joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10149a00
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b0080], 0
push esi
jne 0x10149a60
mov byte [0x104b0080], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b0094]
xor ebx, dword [0x104b0090]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b0081], cl
inc eax
cmp eax, 0xf
jb 0x10149a20
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b008f
push 0x104b0081
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10149c30
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ae5e0], 0
push esi
jne 0x10149c90
mov byte [0x104ae5e0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ae5f4]
xor ebx, dword [0x104ae5f0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ae5e1], cl
inc eax
cmp eax, 0xd
jb 0x10149c50
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ae5ed
push 0x104ae5e1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10149df0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104af230], 0
push esi
jne 0x10149e50
mov byte [0x104af230], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104af244]
xor ebx, dword [0x104af240]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104af231], cl
inc eax
cmp eax, 0xb
jb 0x10149e10
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104af23b
push 0x104af231
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1014a050
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b03f0], 0
push esi
jne 0x1014a0b0
mov byte [0x104b03f0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b0404]
xor ebx, dword [0x104b0400]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b03f1], cl
inc eax
cmp eax, 0xe
jb 0x1014a070
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b03fe
push 0x104b03f1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x1014a5d0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104addb0], 0
push esi
jne 0x1014a630
mov byte [0x104addb0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104addc4]
xor ebx, dword [0x104addc0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104addb1], cl
inc eax
cmp eax, 0xb
jb 0x1014a5f0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104addbb
push 0x104addb1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1014a900
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ae7f0], 0
push esi
jne 0x1014a960
mov byte [0x104ae7f0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ae804]
xor ebx, dword [0x104ae800]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ae7f1], cl
inc eax
cmp eax, 0xd
jb 0x1014a920
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ae7fd
push 0x104ae7f1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1014ac40
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104add40], 0
push esi
jne 0x1014aca0
mov byte [0x104add40], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104add54]
xor ebx, dword [0x104add50]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104add41], cl
inc eax
cmp eax, 0xc
jb 0x1014ac60
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104add4c
push 0x104add41
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1014acc0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104af310], 0
push esi
jne 0x1014ad20
mov byte [0x104af310], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104af32c]
xor ebx, dword [0x104af328]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104af311], cl
inc eax
cmp eax, 0x12
jb 0x1014ace0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104af322
push 0x104af311
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x1014ad40
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ade80], 0
push esi
jne 0x1014ada0
mov byte [0x104ade80], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104adea4]
xor ebx, dword [0x104adea0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ade81], cl
inc eax
cmp eax, 0x18
jb 0x1014ad60
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ade98
push 0x104ade81
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1014b8f0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104afe50], 0
push esi
jne 0x1014b950
mov byte [0x104afe50], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104afe64]
xor ebx, dword [0x104afe60]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104afe51], cl
inc eax
cmp eax, 0xb
jb 0x1014b910
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104afe5b
push 0x104afe51
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1014bd60
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ae510], 0
push esi
jne 0x1014bdc0
mov byte [0x104ae510], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ae52c]
xor ebx, dword [0x104ae528]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ae511], cl
inc eax
cmp eax, 0x14
jb 0x1014bd80
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ae524
push 0x104ae511
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1014bf50
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104af410], 0
push esi
jne 0x1014bfb0
mov byte [0x104af410], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104af42c]
xor ebx, dword [0x104af428]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104af411], cl
inc eax
cmp eax, 0x13
jb 0x1014bf70
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104af423
push 0x104af411
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x1014c1c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104af3e0], 0
push esi
jne 0x1014c220
mov byte [0x104af3e0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104af3f4]
xor ebx, dword [0x104af3f0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104af3e1], cl
inc eax
cmp eax, 0xd
jb 0x1014c1e0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104af3ed
push 0x104af3e1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1014c450
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104acb80], 0
push esi
jne 0x1014c4b0
mov byte [0x104acb80], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104acb9c]
xor ebx, dword [0x104acb98]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104acb81], cl
inc eax
cmp eax, 0x11
jb 0x1014c470
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104acb91
push 0x104acb81
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1014c8f0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b0e50], 0
push esi
jne 0x1014c950
mov byte [0x104b0e50], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b0e64]
xor ebx, dword [0x104b0e60]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b0e51], cl
inc eax
cmp eax, 0xe
jb 0x1014c910
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b0e5e
push 0x104b0e51
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1014c970
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104affe0], 0
push esi
jne 0x1014c9d0
mov byte [0x104affe0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104afff4]
xor ebx, dword [0x104afff0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104affe1], cl
inc eax
cmp eax, 0xe
jb 0x1014c990
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104affee
push 0x104affe1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x1014cb30
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104aea90], 0
push esi
jne 0x1014cb90
mov byte [0x104aea90], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104aeaa4]
xor ebx, dword [0x104aeaa0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104aea91], cl
inc eax
cmp eax, 0xc
jb 0x1014cb50
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104aea9c
push 0x104aea91
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1014cd20
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ad180], 0
push esi
jne 0x1014cd80
mov byte [0x104ad180], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ad19c]
xor ebx, dword [0x104ad198]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ad181], cl
inc eax
cmp eax, 0x16
jb 0x1014cd40
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ad196
push 0x104ad181
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1014cda0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104acda0], 0
push esi
jne 0x1014ce00
mov byte [0x104acda0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104acdbc]
xor ebx, dword [0x104acdb8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104acda1], cl
inc eax
cmp eax, 0x15
jb 0x1014cdc0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104acdb5
push 0x104acda1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1014ce20
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b0330], 0
push esi
jne 0x1014ce80
mov byte [0x104b0330], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b034c]
xor ebx, dword [0x104b0348]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b0331], cl
inc eax
cmp eax, 0x14
jb 0x1014ce40
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b0344
push 0x104b0331
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x1014cea0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ae310], 0
push esi
jne 0x1014cf00
mov byte [0x104ae310], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ae32c]
xor ebx, dword [0x104ae328]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ae311], cl
inc eax
cmp eax, 0x14
jb 0x1014cec0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ae324
push 0x104ae311
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1014cf20
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ad140], 0
push esi
jne 0x1014cf80
mov byte [0x104ad140], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ad15c]
xor ebx, dword [0x104ad158]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ad141], cl
inc eax
cmp eax, 0x15
jb 0x1014cf40
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ad155
push 0x104ad141
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1014cfa0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ac610], 0
push esi
jne 0x1014d000
mov byte [0x104ac610], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ac634]
xor ebx, dword [0x104ac630]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ac611], cl
inc eax
cmp eax, 0x1b
jb 0x1014cfc0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ac62b
push 0x104ac611
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1014d020
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b10a0], 0
push esi
jne 0x1014d080
mov byte [0x104b10a0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b10bc]
xor ebx, dword [0x104b10b8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b10a1], cl
inc eax
cmp eax, 0x15
jb 0x1014d040
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b10b5
push 0x104b10a1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x1014d0a0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ac950], 0
push esi
jne 0x1014d100
mov byte [0x104ac950], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ac974]
xor ebx, dword [0x104ac970]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ac951], cl
inc eax
cmp eax, 0x1b
jb 0x1014d0c0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ac96b
push 0x104ac951
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1014d120
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b04e0], 0
push esi
jne 0x1014d180
mov byte [0x104b04e0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b04fc]
xor ebx, dword [0x104b04f8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b04e1], cl
inc eax
cmp eax, 0x14
jb 0x1014d140
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b04f4
push 0x104b04e1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1014d3e0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104afaf0], 0
push esi
jne 0x1014d440
mov byte [0x104afaf0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104afb0c]
xor ebx, dword [0x104afb08]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104afaf1], cl
inc eax
cmp eax, 0x11
jb 0x1014d400
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104afb01
push 0x104afaf1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1014dba0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ae5a0], 0
push esi
jne 0x1014dc00
mov byte [0x104ae5a0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ae5b4]
xor ebx, dword [0x104ae5b0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ae5a1], cl
inc eax
cmp eax, 0xc
jb 0x1014dbc0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ae5ac
push 0x104ae5a1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x1014dc20
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ad470], 0
push esi
jne 0x1014dc80
mov byte [0x104ad470], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ad48c]
xor ebx, dword [0x104ad488]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ad471], cl
inc eax
cmp eax, 0x11
jb 0x1014dc40
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ad481
push 0x104ad471
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1014dca0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104af730], 0
push esi
jne 0x1014dd00
mov byte [0x104af730], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104af74c]
xor ebx, dword [0x104af748]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104af731], cl
inc eax
cmp eax, 0x11
jb 0x1014dcc0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104af741
push 0x104af731
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1014dd20
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b0440], 0
push esi
jne 0x1014dd80
mov byte [0x104b0440], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b045c]
xor ebx, dword [0x104b0458]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b0441], cl
inc eax
cmp eax, 0x12
jb 0x1014dd40
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b0452
push 0x104b0441
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1014e1c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b0fb0], 0
push esi
jne 0x1014e220
mov byte [0x104b0fb0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b0fc4]
xor ebx, dword [0x104b0fc0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b0fb1], cl
inc eax
cmp eax, 0xc
jb 0x1014e1e0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b0fbc
push 0x104b0fb1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4