joyce8/EMBER2024-capa huggingface dataset:
Function at 0x100661f0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi], 0
lea edi, [esi + 2]
je 0x10066257
cmp byte [esi + 1], 0
jne 0x1006629c
xor ecx, ecx
mov byte [esi + 1], 1
mov dword [ebp - 8], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x44]
xor ebx, dword [esi + 0x40]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 8]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [edi + ecx]
xor al, bl
mov byte [edi + ecx], al
inc ecx
mov dword [ebp - 8], ecx
cmp ecx, 0x38
jb 0x10066216
jmp 0x1006629c
xor ecx, ecx
mov dword [ebp - 8], ecx
nop dword [eax]
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x44]
xor ebx, dword [esi + 0x40]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 8]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [edi + ecx], al
inc ecx
mov dword [ebp - 8], ecx
cmp ecx, 0x38
jb 0x10066260
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
lea eax, [esi + 0x39]
push eax
push edi
call fcn.1004f490
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x100662c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi], 0
lea edi, [esi + 2]
je 0x10066327
cmp byte [esi + 1], 0
jne 0x1006636c
xor ecx, ecx
mov byte [esi + 1], 1
mov dword [ebp - 8], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x44]
xor ebx, dword [esi + 0x40]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 8]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [edi + ecx]
xor al, bl
mov byte [edi + ecx], al
inc ecx
mov dword [ebp - 8], ecx
cmp ecx, 0x39
jb 0x100662e6
jmp 0x1006636c
xor ecx, ecx
mov dword [ebp - 8], ecx
nop dword [eax]
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x44]
xor ebx, dword [esi + 0x40]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 8]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [edi + ecx], al
inc ecx
mov dword [ebp - 8], ecx
cmp ecx, 0x39
jb 0x10066330
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
lea eax, [esi + 0x3a]
push eax
push edi
call fcn.1004f490
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10066390
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi], 0
lea edi, [esi + 2]
je 0x100663f7
cmp byte [esi + 1], 0
jne 0x1006643c
xor ecx, ecx
mov byte [esi + 1], 1
mov dword [ebp - 8], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x44]
xor ebx, dword [esi + 0x40]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 8]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [edi + ecx]
xor al, bl
mov byte [edi + ecx], al
inc ecx
mov dword [ebp - 8], ecx
cmp ecx, 0x3c
jb 0x100663b6
jmp 0x1006643c
xor ecx, ecx
mov dword [ebp - 8], ecx
nop dword [eax]
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x44]
xor ebx, dword [esi + 0x40]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 8]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [edi + ecx], al
inc ecx
mov dword [ebp - 8], ecx
cmp ecx, 0x3c
jb 0x10066400
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
lea eax, [esi + 0x3d]
push eax
push edi
call fcn.1004f490
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10066460
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi], 0
lea edi, [esi + 2]
je 0x100664c7
cmp byte [esi + 1], 0
jne 0x1006650c
xor ecx, ecx
mov byte [esi + 1], 1
mov dword [ebp - 8], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x4c]
xor ebx, dword [esi + 0x48]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 8]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [edi + ecx]
xor al, bl
mov byte [edi + ecx], al
inc ecx
mov dword [ebp - 8], ecx
cmp ecx, 0x41
jb 0x10066486
jmp 0x1006650c
xor ecx, ecx
mov dword [ebp - 8], ecx
nop dword [eax]
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x4c]
xor ebx, dword [esi + 0x48]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 8]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [edi + ecx], al
inc ecx
mov dword [ebp - 8], ecx
cmp ecx, 0x41
jb 0x100664d0
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
lea eax, [esi + 0x42]
push eax
push edi
call fcn.1004f490
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10066530
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi], 0
lea edi, [esi + 2]
je 0x10066597
cmp byte [esi + 1], 0
jne 0x100665dc
xor ecx, ecx
mov byte [esi + 1], 1
mov dword [ebp - 8], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x54]
xor ebx, dword [esi + 0x50]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 8]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [edi + ecx]
xor al, bl
mov byte [edi + ecx], al
inc ecx
mov dword [ebp - 8], ecx
cmp ecx, 0x4e
jb 0x10066556
jmp 0x100665dc
xor ecx, ecx
mov dword [ebp - 8], ecx
nop dword [eax]
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x54]
xor ebx, dword [esi + 0x50]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 8]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [edi + ecx], al
inc ecx
mov dword [ebp - 8], ecx
cmp ecx, 0x4e
jb 0x100665a0
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
lea eax, [esi + 0x4f]
push eax
push edi
call fcn.1004f490
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10066600
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x10281340], 0
push ebx
push esi
je 0x10066671
cmp byte [0x10281341], 0
jne 0x100666b2
mov byte [0x10281341], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102813a4]
xor ebx, dword [0x102813a0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10281342], al
inc esi
cmp esi, 0x5e
jb 0x10066630
jmp 0x100666b2
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102813a4]
xor ebx, dword [0x102813a0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10281342], al
inc esi
cmp esi, 0x5e
jb 0x10066673
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x1028139f
push 0x10281342
call fcn.1004f490
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x100666e0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x1027fa20], 0
push ebx
push esi
je 0x10066751
cmp byte [0x1027fa21], 0
jne 0x10066792
mov byte [0x1027fa21], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x1027fa34]
xor ebx, dword [0x1027fa30]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1027fa22], al
inc esi
cmp esi, 0xe
jb 0x10066710
jmp 0x10066792
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x1027fa34]
xor ebx, dword [0x1027fa30]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1027fa22], al
inc esi
cmp esi, 0xe
jb 0x10066753
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x1027fa2f
push 0x1027fa22
call fcn.1004f490
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x100667c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x10281668], 0
push ebx
push esi
je 0x10066831
cmp byte [0x10281669], 0
jne 0x10066872
mov byte [0x10281669], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102816b4]
xor ebx, dword [0x102816b0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1028166a], al
inc esi
cmp esi, 0x40
jb 0x100667f0
jmp 0x10066872
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102816b4]
xor ebx, dword [0x102816b0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1028166a], al
inc esi
cmp esi, 0x40
jb 0x10066833
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102816a9
push 0x1028166a
call fcn.1004f490
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x100668a0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x1027fe00], 0
push ebx
push esi
je 0x10066911
cmp byte [0x1027fe01], 0
jne 0x10066952
mov byte [0x1027fe01], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x1027fe6c]
xor ebx, dword [0x1027fe68]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1027fe02], al
inc esi
cmp esi, 0x66
jb 0x100668d0
jmp 0x10066952
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x1027fe6c]
xor ebx, dword [0x1027fe68]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1027fe02], al
inc esi
cmp esi, 0x66
jb 0x10066913
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x1027fe67
push 0x1027fe02
call fcn.1004f490
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10066980
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x10281988], 0
push ebx
push esi
je 0x100669f1
cmp byte [0x10281989], 0
jne 0x10066a32
mov byte [0x10281989], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102819dc]
xor ebx, dword [0x102819d8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1028198a], al
inc esi
cmp esi, 0x47
jb 0x100669b0
jmp 0x10066a32
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102819dc]
xor ebx, dword [0x102819d8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1028198a], al
inc esi
cmp esi, 0x47
jb 0x100669f3
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102819d0
push 0x1028198a
call fcn.1004f490
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10066a60
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102819e0], 0
push ebx
push esi
je 0x10066ad1
cmp byte [0x102819e1], 0
jne 0x10066b12
mov byte [0x102819e1], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x10281a64]
xor ebx, dword [0x10281a60]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102819e2], al
inc esi
cmp esi, 0x77
jb 0x10066a90
jmp 0x10066b12
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10281a64]
xor ebx, dword [0x10281a60]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102819e2], al
inc esi
cmp esi, 0x77
jb 0x10066ad3
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x10281a58
push 0x102819e2
call fcn.1004f490
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10066b40
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x10281a90], 0
push ebx
push esi
je 0x10066bb1
cmp byte [0x10281a91], 0
jne 0x10066bf2
mov byte [0x10281a91], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x10281ad4]
xor ebx, dword [0x10281ad0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10281a92], al
inc esi
cmp esi, 0x3d
jb 0x10066b70
jmp 0x10066bf2
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10281ad4]
xor ebx, dword [0x10281ad0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10281a92], al
inc esi
cmp esi, 0x3d
jb 0x10066bb3
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x10281ace
push 0x10281a92
call fcn.1004f490
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10066c20
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x10281c10], 0
push ebx
push esi
je 0x10066c91
cmp byte [0x10281c11], 0
jne 0x10066cd2
mov byte [0x10281c11], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x10281c74]
xor ebx, dword [0x10281c70]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10281c12], al
inc esi
cmp esi, 0x58
jb 0x10066c50
jmp 0x10066cd2
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10281c74]
xor ebx, dword [0x10281c70]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10281c12], al
inc esi
cmp esi, 0x58
jb 0x10066c93
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x10281c69
push 0x10281c12
call fcn.1004f490
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10066d00
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x10281d50], 0
push ebx
push esi
je 0x10066d71
cmp byte [0x10281d51], 0
jne 0x10066db2
mov byte [0x10281d51], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x10281dcc]
xor ebx, dword [0x10281dc8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10281d52], al
inc esi
cmp esi, 0x71
jb 0x10066d30
jmp 0x10066db2
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10281dcc]
xor ebx, dword [0x10281dc8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10281d52], al
inc esi
cmp esi, 0x71
jb 0x10066d73
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x10281dc2
push 0x10281d52
call fcn.1004f490
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10066de0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x10281e40], 0
push ebx
push esi
je 0x10066e51
cmp byte [0x10281e41], 0
jne 0x10066e92
mov byte [0x10281e41], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x10281e84]
xor ebx, dword [0x10281e80]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10281e42], al
inc esi
cmp esi, 0x37
jb 0x10066e10
jmp 0x10066e92
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10281e84]
xor ebx, dword [0x10281e80]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10281e42], al
inc esi
cmp esi, 0x37
jb 0x10066e53
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x10281e78
push 0x10281e42
call fcn.1004f490
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10066ec0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x10282058], 0
push ebx
push esi
je 0x10066f34
cmp byte [0x10282059], 0
jne 0x10066f78
mov byte [0x10282059], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x10282104]
xor ebx, dword [0x10282100]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1028205a], al
inc esi
cmp esi, 0xa3
jb 0x10066ef0
jmp 0x10066f78
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10282104]
xor ebx, dword [0x10282100]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1028205a], al
inc esi
cmp esi, 0xa3
jb 0x10066f36
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102820fc
push 0x1028205a
call fcn.1004f490
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10066fa0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x10282178], 0
push ebx
push esi
je 0x10067011
cmp byte [0x10282179], 0
jne 0x10067052
mov byte [0x10282179], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102821fc]
xor ebx, dword [0x102821f8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1028217a], al
inc esi
cmp esi, 0x78
jb 0x10066fd0
jmp 0x10067052
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102821fc]
xor ebx, dword [0x102821f8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1028217a], al
inc esi
cmp esi, 0x78
jb 0x10067013
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102821f1
push 0x1028217a
call fcn.1004f490
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10067080
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x10282200], 0
push ebx
push esi
je 0x100670f4
cmp byte [0x10282201], 0
jne 0x10067138
mov byte [0x10282201], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x1028229c]
xor ebx, dword [0x10282298]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10282202], al
inc esi
cmp esi, 0x96
jb 0x100670b0
jmp 0x10067138
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x1028229c]
xor ebx, dword [0x10282298]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10282202], al
inc esi
cmp esi, 0x96
jb 0x100670f6
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x10282297
push 0x10282202
call fcn.1004f490
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10067160
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x10280198], 0
push ebx
push esi
je 0x100671d1
cmp byte [0x10280199], 0
jne 0x10067212
mov byte [0x10280199], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102801b4]
xor ebx, dword [0x102801b0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1028019a], al
inc esi
cmp esi, 0x15
jb 0x10067190
jmp 0x10067212
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102801b4]
xor ebx, dword [0x102801b0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1028019a], al
inc esi
cmp esi, 0x15
jb 0x100671d3
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102801ae
push 0x1028019a
call fcn.1004f490
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10067240
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x102803c0], 0
push ebx
push esi
je 0x100672b1
cmp byte [0x102803c1], 0
jne 0x100672f2
mov byte [0x102803c1], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x10280414]
xor ebx, dword [0x10280410]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102803c2], al
inc esi
cmp esi, 0x48
jb 0x10067270
jmp 0x100672f2
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10280414]
xor ebx, dword [0x10280410]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102803c2], al
inc esi
cmp esi, 0x48
jb 0x100672b3
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x10280409
push 0x102803c2
call fcn.1004f490
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4