joyce8/EMBER2024-capa huggingface dataset:
Function at 0x102736b0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b8e90], 0
push esi
jne 0x10273710
mov byte [0x104b8e90], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b8ea4]
xor ebx, dword [0x104b8ea0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b8e91], cl
inc eax
cmp eax, 0xb
jb 0x102736d0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b8e9b
push 0x104b8e91
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10273940
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b7ba0], 0
push esi
jne 0x102739a0
mov byte [0x104b7ba0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b7bb4]
xor ebx, dword [0x104b7bb0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b7ba1], cl
inc eax
cmp eax, 0xe
jb 0x10273960
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b7bae
push 0x104b7ba1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10274040
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104bc400], 0
push esi
jne 0x102740a0
mov byte [0x104bc400], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104bc414]
xor ebx, dword [0x104bc410]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104bc401], cl
inc eax
cmp eax, 0xd
jb 0x10274060
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104bc40d
push 0x104bc401
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x102742d0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104bd150], 0
push esi
jne 0x10274330
mov byte [0x104bd150], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104bd164]
xor ebx, dword [0x104bd160]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104bd151], cl
inc eax
cmp eax, 0xf
jb 0x102742f0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104bd15f
push 0x104bd151
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x10274a90
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104baaf0], 0
push esi
jne 0x10274af0
mov byte [0x104baaf0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104bab04]
xor ebx, dword [0x104bab00]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104baaf1], cl
inc eax
cmp eax, 0xc
jb 0x10274ab0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104baafc
push 0x104baaf1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x102752e0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104bb190], 0
push esi
jne 0x10275340
mov byte [0x104bb190], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104bb1a4]
xor ebx, dword [0x104bb1a0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104bb191], cl
inc eax
cmp eax, 0xb
jb 0x10275300
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104bb19b
push 0x104bb191
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10275510
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104bda20], 0
push esi
jne 0x10275570
mov byte [0x104bda20], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104bda34]
xor ebx, dword [0x104bda30]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104bda21], cl
inc eax
cmp eax, 0xd
jb 0x10275530
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104bda2d
push 0x104bda21
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10275590
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104bc2e0], 0
push esi
jne 0x102755f0
mov byte [0x104bc2e0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104bc2f4]
xor ebx, dword [0x104bc2f0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + str.__bG_aK_v], cl
inc eax
cmp eax, 0xb
jb 0x102755b0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104bc2eb
push str.__bG_aK_v
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x10275610
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104bbd80], 0
push esi
jne 0x10275670
mov byte [0x104bbd80], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104bbd9c]
xor ebx, dword [0x104bbd98]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104bbd81], cl
inc eax
cmp eax, 0x11
jb 0x10275630
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104bbd91
push 0x104bbd81
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x102757d0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104bcf20], 0
push esi
jne 0x10275830
mov byte [0x104bcf20], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104bcf34]
xor ebx, dword [0x104bcf30]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104bcf21], cl
inc eax
cmp eax, 0xb
jb 0x102757f0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104bcf2b
push 0x104bcf21
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x102759c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b65c0], 0
push esi
jne 0x10275a20
mov byte [0x104b65c0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b65d4]
xor ebx, dword [0x104b65d0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b65c1], cl
inc eax
cmp eax, 0xc
jb 0x102759e0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b65cc
push 0x104b65c1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10275a40
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b6790], 0
push esi
jne 0x10275aa0
mov byte [0x104b6790], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b67ac]
xor ebx, dword [0x104b67a8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b6791], cl
inc eax
cmp eax, 0x10
jb 0x10275a60
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b67a0
push 0x104b6791
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x10275c70
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104bde30], 0
push esi
jne 0x10275cd0
mov byte [0x104bde30], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104bde44]
xor ebx, dword [0x104bde40]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104bde31], cl
inc eax
cmp eax, 0xb
jb 0x10275c90
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104bde3b
push 0x104bde31
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10275f00
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b75a0], 0
push esi
jne 0x10275f60
mov byte [0x104b75a0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b75b4]
xor ebx, dword [0x104b75b0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + str._o], cl
inc eax
cmp eax, 0xb
jb 0x10275f20
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b75ab
push str._o
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x102760c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b5a40], 0
push esi
jne 0x10276120
mov byte [0x104b5a40], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b5a54]
xor ebx, dword [0x104b5a50]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b5a41], cl
inc eax
cmp eax, 0xb
jb 0x102760e0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b5a4b
push 0x104b5a41
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x102762b0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b6000], 0
push esi
jne 0x10276310
mov byte [0x104b6000], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b6014]
xor ebx, dword [0x104b6010]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + str.D.k], cl
inc eax
cmp eax, 0xb
jb 0x102762d0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b600b
push str.D.k
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x10276330
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b6870], 0
push esi
jne 0x10276390
mov byte [0x104b6870], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b6884]
xor ebx, dword [0x104b6880]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b6871], cl
inc eax
cmp eax, 0xc
jb 0x10276350
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b687c
push 0x104b6871
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x102763b0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104bce40], 0
push esi
jne 0x10276410
mov byte [0x104bce40], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104bce54]
xor ebx, dword [0x104bce50]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + str.S_bW], cl
inc eax
cmp eax, 0xb
jb 0x102763d0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104bce4b
push str.S_bW
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10276430
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b9ae0], 0
push esi
jne 0x10276490
mov byte [0x104b9ae0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b9af4]
xor ebx, dword [0x104b9af0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b9ae1], cl
inc eax
cmp eax, 0xd
jb 0x10276450
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b9aed
push 0x104b9ae1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x102764b0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104bdd00], 0
push esi
jne 0x10276510
mov byte [0x104bdd00], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104bdd14]
xor ebx, dword [0x104bdd10]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + str.H_g], cl
inc eax
cmp eax, 0xb
jb 0x102764d0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104bdd0b
push str.H_g
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x10276710
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104bad80], 0
push esi
jne 0x10276770
mov byte [0x104bad80], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104bad94]
xor ebx, dword [0x104bad90]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104bad81], cl
inc eax
cmp eax, 0xe
jb 0x10276730
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104bad8e
push 0x104bad81
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10276ab0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b8980], 0
push esi
jne 0x10276b10
mov byte [0x104b8980], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b8994]
xor ebx, dword [0x104b8990]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b8981], cl
inc eax
cmp eax, 0xe
jb 0x10276ad0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b898e
push 0x104b8981
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10276e50
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104be0c0], 0
push esi
jne 0x10276eb0
mov byte [0x104be0c0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104be0d4]
xor ebx, dword [0x104be0d0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104be0c1], cl
inc eax
cmp eax, 0xe
jb 0x10276e70
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104be0ce
push 0x104be0c1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10277040
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b5e70], 0
push esi
jne 0x102770a0
mov byte [0x104b5e70], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b5e84]
xor ebx, dword [0x104b5e80]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b5e71], cl
inc eax
cmp eax, 0xe
jb 0x10277060
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b5e7e
push 0x104b5e71
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x10277230
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104bbfb0], 0
push esi
jne 0x10277290
mov byte [0x104bbfb0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104bbfc4]
xor ebx, dword [0x104bbfc0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104bbfb1], cl
inc eax
cmp eax, 0xe
jb 0x10277250
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104bbfbe
push 0x104bbfb1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10277420
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104bb420], 0
push esi
jne 0x10277480
mov byte [0x104bb420], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104bb43c]
xor ebx, dword [0x104bb438]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104bb421], cl
inc eax
cmp eax, 0x14
jb 0x10277440
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104bb434
push 0x104bb421
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10277610
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b7a70], 0
push esi
jne 0x10277670
mov byte [0x104b7a70], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b7a84]
xor ebx, dword [0x104b7a80]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b7a71], cl
inc eax
cmp eax, 0xe
jb 0x10277630
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b7a7e
push 0x104b7a71
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10277800
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104bb110], 0
push esi
jne 0x10277860
mov byte [0x104bb110], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104bb12c]
xor ebx, dword [0x104bb128]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104bb111], cl
inc eax
cmp eax, 0x12
jb 0x10277820
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104bb122
push 0x104bb111
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x10277d40
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104be450], 0
push esi
jne 0x10277da0
mov byte [0x104be450], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104be464]
xor ebx, dword [0x104be460]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104be451], cl
inc eax
cmp eax, 0xc
jb 0x10277d60
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104be45c
push 0x104be451
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x102782b0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b9160], 0
push esi
jne 0x10278310
mov byte [0x104b9160], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b9174]
xor ebx, dword [0x104b9170]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b9161], cl
inc eax
cmp eax, 0xf
jb 0x102782d0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b916f
push 0x104b9161
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x102784a0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104bc540], 0
push esi
jne 0x10278500
mov byte [0x104bc540], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104bc554]
xor ebx, dword [0x104bc550]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104bc541], cl
inc eax
cmp eax, 0xc
jb 0x102784c0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104bc54c
push 0x104bc541
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10278910
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b9f20], 0
push esi
jne 0x10278970
mov byte [0x104b9f20], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b9f34]
xor ebx, dword [0x104b9f30]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b9f21], cl
inc eax
cmp eax, 0xb
jb 0x10278930
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b9f2b
push 0x104b9f21
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4