joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1d9a9e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x27270c], 1
jne 0x1d9b05
or dword [0x27270c], 1
mov dword [0x271554], 0x91d49bba
mov dword [0x271558], 0x869b8686
mov dword [0x27155c], 0x879199d4
mov dword [0x271560], 0x91939587
mov dword [0x271564], 0x809186d4
mov dword [0x271568], 0x919a8681
mov dword [0x27156c], 0x8d96d490
mov dword [0x271570], 0x969b9ed4
mov byte [0x271574], 0xf4
xor eax, eax
mov cl, byte [eax + 0x271554]
xor cl, 0xf4
mov byte [eax + 0x27161c], cl
inc eax
cmp eax, 0x21
jb 0x1d9b07
mov eax, 0x27161c
ret

Function at 0x1d9b22
Capabilities:
Encode data using xor

Disassembly:
test byte [0x272700], 1
jne 0x1d9b8b
or dword [0x272700], 1
mov dword [0x2715a0], 0xd49581b8
mov dword [0x2715a4], 0x9b868691
mov dword [0x2715a8], 0x8186d486
mov dword [0x2715ac], 0x9a9d9a9a
mov dword [0x2715b0], 0x8691d493
mov dword [0x2715b4], 0xd4869b86
mov dword [0x2715b8], 0x909a959c
mov dword [0x2715bc], 0xce869198
mov word [0x2715c0], 0xf4d4
xor eax, eax
mov cl, byte [eax + 0x2715a0]
xor cl, 0xf4
mov byte [eax + 0x271668], cl
inc eax
cmp eax, 0x22
jb 0x1d9b8d
mov eax, 0x271668
ret

Function at 0x1d9ba8
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2726fc], 1
jne 0x1d9bfa
or dword [0x2726fc], 1
mov dword [0x2715c4], 0xb8958198
mov dword [0x2715c8], 0x959b98ab
mov dword [0x2715cc], 0x86808790
mov dword [0x2715d0], 0xd4939a9d
mov dword [0x2715d4], 0x989d9592
mov word [0x2715d8], 0x9091
mov byte [0x2715da], 0xf4
xor eax, eax
mov cl, byte [eax + 0x2715c4]
xor cl, 0xf4
mov byte [eax + 0x27168c], cl
inc eax
cmp eax, 0x17
jb 0x1d9bfc
mov eax, 0x27168c
ret
Function at 0x1da918
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x23adac
call fcn.00239c88
sub esp, 0xb0
push ebx
push esi
push edi
xor ebx, ebx
push ebx
push ebx
lea eax, [ebp - 0x10]
push eax
push ebx
push dword [ebp + 0xc]
mov dword [ebp - 0x10], ebx
push ebx
push 0x1300
call dword [0x24212c]
test eax, eax
jne 0x1da960
call fcn.001daab9
mov ecx, dword [ebp + 8]
push eax
call fcn.001b6aa3
mov eax, dword [ebp + 8]
jmp 0x1daaaa
test byte [0x2726f0], 1
jne 0x1da981
or dword [0x2726f0], 1
mov dword [0x2716c8], 0xd6fcfbff
mov byte [0x2716cc], 0xf6
xor eax, eax
mov cl, byte [eax + 0x2716c8]
xor cl, 0xf6
mov byte [eax + 0x271e9c], cl
inc eax
cmp eax, 5
jb 0x1da983
push 0xf
mov esi, 0x271e9c
pop edi
mov eax, esi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x48], bl
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x1da9ae
sub eax, ecx
push eax
push esi
lea ecx, [ebp - 0x48]
call fcn.001b4c4f
mov dword [ebp - 4], ebx
push dword [ebp - 0x10]
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.001b4cc4
lea eax, [ebp - 0x2c]
push eax
lea edi, [ebp - 0x48]
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 1
call fcn.001dfdd2
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.001b4ce5
push ebx
push 1
mov ecx, edi
mov byte [ebp - 4], 4
call fcn.001b4ce5
push dword [ebp - 0x10]
call dword [0x2420e0]
push ebx
push dword [ebp + 0xc]
lea esi, [ebp - 0xb8]
call fcn.001dae04
pop ecx
pop ecx
push eax
mov byte [ebp - 4], 5
call fcn.001dab22
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.001b6ae0
add esp, 0xc
push 0x25d290
push eax
lea eax, [ebp - 0x9c]
push eax
mov byte [ebp - 4], 6
call fcn.001bd6c1
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea esi, [ebp - 0x64]
mov byte [ebp - 4], 7
call fcn.001bb5e6
push ebx
push 1
lea ecx, [ebp - 0x9c]
call fcn.001b4ce5
push ebx
push 1
lea ecx, [ebp - 0x80]
call fcn.001b4ce5
push ebx
push 1
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 4
call fcn.001b4ce5
mov edi, dword [ebp + 8]
mov dword [edi + 0x14], 0xf
mov dword [edi + 0x10], ebx
mov byte [edi], bl
call fcn.001b4c05
push ebx
push 1
mov ecx, esi
call fcn.001b4ce5
mov eax, edi
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret

Function at 0x1daab9
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2726f4], 1
jne 0x1dab05
or dword [0x2726f4], 1
mov dword [0x2716b0], 0x938498a3
mov dword [0x2716b4], 0x98919995
mov dword [0x2716b8], 0x92938c9f
mov dword [0x2716bc], 0x848493d6
mov dword [0x2716c0], 0x95d68499
mov dword [0x2716c4], 0xf6939299
xor eax, eax
mov cl, byte [eax + 0x2716b0]
xor cl, 0xf6
mov byte [eax + 0x271e84], cl
inc eax
cmp eax, 0x18
jb 0x1dab07
mov eax, 0x271e84
ret

Function at 0x1dab22
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2726ec], 1
jne 0x1dab60
or dword [0x2726ec], 1
mov dword [0x2716d0], 0x8493ded6
mov dword [0x2716d4], 0xd6849984
mov dword [0x2716d8], 0x93929995
mov word [0x2716dc], 0xd6cc
mov byte [0x2716de], 0xf6
xor eax, eax
mov cl, byte [eax + 0x2716d0]
xor cl, 0xf6
mov byte [eax + 0x271ea4], cl
inc eax
cmp eax, 0xf
jb 0x1dab62
mov eax, 0x271ea4
ret
Function at 0x1dae04
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
and dword [ebp - 4], 0
test byte [0x2726e8], 1
jne 0x1dae2f
or dword [0x2726e8], 1
mov dword [0x2716e0], 0x929a9ad3
mov byte [0x2716e4], 0xf6
xor eax, eax
mov cl, byte [eax + 0x2716e0]
xor cl, 0xf6
mov byte [eax + 0x271eb4], cl
inc eax
cmp eax, 5
jb 0x1dae31
push dword [ebp + 0xc]
lea eax, [ebp - 0x48]
push dword [ebp + 8]
push 0x271eb4
push eax
call fcn.001dfe2b
and dword [esi + 0x10], 0
add esp, 0x10
lea eax, [ebp - 0x48]
mov dword [esi + 0x14], 0xf
push eax
mov ecx, esi
mov byte [esi], 0
call fcn.001b4cc4
mov eax, esi
leave
ret

Function at 0x1dafd3
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2726e4], 1
jne 0x1db02f
or dword [0x2726e4], 1
mov dword [0x2716e8], 0xbb8293b1
mov dword [0x2716ec], 0x9a839299
mov dword [0x2716f0], 0x9a9fb093
mov dword [0x2716f4], 0x9b97b893
mov dword [0x2716f8], 0x9790d693
mov dword [0x2716fc], 0x92939a9f
mov word [0x271700], 0xd6cc
mov byte [0x271702], 0xf6
xor eax, eax
mov cl, byte [eax + 0x2716e8]
xor cl, 0xf6
mov byte [eax + 0x271ebc], cl
inc eax
cmp eax, 0x1b
jb 0x1db031
mov eax, 0x271ebc
ret

Function at 0x1db04c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2726e0], 1
jne 0x1db0a9
or dword [0x2726e0], 1
mov dword [0x271704], 0xb58293a5
mov dword [0x271708], 0x93848483
mov dword [0x27170c], 0x9fb28298
mov dword [0x271710], 0x82959384
mov dword [0x271714], 0xd68f8499
mov dword [0x271718], 0x9a9f9790
mov dword [0x27171c], 0xd6cc9293
mov byte [0x271720], 0xf6
xor eax, eax
mov cl, byte [eax + 0x271704]
xor cl, 0xf6
mov byte [eax + 0x271ed8], cl
inc eax
cmp eax, 0x1d
jb 0x1db0ab
mov eax, 0x271ed8
ret

Function at 0x1db1bd
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2726dc], 1
jne 0x1db21a
or dword [0x2726dc], 1
mov dword [0x271724], 0xb58293b1
mov dword [0x271728], 0x93848483
mov dword [0x27172c], 0x9fb28298
mov dword [0x271730], 0x82959384
mov dword [0x271734], 0xd68f8499
mov dword [0x271738], 0x9a9f9790
mov dword [0x27173c], 0xd6cc9293
mov byte [0x271740], 0xf6
xor eax, eax
mov cl, byte [eax + 0x271724]
xor cl, 0xf6
mov byte [eax + 0x271ef8], cl
inc eax
cmp eax, 0x1d
jb 0x1db21c
mov eax, 0x271ef8
ret
Function at 0x1db3d5
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2726d8], 1
jne 0x1db544
mov eax, 0xcfaa
mov ecx, eax
mov word [0x271748], cx
mov word [0x27174a], cx
add ecx, 0xfffffffb
mov word [0x27174c], cx
lea ecx, [eax - 0x28]
mov word [0x27174e], cx
add ecx, 2
lea edx, [eax - 0xb]
mov word [0x271750], cx
push ebx
mov ecx, edx
mov word [0x271752], cx
add ecx, 0xfffffff9
push esi
mov esi, ecx
lea ecx, [eax - 0x1a]
mov word [0x271754], si
lea esi, [eax - 0x19]
mov word [0x271756], si
mov word [0x271764], cx
add esi, 8
add edx, 0xfffffffb
mov ecx, esi
push edi
lea edi, [eax - 0x17]
mov word [0x271766], cx
mov ecx, eax
mov word [0x27175c], dx
mov edx, edi
mov word [0x271768], cx
mov word [0x27176a], cx
add ecx, 0x1c
mov word [0x27175e], dx
mov edx, ecx
or dword [0x2726d8], 1
mov word [0x27176c], dx
lea edx, [eax + 0x18]
mov ebx, edx
mov word [0x27176e], bx
mov ebx, ecx
mov word [0x271770], bx
lea ebx, [eax + 0x25]
mov word [0x27177e], ax
mov word [0x271772], bx
mov ebx, ecx
mov ecx, eax
add eax, 0xfffffffc
mov word [0x271780], ax
lea eax, [ecx - 0x18]
mov word [0x271786], ax
add eax, 0xfffffff1
mov word [0x271788], ax
lea eax, [ecx - 0x15]
mov word [0x27178a], ax
add eax, 0xffffffed
mov word [0x27178c], ax
lea eax, [ecx + 0xe]
mov word [0x27178e], ax
add eax, 0xffffffdf
pop edi
mov word [0x271790], ax
lea eax, [ecx + 0x4c]
pop esi
mov word [0x271774], bx
mov dword [0x271758], 0xcf9fcfb0
mov dword [0x271760], 0xcf98cfbf
mov word [0x271776], dx
mov dword [0x271778], 0xcfc6cfb4
mov word [0x27177c], cx
mov dword [0x271782], 0xcf99cf84
mov dword [0x271792], 0xcf93cf9b
mov word [0x271796], ax
pop ebx
xor eax, eax
mov ecx, 0xcff6
xor cx, word [eax + 0x271748]
add eax, 2
mov word [eax + 0x271f16], cx
cmp eax, 0x50
jb 0x1db546
mov eax, 0x271f18
ret

Function at 0x1db567
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2726d4], 1
jne 0x1db5bc
or dword [0x2726d4], 1
mov dword [0x271798], 0x80d699b8
mov dword [0x27179c], 0x9f858493
mov dword [0x2717a0], 0x9fd69899
mov dword [0x2717a4], 0xd6999098
mov dword [0x2717a8], 0x9f978097
mov dword [0x2717ac], 0x9a94979a
mov word [0x2717b0], 0xf693
xor eax, eax
mov cl, byte [eax + 0x271798]
xor cl, 0xf6
mov byte [eax + 0x271f68], cl
inc eax
cmp eax, 0x1a
jb 0x1db5be
mov eax, 0x271f68
ret

Function at 0x1db7ab
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2726d0], 1
jne 0x1db800
or dword [0x2726d0], 1
mov dword [0x2717b4], 0x80d699b8
mov dword [0x2717b8], 0x9f858493
mov dword [0x2717bc], 0x9fd69899
mov dword [0x2717c0], 0xd6999098
mov dword [0x2717c4], 0x9f978097
mov dword [0x2717c8], 0x9a94979a
mov word [0x2717cc], 0xf693
xor eax, eax
mov cl, byte [eax + 0x2717b4]
xor cl, 0xf6
mov byte [eax + 0x271f84], cl
inc eax
cmp eax, 0x1a
jb 0x1db802
mov eax, 0x271f84
ret
Function at 0x1db81d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2726cc], 1
jne 0x1db883
or dword [0x2726cc], 1
mov dword [0x2717d0], 0x978098bf
mov dword [0x2717d4], 0xd6929f9a
mov dword [0x2717d8], 0x85849380
mov dword [0x2717dc], 0xd698999f
mov dword [0x2717e0], 0x9990989f
mov dword [0x2717e4], 0x919f85d6
mov dword [0x2717e8], 0x83829798
mov word [0x2717ec], 0x9384
mov byte [0x2717ee], 0xf6
xor eax, eax
mov cl, byte [eax + 0x2717d0]
xor cl, 0xf6
mov byte [eax + 0x271fa0], cl
inc eax
cmp eax, 0x1f
jb 0x1db885
mov eax, 0x271fa0
ret

Function at 0x1dbb8a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2726c8], 1
jne 0x1dbbf0
or dword [0x2726c8], 1
mov dword [0x2717f0], 0x9a9f97b0
mov dword [0x2717f4], 0x82d69293
mov dword [0x2717f8], 0x9391d699
mov dword [0x2717fc], 0x9382d682
mov dword [0x271800], 0x90d6869b
mov dword [0x271804], 0x93929a99
mov dword [0x271808], 0x9786d684
mov word [0x27180c], 0x9e82
mov byte [0x27180e], 0xf6
xor eax, eax
mov cl, byte [eax + 0x2717f0]
xor cl, 0xf6
mov byte [eax + 0x271fc0], cl
inc eax
cmp eax, 0x1f
jb 0x1dbbf2
mov eax, 0x271fc0
ret

Function at 0x1dbd62
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2726c4], 1
jne 0x1dbdb4
or dword [0x2726c4], 1
mov dword [0x271810], 0xb08293b1
mov dword [0x271814], 0x93929a99
mov dword [0x271818], 0x8297a684
mov dword [0x27181c], 0x9790d69e
mov dword [0x271820], 0x92939a9f
mov word [0x271824], 0xd6cc
mov byte [0x271826], 0xf6
xor eax, eax
mov cl, byte [eax + 0x271810]
xor cl, 0xf6
mov byte [eax + 0x271fe0], cl
inc eax
cmp eax, 0x17
jb 0x1dbdb6
mov eax, 0x271fe0
ret

Function at 0x1dc07e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2726c0], 1
mov edx, 0xcff6
jne 0x1dc115
or dword [0x2726c0], 1
lea ecx, [edx - 0x23]
mov eax, ecx
mov word [0x271828], ax
add eax, 0xffffffd3
mov word [0x27182a], ax
push esi
lea eax, [edx - 0x72]
mov esi, eax
add eax, 0x13
mov word [0x271834], ax
lea eax, [edx - 0x5b]
mov word [0x271836], ax
add eax, 6
mov word [0x271838], ax
lea eax, [edx - 0x36]
mov word [0x27182c], si
add esi, 0x15
mov word [0x27183a], ax
add eax, 2
mov word [0x27183c], ax
lea eax, [edx - 0x31]
mov word [0x27183e], ax
mov eax, edx
mov word [0x27182e], si
mov dword [0x271830], 0xcf84cf91
mov dword [0x271840], 0xcfd3cfc4
mov word [0x271844], ax
pop esi
xor eax, eax
mov ecx, edx
xor cx, word [eax + 0x271828]
add eax, 2
mov word [eax + 0x271ff6], cx
cmp eax, 0x1e
jb 0x1dc117
mov eax, 0x271ff8
ret

Function at 0x1dc135
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2726bc], 1
mov ecx, 0xcff6
jne 0x1dc176
or dword [0x2726bc], 1
lea eax, [ecx - 0x69]
mov word [0x271848], ax
add eax, 0xfffffff9
mov word [0x27184a], ax
lea eax, [ecx - 0x66]
mov word [0x27184c], ax
add eax, 0xfffffffb
mov word [0x27184e], ax
mov eax, ecx
mov word [0x271850], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x271848]
add eax, 2
mov word [eax + 0x272016], dx
cmp eax, 0xa
jb 0x1dc178
mov eax, 0x272018
ret
Function at 0x1dc196
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2726b8], 1
mov ecx, 0xcff6
jne 0x1dc1e9
or dword [0x2726b8], 1
lea eax, [ecx - 0x69]
mov word [0x271854], ax
add eax, 0xfffffff9
mov word [0x271856], ax
lea eax, [ecx - 0x66]
mov word [0x271858], ax
add eax, 0x35
mov word [0x27185a], ax
lea eax, [ecx - 0x32]
mov word [0x27185c], ax
add eax, 0xffffffc7
mov word [0x27185e], ax
mov eax, ecx
mov word [0x271860], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x271854]
add eax, 2
mov word [eax + 0x272022], dx
cmp eax, 0xe
jb 0x1dc1eb
mov eax, 0x272024
ret

Function at 0x1dc209
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2726b4], 1
mov ecx, 0xcff6
jne 0x1dc25c
or dword [0x2726b4], 1
lea eax, [ecx - 0x69]
mov word [0x271864], ax
add eax, 0xfffffff9
mov word [0x271866], ax
lea eax, [ecx - 0x66]
mov word [0x271868], ax
add eax, 0x30
mov word [0x27186a], ax
lea eax, [ecx - 0x34]
mov word [0x27186c], ax
add eax, 0xffffffc9
mov word [0x27186e], ax
mov eax, ecx
mov word [0x271870], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x271864]
add eax, 2
mov word [eax + 0x272032], dx
cmp eax, 0xe
jb 0x1dc25e
mov eax, 0x272034
ret

Function at 0x1dc27c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2726b0], 1
mov ecx, 0xcff6
jne 0x1dc2bd
or dword [0x2726b0], 1
lea eax, [ecx - 0x69]
mov word [0x271874], ax
add eax, 0xfffffff9
mov word [0x271876], ax
lea eax, [ecx - 0x66]
mov word [0x271878], ax
add eax, 0xfffffffb
mov word [0x27187a], ax
mov eax, ecx
mov word [0x27187c], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x271874]
add eax, 2
mov word [eax + 0x272042], dx
cmp eax, 0xa
jb 0x1dc2bf
mov eax, 0x272044
ret

Function at 0x1dc2dd
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2726ac], 1
mov ecx, 0xcff6
jne 0x1dc330
or dword [0x2726ac], 1
lea eax, [ecx - 0x69]
mov word [0x271880], ax
add eax, 0xfffffff9
mov word [0x271882], ax
lea eax, [ecx - 0x66]
mov word [0x271884], ax
add eax, 0x35
mov word [0x271886], ax
lea eax, [ecx - 0x32]
mov word [0x271888], ax
add eax, 0xffffffc7
mov word [0x27188a], ax
mov eax, ecx
mov word [0x27188c], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x271880]
add eax, 2
mov word [eax + 0x27204e], dx
cmp eax, 0xe
jb 0x1dc332
mov eax, 0x272050
ret
Function at 0x1dc42a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2726a8], 1
mov ecx, 0xcff6
jne 0x1dc66f
or dword [0x2726a8], 1
lea eax, [ecx - 0x30]
mov word [0x271898], ax
inc eax
mov word [0x27189a], ax
lea eax, [ecx - 0x32]
mov word [0x27189c], ax
inc eax
mov word [0x27189e], ax
lea eax, [ecx - 0x34]
mov word [0x2718a0], ax
inc eax
mov word [0x2718a2], ax
lea eax, [ecx - 0x36]
mov word [0x2718a4], ax
inc eax
mov word [0x2718a6], ax
lea eax, [ecx - 0x28]
mov word [0x2718a8], ax
inc eax
mov word [0x2718aa], ax
lea eax, [ecx - 0x3f]
mov word [0x2718ac], ax
add eax, 0xfffffffd
mov word [0x2718ae], ax
lea eax, [ecx - 0x41]
mov word [0x2718b0], ax
add eax, 0xfffffffd
mov word [0x2718b2], ax
lea eax, [ecx - 0x43]
mov word [0x2718b4], ax
add eax, 0xfffffffd
mov word [0x2718b6], ax
lea eax, [ecx - 0x45]
mov word [0x2718b8], ax
add eax, 0xd
mov word [0x2718ba], ax
lea eax, [ecx - 0x37]
mov word [0x2718bc], ax
add eax, 0xfffffffd
mov word [0x2718be], ax
lea eax, [ecx - 0x39]
mov word [0x2718c0], ax
add eax, 0xfffffffd
mov word [0x2718c2], ax
lea eax, [ecx - 0x3b]
mov word [0x2718c4], ax
add eax, 0xfffffffd
mov word [0x2718c6], ax
lea eax, [ecx - 0x3d]
mov word [0x2718c8], ax
add eax, 0xffffffed
mov word [0x2718ca], ax
lea eax, [ecx - 0x4f]
mov word [0x2718cc], ax
add eax, 0xfffffffd
mov word [0x2718ce], ax
lea eax, [ecx - 0x51]
mov word [0x2718d0], ax
add eax, 0xfffffffd
mov word [0x2718d2], ax
lea eax, [ecx - 0x53]
mov word [0x2718d4], ax
add eax, 0xfffffffd
mov word [0x2718d6], ax
lea eax, [ecx - 0x55]
mov word [0x2718d8], ax
add eax, 0xd
mov word [0x2718da], ax
lea eax, [ecx - 0x47]
mov word [0x2718dc], ax
add eax, 0xfffffffd
mov word [0x2718de], ax
lea eax, [ecx - 0x5f]
mov word [0x2718e0], ax
add eax, 0xfffffffd
mov word [0x2718e2], ax
lea eax, [ecx - 0x61]
mov word [0x2718e4], ax
add eax, 0xfffffffd
mov word [0x2718e6], ax
lea eax, [ecx - 0x63]
mov word [0x2718e8], ax
add eax, 0xfffffffd
mov word [0x2718ea], ax
lea eax, [ecx - 0x65]
mov word [0x2718ec], ax
add eax, 0xd
mov word [0x2718ee], ax
lea eax, [ecx - 0x57]
mov word [0x2718f0], ax
add eax, 0xfffffffd
mov word [0x2718f2], ax
lea eax, [ecx - 0x59]
mov word [0x2718f4], ax
add eax, 0xfffffffd
mov word [0x2718f6], ax
lea eax, [ecx - 0x5b]
mov word [0x2718f8], ax
add eax, 0xfffffffd
mov word [0x2718fa], ax
lea eax, [ecx - 0x5d]
mov word [0x2718fc], ax
add eax, 0xffffffed
mov word [0x2718fe], ax
lea eax, [ecx - 0x6f]
mov word [0x271900], ax
add eax, 0xfffffffd
mov word [0x271902], ax
lea eax, [ecx - 0x71]
mov word [0x271904], ax
add eax, 0xfffffffd
mov word [0x271906], ax
lea eax, [ecx - 0x73]
mov word [0x271908], ax
add eax, 0xfffffffd
mov word [0x27190a], ax
lea eax, [ecx - 0x75]
mov word [0x27190c], ax
add eax, 0xd
mov word [0x27190e], ax
lea eax, [ecx - 0x67]
mov word [0x271910], ax
add eax, 0xfffffffd
mov word [0x271912], ax
mov eax, ecx
mov word [0x271914], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x271898]
add eax, 2
mov word [eax + 0x27205e], dx
cmp eax, 0x7e
jb 0x1dc671
mov eax, 0x272060
ret
Function at 0x1dcd41
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2726a4], 1
jne 0x1dcda8
or dword [0x2726a4], 1
mov dword [0x271918], 0x8ca98c9b
mov dword [0x27191c], 0x84a9869f
mov dword [0x271920], 0x93929793
mov dword [0x271924], 0x989fa984
mov dword [0x271928], 0x90a9829f
mov dword [0x27192c], 0xde939a9f
mov dword [0x271930], 0x9790d6df
mov dword [0x271934], 0x92939a9f
mov byte [0x271938], 0xf6
xor eax, eax
mov cl, byte [eax + 0x271918]
xor cl, 0xf6
mov byte [eax + 0x2720e0], cl
inc eax
cmp eax, 0x21
jb 0x1dcdaa
mov eax, 0x2720e0
ret

Function at 0x1dcdc5
Capabilities:
Encode data using xor

Disassembly:
test byte [0x2726a0], 1
jne 0x1dce2c
or dword [0x2726a0], 1
mov dword [0x27193c], 0x8ca98c9b
mov dword [0x271940], 0x84a9869f
mov dword [0x271944], 0x93929793
mov dword [0x271948], 0x9f90a984
mov dword [0x27194c], 0x85a9939a
mov dword [0x271950], 0xde829782
mov dword [0x271954], 0x9790d6df
mov dword [0x271958], 0x92939a9f
mov byte [0x27195c], 0xf6
xor eax, eax
mov cl, byte [eax + 0x27193c]
xor cl, 0xf6
mov byte [eax + 0x272104], cl
inc eax
cmp eax, 0x21
jb 0x1dce2e
mov eax, 0x272104
ret

Function at 0x1dce49
Capabilities:
Encode data using xor

Disassembly:
test byte [0x27269c], 1
jne 0x1dcec7
or dword [0x27269c], 1
mov dword [0x271960], 0x8ca98c9b
mov dword [0x271964], 0x84a9869f
mov dword [0x271968], 0x93929793
mov dword [0x27196c], 0x8e93a984
mov dword [0x271970], 0x95978482
mov dword [0x271974], 0x9f90a982
mov dword [0x271978], 0x82a9939a
mov dword [0x27197c], 0x939ea999
mov dword [0x271980], 0xdfde8697
mov dword [0x271984], 0x9f9790d6
mov dword [0x271988], 0xf692939a
xor eax, eax
mov cl, byte [eax + 0x271960]
xor cl, 0xf6
mov byte [eax + 0x272128], cl
inc eax
cmp eax, 0x2c
jb 0x1dcec9
mov eax, 0x272128
ret

Function at 0x1dcee4
Capabilities:
Encode data using xor

Disassembly:
test byte [0x272698], 1
jne 0x1dcf4e
or dword [0x272698], 1
mov dword [0x27198c], 0x9a9f97b0
mov dword [0x271990], 0x82d69293
mov dword [0x271994], 0x8495d699
mov dword [0x271998], 0x93829793
mov dword [0x27199c], 0x859392d6
mov dword [0x2719a0], 0x97989f82
mov dword [0x2719a4], 0x98999f82
mov dword [0x2719a8], 0x829786d6
mov dword [0x2719ac], 0xf6d6cc9e
xor eax, eax
mov cl, byte [eax + 0x27198c]
xor cl, 0xf6
mov byte [eax + 0x272154], cl
inc eax
cmp eax, 0x24
jb 0x1dcf50
mov eax, 0x272154
ret

Function at 0x1dcf6b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x272694], 1
jne 0x1dcfd1
or dword [0x272694], 1
mov dword [0x2719b0], 0x9a9f97b0
mov dword [0x2719b4], 0x82d69293
mov dword [0x2719b8], 0x8495d699
mov dword [0x2719bc], 0x93829793
mov dword [0x2719c0], 0x828399d6
mov dword [0x2719c4], 0xd6828386
mov dword [0x2719c8], 0x939a9f90
mov word [0x2719cc], 0xd6cc
mov byte [0x2719ce], 0xf6
xor eax, eax
mov cl, byte [eax + 0x2719b0]
xor cl, 0xf6
mov byte [eax + 0x272178], cl
inc eax
cmp eax, 0x1f
jb 0x1dcfd3
mov eax, 0x272178
ret
Function at 0x1dd008
Capabilities:
Encode data using xor

Disassembly:
test byte [0x272690], 1
jne 0x1dd046
or dword [0x272690], 1
mov dword [0x2719d0], 0x99a185bf
mov dword [0x2719d4], 0xa6c2c081
mov dword [0x2719d8], 0x93959984
mov word [0x2719dc], 0x8585
mov byte [0x2719de], 0xf6
xor eax, eax
mov cl, byte [eax + 0x2719d0]
xor cl, 0xf6
mov byte [eax + 0x272198], cl
inc eax
cmp eax, 0xf
jb 0x1dd048
mov eax, 0x272198
ret

Function at 0x1dd15e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x27268c], 1
jne 0x1dd1c7
or dword [0x27268c], 1
mov dword [0x2719e0], 0x999a9ab7
mov dword [0x2719e4], 0x93829795
mov dword [0x2719e8], 0xbf9298b7
mov dword [0x2719ec], 0x9f829f98
mov dword [0x2719f0], 0x8c9f9a97
mov dword [0x2719f4], 0x929fa593
mov dword [0x2719f8], 0x9f9790d6
mov dword [0x2719fc], 0xcc92939a
mov word [0x271a00], 0xf6d6
xor eax, eax
mov cl, byte [eax + 0x2719e0]
xor cl, 0xf6
mov byte [eax + 0x2721a8], cl
inc eax
cmp eax, 0x22
jb 0x1dd1c9
mov eax, 0x2721a8
ret

Function at 0x1dd1e4
Capabilities:
Encode data using xor

Disassembly:
test byte [0x272688], 1
jne 0x1dd243
or dword [0x272688], 1
mov dword [0x271a04], 0x95939eb5
mov dword [0x271a08], 0x9d99a29d
mov dword [0x271a0c], 0x93bb9893
mov dword [0x271a10], 0x8493949b
mov dword [0x271a14], 0x869f9e85
mov dword [0x271a18], 0x9f9790d6
mov dword [0x271a1c], 0xcc92939a
mov word [0x271a20], 0xf6d6
xor eax, eax
mov cl, byte [eax + 0x271a04]
xor cl, 0xf6
mov byte [eax + 0x2721cc], cl
inc eax
cmp eax, 0x1e
jb 0x1dd245
mov eax, 0x2721cc
ret

Function at 0x1dd4a9
Capabilities:
Encode data using xor

Disassembly:
test byte [0x27267c], 1
jne 0x1dd52e
or dword [0x27267c], 1
mov dword [0x271a38], 0x989897b5
mov dword [0x271a3c], 0x87d68299
mov dword [0x271a40], 0x8f849383
mov dword [0x271a44], 0xc0d697d6
mov dword [0x271a48], 0x9f94d6c2
mov dword [0x271a4c], 0x9f80d682
mov dword [0x271a50], 0x99d68193
mov dword [0x271a54], 0xc4c5d698
mov dword [0x271a58], 0x829f94d6
mov dword [0x271a5c], 0x989f81d6
mov dword [0x271a60], 0x85819992
mov byte [0x271a64], 0xf6
xor eax, eax
mov cl, byte [eax + 0x271a38]
xor cl, 0xf6
mov byte [eax + 0x272200], cl
inc eax
cmp eax, 0x2d
jb 0x1dd530
mov eax, 0x272200
ret

Function at 0x1dd54b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x272678], 1
jne 0x1dd5fb
or dword [0x272678], 1
push ebx
push esi
mov eax, 0xcfbe
mov word [0x271a68], ax
dec eax
mov word [0x271a6a], ax
push edi
mov edi, 0xcfb3
mov eax, edi
mov word [0x271a6c], ax
add eax, 0xfffffffc
mov word [0x271a6e], ax
lea esi, [edi - 0xa]
mov eax, esi
mov word [0x271a70], ax
lea edx, [edi + 7]
mov eax, edx
mov word [0x271a72], ax
dec eax
mov word [0x271a74], ax
lea ecx, [edi + 2]
mov eax, ecx
mov word [0x271a76], ax
add eax, 2
mov ebx, eax
lea eax, [edi + 0xc]
pop edi
mov word [0x271a86], ax
add eax, 0x37
pop esi
mov word [0x271a78], bx
mov dword [0x271a7a], 0xcfa9cfba
mov dword [0x271a7e], 0xcfb7cfbb
mov dword [0x271a82], 0xcfbecfb5
mov dword [0x271a88], 0xcfb3cfb8
mov word [0x271a8c], ax
pop ebx
xor eax, eax
mov ecx, 0xcff6
xor cx, word [eax + 0x271a68]
add eax, 2
mov word [eax + 0x27222e], cx
cmp eax, 0x26
jb 0x1dd5fd
mov eax, 0x272230
ret