joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10018a4a
Capabilities:
Encode data using xor
Resolve function by fnv-1a hash

Disassembly:
push ebx
push edi
push esi
sub esp, 0x1c
mov ebx, dword [esp + 0x30]
mov edi, dword [esp + 0x2c]
mov ecx, dword [0x100512f8]
test ecx, ecx
jne 0x10018b19
mov esi, dword [0x100512d8]
test esi, esi
jne 0x10018a81
mov ecx, 0xf8f45725
call fcn.1001bba6
mov esi, eax
mov dword [0x100512d8], eax
mov dword [esp + 0xe], 0x2c3b1232
mov dword [esp + 0x12], 0x202d0538
mov word [esp + 0x16], 0x182b
mov byte [esp + 0x18], 0
mov word [esp + 0xc], 0x2047
xor eax, eax
inc eax
mov ecx, eax
add cl, 0x44
xor byte [esp + eax + 0xc], cl
inc eax
cmp eax, 0xc
jne 0x10018aa7
mov byte [esp + 0x18], 0
mov ecx, dword [0x100512dc]
test ecx, ecx
jne 0x10018ad6
mov ecx, 0x53b2070f
call fcn.1001bba6
mov ecx, eax
mov dword [0x100512dc], eax
mov dword [esp + 2], 0x20382630
mov word [esp + 6], 0x7979
mov byte [esp + 8], 0
mov word [esp], 0x2161
xor eax, eax
inc eax
mov edx, eax
add dl, 0x44
xor byte [esp + eax], dl
inc eax
cmp eax, 8
jne 0x10018af3
mov eax, esp
mov byte [eax + 8], 0
push eax
call ecx
lea ecx, [esp + 0xc]
push ecx
push eax
call esi
mov ecx, eax
mov dword [0x100512f8], eax
push ebx
push edi
call ecx
add esp, 0x1c
pop esi
pop edi
pop ebx
ret 8

Function at 0x10018e88
Capabilities:
Encode data using xor
Resolve function by fnv-1a hash

Disassembly:
push edi
push esi
sub esp, 0x1c
mov edi, dword [esp + 0x28]
mov eax, dword [0x100512fc]
test eax, eax
jne 0x10018f4b
mov esi, dword [0x100512d8]
test esi, esi
jne 0x10018eb9
mov ecx, 0xf8f45725
call fcn.1001bba6
mov esi, eax
mov dword [0x100512d8], eax
mov dword [esp + 0xe], 0x3a311432
mov dword [esp + 0x12], 0x19212e3e
mov dword [esp + 0x16], 0x352227
mov word [esp + 0xc], 0x2047
xor eax, eax
inc eax
mov ecx, eax
add cl, 0x44
xor byte [esp + eax + 0xc], cl
inc eax
cmp eax, 0xd
jne 0x10018edb
mov byte [esp + 0x19], 0
mov ecx, dword [0x100512dc]
test ecx, ecx
jne 0x10018f0a
mov ecx, 0x53b2070f
call fcn.1001bba6
mov ecx, eax
mov dword [0x100512dc], eax
mov dword [esp + 2], 0x252d2934
mov word [esp + 6], 0x7979
mov byte [esp + 8], 0
mov word [esp], 0x206b
xor eax, eax
inc eax
mov edx, eax
add dl, 0x44
xor byte [esp + eax], dl
inc eax
cmp eax, 8
jne 0x10018f27
mov eax, esp
mov byte [eax + 8], 0
push eax
call ecx
lea ecx, [esp + 0xc]
push ecx
push eax
call esi
mov dword [0x100512fc], eax
push edi
call eax
add esp, 0x1c
pop esi
pop edi
ret 4
Function at 0x10018f56
Capabilities:
Encode data using xor
Resolve function by fnv-1a hash

Disassembly:
push edi
push esi
sub esp, 0x24
mov edi, dword [esp + 0x30]
mov ecx, dword [0x10051300]
test ecx, ecx
jne 0x10019019
mov esi, dword [0x100512d8]
test esi, esi
jne 0x10018f88
mov ecx, 0xf8f45725
call fcn.1001bba6
mov esi, eax
mov dword [0x100512d8], eax
mov dword [esp + 0x1c], 0x39233a17
mov dword [esp + 0x20], 0x283c2c
movaps xmm0, xmmword [str.Q051]
movups xmmword [esp + 0xc], xmm0
xor eax, eax
inc eax
mov ecx, eax
add cl, 0x44
xor byte [esp + eax + 0xc], cl
inc eax
cmp eax, 0x17
jne 0x10018fa7
mov byte [esp + 0x23], 0
mov ecx, dword [0x100512dc]
test ecx, ecx
jne 0x10018fd6
mov ecx, 0x53b2070f
call fcn.1001bba6
mov ecx, eax
mov dword [0x100512dc], eax
mov dword [esp + 2], 0x252d2934
mov word [esp + 6], 0x7979
mov byte [esp + 8], 0
mov word [esp], 0x206b
xor eax, eax
inc eax
mov edx, eax
add dl, 0x44
xor byte [esp + eax], dl
inc eax
cmp eax, 8
jne 0x10018ff3
mov eax, esp
mov byte [eax + 8], 0
push eax
call ecx
lea ecx, [esp + 0xc]
push ecx
push eax
call esi
mov ecx, eax
mov dword [0x10051300], eax
push edi
call ecx
add esp, 0x24
pop esi
pop edi
ret 4

Function at 0x10019024
Capabilities:
Encode data using xor
Resolve function by fnv-1a hash

Disassembly:
push esi
sub esp, 0x1c
mov ecx, dword [0x10051304]
test ecx, ecx
jne 0x100190e9
mov esi, dword [0x100512d8]
test esi, esi
jne 0x10019051
mov ecx, 0xf8f45725
call fcn.1001bba6
mov esi, eax
mov dword [0x100512d8], eax
mov dword [esp + 0xe], 0x2a211332
mov dword [esp + 0x12], 0x38230821
mov word [esp + 0x16], 0x3b20
mov byte [esp + 0x18], 0
mov word [esp + 0xc], 0x2047
xor eax, eax
inc eax
mov ecx, eax
add cl, 0x44
xor byte [esp + eax + 0xc], cl
inc eax
cmp eax, 0xc
jne 0x10019077
mov byte [esp + 0x18], 0
mov ecx, dword [0x100512dc]
test ecx, ecx
jne 0x100190a6
mov ecx, 0x53b2070f
call fcn.1001bba6
mov ecx, eax
mov dword [0x100512dc], eax
mov dword [esp + 2], 0x252d2934
mov word [esp + 6], 0x7979
mov byte [esp + 8], 0
mov word [esp], 0x206b
xor eax, eax
inc eax
mov edx, eax
add dl, 0x44
xor byte [esp + eax], dl
inc eax
cmp eax, 8
jne 0x100190c3
mov eax, esp
mov byte [eax + 8], 0
push eax
call ecx
lea ecx, [esp + 0xc]
push ecx
push eax
call esi
mov ecx, eax
mov dword [0x10051304], eax
call ecx
add esp, 0x1c
pop esi
ret
Function at 0x10019160
Capabilities:
Encode data using xor
Resolve function by fnv-1a hash

Disassembly:
push edi
push esi
sub esp, 0x1c
mov edi, dword [esp + 0x28]
mov eax, dword [0x10051308]
test eax, eax
jne 0x10019227
mov esi, dword [0x100512d8]
test esi, esi
jne 0x10019191
mov ecx, 0xf8f45725
call fcn.1001bba6
mov esi, eax
mov dword [0x100512d8], eax
mov dword [esp + 0xe], 0x2a270b32
mov dword [esp + 0x12], 0x2418272b
mov word [esp + 0x16], 0x2a23
mov byte [esp + 0x18], 0
mov word [esp + 0xc], 0x2047
xor eax, eax
inc eax
mov ecx, eax
add cl, 0x44
xor byte [esp + eax + 0xc], cl
inc eax
cmp eax, 0xc
jne 0x100191b7
mov byte [esp + 0x18], 0
mov ecx, dword [0x100512dc]
test ecx, ecx
jne 0x100191e6
mov ecx, 0x53b2070f
call fcn.1001bba6
mov ecx, eax
mov dword [0x100512dc], eax
mov dword [esp + 2], 0x252d2934
mov word [esp + 6], 0x7979
mov byte [esp + 8], 0
mov word [esp], 0x206b
xor eax, eax
inc eax
mov edx, eax
add dl, 0x44
xor byte [esp + eax], dl
inc eax
cmp eax, 8
jne 0x10019203
mov eax, esp
mov byte [eax + 8], 0
push eax
call ecx
lea ecx, [esp + 0xc]
push ecx
push eax
call esi
mov dword [0x10051308], eax
push edi
call eax
add esp, 0x1c
pop esi
pop edi
ret 4

Function at 0x10019232
Capabilities:
Encode data using xor
Resolve function by fnv-1a hash

Disassembly:
push edi
push esi
sub esp, 0x1c
mov edi, dword [esp + 0x28]
mov ecx, dword [0x1005130c]
test ecx, ecx
jne 0x100192f8
mov esi, dword [0x100512d8]
test esi, esi
jne 0x10019264
mov ecx, 0xf8f45725
call fcn.1001bba6
mov esi, eax
mov dword [0x100512d8], eax
mov dword [esp + 0xe], 0x3b2d1132
mov dword [esp + 0x12], 0x23232239
mov dword [esp + 0x16], 0x7370b
mov word [esp + 0xc], 0x2047
xor eax, eax
inc eax
mov ecx, eax
add cl, 0x44
xor byte [esp + eax + 0xc], cl
inc eax
cmp eax, 0xd
jne 0x10019286
mov byte [esp + 0x19], 0
mov ecx, dword [0x100512dc]
test ecx, ecx
jne 0x100192b5
mov ecx, 0x53b2070f
call fcn.1001bba6
mov ecx, eax
mov dword [0x100512dc], eax
mov dword [esp + 2], 0x252d2934
mov word [esp + 6], 0x7979
mov byte [esp + 8], 0
mov word [esp], 0x206b
xor eax, eax
inc eax
mov edx, eax
add dl, 0x44
xor byte [esp + eax], dl
inc eax
cmp eax, 8
jne 0x100192d2
mov eax, esp
mov byte [eax + 8], 0
push eax
call ecx
lea ecx, [esp + 0xc]
push ecx
push eax
call esi
mov ecx, eax
mov dword [0x1005130c], eax
push edi
call ecx
add esp, 0x1c
pop esi
pop edi
ret 4
Function at 0x10019304
Capabilities:
Encode data using xor
Resolve function by fnv-1a hash

Disassembly:
push ebp
push ebx
push edi
push esi
mov ebx, dword [esp + 0x14]
push ebx
call fcn.10002bee
mov esi, eax
movzx eax, word [ebx + 2]
cmp word [ebx], 0x5c
jne 0x1001934f
cmp ax, 0x5c
jne 0x1001934f
mov ebp, 2
cmp esi, 3
jl 0x10019341
mov ebp, 2
cmp word [ebx + ebp*2], 0x5c
je 0x10019341
inc ebp
cmp esi, ebp
jne 0x10019333
mov ebp, esi
inc ebp
cmp ebp, esi
jge 0x100193b0
cmp word [ebx + ebp*2], 0x5c
jne 0x10019341
jmp 0x1001936b
mov edi, 3
cmp ax, 0x3a
jne 0x100193b2
mov ebp, 3
cmp word [ebx + 4], 0x5c
mov edi, 3
jne 0x100193b2
xor edi, edi
cmp ebp, esi
jge 0x100193b2
cmp word [ebx + ebp*2], 0x5c
jne 0x100193a9
mov word [ebx + ebp*2], 0
push ebx
call fcn.10019fca
add esp, 4
test eax, eax
je 0x100193a3
push 0
push ebx
call fcn.10016ae8
test eax, eax
jne 0x100193a3
call fcn.100013b0
cmp eax, 0xb7
jne 0x100193b9
mov word [ebx + ebp*2], 0x5c
inc ebp
cmp esi, ebp
jne 0x10019371
jmp 0x100193b2
xor edi, edi
mov eax, edi
pop esi
pop edi
pop ebx
pop ebp
ret
mov word [ebx + ebp*2], 0x5c
pop esi
pop edi
pop ebx
pop ebp
jmp fcn.100013b0

Function at 0x100195fc
Capabilities:
Encode data using xor
Resolve function by fnv-1a hash

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x20
mov ebp, dword [esp + 0x3c]
mov ebx, dword [esp + 0x38]
mov edi, dword [esp + 0x34]
mov ecx, dword [0x10051310]
test ecx, ecx
jne 0x100196be
mov esi, dword [0x100512d8]
test esi, esi
jne 0x10019638
mov ecx, 0xf8f45725
call fcn.1001bba6
mov esi, eax
mov dword [0x100512d8], eax
mov byte [esp + 0x1c], 0
movaps xmm0, xmmword [str.O5_]
movups xmmword [esp + 0xc], xmm0
xor eax, eax
inc eax
mov ecx, eax
add cl, 0x44
xor byte [esp + eax + 0xc], cl
inc eax
cmp eax, 0x10
jne 0x1001964c
mov byte [esp + 0x1c], 0
mov ecx, dword [0x100512dc]
test ecx, ecx
jne 0x1001967b
mov ecx, 0x53b2070f
call fcn.1001bba6
mov ecx, eax
mov dword [0x100512dc], eax
mov dword [esp + 2], 0x20382630
mov word [esp + 6], 0x7979
mov byte [esp + 8], 0
mov word [esp], 0x2161
xor eax, eax
inc eax
mov edx, eax
add dl, 0x44
xor byte [esp + eax], dl
inc eax
cmp eax, 8
jne 0x10019698
mov eax, esp
mov byte [eax + 8], 0
push eax
call ecx
lea ecx, [esp + 0xc]
push ecx
push eax
call esi
mov ecx, eax
mov dword [0x10051310], eax
push ebp
push ebx
push edi
call ecx
add esp, 0x20
pop esi
pop edi
pop ebx
pop ebp
ret 0xc
Function at 0x100196ce
Capabilities:
Encode data using xor
Resolve function by fnv-1a hash

Disassembly:
push esi
sub esp, 0x20
mov ecx, dword [0x10051314]
test ecx, ecx
jne 0x1001977d
mov esi, dword [0x100512d8]
test esi, esi
jne 0x100196fb
mov ecx, 0xf8f45725
call fcn.1001bba6
mov esi, eax
mov dword [0x100512d8], eax
mov word [esp + 0x1c], 0x27
movaps xmm0, xmmword [0x1003ff10]
movups xmmword [esp + 0xc], xmm0
movups xmm0, xmmword [esp + 0xd]
xorps xmm0, xmmword [0x1003ff20]
movups xmmword [esp + 0xd], xmm0
mov ecx, dword [0x100512dc]
test ecx, ecx
jne 0x1001973a
mov ecx, 0x53b2070f
call fcn.1001bba6
mov ecx, eax
mov dword [0x100512dc], eax
mov dword [esp + 2], 0x252d2934
mov word [esp + 6], 0x7979
mov byte [esp + 8], 0
mov word [esp], 0x206b
xor eax, eax
inc eax
mov edx, eax
add dl, 0x44
xor byte [esp + eax], dl
inc eax
cmp eax, 8
jne 0x10019757
mov eax, esp
mov byte [eax + 8], 0
push eax
call ecx
lea ecx, [esp + 0xc]
push ecx
push eax
call esi
mov ecx, eax
mov dword [0x10051314], eax
call ecx
add esp, 0x20
pop esi
ret

Function at 0x10019784
Capabilities:
Encode data using xor
Resolve function by fnv-1a hash

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x24
mov ebp, dword [esp + 0x40]
mov ebx, dword [esp + 0x3c]
mov edi, dword [esp + 0x38]
mov ecx, dword [0x10051318]
test ecx, ecx
jne 0x10019850
mov esi, dword [0x100512d8]
test esi, esi
jne 0x100197c0
mov ecx, 0xf8f45725
call fcn.1001bba6
mov esi, eax
mov dword [0x100512d8], eax
mov dword [esp + 0x1c], 0x32233935
mov word [esp + 0x20], 0xf
movaps xmm0, xmmword [0x1003ff30]
movups xmmword [esp + 0xc], xmm0
xor eax, eax
inc eax
mov ecx, eax
add cl, 0x44
xor byte [esp + eax + 0xc], cl
inc eax
cmp eax, 0x15
jne 0x100197de
mov byte [esp + 0x21], 0
mov ecx, dword [0x100512dc]
test ecx, ecx
jne 0x1001980d
mov ecx, 0x53b2070f
call fcn.1001bba6
mov ecx, eax
mov dword [0x100512dc], eax
mov dword [esp + 2], 0x20382630
mov word [esp + 6], 0x7979
mov byte [esp + 8], 0
mov word [esp], 0x2161
xor eax, eax
inc eax
mov edx, eax
add dl, 0x44
xor byte [esp + eax], dl
inc eax
cmp eax, 8
jne 0x1001982a
mov eax, esp
mov byte [eax + 8], 0
push eax
call ecx
lea ecx, [esp + 0xc]
push ecx
push eax
call esi
mov ecx, eax
mov dword [0x10051318], eax
push ebp
push ebx
push edi
call ecx
add esp, 0x24
pop esi
pop edi
pop ebx
pop ebp
ret 0xc
Function at 0x10019860
Capabilities:
Encode data using xor
Resolve function by fnv-1a hash

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x24
mov ebp, dword [esp + 0x4c]
mov ebx, dword [esp + 0x48]
mov edi, dword [esp + 0x44]
mov esi, dword [esp + 0x40]
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x38]
mov ecx, dword [0x1005131c]
test ecx, ecx
jne 0x10019944
mov esi, dword [0x100512d8]
test esi, esi
jne 0x100198a8
mov ecx, 0xf8f45725
call fcn.1001bba6
mov esi, eax
mov dword [0x100512d8], eax
mov dword [esp + 0x1c], 0x32313038
mov word [esp + 0x20], 0x2b
movaps xmm0, xmmword [str.A__2_]
movups xmmword [esp + 0xc], xmm0
xor eax, eax
inc eax
mov ecx, eax
add cl, 0x44
xor byte [esp + eax + 0xc], cl
inc eax
cmp eax, 0x15
jne 0x100198c6
mov byte [esp + 0x21], 0
mov ecx, dword [0x100512dc]
test ecx, ecx
jne 0x100198f5
mov ecx, 0x53b2070f
call fcn.1001bba6
mov ecx, eax
mov dword [0x100512dc], eax
mov dword [esp + 2], 0x20382630
mov word [esp + 6], 0x7979
mov byte [esp + 8], 0
mov word [esp], 0x2161
xor eax, eax
inc eax
mov edx, eax
add dl, 0x44
xor byte [esp + eax], dl
inc eax
cmp eax, 8
jne 0x10019912
mov eax, esp
mov byte [eax + 8], 0
push eax
call ecx
lea ecx, [esp + 0xc]
push ecx
push eax
call esi
mov ecx, eax
mov dword [0x1005131c], eax
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x3c]
mov esi, dword [esp + 0x40]
push ebp
push ebx
push edi
push esi
push edx
push eax
call ecx
add esp, 0x24
pop esi
pop edi
pop ebx
pop ebp
ret 0x18

Function at 0x10019956
Capabilities:
Encode data using xor
Resolve function by fnv-1a hash

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x1c
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x4c]
mov esi, dword [esp + 0x48]
mov ebp, dword [esp + 0x44]
mov ebx, dword [esp + 0x40]
mov edi, dword [esp + 0x3c]
mov ecx, dword [0x10051320]
test ecx, ecx
jne 0x10019a37
mov esi, dword [0x100512d8]
test esi, esi
jne 0x1001999e
mov ecx, 0xf8f45725
call fcn.1001bba6
mov esi, eax
mov dword [0x100512d8], eax
movaps xmm0, xmmword [0x1003ff50]
movups xmmword [esp + 0xc], xmm0
xor eax, eax
inc eax
mov ecx, eax
add cl, 0x44
xor byte [esp + eax + 0xc], cl
inc eax
cmp eax, 0xf
jne 0x100199ad
mov byte [esp + 0x1b], 0
mov ecx, dword [0x100512dc]
test ecx, ecx
jne 0x100199dc
mov ecx, 0x53b2070f
call fcn.1001bba6
mov ecx, eax
mov dword [0x100512dc], eax
mov dword [esp + 2], 0x20382630
mov word [esp + 6], 0x7979
mov byte [esp + 8], 0
mov word [esp], 0x2161
xor eax, eax
inc eax
mov edx, eax
add dl, 0x44
xor byte [esp + eax], dl
inc eax
cmp eax, 8
jne 0x100199f9
mov eax, esp
mov byte [eax + 8], 0
push eax
call ecx
lea ecx, [esp + 0xc]
push ecx
push eax
call esi
mov ecx, eax
mov dword [0x10051320], eax
mov edi, dword [esp + 0x3c]
mov ebx, dword [esp + 0x40]
mov ebp, dword [esp + 0x44]
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x4c]
mov esi, dword [esp + 0x48]
push eax
push edx
push esi
push ebp
push ebx
push edi
push dword [esp + 0x50]
push dword [esp + 0x50]
push dword [esp + 0x50]
call ecx
add esp, 0x1c
pop esi
pop edi
pop ebx
pop ebp
ret 0x24
Function at 0x10019a56
Capabilities:
Encode data using xor
Resolve function by fnv-1a hash

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x1c
mov ebp, dword [esp + 0x44]
mov ebx, dword [esp + 0x40]
mov edi, dword [esp + 0x3c]
mov esi, dword [esp + 0x38]
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
mov ecx, dword [0x10051324]
test ecx, ecx
jne 0x10019b43
mov esi, dword [0x100512d8]
test esi, esi
jne 0x10019a9e
mov ecx, 0xf8f45725
call fcn.1001bba6
mov esi, eax
mov dword [0x100512d8], eax
mov dword [esp + 0xe], 0x3d2d1421
mov dword [esp + 0x12], 0x38202a1c
mov dword [esp + 0x16], 0x6280a2b
mov byte [esp + 0x1a], 0
mov word [esp + 0xc], 0x2052
xor eax, eax
inc eax
mov ecx, eax
add cl, 0x44
xor byte [esp + eax + 0xc], cl
inc eax
cmp eax, 0xe
jne 0x10019ac5
mov byte [esp + 0x1a], 0
mov ecx, dword [0x100512dc]
test ecx, ecx
jne 0x10019af4
mov ecx, 0x53b2070f
call fcn.1001bba6
mov ecx, eax
mov dword [0x100512dc], eax
mov dword [esp + 2], 0x20382630
mov word [esp + 6], 0x7979
mov byte [esp + 8], 0
mov word [esp], 0x2161
xor eax, eax
inc eax
mov edx, eax
add dl, 0x44
xor byte [esp + eax], dl
inc eax
cmp eax, 8
jne 0x10019b11
mov eax, esp
mov byte [eax + 8], 0
push eax
call ecx
lea ecx, [esp + 0xc]
push ecx
push eax
call esi
mov ecx, eax
mov dword [0x10051324], eax
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x34]
mov esi, dword [esp + 0x38]
push ebp
push ebx
push edi
push esi
push edx
push eax
call ecx
add esp, 0x1c
pop esi
pop edi
pop ebx
pop ebp
ret 0x18

Function at 0x10019b56
Capabilities:
Encode data using xor
Resolve function by fnv-1a hash

Disassembly:
push edi
push esi
sub esp, 0x18
mov edi, dword [esp + 0x24]
mov ecx, dword [0x10051328]
test ecx, ecx
jne 0x10019c1b
mov esi, dword [0x100512d8]
test esi, esi
jne 0x10019b88
mov ecx, 0xf8f45725
call fcn.1001bba6
mov esi, eax
mov dword [0x100512d8], eax
mov dword [esp + 0xe], 0x26240421
mov dword [esp + 0x12], 0x28072e39
mov word [esp + 0x16], 0x37
mov word [esp + 0xc], 0x2052
xor eax, eax
inc eax
mov ecx, eax
add cl, 0x44
xor byte [esp + eax + 0xc], cl
inc eax
cmp eax, 0xb
jne 0x10019ba9
mov byte [esp + 0x17], 0
mov ecx, dword [0x100512dc]
test ecx, ecx
jne 0x10019bd8
mov ecx, 0x53b2070f
call fcn.1001bba6
mov ecx, eax
mov dword [0x100512dc], eax
mov dword [esp + 2], 0x20382630
mov word [esp + 6], 0x7979
mov byte [esp + 8], 0
mov word [esp], 0x2161
xor eax, eax
inc eax
mov edx, eax
add dl, 0x44
xor byte [esp + eax], dl
inc eax
cmp eax, 8
jne 0x10019bf5
mov eax, esp
mov byte [eax + 8], 0
push eax
call ecx
lea ecx, [esp + 0xc]
push ecx
push eax
call esi
mov ecx, eax
mov dword [0x10051328], eax
push edi
call ecx
add esp, 0x18
pop esi
pop edi
ret 4
Function at 0x10019c26
Capabilities:
Encode data using xor
Resolve function by fnv-1a hash

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x20
mov ebp, dword [esp + 0x48]
mov ebx, dword [esp + 0x44]
mov edi, dword [esp + 0x40]
mov esi, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x34]
mov ecx, dword [0x1005132c]
test ecx, ecx
jne 0x10019d00
mov esi, dword [0x100512d8]
test esi, esi
jne 0x10019c6e
mov ecx, 0xf8f45725
call fcn.1001bba6
mov esi, eax
mov dword [0x100512d8], eax
mov byte [esp + 0x1c], 0
movaps xmm0, xmmword [0x1003ff60]
movups xmmword [esp + 0xc], xmm0
xor eax, eax
inc eax
mov ecx, eax
add cl, 0x44
xor byte [esp + eax + 0xc], cl
inc eax
cmp eax, 0x10
jne 0x10019c82
mov byte [esp + 0x1c], 0
mov ecx, dword [0x100512dc]
test ecx, ecx
jne 0x10019cb1
mov ecx, 0x53b2070f
call fcn.1001bba6
mov ecx, eax
mov dword [0x100512dc], eax
mov dword [esp + 2], 0x20382630
mov word [esp + 6], 0x7979
mov byte [esp + 8], 0
mov word [esp], 0x2161
xor eax, eax
inc eax
mov edx, eax
add dl, 0x44
xor byte [esp + eax], dl
inc eax
cmp eax, 8
jne 0x10019cce
mov eax, esp
mov byte [eax + 8], 0
push eax
call ecx
lea ecx, [esp + 0xc]
push ecx
push eax
call esi
mov ecx, eax
mov dword [0x1005132c], eax
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x38]
mov esi, dword [esp + 0x3c]
push ebp
push ebx
push edi
push esi
push edx
push eax
call ecx
add esp, 0x20
pop esi
pop edi
pop ebx
pop ebp
ret 0x18

Function at 0x10019d56
Capabilities:
Encode data using xor
Resolve function by fnv-1a hash

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x1c
mov ebx, dword [esp + 0x40]
mov edi, dword [esp + 0x3c]
mov ebp, dword [esp + 0x38]
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
mov ecx, dword [0x10051330]
test ecx, ecx
jne 0x10019e36
mov esi, dword [0x100512d8]
test esi, esi
jne 0x10019d9a
mov ecx, 0xf8f45725
call fcn.1001bba6
mov esi, eax
mov dword [0x100512d8], eax
mov dword [esp + 0xe], 0x2c380821
mov dword [esp + 0x12], 0x34290024
mov dword [esp + 0x16], 0x7370b
mov word [esp + 0xc], 0x2052
xor eax, eax
inc eax
mov ecx, eax
add cl, 0x44
xor byte [esp + eax + 0xc], cl
inc eax
cmp eax, 0xd
jne 0x10019dbc
mov byte [esp + 0x19], 0
mov ecx, dword [0x100512dc]
test ecx, ecx
jne 0x10019deb
mov ecx, 0x53b2070f
call fcn.1001bba6
mov ecx, eax
mov dword [0x100512dc], eax
mov dword [esp + 2], 0x20382630
mov word [esp + 6], 0x7979
mov byte [esp + 8], 0
mov word [esp], 0x2161
xor eax, eax
inc eax
mov edx, eax
add dl, 0x44
xor byte [esp + eax], dl
inc eax
cmp eax, 8
jne 0x10019e08
mov eax, esp
mov byte [eax + 8], 0
push eax
call ecx
lea ecx, [esp + 0xc]
push ecx
push eax
call esi
mov ecx, eax
mov dword [0x10051330], eax
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x34]
push ebx
push edi
push ebp
push edx
push eax
call ecx
add esp, 0x1c
pop esi
pop edi
pop ebx
pop ebp
ret 0x14
Function at 0x10019e48
Capabilities:
Encode data using xor
Resolve function by fnv-1a hash

Disassembly:
push ebx
push edi
push esi
sub esp, 0x1c
mov ebx, dword [esp + 0x30]
mov edi, dword [esp + 0x2c]
mov ecx, dword [0x10051334]
test ecx, ecx
jne 0x10019f00
mov esi, dword [0x100512d8]
test esi, esi
jne 0x10019e7f
mov ecx, 0xf8f45725
call fcn.1001bba6
mov esi, eax
mov dword [0x100512d8], eax
movaps xmm0, xmmword [0x1003ff70]
movups xmmword [esp + 0xc], xmm0
xor eax, eax
inc eax
mov ecx, eax
add cl, 0x44
xor byte [esp + eax + 0xc], cl
inc eax
cmp eax, 0xf
jne 0x10019e8e
mov byte [esp + 0x1b], 0
mov ecx, dword [0x100512dc]
test ecx, ecx
jne 0x10019ebd
mov ecx, 0x53b2070f
call fcn.1001bba6
mov ecx, eax
mov dword [0x100512dc], eax
mov dword [esp + 2], 0x20382630
mov word [esp + 6], 0x7979
mov byte [esp + 8], 0
mov word [esp], 0x2161
xor eax, eax
inc eax
mov edx, eax
add dl, 0x44
xor byte [esp + eax], dl
inc eax
cmp eax, 8
jne 0x10019eda
mov eax, esp
mov byte [eax + 8], 0
push eax
call ecx
lea ecx, [esp + 0xc]
push ecx
push eax
call esi
mov ecx, eax
mov dword [0x10051334], eax
push ebx
push edi
call ecx
add esp, 0x1c
pop esi
pop edi
pop ebx
ret 8

Function at 0x10019ffa
Capabilities:
Encode data using xor
Resolve function by fnv-1a hash

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x18
mov ebp, dword [esp + 0x34]
mov ebx, dword [esp + 0x30]
mov edi, dword [esp + 0x2c]
mov ecx, dword [0x10051338]
test ecx, ecx
jne 0x1001a0c9
mov esi, dword [0x100512d8]
test esi, esi
jne 0x1001a036
mov ecx, 0xf8f45725
call fcn.1001bba6
mov esi, eax
mov dword [0x100512d8], eax
mov dword [esp + 0xe], 0x3b182923
mov dword [esp + 0x12], 0x3e292825
mov word [esp + 0x16], 0x3d
mov word [esp + 0xc], 0x354f
xor eax, eax
inc eax
mov ecx, eax
add cl, 0x44
xor byte [esp + eax + 0xc], cl
inc eax
cmp eax, 0xb
jne 0x1001a057
mov byte [esp + 0x17], 0
mov ecx, dword [0x100512dc]
test ecx, ecx
jne 0x1001a086
mov ecx, 0x53b2070f
call fcn.1001bba6
mov ecx, eax
mov dword [0x100512dc], eax
mov dword [esp + 2], 0x252d2934
mov word [esp + 6], 0x7979
mov byte [esp + 8], 0
mov word [esp], 0x206b
xor eax, eax
inc eax
mov edx, eax
add dl, 0x44
xor byte [esp + eax], dl
inc eax
cmp eax, 8
jne 0x1001a0a3
mov eax, esp
mov byte [eax + 8], 0
push eax
call ecx
lea ecx, [esp + 0xc]
push ecx
push eax
call esi
mov ecx, eax
mov dword [0x10051338], eax
push ebp
push ebx
push edi
call ecx
add esp, 0x18
pop esi
pop edi
pop ebx
pop ebp
ret 0xc