joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1015aab0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104aef80], 0
push esi
jne 0x1015ab10
mov byte [0x104aef80], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104aef94]
xor ebx, dword [0x104aef90]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104aef81], cl
inc eax
cmp eax, 0xf
jb 0x1015aad0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104aef8f
push 0x104aef81
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1015ad40
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ac6d0], 0
push esi
jne 0x1015ada0
mov byte [0x104ac6d0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ac6e4]
xor ebx, dword [0x104ac6e0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + str.x_fSZ_], cl
inc eax
cmp eax, 0xc
jb 0x1015ad60
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ac6dc
push str.x_fSZ_
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1015adc0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b0030], 0
push esi
jne 0x1015ae20
mov byte [0x104b0030], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b0044]
xor ebx, dword [0x104b0040]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b0031], cl
inc eax
cmp eax, 0xb
jb 0x1015ade0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b003b
push 0x104b0031
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1015aff0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104af450], 0
push esi
jne 0x1015b050
mov byte [0x104af450], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104af474]
xor ebx, dword [0x104af470]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104af451], cl
inc eax
cmp eax, 0x19
jb 0x1015b010
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104af469
push 0x104af451
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x1015b3d0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b0760], 0
push esi
jne 0x1015b430
mov byte [0x104b0760], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b0774]
xor ebx, dword [0x104b0770]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b0761], cl
inc eax
cmp eax, 0xc
jb 0x1015b3f0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b076c
push 0x104b0761
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1015b450
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b0c50], 0
push esi
jne 0x1015b4b0
mov byte [0x104b0c50], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b0c6c]
xor ebx, dword [0x104b0c68]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b0c51], cl
inc eax
cmp eax, 0x11
jb 0x1015b470
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b0c61
push 0x104b0c51
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1015b4d0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104af210], 0
push esi
jne 0x1015b530
mov byte [0x104af210], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104af22c]
xor ebx, dword [0x104af228]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104af211], cl
inc eax
cmp eax, 0x13
jb 0x1015b4f0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104af223
push 0x104af211
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1015b550
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b0350], 0
push esi
jne 0x1015b5b0
mov byte [0x104b0350], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b0364]
xor ebx, dword [0x104b0360]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b0351], cl
inc eax
cmp eax, 0xd
jb 0x1015b570
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b035d
push 0x104b0351
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x1015b5d0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ae850], 0
push esi
jne 0x1015b630
mov byte [0x104ae850], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ae86c]
xor ebx, dword [0x104ae868]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ae851], cl
inc eax
cmp eax, 0x12
jb 0x1015b5f0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ae862
push 0x104ae851
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1015b7c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ae810], 0
push esi
jne 0x1015b820
mov byte [0x104ae810], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ae824]
xor ebx, dword [0x104ae820]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ae811], cl
inc eax
cmp eax, 0xd
jb 0x1015b7e0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ae81d
push 0x104ae811
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1015b9f0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104afce0], 0
push esi
jne 0x1015ba50
mov byte [0x104afce0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104afcf4]
xor ebx, dword [0x104afcf0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104afce1], cl
inc eax
cmp eax, 0xd
jb 0x1015ba10
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104afced
push 0x104afce1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1015be70
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104adce0], 0
push esi
jne 0x1015bed0
mov byte [0x104adce0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104add04]
xor ebx, dword [0x104add00]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104adce1], cl
inc eax
cmp eax, 0x1a
jb 0x1015be90
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104adcfa
push 0x104adce1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x1015c4f0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ae410], 0
push esi
jne 0x1015c550
mov byte [0x104ae410], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ae434]
xor ebx, dword [0x104ae430]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ae411], cl
inc eax
cmp eax, 0x19
jb 0x1015c510
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ae429
push 0x104ae411
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1015c930
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ae260], 0
push esi
jne 0x1015c990
mov byte [0x104ae260], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ae274]
xor ebx, dword [0x104ae270]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ae261], cl
inc eax
cmp eax, 0xf
jb 0x1015c950
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ae26f
push 0x104ae261
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1015c9b0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104aefc0], 0
push esi
jne 0x1015ca10
mov byte [0x104aefc0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104aefdc]
xor ebx, dword [0x104aefd8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104aefc1], cl
inc eax
cmp eax, 0x10
jb 0x1015c9d0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104aefd0
push 0x104aefc1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1015ca30
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104af860], 0
push esi
jne 0x1015ca90
mov byte [0x104af860], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104af874]
xor ebx, dword [0x104af870]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104af861], cl
inc eax
cmp eax, 0xc
jb 0x1015ca50
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104af86c
push 0x104af861
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x1015cab0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ad360], 0
push esi
jne 0x1015cb10
mov byte [0x104ad360], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ad384]
xor ebx, dword [0x104ad380]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ad361], cl
inc eax
cmp eax, 0x1d
jb 0x1015cad0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ad37d
push 0x104ad361
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1015d1e0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104af520], 0
push esi
jne 0x1015d240
mov byte [0x104af520], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104af534]
xor ebx, dword [0x104af530]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104af521], cl
inc eax
cmp eax, 0xe
jb 0x1015d200
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104af52e
push 0x104af521
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1015d260
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ae440], 0
push esi
jne 0x1015d2c0
mov byte [0x104ae440], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ae45c]
xor ebx, dword [0x104ae458]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ae441], cl
inc eax
cmp eax, 0x10
jb 0x1015d280
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ae450
push 0x104ae441
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1015d2e0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104acbf0], 0
push esi
jne 0x1015d340
mov byte [0x104acbf0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104acc0c]
xor ebx, dword [0x104acc08]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104acbf1], cl
inc eax
cmp eax, 0x13
jb 0x1015d300
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104acc03
push 0x104acbf1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x1015d720
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104afb80], 0
push esi
jne 0x1015d780
mov byte [0x104afb80], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104afb94]
xor ebx, dword [0x104afb90]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104afb81], cl
inc eax
cmp eax, 0xb
jb 0x1015d740
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104afb8b
push 0x104afb81
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1015d7a0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104aff10], 0
push esi
jne 0x1015d800
mov byte [0x104aff10], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104aff24]
xor ebx, dword [0x104aff20]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104aff11], cl
inc eax
cmp eax, 0xc
jb 0x1015d7c0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104aff1c
push 0x104aff11
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1015d820
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ae480], 0
push esi
jne 0x1015d880
mov byte [0x104ae480], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ae494]
xor ebx, dword [0x104ae490]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ae481], cl
inc eax
cmp eax, 0xd
jb 0x1015d840
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ae48d
push 0x104ae481
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1015d8a0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104aeeb0], 0
push esi
jne 0x1015d900
mov byte [0x104aeeb0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104aeecc]
xor ebx, dword [0x104aeec8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104aeeb1], cl
inc eax
cmp eax, 0x15
jb 0x1015d8c0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104aeec5
push 0x104aeeb1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x1015d920
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ad340], 0
push esi
jne 0x1015d980
mov byte [0x104ad340], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ad35c]
xor ebx, dword [0x104ad358]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ad341], cl
inc eax
cmp eax, 0x12
jb 0x1015d940
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ad352
push 0x104ad341
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1015d9a0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104acc10], 0
push esi
jne 0x1015da00
mov byte [0x104acc10], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104acc34]
xor ebx, dword [0x104acc30]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104acc11], cl
inc eax
cmp eax, 0x1c
jb 0x1015d9c0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104acc2c
push 0x104acc11
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1015da20
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b05b0], 0
push esi
jne 0x1015da80
mov byte [0x104b05b0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b05cc]
xor ebx, dword [0x104b05c8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b05b1], cl
inc eax
cmp eax, 0x10
jb 0x1015da40
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b05c0
push 0x104b05b1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1015daa0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104afa00], 0
push esi
jne 0x1015db00
mov byte [0x104afa00], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104afa14]
xor ebx, dword [0x104afa10]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104afa01], cl
inc eax
cmp eax, 0xd
jb 0x1015dac0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104afa0d
push 0x104afa01
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x1015db20
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b0460], 0
push esi
jne 0x1015db80
mov byte [0x104b0460], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b0474]
xor ebx, dword [0x104b0470]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b0461], cl
inc eax
cmp eax, 0xf
jb 0x1015db40
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b046f
push 0x104b0461
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1015dba0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104afa80], 0
push esi
jne 0x1015dc00
mov byte [0x104afa80], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104afa9c]
xor ebx, dword [0x104afa98]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104afa81], cl
inc eax
cmp eax, 0x14
jb 0x1015dbc0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104afa94
push 0x104afa81
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1015dc20
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104afbf0], 0
push esi
jne 0x1015dc80
mov byte [0x104afbf0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104afc0c]
xor ebx, dword [0x104afc08]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104afbf1], cl
inc eax
cmp eax, 0x14
jb 0x1015dc40
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104afc04
push 0x104afbf1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1015dca0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ad6b0], 0
push esi
jne 0x1015dd00
mov byte [0x104ad6b0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ad6cc]
xor ebx, dword [0x104ad6c8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ad6b1], cl
inc eax
cmp eax, 0x14
jb 0x1015dcc0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ad6c4
push 0x104ad6b1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x1015dd20
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ae3a0], 0
push esi
jne 0x1015dd80
mov byte [0x104ae3a0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ae3c4]
xor ebx, dword [0x104ae3c0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ae3a1], cl
inc eax
cmp eax, 0x18
jb 0x1015dd40
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ae3b8
push 0x104ae3a1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1015dda0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b06c0], 0
push esi
jne 0x1015de00
mov byte [0x104b06c0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b06e4]
xor ebx, dword [0x104b06e0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b06c1], cl
inc eax
cmp eax, 0x1f
jb 0x1015ddc0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b06df
push 0x104b06c1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4