joyce8/EMBER2024-capa huggingface dataset:
Function at 0xe11288
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push edi
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov edi, eax
xor edx, edx
mov ecx, edi
mov ebx, dword [edi + 0x3c]
add ebx, edi
mov dword [ebp - 4], ebx
movzx esi, word [ebx + 0x14]
add esi, 0x18
add esi, ebx
sub eax, dword [0xe1101c]
mov dword [ebp - 0x10], eax
sbb edx, edx
mov dword [ebp - 0x14], esi
neg eax
mov dword [ebp - 0xc], edx
adc edx, 0
neg edx
push edx
mov edx, dword [ebx + 0xa0]
push eax
mov eax, dword [esi + 0xc]
add eax, dword [0xe11028]
push eax
push dword [ebx + 0xa4]
call fcn.00e110ab
push esi
push dword [0xe11028]
mov ecx, edi
call fcn.00e11235
mov eax, dword [0xe11020]
add esp, 0x18
add esi, 0x28
cmp eax, 1
jbe 0xe1131b
push esi
push dword [0xe1102c]
mov ecx, edi
call fcn.00e11235
mov eax, dword [0xe11020]
add esi, 0x28
pop ecx
pop ecx
cmp eax, 2
jbe 0xe11338
push esi
push dword [0xe11030]
mov ecx, edi
call fcn.00e11235
mov eax, dword [0xe11020]
add esi, 0x28
pop ecx
pop ecx
cmp eax, 3
jbe 0xe11355
push esi
push dword [0xe11034]
mov ecx, edi
call fcn.00e11235
mov eax, dword [0xe11020]
add esi, 0x28
pop ecx
pop ecx
cmp eax, 4
jbe 0xe11372
push esi
push dword [0xe11038]
mov ecx, edi
call fcn.00e11235
mov eax, dword [0xe11020]
add esi, 0x28
pop ecx
pop ecx
cmp eax, 5
jbe 0xe1138f
push esi
push dword [0xe1103c]
mov ecx, edi
call fcn.00e11235
mov eax, dword [0xe11020]
add esi, 0x28
pop ecx
pop ecx
cmp eax, 6
jbe 0xe113ac
push esi
push dword [0xe11040]
mov ecx, edi
call fcn.00e11235
mov eax, dword [0xe11020]
add esi, 0x28
pop ecx
pop ecx
cmp eax, 7
jbe 0xe113c1
push esi
push dword [0xe11044]
mov ecx, edi
call fcn.00e11235
pop ecx
pop ecx
cmp dword [0xe11014], 0
je 0xe1140a
add ebx, 0x88
cmp dword [ebx], 0
je 0xe11407
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 4
push 8
push ebx
call esi
mov ecx, dword [ebp - 4]
mov eax, dword [0xe11014]
mov dword [ebx], eax
mov eax, dword [0xe11018]
mov dword [ecx + 0x8c], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 8
push ebx
call esi
mov ebx, dword [ebp - 4]
mov eax, dword [ebp - 0x14]
mov ecx, edi
push dword [ebp - 0xc]
mov edx, dword [ebx + 0xa0]
push dword [ebp - 0x10]
mov eax, dword [eax + 0xc]
add eax, dword [0xe11028]
push eax
push dword [ebx + 0xa4]
call fcn.00e110ab
mov edx, dword [0xe11004]
add esp, 0x10
push dword [0xe11010]
push dword [0xe1100c]
push ecx
mov ecx, edi
call fcn.00e1116f
mov eax, dword [section..text]
add esp, 0xc
add eax, edi
call eax
push eax
call dword [sym.imp.KERNEL32.dll_ExitProcess]
Function at 0xe12577
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed84f0], 1
mov ecx, 0xb1be
jne 0xe125fe
or dword [0xed84f0], 1
lea eax, [ecx - 0x23]
mov edx, eax
add eax, 0x47
mov word [0xed1a98], ax
mov word [0xed1a8c], dx
add edx, 0x4f
lea eax, [ecx + 0x1c]
mov word [0xed1a9a], ax
add eax, 0xfffffff1
mov word [0xed1a9c], ax
mov word [0xed1a8e], dx
lea edx, [ecx + 0x3d]
lea eax, [ecx + 0x15]
mov word [0xed1a9e], ax
mov word [0xed1a90], dx
add edx, 0xfffffff8
add eax, 0xfffffffb
mov word [0xed1aa0], ax
lea eax, [ecx + 0x23]
mov word [0xed1aa2], ax
mov eax, ecx
mov word [0xed1a92], dx
mov dword [0xed1a94], 0xb19bb1ee
mov word [0xed1aa4], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0xed1a8c]
add eax, 2
mov word [eax + 0xed2136], dx
cmp eax, 0x1a
jb 0xe12600
mov eax, 0xed2138
ret

Function at 0xe1261e
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed84e8], 1
jne 0xe1264c
or dword [0xed84e8], 1
mov dword [0xed1ab4], 0xdad1d382
mov dword [0xed1ab8], 0x81dbd2cb
mov dword [0xed1abc], 0xbe808181
xor eax, eax
mov cl, byte [eax + 0xed1ab4]
xor cl, 0xbe
mov byte [eax + 0xed2160], cl
inc eax
cmp eax, 0xc
jb 0xe1264e
mov eax, 0xed2160
ret

Function at 0xe12669
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed84e4], 1
mov edx, 0xb1be
jne 0xe12729
push esi
lea ecx, [edx - 0x22]
mov eax, ecx
mov word [0xed1ac0], ax
add eax, 2
or dword [0xed84e4], 1
mov word [0xed1ac2], ax
lea eax, [edx - 0x2b]
mov esi, eax
mov word [0xed1ac4], si
mov word [0xed1ac6], ax
add eax, 0x4a
mov word [0xed1ac8], ax
lea eax, [edx + 0xe]
mov esi, eax
mov word [0xed1aca], si
add esi, 0x13
mov word [0xed1acc], si
lea esi, [edx + 0xf]
mov word [0xed1ace], si
add esi, 9
mov word [0xed1ad0], si
lea esi, [edx + 0x23]
mov word [0xed1ad2], si
mov esi, eax
mov word [0xed1ad4], si
add esi, 0xf
add eax, 0xfffffffe
mov word [0xed1ad6], si
lea esi, [edx + 0x10]
mov word [0xed1ade], ax
mov eax, edx
mov word [0xed1ad8], si
mov dword [0xed1ada], 0xb1ccb1d1
mov dword [0xed1ae0], 0xb19cb183
mov word [0xed1ae4], ax
pop esi
xor eax, eax
mov ecx, edx
xor cx, word [eax + 0xed1ac0]
add eax, 2
mov word [eax + 0xed216a], cx
cmp eax, 0x26
jb 0xe1272b
mov eax, 0xed216c
ret
Function at 0xe1280c
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x7c
test byte [0xed84e0], 1
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
mov ecx, 0xb1be
jne 0xe1284a
or dword [0xed84e0], 1
lea eax, [ecx + 0xb]
mov word [0xed1ae8], ax
add eax, 0x13
mov word [0xed1aea], ax
mov eax, ecx
mov word [0xed1aec], ax
xor esi, esi
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0xed1ae8]
add eax, 2
mov word [eax + 0xed2192], dx
cmp eax, 6
jb 0xe1284e
lea eax, [ebx + 0xc]
cmp dword [eax + 0x14], 8
jb 0xe12871
mov eax, dword [eax]
push 0xed2194
push eax
lea eax, [esp + 0x18]
push eax
call fcn.00e76977
add esp, 0xc
test eax, eax
jne 0xe1293c
push dword [esp + 0x10]
push dword [ebp + 0xc]
push ebx
call fcn.00e135a1
push dword [esp + 0x10]
call fcn.00e12945
push eax
call fcn.00e76ed1
push dword [esp + 0x18]
call fcn.00e7745c
add esp, 0xc
push 0x44
pop edi
push edi
lea eax, [esp + 0x44]
push esi
push eax
call fcn.00e7b980
add esp, 0xc
mov dword [esp + 0x40], edi
xor eax, eax
lea ecx, [esp + 0x14]
push ecx
lea edi, [esp + 0x18]
stosd dword es:[edi], eax
lea ecx, [esp + 0x44]
push ecx
push esi
push esi
stosd dword es:[edi], eax
push esi
push esi
stosd dword es:[edi], eax
push esi
stosd dword es:[edi], eax
mov eax, dword [ebx + 0x28]
push esi
push eax
push esi
call dword [0xea608c]
test eax, eax
jne 0xe1292a
call dword [0xea60a8]
push eax
lea eax, [esp + 0x28]
push eax
call fcn.00e3dcfa
cmp dword [eax + 0x14], 0x10
pop ecx
pop ecx
jb 0xe1290e
mov eax, dword [eax]
push eax
call fcn.00e12985
push eax
call fcn.00e771a0
pop ecx
pop ecx
push esi
push 1
lea ecx, [esp + 0x2c]
call fcn.00e14cae
jmp 0xe1293c
push dword [esp + 0x18]
mov esi, dword [0xea60bc]
call esi
push dword [esp + 0x14]
call esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8

Function at 0xe12945
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed84dc], 1
jne 0xe12968
or dword [0xed84dc], 1
mov dword [0xed1af0], 0xf0fbb4b3
mov word [0xed1af4], 0xbefa
xor eax, eax
mov cl, byte [eax + 0xed1af0]
xor cl, 0xbe
mov byte [eax + 0xed219c], cl
inc eax
cmp eax, 6
jb 0xe1296a
mov eax, 0xed219c
ret

Function at 0xe12985
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed84d8], 1
jne 0xe12a0a
or dword [0xed84d8], 1
mov dword [0xed1af8], 0xd2d7dff8
mov dword [0xed1afc], 0xca9edadb
mov dword [0xed1b00], 0xccdd9ed1
mov dword [0xed1b04], 0xdbcadfdb
mov dword [0xed1b08], 0xdfccdd9e
mov dword [0xed1b0c], 0xcc9ed6cd
mov dword [0xed1b10], 0xccd1cedb
mov dword [0xed1b14], 0x9eccdbca
mov dword [0xed1b18], 0xddd1ccce
mov dword [0xed1b1c], 0x84cdcddb
mov dword [0xed1b20], 0xb4cd9b9e
mov byte [0xed1b24], 0xbe
xor eax, eax
mov cl, byte [eax + 0xed1af8]
xor cl, 0xbe
mov byte [eax + 0xed21a4], cl
inc eax
cmp eax, 0x2d
jb 0xe12a0c
mov eax, 0xed21a4
ret
Function at 0xe13ad6
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed8478], 1
jne 0xe13b0b
or dword [0xed8478], 1
mov dword [0xed1da4], 0xcbdad1f3
mov dword [0xed1da8], 0x9e84dbd2
mov dword [0xed1dac], 0xb4b3cd9b
mov byte [0xed1db0], 0xbe
xor eax, eax
mov cl, byte [eax + 0xed1da4]
xor cl, 0xbe
mov byte [eax + 0xed2450], cl
inc eax
cmp eax, 0xd
jb 0xe13b0d
mov eax, 0xed2450
ret

Function at 0xe13b28
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed8474], 1
jne 0xe13b67
or dword [0xed8474], 1
mov dword [0xed1db4], 0xdbccd6ea
mov dword [0xed1db8], 0x9e84dadf
mov dword [0xed1dbc], 0xc69bc68e
mov dword [0xed1dc0], 0xb4b3b4b3
mov byte [0xed1dc4], 0xbe
xor eax, eax
mov cl, byte [eax + 0xed1db4]
xor cl, 0xbe
mov byte [eax + 0xed2460], cl
inc eax
cmp eax, 0x11
jb 0xe13b69
mov eax, 0xed2460
ret

Function at 0xe13b84
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed8470], 1
jne 0xe13bc2
or dword [0xed8470], 1
mov dword [0xed1dc8], 0xdbddc6fb
mov dword [0xed1dcc], 0xd1d7cace
mov dword [0xed1dd0], 0xda9b9ed0
mov word [0xed1dd4], 0xb4b3
mov byte [0xed1dd6], 0xbe
xor eax, eax
mov cl, byte [eax + 0xed1dc8]
xor cl, 0xbe
mov byte [eax + 0xed2474], cl
inc eax
cmp eax, 0xf
jb 0xe13bc4
mov eax, 0xed2474
ret

Function at 0xe13bdf
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed846c], 1
jne 0xe13c1d
or dword [0xed846c], 1
mov dword [0xed1dd8], 0xdfddd1f2
mov dword [0xed1ddc], 0xd0d1d7ca
mov dword [0xed1de0], 0xce9b9e84
mov word [0xed1de4], 0xb4b3
mov byte [0xed1de6], 0xbe
xor eax, eax
mov cl, byte [eax + 0xed1dd8]
xor cl, 0xbe
mov byte [eax + 0xed2484], cl
inc eax
cmp eax, 0xf
jb 0xe13c1f
mov eax, 0xed2484
ret

Function at 0xe13c3a
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed8468], 1
jne 0xe13c7b
or dword [0xed8468], 1
mov dword [0xed1de8], 0xdbcec7ea
mov dword [0xed1dec], 0xcd9b9e84
mov dword [0xed1df0], 0xc68e969e
mov dword [0xed1df4], 0xb397c69b
mov word [0xed1df8], 0xbeb4
xor eax, eax
mov cl, byte [eax + 0xed1de8]
xor cl, 0xbe
mov byte [eax + 0xed2494], cl
inc eax
cmp eax, 0x12
jb 0xe13c7d
mov eax, 0xed2494
ret

Function at 0xe13c98
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed8464], 1
jne 0xe13d20
or dword [0xed8464], 1
mov dword [0xed1dfc], 0xdfcadbfa
mov dword [0xed1e00], 0x84cdd2d7
mov dword [0xed1e04], 0xd7ccea9e
mov dword [0xed1e08], 0xca9edadb
mov dword [0xed1e0c], 0xdbcc9ed1
mov dword [0xed1e10], 0xd89edadf
mov dword [0xed1e14], 0x9ed3d1cc
mov dword [0xed1e18], 0xd1d3dbd3
mov dword [0xed1e1c], 0xdf9ec7cc
mov dword [0xed1e20], 0xdbccdada
mov dword [0xed1e24], 0x9b9ecdcd
mov dword [0xed1e28], 0xbeb4b3ce
xor eax, eax
mov cl, byte [eax + 0xed1dfc]
xor cl, 0xbe
mov byte [eax + 0xed24a8], cl
inc eax
cmp eax, 0x30
jb 0xe13d22
mov eax, 0xed24a8
ret
Function at 0xe13d3d
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed8460], 1
jne 0xe13dcf
or dword [0xed8460], 1
mov dword [0xed1e2c], 0xdfcadbfa
mov dword [0xed1e30], 0x84cdd2d7
mov dword [0xed1e34], 0xd7ccea9e
mov dword [0xed1e38], 0xca9edadb
mov dword [0xed1e3c], 0xccc99ed1
mov dword [0xed1e40], 0x9edbcad7
mov dword [0xed1e44], 0xd39ed1ca
mov dword [0xed1e48], 0xccd1d3db
mov dword [0xed1e4c], 0xdadf9ec7
mov dword [0xed1e50], 0xcddbccda
mov dword [0xed1e54], 0xce9b9ecd
mov word [0xed1e58], 0xb4b3
mov byte [0xed1e5a], 0xbe
xor eax, eax
mov cl, byte [eax + 0xed1e2c]
xor cl, 0xbe
mov byte [eax + 0xed24d8], cl
inc eax
cmp eax, 0x2f
jb 0xe13dd1
mov eax, 0xed24d8
ret

Function at 0xe13dec
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed845c], 1
jne 0xe13e7f
or dword [0xed845c], 1
mov dword [0xed1e5c], 0xdfcadbfa
mov dword [0xed1e60], 0x84cdd2d7
mov dword [0xed1e64], 0xd7ccea9e
mov dword [0xed1e68], 0xca9edadb
mov dword [0xed1e6c], 0xc6db9ed1
mov dword [0xed1e70], 0xcacbdddb
mov dword [0xed1e74], 0xdbd39edb
mov dword [0xed1e78], 0xc7ccd1d3
mov dword [0xed1e7c], 0x9ecadf9e
mov dword [0xed1e80], 0xccdadadf
mov dword [0xed1e84], 0x9ecdcddb
mov dword [0xed1e88], 0xb4b3ce9b
mov byte [0xed1e8c], 0xbe
xor eax, eax
mov cl, byte [eax + 0xed1e5c]
xor cl, 0xbe
mov byte [eax + 0xed2508], cl
inc eax
cmp eax, 0x31
jb 0xe13e81
mov eax, 0xed2508
ret

Function at 0xe13e9c
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed8458], 1
jne 0xe13ed3
or dword [0xed8458], 1
mov dword [0xed1e90], 0xd9dfd2f8
mov dword [0xed1e94], 0x8e9e84cd
mov dword [0xed1e98], 0xb3c69bc6
mov word [0xed1e9c], 0xbeb4
xor eax, eax
mov cl, byte [eax + 0xed1e90]
xor cl, 0xbe
mov byte [eax + 0xed253c], cl
inc eax
cmp eax, 0xe
jb 0xe13ed5
mov eax, 0xed253c
ret

Function at 0xe13ef0
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed8454], 1
jne 0xe13f27
or dword [0xed8454], 1
mov dword [0xed1ea0], 0xdfccdfee
mov dword [0xed1ea4], 0xdbcadbd3
mov dword [0xed1ea8], 0xb384cdcc
mov word [0xed1eac], 0xbeb4
xor eax, eax
mov cl, byte [eax + 0xed1ea0]
xor cl, 0xbe
mov byte [eax + 0xed254c], cl
inc eax
cmp eax, 0xe
jb 0xe13f29
mov eax, 0xed254c
ret

Function at 0xe13f44
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed8450], 1
jne 0xe13f8d
or dword [0xed8450], 1
mov dword [0xed1eb0], 0xccdfeeb7
mov dword [0xed1eb4], 0xcadbd3df
mov dword [0xed1eb8], 0x9be5ccdb
mov dword [0xed1ebc], 0x9e84e3da
mov dword [0xed1ec0], 0xb4b3ce9b
mov byte [0xed1ec4], 0xbe
xor eax, eax
mov cl, byte [eax + 0xed1eb0]
xor cl, 0xbe
mov byte [eax + 0xed255c], cl
inc eax
cmp eax, 0x15
jb 0xe13f8f
mov eax, 0xed255c
ret

Function at 0xe13faa
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed844c], 1
jne 0xe13fe2
or dword [0xed844c], 1
mov dword [0xed1ec8], 0x9ef6fbed
mov dword [0xed1ecc], 0xd2dfd0ff
mov dword [0xed1ed0], 0xcdd7cdc7
mov dword [0xed1ed4], 0xbeb4b384
xor eax, eax
mov cl, byte [eax + 0xed1ec8]
xor cl, 0xbe
mov byte [eax + 0xed2574], cl
inc eax
cmp eax, 0x10
jb 0xe13fe4
mov eax, 0xed2574
ret
Function at 0xe13fff
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed8448], 1
jne 0xe14047
or dword [0xed8448], 1
mov dword [0xed1ed8], 0xd4dcf1b7
mov dword [0xed1edc], 0x9ecadddb
mov dword [0xed1ee0], 0xdbcec7ca
mov dword [0xed1ee4], 0xcd9b9e84
mov word [0xed1ee8], 0xb4b3
mov byte [0xed1eea], 0xbe
xor eax, eax
mov cl, byte [eax + 0xed1ed8]
xor cl, 0xbe
mov byte [eax + 0xed2584], cl
inc eax
cmp eax, 0x13
jb 0xe14049
mov eax, 0xed2584
ret

Function at 0xe14064
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed8444], 1
jne 0xe140cd
or dword [0xed8444], 1
mov dword [0xed1eec], 0xd7dff8b7
mov dword [0xed1ef0], 0x9edadbd2
mov dword [0xed1ef4], 0xd89ed1ca
mov dword [0xed1ef8], 0xd1d2d2d1
mov dword [0xed1efc], 0xd1ce9ec9
mov dword [0xed1f00], 0xdbcad0d7
mov dword [0xed1f04], 0xd6dd9ecc
mov dword [0xed1f08], 0xb3d0d7df
mov word [0xed1f0c], 0xbeb4
xor eax, eax
mov cl, byte [eax + 0xed1eec]
xor cl, 0xbe
mov byte [eax + 0xed2598], cl
inc eax
cmp eax, 0x22
jb 0xe140cf
mov eax, 0xed2598
ret

Function at 0xe140ea
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed8440], 1
jne 0xe1410d
or dword [0xed8440], 1
mov dword [0xed1f10], 0xdacacdfe
mov word [0xed1f14], 0xbefe
xor eax, eax
mov cl, byte [eax + 0xed1f10]
xor cl, 0xbe
mov byte [eax + 0xed25bc], cl
inc eax
cmp eax, 6
jb 0xe1410f
mov eax, 0xed25bc
ret

Function at 0xe1412a
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed843c], 1
jne 0xe14161
or dword [0xed843c], 1
mov dword [0xed1f18], 0xcad0cbcc
mov dword [0xed1f1c], 0xe1dbd3d7
mov dword [0xed1f20], 0xd1ccccdb
mov word [0xed1f24], 0xbecc
xor eax, eax
mov cl, byte [eax + 0xed1f18]
xor cl, 0xbe
mov byte [eax + 0xed25c4], cl
inc eax
cmp eax, 0xe
jb 0xe14163
mov eax, 0xed25c4
ret

Function at 0xe1417e
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed8438], 1
jne 0xe141ac
or dword [0xed8438], 1
mov dword [0xed1f28], 0xd9d0dfcc
mov dword [0xed1f2c], 0xccdbe1db
mov dword [0xed1f30], 0xbeccd1cc
xor eax, eax
mov cl, byte [eax + 0xed1f28]
xor cl, 0xbe
mov byte [eax + 0xed25d4], cl
inc eax
cmp eax, 0xc
jb 0xe141ae
mov eax, 0xed25d4
ret

Function at 0xe141c9
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed8434], 1
jne 0xe14207
or dword [0xed8434], 1
mov dword [0xed1f34], 0xccdbc8d1
mov dword [0xed1f38], 0xc9d1d2d8
mov dword [0xed1f3c], 0xccccdbe1
mov word [0xed1f40], 0xccd1
mov byte [0xed1f42], 0xbe
xor eax, eax
mov cl, byte [eax + 0xed1f34]
xor cl, 0xbe
mov byte [eax + 0xed25e0], cl
inc eax
cmp eax, 0xf
jb 0xe14209
mov eax, 0xed25e0
ret

Function at 0xe14224
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed8430], 1
jne 0xe1425c
or dword [0xed8430], 1
mov dword [0xed1f44], 0xdbdad0cb
mov dword [0xed1f48], 0xd1d2d8cc
mov dword [0xed1f4c], 0xccdbe1c9
mov dword [0xed1f50], 0xbeccd1cc
xor eax, eax
mov cl, byte [eax + 0xed1f44]
xor cl, 0xbe
mov byte [eax + 0xed25f0], cl
inc eax
cmp eax, 0x10
jb 0xe1425e
mov eax, 0xed25f0
ret
Function at 0xe14279
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed842c], 1
jne 0xe142a7
or dword [0xed842c], 1
mov dword [0xed1f54], 0xd7d9d1d2
mov dword [0xed1f58], 0xccdbe1dd
mov dword [0xed1f5c], 0xbeccd1cc
xor eax, eax
mov cl, byte [eax + 0xed1f54]
xor cl, 0xbe
mov byte [eax + 0xed2600], cl
inc eax
cmp eax, 0xc
jb 0xe142a9
mov eax, 0xed2600
ret

Function at 0xe142c4
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed8428], 1
jne 0xe142f9
or dword [0xed8428], 1
mov dword [0xed1f60], 0xdfd3d1da
mov dword [0xed1f64], 0xdbe1d0d7
mov dword [0xed1f68], 0xccd1cccc
mov byte [0xed1f6c], 0xbe
xor eax, eax
mov cl, byte [eax + 0xed1f60]
xor cl, 0xbe
mov byte [eax + 0xed260c], cl
inc eax
cmp eax, 0xd
jb 0xe142fb
mov eax, 0xed260c
ret

Function at 0xe14316
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed8424], 1
jne 0xe14355
or dword [0xed8424], 1
mov dword [0xed1f70], 0xdfc8d0d7
mov dword [0xed1f74], 0xe1dad7d2
mov dword [0xed1f78], 0xcbd9ccdf
mov dword [0xed1f7c], 0xcad0dbd3
mov byte [0xed1f80], 0xbe
xor eax, eax
mov cl, byte [eax + 0xed1f70]
xor cl, 0xbe
mov byte [eax + 0xed261c], cl
inc eax
cmp eax, 0x11
jb 0xe14357
mov eax, 0xed261c
ret

Function at 0xe14372
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed8420], 1
jne 0xe143a7
or dword [0xed8420], 1
mov dword [0xed1f84], 0xd9d0dbd2
mov dword [0xed1f88], 0xdbe1d6ca
mov dword [0xed1f8c], 0xccd1cccc
mov byte [0xed1f90], 0xbe
xor eax, eax
mov cl, byte [eax + 0xed1f84]
xor cl, 0xbe
mov byte [eax + 0xed2630], cl
inc eax
cmp eax, 0xd
jb 0xe143a9
mov eax, 0xed2630
ret

Function at 0xe143c4
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed841c], 1
jne 0xe143f9
or dword [0xed841c], 1
mov dword [0xed1f94], 0xe1cacbd1
mov dword [0xed1f98], 0xcce1d8d1
mov dword [0xed1f9c], 0xdbd9d0df
mov byte [0xed1fa0], 0xbe
xor eax, eax
mov cl, byte [eax + 0xed1f94]
xor cl, 0xbe
mov byte [eax + 0xed2640], cl
inc eax
cmp eax, 0xd
jb 0xe143fb
mov eax, 0xed2640
ret

Function at 0xe14416
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed8418], 1
jne 0xe14443
or dword [0xed8418], 1
mov dword [0xed1fa4], 0xdbddc6db
mov dword [0xed1fa8], 0xd1d7cace
mov word [0xed1fac], 0xbed0
xor eax, eax
mov cl, byte [eax + 0xed1fa4]
xor cl, 0xbe
mov byte [eax + 0xed2650], cl
inc eax
cmp eax, 0xa
jb 0xe14445
mov eax, 0xed2650
ret

Function at 0xe14460
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed8414], 1
jne 0xe144bf
or dword [0xed8414], 1
mov dword [0xed1fb0], 0xdacacdb7
mov dword [0xed1fb4], 0xc6db8484
mov dword [0xed1fb8], 0xcacedbdd
mov dword [0xed1fbc], 0x84d0d1d7
mov dword [0xed1fc0], 0xdfd6c984
mov dword [0xed1fc4], 0x849796ca
mov dword [0xed1fc8], 0xb3cd9b9e
mov word [0xed1fcc], 0xbeb4
xor eax, eax
mov cl, byte [eax + 0xed1fb0]
xor cl, 0xbe
mov byte [eax + 0xed265c], cl
inc eax
cmp eax, 0x1e
jb 0xe144c1
mov eax, 0xed265c
ret
Function at 0xe144dc
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed8410], 1
jne 0xe14550
or dword [0xed8410], 1
mov dword [0xed1fd0], 0xd7dff8b7
mov dword [0xed1fd4], 0x9edadbd2
mov dword [0xed1fd8], 0xd99ed1ca
mov dword [0xed1fdc], 0xcd9ecadb
mov dword [0xed1fe0], 0x8484daca
mov dword [0xed1fe4], 0xdbddc6db
mov dword [0xed1fe8], 0xd1d7cace
mov dword [0xed1fec], 0xc98484d0
mov dword [0xed1ff0], 0x96cadfd6
mov dword [0xed1ff4], 0xbeb4b397
xor eax, eax
mov cl, byte [eax + 0xed1fd0]
xor cl, 0xbe
mov byte [eax + 0xed267c], cl
inc eax
cmp eax, 0x28
jb 0xe14552
mov eax, 0xed267c
ret

Function at 0xe1456d
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed840c], 1
jne 0xe145a1
or dword [0xed840c], 1
mov dword [0xed1ff8], 0xd3d1dde1
mov dword [0xed1ffc], 0xccccdbe1
mov word [0xed2000], 0xccd1
mov byte [0xed2002], 0xbe
xor eax, eax
mov cl, byte [eax + 0xed1ff8]
xor cl, 0xbe
mov byte [eax + 0xed26a4], cl
inc eax
cmp eax, 0xb
jb 0xe145a3
mov eax, 0xed26a4
ret

Function at 0xe145be
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed8408], 1
jne 0xe14627
or dword [0xed8408], 1
mov dword [0xed2004], 0xd1dde1b7
mov dword [0xed2008], 0xccdbe1d3
mov dword [0xed200c], 0x84ccd1cc
mov dword [0xed2010], 0xccccfb84
mov dword [0xed2014], 0xdbf3ccd1
mov dword [0xed2018], 0xd9dfcdcd
mov dword [0xed201c], 0x849796db
mov dword [0xed2020], 0xb3cd9b9e
mov word [0xed2024], 0xbeb4
xor eax, eax
mov cl, byte [eax + 0xed2004]
xor cl, 0xbe
mov byte [eax + 0xed26b0], cl
inc eax
cmp eax, 0x22
jb 0xe14629
mov eax, 0xed26b0
ret

Function at 0xe14644
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed8404], 1
jne 0xe146c2
or dword [0xed8404], 1
mov dword [0xed2028], 0xd7dff8b7
mov dword [0xed202c], 0x9edadbd2
mov dword [0xed2030], 0xd99ed1ca
mov dword [0xed2034], 0xe19ecadb
mov dword [0xed2038], 0xe1d3d1dd
mov dword [0xed203c], 0xd1ccccdb
mov dword [0xed2040], 0xfb8484cc
mov dword [0xed2044], 0xccd1cccc
mov dword [0xed2048], 0xcdcddbf3
mov dword [0xed204c], 0x96dbd9df
mov dword [0xed2050], 0xbeb4b397
xor eax, eax
mov cl, byte [eax + 0xed2028]
xor cl, 0xbe
mov byte [eax + 0xed26d4], cl
inc eax
cmp eax, 0x2c
jb 0xe146c4
mov eax, 0xed26d4
ret

Function at 0xe146df
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed8400], 1
jne 0xe1475a
or dword [0xed8400], 1
mov dword [0xed2054], 0xdddfcaed
mov dword [0xed2058], 0xcbda9ed5
mov dword [0xed205c], 0xdb9eced3
mov dword [0xed2060], 0xccd1cccc
mov dword [0xed2064], 0xd1fd9e84
mov dword [0xed2068], 0xc6dbcad0
mov dword [0xed206c], 0xdddbecca
mov dword [0xed2070], 0x9edaccd1
mov dword [0xed2074], 0x9ecddfc9
mov dword [0xed2078], 0xd2d2cbd0
mov byte [0xed207c], 0xbe
xor eax, eax
mov cl, byte [eax + 0xed2054]
xor cl, 0xbe
mov byte [eax + 0xed2700], cl
inc eax
cmp eax, 0x29
jb 0xe1475c
mov eax, 0xed2700
ret
Function at 0xe14777
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed83fc], 1
jne 0xe147f1
or dword [0xed83fc], 1
mov dword [0xed2080], 0xdddfcaed
mov dword [0xed2084], 0xcbda9ed5
mov dword [0xed2088], 0xdb9eced3
mov dword [0xed208c], 0xccd1cccc
mov dword [0xed2090], 0xc7ed9e84
mov dword [0xed2094], 0xd7d0f7d3
mov dword [0xed2098], 0xd2dfd7ca
mov dword [0xed209c], 0x9edbc4d7
mov dword [0xed20a0], 0xd2d7dfd8
mov word [0xed20a4], 0xdadb
mov byte [0xed20a6], 0xbe
xor eax, eax
mov cl, byte [eax + 0xed2080]
xor cl, 0xbe
mov byte [eax + 0xed272c], cl
inc eax
cmp eax, 0x27
jb 0xe147f3
mov eax, 0xed272c
ret

Function at 0xe1480e
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed83f8], 1
jne 0xe14874
or dword [0xed83f8], 1
mov dword [0xed20a8], 0xd7d5cd82
mov dword [0xed20ac], 0xdadbcece
mov dword [0xed20b0], 0xdfccd89e
mov dword [0xed20b4], 0x9e92dbd3
mov dword [0xed20b8], 0xc99efdee
mov dword [0xed20bc], 0xd09ecddf
mov dword [0xed20c0], 0x80d2d2cb
mov word [0xed20c4], 0xb4b3
mov byte [0xed20c6], 0xbe
xor eax, eax
mov cl, byte [eax + 0xed20a8]
xor cl, 0xbe
mov byte [eax + 0xed2754], cl
inc eax
cmp eax, 0x1f
jb 0xe14876
mov eax, 0xed2754
ret

Function at 0xe14891
Capabilities:
Encode data using xor

Disassembly:
test byte [0xed83f4], 1
jne 0xe14924
or dword [0xed83f4], 1
mov dword [0xed20c8], 0xd7d5cd82
mov dword [0xed20cc], 0xdadbcece
mov dword [0xed20d0], 0xdfccd89e
mov dword [0xed20d4], 0x9e92dbd3
mov dword [0xed20d8], 0xc99efdee
mov dword [0xed20dc], 0xcd9ecddf
mov dword [0xed20e0], 0x9edbd3df
mov dword [0xed20e4], 0xcc9ecddf
mov dword [0xed20e8], 0xcccbcadb
mov dword [0xed20ec], 0xdadf9ed0
mov dword [0xed20f0], 0xcddbccda
mov dword [0xed20f4], 0xb4b380cd
mov byte [0xed20f8], 0xbe
xor eax, eax
mov cl, byte [eax + 0xed20c8]
xor cl, 0xbe
mov byte [eax + 0xed2774], cl
inc eax
cmp eax, 0x31
jb 0xe14926
mov eax, 0xed2774
ret