joyce8/EMBER2024-capa huggingface dataset:
Function at 0xe0d3d0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x2a], 0
je 0xe0d3f2
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x29
jb 0xe0d3e0
mov byte [esi + 0x2a], 0
mov eax, esi
pop esi
ret
Function at 0xe11d10
Capabilities:
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x947092
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0x3c8
push esi
push edi
mov dword [ebp - 0x9c], 0
push 0x104
lea eax, [ebp - 0x3d8]
mov dword [ebp - 4], 0
push 0
push eax
call fcn.00eb3760
add esp, 0xc
lea eax, [ebp - 0x3d8]
push eax
push 0
push 0
push 0x1a
push 0
call dword [0x94c2e0]
movaps xmm0, xmmword [0x965e70]
xor ecx, ecx
movups xmmword [ebp - 0xe0], xmm0
mov word [ebp - 0xd0], 0xd3
mov byte [ebp - 0xce], 1
lea eax, [ecx - 0x6d]
xor byte [ebp + ecx - 0xe0], al
inc ecx
cmp ecx, 0x11
jb 0xe11da0
xorps xmm0, xmm0
mov byte [ebp - 0xce], 0
lea ecx, [ebp - 0xe0]
mov dword [ebp - 0x58], 0
movups xmmword [ebp - 0x68], xmm0
mov dword [ebp - 0x54], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0xe11dd5
sub ecx, edx
lea eax, [ebp - 0xe0]
push ecx
push eax
lea ecx, [ebp - 0x68]
call fcn.00dd7030
lea eax, [ebp - 0x68]
mov byte [ebp - 4], 1
push eax
lea edx, [ebp - 0x3d8]
lea ecx, [ebp - 0x15c]
call fcn.00e3e3b0
add esp, 4
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x54]
cmp ecx, 0x10
jb 0xe11e42
mov edx, dword [ebp - 0x68]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0xe11e38
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0xe1347d
push ecx
push edx
call fcn.00eb1783
add esp, 8
cmp dword [ebp - 0x148], 0x10
lea esi, [ebp - 0x15c]
push 0x976240
cmovae esi, dword [ebp - 0x15c]
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
call fcn.00eb0a84
add esp, 4
test eax, eax
jne 0xe13482
test esi, esi
je 0xe133d8
mov ecx, esi
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0xe11e90
sub ecx, edx
je 0xe133d8
push esi
call 0xf3744b
push 0x976240
call fcn.00eb0a95
add esp, 4
mov ecx, dword [ebp - 0x148]
cmp ecx, 0x10
jb 0xe1341f
mov edx, dword [ebp - 0x15c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0xe13415
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0xe134cf
push ecx
push edx
call fcn.00eb1783
add esp, 8
mov ecx, dword [ebx + 0x1c]
mov dword [ebp - 0x14c], 0
mov dword [ebp - 0x148], 0xf
mov byte [ebp - 0x15c], 0
cmp ecx, 0x10
jb 0xe1346a
mov edx, dword [ebx + 8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0xe13460
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0xe134cf
push ecx
push edx
call fcn.00eb1783
add esp, 8
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.00eb6a20
push eax
call fcn.00eb072b
call fcn.00dd6840
push eax
call fcn.00eb072b
call fcn.00dd6840
call fcn.00eb6a20
call fcn.00dd6840
call fcn.00dd6840
call fcn.00dd6840
call fcn.00dd6840
call fcn.00dd6840
call fcn.00eb6a20
call fcn.00eb6a20
call fcn.00eb6a20
call fcn.00eb6a20
call fcn.00eb6a20
call fcn.00eb6a20
int3
Function at 0xe134e0
Capabilities:
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x9470ad
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0x58
push esi
push edi
push 0xff
call fcn.00ec019c
push 0xff
mov edi, eax
push 0
push edi
call fcn.00eb3760
push 0xff
call fcn.00ec019c
push 0xff
push 0
push eax
mov dword [ebp - 0x18], eax
call fcn.00eb3760
movaps xmm0, xmmword [0x9660c0]
add esp, 0x20
movups xmmword [ebp - 0x64], xmm0
xor ecx, ecx
mov dword [ebp - 0x44], 0xeadbd1c3
movaps xmm0, xmmword [0x966790]
movups xmmword [ebp - 0x54], xmm0
mov dword [ebp - 0x40], 0xd7d4d7d4
mov dword [ebp - 0x3c], 0xd9d2da
mov byte [ebp - 0x38], 1
lea eax, [ecx - 0x6d]
xor byte [ebp + ecx - 0x64], al
inc ecx
cmp ecx, 0x2b
jb 0xe13578
lea eax, [ebp - 0x14]
mov byte [ebp - 0x38], 0
push eax
push 1
push 0
lea eax, [ebp - 0x64]
push eax
push 0x80000002
push ebp
call fcn.0105e9e1
test eax, eax
jne 0xe136e0
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0xff
push eax
push edi
push 0
push 0
push 0
push dword [ebp - 0x14]
call dword [0x94c014]
push dword [ebp - 0x14]
mov esi, eax
call fcn.01012eca
ret
mov ecx, dword [ebp - 0xc]
xor eax, eax
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
Function at 0xe167bf
Capabilities:
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x94745f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0x50
push esi
mov esi, ecx
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], 0
push edi
mov dword [esi], 0
mov dword [esi + 4], 0
mov dword [esi + 8], 0
mov dword [ebp - 4], 0
xor ecx, ecx
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x2b], 0xf7f0e0e0
mov dword [ebp - 0x27], 0xe2fcb6fa
mov word [ebp - 0x23], 0xfe
mov byte [ebp - 0x21], 1
nop dword [eax]
lea eax, [ecx - 0x6d]
xor byte [ebp + ecx - 0x2b], al
inc ecx
cmp ecx, 9
jb 0xe16810
xorps xmm0, xmm0
mov byte [ebp - 0x21], 0
lea ecx, [ebp - 0x2b]
mov dword [ebp - 0x4c], 0
movups xmmword [ebp - 0x5c], xmm0
mov dword [ebp - 0x48], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0xe16840
sub ecx, edx
lea eax, [ebp - 0x2b]
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.00dd7030
lea ecx, [ebp - 0x5c]
call fcn.00e166e0
mov ecx, dword [ebp - 0x48]
mov edi, eax
cmp ecx, 0x10
jb 0xe16894
mov edx, dword [ebp - 0x5c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0xe1688a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0xe169be
push ecx
push edx
call fcn.00eb1783
add esp, 8
test edi, edi
je 0xe169a9
cmp edi, 0xea60
jae 0xe169a9
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x2c]
xorps xmm0, xmm0
mov dword [ebp - 0x34], 0
movups xmmword [ebp - 0x44], xmm0
mov edx, edi
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
mov dword [ebp - 0x18], 3
call fcn.00e160f0
xor ecx, ecx
mov byte [ebp - 4], 2
mov edi, dword [ebp - 0x2c]
mov eax, 0x2aaaaaab
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x28]
sub ecx, edi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0xe16946
xor esi, esi
nop
lea eax, [edi + esi]
lea ecx, [ebp - 0x44]
cmp ecx, eax
je 0xe16922
cmp dword [eax + 0x14], 0x10
mov ecx, dword [eax + 0x10]
jb 0xe16915
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x44]
call fcn.00e3a130
mov edi, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x28]
mov eax, 0x2aaaaaab
inc dword [ebp - 0x14]
sub ecx, edi
imul ecx
add esi, 0x18
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x14], eax
jb 0xe16900
mov esi, dword [ebp - 0x1c]
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 1
call fcn.00e3c740
cmp dword [ebp - 0x34], 0
jbe 0xe16979
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x44]
push ecx
cmp eax, dword [esi + 8]
je 0xe16971
mov ecx, eax
call fcn.00e3a550
add dword [esi + 4], 0x18
jmp 0xe16979
push eax
mov ecx, esi
call fcn.00e47260
mov ecx, dword [ebp - 0x30]
cmp ecx, 0x10
jb 0xe169a9
mov edx, dword [ebp - 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0xe1699f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0xe169be
push ecx
push edx
call fcn.00eb1783
add esp, 8
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.00eb6a20
int3
Function at 0xe196b0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x1e], 0
je 0xe196d2
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x1d
jb 0xe196c0
mov byte [esi + 0x1e], 0
mov eax, esi
pop esi
ret

Function at 0xe196e0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x37], 0
je 0xe19702
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x36
jb 0xe196f0
mov byte [esi + 0x37], 0
mov eax, esi
pop esi
ret
Function at 0xe33750
Capabilities:
Access peb ldr_data
Encode data using xor
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
lea eax, [ebp - 0x18]
push ebx
mov ebx, dword [0x94c310]
push esi
push edi
push eax
call ebx
lea eax, [ebp - 0x10]
push eax
call ebx
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x18]
je 0xe33838
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x14]
je 0xe33838
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop
mov esi, dword [eax + 0x18]
mov dword [ebp - 8], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 4], ecx
cmp ecx, esi
je 0xe337f4
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xe337f4
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
sub ebx, 4
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0xe337ed
nop word [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0xe337d0
cmp esi, 0x2fa62ca8
je 0xe337f8
mov esi, dword [eax + 0x18]
test edi, edi
jne 0xe337b5
mov eax, dword [eax]
jmp 0xe33790
mov esi, dword [ebp - 4]
mov edx, dword [ebp - 8]
push 0x3e9
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
lea eax, [ebp - 0x20]
push eax
call dword [0x94c310]
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x20]
je 0xe33838
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x1c]
jne 0xe338d7
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov edx, dword [eax + 0x18]
mov dword [ebp - 4], edx
mov ecx, dword [edx + 0x3c]
mov ecx, dword [ecx + edx + 0x78]
add ecx, edx
mov dword [ebp - 8], ecx
cmp ecx, edx
je 0xe338a9
mov edi, dword [ecx + 0x18]
test edi, edi
je 0xe338a9
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, edx
nop dword [eax]
mov ecx, dword [ebx - 4]
lea ebx, [ebx - 4]
add ecx, edx
dec edi
mov esi, 0x811c9dc5
mov dl, byte [ecx]
inc ecx
test dl, dl
je 0xe338a2
movsx edx, dl
lea ecx, [ecx + 1]
xor edx, esi
imul esi, edx, 0x1000193
mov dl, byte [ecx - 1]
test dl, dl
jne 0xe33885
cmp esi, 0x2fa62ca8
je 0xe338ad
mov edx, dword [eax + 0x18]
test edi, edi
jne 0xe33870
mov eax, dword [eax]
jmp 0xe33844
mov esi, dword [ebp - 8]
mov edx, dword [ebp - 4]
push 1
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov ebx, dword [0x94c310]
jmp 0xe33765
push 0
push 0xce440
call fcn.00ddc520
add esp, 8
or eax, edx
je 0xe338ee
mov bl, 1
jmp 0xe338f0
xor bl, bl
push 0
push 0xce3df
call fcn.00ddc520
add esp, 8
mov byte [eax + 0x975ec0], bl
mov al, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0xe36b80
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x31], 0
je 0xe36ba2
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x30
jb 0xe36b90
mov byte [esi + 0x31], 0
pop esi
ret

Function at 0xe36bb0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x35], 0
je 0xe36bd2
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x34
jb 0xe36bc0
mov byte [esi + 0x35], 0
pop esi
ret

Function at 0xe36cd0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x1e], 0
je 0xe36cf2
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x1d
jb 0xe36ce0
mov byte [esi + 0x1e], 0
pop esi
ret

Function at 0xe36f10
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x33], 0
je 0xe36f32
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x32
jb 0xe36f20
mov byte [esi + 0x33], 0
pop esi
ret

Function at 0xe36f40
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x57], 0
je 0xe36f62
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x56
jb 0xe36f50
mov byte [esi + 0x57], 0
pop esi
ret

Function at 0xe36f70
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x21], 0
je 0xe36f92
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x20
jb 0xe36f80
mov byte [esi + 0x21], 0
pop esi
ret

Function at 0xe36fc0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x23], 0
je 0xe36fe2
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x22
jb 0xe36fd0
mov byte [esi + 0x23], 0
pop esi
ret

Function at 0xe36ff0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x1b], 0
je 0xe37012
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x1a
jb 0xe37000
mov byte [esi + 0x1b], 0
pop esi
ret

Function at 0xe37020
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x5a], 0
je 0xe37042
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x59
jb 0xe37030
mov byte [esi + 0x5a], 0
pop esi
ret

Function at 0xe37050
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x25], 0
je 0xe37072
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x24
jb 0xe37060
mov byte [esi + 0x25], 0
pop esi
ret
Function at 0xe37080
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x17], 0
je 0xe370a2
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x16
jb 0xe37090
mov byte [esi + 0x17], 0
pop esi
ret

Function at 0xe370b0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x5c], 0
je 0xe370d2
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x5b
jb 0xe370c0
mov byte [esi + 0x5c], 0
pop esi
ret

Function at 0xe370e0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x27], 0
je 0xe37102
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x26
jb 0xe370f0
mov byte [esi + 0x27], 0
pop esi
ret

Function at 0xe37130
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x2e], 0
je 0xe37152
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x2d
jb 0xe37140
mov byte [esi + 0x2e], 0
pop esi
ret

Function at 0xe37160
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x1a], 0
je 0xe37182
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x19
jb 0xe37170
mov byte [esi + 0x1a], 0
pop esi
ret

Function at 0xe37370
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x1d], 0
je 0xe37392
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x1c
jb 0xe37380
mov byte [esi + 0x1d], 0
pop esi
ret

Function at 0xe373a0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 7], 0
je 0xe373c2
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 6
jb 0xe373b0
mov byte [esi + 7], 0
pop esi
ret

Function at 0xe373d0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x34], 0
je 0xe373f2
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x33
jb 0xe373e0
mov byte [esi + 0x34], 0
pop esi
ret

Function at 0xe37400
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0xf], 0
je 0xe37422
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0xe
jb 0xe37410
mov byte [esi + 0xf], 0
pop esi
ret

Function at 0xe37430
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x22], 0
je 0xe37452
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x21
jb 0xe37440
mov byte [esi + 0x22], 0
pop esi
ret
Function at 0xe37460
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x15], 0
je 0xe37482
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x14
jb 0xe37470
mov byte [esi + 0x15], 0
pop esi
ret

Function at 0xe37490
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x18], 0
je 0xe374b2
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x17
jb 0xe374a0
mov byte [esi + 0x18], 0
pop esi
ret

Function at 0xe374c0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x1c], 0
je 0xe374e2
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x1b
jb 0xe374d0
mov byte [esi + 0x1c], 0
pop esi
ret

Function at 0xe374f0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x14], 0
je 0xe37512
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x13
jb 0xe37500
mov byte [esi + 0x14], 0
pop esi
ret

Function at 0xe37520
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x2d], 0
je 0xe37542
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x2c
jb 0xe37530
mov byte [esi + 0x2d], 0
pop esi
ret

Function at 0xe37550
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x13], 0
je 0xe37572
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x12
jb 0xe37560
mov byte [esi + 0x13], 0
pop esi
ret

Function at 0xe37580
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0xd], 0
je 0xe375a2
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0xc
jb 0xe37590
mov byte [esi + 0xd], 0
pop esi
ret

Function at 0xe375b0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0xb], 0
je 0xe375d2
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0xa
jb 0xe375c0
mov byte [esi + 0xb], 0
pop esi
ret

Function at 0xe375e0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 9], 0
je 0xe37602
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 8
jb 0xe375f0
mov byte [esi + 9], 0
pop esi
ret

Function at 0xe37610
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x10], 0
je 0xe37632
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0xf
jb 0xe37620
mov byte [esi + 0x10], 0
pop esi
ret
Function at 0xe37640
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x11], 0
je 0xe37662
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x10
jb 0xe37650
mov byte [esi + 0x11], 0
pop esi
ret

Function at 0xe37670
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0xc], 0
je 0xe37692
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0xb
jb 0xe37680
mov byte [esi + 0xc], 0
pop esi
ret

Function at 0xe376a0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 8], 0
je 0xe376c2
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 7
jb 0xe376b0
mov byte [esi + 8], 0
pop esi
ret

Function at 0xe376d0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 5], 0
je 0xe376f2
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 4
jb 0xe376e0
mov byte [esi + 5], 0
pop esi
ret

Function at 0xe37760
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x12], 0
je 0xe37782
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x11
jb 0xe37770
mov byte [esi + 0x12], 0
pop esi
ret

Function at 0xe37790
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x16], 0
je 0xe377b2
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x15
jb 0xe377a0
mov byte [esi + 0x16], 0
pop esi
ret

Function at 0xe377c0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0xe], 0
je 0xe377e2
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0xd
jb 0xe377d0
mov byte [esi + 0xe], 0
pop esi
ret

Function at 0xe377f0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x19], 0
je 0xe37812
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 0x18
jb 0xe37800
mov byte [esi + 0x19], 0
pop esi
ret

Function at 0xe37820
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0xa], 0
je 0xe37842
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 9
jb 0xe37830
mov byte [esi + 0xa], 0
pop esi
ret

Function at 0xe37850
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 3], 0
je 0xe37872
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x6d]
inc eax
xor byte [edx], cl
cmp eax, 2
jb 0xe37860
mov byte [esi + 3], 0
pop esi
ret