joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10070030
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi], 0
lea edi, [esi + 2]
je 0x10070097
cmp byte [esi + 1], 0
jne 0x100700dc
xor ecx, ecx
mov byte [esi + 1], 1
mov dword [ebp - 8], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x54]
xor ebx, dword [esi + 0x50]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 8]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [edi + ecx]
xor al, bl
mov byte [edi + ecx], al
inc ecx
mov dword [ebp - 8], ecx
cmp ecx, 0x4e
jb 0x10070056
jmp 0x100700dc
xor ecx, ecx
mov dword [ebp - 8], ecx
nop dword [eax]
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x54]
xor ebx, dword [esi + 0x50]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 8]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [edi + ecx], al
inc ecx
mov dword [ebp - 8], ecx
cmp ecx, 0x4e
jb 0x100700a0
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
lea eax, [esi + 0x4f]
push eax
push edi
call fcn.10054040
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10070100
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x10317b00], 0
push ebx
push esi
je 0x10070171
cmp byte [0x10317b01], 0
jne 0x100701b2
mov byte [0x10317b01], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x10317b64]
xor ebx, dword [0x10317b60]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10317b02], al
inc esi
cmp esi, 0x5e
jb 0x10070130
jmp 0x100701b2
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10317b64]
xor ebx, dword [0x10317b60]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10317b02], al
inc esi
cmp esi, 0x5e
jb 0x10070173
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x10317b5f
push 0x10317b02
call fcn.10054040
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x100701e0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x103161c8], 0
push ebx
push esi
je 0x10070251
cmp byte [0x103161c9], 0
jne 0x10070292
mov byte [0x103161c9], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x103161dc]
xor ebx, dword [0x103161d8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x103161ca], al
inc esi
cmp esi, 0xe
jb 0x10070210
jmp 0x10070292
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x103161dc]
xor ebx, dword [0x103161d8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x103161ca], al
inc esi
cmp esi, 0xe
jb 0x10070253
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x103161d7
push 0x103161ca
call fcn.10054040
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x100702c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x10317e28], 0
push ebx
push esi
je 0x10070331
cmp byte [0x10317e29], 0
jne 0x10070372
mov byte [0x10317e29], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x10317e74]
xor ebx, dword [0x10317e70]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10317e2a], al
inc esi
cmp esi, 0x40
jb 0x100702f0
jmp 0x10070372
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10317e74]
xor ebx, dword [0x10317e70]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10317e2a], al
inc esi
cmp esi, 0x40
jb 0x10070333
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x10317e69
push 0x10317e2a
call fcn.10054040
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x100703a0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x103165f0], 0
push ebx
push esi
je 0x10070411
cmp byte [0x103165f1], 0
jne 0x10070452
mov byte [0x103165f1], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x1031665c]
xor ebx, dword [0x10316658]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x103165f2], al
inc esi
cmp esi, 0x66
jb 0x100703d0
jmp 0x10070452
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x1031665c]
xor ebx, dword [0x10316658]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x103165f2], al
inc esi
cmp esi, 0x66
jb 0x10070413
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x10316657
push 0x103165f2
call fcn.10054040
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10070480
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x10318148], 0
push ebx
push esi
je 0x100704f1
cmp byte [0x10318149], 0
jne 0x10070532
mov byte [0x10318149], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x1031819c]
xor ebx, dword [0x10318198]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1031814a], al
inc esi
cmp esi, 0x47
jb 0x100704b0
jmp 0x10070532
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x1031819c]
xor ebx, dword [0x10318198]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1031814a], al
inc esi
cmp esi, 0x47
jb 0x100704f3
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x10318190
push 0x1031814a
call fcn.10054040
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10070560
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x103181a0], 0
push ebx
push esi
je 0x100705d1
cmp byte [0x103181a1], 0
jne 0x10070612
mov byte [0x103181a1], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x10318224]
xor ebx, dword [0x10318220]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + str.Ze__n], al
inc esi
cmp esi, 0x77
jb 0x10070590
jmp 0x10070612
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10318224]
xor ebx, dword [0x10318220]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + str.Ze__n], al
inc esi
cmp esi, 0x77
jb 0x100705d3
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x10318218
push str.Ze__n
call fcn.10054040
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10070640
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x10318250], 0
push ebx
push esi
je 0x100706b1
cmp byte [0x10318251], 0
jne 0x100706f2
mov byte [0x10318251], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x10318294]
xor ebx, dword [0x10318290]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10318252], al
inc esi
cmp esi, 0x3d
jb 0x10070670
jmp 0x100706f2
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10318294]
xor ebx, dword [0x10318290]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10318252], al
inc esi
cmp esi, 0x3d
jb 0x100706b3
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x1031828e
push 0x10318252
call fcn.10054040
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10070720
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x103183d0], 0
push ebx
push esi
je 0x10070791
cmp byte [0x103183d1], 0
jne 0x100707d2
mov byte [0x103183d1], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x10318434]
xor ebx, dword [0x10318430]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x103183d2], al
inc esi
cmp esi, 0x58
jb 0x10070750
jmp 0x100707d2
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10318434]
xor ebx, dword [0x10318430]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x103183d2], al
inc esi
cmp esi, 0x58
jb 0x10070793
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x10318429
push 0x103183d2
call fcn.10054040
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10070800
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x10318510], 0
push ebx
push esi
je 0x10070871
cmp byte [0x10318511], 0
jne 0x100708b2
mov byte [0x10318511], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x1031858c]
xor ebx, dword [0x10318588]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10318512], al
inc esi
cmp esi, 0x71
jb 0x10070830
jmp 0x100708b2
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x1031858c]
xor ebx, dword [0x10318588]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10318512], al
inc esi
cmp esi, 0x71
jb 0x10070873
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x10318582
push 0x10318512
call fcn.10054040
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x100708e0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x10318600], 0
push ebx
push esi
je 0x10070951
cmp byte [0x10318601], 0
jne 0x10070992
mov byte [0x10318601], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x10318644]
xor ebx, dword [0x10318640]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + str.J_rM], al
inc esi
cmp esi, 0x37
jb 0x10070910
jmp 0x10070992
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10318644]
xor ebx, dword [0x10318640]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + str.J_rM], al
inc esi
cmp esi, 0x37
jb 0x10070953
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x10318638
push str.J_rM
call fcn.10054040
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x100709c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x10318818], 0
push ebx
push esi
je 0x10070a34
cmp byte [0x10318819], 0
jne 0x10070a78
mov byte [0x10318819], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x103188c4]
xor ebx, dword [0x103188c0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1031881a], al
inc esi
cmp esi, 0xa3
jb 0x100709f0
jmp 0x10070a78
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x103188c4]
xor ebx, dword [0x103188c0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1031881a], al
inc esi
cmp esi, 0xa3
jb 0x10070a36
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x103188bc
push 0x1031881a
call fcn.10054040
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10070aa0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x10318938], 0
push ebx
push esi
je 0x10070b11
cmp byte [0x10318939], 0
jne 0x10070b52
mov byte [0x10318939], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x103189bc]
xor ebx, dword [0x103189b8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + str.F_a5], al
inc esi
cmp esi, 0x78
jb 0x10070ad0
jmp 0x10070b52
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x103189bc]
xor ebx, dword [0x103189b8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + str.F_a5], al
inc esi
cmp esi, 0x78
jb 0x10070b13
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x103189b1
push str.F_a5
call fcn.10054040
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10070b80
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x103189c0], 0
push ebx
push esi
je 0x10070bf4
cmp byte [0x103189c1], 0
jne 0x10070c38
mov byte [0x103189c1], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x10318a5c]
xor ebx, dword [0x10318a58]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x103189c2], al
inc esi
cmp esi, 0x96
jb 0x10070bb0
jmp 0x10070c38
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10318a5c]
xor ebx, dword [0x10318a58]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x103189c2], al
inc esi
cmp esi, 0x96
jb 0x10070bf6
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x10318a57
push 0x103189c2
call fcn.10054040
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10070c60
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x10316bb0], 0
push ebx
push esi
je 0x10070cd1
cmp byte [0x10316bb1], 0
jne 0x10070d12
mov byte [0x10316bb1], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x10316c04]
xor ebx, dword [0x10316c00]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10316bb2], al
inc esi
cmp esi, 0x48
jb 0x10070c90
jmp 0x10070d12
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10316c04]
xor ebx, dword [0x10316c00]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10316bb2], al
inc esi
cmp esi, 0x48
jb 0x10070cd3
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x10316bf9
push 0x10316bb2
call fcn.10054040
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10070d40
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x10316c38], 0
push ebx
push esi
je 0x10070db1
cmp byte [0x10316c39], 0
jne 0x10070df2
mov byte [0x10316c39], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x10316c84]
xor ebx, dword [0x10316c80]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10316c3a], al
inc esi
cmp esi, 0x43
jb 0x10070d70
jmp 0x10070df2
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10316c84]
xor ebx, dword [0x10316c80]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10316c3a], al
inc esi
cmp esi, 0x43
jb 0x10070db3
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x10316c7c
push 0x10316c3a
call fcn.10054040
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10070e20
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x10316c88], 0
push ebx
push esi
je 0x10070e91
cmp byte [0x10316c89], 0
jne 0x10070ed2
mov byte [0x10316c89], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x10316ccc]
xor ebx, dword [0x10316cc8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10316c8a], al
inc esi
cmp esi, 0x3b
jb 0x10070e50
jmp 0x10070ed2
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10316ccc]
xor ebx, dword [0x10316cc8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10316c8a], al
inc esi
cmp esi, 0x3b
jb 0x10070e93
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x10316cc4
push 0x10316c8a
call fcn.10054040
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10070f00
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x10316d50], 0
push ebx
push esi
je 0x10070f71
cmp byte [0x10316d51], 0
jne 0x10070fb2
mov byte [0x10316d51], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x10316da4]
xor ebx, dword [0x10316da0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10316d52], al
inc esi
cmp esi, 0x4d
jb 0x10070f30
jmp 0x10070fb2
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10316da4]
xor ebx, dword [0x10316da0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10316d52], al
inc esi
cmp esi, 0x4d
jb 0x10070f73
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x10316d9e
push 0x10316d52
call fcn.10054040
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10070fe0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x10316dd8], 0
push ebx
push esi
je 0x10071051
cmp byte [0x10316dd9], 0
jne 0x10071092
mov byte [0x10316dd9], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x10316df4]
xor ebx, dword [0x10316df0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10316dda], al
inc esi
cmp esi, 0xf
jb 0x10071010
jmp 0x10071092
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10316df4]
xor ebx, dword [0x10316df0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10316dda], al
inc esi
cmp esi, 0xf
jb 0x10071053
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x10316de8
push 0x10316dda
call fcn.10054040
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x100710c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x10317010], 0
push ebx
push esi
je 0x10071131
cmp byte [0x10317011], 0
jne 0x10071172
mov byte [0x10317011], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x1031706c]
xor ebx, dword [0x10317068]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10317012], al
inc esi
cmp esi, 0x50
jb 0x100710f0
jmp 0x10071172
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x1031706c]
xor ebx, dword [0x10317068]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10317012], al
inc esi
cmp esi, 0x50
jb 0x10071133
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x10317061
push 0x10317012
call fcn.10054040
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x100711a0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x10317168], 0
push ebx
push esi
je 0x10071211
cmp byte [0x10317169], 0
jne 0x10071252
mov byte [0x10317169], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x103171b4]
xor ebx, dword [0x103171b0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1031716a], al
inc esi
cmp esi, 0x42
jb 0x100711d0
jmp 0x10071252
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x103171b4]
xor ebx, dword [0x103171b0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1031716a], al
inc esi
cmp esi, 0x42
jb 0x10071213
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x103171ab
push 0x1031716a
call fcn.10054040
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10071280
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x10317238], 0
push ebx
push esi
je 0x100712f1
cmp byte [0x10317239], 0
jne 0x10071332
mov byte [0x10317239], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x1031728c]
xor ebx, dword [0x10317288]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1031723a], al
inc esi
cmp esi, 0x49
jb 0x100712b0
jmp 0x10071332
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x1031728c]
xor ebx, dword [0x10317288]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1031723a], al
inc esi
cmp esi, 0x49
jb 0x100712f3
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x10317282
push 0x1031723a
call fcn.10054040
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4