joyce8/EMBER2024-capa huggingface dataset:
Function at 0xe31c69
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7ed8], 1
jne 0xe31cb1
or dword [0xed7ed8], 1
mov dword [0xed5884], 0xbbf9b697
mov dword [0xed5888], 0xaaaeb6ab
mov dword [0xed588c], 0xbaf9abbc
mov dword [0xed5890], 0xbcadb7b6
mov word [0xed5894], 0xada1
mov byte [0xed5896], 0xd9
xor eax, eax
mov cl, byte [eax + 0xed5884]
xor cl, 0xd9
mov byte [eax + 0xed5b10], cl
inc eax
cmp eax, 0x13
jb 0xe31cb3
mov eax, 0xed5b10
ret

Function at 0xe31d27
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7ed4], 1
jne 0xe31d68
or dword [0xed7ed4], 1
mov dword [0xed5898], 0xbcf9b697
mov dword [0xed589c], 0xbcb4bcb5
mov dword [0xed58a0], 0xb1f9adb7
mov dword [0xed58a4], 0xb5bdb7b8
mov word [0xed58a8], 0xd9bc
xor eax, eax
mov cl, byte [eax + 0xed5898]
xor cl, 0xd9
mov byte [eax + 0xed5b24], cl
inc eax
cmp eax, 0x12
jb 0xe31d6a
mov eax, 0xed5b24
ret

Function at 0xe31d85
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7ed0], 1
jne 0xe31dc6
or dword [0xed7ed0], 1
mov dword [0xed58ac], 0xbcf9b697
mov dword [0xed58b0], 0xbcb4bcb5
mov dword [0xed58b4], 0xb1f9adb7
mov dword [0xed58b8], 0xb5bdb7b8
mov word [0xed58bc], 0xd9bc
xor eax, eax
mov cl, byte [eax + 0xed58ac]
xor cl, 0xd9
mov byte [eax + 0xed5b38], cl
inc eax
cmp eax, 0x12
jb 0xe31dc8
mov eax, 0xed5b38
ret

Function at 0xe31ef6
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7ecc], 1
jne 0xe31f2e
or dword [0xed7ecc], 1
mov dword [0xed58c0], 0xb0afb897
mov dword [0xed58c4], 0xbcadb8be
mov dword [0xed58c8], 0xb0b8bff9
mov dword [0xed58cc], 0xd9bdbcb5
xor eax, eax
mov cl, byte [eax + 0xed58c0]
xor cl, 0xd9
mov byte [eax + 0xed5b4c], cl
inc eax
cmp eax, 0x10
jb 0xe31f30
mov eax, 0xed5b4c
ret

Function at 0xe3247b
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7ec8], 1
jne 0xe324c4
or dword [0xed7ec8], 1
mov dword [0xed58d0], 0xbcf9b697
mov dword [0xed58d4], 0xbcb4bcb5
mov dword [0xed58d8], 0xaef9adb7
mov dword [0xed58dc], 0xf9b1adb0
mov dword [0xed58e0], 0xf9e3bdb0
mov byte [0xed58e4], 0xd9
xor eax, eax
mov cl, byte [eax + 0xed58d0]
xor cl, 0xd9
mov byte [eax + 0xed5b5c], cl
inc eax
cmp eax, 0x15
jb 0xe324c6
mov eax, 0xed5b5c
ret

Function at 0xe325f9
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7ec4], 1
jne 0xe32642
or dword [0xed7ec4], 1
mov dword [0xed58e8], 0x86adbcbe
mov dword [0xed58ec], 0xbcb7b7b0
mov dword [0xed58f0], 0x948d91ab
mov dword [0xed58f4], 0xb8bff995
mov dword [0xed58f8], 0xbdbcb5b0
mov byte [0xed58fc], 0xd9
xor eax, eax
mov cl, byte [eax + 0xed58e8]
xor cl, 0xd9
mov byte [eax + 0xed5b74], cl
inc eax
cmp eax, 0x15
jb 0xe32644
mov eax, 0xed5b74
ret

Function at 0xe32777
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7ec0], 1
jne 0xe327c0
or dword [0xed7ec0], 1
mov dword [0xed5900], 0x86adbcbe
mov dword [0xed5904], 0xbcadacb6
mov dword [0xed5908], 0x948d91ab
mov dword [0xed590c], 0xb8bff995
mov dword [0xed5910], 0xbdbcb5b0
mov byte [0xed5914], 0xd9
xor eax, eax
mov cl, byte [eax + 0xed5900]
xor cl, 0xd9
mov byte [eax + 0xed5b8c], cl
inc eax
cmp eax, 0x15
jb 0xe327c2
mov eax, 0xed5b8c
ret
Function at 0xe32904
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7ebc], 1
jne 0xe3294d
or dword [0xed7ebc], 1
mov dword [0xed5918], 0x86adaca9
mov dword [0xed591c], 0xbcb7b7b0
mov dword [0xed5920], 0x948d91ab
mov dword [0xed5924], 0xb8bff995
mov dword [0xed5928], 0xbdbcb5b0
mov byte [0xed592c], 0xd9
xor eax, eax
mov cl, byte [eax + 0xed5918]
xor cl, 0xd9
mov byte [eax + 0xed5ba4], cl
inc eax
cmp eax, 0x15
jb 0xe3294f
mov eax, 0xed5ba4
ret

Function at 0xe32a91
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7eb8], 1
jne 0xe32ada
or dword [0xed7eb8], 1
mov dword [0xed5930], 0x86adaca9
mov dword [0xed5934], 0xbcadacb6
mov dword [0xed5938], 0x948d91ab
mov dword [0xed593c], 0xb8bff995
mov dword [0xed5940], 0xbdbcb5b0
mov byte [0xed5944], 0xd9
xor eax, eax
mov cl, byte [eax + 0xed5930]
xor cl, 0xd9
mov byte [eax + 0xed5bbc], cl
inc eax
cmp eax, 0x15
jb 0xe32adc
mov eax, 0xed5bbc
ret

Function at 0xe32d99
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7eb0], 1
jne 0xe32de2
or dword [0xed7eb0], 1
mov dword [0xed5954], 0x86adbcbe
mov dword [0xed5958], 0xaab8b5ba
mov dword [0xed595c], 0xb4b897aa
mov dword [0xed5960], 0xb8bff9bc
mov dword [0xed5964], 0xbdbcb5b0
mov byte [0xed5968], 0xd9
xor eax, eax
mov cl, byte [eax + 0xed5954]
xor cl, 0xd9
mov byte [eax + 0xed5be0], cl
inc eax
cmp eax, 0x15
jb 0xe32de4
mov eax, 0xed5be0
ret

Function at 0xe32dff
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7eac], 1
jne 0xe32e41
or dword [0xed7eac], 1
mov dword [0xed596c], 0x98adbcbe
mov dword [0xed5970], 0xb0abadad
mov dword [0xed5974], 0xbcadacbb
mov dword [0xed5978], 0xb0b8bff9
mov dword [0xed597c], 0xd9bdbcb5
xor eax, eax
mov cl, byte [eax + 0xed596c]
xor cl, 0xd9
mov byte [eax + 0xed5bf8], cl
inc eax
cmp eax, 0x14
jb 0xe32e43
mov eax, 0xed5bf8
ret

Function at 0xe3310c
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7ea4], 1
jne 0xe33155
or dword [0xed7ea4], 1
mov dword [0xed598c], 0x86adaca9
mov dword [0xed5990], 0xaab8b5ba
mov dword [0xed5994], 0xb4b897aa
mov dword [0xed5998], 0xb8bff9bc
mov dword [0xed599c], 0xbdbcb5b0
mov byte [0xed59a0], 0xd9
xor eax, eax
mov cl, byte [eax + 0xed598c]
xor cl, 0xd9
mov byte [eax + 0xed5c18], cl
inc eax
cmp eax, 0x15
jb 0xe33157
mov eax, 0xed5c18
ret

Function at 0xe33172
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7ea0], 1
jne 0xe331b4
or dword [0xed7ea0], 1
mov dword [0xed59a4], 0x98adbcaa
mov dword [0xed59a8], 0xb0abadad
mov dword [0xed59ac], 0xbcadacbb
mov dword [0xed59b0], 0xb0b8bff9
mov dword [0xed59b4], 0xd9bdbcb5
xor eax, eax
mov cl, byte [eax + 0xed59a4]
xor cl, 0xd9
mov byte [eax + 0xed5c30], cl
inc eax
cmp eax, 0x14
jb 0xe331b6
mov eax, 0xed5c30
ret

Function at 0xe33298
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7e9c], 1
jne 0xe332cd
or dword [0xed7e9c], 1
mov dword [0xed59b8], 0xbab0b5ba
mov dword [0xed59bc], 0xb8bff9b2
mov dword [0xed59c0], 0xbdbcb5b0
mov byte [0xed59c4], 0xd9
xor eax, eax
mov cl, byte [eax + 0xed59b8]
xor cl, 0xd9
mov byte [eax + 0xed5c44], cl
inc eax
cmp eax, 0xd
jb 0xe332cf
mov eax, 0xed5c44
ret
Function at 0xe3337c
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7e84], 1
jne 0xe333ce
or dword [0xed7e84], 1
mov dword [0xed5a28], 0xb4bcb5bc
mov dword [0xed5a2c], 0x86adb7bc
mov dword [0xed5a30], 0x86adbcbe
mov dword [0xed5a34], 0xbcb7b7b0
mov dword [0xed5a38], 0xadb186ab
mov word [0xed5a3c], 0xb5b4
mov byte [0xed5a3e], 0xd9
xor eax, eax
mov cl, byte [eax + 0xed5a28]
xor cl, 0xd9
mov byte [eax + 0xed5cb4], cl
inc eax
cmp eax, 0x17
jb 0xe333d0
mov eax, 0xed5cb4
ret

Function at 0xe333eb
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7e80], 1
jne 0xe3343d
or dword [0xed7e80], 1
mov dword [0xed5a40], 0xb4bcb5bc
mov dword [0xed5a44], 0x86adb7bc
mov dword [0xed5a48], 0x86adbcbe
mov dword [0xed5a4c], 0xbcadacb6
mov dword [0xed5a50], 0xadb186ab
mov word [0xed5a54], 0xb5b4
mov byte [0xed5a56], 0xd9
xor eax, eax
mov cl, byte [eax + 0xed5a40]
xor cl, 0xd9
mov byte [eax + 0xed5ccc], cl
inc eax
cmp eax, 0x17
jb 0xe3343f
mov eax, 0xed5ccc
ret

Function at 0xe3345a
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7e7c], 1
jne 0xe334ac
or dword [0xed7e7c], 1
mov dword [0xed5a58], 0xb4bcb5bc
mov dword [0xed5a5c], 0x86adb7bc
mov dword [0xed5a60], 0x86adbcaa
mov dword [0xed5a64], 0xbcb7b7b0
mov dword [0xed5a68], 0xadb186ab
mov word [0xed5a6c], 0xb5b4
mov byte [0xed5a6e], 0xd9
xor eax, eax
mov cl, byte [eax + 0xed5a58]
xor cl, 0xd9
mov byte [eax + 0xed5ce4], cl
inc eax
cmp eax, 0x17
jb 0xe334ae
mov eax, 0xed5ce4
ret

Function at 0xe334c9
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7e78], 1
jne 0xe3351b
or dword [0xed7e78], 1
mov dword [0xed5a70], 0xb4bcb5bc
mov dword [0xed5a74], 0x86adb7bc
mov dword [0xed5a78], 0x86adbcaa
mov dword [0xed5a7c], 0xbcadacb6
mov dword [0xed5a80], 0xadb186ab
mov word [0xed5a84], 0xb5b4
mov byte [0xed5a86], 0xd9
xor eax, eax
mov cl, byte [eax + 0xed5a70]
xor cl, 0xd9
mov byte [eax + 0xed5cfc], cl
inc eax
cmp eax, 0x17
jb 0xe3351d
mov eax, 0xed5cfc
ret

Function at 0xe339a2
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7e60], 1
jne 0xe339ea
or dword [0xed7e60], 1
mov dword [0xed5d74], 0xb7b7ae95
mov dword [0xed5d78], 0xbcb2b7fb
mov dword [0xed5d7c], 0xa8aeafb3
mov dword [0xed5d80], 0xbabfa9be
mov word [0xed5d84], 0xbaaf
mov byte [0xed5d86], 0xdb
xor eax, eax
mov cl, byte [eax + 0xed5d74]
xor cl, 0xdb
mov byte [eax + 0xed5f4c], cl
inc eax
cmp eax, 0x13
jb 0xe339ec
mov eax, 0xed5f4c
ret

Function at 0xe33b01
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7e5c], 1
jne 0xe33b49
or dword [0xed7e5c], 1
mov dword [0xed5d88], 0xb7b7ae95
mov dword [0xed5d8c], 0xbcb2b7fb
mov dword [0xed5d90], 0xa8aeafb3
mov dword [0xed5d94], 0xbabfa9be
mov word [0xed5d98], 0xbaaf
mov byte [0xed5d9a], 0xdb
xor eax, eax
mov cl, byte [eax + 0xed5d88]
xor cl, 0xdb
mov byte [eax + 0xed5f60], cl
inc eax
cmp eax, 0x13
jb 0xe33b4b
mov eax, 0xed5f60
ret
Function at 0xe33c63
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7e58], 1
jne 0xe33cab
or dword [0xed7e58], 1
mov dword [0xed5d9c], 0xb7b7ae95
mov dword [0xed5da0], 0xbcb2b7fb
mov dword [0xed5da4], 0xa8aeafb3
mov dword [0xed5da8], 0xbabfa9be
mov word [0xed5dac], 0xbaaf
mov byte [0xed5dae], 0xdb
xor eax, eax
mov cl, byte [eax + 0xed5d9c]
xor cl, 0xdb
mov byte [eax + 0xed5f74], cl
inc eax
cmp eax, 0x13
jb 0xe33cad
mov eax, 0xed5f74
ret

Function at 0xe33d92
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7e54], 1
jne 0xe33dda
or dword [0xed7e54], 1
mov dword [0xed5db0], 0xb7b7ae95
mov dword [0xed5db4], 0xbcb2b7fb
mov dword [0xed5db8], 0xa8aeafb3
mov dword [0xed5dbc], 0xbabfa9be
mov word [0xed5dc0], 0xbaaf
mov byte [0xed5dc2], 0xdb
xor eax, eax
mov cl, byte [eax + 0xed5db0]
xor cl, 0xdb
mov byte [eax + 0xed5f88], cl
inc eax
cmp eax, 0x13
jb 0xe33ddc
mov eax, 0xed5f88
ret

Function at 0xe340a3
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7e48], 1
jne 0xe34109
or dword [0xed7e48], 1
mov dword [0xed5df4], 0xafb5b2ae
mov dword [0xed5df8], 0xb784e9e8
mov dword [0xed5dfc], 0xafb3bcb2
mov dword [0xed5e00], 0xa9bea8ae
mov dword [0xed5e04], 0xbaafbabf
mov dword [0xed5e08], 0x84b4af84
mov dword [0xed5e0c], 0xb9b6aeb5
mov word [0xed5e10], 0xa9be
mov byte [0xed5e12], 0xdb
xor eax, eax
mov cl, byte [eax + 0xed5df4]
xor cl, 0xdb
mov byte [eax + 0xed5fcc], cl
inc eax
cmp eax, 0x1f
jb 0xe3410b
mov eax, 0xed5fcc
ret

Function at 0xe34126
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7e44], 1
jne 0xe34185
or dword [0xed7e44], 1
mov dword [0xed5e14], 0xe8afb5b2
mov dword [0xed5e18], 0xb2b784e9
mov dword [0xed5e1c], 0xaeafb3bc
mov dword [0xed5e20], 0xbfa9bea8
mov dword [0xed5e24], 0x84baafba
mov dword [0xed5e28], 0xb584b4af
mov dword [0xed5e2c], 0xbeb9b6ae
mov word [0xed5e30], 0xdba9
xor eax, eax
mov cl, byte [eax + 0xed5e14]
xor cl, 0xdb
mov byte [eax + 0xed5fec], cl
inc eax
cmp eax, 0x1e
jb 0xe34187
mov eax, 0xed5fec
ret

Function at 0xe341a2
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7e40], 1
jne 0xe34201
or dword [0xed7e40], 1
mov dword [0xed5e34], 0xbab3b8ab
mov dword [0xed5e38], 0xb2b784a9
mov dword [0xed5e3c], 0xaeafb3bc
mov dword [0xed5e40], 0xbfa9bea8
mov dword [0xed5e44], 0x84baafba
mov dword [0xed5e48], 0xa884b4af
mov dword [0xed5e4c], 0xb5b2a9af
mov word [0xed5e50], 0xdbbc
xor eax, eax
mov cl, byte [eax + 0xed5e34]
xor cl, 0xdb
mov byte [eax + 0xed600c], cl
inc eax
cmp eax, 0x1e
jb 0xe34203
mov eax, 0xed600c
ret

Function at 0xe3421e
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7e3c], 1
jne 0xe34284
or dword [0xed7e3c], 1
mov dword [0xed5e54], 0xb3b8acab
mov dword [0xed5e58], 0xb784a9ba
mov dword [0xed5e5c], 0xafb3bcb2
mov dword [0xed5e60], 0xa9bea8ae
mov dword [0xed5e64], 0xbaafbabf
mov dword [0xed5e68], 0x84b4af84
mov dword [0xed5e6c], 0xb2a9afa8
mov word [0xed5e70], 0xbcb5
mov byte [0xed5e72], 0xdb
xor eax, eax
mov cl, byte [eax + 0xed5e54]
xor cl, 0xdb
mov byte [eax + 0xed602c], cl
inc eax
cmp eax, 0x1f
jb 0xe34286
mov eax, 0xed602c
ret
Function at 0xe342a1
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7e38], 1
jne 0xe34308
or dword [0xed7e38], 1
mov dword [0xed5e74], 0xb3bcb2b7
mov dword [0xed5e78], 0xbea8aeaf
mov dword [0xed5e7c], 0xafbabfa9
mov dword [0xed5e80], 0xbea884ba
mov dword [0xed5e84], 0xbaad84af
mov dword [0xed5e88], 0xb5bab2a9
mov dword [0xed5e8c], 0xafa884af
mov dword [0xed5e90], 0xbcb5b2a9
mov byte [0xed5e94], 0xdb
xor eax, eax
mov cl, byte [eax + 0xed5e74]
xor cl, 0xdb
mov byte [eax + 0xed604c], cl
inc eax
cmp eax, 0x21
jb 0xe3430a
mov eax, 0xed604c
ret

Function at 0xe34325
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7e34], 1
jne 0xe3438c
or dword [0xed7e34], 1
mov dword [0xed5e98], 0xb3bcb2b7
mov dword [0xed5e9c], 0xbea8aeaf
mov dword [0xed5ea0], 0xafbabfa9
mov dword [0xed5ea4], 0xbea884ba
mov dword [0xed5ea8], 0xbaad84af
mov dword [0xed5eac], 0xb5bab2a9
mov dword [0xed5eb0], 0xaeb584af
mov dword [0xed5eb4], 0xa9beb9b6
mov byte [0xed5eb8], 0xdb
xor eax, eax
mov cl, byte [eax + 0xed5e98]
xor cl, 0xdb
mov byte [eax + 0xed6070], cl
inc eax
cmp eax, 0x21
jb 0xe3438e
mov eax, 0xed6070
ret

Function at 0xe343a9
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7e30], 1
jne 0xe34412
or dword [0xed7e30], 1
mov dword [0xed5ebc], 0xb3bcb2b7
mov dword [0xed5ec0], 0xbea8aeaf
mov dword [0xed5ec4], 0xafbabfa9
mov dword [0xed5ec8], 0xbea884ba
mov dword [0xed5ecc], 0xbaad84af
mov dword [0xed5ed0], 0xb5bab2a9
mov dword [0xed5ed4], 0xb4b984af
mov dword [0xed5ed8], 0xbabeb7b4
mov word [0xed5edc], 0xdbb5
xor eax, eax
mov cl, byte [eax + 0xed5ebc]
xor cl, 0xdb
mov byte [eax + 0xed6094], cl
inc eax
cmp eax, 0x22
jb 0xe34414
mov eax, 0xed6094
ret

Function at 0xe3442f
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7e2c], 1
jne 0xe34495
or dword [0xed7e2c], 1
mov dword [0xed5ee0], 0xb3bcb2b7
mov dword [0xed5ee4], 0xbea8aeaf
mov dword [0xed5ee8], 0xafbabfa9
mov dword [0xed5eec], 0xbea884ba
mov dword [0xed5ef0], 0xbaad84af
mov dword [0xed5ef4], 0xb5bab2a9
mov dword [0xed5ef8], 0xaeb584af
mov word [0xed5efc], 0xb7b7
mov byte [0xed5efe], 0xdb
xor eax, eax
mov cl, byte [eax + 0xed5ee0]
xor cl, 0xdb
mov byte [eax + 0xed60b8], cl
inc eax
cmp eax, 0x1f
jb 0xe34497
mov eax, 0xed60b8
ret
Function at 0xe34727
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0xe9deac
call fcn.00e9cd48
sub esp, 0x20
push esi
xor esi, esi
mov dword [ebp - 0x10], esi
push edi
mov dword [ebp - 0x10], esi
call dword [0xea60a8]
test byte [0xed7e0c], 1
mov edi, eax
jne 0xe34774
or dword [0xed7e0c], 1
mov dword [0xed6154], 0xb7b0b7a9
mov dword [0xed6158], 0xf0aabbb0
mov dword [0xed615c], 0xdeb2b2ba
xor ecx, ecx
mov al, byte [ecx + 0xed6154]
xor al, 0xde
mov byte [ecx + 0xed640c], al
inc ecx
cmp ecx, 0xc
jb 0xe34776
push esi
push esi
lea eax, [ebp - 0x10]
push eax
push esi
push edi
push 0xed640c
call dword [0xea60dc]
push eax
push 0x1b00
call dword [0xea6134]
test eax, eax
jne 0xe347c2
call fcn.00e34838
mov ecx, dword [ebp + 0xc]
push eax
push dword [ebp + 8]
call fcn.00e1eca7
pop ecx
pop ecx
jmp 0xe34827
test byte [0xed7e04], 1
jne 0xe347e2
or dword [0xed7e04], 1
mov word [0xed617c], 0xfee4
mov byte [0xed617e], 0xde
xor eax, eax
mov cl, byte [eax + 0xed617c]
xor cl, 0xde
mov byte [eax + 0xed6434], cl
inc eax
cmp eax, 3
jb 0xe347e4
mov ecx, dword [ebp + 0xc]
lea eax, [ebp - 0x2c]
push 0xed6434
push eax
call fcn.00e1eca7
mov dword [ebp - 4], esi
push dword [ebp - 0x10]
push eax
push dword [ebp + 8]
call fcn.00e1f05a
add esp, 0x14
push esi
push 1
lea ecx, [ebp - 0x2c]
call fcn.00e14cae
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword fs:[0], ecx
leave
ret

Function at 0xe34838
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7e08], 1
jne 0xe3488d
or dword [0xed7e08], 1
mov dword [0xed6160], 0xbf98f6fe
mov dword [0xed6164], 0xbabbb2b7
mov dword [0xed6168], 0xfeb1aafe
mov dword [0xed616c], 0xb3acb1b8
mov dword [0xed6170], 0xbbfeaabf
mov dword [0xed6174], 0xacb1acac
mov word [0xed6178], 0xdef7
xor eax, eax
mov cl, byte [eax + 0xed6160]
xor cl, 0xde
mov byte [eax + 0xed6418], cl
inc eax
cmp eax, 0x1a
jb 0xe3488f
mov eax, 0xed6418
ret

Function at 0xe349f8
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7e00], 1
jne 0xe34a41
or dword [0xed7e00], 1
mov dword [0xed6180], 0x96b0b789
mov dword [0xed6184], 0x91aeaaaa
mov dword [0xed6188], 0xf6b0bbae
mov dword [0xed618c], 0xbfb8fef7
mov dword [0xed6190], 0xbabbb2b7
mov byte [0xed6194], 0xde
xor eax, eax
mov cl, byte [eax + 0xed6180]
xor cl, 0xde
mov byte [eax + 0xed6438], cl
inc eax
cmp eax, 0x15
jb 0xe34a43
mov eax, 0xed6438
ret

Function at 0xe34d08
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7dfc], 1
jne 0xe34d5b
or dword [0xed7dfc], 1
mov dword [0xed6198], 0x96b0b789
mov dword [0xed619c], 0x9daeaaaa
mov dword [0xed61a0], 0xb5bdbfac
mov dword [0xed61a4], 0xf6b2ac8b
mov dword [0xed61a8], 0xbfb8fef7
mov dword [0xed61ac], 0xbabbb2b7
mov byte [0xed61b0], 0xde
xor eax, eax
mov cl, byte [eax + 0xed6198]
xor cl, 0xde
mov byte [eax + 0xed6450], cl
inc eax
cmp eax, 0x19
jb 0xe34d5d
mov eax, 0xed6450
ret
Function at 0xe34d78
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7df8], 1
jne 0xe34dc4
or dword [0xed7df8], 1
mov dword [0xed61b4], 0x96b0b789
mov dword [0xed61b8], 0x9daeaaaa
mov dword [0xed61bc], 0xbbb0b0b1
mov dword [0xed61c0], 0xf7f6aabd
mov dword [0xed61c4], 0xb7bfb8fe
mov dword [0xed61c8], 0xdebabbb2
xor eax, eax
mov cl, byte [eax + 0xed61b4]
xor cl, 0xde
mov byte [eax + 0xed646c], cl
inc eax
cmp eax, 0x18
jb 0xe34dc6
mov eax, 0xed646c
ret

Function at 0xe3571d
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7df4], 1
jne 0xe357f6
or dword [0xed7df4], 1
mov dword [0xed61d0], 0xabafbb8c
mov dword [0xed61d4], 0xfeaaadbb
mov dword [0xed61d8], 0xfeb2acab
mov dword [0xed61dc], 0xbabbadab
mov dword [0xed61e0], 0xbafebffe
mov dword [0xed61e4], 0xbbb8b8b7
mov dword [0xed61e8], 0xaab0bbac
mov dword [0xed61ec], 0xb6bdadfe
mov dword [0xed61f0], 0xfebbb3bb
mov dword [0xed61f4], 0xb0bfb6aa
mov dword [0xed61f8], 0xbbb6aafe
mov dword [0xed61fc], 0xb0b1bdfe
mov dword [0xed6200], 0xaabdbbb0
mov dword [0xed6204], 0xfeb0b1b7
mov dword [0xed6208], 0xfeadbfa9
mov dword [0xed620c], 0xaab7b0b7
mov dword [0xed6210], 0xb7b2bfb7
mov dword [0xed6214], 0xfebabba4
mov dword [0xed6218], 0xb6aab7a9
mov byte [0xed621c], 0xde
xor eax, eax
mov cl, byte [eax + 0xed61d0]
xor cl, 0xde
mov byte [eax + 0xed6488], cl
inc eax
cmp eax, 0x4d
jb 0xe357f8
mov eax, 0xed6488
ret

Function at 0xe35813
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7df0], 1
jne 0xe358ef
or dword [0xed7df0], 1
mov dword [0xed6220], 0xabafbb8c
mov dword [0xed6224], 0xfeaaadbb
mov dword [0xed6228], 0xfeb2acab
mov dword [0xed622c], 0xbabbadab
mov dword [0xed6230], 0xbafebffe
mov dword [0xed6234], 0xbbb8b8b7
mov dword [0xed6238], 0xaab0bbac
mov dword [0xed623c], 0xadb1b6fe
mov dword [0xed6240], 0xbfb0feaa
mov dword [0xed6244], 0xaafebbb3
mov dword [0xed6248], 0xfeb0bfb6
mov dword [0xed624c], 0xfebbb6aa
mov dword [0xed6250], 0xb0b0b1bd
mov dword [0xed6254], 0xb7aabdbb
mov dword [0xed6258], 0xa9feb0b1
mov dword [0xed625c], 0xb7feadbf
mov dword [0xed6260], 0xb7aab7b0
mov dword [0xed6264], 0xa4b7b2bf
mov dword [0xed6268], 0xa9febabb
mov dword [0xed626c], 0xdeb6aab7
xor eax, eax
mov cl, byte [eax + 0xed6220]
xor cl, 0xde
mov byte [eax + 0xed64d8], cl
inc eax
cmp eax, 0x50
jb 0xe358f1
mov eax, 0xed64d8
ret
Function at 0xe3590c
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7dec], 1
jne 0xe359e4
or dword [0xed7dec], 1
mov dword [0xed6270], 0xabafbb8c
mov dword [0xed6274], 0xfeaaadbb
mov dword [0xed6278], 0xfeb2acab
mov dword [0xed627c], 0xbabbadab
mov dword [0xed6280], 0xbafebffe
mov dword [0xed6284], 0xbbb8b8b7
mov dword [0xed6288], 0xaab0bbac
mov dword [0xed628c], 0xacb1aefe
mov dword [0xed6290], 0xb6aafeaa
mov dword [0xed6294], 0xaafeb0bf
mov dword [0xed6298], 0xbdfebbb6
mov dword [0xed629c], 0xbbb0b0b1
mov dword [0xed62a0], 0xb1b7aabd
mov dword [0xed62a4], 0xbfa9feb0
mov dword [0xed62a8], 0xb0b7fead
mov dword [0xed62ac], 0xbfb7aab7
mov dword [0xed62b0], 0xbba4b7b2
mov dword [0xed62b4], 0xb7a9feba
mov word [0xed62b8], 0xb6aa
mov byte [0xed62ba], 0xde
xor eax, eax
mov cl, byte [eax + 0xed6270]
xor cl, 0xde
mov byte [eax + 0xed6528], cl
inc eax
cmp eax, 0x4b
jb 0xe359e6
mov eax, 0xed6528
ret

Function at 0xe35a01
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7de8], 1
jne 0xe35a57
or dword [0xed7de8], 1
mov dword [0xed62bc], 0x96b0b789
mov dword [0xed62c0], 0x91aeaaaa
mov dword [0xed62c4], 0x8cb0bbae
mov dword [0xed62c8], 0xbbabafbb
mov dword [0xed62cc], 0xf7f6aaad
mov dword [0xed62d0], 0xb7bfb8fe
mov dword [0xed62d4], 0xdebabbb2
xor eax, eax
mov cl, byte [eax + 0xed62bc]
xor cl, 0xde
mov byte [eax + 0xed6574], cl
inc eax
cmp eax, 0x1c
jb 0xe35a59
mov eax, 0xed6574
ret

Function at 0xe35a74
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7de4], 1
jne 0xe35b43
or dword [0xed7de4], 1
mov dword [0xed62d8], 0x96b0b789
mov dword [0xed62dc], 0x8daeaaaa
mov dword [0xed62e0], 0xae91aabb
mov dword [0xed62e4], 0xb0b1b7aa
mov dword [0xed62e8], 0x909789f6
mov dword [0xed62ec], 0x8e8a8a96
mov dword [0xed62f0], 0x8a8e9181
mov dword [0xed62f4], 0x81909197
mov dword [0xed62f8], 0x8b9d9b8d
mov dword [0xed62fc], 0x878a978c
mov dword [0xed6300], 0x9f929881
mov dword [0xed6304], 0xfef78d99
mov dword [0xed6308], 0xacfeb0b1
mov dword [0xed630c], 0xbbabafbb
mov dword [0xed6310], 0xb6feaaad
mov dword [0xed6314], 0xb2bab0bf
mov dword [0xed6318], 0xbfb8febb
mov dword [0xed631c], 0xbabbb2b7
mov byte [0xed6320], 0xde
xor eax, eax
mov cl, byte [eax + 0xed62d8]
xor cl, 0xde
mov byte [eax + 0xed6590], cl
inc eax
cmp eax, 0x49
jb 0xe35b45
mov eax, 0xed6590
ret
Function at 0xe35b60
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7de0], 1
jne 0xe35c2e
or dword [0xed7de0], 1
mov dword [0xed6328], 0x96b0b789
mov dword [0xed632c], 0x8daeaaaa
mov dword [0xed6330], 0xae91aabb
mov dword [0xed6334], 0xb0b1b7aa
mov dword [0xed6338], 0x909789f6
mov dword [0xed633c], 0x8e8a8a96
mov dword [0xed6340], 0x8a8e9181
mov dword [0xed6344], 0x81909197
mov dword [0xed6348], 0x9a909b8d
mov dword [0xed634c], 0x93978a81
mov dword [0xed6350], 0x8a8b919b
mov dword [0xed6354], 0xb0b1fef7
mov dword [0xed6358], 0xafbbacfe
mov dword [0xed635c], 0xaaadbbab
mov dword [0xed6360], 0xb0bfb6fe
mov dword [0xed6364], 0xfebbb2ba
mov dword [0xed6368], 0xb2b7bfb8
mov word [0xed636c], 0xbabb
mov byte [0xed636e], 0xde
xor eax, eax
mov cl, byte [eax + 0xed6328]
xor cl, 0xde
mov byte [eax + 0xed65e0], cl
inc eax
cmp eax, 0x47
jb 0xe35c30
mov eax, 0xed65e0
ret

Function at 0xe35c4b
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7ddc], 1
jne 0xe35cb4
or dword [0xed7ddc], 1
mov dword [0xed6370], 0x96b0b789
mov dword [0xed6374], 0x9faeaaaa
mov dword [0xed6378], 0xbb8cbaba
mov dword [0xed637c], 0xadbbabaf
mov dword [0xed6380], 0xbfbb96aa
mov dword [0xed6384], 0xadacbbba
mov dword [0xed6388], 0xb8fef7f6
mov dword [0xed638c], 0xbbb2b7bf
mov word [0xed6390], 0xdeba
xor eax, eax
mov cl, byte [eax + 0xed6370]
xor cl, 0xde
mov byte [eax + 0xed6628], cl
inc eax
cmp eax, 0x22
jb 0xe35cb6
mov eax, 0xed6628
ret

Function at 0xe35cd1
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7dd8], 1
jne 0xe35d24
or dword [0xed7dd8], 1
mov dword [0xed6394], 0xaeaaaa96
mov dword [0xed6398], 0xbab0bb8d
mov dword [0xed639c], 0xabafbb8c
mov dword [0xed63a0], 0xf6aaadbb
mov dword [0xed63a4], 0xbfb8fef7
mov dword [0xed63a8], 0xbabbb2b7
mov byte [0xed63ac], 0xde
xor eax, eax
mov cl, byte [eax + 0xed6394]
xor cl, 0xde
mov byte [eax + 0xed664c], cl
inc eax
cmp eax, 0x19
jb 0xe35d26
mov eax, 0xed664c
ret

Function at 0xe35d41
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed7dd4], 1
jne 0xe35d93
or dword [0xed7dd4], 1
mov dword [0xed63b0], 0xaeaaaa96
mov dword [0xed63b4], 0xacbbab8f
mov dword [0xed63b8], 0xb8b097a7
mov dword [0xed63bc], 0xfef7f6b1
mov dword [0xed63c0], 0xb2b7bfb8
mov word [0xed63c4], 0xbabb
mov byte [0xed63c6], 0xde
xor eax, eax
mov cl, byte [eax + 0xed63b0]
xor cl, 0xde
mov byte [eax + 0xed6668], cl
inc eax
cmp eax, 0x17
jb 0xe35d95
mov eax, 0xed6668
ret