joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14e6ac0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 4], 0
je 0x14e6ae2
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 3
jb 0x14e6ad0
mov byte [esi + 4], 0
mov eax, esi
pop esi
ret

Function at 0x14e6af0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 6], 0
je 0x14e6b12
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 5
jb 0x14e6b00
mov byte [esi + 6], 0
mov eax, esi
pop esi
ret
Function at 0x14e79d0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 3], 0
je 0x14e79f2
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 2
jb 0x14e79e0
mov byte [esi + 3], 0
mov eax, esi
pop esi
ret

Function at 0x14e7b50
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0xa], 0
je 0x14e7b72
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 9
jb 0x14e7b60
mov byte [esi + 0xa], 0
mov eax, esi
pop esi
ret

Function at 0x14e7b80
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x19], 0
je 0x14e7ba2
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x18
jb 0x14e7b90
mov byte [esi + 0x19], 0
mov eax, esi
pop esi
ret

Function at 0x14e7cc0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0xe], 0
je 0x14e7ce2
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0xd
jb 0x14e7cd0
mov byte [esi + 0xe], 0
mov eax, esi
pop esi
ret

Function at 0x14e7cf0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x16], 0
je 0x14e7d12
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x15
jb 0x14e7d00
mov byte [esi + 0x16], 0
mov eax, esi
pop esi
ret

Function at 0x14e8120
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x12], 0
je 0x14e8142
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x11
jb 0x14e8130
mov byte [esi + 0x12], 0
mov eax, esi
pop esi
ret

Function at 0x14e8e30
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 5], 0
je 0x14e8e52
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 4
jb 0x14e8e40
mov byte [esi + 5], 0
mov eax, esi
pop esi
ret

Function at 0x14e8e60
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 8], 0
je 0x14e8e82
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 7
jb 0x14e8e70
mov byte [esi + 8], 0
mov eax, esi
pop esi
ret
Function at 0x14e8e90
Capabilities:
Encode data using xor
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x13934d6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10
push esi
mov esi, ecx
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], 0
mov dword [ebp - 4], 1
xorps xmm0, xmm0
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
mov dword [ebp - 0x18], 1
xor ecx, ecx
mov dword [ebp - 0x10], 0x100f6e1
lea eax, [ecx - 0x6d]
xor byte [ebp + ecx - 0x10], al
inc ecx
cmp ecx, 2
jb 0x14e8ef4
cmp dword [ebp + 0x1c], 0x10
lea ecx, [ebp - 0x10]
push edi
lea eax, [ebp + 8]
mov byte [ebp - 0xd], 0
cmovae eax, dword [ebp + 8]
push ecx
push eax
call fcn.015c03d0
mov edi, eax
add esp, 8
test edi, edi
je 0x14e8f8d
push 2
push 0
push edi
call fcn.015c41a6
push edi
call fcn.015bff5b
push 0
push 0
push edi
mov dword [ebp - 0x14], eax
call fcn.015c41a6
mov ecx, dword [esi + 0x10]
add esp, 0x1c
mov eax, dword [ebp - 0x14]
cmp eax, ecx
ja 0x14e8f61
cmp dword [esi + 0x14], 0x10
mov ecx, esi
jb 0x14e8f58
mov ecx, dword [esi]
mov dword [esi + 0x10], eax
mov byte [ecx + eax], 0
jmp 0x14e8f70
sub eax, ecx
mov ecx, esi
push 0
push eax
call fcn.01545c10
mov eax, dword [ebp - 0x14]
cmp dword [esi + 0x14], 0x10
mov ecx, esi
jb 0x14e8f7a
mov ecx, dword [esi]
push edi
push eax
push 1
push ecx
call fcn.015c8c4f
push edi
call fcn.015c3c58
add esp, 0x14
mov ecx, dword [ebp + 0x1c]
pop edi
cmp ecx, 0x10
jb 0x14e8fbe
mov edx, dword [ebp + 8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x14e8fb4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x14e8fcf
push ecx
push edx
call fcn.015ba583
add esp, 8
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop esi
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret
call fcn.015bf820
int3

Function at 0x14e9240
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ecx
push edi
xor edi, edi
mov dword [ebp - 4], 0x100f6e1
xor ecx, ecx
lea eax, [ecx - 0x6d]
xor byte [ebp + ecx - 4], al
inc ecx
cmp ecx, 2
jb 0x14e9250
cmp dword [ebp + 0x1c], 0x10
lea ecx, [ebp - 4]
push esi
lea eax, [ebp + 8]
mov byte [ebp - 1], 0
cmovae eax, dword [ebp + 8]
push ecx
push eax
call fcn.015c03d0
mov esi, eax
add esp, 8
test esi, esi
je 0x14e929b
push 2
push 0
push esi
call fcn.015c41a6
push esi
call fcn.015bff5b
push esi
mov edi, eax
call fcn.015c3c58
add esp, 0x14
mov ecx, dword [ebp + 0x1c]
pop esi
cmp ecx, 0x10
jb 0x14e92cc
mov edx, dword [ebp + 8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x14e92c2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x14e92d3
push ecx
push edx
call fcn.015ba583
add esp, 8
mov eax, edi
pop edi
mov esp, ebp
pop ebp
ret
call fcn.015bf820
int3
Function at 0x14e9320
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb8
mov dword [ebp - 0x1a], 0xd1f9e0c1
xor ecx, ecx
mov dword [ebp - 0x16], 0xffcfecf2
mov dword [ebp - 0x12], 0xf1f4efe9
mov word [ebp - 0xe], 0xf1
mov byte [ebp - 0xc], 1
nop word [eax + eax]
lea eax, [ecx - 0x6d]
xor byte [ebp + ecx - 0x1a], al
inc ecx
cmp ecx, 0xd
jb 0x14e9350
mov byte [ebp - 0xc], 0
xor ecx, ecx
mov dword [ebp - 0xb], 0xfaf1e0dd
mov dword [ebp - 7], 0xf6fdb6fb
mov word [ebp - 3], 0xf7
mov byte [ebp - 1], 1
nop dword [eax + eax]
lea eax, [ecx - 0x6d]
xor byte [ebp + ecx - 0xb], al
inc ecx
cmp ecx, 9
jb 0x14e9380
lea eax, [ebp - 0xb]
mov byte [ebp - 1], 0
push eax
call fcn.0165bce2
enter 0x4d8d, 0xffffffffffffffe6
push ecx
push eax
call dword [0x139c0d8]
test eax, eax
je 0x14e93b5
lea ecx, [ebp - 0xb8]
push ecx
call eax
jmp 0x14e93c2
lea eax, [ebp - 0xb8]
push eax
call dword [0x139c0ac]
mov eax, dword [ebp - 0xb4]
cmp eax, 0xb
je 0x14e93d2
cmp eax, 0xa
jne 0x14e93e1
cmp dword [ebp - 0xb0], 0
je 0x14e93fb
xor al, al
mov esp, ebp
pop ebp
ret
cmp eax, 6
jne 0x14e93db
mov eax, dword [ebp - 0xb0]
cmp eax, 3
je 0x14e93fb
cmp eax, 2
sete al
mov esp, ebp
pop ebp
ret
mov al, 1
mov esp, ebp
pop ebp
ret

Function at 0x14e94b0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ecx
mov dword [ebp - 4], 0x100f6e1
xor ecx, ecx
nop dword [eax]
lea eax, [ecx - 0x6d]
xor byte [ebp + ecx - 4], al
inc ecx
cmp ecx, 2
jb 0x14e94c0
cmp dword [ebp + 0x1c], 0x10
lea ecx, [ebp - 4]
push ebx
lea eax, [ebp + 8]
mov byte [ebp - 1], 0
cmovae eax, dword [ebp + 8]
push ecx
push eax
call fcn.015c03d0
add esp, 8
test eax, eax
je 0x14e94fb
push eax
call fcn.015c3c58
add esp, 4
mov bl, 1
jmp 0x14e94fd
xor bl, bl
mov ecx, dword [ebp + 0x1c]
cmp ecx, 0x10
jb 0x14e952d
mov edx, dword [ebp + 8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x14e9523
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x14e9534
push ecx
push edx
call fcn.015ba583
add esp, 8
mov al, bl
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.015bf820
int3
Function at 0x14eafb0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0xc], 0
je 0x14eafd2
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0xb
jb 0x14eafc0
mov byte [esi + 0xc], 0
mov eax, esi
pop esi
ret

Function at 0x14ec3c0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x11], 0
je 0x14ec3e2
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x10
jb 0x14ec3d0
mov byte [esi + 0x11], 0
mov eax, esi
pop esi
ret

Function at 0x14ec3f0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x10], 0
je 0x14ec412
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0xf
jb 0x14ec400
mov byte [esi + 0x10], 0
mov eax, esi
pop esi
ret

Function at 0x14ec420
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 9], 0
je 0x14ec442
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 8
jb 0x14ec430
mov byte [esi + 9], 0
mov eax, esi
pop esi
ret

Function at 0x14ec450
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0xb], 0
je 0x14ec472
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0xa
jb 0x14ec460
mov byte [esi + 0xb], 0
mov eax, esi
pop esi
ret

Function at 0x14ec480
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0xd], 0
je 0x14ec4a2
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0xc
jb 0x14ec490
mov byte [esi + 0xd], 0
mov eax, esi
pop esi
ret

Function at 0x14ec4b0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x13], 0
je 0x14ec4d2
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x12
jb 0x14ec4c0
mov byte [esi + 0x13], 0
mov eax, esi
pop esi
ret

Function at 0x14ec4e0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x14], 0
je 0x14ec502
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x13
jb 0x14ec4f0
mov byte [esi + 0x14], 0
mov eax, esi
pop esi
ret

Function at 0x14ec510
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x1c], 0
je 0x14ec532
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x1b
jb 0x14ec520
mov byte [esi + 0x1c], 0
mov eax, esi
pop esi
ret

Function at 0x14ec540
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x18], 0
je 0x14ec562
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x17
jb 0x14ec550
mov byte [esi + 0x18], 0
mov eax, esi
pop esi
ret
Function at 0x14ec570
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x15], 0
je 0x14ec592
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x14
jb 0x14ec580
mov byte [esi + 0x15], 0
mov eax, esi
pop esi
ret

Function at 0x14ec5a0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x22], 0
je 0x14ec5c2
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x21
jb 0x14ec5b0
mov byte [esi + 0x22], 0
mov eax, esi
pop esi
ret

Function at 0x14ec5d0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0xf], 0
je 0x14ec5f2
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0xe
jb 0x14ec5e0
mov byte [esi + 0xf], 0
mov eax, esi
pop esi
ret
Function at 0x14edb00
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 7], 0
je 0x14edb22
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 6
jb 0x14edb10
mov byte [esi + 7], 0
mov eax, esi
pop esi
ret
Function at 0x14f1610
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x1d], 0
je 0x14f1632
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x1c
jb 0x14f1620
mov byte [esi + 0x1d], 0
mov eax, esi
pop esi
ret
Function at 0x14f2250
Capabilities:
Check for peb beingdebugged flag

Disassembly:
push ebp
mov ebp, esp
push ecx
mov eax, dword fs:[0x30]
push ebx
mov al, byte [eax + 2]
test al, al
setne bl
push edi
call fcn.01639fec
test eax, eax
movzx ecx, bl
mov edx, 1
cmovne ecx, edx
pushfd
pop eax
mov dword [ebp - 4], eax
test dword [ebp - 4], 0x100
movzx eax, cl
cmovne eax, edx
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x14f23d0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
push edi
mov eax, 1
lea edi, [ebp - 0x10]
xor ecx, ecx
xorps xmm0, xmm0
push ebx
cpuid
mov esi, ebx
movups xmmword [ebp - 0x10], xmm0
pop ebx
mov dword [edi], eax
mov dword [edi + 4], esi
mov dword [edi + 8], ecx
mov dword [edi + 0xc], edx
mov ebx, dword [ebp - 8]
shr ebx, 0x1f
and bl, 1
mov dword [ebp - 0xe], 0xf8e7f1f8
mov dword [ebp - 0xa], 0xa8aaf4f2
xor eax, eax
mov dword [ebp - 6], 0xf2f1f8b5
mov word [ebp - 2], 0x100
lea ecx, [eax - 0x6d]
xor byte [ebp + eax - 0xe], cl
inc eax
cmp eax, 0xc
jb 0x14f2421
lea eax, [ebp - 0xe]
mov byte [ebp - 1], 0
push eax
call fcn.01658637
and dword [ebp - 0x3449f040], eax
mov eax, 1
pop edi
cmove ecx, eax
pop esi
mov al, cl
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x14f2690
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x29], 0
je 0x14f26b2
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x28
jb 0x14f26a0
mov byte [esi + 0x29], 0
mov eax, esi
pop esi
ret

Function at 0x14f3670
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x2b], 0
je 0x14f3692
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x2a
jb 0x14f3680
mov byte [esi + 0x2b], 0
mov eax, esi
pop esi
ret

Function at 0x14f36a0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x1a], 0
je 0x14f36c2
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x19
jb 0x14f36b0
mov byte [esi + 0x1a], 0
mov eax, esi
pop esi
ret
Function at 0x14f3af0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x234
push ebx
push esi
push edi
push 0x200
lea eax, [ebp - 0x230]
push 0
push eax
call fcn.015bc560
add esp, 0xc
lea eax, [ebp - 0x230]
push 0x200
push eax
push 0
push eax
call fcn.0170555c
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x14], 0
movups xmmword [ebp - 0x28], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x14f3b44
sub ecx, edx
lea eax, [ebp - 0x230]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.014dfe30
mov dword [ebp - 0xd], 0xf7f2f1df
xor ecx, ecx
mov dword [ebp - 9], 0xf6fcd0fb
mov dword [ebp - 5], 0xeff9eb
mov byte [ebp - 1], 1
lea eax, [ecx - 0x6d]
xor byte [ebp + ecx - 0xd], al
inc ecx
cmp ecx, 0xb
jb 0x14f3b78
lea edx, [ebp - 0xd]
mov byte [ebp - 1], 0
lea ecx, [edx + 1]
nop
mov al, byte [edx]
inc edx
test al, al
jne 0x14f3b90
mov ebx, dword [ebp - 0x14]
lea eax, [ebp - 0xd]
mov edi, dword [ebp - 0x28]
sub edx, ecx
mov esi, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
push edx
cmp ebx, 0x10
mov edx, esi
push eax
cmovae ecx, edi
push 0
call fcn.015489c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x14f3c8d
mov dword [ebp - 0xe], 0xe4f0e4dc
xor ecx, ecx
mov dword [ebp - 0xa], 0xf4f6dbf6
mov dword [ebp - 6], 0xeafef9f5
mov word [ebp - 2], 0x100
lea eax, [ecx - 0x6d]
xor byte [ebp + ecx - 0xe], al
inc ecx
cmp ecx, 0xc
jb 0x14f3be2
lea edx, [ebp - 0xe]
mov byte [ebp - 1], 0
lea ecx, [edx + 1]
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x14f3c00
sub edx, ecx
lea eax, [ebp - 0xe]
push edx
cmp ebx, 0x10
lea ecx, [ebp - 0x28]
push eax
cmovae ecx, edi
mov edx, esi
push 0
call fcn.015489c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x14f3c8d
mov dword [ebp - 0xb], 0xe6c0d1da
xor ecx, ecx
mov dword [ebp - 7], 0xffedf9f3
mov word [ebp - 3], 0xe9
mov byte [ebp - 1], 1
lea eax, [ecx - 0x6d]
xor byte [ebp + ecx - 0xb], al
inc ecx
cmp ecx, 9
jb 0x14f3c42
lea esi, [ebp - 0xb]
mov byte [ebp - 1], 0
lea ecx, [esi + 1]
nop dword [eax]
mov al, byte [esi]
inc esi
test al, al
jne 0x14f3c60
mov edx, dword [ebp - 0x18]
lea eax, [ebp - 0xb]
sub esi, ecx
cmp ebx, 0x10
push esi
push eax
lea ecx, [ebp - 0x28]
cmovae ecx, edi
push 0
call fcn.015489c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x14f3c8d
xor bl, bl
jmp 0x14f3c8f
mov bl, 1
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x14f3cbc
inc ecx
mov eax, edi
cmp ecx, 0x1000
jb 0x14f3cb2
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x14f3cc5
push ecx
push edi
call fcn.015ba583
add esp, 8
pop edi
pop esi
mov al, bl
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.015bf820
int3

Function at 0x14f57e0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x2e], 0
je 0x14f5802
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x2d
jb 0x14f57f0
mov byte [esi + 0x2e], 0
mov eax, esi
pop esi
ret
Function at 0x14f5810
Capabilities:
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x13942e7
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0x558
push esi
mov dword [ebp - 0x14], 0
xor ecx, ecx
push edi
mov dword [ebp - 0x1c], 0xf3f2f5c1
mov dword [ebp - 0x18], 0x100c8da
nop dword [eax + eax]
mov al, cl
sub al, 0x6d
xor byte [ebp + ecx - 0x1c], al
inc ecx
cmp ecx, 6
jb 0x14f5860
lea ecx, [ebp - 0x1c]
mov byte [ebp - 0x15], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x14f5878
mov esi, 0x7fffffff
sub ecx, edx
mov edx, dword [0x13c3b54]
mov eax, esi
sub eax, edx
cmp eax, ecx
jb 0x14f7570
cmp dword [0x13c3b58], 0x10
mov eax, 0x13c3b44
push edx
cmovae eax, dword [0x13c3b44]
push eax
push ecx
lea eax, [ebp - 0x1c]
push eax
push ecx
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x1cc]
call fcn.0154ad90
mov dword [ebp - 4], 0
xor ecx, ecx
mov dword [ebp - 0x1b], 0xc0d4c0d4
mov word [ebp - 0x17], 0xde
mov byte [ebp - 0x15], 1
nop dword [eax + eax]
mov al, cl
sub al, 0x6d
xor byte [ebp + ecx - 0x1b], al
inc ecx
cmp ecx, 5
jb 0x14f58e0
lea ecx, [ebp - 0x1b]
mov byte [ebp - 0x15], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x14f58f8
sub ecx, edx
mov eax, esi
mov edx, dword [0x13c3b54]
sub eax, edx
cmp eax, ecx
jb 0x14f7575
cmp dword [0x13c3b58], 0x10
mov eax, 0x13c3b44
push edx
cmovae eax, dword [0x13c3b44]
push eax
push ecx
lea eax, [ebp - 0x1b]
push eax
push ecx
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x25c]
call fcn.0154ad90
mov byte [ebp - 4], 1
xor ecx, ecx
mov dword [ebp - 0x1b], 0xc6d2c4de
mov word [ebp - 0x17], 0xdf
mov byte [ebp - 0x15], 1
mov al, cl
sub al, 0x6d
xor byte [ebp + ecx - 0x1b], al
inc ecx
cmp ecx, 5
jb 0x14f5953
lea ecx, [ebp - 0x1b]
mov byte [ebp - 0x15], 0
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x14f5970
sub ecx, edx
mov eax, esi
mov edx, dword [0x13c3b54]
sub eax, edx
cmp eax, ecx
jb 0x14f757a
cmp dword [0x13c3b58], 0x10
mov eax, 0x13c3b44
push edx
cmovae eax, dword [0x13c3b44]
push eax
push ecx
lea eax, [ebp - 0x1b]
push eax
push ecx
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x184]
call fcn.0154ad90
push 0x200
lea eax, [ebp - 0x568]
mov byte [ebp - 4], 2
push 0
push eax
call fcn.015bc560
add esp, 0xc
lea eax, [ebp - 0x568]
push 0x200
push eax
push 0
call fcn.0167293b
mov ebx, 0xc7c0570f
test dword [esi + edi*8 - 1], ebx
inc dword [eax]
add byte [eax], al
add byte [ebp - 0x56773], cl
inc edi
test dword [eax - 2], esp
invalid
call fcn.014df640
call fcn.014df640
call fcn.014df640
push eax
call fcn.015b952b
call fcn.014df640
call fcn.015bf820
call fcn.015bf820
call fcn.015bf820
push eax
call fcn.015b952b
call fcn.015bf820
call fcn.014df640
call fcn.015bf820
call fcn.015bf820
call fcn.015bf820
call fcn.015bf820
call fcn.015bf820
call fcn.014df640
call fcn.015bf820
call fcn.015bf820
call fcn.015bf820
call fcn.015bf820
int3
Function at 0x14fb070
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x17], 0
je 0x14fb092
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x16
jb 0x14fb080
mov byte [esi + 0x17], 0
mov eax, esi
pop esi
ret

Function at 0x14fb0a0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x23], 0
je 0x14fb0c2
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x22
jb 0x14fb0b0
mov byte [esi + 0x23], 0
mov eax, esi
pop esi
ret
Function at 0x1501c80
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x21], 0
je 0x1501ca2
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x20
jb 0x1501c90
mov byte [esi + 0x21], 0
mov eax, esi
pop esi
ret

Function at 0x1505a90
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x86], 0
je 0x1505ab7
xor eax, eax
nop
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x85
jb 0x1505aa0
mov byte [esi + 0x86], 0
mov eax, esi
pop esi
ret

Function at 0x1505ac0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x57], 0
je 0x1505ae2
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x56
jb 0x1505ad0
mov byte [esi + 0x57], 0
mov eax, esi
pop esi
ret

Function at 0x1507cb0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x66], 0
je 0x1507cd2
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x65
jb 0x1507cc0
mov byte [esi + 0x66], 0
mov eax, esi
pop esi
ret
Function at 0x1513ae0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x4b], 0
je 0x1513b02
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x4a
jb 0x1513af0
mov byte [esi + 0x4b], 0
mov eax, esi
pop esi
ret

Function at 0x15161d0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x2a], 0
je 0x15161f2
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x29
jb 0x15161e0
mov byte [esi + 0x2a], 0
mov eax, esi
pop esi
ret