joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10066920
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102b3078], 0
push ebx
push esi
je 0x10066991
cmp byte [0x102b3079], 0
jne 0x100669d2
mov byte [0x102b3079], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b30dc]
xor ebx, dword [0x102b30d8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b307a], al
inc esi
cmp esi, 0x58
jb 0x10066950
jmp 0x100669d2
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b30dc]
xor ebx, dword [0x102b30d8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b307a], al
inc esi
cmp esi, 0x58
jb 0x10066993
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102b30d1
push 0x102b307a
call fcn.1004f130
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10066a00
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102b31b8], 0
push ebx
push esi
je 0x10066a71
cmp byte [0x102b31b9], 0
jne 0x10066ab2
mov byte [0x102b31b9], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b3234]
xor ebx, dword [0x102b3230]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b31ba], al
inc esi
cmp esi, 0x71
jb 0x10066a30
jmp 0x10066ab2
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b3234]
xor ebx, dword [0x102b3230]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b31ba], al
inc esi
cmp esi, 0x71
jb 0x10066a73
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102b322a
push 0x102b31ba
call fcn.1004f130
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10066ae0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102b32a8], 0
push ebx
push esi
je 0x10066b51
cmp byte [0x102b32a9], 0
jne 0x10066b92
mov byte [0x102b32a9], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b32ec]
xor ebx, dword [0x102b32e8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b32aa], al
inc esi
cmp esi, 0x37
jb 0x10066b10
jmp 0x10066b92
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b32ec]
xor ebx, dword [0x102b32e8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b32aa], al
inc esi
cmp esi, 0x37
jb 0x10066b53
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102b32e0
push 0x102b32aa
call fcn.1004f130
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10066bc0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102b34c0], 0
push ebx
push esi
je 0x10066c34
cmp byte [0x102b34c1], 0
jne 0x10066c78
mov byte [0x102b34c1], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b356c]
xor ebx, dword [0x102b3568]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b34c2], al
inc esi
cmp esi, 0xa3
jb 0x10066bf0
jmp 0x10066c78
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b356c]
xor ebx, dword [0x102b3568]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b34c2], al
inc esi
cmp esi, 0xa3
jb 0x10066c36
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102b3564
push 0x102b34c2
call fcn.1004f130
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10066ca0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102b35e0], 0
push ebx
push esi
je 0x10066d11
cmp byte [0x102b35e1], 0
jne 0x10066d52
mov byte [0x102b35e1], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b3664]
xor ebx, dword [0x102b3660]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b35e2], al
inc esi
cmp esi, 0x78
jb 0x10066cd0
jmp 0x10066d52
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b3664]
xor ebx, dword [0x102b3660]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b35e2], al
inc esi
cmp esi, 0x78
jb 0x10066d13
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102b3659
push 0x102b35e2
call fcn.1004f130
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10066d80
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102b3668], 0
push ebx
push esi
je 0x10066df4
cmp byte [0x102b3669], 0
jne 0x10066e38
mov byte [0x102b3669], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b3704]
xor ebx, dword [0x102b3700]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b366a], al
inc esi
cmp esi, 0x96
jb 0x10066db0
jmp 0x10066e38
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b3704]
xor ebx, dword [0x102b3700]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b366a], al
inc esi
cmp esi, 0x96
jb 0x10066df6
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102b36ff
push 0x102b366a
call fcn.1004f130
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10066e60
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102b1630], 0
push ebx
push esi
je 0x10066ed1
cmp byte [0x102b1631], 0
jne 0x10066f12
mov byte [0x102b1631], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b164c]
xor ebx, dword [0x102b1648]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b1632], al
inc esi
cmp esi, 0x15
jb 0x10066e90
jmp 0x10066f12
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b164c]
xor ebx, dword [0x102b1648]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b1632], al
inc esi
cmp esi, 0x15
jb 0x10066ed3
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102b1646
push 0x102b1632
call fcn.1004f130
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10066f50
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102b1858], 0
push ebx
push esi
je 0x10066fc1
cmp byte [0x102b1859], 0
jne 0x10067002
mov byte [0x102b1859], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b18ac]
xor ebx, dword [0x102b18a8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b185a], al
inc esi
cmp esi, 0x48
jb 0x10066f80
jmp 0x10067002
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b18ac]
xor ebx, dword [0x102b18a8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b185a], al
inc esi
cmp esi, 0x48
jb 0x10066fc3
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102b18a1
push 0x102b185a
call fcn.1004f130
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10067030
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102b18e0], 0
push ebx
push esi
je 0x100670a1
cmp byte [0x102b18e1], 0
jne 0x100670e2
mov byte [0x102b18e1], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b192c]
xor ebx, dword [0x102b1928]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b18e2], al
inc esi
cmp esi, 0x43
jb 0x10067060
jmp 0x100670e2
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b192c]
xor ebx, dword [0x102b1928]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b18e2], al
inc esi
cmp esi, 0x43
jb 0x100670a3
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102b1924
push 0x102b18e2
call fcn.1004f130
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10067110
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102b1930], 0
push ebx
push esi
je 0x10067181
cmp byte [0x102b1931], 0
jne 0x100671c2
mov byte [0x102b1931], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b1974]
xor ebx, dword [0x102b1970]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b1932], al
inc esi
cmp esi, 0x3b
jb 0x10067140
jmp 0x100671c2
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b1974]
xor ebx, dword [0x102b1970]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b1932], al
inc esi
cmp esi, 0x3b
jb 0x10067183
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102b196c
push 0x102b1932
call fcn.1004f130
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x100671f0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102b19f8], 0
push ebx
push esi
je 0x10067261
cmp byte [0x102b19f9], 0
jne 0x100672a2
mov byte [0x102b19f9], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b1a4c]
xor ebx, dword [0x102b1a48]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b19fa], al
inc esi
cmp esi, 0x4d
jb 0x10067220
jmp 0x100672a2
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b1a4c]
xor ebx, dword [0x102b1a48]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b19fa], al
inc esi
cmp esi, 0x4d
jb 0x10067263
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102b1a46
push 0x102b19fa
call fcn.1004f130
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x100672d0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102b1a80], 0
push ebx
push esi
je 0x10067341
cmp byte [0x102b1a81], 0
jne 0x10067382
mov byte [0x102b1a81], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b1a9c]
xor ebx, dword [0x102b1a98]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b1a82], al
inc esi
cmp esi, 0xf
jb 0x10067300
jmp 0x10067382
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b1a9c]
xor ebx, dword [0x102b1a98]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b1a82], al
inc esi
cmp esi, 0xf
jb 0x10067343
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102b1a90
push 0x102b1a82
call fcn.1004f130
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x100673b0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102b1cb8], 0
push ebx
push esi
je 0x10067421
cmp byte [0x102b1cb9], 0
jne 0x10067462
mov byte [0x102b1cb9], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b1d14]
xor ebx, dword [0x102b1d10]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b1cba], al
inc esi
cmp esi, 0x50
jb 0x100673e0
jmp 0x10067462
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b1d14]
xor ebx, dword [0x102b1d10]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b1cba], al
inc esi
cmp esi, 0x50
jb 0x10067423
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102b1d09
push 0x102b1cba
call fcn.1004f130
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10067490
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102b1e10], 0
push ebx
push esi
je 0x10067501
cmp byte [0x102b1e11], 0
jne 0x10067542
mov byte [0x102b1e11], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b1e5c]
xor ebx, dword [0x102b1e58]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b1e12], al
inc esi
cmp esi, 0x42
jb 0x100674c0
jmp 0x10067542
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b1e5c]
xor ebx, dword [0x102b1e58]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b1e12], al
inc esi
cmp esi, 0x42
jb 0x10067503
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102b1e53
push 0x102b1e12
call fcn.1004f130
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10067570
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102b1ee0], 0
push ebx
push esi
je 0x100675e1
cmp byte [0x102b1ee1], 0
jne 0x10067622
mov byte [0x102b1ee1], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b1f34]
xor ebx, dword [0x102b1f30]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b1ee2], al
inc esi
cmp esi, 0x49
jb 0x100675a0
jmp 0x10067622
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b1f34]
xor ebx, dword [0x102b1f30]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b1ee2], al
inc esi
cmp esi, 0x49
jb 0x100675e3
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102b1f2a
push 0x102b1ee2
call fcn.1004f130
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10067650
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102b2008], 0
push ebx
push esi
je 0x100676c1
cmp byte [0x102b2009], 0
jne 0x10067702
mov byte [0x102b2009], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b205c]
xor ebx, dword [0x102b2058]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b200a], al
inc esi
cmp esi, 0x4a
jb 0x10067680
jmp 0x10067702
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b205c]
xor ebx, dword [0x102b2058]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b200a], al
inc esi
cmp esi, 0x4a
jb 0x100676c3
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102b2053
push 0x102b200a
call fcn.1004f130
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10067730
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102b2150], 0
push ebx
push esi
je 0x100677a1
cmp byte [0x102b2151], 0
jne 0x100677e2
mov byte [0x102b2151], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b219c]
xor ebx, dword [0x102b2198]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b2152], al
inc esi
cmp esi, 0x45
jb 0x10067760
jmp 0x100677e2
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b219c]
xor ebx, dword [0x102b2198]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b2152], al
inc esi
cmp esi, 0x45
jb 0x100677a3
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102b2196
push 0x102b2152
call fcn.1004f130
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10067810
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102b1088], 0
push ebx
push esi
je 0x10067884
cmp byte [0x102b1089], 0
jne 0x100678c8
mov byte [0x102b1089], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b11cc]
xor ebx, dword [0x102b11c8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b108a], al
inc esi
cmp esi, 0x137
jb 0x10067840
jmp 0x100678c8
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b11cc]
xor ebx, dword [0x102b11c8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b108a], al
inc esi
cmp esi, 0x137
jb 0x10067886
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102b11c0
push 0x102b108a
call fcn.1004f130
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x100678f0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102b2250], 0
push ebx
push esi
je 0x10067961
cmp byte [0x102b2251], 0
jne 0x100679a2
mov byte [0x102b2251], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b2294]
xor ebx, dword [0x102b2290]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b2252], al
inc esi
cmp esi, 0x3a
jb 0x10067920
jmp 0x100679a2
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b2294]
xor ebx, dword [0x102b2290]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b2252], al
inc esi
cmp esi, 0x3a
jb 0x10067963
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102b228b
push 0x102b2252
call fcn.1004f130
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x100679d0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102b0e68], 0
push ebx
push esi
je 0x10067a41
cmp byte [0x102b0e69], 0
jne 0x10067a82
mov byte [0x102b0e69], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b0e84]
xor ebx, dword [0x102b0e80]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b0e6a], al
inc esi
cmp esi, 0x10
jb 0x10067a00
jmp 0x10067a82
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b0e84]
xor ebx, dword [0x102b0e80]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b0e6a], al
inc esi
cmp esi, 0x10
jb 0x10067a43
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102b0e79
push 0x102b0e6a
call fcn.1004f130
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10067ab0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102b0e88], 0
push ebx
push esi
je 0x10067b21
cmp byte [0x102b0e89], 0
jne 0x10067b62
mov byte [0x102b0e89], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b0e9c]
xor ebx, dword [0x102b0e98]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b0e8a], al
inc esi
cmp esi, 0xc
jb 0x10067ae0
jmp 0x10067b62
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102b0e9c]
xor ebx, dword [0x102b0e98]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102b0e8a], al
inc esi
cmp esi, 0xc
jb 0x10067b23
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102b0e95
push 0x102b0e8a
call fcn.1004f130
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4