joyce8/EMBER2024-capa huggingface dataset:
Function at 0xec9e48
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82be8], 1
mov ecx, 0x793c
jne 0xec9e77
or dword [0xf82be8], 1
lea eax, [ecx + 0x21]
mov word [0xf7e09c], ax
add eax, 0xffffffb1
mov word [0xf7e09e], ax
mov eax, ecx
mov word [0xf7e0a0], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0xf7e09c]
add eax, 2
mov word [eax + 0xf7e692], dx
cmp eax, 6
jb 0xec9e79
mov eax, 0xf7e694
ret

Function at 0xec9e97
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82be0], 1
jne 0xec9f07
or dword [0xf82be0], 1
mov dword [0xf7e0ac], 0x50555d7a
mov dword [0xf7e0b0], 0x481c5859
mov dword [0xf7e0b4], 0x52551c53
mov dword [0xf7e0b8], 0x5d554855
mov dword [0xf7e0bc], 0x59465550
mov dword [0xf7e0c0], 0x4a52591c
mov dword [0xf7e0c4], 0x52534e55
mov dword [0xf7e0c8], 0x48525951
mov word [0xf7e0cc], 0x1c06
mov byte [0xf7e0ce], 0x3c
xor eax, eax
mov cl, byte [eax + 0xf7e0ac]
xor cl, 0x3c
mov byte [eax + 0xf7e6a4], cl
inc eax
cmp eax, 0x23
jb 0xec9f09
mov eax, 0xf7e6a4
ret

Function at 0xec9f24
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82bd8], 1
jne 0xec9f6f
or dword [0xf82bd8], 1
mov dword [0xf7e0d8], 0x5d545269
mov dword [0xf7e0dc], 0x59505852
mov dword [0xf7e0e0], 0x44591c58
mov dword [0xf7e0e4], 0x484c595f
mov dword [0xf7e0e8], 0x6525355
mov word [0xf7e0ec], 0x3c1c
xor eax, eax
mov cl, byte [eax + 0xf7e0d8]
xor cl, 0x3c
mov byte [eax + 0xf7e6d0], cl
inc eax
cmp eax, 0x16
jb 0xec9f71
mov eax, 0xf7e6d0
ret

Function at 0xec9f8c
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82bd4], 1
jne 0xec9fdf
or dword [0xf82bd4], 1
mov dword [0xf7e0f0], 0x5d545269
mov dword [0xf7e0f4], 0x59505852
mov dword [0xf7e0f8], 0x44591c58
mov dword [0xf7e0fc], 0x484c595f
mov dword [0xf7e100], 0x6525355
mov dword [0xf7e104], 0x364f191c
mov byte [0xf7e108], 0x3c
xor eax, eax
mov cl, byte [eax + 0xf7e0f0]
xor cl, 0x3c
mov byte [eax + 0xf7e6e8], cl
inc eax
cmp eax, 0x19
jb 0xec9fe1
mov eax, 0xf7e6e8
ret

Function at 0xec9ffe
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82bd0], 1
jne 0xeca036
or dword [0xf82bd0], 1
mov dword [0xf7e10c], 0x5e49486f
mov dword [0xf7e110], 0x5544591c
mov dword [0xf7e114], 0x19141c48
mov dword [0xf7e118], 0x3c361558
xor eax, eax
mov cl, byte [eax + 0xf7e10c]
xor cl, 0x3c
mov byte [eax + 0xf7e704], cl
inc eax
cmp eax, 0x10
jb 0xeca038
mov eax, 0xf7e704
ret
Function at 0xecba53
Capabilities:
Write file on windows

Disassembly:
mov eax, 0xf4a9ef
call fcn.00f49c28
sub esp, 0x20
push ebx
xor ebx, ebx
cmp dword [edi + 0x44], ebx
je 0xecbb37
cmp byte [edi + 0x49], bl
je 0xecbb37
mov eax, dword [edi]
push 0xffffffffffffffff
mov ecx, edi
call dword [eax + 0xc]
cmp eax, 0xffffffff
jne 0xecba8a
xor al, al
jmp 0xecbb39
push esi
lea esi, [ebp - 0x2c]
call fcn.00ecb54c
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x18], 0x10
mov eax, dword [ebp - 0x2c]
jae 0xecbada
lea eax, [ebp - 0x2c]
mov edx, eax
mov ecx, dword [edi + 0x44]
mov esi, dword [ecx]
lea ebx, [ebp - 0x10]
push ebx
mov ebx, dword [ebp - 0x1c]
add eax, ebx
push eax
push edx
lea eax, [edi + 0x4c]
push eax
call dword [esi + 0x18]
sub eax, 0
je 0xecbadf
dec eax
je 0xecbae3
dec eax
dec eax
je 0xecbb33
xor bl, bl
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.00ec4cef
mov al, bl
pop esi
jmp 0xecbb39
mov edx, dword [ebp - 0x2c]
jmp 0xecbaa4
mov byte [edi + 0x49], 0
cmp dword [ebp - 0x18], 0x10
mov eax, dword [ebp - 0x2c]
jae 0xecbaef
lea eax, [ebp - 0x2c]
mov esi, dword [ebp - 0x10]
sub esi, eax
je 0xecbb15
cmp dword [ebp - 0x18], 0x10
mov eax, dword [ebp - 0x2c]
jae 0xecbb02
lea eax, [ebp - 0x2c]
push dword [edi + 0x54]
push esi
push 1
push eax
call fcn.00f25730
add esp, 0x10
cmp esi, eax
jne 0xecbac7
cmp byte [edi + 0x49], 0
je 0xecbb33
test esi, esi
jne 0xecba96
push esi
push 8
lea esi, [ebp - 0x2c]
call fcn.00ecb625
jmp 0xecba96
mov bl, 1
jmp 0xecbac9
mov al, 1
mov ecx, dword [ebp - 0xc]
pop ebx
mov dword fs:[0], ecx
leave
ret

Function at 0xed03a3
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82bcc], 1
jne 0xed0417
or dword [0xf82bcc], 1
mov dword [0xf7e724], 0x5148527e
mov dword [0xf7e728], 0x52531d59
mov dword [0xf7e72c], 0x585a1d49
mov dword [0xf7e730], 0x54591d49
mov dword [0xf7e734], 0x59544d4e
mov dword [0xf7e738], 0x1d5b521d
mov dword [0xf7e73c], 0x55495850
mov dword [0xf7e740], 0x1a1d5952
mov dword [0xf7e744], 0x51515c5e
mov dword [0xf7e748], 0x3d1d071a
xor eax, eax
mov cl, byte [eax + 0xf7e724]
xor cl, 0x3d
mov byte [eax + 0xf7e868], cl
inc eax
cmp eax, 0x28
jb 0xed0419
mov eax, 0xf7e868
ret

Function at 0xed0434
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82bc8], 1
jne 0xed049b
or dword [0xf82bc8], 1
mov dword [0xf7e74c], 0x51545c7b
mov dword [0xf7e750], 0x491d5958
mov dword [0xf7e754], 0x53541d52
mov dword [0xf7e758], 0x5856524b
mov dword [0xf7e75c], 0x4958501d
mov dword [0xf7e760], 0x1d595255
mov dword [0xf7e764], 0x515c5e1a
mov dword [0xf7e768], 0x1d071a51
mov byte [0xf7e76c], 0x3d
xor eax, eax
mov cl, byte [eax + 0xf7e74c]
xor cl, 0x3d
mov byte [eax + 0xf7e890], cl
inc eax
cmp eax, 0x21
jb 0xed049d
mov eax, 0xf7e890
ret
Function at 0xed04b8
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82bc4], 1
jne 0xed0518
or dword [0xf82bc4], 1
mov dword [0xf7e770], 0x524f6d37
mov dword [0xf7e774], 0x515f5c5f
mov dword [0xf7e778], 0x48591d44
mov dword [0xf7e77c], 0x52491d58
mov dword [0xf7e780], 0x4f5e4e1d
mov dword [0xf7e784], 0x1d494d54
mov dword [0xf7e788], 0x524f4f58
mov dword [0xf7e78c], 0x3d1d074f
xor eax, eax
mov cl, byte [eax + 0xf7e770]
xor cl, 0x3d
mov byte [eax + 0xf7e8b4], cl
inc eax
cmp eax, 0x20
jb 0xed051a
mov eax, 0xf7e8b4
ret

Function at 0xed0af5
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ecx
and dword [ebp - 4], 0
cmp dword [ebp + 0xc], 0
push ebx
push esi
push edi
mov edi, eax
jbe 0xed0c3a
mov ebx, dword [ebp + 8]
push 4
sub ebx, edi
pop esi
test byte [0xf82bc0], 1
jne 0xed0b57
or dword [0xf82bc0], 1
mov eax, 0x794e
mov word [0xf7e790], ax
add eax, 0xa
mov word [0xf7e792], ax
mov eax, 0x7953
mov word [0xf7e794], ax
add eax, 6
mov word [0xf7e796], ax
mov eax, 0x793d
mov word [0xf7e798], ax
xor eax, eax
mov ecx, 0x793d
xor cx, word [eax + 0xf7e790]
add eax, 2
mov word [eax + 0xf7e8d2], cx
cmp eax, 0xa
jb 0xed0b59
mov eax, dword [ebx + edi]
mov ecx, 0xf7e8d4
mov dx, word [eax]
cmp dx, word [ecx]
jne 0xed0ba0
test dx, dx
je 0xed0b9c
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0xed0ba0
add eax, esi
add ecx, esi
test dx, dx
jne 0xed0b7c
xor eax, eax
jmp 0xed0ba5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0xed0bb1
mov dword [edi], 0x385
jmp 0xed0c29
call fcn.00ed0c4a
mov ecx, dword [ebx + edi]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0xed0bdd
test dx, dx
je 0xed0bd9
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0xed0bdd
add ecx, esi
add eax, esi
test dx, dx
jne 0xed0bb9
xor eax, eax
jmp 0xed0be2
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0xed0bee
mov dword [edi], 0x386
jmp 0xed0c29
call fcn.00ed0d1d
mov ecx, dword [ebx + edi]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0xed0c1a
test dx, dx
je 0xed0c16
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0xed0c1a
add ecx, esi
add eax, esi
test dx, dx
jne 0xed0bf6
xor eax, eax
jmp 0xed0c1f
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0xed0c43
mov dword [edi], 0x387
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
add edi, esi
cmp eax, dword [ebp + 0xc]
jb 0xed0b14
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 8
mov eax, 0x80020006
jmp 0xed0c3c
Function at 0xed0c4a
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82bbc], 1
jne 0xed0cfa
or dword [0xf82bbc], 1
mov eax, 0x795c
mov word [0xf7e79c], ax
add eax, 0xfffffffd
mov ecx, eax
mov word [0xf7e7a0], ax
mov eax, 0x7978
mov word [0xf7e7a2], ax
add eax, 0xffffffd3
mov word [0xf7e7a4], ax
mov eax, 0x7958
mov word [0xf7e79e], cx
mov ecx, eax
lea edx, [eax - 5]
mov word [0xf7e7a6], cx
mov ecx, edx
push edi
mov word [0xf7e7a8], cx
add ecx, 0xfffffff6
mov edi, ecx
mov word [0xf7e7aa], di
lea edi, [eax + 0x19]
mov word [0xf7e7ac], di
add edi, 0xffffffe3
mov ecx, eax
add eax, 0xfffffff7
mov word [0xf7e7ba], ax
lea eax, [ecx - 0x1b]
mov word [0xf7e7ae], di
mov dword [0xf7e7b0], 0x7949794e
mov word [0xf7e7b4], cx
mov dword [0xf7e7b6], 0x79587953
mov word [0xf7e7bc], ax
pop edi
xor eax, eax
mov ecx, 0x793d
xor cx, word [eax + 0xf7e79c]
add eax, 2
mov word [eax + 0xf7e8de], cx
cmp eax, 0x22
jb 0xed0cfc
mov eax, 0xf7e8e0
ret

Function at 0xed0d1d
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82bb8], 1
mov ecx, 0x793d
jne 0xed0d77
or dword [0xf82bb8], 1
lea eax, [ecx + 0xe]
mov word [0xf7e7c0], ax
add eax, 0xd
mov word [0xf7e7c2], ax
lea eax, [ecx + 0x12]
mov word [0xf7e7c4], ax
dec eax
mov word [0xf7e7c6], ax
lea eax, [ecx + 0x17]
mov word [0xf7e7c8], ax
add eax, 0xfffffffe
mov word [0xf7e7ca], ax
lea eax, [ecx + 0x16]
mov word [0xf7e7cc], ax
mov eax, ecx
mov word [0xf7e7ce], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0xf7e7c0]
add eax, 2
mov word [eax + 0xf7e902], dx
cmp eax, 0x10
jb 0xed0d79
mov eax, 0xf7e904
ret

Function at 0xed1736
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82bb4], 1
mov edx, 0x793d
jne 0xed1799
or dword [0xf82bb4], 1
lea ecx, [edx + 0x1b]
mov eax, ecx
mov word [0xf7e7d0], ax
add eax, 0xfffffff7
push esi
mov esi, eax
lea eax, [edx + 0x34]
mov word [0xf7e7da], ax
add eax, 0xffffffe3
mov word [0xf7e7dc], ax
mov eax, edx
mov word [0xf7e7d2], si
mov word [0xf7e7d4], si
mov dword [0xf7e7d6], 0x794f7952
mov dword [0xf7e7de], 0x79587953
mov word [0xf7e7e2], ax
pop esi
xor eax, eax
mov ecx, edx
xor cx, word [eax + 0xf7e7d0]
add eax, 2
mov word [eax + 0xf7e912], cx
cmp eax, 0x14
jb 0xed179b
mov eax, 0xf7e914
ret

Function at 0xed17b9
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82bb0], 1
jne 0xed1855
or dword [0xf82bb0], 1
mov edx, 0x7958
mov eax, edx
mov word [0xf7e7e4], ax
add eax, 0xfffffff7
mov ecx, eax
mov word [0xf7e7e6], cx
mov word [0xf7e7e8], cx
lea ecx, [edx - 6]
mov word [0xf7e7ea], cx
mov ecx, eax
mov word [0xf7e7ec], cx
lea ecx, [edx + 0x26]
mov word [0xf7e7ee], cx
add ecx, 0xffffffd7
mov word [0xf7e7f0], cx
lea ecx, [edx + 4]
push edi
mov edi, ecx
mov word [0xf7e7f2], di
mov edi, eax
mov word [0xf7e7f6], cx
mov word [0xf7e7fe], ax
add ecx, 2
lea eax, [edx - 0x1b]
mov word [0xf7e7f4], di
mov word [0xf7e7f8], cx
mov dword [0xf7e7fa], 0x79587949
mov word [0xf7e800], ax
pop edi
xor eax, eax
mov ecx, 0x793d
xor cx, word [eax + 0xf7e7e4]
add eax, 2
mov word [eax + 0xf7e926], cx
cmp eax, 0x1e
jb 0xed1857
mov eax, 0xf7e928
ret
Function at 0xed1878
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82bac], 1
jne 0xed18d9
or dword [0xf82bac], 1
mov edx, 0x7958
mov eax, edx
mov word [0xf7e804], ax
add eax, 0xfffffff7
mov ecx, eax
mov word [0xf7e806], cx
mov word [0xf7e808], cx
push edi
lea ecx, [edx - 6]
mov edi, ecx
mov word [0xf7e80c], ax
lea eax, [edx - 0x1b]
mov word [0xf7e80a], di
mov dword [0xf7e80e], 0x7952797e
mov dword [0xf7e812], 0x79587959
mov word [0xf7e816], ax
pop edi
xor eax, eax
mov ecx, 0x793d
xor cx, word [eax + 0xf7e804]
add eax, 2
mov word [eax + 0xf7e946], cx
cmp eax, 0x14
jb 0xed18db
mov eax, 0xf7e948
ret

Function at 0xed18fc
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82ba8], 1
mov edx, 0x793d
jne 0xed1979
or dword [0xf82ba8], 1
lea ecx, [edx + 0x1b]
mov eax, ecx
mov word [0xf7e818], ax
add eax, 0xfffffff7
push esi
mov esi, eax
lea eax, [edx + 0x33]
mov word [0xf7e822], ax
mov eax, ecx
mov word [0xf7e824], ax
add eax, 0xfffffff6
mov word [0xf7e81a], si
mov word [0xf7e81c], si
mov esi, eax
mov word [0xf7e828], ax
lea eax, [edx + 0x1f]
mov word [0xf7e82a], ax
mov eax, edx
mov word [0xf7e826], si
mov dword [0xf7e81e], 0x794f7952
mov dword [0xf7e82c], 0x7958795a
mov word [0xf7e830], ax
pop esi
xor eax, eax
mov ecx, edx
xor cx, word [eax + 0xf7e818]
add eax, 2
mov word [eax + 0xf7e95a], cx
cmp eax, 0x1a
jb 0xed197b
mov eax, 0xf7e95c
ret

Function at 0xed1999
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82ba4], 1
mov ecx, 0x793d
jne 0xed19f8
or dword [0xf82ba4], 1
lea eax, [ecx + 0x1b]
mov word [0xf7e834], ax
add eax, 0xfffffff7
mov edx, eax
mov word [0xf7e836], dx
mov word [0xf7e838], dx
lea edx, [ecx + 0x15]
mov word [0xf7e83a], dx
mov edx, eax
lea eax, [ecx + 0x14]
mov word [0xf7e842], ax
mov eax, ecx
mov word [0xf7e83c], dx
mov dword [0xf7e83e], 0x794f7968
mov word [0xf7e844], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0xf7e834]
add eax, 2
mov word [eax + 0xf7e976], dx
cmp eax, 0x12
jb 0xed19fa
mov eax, 0xf7e978
ret

Function at 0xed209d
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82ba0], 1
jne 0xed20c7
or dword [0xf82ba0], 1
mov dword [0xf7e848], 0x51485301
mov word [0xf7e84c], 0x351
mov byte [0xf7e84e], 0x3d
xor eax, eax
mov cl, byte [eax + 0xf7e848]
xor cl, 0x3d
mov byte [eax + 0xf7e98c], cl
inc eax
cmp eax, 7
jb 0xed20c9
mov eax, 0xf7e98c
ret

Function at 0xed20e4
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82b9c], 1
jne 0xed210e
or dword [0xf82b9c], 1
mov dword [0xf7e850], 0x51485301
mov word [0xf7e854], 0x351
mov byte [0xf7e856], 0x3d
xor eax, eax
mov cl, byte [eax + 0xf7e850]
xor cl, 0x3d
mov byte [eax + 0xf7e994], cl
inc eax
cmp eax, 7
jb 0xed2110
mov eax, 0xf7e994
ret

Function at 0xed212b
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0xf82b94], 1
jne 0xed2151
or dword [0xf82b94], 1
mov dword [0xf7e85c], 0x525e661d
mov dword [0xf7e860], 0x3d005859
mov cl, byte [eax + 0xf7e85c]
xor cl, 0x3d
mov byte [eax + 0xf7e9a0], cl
inc eax
cmp eax, 8
jb 0xed2151
mov eax, 0xf7e9a0
ret
Function at 0xed2ea8
Capabilities:
Encode data using xor

Disassembly:
push esi
push edi
push 0x31
pop ecx
mov esi, 0xf52ac8
mov edi, 0xf82f40
push 0xf52b8c
rep movsd dword es:[edi], dword [esi]
call fcn.00f0a5d0
pop ecx
pop edi
pop esi
cmp eax, 0xffffffff
jne 0xed2ece
xor al, al
ret
push 0xf52bf8
call fcn.00f0a520
pop ecx
cmp eax, 0xffffffff
je 0xed2ecb
push 0xf52d00
call fcn.00f08f90
pop ecx
cmp eax, 0xffffffff
je 0xed2ecb
test byte [0xf82b88], 1
jne 0xed2f0f
or dword [0xf82b88], 1
mov dword [0xf7e9c0], 0xf5f564d
mov byte [0xf7e9c4], 0x3e
xor eax, eax
mov cl, byte [eax + 0xf7e9c0]
xor cl, 0x3e
mov byte [eax + 0xf7ea8c], cl
inc eax
cmp eax, 5
jb 0xed2f11
push 0xf7ea8c
call fcn.00f0a640
pop ecx
mov dword [0xf78928], eax
test eax, eax
js 0xed2ecb
call fcn.00ed2f9a
push eax
call fcn.00f09000
pop ecx
mov dword [0xf7892c], eax
test eax, eax
js 0xed2ecb
test byte [0xf82b80], 1
jne 0xed2f6d
or dword [0xf82b80], 1
mov dword [0xf7e9d0], 0x3e4d5b5f
xor eax, eax
mov cl, byte [eax + 0xf7e9d0]
xor cl, 0x3e
mov byte [eax + 0xf7ea9c], cl
inc eax
cmp eax, 4
jb 0xed2f6f
push 0xf7ea9c
call fcn.00f0a590
test eax, eax
mov dword [0xf78930], eax
pop ecx
setns al
ret

Function at 0xed2f9a
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82b84], 1
jne 0xed2fbe
or dword [0xf82b84], 1
mov dword [0xf7e9c8], 0x4a4c5158
mov dword [0xf7e9cc], 0x3e5f504b
xor eax, eax
mov cl, byte [eax + 0xf7e9c8]
xor cl, 0x3e
mov byte [eax + 0xf7ea94], cl
inc eax
cmp eax, 8
jb 0xed2fc0
mov eax, 0xf7ea94
ret

Function at 0xed323e
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82b7c], 1
jne 0xed327c
or dword [0xf82b7c], 1
mov dword [0xf7e9d4], 0x571e4e53
mov dword [0xf7e9d8], 0x1e4a5750
mov dword [0xf7e9dc], 0x52575f58
mov word [0xf7e9e0], 0x5a5b
mov byte [0xf7e9e2], 0x3e
xor eax, eax
mov cl, byte [eax + 0xf7e9d4]
xor cl, 0x3e
mov byte [eax + 0xf7eaa0], cl
inc eax
cmp eax, 0xf
jb 0xed327e
mov eax, 0xf7eaa0
ret

Function at 0xed3299
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82b78], 1
jne 0xed32d7
or dword [0xf82b78], 1
mov dword [0xf7e9e4], 0x571e4e53
mov dword [0xf7e9e8], 0x1e4a5750
mov dword [0xf7e9ec], 0x52575f58
mov word [0xf7e9f0], 0x5a5b
mov byte [0xf7e9f2], 0x3e
xor eax, eax
mov cl, byte [eax + 0xf7e9e4]
xor cl, 0x3e
mov byte [eax + 0xf7eab0], cl
inc eax
cmp eax, 0xf
jb 0xed32d9
mov eax, 0xf7eab0
ret

Function at 0xed32f4
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82b74], 1
jne 0xed3332
or dword [0xf82b74], 1
mov dword [0xf7e9f4], 0x614a5b4d
mov dword [0xf7e9f8], 0x1e4a5057
mov dword [0xf7e9fc], 0x52575f58
mov word [0xf7ea00], 0x5a5b
mov byte [0xf7ea02], 0x3e
xor eax, eax
mov cl, byte [eax + 0xf7e9f4]
xor cl, 0x3e
mov byte [eax + 0xf7eac0], cl
inc eax
cmp eax, 0xf
jb 0xed3334
mov eax, 0xf7eac0
ret
Function at 0xed334f
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82b70], 1
jne 0xed3398
or dword [0xf82b70], 1
mov dword [0xf7ea04], 0x574d504b
mov dword [0xf7ea08], 0x5a5b5059
mov dword [0xf7ea0c], 0x5f5b4c61
mov dword [0xf7ea10], 0x5f581e5a
mov dword [0xf7ea14], 0x5a5b5257
mov byte [0xf7ea18], 0x3e
xor eax, eax
mov cl, byte [eax + 0xf7ea04]
xor cl, 0x3e
mov byte [eax + 0xf7ead0], cl
inc eax
cmp eax, 0x15
jb 0xed339a
mov eax, 0xf7ead0
ret

Function at 0xed33b5
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82b6c], 1
jne 0xed33f4
or dword [0xf82b6c], 1
mov dword [0xf7ea1c], 0x59504c4e
mov dword [0xf7ea20], 0x555f531e
mov dword [0xf7ea24], 0x5f581e5b
mov dword [0xf7ea28], 0x5a5b5257
mov byte [0xf7ea2c], 0x3e
xor eax, eax
mov cl, byte [eax + 0xf7ea1c]
xor cl, 0x3e
mov byte [eax + 0xf7eae8], cl
inc eax
cmp eax, 0x11
jb 0xed33f6
mov eax, 0xf7eae8
ret

Function at 0xed3411
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82b68], 1
jne 0xed3453
or dword [0xf82b68], 1
mov dword [0xf7ea30], 0x4a4c5158
mov dword [0xf7ea34], 0x615f504b
mov dword [0xf7ea38], 0x5a5f5b4c
mov dword [0xf7ea3c], 0x575f581e
mov dword [0xf7ea40], 0x3e5a5b52
xor eax, eax
mov cl, byte [eax + 0xf7ea30]
xor cl, 0x3e
mov byte [eax + 0xf7eafc], cl
inc eax
cmp eax, 0x14
jb 0xed3455
mov eax, 0xf7eafc
ret

Function at 0xed3470
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82b64], 1
jne 0xed34b8
or dword [0xf82b64], 1
mov dword [0xf7ea44], 0x4e474c5d
mov dword [0xf7ea48], 0x571e514a
mov dword [0xf7ea4c], 0x1e4a5750
mov dword [0xf7ea50], 0x52575f58
mov word [0xf7ea54], 0x5a5b
mov byte [0xf7ea56], 0x3e
xor eax, eax
mov cl, byte [eax + 0xf7ea44]
xor cl, 0x3e
mov byte [eax + 0xf7eb10], cl
inc eax
cmp eax, 0x13
jb 0xed34ba
mov eax, 0xf7eb10
ret

Function at 0xed36cd
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82b60], 1
jne 0xed36f0
or dword [0xf82b60], 1
mov dword [0xf7ea58], 0x5a4d4d57
mov word [0xf7ea5c], 0x3e55
xor eax, eax
mov cl, byte [eax + 0xf7ea58]
xor cl, 0x3e
mov byte [eax + 0xf7eb24], cl
inc eax
cmp eax, 6
jb 0xed36f2
mov eax, 0xf7eb24
ret

Function at 0xed370d
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82b5c], 1
jne 0xed373a
or dword [0xf82b5c], 1
mov dword [0xf7ea60], 0x5c4c4b56
mov dword [0xf7ea64], 0x4c4b5a5f
mov word [0xf7ea68], 0x3e4c
xor eax, eax
mov cl, byte [eax + 0xf7ea60]
xor cl, 0x3e
mov byte [eax + 0xf7eb2c], cl
inc eax
cmp eax, 0xa
jb 0xed373c
mov eax, 0xf7eb2c
ret

Function at 0xed381a
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82b58], 1
jne 0xed3847
or dword [0xf82b58], 1
mov dword [0xf7ea6c], 0x5c4c4b56
mov dword [0xf7ea70], 0x4c4b5a5f
mov word [0xf7ea74], 0x3e4c
xor eax, eax
mov cl, byte [eax + 0xf7ea6c]
xor cl, 0x3e
mov byte [eax + 0xf7eb38], cl
inc eax
cmp eax, 0xa
jb 0xed3849
mov eax, 0xf7eb38
ret
Function at 0xed3f33
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82b54], 1
jne 0xed3f7b
or dword [0xf82b54], 1
mov dword [0xf7eb44], 0x4f464d5c
mov dword [0xf7eb48], 0x561f504b
mov dword [0xf7eb4c], 0x1f4b5651
mov dword [0xf7eb50], 0x53565e59
mov word [0xf7eb54], 0x5b5a
mov byte [0xf7eb56], 0x3f
xor eax, eax
mov cl, byte [eax + 0xf7eb44]
xor cl, 0x3f
mov byte [eax + 0xf7ec58], cl
inc eax
cmp eax, 0x13
jb 0xed3f7d
mov eax, 0xf7ec58
ret

Function at 0xed3f98
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82b50], 1
jne 0xed3fe0
or dword [0xf82b50], 1
mov dword [0xf7eb58], 0x4f464d5c
mov dword [0xf7eb5c], 0x561f504b
mov dword [0xf7eb60], 0x1f4b5651
mov dword [0xf7eb64], 0x53565e59
mov word [0xf7eb68], 0x5b5a
mov byte [0xf7eb6a], 0x3f
xor eax, eax
mov cl, byte [eax + 0xf7eb58]
xor cl, 0x3f
mov byte [eax + 0xf7ec6c], cl
inc eax
cmp eax, 0x13
jb 0xed3fe2
mov eax, 0xf7ec6c
ret

Function at 0xed3ffe
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82b48], 1
jne 0xed4046
or dword [0xf82b48], 1
mov dword [0xf7eb74], 0x4f464d5c
mov dword [0xf7eb78], 0x561f504b
mov dword [0xf7eb7c], 0x1f4b5651
mov dword [0xf7eb80], 0x53565e59
mov word [0xf7eb84], 0x5b5a
mov byte [0xf7eb86], 0x3f
xor eax, eax
mov cl, byte [eax + 0xf7eb74]
xor cl, 0x3f
mov byte [eax + 0xf7ec88], cl
inc eax
cmp eax, 0x13
jb 0xed4048
mov eax, 0xf7ec88
ret

Function at 0xed4063
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82b40], 1
jne 0xed40ab
or dword [0xf82b40], 1
mov dword [0xf7eb8c], 0x4f464d5c
mov dword [0xf7eb90], 0x561f504b
mov dword [0xf7eb94], 0x1f4b5651
mov dword [0xf7eb98], 0x53565e59
mov word [0xf7eb9c], 0x5b5a
mov byte [0xf7eb9e], 0x3f
xor eax, eax
mov cl, byte [eax + 0xf7eb8c]
xor cl, 0x3f
mov byte [eax + 0xf7eca0], cl
inc eax
cmp eax, 0x13
jb 0xed40ad
mov eax, 0xf7eca0
ret

Function at 0xed40c8
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82b3c], 1
jne 0xed40ff
or dword [0xf82b3c], 1
mov dword [0xf7eba0], 0x4f464d5c
mov dword [0xf7eba4], 0x591f504b
mov dword [0xf7eba8], 0x5a53565e
mov word [0xf7ebac], 0x3f5b
xor eax, eax
mov cl, byte [eax + 0xf7eba0]
xor cl, 0x3f
mov byte [eax + 0xf7ecb4], cl
inc eax
cmp eax, 0xe
jb 0xed4101
mov eax, 0xf7ecb4
ret

Function at 0xed411c
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82b38], 1
jne 0xed4153
or dword [0xf82b38], 1
mov dword [0xf7ebb0], 0x4f464d5c
mov dword [0xf7ebb4], 0x591f504b
mov dword [0xf7ebb8], 0x5a53565e
mov word [0xf7ebbc], 0x3f5b
xor eax, eax
mov cl, byte [eax + 0xf7ebb0]
xor cl, 0x3f
mov byte [eax + 0xf7ecc4], cl
inc eax
cmp eax, 0xe
jb 0xed4155
mov eax, 0xf7ecc4
ret

Function at 0xed4170
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82b34], 1
jne 0xed419d
or dword [0xf82b34], 1
mov dword [0xf7ebc0], 0x4f4d5a57
mov dword [0xf7ebc4], 0x4d5a5b14
mov word [0xf7ebc8], 0x3f4f
xor eax, eax
mov cl, byte [eax + 0xf7ebc0]
xor cl, 0x3f
mov byte [eax + 0xf7ecd4], cl
inc eax
cmp eax, 0xa
jb 0xed419f
mov eax, 0xf7ecd4
ret
Function at 0xed41ba
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82b30], 1
jne 0xed41f1
or dword [0xf82b30], 1
mov dword [0xf7ebcc], 0x4f464d5c
mov dword [0xf7ebd0], 0x591f504b
mov dword [0xf7ebd4], 0x5a53565e
mov word [0xf7ebd8], 0x3f5b
xor eax, eax
mov cl, byte [eax + 0xf7ebcc]
xor cl, 0x3f
mov byte [eax + 0xf7ece0], cl
inc eax
cmp eax, 0xe
jb 0xed41f3
mov eax, 0xf7ece0
ret

Function at 0xed420e
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82b2c], 1
jne 0xed4245
or dword [0xf82b2c], 1
mov dword [0xf7ebdc], 0x4f464d5c
mov dword [0xf7ebe0], 0x591f504b
mov dword [0xf7ebe4], 0x5a53565e
mov word [0xf7ebe8], 0x3f5b
xor eax, eax
mov cl, byte [eax + 0xf7ebdc]
xor cl, 0x3f
mov byte [eax + 0xf7ecf0], cl
inc eax
cmp eax, 0xe
jb 0xed4247
mov eax, 0xf7ecf0
ret

Function at 0xed4313
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82b28], 1
jne 0xed434a
or dword [0xf82b28], 1
mov dword [0xf7ebec], 0x4f464d5c
mov dword [0xf7ebf0], 0x591f504b
mov dword [0xf7ebf4], 0x5a53565e
mov word [0xf7ebf8], 0x3f5b
xor eax, eax
mov cl, byte [eax + 0xf7ebec]
xor cl, 0x3f
mov byte [eax + 0xf7ed00], cl
inc eax
cmp eax, 0xe
jb 0xed434c
mov eax, 0xf7ed00
ret

Function at 0xed44f9
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82b24], 1
jne 0xed4530
or dword [0xf82b24], 1
mov dword [0xf7ebfc], 0x4f464d5c
mov dword [0xf7ec00], 0x591f504b
mov dword [0xf7ec04], 0x5a53565e
mov word [0xf7ec08], 0x3f5b
xor eax, eax
mov cl, byte [eax + 0xf7ebfc]
xor cl, 0x3f
mov byte [eax + 0xf7ed10], cl
inc eax
cmp eax, 0xe
jb 0xed4532
mov eax, 0xf7ed10
ret

Function at 0xed454d
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82b20], 1
jne 0xed4584
or dword [0xf82b20], 1
mov dword [0xf7ec0c], 0x4f464d5c
mov dword [0xf7ec10], 0x591f504b
mov dword [0xf7ec14], 0x5a53565e
mov word [0xf7ec18], 0x3f5b
xor eax, eax
mov cl, byte [eax + 0xf7ec0c]
xor cl, 0x3f
mov byte [eax + 0xf7ed20], cl
inc eax
cmp eax, 0xe
jb 0xed4586
mov eax, 0xf7ed20
ret