joyce8/EMBER2024-capa huggingface dataset:
Function at 0x100643a0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi], 0
lea edi, [esi + 2]
je 0x10064407
cmp byte [esi + 1], 0
jne 0x1006444c
xor ecx, ecx
mov byte [esi + 1], 1
mov dword [ebp - 8], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x44]
xor ebx, dword [esi + 0x40]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 8]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [edi + ecx]
xor al, bl
mov byte [edi + ecx], al
inc ecx
mov dword [ebp - 8], ecx
cmp ecx, 0x3c
jb 0x100643c6
jmp 0x1006444c
xor ecx, ecx
mov dword [ebp - 8], ecx
nop dword [eax]
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x44]
xor ebx, dword [esi + 0x40]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 8]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [edi + ecx], al
inc ecx
mov dword [ebp - 8], ecx
cmp ecx, 0x3c
jb 0x10064410
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
lea eax, [esi + 0x3d]
push eax
push edi
call fcn.1004d640
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10064470
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi], 0
lea edi, [esi + 2]
je 0x100644d7
cmp byte [esi + 1], 0
jne 0x1006451c
xor ecx, ecx
mov byte [esi + 1], 1
mov dword [ebp - 8], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x4c]
xor ebx, dword [esi + 0x48]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 8]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [edi + ecx]
xor al, bl
mov byte [edi + ecx], al
inc ecx
mov dword [ebp - 8], ecx
cmp ecx, 0x41
jb 0x10064496
jmp 0x1006451c
xor ecx, ecx
mov dword [ebp - 8], ecx
nop dword [eax]
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x4c]
xor ebx, dword [esi + 0x48]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 8]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [edi + ecx], al
inc ecx
mov dword [ebp - 8], ecx
cmp ecx, 0x41
jb 0x100644e0
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
lea eax, [esi + 0x42]
push eax
push edi
call fcn.1004d640
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10064540
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi], 0
lea edi, [esi + 2]
je 0x100645a7
cmp byte [esi + 1], 0
jne 0x100645ec
xor ecx, ecx
mov byte [esi + 1], 1
mov dword [ebp - 8], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x54]
xor ebx, dword [esi + 0x50]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 8]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [edi + ecx]
xor al, bl
mov byte [edi + ecx], al
inc ecx
mov dword [ebp - 8], ecx
cmp ecx, 0x4e
jb 0x10064566
jmp 0x100645ec
xor ecx, ecx
mov dword [ebp - 8], ecx
nop dword [eax]
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x54]
xor ebx, dword [esi + 0x50]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 8]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [edi + ecx], al
inc ecx
mov dword [ebp - 8], ecx
cmp ecx, 0x4e
jb 0x100645b0
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
lea eax, [esi + 0x4f]
push eax
push edi
call fcn.1004d640
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10064610
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102f0c88], 0
push ebx
push esi
je 0x10064687
cmp byte [0x102f0c89], 0
jne 0x100646d5
mov byte [0x102f0c89], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102f0cec]
xor ebx, dword [0x102f0ce8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x102f0c8a]
xor al, bl
mov byte [esi + 0x102f0c8a], al
inc esi
cmp esi, 0x5e
jb 0x10064640
jmp 0x100646d5
xor esi, esi
nop dword [eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102f0cec]
xor ebx, dword [0x102f0ce8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x102f0c8a]
xor al, bl
mov byte [esi + 0x102f0c8a], al
inc esi
cmp esi, 0x5e
jb 0x10064690
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102f0ce7
push 0x102f0c8a
call fcn.1004d640
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10064700
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102ef398], 0
push ebx
push esi
je 0x10064777
cmp byte [0x102ef399], 0
jne 0x100647c5
mov byte [0x102ef399], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102ef3ac]
xor ebx, dword [0x102ef3a8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x102ef39a]
xor al, bl
mov byte [esi + 0x102ef39a], al
inc esi
cmp esi, 0xe
jb 0x10064730
jmp 0x100647c5
xor esi, esi
nop dword [eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102ef3ac]
xor ebx, dword [0x102ef3a8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x102ef39a]
xor al, bl
mov byte [esi + 0x102ef39a], al
inc esi
cmp esi, 0xe
jb 0x10064780
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102ef3a7
push 0x102ef39a
call fcn.1004d640
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x100647f0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102f0fb0], 0
push ebx
push esi
je 0x10064867
cmp byte [0x102f0fb1], 0
jne 0x100648b5
mov byte [0x102f0fb1], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102f0ffc]
xor ebx, dword [0x102f0ff8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x102f0fb2]
xor al, bl
mov byte [esi + 0x102f0fb2], al
inc esi
cmp esi, 0x40
jb 0x10064820
jmp 0x100648b5
xor esi, esi
nop dword [eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102f0ffc]
xor ebx, dword [0x102f0ff8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x102f0fb2]
xor al, bl
mov byte [esi + 0x102f0fb2], al
inc esi
cmp esi, 0x40
jb 0x10064870
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102f0ff1
push 0x102f0fb2
call fcn.1004d640
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x100648e0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102ef778], 0
push ebx
push esi
je 0x10064957
cmp byte [0x102ef779], 0
jne 0x100649a5
mov byte [0x102ef779], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102ef7e4]
xor ebx, dword [0x102ef7e0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x102ef77a]
xor al, bl
mov byte [esi + 0x102ef77a], al
inc esi
cmp esi, 0x66
jb 0x10064910
jmp 0x100649a5
xor esi, esi
nop dword [eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102ef7e4]
xor ebx, dword [0x102ef7e0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x102ef77a]
xor al, bl
mov byte [esi + 0x102ef77a], al
inc esi
cmp esi, 0x66
jb 0x10064960
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102ef7df
push 0x102ef77a
call fcn.1004d640
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x100649d0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102f12d0], 0
push ebx
push esi
je 0x10064a47
cmp byte [0x102f12d1], 0
jne 0x10064a95
mov byte [0x102f12d1], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102f1324]
xor ebx, dword [0x102f1320]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x102f12d2]
xor al, bl
mov byte [esi + 0x102f12d2], al
inc esi
cmp esi, 0x47
jb 0x10064a00
jmp 0x10064a95
xor esi, esi
nop dword [eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102f1324]
xor ebx, dword [0x102f1320]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x102f12d2]
xor al, bl
mov byte [esi + 0x102f12d2], al
inc esi
cmp esi, 0x47
jb 0x10064a50
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102f1318
push 0x102f12d2
call fcn.1004d640
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10064ac0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102f1328], 0
push ebx
push esi
je 0x10064b37
cmp byte [0x102f1329], 0
jne 0x10064b85
mov byte [0x102f1329], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102f13ac]
xor ebx, dword [0x102f13a8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x102f132a]
xor al, bl
mov byte [esi + 0x102f132a], al
inc esi
cmp esi, 0x77
jb 0x10064af0
jmp 0x10064b85
xor esi, esi
nop dword [eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102f13ac]
xor ebx, dword [0x102f13a8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x102f132a]
xor al, bl
mov byte [esi + 0x102f132a], al
inc esi
cmp esi, 0x77
jb 0x10064b40
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102f13a0
push 0x102f132a
call fcn.1004d640
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10064bb0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102f13d8], 0
push ebx
push esi
je 0x10064c27
cmp byte [0x102f13d9], 0
jne 0x10064c75
mov byte [0x102f13d9], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102f141c]
xor ebx, dword [0x102f1418]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x102f13da]
xor al, bl
mov byte [esi + 0x102f13da], al
inc esi
cmp esi, 0x3d
jb 0x10064be0
jmp 0x10064c75
xor esi, esi
nop dword [eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102f141c]
xor ebx, dword [0x102f1418]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x102f13da]
xor al, bl
mov byte [esi + 0x102f13da], al
inc esi
cmp esi, 0x3d
jb 0x10064c30
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102f1416
push 0x102f13da
call fcn.1004d640
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10064ca0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102f1558], 0
push ebx
push esi
je 0x10064d17
cmp byte [0x102f1559], 0
jne 0x10064d65
mov byte [0x102f1559], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102f15bc]
xor ebx, dword [0x102f15b8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x102f155a]
xor al, bl
mov byte [esi + 0x102f155a], al
inc esi
cmp esi, 0x58
jb 0x10064cd0
jmp 0x10064d65
xor esi, esi
nop dword [eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102f15bc]
xor ebx, dword [0x102f15b8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x102f155a]
xor al, bl
mov byte [esi + 0x102f155a], al
inc esi
cmp esi, 0x58
jb 0x10064d20
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102f15b1
push 0x102f155a
call fcn.1004d640
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10064d90
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102f1698], 0
push ebx
push esi
je 0x10064e07
cmp byte [0x102f1699], 0
jne 0x10064e55
mov byte [0x102f1699], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102f1714]
xor ebx, dword [0x102f1710]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x102f169a]
xor al, bl
mov byte [esi + 0x102f169a], al
inc esi
cmp esi, 0x71
jb 0x10064dc0
jmp 0x10064e55
xor esi, esi
nop dword [eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102f1714]
xor ebx, dword [0x102f1710]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x102f169a]
xor al, bl
mov byte [esi + 0x102f169a], al
inc esi
cmp esi, 0x71
jb 0x10064e10
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102f170a
push 0x102f169a
call fcn.1004d640
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10064e80
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102f1788], 0
push ebx
push esi
je 0x10064ef7
cmp byte [0x102f1789], 0
jne 0x10064f45
mov byte [0x102f1789], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102f17cc]
xor ebx, dword [0x102f17c8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x102f178a]
xor al, bl
mov byte [esi + 0x102f178a], al
inc esi
cmp esi, 0x37
jb 0x10064eb0
jmp 0x10064f45
xor esi, esi
nop dword [eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102f17cc]
xor ebx, dword [0x102f17c8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x102f178a]
xor al, bl
mov byte [esi + 0x102f178a], al
inc esi
cmp esi, 0x37
jb 0x10064f00
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102f17c0
push 0x102f178a
call fcn.1004d640
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10064f70
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102f19a0], 0
push ebx
push esi
je 0x10064fea
cmp byte [0x102f19a1], 0
jne 0x10065038
mov byte [0x102f19a1], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102f1a4c]
xor ebx, dword [0x102f1a48]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x102f19a2]
xor al, bl
mov byte [esi + 0x102f19a2], al
inc esi
cmp esi, 0xa3
jb 0x10064fa0
jmp 0x10065038
xor esi, esi
nop dword [eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102f1a4c]
xor ebx, dword [0x102f1a48]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x102f19a2]
xor al, bl
mov byte [esi + 0x102f19a2], al
inc esi
cmp esi, 0xa3
jb 0x10064ff0
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102f1a44
push 0x102f19a2
call fcn.1004d640
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10065060
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102f1ac0], 0
push ebx
push esi
je 0x100650d7
cmp byte [0x102f1ac1], 0
jne 0x10065125
mov byte [0x102f1ac1], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102f1b44]
xor ebx, dword [0x102f1b40]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x102f1ac2]
xor al, bl
mov byte [esi + 0x102f1ac2], al
inc esi
cmp esi, 0x78
jb 0x10065090
jmp 0x10065125
xor esi, esi
nop dword [eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102f1b44]
xor ebx, dword [0x102f1b40]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x102f1ac2]
xor al, bl
mov byte [esi + 0x102f1ac2], al
inc esi
cmp esi, 0x78
jb 0x100650e0
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102f1b39
push 0x102f1ac2
call fcn.1004d640
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10065150
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102f1b48], 0
push ebx
push esi
je 0x100651ca
cmp byte [0x102f1b49], 0
jne 0x10065218
mov byte [0x102f1b49], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102f1be4]
xor ebx, dword [0x102f1be0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x102f1b4a]
xor al, bl
mov byte [esi + 0x102f1b4a], al
inc esi
cmp esi, 0x96
jb 0x10065180
jmp 0x10065218
xor esi, esi
nop dword [eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102f1be4]
xor ebx, dword [0x102f1be0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x102f1b4a]
xor al, bl
mov byte [esi + 0x102f1b4a], al
inc esi
cmp esi, 0x96
jb 0x100651d0
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102f1bdf
push 0x102f1b4a
call fcn.1004d640
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10065240
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102efb10], 0
push ebx
push esi
je 0x100652b7
cmp byte [0x102efb11], 0
jne 0x10065305
mov byte [0x102efb11], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102efb2c]
xor ebx, dword [0x102efb28]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x102efb12]
xor al, bl
mov byte [esi + 0x102efb12], al
inc esi
cmp esi, 0x15
jb 0x10065270
jmp 0x10065305
xor esi, esi
nop dword [eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102efb2c]
xor ebx, dword [0x102efb28]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x102efb12]
xor al, bl
mov byte [esi + 0x102efb12], al
inc esi
cmp esi, 0x15
jb 0x100652c0
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102efb26
push 0x102efb12
call fcn.1004d640
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10065330
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102efd38], 0
push ebx
push esi
je 0x100653a7
cmp byte [0x102efd39], 0
jne 0x100653f5
mov byte [0x102efd39], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102efd8c]
xor ebx, dword [0x102efd88]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x102efd3a]
xor al, bl
mov byte [esi + 0x102efd3a], al
inc esi
cmp esi, 0x48
jb 0x10065360
jmp 0x100653f5
xor esi, esi
nop dword [eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102efd8c]
xor ebx, dword [0x102efd88]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x102efd3a]
xor al, bl
mov byte [esi + 0x102efd3a], al
inc esi
cmp esi, 0x48
jb 0x100653b0
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102efd81
push 0x102efd3a
call fcn.1004d640
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10065420
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102efdc0], 0
push ebx
push esi
je 0x10065497
cmp byte [0x102efdc1], 0
jne 0x100654e5
mov byte [0x102efdc1], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102efe0c]
xor ebx, dword [0x102efe08]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x102efdc2]
xor al, bl
mov byte [esi + 0x102efdc2], al
inc esi
cmp esi, 0x43
jb 0x10065450
jmp 0x100654e5
xor esi, esi
nop dword [eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102efe0c]
xor ebx, dword [0x102efe08]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x102efdc2]
xor al, bl
mov byte [esi + 0x102efdc2], al
inc esi
cmp esi, 0x43
jb 0x100654a0
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102efe04
push 0x102efdc2
call fcn.1004d640
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10065510
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102efe10], 0
push ebx
push esi
je 0x10065587
cmp byte [0x102efe11], 0
jne 0x100655d5
mov byte [0x102efe11], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102efe54]
xor ebx, dword [0x102efe50]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x102efe12]
xor al, bl
mov byte [esi + 0x102efe12], al
inc esi
cmp esi, 0x3b
jb 0x10065540
jmp 0x100655d5
xor esi, esi
nop dword [eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102efe54]
xor ebx, dword [0x102efe50]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x102efe12]
xor al, bl
mov byte [esi + 0x102efe12], al
inc esi
cmp esi, 0x3b
jb 0x10065590
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102efe4c
push 0x102efe12
call fcn.1004d640
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4