joyce8/EMBER2024-capa huggingface dataset:
Function at 0x22110c
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [ebp + 0xc]
push esi
push edi
mov edi, ecx
mov esi, edx
lea ecx, [ebp - 8]
mov dword [ebp - 4], edi
push ecx
push 4
push dword [ebp + 0x10]
add eax, edi
push eax
mov dword [ebp - 0x10], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
add esi, edi
mov dword [ebp + 0xc], esi
mov eax, dword [esi + 0xc]
test eax, eax
je 0x2211b9
push ebx
add eax, edi
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ebx, dword [esi + 0x10]
mov edx, eax
mov eax, dword [esi]
add ebx, edi
mov dword [ebp - 0xc], edx
mov edi, ebx
test eax, eax
je 0x221160
mov edi, dword [ebp - 4]
add edi, eax
mov ecx, dword [edi]
test ecx, ecx
je 0x2211a8
mov esi, dword [ebp - 4]
jns 0x221187
mov eax, dword [edx + 0x3c]
movzx ecx, cx
mov eax, dword [eax + edx + 0x78]
sub ecx, dword [eax + edx + 0x10]
mov eax, dword [eax + edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
jmp 0x221197
lea eax, [esi + 2]
add eax, ecx
push eax
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, dword [ebp - 0xc]
add edi, 4
mov dword [ebx], eax
add ebx, 4
mov ecx, dword [edi]
test ecx, ecx
jne 0x221169
mov esi, dword [ebp + 0xc]
mov eax, dword [esi + 0x20]
add esi, 0x14
mov edi, dword [ebp - 4]
mov dword [ebp + 0xc], esi
test eax, eax
jne 0x221140
pop ebx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp + 0x10]
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
pop edi
pop esi
mov esp, ebp
pop ebp
ret

Function at 0x2211d2
Capabilities:
Allocate or change rwx memory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
lea eax, [ebp - 0xc]
mov ebx, edx
push eax
push 0x40
mov esi, ecx
mov dword [ebp - 0x18], ebx
push ebx
push esi
mov dword [ebp - 0x14], esi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov edx, dword [0x221024]
lea eax, [ebx - 1]
xor edi, edi
mov dword [ebp - 8], edx
inc edi
mov dword [ebp - 0x10], eax
cmp eax, edi
jb 0x221254
mov ebx, dword [ebp - 0x10]
lea eax, [esi + 1]
mov dword [ebp - 4], eax
sub edi, esi
lea ecx, [edi + eax]
mov eax, edx
xor edx, edx
div ecx
mov eax, dword [ebp - 4]
mov cl, byte [eax]
mov al, byte [edx + esi]
mov esi, dword [ebp - 4]
mov byte [esi], al
mov esi, dword [ebp - 0x14]
mov eax, dword [ebp - 8]
add eax, 0xffffcfc7
mov byte [edx + esi], cl
imul edx, eax, 0xeeb9eb65
mov eax, dword [ebp - 4]
and edx, 0x7fffffff
inc eax
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
dec ebx
jne 0x221214
mov ebx, dword [ebp - 0x18]
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0xc]
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x22253b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6bec], 1
mov ecx, 0x8771
jne 0x2225c2
or dword [0x2c6bec], 1
lea eax, [ecx - 0x1d]
mov edx, eax
add eax, 0xffffffd9
mov word [0x2c09c8], ax
mov word [0x2c09bc], dx
add edx, 0xffffffd1
lea eax, [ecx - 0x5c]
mov word [0x2c09ca], ax
add eax, 0xffffffef
mov word [0x2c09cc], ax
mov word [0x2c09be], dx
lea edx, [ecx - 0x3d]
lea eax, [ecx - 0x55]
mov word [0x2c09ce], ax
mov word [0x2c09c0], dx
add edx, 8
add eax, 0xffffffe5
mov word [0x2c09d0], ax
lea eax, [ecx - 0x43]
mov word [0x2c09d2], ax
mov eax, ecx
mov word [0x2c09c2], dx
mov dword [0x2c09c4], 0x87548721
mov word [0x2c09d4], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x2c09bc]
add eax, 2
mov word [eax + 0x2c1046], dx
cmp eax, 0x1a
jb 0x2225c4
mov eax, 0x2c1048
ret

Function at 0x2225e2
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6be4], 1
jne 0x222610
or dword [0x2c6be4], 1
mov dword [0x2c09e4], 0x151e1c4d
mov dword [0x2c09e8], 0x4e141d04
mov dword [0x2c09ec], 0x714f4e4e
xor eax, eax
mov cl, byte [eax + 0x2c09e4]
xor cl, 0x71
mov byte [eax + 0x2c1070], cl
inc eax
cmp eax, 0xc
jb 0x222612
mov eax, 0x2c1070
ret

Function at 0x22262d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6be0], 1
mov edx, 0x8771
jne 0x2226ed
push esi
lea ecx, [edx - 0x1e]
mov eax, ecx
mov word [0x2c09f0], ax
add eax, 0xfffffffe
or dword [0x2c6be0], 1
mov word [0x2c09f2], ax
lea eax, [edx - 0x15]
mov esi, eax
mov word [0x2c09f4], si
mov word [0x2c09f6], ax
add eax, 0xffffffb6
mov word [0x2c09f8], ax
lea eax, [edx - 0x6e]
mov esi, eax
mov word [0x2c09fa], si
add esi, 0xd
mov word [0x2c09fc], si
lea esi, [edx - 0x6f]
mov word [0x2c09fe], si
add esi, 0x17
mov word [0x2c0a00], si
lea esi, [edx - 0x43]
mov word [0x2c0a02], si
mov esi, eax
mov word [0x2c0a04], si
add esi, 0x11
add eax, 2
mov word [0x2c0a06], si
lea esi, [edx - 0x70]
mov word [0x2c0a0e], ax
mov eax, edx
mov word [0x2c0a08], si
mov dword [0x2c0a0a], 0x8703871e
mov dword [0x2c0a10], 0x8753874c
mov word [0x2c0a14], ax
pop esi
xor eax, eax
mov ecx, edx
xor cx, word [eax + 0x2c09f0]
add eax, 2
mov word [eax + 0x2c107a], cx
cmp eax, 0x26
jb 0x2226ef
mov eax, 0x2c107c
ret
Function at 0x2227d0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x7c
test byte [0x2c6bdc], 1
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
mov ecx, 0x8771
jne 0x22280e
or dword [0x2c6bdc], 1
lea eax, [ecx - 0x6b]
mov word [0x2c0a18], ax
add eax, 0xd
mov word [0x2c0a1a], ax
mov eax, ecx
mov word [0x2c0a1c], ax
xor esi, esi
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x2c0a18]
add eax, 2
mov word [eax + 0x2c10a2], dx
cmp eax, 6
jb 0x222812
lea eax, [ebx + 0xc]
cmp dword [eax + 0x14], 8
jb 0x222835
mov eax, dword [eax]
push 0x2c10a4
push eax
lea eax, [esp + 0x18]
push eax
call fcn.0026ab67
add esp, 0xc
test eax, eax
jne 0x222900
push dword [esp + 0x10]
push dword [ebp + 0xc]
push ebx
call fcn.002234da
push dword [esp + 0x10]
call fcn.00222909
push eax
call fcn.0026b0c1
push dword [esp + 0x18]
call fcn.0026b64c
add esp, 0xc
push 0x44
pop edi
push edi
lea eax, [esp + 0x44]
push esi
push eax
call fcn.0026e220
add esp, 0xc
mov dword [esp + 0x40], edi
xor eax, eax
lea ecx, [esp + 0x14]
push ecx
lea edi, [esp + 0x18]
stosd dword es:[edi], eax
lea ecx, [esp + 0x44]
push ecx
push esi
push esi
stosd dword es:[edi], eax
push esi
push esi
stosd dword es:[edi], eax
push esi
stosd dword es:[edi], eax
mov eax, dword [ebx + 0x28]
push esi
push eax
push esi
call dword [0x29908c]
test eax, eax
jne 0x2228ee
call dword [0x2990a8]
push eax
lea eax, [esp + 0x28]
push eax
call fcn.00249aeb
cmp dword [eax + 0x14], 0x10
pop ecx
pop ecx
jb 0x2228d2
mov eax, dword [eax]
push eax
call fcn.00222949
push eax
call fcn.0026b390
pop ecx
pop ecx
push esi
push 1
lea ecx, [esp + 0x2c]
call fcn.00224c23
jmp 0x222900
push dword [esp + 0x18]
mov esi, dword [0x2990bc]
call esi
push dword [esp + 0x14]
call esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8

Function at 0x222909
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6bd8], 1
jne 0x22292c
or dword [0x2c6bd8], 1
mov dword [0x2c0a20], 0x3f347b7c
mov word [0x2c0a24], 0x7135
xor eax, eax
mov cl, byte [eax + 0x2c0a20]
xor cl, 0x71
mov byte [eax + 0x2c10ac], cl
inc eax
cmp eax, 6
jb 0x22292e
mov eax, 0x2c10ac
ret

Function at 0x222949
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6bd4], 1
jne 0x2229ce
or dword [0x2c6bd4], 1
mov dword [0x2c0a28], 0x1d181037
mov dword [0x2c0a2c], 0x5511514
mov dword [0x2c0a30], 0x312511e
mov dword [0x2c0a34], 0x14051014
mov dword [0x2c0a38], 0x10031251
mov dword [0x2c0a3c], 0x3511902
mov dword [0x2c0a40], 0x31e0114
mov dword [0x2c0a44], 0x51031405
mov dword [0x2c0a48], 0x121e0301
mov dword [0x2c0a4c], 0x4b020214
mov dword [0x2c0a50], 0x7b025451
mov byte [0x2c0a54], 0x71
xor eax, eax
mov cl, byte [eax + 0x2c0a28]
xor cl, 0x71
mov byte [eax + 0x2c10b4], cl
inc eax
cmp eax, 0x2d
jb 0x2229d0
mov eax, 0x2c10b4
ret
Function at 0x223a0f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6b78], 1
jne 0x223a44
or dword [0x2c6b78], 1
mov dword [0x2c0cb4], 0x4151e3c
mov dword [0x2c0cb8], 0x514b141d
mov dword [0x2c0cbc], 0x7b7c0254
mov byte [0x2c0cc0], 0x71
xor eax, eax
mov cl, byte [eax + 0x2c0cb4]
xor cl, 0x71
mov byte [eax + 0x2c1340], cl
inc eax
cmp eax, 0xd
jb 0x223a46
mov eax, 0x2c1340
ret

Function at 0x223a61
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6b74], 1
jne 0x223aa0
or dword [0x2c6b74], 1
mov dword [0x2c0cc4], 0x14031925
mov dword [0x2c0cc8], 0x514b1510
mov dword [0x2c0ccc], 0x9540941
mov dword [0x2c0cd0], 0x7b7c7b7c
mov byte [0x2c0cd4], 0x71
xor eax, eax
mov cl, byte [eax + 0x2c0cc4]
xor cl, 0x71
mov byte [eax + 0x2c1350], cl
inc eax
cmp eax, 0x11
jb 0x223aa2
mov eax, 0x2c1350
ret

Function at 0x223abd
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6b70], 1
jne 0x223afb
or dword [0x2c6b70], 1
mov dword [0x2c0cd8], 0x14120934
mov dword [0x2c0cdc], 0x1e180501
mov dword [0x2c0ce0], 0x1554511f
mov word [0x2c0ce4], 0x7b7c
mov byte [0x2c0ce6], 0x71
xor eax, eax
mov cl, byte [eax + 0x2c0cd8]
xor cl, 0x71
mov byte [eax + 0x2c1364], cl
inc eax
cmp eax, 0xf
jb 0x223afd
mov eax, 0x2c1364
ret

Function at 0x223b18
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6b6c], 1
jne 0x223b56
or dword [0x2c6b6c], 1
mov dword [0x2c0ce8], 0x10121e3d
mov dword [0x2c0cec], 0x1f1e1805
mov dword [0x2c0cf0], 0x154514b
mov word [0x2c0cf4], 0x7b7c
mov byte [0x2c0cf6], 0x71
xor eax, eax
mov cl, byte [eax + 0x2c0ce8]
xor cl, 0x71
mov byte [eax + 0x2c1374], cl
inc eax
cmp eax, 0xf
jb 0x223b58
mov eax, 0x2c1374
ret

Function at 0x223b73
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6b68], 1
jne 0x223bb4
or dword [0x2c6b68], 1
mov dword [0x2c0cf8], 0x14010825
mov dword [0x2c0cfc], 0x254514b
mov dword [0x2c0d00], 0x9415951
mov dword [0x2c0d04], 0x7c580954
mov word [0x2c0d08], 0x717b
xor eax, eax
mov cl, byte [eax + 0x2c0cf8]
xor cl, 0x71
mov byte [eax + 0x2c1384], cl
inc eax
cmp eax, 0x12
jb 0x223bb6
mov eax, 0x2c1384
ret

Function at 0x223bd1
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6b64], 1
jne 0x223c59
or dword [0x2c6b64], 1
mov dword [0x2c0d0c], 0x10051435
mov dword [0x2c0d10], 0x4b021d18
mov dword [0x2c0d14], 0x18032551
mov dword [0x2c0d18], 0x5511514
mov dword [0x2c0d1c], 0x1403511e
mov dword [0x2c0d20], 0x17511510
mov dword [0x2c0d24], 0x511c1e03
mov dword [0x2c0d28], 0x1e1c141c
mov dword [0x2c0d2c], 0x10510803
mov dword [0x2c0d30], 0x14031515
mov dword [0x2c0d34], 0x54510202
mov dword [0x2c0d38], 0x717b7c01
xor eax, eax
mov cl, byte [eax + 0x2c0d0c]
xor cl, 0x71
mov byte [eax + 0x2c1398], cl
inc eax
cmp eax, 0x30
jb 0x223c5b
mov eax, 0x2c1398
ret
Function at 0x223c76
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6b60], 1
jne 0x223d08
or dword [0x2c6b60], 1
mov dword [0x2c0d3c], 0x10051435
mov dword [0x2c0d40], 0x4b021d18
mov dword [0x2c0d44], 0x18032551
mov dword [0x2c0d48], 0x5511514
mov dword [0x2c0d4c], 0x306511e
mov dword [0x2c0d50], 0x51140518
mov dword [0x2c0d54], 0x1c511e05
mov dword [0x2c0d58], 0x31e1c14
mov dword [0x2c0d5c], 0x15105108
mov dword [0x2c0d60], 0x2140315
mov dword [0x2c0d64], 0x1545102
mov word [0x2c0d68], 0x7b7c
mov byte [0x2c0d6a], 0x71
xor eax, eax
mov cl, byte [eax + 0x2c0d3c]
xor cl, 0x71
mov byte [eax + 0x2c13c8], cl
inc eax
cmp eax, 0x2f
jb 0x223d0a
mov eax, 0x2c13c8
ret

Function at 0x223d25
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6b5c], 1
jne 0x223db8
or dword [0x2c6b5c], 1
mov dword [0x2c0d6c], 0x10051435
mov dword [0x2c0d70], 0x4b021d18
mov dword [0x2c0d74], 0x18032551
mov dword [0x2c0d78], 0x5511514
mov dword [0x2c0d7c], 0x914511e
mov dword [0x2c0d80], 0x5041214
mov dword [0x2c0d84], 0x141c5114
mov dword [0x2c0d88], 0x8031e1c
mov dword [0x2c0d8c], 0x51051051
mov dword [0x2c0d90], 0x3151510
mov dword [0x2c0d94], 0x51020214
mov dword [0x2c0d98], 0x7b7c0154
mov byte [0x2c0d9c], 0x71
xor eax, eax
mov cl, byte [eax + 0x2c0d6c]
xor cl, 0x71
mov byte [eax + 0x2c13f8], cl
inc eax
cmp eax, 0x31
jb 0x223dba
mov eax, 0x2c13f8
ret

Function at 0x223dd5
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6b58], 1
jne 0x223e0c
or dword [0x2c6b58], 1
mov dword [0x2c0da0], 0x16101d37
mov dword [0x2c0da4], 0x41514b02
mov dword [0x2c0da8], 0x7c095409
mov word [0x2c0dac], 0x717b
xor eax, eax
mov cl, byte [eax + 0x2c0da0]
xor cl, 0x71
mov byte [eax + 0x2c142c], cl
inc eax
cmp eax, 0xe
jb 0x223e0e
mov eax, 0x2c142c
ret

Function at 0x223e29
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6b54], 1
jne 0x223e60
or dword [0x2c6b54], 1
mov dword [0x2c0db0], 0x10031021
mov dword [0x2c0db4], 0x1405141c
mov dword [0x2c0db8], 0x7c4b0203
mov word [0x2c0dbc], 0x717b
xor eax, eax
mov cl, byte [eax + 0x2c0db0]
xor cl, 0x71
mov byte [eax + 0x2c143c], cl
inc eax
cmp eax, 0xe
jb 0x223e62
mov eax, 0x2c143c
ret

Function at 0x223e7d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6b50], 1
jne 0x223ec6
or dword [0x2c6b50], 1
mov dword [0x2c0dc0], 0x3102178
mov dword [0x2c0dc4], 0x5141c10
mov dword [0x2c0dc8], 0x542a0314
mov dword [0x2c0dcc], 0x514b2c15
mov dword [0x2c0dd0], 0x7b7c0154
mov byte [0x2c0dd4], 0x71
xor eax, eax
mov cl, byte [eax + 0x2c0dc0]
xor cl, 0x71
mov byte [eax + 0x2c144c], cl
inc eax
cmp eax, 0x15
jb 0x223ec8
mov eax, 0x2c144c
ret

Function at 0x223ee3
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6b4c], 1
jne 0x223f1b
or dword [0x2c6b4c], 1
mov dword [0x2c0dd8], 0x51393422
mov dword [0x2c0ddc], 0x1d101f30
mov dword [0x2c0de0], 0x2180208
mov dword [0x2c0de4], 0x717b7c4b
xor eax, eax
mov cl, byte [eax + 0x2c0dd8]
xor cl, 0x71
mov byte [eax + 0x2c1464], cl
inc eax
cmp eax, 0x10
jb 0x223f1d
mov eax, 0x2c1464
ret
Function at 0x223f38
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6b48], 1
jne 0x223f80
or dword [0x2c6b48], 1
mov dword [0x2c0de8], 0x1b133e78
mov dword [0x2c0dec], 0x51051214
mov dword [0x2c0df0], 0x14010805
mov dword [0x2c0df4], 0x254514b
mov word [0x2c0df8], 0x7b7c
mov byte [0x2c0dfa], 0x71
xor eax, eax
mov cl, byte [eax + 0x2c0de8]
xor cl, 0x71
mov byte [eax + 0x2c1474], cl
inc eax
cmp eax, 0x13
jb 0x223f82
mov eax, 0x2c1474
ret

Function at 0x223f9d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6b44], 1
jne 0x224006
or dword [0x2c6b44], 1
mov dword [0x2c0dfc], 0x18103778
mov dword [0x2c0e00], 0x5115141d
mov dword [0x2c0e04], 0x17511e05
mov dword [0x2c0e08], 0x1e1d1d1e
mov dword [0x2c0e0c], 0x1e015106
mov dword [0x2c0e10], 0x14051f18
mov dword [0x2c0e14], 0x19125103
mov dword [0x2c0e18], 0x7c1f1810
mov word [0x2c0e1c], 0x717b
xor eax, eax
mov cl, byte [eax + 0x2c0dfc]
xor cl, 0x71
mov byte [eax + 0x2c1488], cl
inc eax
cmp eax, 0x22
jb 0x224008
mov eax, 0x2c1488
ret

Function at 0x224023
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6b40], 1
jne 0x224046
or dword [0x2c6b40], 1
mov dword [0x2c0e20], 0x15050231
mov word [0x2c0e24], 0x7131
xor eax, eax
mov cl, byte [eax + 0x2c0e20]
xor cl, 0x71
mov byte [eax + 0x2c14ac], cl
inc eax
cmp eax, 6
jb 0x224048
mov eax, 0x2c14ac
ret

Function at 0x224063
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6b3c], 1
jne 0x22409a
or dword [0x2c6b3c], 1
mov dword [0x2c0e28], 0x51f0403
mov dword [0x2c0e2c], 0x2e141c18
mov dword [0x2c0e30], 0x1e030314
mov word [0x2c0e34], 0x7103
xor eax, eax
mov cl, byte [eax + 0x2c0e28]
xor cl, 0x71
mov byte [eax + 0x2c14b4], cl
inc eax
cmp eax, 0xe
jb 0x22409c
mov eax, 0x2c14b4
ret

Function at 0x2240b7
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6b38], 1
jne 0x2240e5
or dword [0x2c6b38], 1
mov dword [0x2c0e38], 0x161f1003
mov dword [0x2c0e3c], 0x3142e14
mov dword [0x2c0e40], 0x71031e03
xor eax, eax
mov cl, byte [eax + 0x2c0e38]
xor cl, 0x71
mov byte [eax + 0x2c14c4], cl
inc eax
cmp eax, 0xc
jb 0x2240e7
mov eax, 0x2c14c4
ret

Function at 0x224102
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6b34], 1
jne 0x224140
or dword [0x2c6b34], 1
mov dword [0x2c0e44], 0x314071e
mov dword [0x2c0e48], 0x61e1d17
mov dword [0x2c0e4c], 0x303142e
mov word [0x2c0e50], 0x31e
mov byte [0x2c0e52], 0x71
xor eax, eax
mov cl, byte [eax + 0x2c0e44]
xor cl, 0x71
mov byte [eax + 0x2c14d0], cl
inc eax
cmp eax, 0xf
jb 0x224142
mov eax, 0x2c14d0
ret

Function at 0x22415d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6b30], 1
jne 0x224195
or dword [0x2c6b30], 1
mov dword [0x2c0e54], 0x14151f04
mov dword [0x2c0e58], 0x1e1d1703
mov dword [0x2c0e5c], 0x3142e06
mov dword [0x2c0e60], 0x71031e03
xor eax, eax
mov cl, byte [eax + 0x2c0e54]
xor cl, 0x71
mov byte [eax + 0x2c14e0], cl
inc eax
cmp eax, 0x10
jb 0x224197
mov eax, 0x2c14e0
ret
Function at 0x2241b2
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6b2c], 1
jne 0x2241e0
or dword [0x2c6b2c], 1
mov dword [0x2c0e64], 0x18161e1d
mov dword [0x2c0e68], 0x3142e12
mov dword [0x2c0e6c], 0x71031e03
xor eax, eax
mov cl, byte [eax + 0x2c0e64]
xor cl, 0x71
mov byte [eax + 0x2c14f0], cl
inc eax
cmp eax, 0xc
jb 0x2241e2
mov eax, 0x2c14f0
ret

Function at 0x2241fd
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6b28], 1
jne 0x224232
or dword [0x2c6b28], 1
mov dword [0x2c0e70], 0x101c1e15
mov dword [0x2c0e74], 0x142e1f18
mov dword [0x2c0e78], 0x31e0303
mov byte [0x2c0e7c], 0x71
xor eax, eax
mov cl, byte [eax + 0x2c0e70]
xor cl, 0x71
mov byte [eax + 0x2c14fc], cl
inc eax
cmp eax, 0xd
jb 0x224234
mov eax, 0x2c14fc
ret

Function at 0x22424f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6b24], 1
jne 0x22428e
or dword [0x2c6b24], 1
mov dword [0x2c0e80], 0x10071f18
mov dword [0x2c0e84], 0x2e15181d
mov dword [0x2c0e88], 0x4160310
mov dword [0x2c0e8c], 0x51f141c
mov byte [0x2c0e90], 0x71
xor eax, eax
mov cl, byte [eax + 0x2c0e80]
xor cl, 0x71
mov byte [eax + 0x2c150c], cl
inc eax
cmp eax, 0x11
jb 0x224290
mov eax, 0x2c150c
ret

Function at 0x2242ab
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6b20], 1
jne 0x2242e0
or dword [0x2c6b20], 1
mov dword [0x2c0e94], 0x161f141d
mov dword [0x2c0e98], 0x142e1905
mov dword [0x2c0e9c], 0x31e0303
mov byte [0x2c0ea0], 0x71
xor eax, eax
mov cl, byte [eax + 0x2c0e94]
xor cl, 0x71
mov byte [eax + 0x2c1520], cl
inc eax
cmp eax, 0xd
jb 0x2242e2
mov eax, 0x2c1520
ret

Function at 0x2242fd
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6b1c], 1
jne 0x224332
or dword [0x2c6b1c], 1
mov dword [0x2c0ea4], 0x2e05041e
mov dword [0x2c0ea8], 0x32e171e
mov dword [0x2c0eac], 0x14161f10
mov byte [0x2c0eb0], 0x71
xor eax, eax
mov cl, byte [eax + 0x2c0ea4]
xor cl, 0x71
mov byte [eax + 0x2c1530], cl
inc eax
cmp eax, 0xd
jb 0x224334
mov eax, 0x2c1530
ret

Function at 0x22434f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6b18], 1
jne 0x22437c
or dword [0x2c6b18], 1
mov dword [0x2c0eb4], 0x14120914
mov dword [0x2c0eb8], 0x1e180501
mov word [0x2c0ebc], 0x711f
xor eax, eax
mov cl, byte [eax + 0x2c0eb4]
xor cl, 0x71
mov byte [eax + 0x2c1540], cl
inc eax
cmp eax, 0xa
jb 0x22437e
mov eax, 0x2c1540
ret

Function at 0x224399
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6b14], 1
jne 0x2243f8
or dword [0x2c6b14], 1
mov dword [0x2c0ec0], 0x15050278
mov dword [0x2c0ec4], 0x9144b4b
mov dword [0x2c0ec8], 0x5011412
mov dword [0x2c0ecc], 0x4b1f1e18
mov dword [0x2c0ed0], 0x1019064b
mov dword [0x2c0ed4], 0x4b585905
mov dword [0x2c0ed8], 0x7c025451
mov word [0x2c0edc], 0x717b
xor eax, eax
mov cl, byte [eax + 0x2c0ec0]
xor cl, 0x71
mov byte [eax + 0x2c154c], cl
inc eax
cmp eax, 0x1e
jb 0x2243fa
mov eax, 0x2c154c
ret
Function at 0x224415
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6b10], 1
jne 0x224489
or dword [0x2c6b10], 1
mov dword [0x2c0ee0], 0x18103778
mov dword [0x2c0ee4], 0x5115141d
mov dword [0x2c0ee8], 0x16511e05
mov dword [0x2c0eec], 0x2510514
mov dword [0x2c0ef0], 0x4b4b1505
mov dword [0x2c0ef4], 0x14120914
mov dword [0x2c0ef8], 0x1e180501
mov dword [0x2c0efc], 0x64b4b1f
mov dword [0x2c0f00], 0x59051019
mov dword [0x2c0f04], 0x717b7c58
xor eax, eax
mov cl, byte [eax + 0x2c0ee0]
xor cl, 0x71
mov byte [eax + 0x2c156c], cl
inc eax
cmp eax, 0x28
jb 0x22448b
mov eax, 0x2c156c
ret

Function at 0x2244a6
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6b0c], 1
jne 0x2244da
or dword [0x2c6b0c], 1
mov dword [0x2c0f08], 0x1c1e122e
mov dword [0x2c0f0c], 0x303142e
mov word [0x2c0f10], 0x31e
mov byte [0x2c0f12], 0x71
xor eax, eax
mov cl, byte [eax + 0x2c0f08]
xor cl, 0x71
mov byte [eax + 0x2c1594], cl
inc eax
cmp eax, 0xb
jb 0x2244dc
mov eax, 0x2c1594
ret

Function at 0x2244f7
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6b08], 1
jne 0x224560
or dword [0x2c6b08], 1
mov dword [0x2c0f14], 0x1e122e78
mov dword [0x2c0f18], 0x3142e1c
mov dword [0x2c0f1c], 0x4b031e03
mov dword [0x2c0f20], 0x303344b
mov dword [0x2c0f24], 0x143c031e
mov dword [0x2c0f28], 0x16100202
mov dword [0x2c0f2c], 0x4b585914
mov dword [0x2c0f30], 0x7c025451
mov word [0x2c0f34], 0x717b
xor eax, eax
mov cl, byte [eax + 0x2c0f14]
xor cl, 0x71
mov byte [eax + 0x2c15a0], cl
inc eax
cmp eax, 0x22
jb 0x224562
mov eax, 0x2c15a0
ret

Function at 0x22457d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6b04], 1
jne 0x2245fb
or dword [0x2c6b04], 1
mov dword [0x2c0f38], 0x18103778
mov dword [0x2c0f3c], 0x5115141d
mov dword [0x2c0f40], 0x16511e05
mov dword [0x2c0f44], 0x2e510514
mov dword [0x2c0f48], 0x2e1c1e12
mov dword [0x2c0f4c], 0x1e030314
mov dword [0x2c0f50], 0x344b4b03
mov dword [0x2c0f54], 0x31e0303
mov dword [0x2c0f58], 0x202143c
mov dword [0x2c0f5c], 0x59141610
mov dword [0x2c0f60], 0x717b7c58
xor eax, eax
mov cl, byte [eax + 0x2c0f38]
xor cl, 0x71
mov byte [eax + 0x2c15c4], cl
inc eax
cmp eax, 0x2c
jb 0x2245fd
mov eax, 0x2c15c4
ret

Function at 0x224618
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6b00], 1
jne 0x224693
or dword [0x2c6b00], 1
mov dword [0x2c0f64], 0x12100522
mov dword [0x2c0f68], 0x415511a
mov dword [0x2c0f6c], 0x1451011c
mov dword [0x2c0f70], 0x31e0303
mov dword [0x2c0f74], 0x1e32514b
mov dword [0x2c0f78], 0x914051f
mov dword [0x2c0f7c], 0x12142305
mov dword [0x2c0f80], 0x5115031e
mov dword [0x2c0f84], 0x51021006
mov dword [0x2c0f88], 0x1d1d041f
mov byte [0x2c0f8c], 0x71
xor eax, eax
mov cl, byte [eax + 0x2c0f64]
xor cl, 0x71
mov byte [eax + 0x2c15f0], cl
inc eax
cmp eax, 0x29
jb 0x224695
mov eax, 0x2c15f0
ret
Function at 0x2246b0
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6afc], 1
jne 0x22472a
or dword [0x2c6afc], 1
mov dword [0x2c0f90], 0x12100522
mov dword [0x2c0f94], 0x415511a
mov dword [0x2c0f98], 0x1451011c
mov dword [0x2c0f9c], 0x31e0303
mov dword [0x2c0fa0], 0x822514b
mov dword [0x2c0fa4], 0x181f381c
mov dword [0x2c0fa8], 0x1d101805
mov dword [0x2c0fac], 0x51140b18
mov dword [0x2c0fb0], 0x1d181017
mov word [0x2c0fb4], 0x1514
mov byte [0x2c0fb6], 0x71
xor eax, eax
mov cl, byte [eax + 0x2c0f90]
xor cl, 0x71
mov byte [eax + 0x2c161c], cl
inc eax
cmp eax, 0x27
jb 0x22472c
mov eax, 0x2c161c
ret

Function at 0x224747
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6af8], 1
jne 0x2247ad
or dword [0x2c6af8], 1
mov dword [0x2c0fb8], 0x181a024d
mov dword [0x2c0fbc], 0x15140101
mov dword [0x2c0fc0], 0x10031751
mov dword [0x2c0fc4], 0x515d141c
mov dword [0x2c0fc8], 0x6513221
mov dword [0x2c0fcc], 0x1f510210
mov dword [0x2c0fd0], 0x4f1d1d04
mov word [0x2c0fd4], 0x7b7c
mov byte [0x2c0fd6], 0x71
xor eax, eax
mov cl, byte [eax + 0x2c0fb8]
xor cl, 0x71
mov byte [eax + 0x2c1644], cl
inc eax
cmp eax, 0x1f
jb 0x2247af
mov eax, 0x2c1644
ret

Function at 0x2247ca
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2c6af4], 1
jne 0x22485d
or dword [0x2c6af4], 1
mov dword [0x2c0fd8], 0x181a024d
mov dword [0x2c0fdc], 0x15140101
mov dword [0x2c0fe0], 0x10031751
mov dword [0x2c0fe4], 0x515d141c
mov dword [0x2c0fe8], 0x6513221
mov dword [0x2c0fec], 0x2510210
mov dword [0x2c0ff0], 0x51141c10
mov dword [0x2c0ff4], 0x3510210
mov dword [0x2c0ff8], 0x3040514
mov dword [0x2c0ffc], 0x1510511f
mov dword [0x2c1000], 0x2140315
mov dword [0x2c1004], 0x7b7c4f02
mov byte [0x2c1008], 0x71
xor eax, eax
mov cl, byte [eax + 0x2c0fd8]
xor cl, 0x71
mov byte [eax + 0x2c1664], cl
inc eax
cmp eax, 0x31
jb 0x22485f
mov eax, 0x2c1664
ret