joyce8/EMBER2024-capa huggingface dataset:
Function at 0x100f38a0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
cmp byte [0x102a0078], 0
push ebx
push esi
je 0x100f3911
cmp byte [0x102a0079], 0
jne 0x100f3952
mov byte [0x102a0079], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102a00e4]
xor ebx, dword [0x102a00e0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102a007a], al
inc esi
cmp esi, 0x66
jb 0x100f38d0
jmp 0x100f3952
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102a00e4]
xor ebx, dword [0x102a00e0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102a007a], al
inc esi
cmp esi, 0x66
jb 0x100f3913
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102a00df
push 0x102a007a
call fcn.10027a10
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x100f3a20
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
cmp byte [0x102a20f0], 0
push ebx
push esi
je 0x100f3a91
cmp byte [0x102a20f1], 0
jne 0x100f3ad2
mov byte [0x102a20f1], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102a212c]
xor ebx, dword [0x102a2128]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102a20f2], al
inc esi
cmp esi, 0x34
jb 0x100f3a50
jmp 0x100f3ad2
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102a212c]
xor ebx, dword [0x102a2128]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102a20f2], al
inc esi
cmp esi, 0x34
jb 0x100f3a93
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102a2125
push 0x102a20f2
call fcn.10027a10
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x100f3b40
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
cmp byte [0x102a21b8], 0
push ebx
push esi
je 0x100f3bb4
cmp byte [0x102a21b9], 0
jne 0x100f3bf8
mov byte [0x102a21b9], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102a2264]
xor ebx, dword [0x102a2260]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102a21ba], al
inc esi
cmp esi, 0xa3
jb 0x100f3b70
jmp 0x100f3bf8
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102a2264]
xor ebx, dword [0x102a2260]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102a21ba], al
inc esi
cmp esi, 0xa3
jb 0x100f3bb6
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102a225c
push 0x102a21ba
call fcn.10027a10
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x100f3c60
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
cmp byte [0x102a22e0], 0
push ebx
push esi
je 0x100f3cd1
cmp byte [0x102a22e1], 0
jne 0x100f3d12
mov byte [0x102a22e1], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102a233c]
xor ebx, dword [0x102a2338]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102a22e2], al
inc esi
cmp esi, 0x50
jb 0x100f3c90
jmp 0x100f3d12
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102a233c]
xor ebx, dword [0x102a2338]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102a22e2], al
inc esi
cmp esi, 0x50
jb 0x100f3cd3
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102a2331
push 0x102a22e2
call fcn.10027a10
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x100f3d40
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
cmp byte [0x102a2340], 0
push ebx
push esi
je 0x100f3db1
cmp byte [0x102a2341], 0
jne 0x100f3df2
mov byte [0x102a2341], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102a2394]
xor ebx, dword [0x102a2390]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102a2342], al
inc esi
cmp esi, 0x4e
jb 0x100f3d70
jmp 0x100f3df2
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102a2394]
xor ebx, dword [0x102a2390]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102a2342], al
inc esi
cmp esi, 0x4e
jb 0x100f3db3
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102a238f
push 0x102a2342
call fcn.10027a10
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x100f3e80
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
cmp byte [0x102a2438], 0
push ebx
push esi
je 0x100f3ef1
cmp byte [0x102a2439], 0
jne 0x100f3f32
mov byte [0x102a2439], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102a2484]
xor ebx, dword [0x102a2480]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102a243a], al
inc esi
cmp esi, 0x42
jb 0x100f3eb0
jmp 0x100f3f32
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102a2484]
xor ebx, dword [0x102a2480]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102a243a], al
inc esi
cmp esi, 0x42
jb 0x100f3ef3
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102a247b
push 0x102a243a
call fcn.10027a10
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x100f3fc0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
cmp byte [0x102a2558], 0
push ebx
push esi
je 0x100f4031
cmp byte [0x102a2559], 0
jne 0x100f4072
mov byte [0x102a2559], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102a259c]
xor ebx, dword [0x102a2598]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102a255a], al
inc esi
cmp esi, 0x3d
jb 0x100f3ff0
jmp 0x100f4072
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102a259c]
xor ebx, dword [0x102a2598]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102a255a], al
inc esi
cmp esi, 0x3d
jb 0x100f4033
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102a2596
push 0x102a255a
call fcn.10027a10
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x100f4140
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
cmp byte [0x102a26c0], 0
push ebx
push esi
je 0x100f41b4
cmp byte [0x102a26c1], 0
jne 0x100f41f8
mov byte [0x102a26c1], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102a27ac]
xor ebx, dword [0x102a27a8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102a26c2], al
inc esi
cmp esi, 0xdf
jb 0x100f4170
jmp 0x100f41f8
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102a27ac]
xor ebx, dword [0x102a27a8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102a26c2], al
inc esi
cmp esi, 0xdf
jb 0x100f41b6
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102a27a0
push 0x102a26c2
call fcn.10027a10
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x100f4260
Capabilities:
Check for software breakpoints
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
cmp byte [0x102a2818], 0
push ebx
push esi
je 0x100f42d4
cmp byte [0x102a2819], 0
jne 0x100f4318
mov byte [0x102a2819], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102a28ec]
xor ebx, dword [0x102a28e8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + str.L_r_], al
inc esi
cmp esi, 0xcc
jb 0x100f4290
jmp 0x100f4318
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102a28ec]
xor ebx, dword [0x102a28e8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + str.L_r_], al
inc esi
cmp esi, 0xcc
jb 0x100f42d6
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102a28e5
push str.L_r_
call fcn.10027a10
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x100f4380
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
cmp byte [0x102a0348], 0
push ebx
push esi
je 0x100f43f1
cmp byte [0x102a0349], 0
jne 0x100f4432
mov byte [0x102a0349], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102a0394]
xor ebx, dword [0x102a0390]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102a034a], al
inc esi
cmp esi, 0x43
jb 0x100f43b0
jmp 0x100f4432
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102a0394]
xor ebx, dword [0x102a0390]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102a034a], al
inc esi
cmp esi, 0x43
jb 0x100f43f3
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102a038c
push 0x102a034a
call fcn.10027a10
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x100f4460
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
cmp byte [0x1029fdf0], 0
push ebx
push esi
je 0x100f44d1
cmp byte [0x1029fdf1], 0
jne 0x100f4512
mov byte [0x1029fdf1], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x1029fe34]
xor ebx, dword [0x1029fe30]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1029fdf2], al
inc esi
cmp esi, 0x3e
jb 0x100f4490
jmp 0x100f4512
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x1029fe34]
xor ebx, dword [0x1029fe30]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1029fdf2], al
inc esi
cmp esi, 0x3e
jb 0x100f44d3
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x1029fe2f
push 0x1029fdf2
call fcn.10027a10
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x100f4540
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
cmp byte [0x102a06d0], 0
push ebx
push esi
je 0x100f45b1
cmp byte [0x102a06d1], 0
jne 0x100f45f2
mov byte [0x102a06d1], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102a0714]
xor ebx, dword [0x102a0710]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102a06d2], al
inc esi
cmp esi, 0x3a
jb 0x100f4570
jmp 0x100f45f2
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102a0714]
xor ebx, dword [0x102a0710]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102a06d2], al
inc esi
cmp esi, 0x3a
jb 0x100f45b3
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102a070b
push 0x102a06d2
call fcn.10027a10
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x100f4620
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
cmp byte [0x102a0800], 0
push ebx
push esi
je 0x100f4691
cmp byte [0x102a0801], 0
jne 0x100f46d2
mov byte [0x102a0801], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102a0844]
xor ebx, dword [0x102a0840]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102a0802], al
inc esi
cmp esi, 0x38
jb 0x100f4650
jmp 0x100f46d2
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102a0844]
xor ebx, dword [0x102a0840]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102a0802], al
inc esi
cmp esi, 0x38
jb 0x100f4693
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102a0839
push 0x102a0802
call fcn.10027a10
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x100f4700
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
cmp byte [0x1029fe68], 0
push ebx
push esi
je 0x100f4771
cmp byte [0x1029fe69], 0
jne 0x100f47b2
mov byte [0x1029fe69], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x1029febc]
xor ebx, dword [0x1029feb8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1029fe6a], al
inc esi
cmp esi, 0x48
jb 0x100f4730
jmp 0x100f47b2
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x1029febc]
xor ebx, dword [0x1029feb8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1029fe6a], al
inc esi
cmp esi, 0x48
jb 0x100f4773
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x1029feb1
push 0x1029fe6a
call fcn.10027a10
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x100f47e0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
cmp byte [0x102a09b0], 0
push ebx
push esi
je 0x100f4851
cmp byte [0x102a09b1], 0
jne 0x100f4892
mov byte [0x102a09b1], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102a0a14]
xor ebx, dword [0x102a0a10]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102a09b2], al
inc esi
cmp esi, 0x5e
jb 0x100f4810
jmp 0x100f4892
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102a0a14]
xor ebx, dword [0x102a0a10]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102a09b2], al
inc esi
cmp esi, 0x5e
jb 0x100f4853
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102a0a0f
push 0x102a09b2
call fcn.10027a10
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x100f48c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
cmp byte [0x102a0ff0], 0
push ebx
push esi
je 0x100f4931
cmp byte [0x102a0ff1], 0
jne 0x100f4972
mov byte [0x102a0ff1], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x102a102c]
xor ebx, dword [0x102a1028]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102a0ff2], al
inc esi
cmp esi, 0x33
jb 0x100f48f0
jmp 0x100f4972
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x102a102c]
xor ebx, dword [0x102a1028]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x102a0ff2], al
inc esi
cmp esi, 0x33
jb 0x100f4933
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x102a1024
push 0x102a0ff2
call fcn.10027a10
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x100f49a0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
test esi, esi
je 0x100f4a3c
xor ecx, ecx
mov dword [ebp - 4], ecx
cmp dword [esi + 4], ecx
jle 0x100f4a2e
xor eax, eax
mov dword [ebp - 8], eax
mov edi, dword [esi]
mov esi, dword [edi + eax + 4]
add edi, eax
test esi, esi
je 0x100f4a1b
mov ebx, 0x811c9dc5
xor eax, eax
inc eax
cmp byte [esi + eax], 0
jne 0x100f49d6
xor edx, edx
test eax, eax
je 0x100f49f7
movsx ecx, byte [esi + edx]
inc edx
xor ecx, ebx
imul ebx, ecx, 0x1000193
cmp edx, eax
jb 0x100f49e3
mov ecx, dword [ebp - 4]
mov edx, dword [ebp + 0xc]
cmp ebx, edx
je 0x100f4a45
cmp dword [edi], 0xa
jne 0x100f4a1b
mov eax, dword [edi + 0x20]
test eax, eax
je 0x100f4a1b
push edx
push eax
call fcn.100f49a0
add esp, 8
test eax, eax
jne 0x100f4a3e
mov ecx, dword [ebp - 4]
mov esi, dword [ebp + 8]
inc ecx
add dword [ebp - 8], 0x3c
mov eax, dword [ebp - 8]
mov dword [ebp - 4], ecx
cmp ecx, dword [esi + 4]
jl 0x100f49c3
mov esi, dword [esi + 0xc]
mov dword [ebp + 8], esi
test esi, esi
jne 0x100f49b4
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [edi + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x101176c0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov edx, dword [ebp + 0xc]
mov eax, ecx
push ebx
push esi
push edi
cmp dword [edx + 0x14], 0xf
mov edi, edx
mov ebx, dword [edx + 0x10]
mov dword [ebp - 4], eax
jbe 0x101176de
mov edi, dword [edx]
xor ecx, ecx
mov esi, 0x811c9dc5
test ebx, ebx
je 0x10117704
nop dword [eax]
movzx eax, byte [edi + ecx]
inc ecx
xor eax, esi
imul esi, eax, 0x1000193
cmp ecx, ebx
jb 0x101176f0
mov eax, dword [ebp - 4]
push esi
push edx
lea ecx, [ebp - 0xc]
push ecx
mov ecx, eax
call fcn.10115dd0
pop edi
pop esi
pop ebx
mov ecx, dword [eax + 4]
mov eax, dword [ebp + 8]
test ecx, ecx
jne 0x10117724
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 4]
mov dword [eax], ecx
mov esp, ebp
pop ebp
ret 8

Function at 0x101179e0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi], 0
lea edi, [esi + 2]
je 0x10117a47
cmp byte [esi + 1], 0
jne 0x10117a8c
xor ecx, ecx
mov byte [esi + 1], 1
mov dword [ebp - 8], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x3c]
xor ebx, dword [esi + 0x38]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 8]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [edi + ecx]
xor al, bl
mov byte [edi + ecx], al
inc ecx
mov dword [ebp - 8], ecx
cmp ecx, 0x34
jb 0x10117a06
jmp 0x10117a8c
xor ecx, ecx
mov dword [ebp - 8], ecx
nop dword [eax]
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x3c]
xor ebx, dword [esi + 0x38]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 8]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [edi + ecx], al
inc ecx
mov dword [ebp - 8], ecx
cmp ecx, 0x34
jb 0x10117a50
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
lea eax, [esi + 0x35]
push eax
push edi
call fcn.10027a10
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10117ab0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi], 0
lea edi, [esi + 2]
je 0x10117b17
cmp byte [esi + 1], 0
jne 0x10117b5c
xor ecx, ecx
mov byte [esi + 1], 1
mov dword [ebp - 8], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x44]
xor ebx, dword [esi + 0x40]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 8]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [edi + ecx]
xor al, bl
mov byte [edi + ecx], al
inc ecx
mov dword [ebp - 8], ecx
cmp ecx, 0x38
jb 0x10117ad6
jmp 0x10117b5c
xor ecx, ecx
mov dword [ebp - 8], ecx
nop dword [eax]
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x44]
xor ebx, dword [esi + 0x40]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 8]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [edi + ecx], al
inc ecx
mov dword [ebp - 8], ecx
cmp ecx, 0x38
jb 0x10117b20
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
lea eax, [esi + 0x39]
push eax
push edi
call fcn.10027a10
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10117b80
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi], 0
lea edi, [esi + 2]
je 0x10117be7
cmp byte [esi + 1], 0
jne 0x10117c2c
xor ecx, ecx
mov byte [esi + 1], 1
mov dword [ebp - 8], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x44]
xor ebx, dword [esi + 0x40]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 8]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [edi + ecx]
xor al, bl
mov byte [edi + ecx], al
inc ecx
mov dword [ebp - 8], ecx
cmp ecx, 0x3a
jb 0x10117ba6
jmp 0x10117c2c
xor ecx, ecx
mov dword [ebp - 8], ecx
nop dword [eax]
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x44]
xor ebx, dword [esi + 0x40]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 8]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [edi + ecx], al
inc ecx
mov dword [ebp - 8], ecx
cmp ecx, 0x3a
jb 0x10117bf0
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
lea eax, [esi + 0x3b]
push eax
push edi
call fcn.10027a10
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4