ae4], 0x1538170e
mov dword [0x13b7ae8], 0x2030602
mov dword [0x13b7aec], 0xe013815
mov dword [0x13b7af0], 0x1438020b
mov dword [0x13b7af4], 0x4f130613
mov dword [0x13b7af8], 0x601474e
mov dword [0x13b7afc], 0x3020b0e
mov byte [0x13b7b00], 0x67
xor eax, eax
mov cl, byte [eax + 0x13b7ae0]
xor cl, 0x67
mov byte [eax + 0x13b7ba0], cl
inc eax
cmp eax, 0x21
jb 0x1322f5f
mov eax, 0x13b7ba0
ret
Function at 0x1322f7a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b7c48], 1
jne 0x1322ff8
or dword [0x13b7c48], 1
mov dword [0x13b7b04], 0x1d381d0a
mov dword [0x13b7b08], 0x1538170e
mov dword [0x13b7b0c], 0x2030602
mov dword [0x13b7b10], 0x1f023815
mov dword [0x13b7b14], 0x4061513
mov dword [0x13b7b18], 0xe013813
mov dword [0x13b7b1c], 0x1338020b
mov dword [0x13b7b20], 0x20f3808
mov dword [0x13b7b24], 0x4e4f1706
mov dword [0x13b7b28], 0xe060147
mov dword [0x13b7b2c], 0x6703020b
xor eax, eax
mov cl, byte [eax + 0x13b7b04]
xor cl, 0x67
mov byte [eax + 0x13b7bc4], cl
inc eax
cmp eax, 0x2c
jb 0x1322ffa
mov eax, 0x13b7bc4
ret

Function at 0x1323015
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b7c44], 1
jne 0x132307f
or dword [0x13b7c44], 1
mov dword [0x13b7b30], 0xb0e0621
mov dword [0x13b7b34], 0x13470302
mov dword [0x13b7b38], 0x15044708
mov dword [0x13b7b3c], 0x2130602
mov dword [0x13b7b40], 0x14020347
mov dword [0x13b7b44], 0x6090e13
mov dword [0x13b7b48], 0x9080e13
mov dword [0x13b7b4c], 0x13061747
mov dword [0x13b7b50], 0x67475d0f
xor eax, eax
mov cl, byte [eax + 0x13b7b30]
xor cl, 0x67
mov byte [eax + 0x13b7bf0], cl
inc eax
cmp eax, 0x24
jb 0x1323081
mov eax, 0x13b7bf0
ret

Function at 0x132309c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b7c40], 1
jne 0x13230c0
or dword [0x13b7c40], 1
mov dword [0x13b7b54], 0x13061747
mov dword [0x13b7b58], 0x67475d0f
xor eax, eax
mov cl, byte [eax + 0x13b7b54]
xor cl, 0x67
mov byte [eax + 0x13b7c14], cl
inc eax
cmp eax, 8
jb 0x13230c2
mov eax, 0x13b7c14
ret

Function at 0x13230dd
Capabilities:
Encode data using xor

Disassembly:
test byte [0x13b7c3c], 1
jne 0x1323143
or dword [0x13b7c3c], 1
mov dword [0x13b7b5c], 0xb0e0621
mov dword [0x13b7b60], 0x13470302
mov dword [0x13b7b64], 0x15044708
mov dword [0x13b7b68], 0x2130602
mov dword [0x13b7b6c], 0x13120847
mov dword [0x13b7b70], 0x47131217
mov dword [0x13b7b74], 0x20b0e01
mov word [0x13b7b78], 0x475d
mov byte [0x13b7b7a], 0x67
xor eax, eax
mov cl, byte [eax + 0x13b7b5c]
xor cl, 0x67
mov byte [eax + 0x13b7c1c], cl
inc eax
cmp eax, 0x1f
jb 0x1323145
mov eax, 0x13b7c1c
ret
Function at 0x132bbd0
Capabilities:
Encode data using xor

Disassembly:
mov cl, byte [edx]
mov eax, dword [eax + 0x1f0]
test cl, cl
je 0x132bbf2
lea esp, [esp]
imul eax, eax, 0xf4243
movzx ecx, cl
inc edx
xor eax, ecx
mov cl, byte [edx]
test cl, cl
jne 0x132bbe0
ret
Function at 0x133b810
Capabilities:
Hash data using sha1

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 8]
xor ecx, ecx
mov dword [eax + 8], 0x67452301
mov dword [eax + 0xc], 0xefcdab89
mov dword [eax + 0x10], 0x98badcfe
mov dword [eax + 0x14], 0x10325476
mov dword [eax + 0x18], 0xc3d2e1f0
mov dword [eax + 0x1c], ecx
mov dword [eax], ecx
mov dword [eax + 4], ecx
xor eax, eax
pop ebp
ret

Function at 0x133b900
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push esi
mov esi, dword [ebp + 8]
mov eax, dword [esi + 0x1c]
mov edx, 0x40
cmp eax, edx
jb 0x133b919
lea eax, [edx - 0x30]
pop esi
pop ebp
ret
lea ecx, [eax*8]
add dword [esi], ecx
push ebx
mov ebx, 0
adc dword [esi + 4], ebx
push edi
mov byte [eax + esi + 0x20], 0x80
mov edi, 1
add dword [esi + 0x1c], edi
mov eax, dword [esi + 0x1c]
mov ecx, 0x38
cmp eax, ecx
jbe 0x133b972
cmp eax, edx
jae 0x133b95e
lea esp, [esp]
mov byte [eax + esi + 0x20], bl
add dword [esi + 0x1c], edi
mov eax, dword [esi + 0x1c]
cmp eax, edx
jb 0x133b950
lea edx, [esi + 0x20]
push esi
call fcn.0133b310
add esp, 4
mov dword [esi + 0x1c], ebx
mov ecx, 0x38
cmp dword [esi + 0x1c], ecx
jae 0x133b98f
jmp 0x133b980
mov edx, dword [esi + 0x1c]
mov byte [esi + edx + 0x20], bl
add dword [esi + 0x1c], edi
cmp dword [esi + 0x1c], ecx
jb 0x133b980
movzx eax, byte [esi + 7]
movzx ecx, byte [esi + 6]
movzx edx, byte [esi + 5]
mov byte [esi + 0x58], al
movzx eax, byte [esi + 4]
mov byte [esi + 0x59], cl
movzx ecx, byte [esi + 3]
mov byte [esi + 0x5a], dl
movzx edx, byte [esi + 2]
mov byte [esi + 0x5b], al
movzx eax, byte [esi + 1]
mov byte [esi + 0x5c], cl
movzx ecx, byte [esi]
mov byte [esi + 0x5d], dl
lea edx, [esi + 0x20]
push esi
mov byte [esi + 0x5e], al
mov byte [esi + 0x5f], cl
call fcn.0133b310
movzx edx, byte [esi + 0xb]
mov eax, dword [ebp + 0xc]
mov byte [eax], dl
movzx ecx, byte [esi + 0xa]
mov byte [eax + 1], cl
movzx edx, byte [esi + 9]
mov byte [eax + 2], dl
movzx ecx, byte [esi + 8]
mov byte [eax + 3], cl
movzx edx, byte [esi + 0xf]
mov byte [eax + 4], dl
movzx ecx, byte [esi + 0xe]
mov byte [eax + 5], cl
movzx edx, byte [esi + 0xd]
mov byte [eax + 6], dl
movzx ecx, byte [esi + 0xc]
mov byte [eax + 7], cl
movzx edx, byte [esi + 0x13]
mov byte [eax + 8], dl
movzx ecx, byte [esi + 0x12]
mov byte [eax + 9], cl
movzx edx, byte [esi + 0x11]
mov byte [eax + 0xa], dl
movzx ecx, byte [esi + 0x10]
mov byte [eax + 0xb], cl
movzx edx, byte [esi + 0x17]
mov byte [eax + 0xc], dl
movzx ecx, byte [esi + 0x16]
mov byte [eax + 0xd], cl
movzx edx, byte [esi + 0x15]
mov byte [eax + 0xe], dl
movzx ecx, byte [esi + 0x14]
mov byte [eax + 0xf], cl
movzx edx, byte [esi + 0x1b]
mov byte [eax + 0x10], dl
movzx ecx, byte [esi + 0x1a]
mov byte [eax + 0x11], cl
movzx edx, byte [esi + 0x19]
add esp, 4
mov byte [eax + 0x12], dl
movzx ecx, byte [esi + 0x18]
pop edi
pop ebx
mov byte [eax + 0x13], cl
xor eax, eax
pop esi
pop ebp
ret
Function at 0x133d5a0
Capabilities:
Hash data using sha256

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 8]
xor ecx, ecx
mov dword [eax + 0x28], ecx
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], 0x6a09e667
mov dword [eax + 0xc], 0xbb67ae85
mov dword [eax + 0x10], 0x3c6ef372
mov dword [eax + 0x14], 0xa54ff53a
mov dword [eax + 0x18], 0x510e527f
mov dword [eax + 0x1c], 0x9b05688c
mov dword [eax + 0x20], 0x1f83d9ab
mov dword [eax + 0x24], 0x5be0cd19
xor eax, eax
pop ebp
ret
Function at 0x133d6a0
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push esi
mov esi, dword [ebp + 8]
mov eax, dword [esi + 0x28]
mov edx, 0x40
cmp eax, edx
jb 0x133d6b9
lea eax, [edx - 0x30]
pop esi
pop ebp
ret
lea ecx, [eax*8]
add dword [esi], ecx
push ebx
mov ebx, 0
adc dword [esi + 4], ebx
push edi
mov byte [eax + esi + 0x2c], 0x80
mov edi, 1
add dword [esi + 0x28], edi
mov eax, dword [esi + 0x28]
mov ecx, 0x38
cmp eax, ecx
jbe 0x133d712
cmp eax, edx
jae 0x133d6fe
lea esp, [esp]
mov byte [eax + esi + 0x2c], bl
add dword [esi + 0x28], edi
mov eax, dword [esi + 0x28]
cmp eax, edx
jb 0x133d6f0
lea eax, [esi + 0x2c]
push esi
call fcn.0133baf0
add esp, 4
mov dword [esi + 0x28], ebx
mov ecx, 0x38
cmp dword [esi + 0x28], ecx
jae 0x133d72f
jmp 0x133d720
mov edx, dword [esi + 0x28]
mov byte [esi + edx + 0x2c], bl
add dword [esi + 0x28], edi
cmp dword [esi + 0x28], ecx
jb 0x133d720
movzx eax, byte [esi + 7]
movzx ecx, byte [esi + 6]
movzx edx, byte [esi + 5]
mov byte [esi + 0x64], al
movzx eax, byte [esi + 4]
mov byte [esi + 0x65], cl
movzx ecx, byte [esi + 3]
mov byte [esi + 0x67], al
movzx eax, byte [esi + 1]
mov byte [esi + 0x66], dl
movzx edx, byte [esi + 2]
mov byte [esi + 0x68], cl
movzx ecx, byte [esi]
mov byte [esi + 0x6a], al
lea eax, [esi + 0x2c]
push esi
mov byte [esi + 0x69], dl
mov byte [esi + 0x6b], cl
call fcn.0133baf0
movzx edx, byte [esi + 0xb]
mov eax, dword [ebp + 0xc]
mov byte [eax], dl
movzx ecx, byte [esi + 0xa]
mov byte [eax + 1], cl
movzx edx, byte [esi + 9]
mov byte [eax + 2], dl
movzx ecx, byte [esi + 8]
mov byte [eax + 3], cl
movzx edx, byte [esi + 0xf]
mov byte [eax + 4], dl
movzx ecx, byte [esi + 0xe]
mov byte [eax + 5], cl
movzx edx, byte [esi + 0xd]
mov byte [eax + 6], dl
movzx ecx, byte [esi + 0xc]
mov byte [eax + 7], cl
movzx edx, byte [esi + 0x13]
mov byte [eax + 8], dl
movzx ecx, byte [esi + 0x12]
mov byte [eax + 9], cl
movzx edx, byte [esi + 0x11]
mov byte [eax + 0xa], dl
movzx ecx, byte [esi + 0x10]
mov byte [eax + 0xb], cl
movzx edx, byte [esi + 0x17]
mov byte [eax + 0xc], dl
movzx ecx, byte [esi + 0x16]
mov byte [eax + 0xd], cl
movzx edx, byte [esi + 0x15]
mov byte [eax + 0xe], dl
movzx ecx, byte [esi + 0x14]
mov byte [eax + 0xf], cl
movzx edx, byte [esi + 0x1b]
mov byte [eax + 0x10], dl
movzx ecx, byte [esi + 0x1a]
mov byte [eax + 0x11], cl
movzx edx, byte [esi + 0x19]
mov byte [eax + 0x12], dl
movzx ecx, byte [esi + 0x18]
mov byte [eax + 0x13], cl
movzx edx, byte [esi + 0x1f]
mov byte [eax + 0x14], dl
movzx ecx, byte [esi + 0x1e]
mov byte [eax + 0x15], cl
movzx edx, byte [esi + 0x1d]
mov byte [eax + 0x16], dl
movzx ecx, byte [esi + 0x1c]
mov byte [eax + 0x17], cl
movzx edx, byte [esi + 0x23]
mov byte [eax + 0x18], dl
movzx ecx, byte [esi + 0x22]
mov byte [eax + 0x19], cl
movzx edx, byte [esi + 0x21]
mov byte [eax + 0x1a], dl
movzx ecx, byte [esi + 0x20]
mov byte [eax + 0x1b], cl
movzx edx, byte [esi + 0x27]
mov byte [eax + 0x1c], dl
movzx ecx, byte [esi + 0x26]
add esp, 4
mov byte [eax + 0x1d], cl
movzx edx, byte [esi + 0x25]
mov byte [eax + 0x1e], dl
movzx ecx, byte [esi + 0x24]
pop edi
pop ebx
mov byte [eax + 0x1f], cl
xor eax, eax
pop esi
pop ebp
ret