joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10020430
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x100d5291
push eax
mov dword fs:[0], esp
sub esp, 0x20
mov eax, dword fs:[0x2c]
mov edx, dword [0x100fbfac]
push esi
mov esi, ecx
mov edx, dword [eax + edx*4]
mov eax, dword [0x1017d920]
cmp eax, dword [edx + 4]
jle 0x10020512
push 0x1017d920
call fcn.100d136a
add esp, 4
cmp dword [0x1017d920], 0xffffffff
jne 0x10020512
mov dword [ebp - 4], 0
xor ecx, ecx
mov dword [ebp - 0x17], 0x8bab9ead
mov dword [ebp - 0x13], 0xb3aaa4a1
mov word [ebp - 0xf], 0xa0
mov byte [ebp - 0xd], 1
nop dword [eax]
lea eax, [ecx - 0x40]
xor byte [ebp + ecx - 0x17], al
inc ecx
cmp ecx, 9
jb 0x100204b0
mov byte [ebp - 0xd], 0
xor ecx, ecx
mov dword [ebp - 0x26], 0x819d9584
mov dword [ebp - 0x22], 0x88a3b6a5
mov dword [ebp - 0x1e], 0xa8afa3aa
mov word [ebp - 0x1a], 0xb8
mov byte [ebp - 0x18], 1
lea eax, [ecx - 0x40]
xor byte [ebp + ecx - 0x26], al
inc ecx
cmp ecx, 0xd
jb 0x100204e2
lea eax, [ebp - 0x17]
mov byte [ebp - 0x18], 0
push eax
lea eax, [ebp - 0x26]
push eax
call fcn.10007f10
push 0x1017d920
mov dword [0x1017d90c], eax
call fcn.100d1320
add esp, 4
mov eax, dword [0x1017d90c]
mov ecx, dword [ebp - 0xc]
mov eax, dword [eax + esi]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret

Function at 0x10020530
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x100d52b1
push eax
mov dword fs:[0], esp
sub esp, 0x20
mov eax, dword fs:[0x2c]
mov edx, dword [0x100fbfac]
push esi
mov esi, ecx
mov edx, dword [eax + edx*4]
mov eax, dword [0x1017d8cc]
cmp eax, dword [edx + 4]
jle 0x10020612
push 0x1017d8cc
call fcn.100d136a
add esp, 4
cmp dword [0x1017d8cc], 0xffffffff
jne 0x10020612
mov dword [ebp - 4], 0
xor ecx, ecx
mov dword [ebp - 0x1a], 0x8eab9ead
mov dword [ebp - 0x16], 0xa28ebda5
mov dword [ebp - 0x12], 0xa3bea5a9
mov word [ebp - 0xe], 0x100
nop dword [eax]
lea eax, [ecx - 0x40]
xor byte [ebp + ecx - 0x1a], al
inc ecx
cmp ecx, 0xc
jb 0x100205b0
mov byte [ebp - 0xd], 0
xor ecx, ecx
mov dword [ebp - 0x29], 0x819d9584
mov dword [ebp - 0x25], 0x88a3b6a5
mov dword [ebp - 0x21], 0xa8afa3aa
mov word [ebp - 0x1d], 0xb8
mov byte [ebp - 0x1b], 1
lea eax, [ecx - 0x40]
xor byte [ebp + ecx - 0x29], al
inc ecx
cmp ecx, 0xd
jb 0x100205e2
lea eax, [ebp - 0x1a]
mov byte [ebp - 0x1b], 0
push eax
lea eax, [ebp - 0x29]
push eax
call fcn.10007f10
push 0x1017d8cc
mov dword [0x1017d8f4], eax
call fcn.100d1320
add esp, 4
mov eax, dword [0x1017d8f4]
mov ecx, dword [ebp - 0xc]
mov eax, dword [eax + esi]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x10023500
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x10], 0
je 0x10023524
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 7
jb 0x10023510
mov byte [edx + 0x10], 0
mov eax, edx
ret

Function at 0x10023530
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x22], 0
je 0x10023554
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x10
jb 0x10023540
mov byte [edx + 0x22], 0
mov eax, edx
ret
Function at 0x100242a0
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x12], 0
je 0x100242c4
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 8
jb 0x100242b0
mov byte [edx + 0x12], 0
mov eax, edx
ret

Function at 0x100242d0
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x1e], 0
je 0x100242f4
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0xe
jb 0x100242e0
mov byte [edx + 0x1e], 0
mov eax, edx
ret

Function at 0x10024300
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x1a], 0
je 0x10024324
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0xc
jb 0x10024310
mov byte [edx + 0x1a], 0
mov eax, edx
ret

Function at 0x10025900
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x1a], 0
je 0x10025924
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0xc
jb 0x10025910
mov byte [edx + 0x1a], 0
ret

Function at 0x10025930
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x1e], 0
je 0x10025954
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0xe
jb 0x10025940
mov byte [edx + 0x1e], 0
ret

Function at 0x10025960
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x12], 0
je 0x10025984
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 8
jb 0x10025970
mov byte [edx + 0x12], 0
ret

Function at 0x10025990
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x22], 0
je 0x100259b4
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x10
jb 0x100259a0
mov byte [edx + 0x22], 0
ret

Function at 0x100259c0
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x10], 0
je 0x100259e4
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 7
jb 0x100259d0
mov byte [edx + 0x10], 0
ret
Function at 0x10025ce0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100d5404
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x420
mov edx, dword [0x1017d924]
movaps xmm0, xmmword [0x100f15f0]
push esi
mov esi, ecx
mov dword [ebp - 0x10], 0x100a5bd
lea eax, [edx + 1]
xor ecx, ecx
mov dword [0x1017d924], eax
movups xmmword [ebp - 0x20], xmm0
lea eax, [ecx - 0x40]
xor byte [ebp + ecx - 0x20], al
inc ecx
cmp ecx, 0x12
jb 0x10025d23
push edx
lea eax, [ebp - 0x20]
mov byte [ebp - 0xd], 0
push eax
lea eax, [ebp - 0x228]
push 0x200
push eax
call fcn.1001ea10
push esi
lea eax, [ebp - 0x428]
push 0x200
push eax
call fcn.1001ea10
add esp, 0x1c
push 0x20
call fcn.100d1440
mov edx, eax
add esp, 4
mov dword [ebp - 0x24], edx
mov dword [ebp - 4], 0
xor eax, eax
mov dword [ebp - 0x17], 0xb5b6a0ad
mov dword [ebp - 0x13], 0xbfb5a9a5
mov word [ebp - 0xf], 0xac
mov byte [ebp - 0xd], 1
nop
lea ecx, [eax - 0x40]
xor byte [ebp + eax - 0x17], cl
inc eax
cmp eax, 9
jb 0x10025d90
lea eax, [ebp - 0x17]
mov byte [ebp - 0xd], 0
push eax
mov ecx, edx
call fcn.100cea10
mov esi, eax
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x228]
push eax
push esi
call fcn.100ce890
sub esp, 8
lea eax, [ebp - 0x428]
push eax
lea eax, [ebp - 0x228]
push eax
push esi
call fcn.100ce710
mov ecx, dword [0x100fc360]
lea edx, [ebp - 0x228]
push esi
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x120]
call eax
mov esi, eax
mov ecx, esi
mov edx, dword [esi]
call dword [edx + 0x30]
mov ecx, dword [ebp - 0xc]
mov eax, esi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x10027850
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x3c], 0
je 0x10027874
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x1d
jb 0x10027860
mov byte [edx + 0x3c], 0
mov eax, edx
ret

Function at 0x10027880
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x20], 0
je 0x100278a4
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0xf
jb 0x10027890
mov byte [edx + 0x20], 0
mov eax, edx
ret

Function at 0x100278b0
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x46], 0
je 0x100278d4
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x22
jb 0x100278c0
mov byte [edx + 0x46], 0
mov eax, edx
ret
Function at 0x10036970
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x3a], 0
je 0x10036994
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x1c
jb 0x10036980
mov byte [edx + 0x3a], 0
mov eax, edx
ret

Function at 0x100369a0
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x40], 0
je 0x100369c4
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x1f
jb 0x100369b0
mov byte [edx + 0x40], 0
mov eax, edx
ret

Function at 0x100369d0
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x42], 0
je 0x100369f4
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x20
jb 0x100369e0
mov byte [edx + 0x42], 0
mov eax, edx
ret

Function at 0x10036a00
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x52], 0
je 0x10036a24
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x28
jb 0x10036a10
mov byte [edx + 0x52], 0
mov eax, edx
ret

Function at 0x10036a30
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x48], 0
je 0x10036a54
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x23
jb 0x10036a40
mov byte [edx + 0x48], 0
mov eax, edx
ret

Function at 0x10036a60
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x4a], 0
je 0x10036a84
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x24
jb 0x10036a70
mov byte [edx + 0x4a], 0
mov eax, edx
ret

Function at 0x10036a90
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x28], 0
je 0x10036ab4
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x13
jb 0x10036aa0
mov byte [edx + 0x28], 0
mov eax, edx
ret

Function at 0x10036ac0
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x2a], 0
je 0x10036ae4
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x14
jb 0x10036ad0
mov byte [edx + 0x2a], 0
mov eax, edx
ret

Function at 0x10036af0
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x44], 0
je 0x10036b14
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x21
jb 0x10036b00
mov byte [edx + 0x44], 0
mov eax, edx
ret

Function at 0x10036b20
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x3e], 0
je 0x10036b44
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x1e
jb 0x10036b30
mov byte [edx + 0x3e], 0
mov eax, edx
ret

Function at 0x10036b50
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x54], 0
je 0x10036b74
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x29
jb 0x10036b60
mov byte [edx + 0x54], 0
mov eax, edx
ret
Function at 0x10036b80
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x4c], 0
je 0x10036ba4
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x25
jb 0x10036b90
mov byte [edx + 0x4c], 0
mov eax, edx
ret

Function at 0x10036bb0
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x58], 0
je 0x10036bd4
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x2b
jb 0x10036bc0
mov byte [edx + 0x58], 0
mov eax, edx
ret

Function at 0x10036be0
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x50], 0
je 0x10036c04
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x27
jb 0x10036bf0
mov byte [edx + 0x50], 0
mov eax, edx
ret

Function at 0x10036c10
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x5a], 0
je 0x10036c34
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x2c
jb 0x10036c20
mov byte [edx + 0x5a], 0
mov eax, edx
ret

Function at 0x10036c40
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x30], 0
je 0x10036c64
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x17
jb 0x10036c50
mov byte [edx + 0x30], 0
mov eax, edx
ret

Function at 0x10036c70
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x32], 0
je 0x10036c94
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x18
jb 0x10036c80
mov byte [edx + 0x32], 0
mov eax, edx
ret

Function at 0x10036ca0
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x38], 0
je 0x10036cc4
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x1b
jb 0x10036cb0
mov byte [edx + 0x38], 0
mov eax, edx
ret

Function at 0x10036cd0
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x34], 0
je 0x10036cf4
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x19
jb 0x10036ce0
mov byte [edx + 0x34], 0
mov eax, edx
ret

Function at 0x10036d00
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x2e], 0
je 0x10036d24
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x16
jb 0x10036d10
mov byte [edx + 0x2e], 0
mov eax, edx
ret

Function at 0x10036d30
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x2c], 0
je 0x10036d54
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x15
jb 0x10036d40
mov byte [edx + 0x2c], 0
mov eax, edx
ret

Function at 0x10036d60
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x26], 0
je 0x10036d84
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x12
jb 0x10036d70
mov byte [edx + 0x26], 0
mov eax, edx
ret
Function at 0x10044960
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100d5615
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x70
xor eax, eax
mov dword [ebp - 0x1c], 0x4bb04e9
mov edx, ecx
mov dword [ebp - 0x18], 0x4a504ac
mov word [ebp - 0x14], ax
mov byte [ebp - 0x12], 1
nop word [eax + eax]
lea ecx, [eax + 0x4c7]
xor word [ebp + eax*2 - 0x1c], cx
inc eax
cmp eax, 4
jb 0x100449a0
lea ecx, [edx + 0x168]
mov byte [ebp - 0x12], 0
mov edx, dword [ecx + 0x10]
mov eax, Ordinal_2
sub eax, edx
cmp eax, 1
jb 0x10044a8a
cmp dword [ecx + 0x14], 8
jb 0x100449d6
mov ecx, dword [ecx]
push 1
push 0x100d9134
push edx
push ecx
push ecx
push dword [ebp + 8]
lea ecx, [ebp - 0x4c]
call fcn.1000e2e0
push dword [ebp + 8]
lea edx, [ebp - 0x4c]
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x7c]
call fcn.10046070
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 1
push ecx
mov edx, eax
lea ecx, [ebp - 0x64]
call fcn.10046070
add esp, 8
mov dword [ebp - 0x24], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x34], xmm0
mov dword [ebp - 0x20], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x34], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x24], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 3
call fcn.100277f0
lea ecx, [ebp - 0x34]
call fcn.1000d830
lea ecx, [ebp - 0x64]
call fcn.1000d830
lea ecx, [ebp - 0x7c]
call fcn.1000d830
lea ecx, [ebp - 0x4c]
call fcn.1000d830
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 4
call fcn.100051b0
int3

Function at 0x10044a90
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x26], 0
je 0x10044ab4
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x12
jb 0x10044aa0
mov byte [edx + 0x26], 0
ret

Function at 0x10044ac0
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x2c], 0
je 0x10044ae4
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x15
jb 0x10044ad0
mov byte [edx + 0x2c], 0
ret

Function at 0x10044af0
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x2e], 0
je 0x10044b14
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x16
jb 0x10044b00
mov byte [edx + 0x2e], 0
ret

Function at 0x10044b20
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x34], 0
je 0x10044b44
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x19
jb 0x10044b30
mov byte [edx + 0x34], 0
ret

Function at 0x10044b50
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x38], 0
je 0x10044b74
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x1b
jb 0x10044b60
mov byte [edx + 0x38], 0
ret
Function at 0x10044b80
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x32], 0
je 0x10044ba4
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x18
jb 0x10044b90
mov byte [edx + 0x32], 0
ret

Function at 0x10044bb0
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x30], 0
je 0x10044bd4
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x17
jb 0x10044bc0
mov byte [edx + 0x30], 0
ret

Function at 0x10044be0
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x5a], 0
je 0x10044c04
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x2c
jb 0x10044bf0
mov byte [edx + 0x5a], 0
ret

Function at 0x10044c10
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x50], 0
je 0x10044c34
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x27
jb 0x10044c20
mov byte [edx + 0x50], 0
ret

Function at 0x10044c40
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x58], 0
je 0x10044c64
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x2b
jb 0x10044c50
mov byte [edx + 0x58], 0
ret

Function at 0x10044c70
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x4c], 0
je 0x10044c94
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x25
jb 0x10044c80
mov byte [edx + 0x4c], 0
ret

Function at 0x10044ca0
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x54], 0
je 0x10044cc4
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x29
jb 0x10044cb0
mov byte [edx + 0x54], 0
ret

Function at 0x10044cd0
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x3e], 0
je 0x10044cf4
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x1e
jb 0x10044ce0
mov byte [edx + 0x3e], 0
ret

Function at 0x10044d00
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x44], 0
je 0x10044d24
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x21
jb 0x10044d10
mov byte [edx + 0x44], 0
ret

Function at 0x10044d30
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x2a], 0
je 0x10044d54
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x14
jb 0x10044d40
mov byte [edx + 0x2a], 0
ret

Function at 0x10044d60
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x28], 0
je 0x10044d84
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x13
jb 0x10044d70
mov byte [edx + 0x28], 0
ret
Function at 0x10044d90
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x4a], 0
je 0x10044db4
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x24
jb 0x10044da0
mov byte [edx + 0x4a], 0
ret

Function at 0x10044dc0
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x48], 0
je 0x10044de4
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x23
jb 0x10044dd0
mov byte [edx + 0x48], 0
ret

Function at 0x10044df0
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x52], 0
je 0x10044e14
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x28
jb 0x10044e00
mov byte [edx + 0x52], 0
ret

Function at 0x10044e20
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x42], 0
je 0x10044e44
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x20
jb 0x10044e30
mov byte [edx + 0x42], 0
ret

Function at 0x10044e50
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x40], 0
je 0x10044e74
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x1f
jb 0x10044e60
mov byte [edx + 0x40], 0
ret

Function at 0x10044e80
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x3a], 0
je 0x10044ea4
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x1c
jb 0x10044e90
mov byte [edx + 0x3a], 0
ret

Function at 0x10044f40
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x46], 0
je 0x10044f64
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x22
jb 0x10044f50
mov byte [edx + 0x46], 0
ret

Function at 0x10044f70
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x20], 0
je 0x10044f94
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0xf
jb 0x10044f80
mov byte [edx + 0x20], 0
ret

Function at 0x10044fa0
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x3c], 0
je 0x10044fc4
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c8]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x1d
jb 0x10044fb0
mov byte [edx + 0x3c], 0
ret

Function at 0x10046360
Capabilities:
Log keystrokes via polling

Disassembly:
push ebx
mov ebx, dword [sym.imp.USER32.dll_GetKeyState]
push esi
push edi
mov edi, ecx
xor esi, esi
nop dword [eax]
push esi
call ebx
bt ax, 0xf
jae 0x10046399
mov eax, dword [edi + esi*4]
cmp eax, 1
jne 0x1004638b
mov dword [edi + esi*4], 2
jmp 0x100463a0
cmp eax, 2
je 0x100463a0
mov dword [edi + esi*4], 1
jmp 0x100463a0
mov dword [edi + esi*4], 0
inc esi
cmp esi, 0x100
jl 0x10046370
mov ecx, dword [0x100fc31c]
lea eax, [edi + 0x404]
push eax
lea eax, [edi + 0x400]
push eax
mov edx, dword [ecx]
mov eax, dword [edx + 0x180]
call eax
pop edi
pop esi
pop ebx
ret