joyce8/EMBER2024-capa huggingface dataset:
Function at 0x100cbf40
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1031b831
mov eax, dword fs:[0]
push eax
sub esp, 0x3c
mov eax, dword [0x1043900c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x44], ebx
mov eax, dword fs:[0x2c]
mov edx, dword [0x104c14e0]
mov edx, dword [eax + edx*4]
mov eax, dword [0x1061194c]
cmp eax, dword [edx + 4]
jg 0x100cbfaf
mov eax, dword [0x1061184c]
add eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.102bb91c
mov esp, ebp
pop ebp
ret
push 0x1061194c
call fcn.102bba07
add esp, 4
cmp dword [0x1061194c], 0xffffffff
jne 0x100cbf8c
mov dword [ebp - 4], 0
cmp byte [0x104aa0e0], 0
jne 0x100cc039
mov byte [0x104aa0e0], 1
xor esi, esi
jmp 0x100cbfe0
xor edx, edx
mov ebx, esi
xor edx, dword [0x104aa0fc]
xor ebx, dword [0x104aa0f8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
xor edx, ecx
shl eax, 0xd
xor ebx, eax
mov ecx, edx
mov eax, ebx
shrd eax, ecx, 7
shr ecx, 7
xor ebx, eax
xor edx, ecx
mov ecx, ebx
shld edx, ecx, 0x11
shl ecx, 0x11
xor cl, byte [esi + 0x104aa0e1]
xor cl, bl
mov byte [esi + 0x104aa0e1], cl
inc esi
cmp esi, 0x13
jb 0x100cbfe0
jmp 0x100cc039
push ecx
push 0x104aa0f3
push 0x104aa0e1
lea ecx, [ebp - 0x40]
call fcn.1001a620
mov byte [ebp - 4], 1
lea edi, [ebp - 0x40]
cmp dword [ebp - 0x2c], 0x10
cmovae edi, dword [ebp - 0x40]
cmp byte [0x104ab120], 0
jne 0x100cc0c9
mov byte [0x104ab120], 1
xor esi, esi
jmp 0x100cc070
xor edx, edx
mov ebx, esi
xor edx, dword [0x104ab13c]
xor ebx, dword [0x104ab138]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
xor edx, ecx
shl eax, 0xd
xor ebx, eax
mov ecx, edx
mov eax, ebx
shrd eax, ecx, 7
shr ecx, 7
xor ebx, eax
xor edx, ecx
mov ecx, ebx
shld edx, ecx, 0x11
shl ecx, 0x11
xor cl, byte [esi + 0x104ab121]
xor cl, bl
mov byte [esi + 0x104ab121], cl
inc esi
cmp esi, 0x11
jb 0x100cc070
jmp 0x100cc0c9
push ecx
push 0x104ab131
push 0x104ab121
lea ecx, [ebp - 0x28]
call fcn.1001a620
mov byte [ebp - 4], 2
lea eax, [ebp - 0x28]
cmp dword [ebp - 0x14], 0x10
push 0
cmovae eax, dword [ebp - 0x28]
push edi
push eax
call fcn.10171b70
lea ecx, [ebp - 0x28]
mov dword [0x1061184c], eax
call fcn.10019dd0
lea ecx, [ebp - 0x40]
call fcn.10019dd0
push 0x1061194c
call fcn.102bb9b6
mov eax, dword [0x1061184c]
add esp, 4
add eax, dword [ebp - 0x44]
jmp 0x100cbf93
Function at 0x100cfe70
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1031bf71
mov eax, dword fs:[0]
push eax
sub esp, 0x3c
mov eax, dword [0x1043900c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x44], ebx
mov eax, dword fs:[0x2c]
mov edx, dword [0x104c14e0]
mov edx, dword [eax + edx*4]
mov eax, dword [0x106116fc]
cmp eax, dword [edx + 4]
jg 0x100cfedf
mov eax, dword [0x1061183c]
add eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.102bb91c
mov esp, ebp
pop ebp
ret
push 0x106116fc
call fcn.102bba07
add esp, 4
cmp dword [0x106116fc], 0xffffffff
jne 0x100cfebc
mov dword [ebp - 4], 0
cmp byte [0x104ab550], 0
jne 0x100cff69
mov byte [0x104ab550], 1
xor esi, esi
jmp 0x100cff10
xor edx, edx
mov ebx, esi
xor edx, dword [0x104ab56c]
xor ebx, dword [0x104ab568]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
xor edx, ecx
shl eax, 0xd
xor ebx, eax
mov ecx, edx
mov eax, ebx
shrd eax, ecx, 7
shr ecx, 7
xor ebx, eax
xor edx, ecx
mov ecx, ebx
shld edx, ecx, 0x11
shl ecx, 0x11
xor cl, byte [esi + 0x104ab551]
xor cl, bl
mov byte [esi + 0x104ab551], cl
inc esi
cmp esi, 0x17
jb 0x100cff10
jmp 0x100cff69
push ecx
push 0x104ab567
push 0x104ab551
lea ecx, [ebp - 0x40]
call fcn.1001a620
mov byte [ebp - 4], 1
lea edi, [ebp - 0x40]
cmp dword [ebp - 0x2c], 0x10
cmovae edi, dword [ebp - 0x40]
cmp byte [0x104abe10], 0
jne 0x100cfff9
mov byte [0x104abe10], 1
xor esi, esi
jmp 0x100cffa0
xor edx, edx
mov ebx, esi
xor edx, dword [0x104abe34]
xor ebx, dword [0x104abe30]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
xor edx, ecx
shl eax, 0xd
xor ebx, eax
mov ecx, edx
mov eax, ebx
shrd eax, ecx, 7
shr ecx, 7
xor ebx, eax
xor edx, ecx
mov ecx, ebx
shld edx, ecx, 0x11
shl ecx, 0x11
xor cl, byte [esi + str.V_aw_]
xor cl, bl
mov byte [esi + str.V_aw_], cl
inc esi
cmp esi, 0x18
jb 0x100cffa0
jmp 0x100cfff9
push ecx
push 0x104abe28
push str.V_aw_
lea ecx, [ebp - 0x28]
call fcn.1001a620
mov byte [ebp - 4], 2
lea eax, [ebp - 0x28]
cmp dword [ebp - 0x14], 0x10
push 0
cmovae eax, dword [ebp - 0x28]
push edi
push eax
call fcn.10171b70
lea ecx, [ebp - 0x28]
mov dword [0x1061183c], eax
call fcn.10019dd0
lea ecx, [ebp - 0x40]
call fcn.10019dd0
push 0x106116fc
call fcn.102bb9b6
mov eax, dword [0x1061183c]
add esp, 4
add eax, dword [ebp - 0x44]
jmp 0x100cfec3
Function at 0x100d4c90
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ab260], 0
push esi
jne 0x100d4cf0
mov byte [0x104ab260], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ab274]
xor ebx, dword [0x104ab270]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ab261], cl
inc eax
cmp eax, 0xc
jb 0x100d4cb0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ab26c
push 0x104ab261
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d4e80
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104abd70], 0
push esi
jne 0x100d4ee0
mov byte [0x104abd70], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104abd84]
xor ebx, dword [0x104abd80]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104abd71], cl
inc eax
cmp eax, 0xf
jb 0x100d4ea0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104abd7f
push 0x104abd71
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d4f00
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ac040], 0
push esi
jne 0x100d4f60
mov byte [0x104ac040], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ac05c]
xor ebx, dword [0x104ac058]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ac041], cl
inc eax
cmp eax, 0x16
jb 0x100d4f20
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ac056
push 0x104ac041
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d4f80
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104aaa40], 0
push esi
jne 0x100d4fe0
mov byte [0x104aaa40], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104aaa5c]
xor ebx, dword [0x104aaa58]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + str._:D], cl
inc eax
cmp eax, 0x16
jb 0x100d4fa0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104aaa56
push str._:D
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x100d5000
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104aa5e0], 0
push esi
jne 0x100d5060
mov byte [0x104aa5e0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104aa5f4]
xor ebx, dword [0x104aa5f0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104aa5e1], cl
inc eax
cmp eax, 0xc
jb 0x100d5020
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104aa5ec
push 0x104aa5e1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d5080
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ac0c0], 0
push esi
jne 0x100d50e0
mov byte [0x104ac0c0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ac0dc]
xor ebx, dword [0x104ac0d8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ac0c1], cl
inc eax
cmp eax, 0x15
jb 0x100d50a0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ac0d5
push 0x104ac0c1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d5100
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ab2e0], 0
push esi
jne 0x100d5160
mov byte [0x104ab2e0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ab2fc]
xor ebx, dword [0x104ab2f8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ab2e1], cl
inc eax
cmp eax, 0x12
jb 0x100d5120
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ab2f2
push 0x104ab2e1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d5180
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ac100], 0
push esi
jne 0x100d51e0
mov byte [0x104ac100], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ac114]
xor ebx, dword [0x104ac110]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + str.y9__], cl
inc eax
cmp eax, 0xf
jb 0x100d51a0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ac10f
push str.y9__
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x100d5200
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104a9a40], 0
push esi
jne 0x100d5260
mov byte [0x104a9a40], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104a9a64]
xor ebx, dword [0x104a9a60]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104a9a41], cl
inc eax
cmp eax, 0x19
jb 0x100d5220
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104a9a59
push 0x104a9a41
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d54c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ab040], 0
push esi
jne 0x100d5520
mov byte [0x104ab040], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ab054]
xor ebx, dword [0x104ab050]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ab041], cl
inc eax
cmp eax, 0xc
jb 0x100d54e0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ab04c
push 0x104ab041
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d5780
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104abac0], 0
push esi
jne 0x100d57e0
mov byte [0x104abac0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104abad4]
xor ebx, dword [0x104abad0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104abac1], cl
inc eax
cmp eax, 0xd
jb 0x100d57a0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104abacd
push 0x104abac1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d5800
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104aae30], 0
push esi
jne 0x100d5860
mov byte [0x104aae30], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104aae4c]
xor ebx, dword [0x104aae48]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104aae31], cl
inc eax
cmp eax, 0x14
jb 0x100d5820
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104aae44
push 0x104aae31
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x100d5880
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ab890], 0
push esi
jne 0x100d58e0
mov byte [0x104ab890], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ab8a4]
xor ebx, dword [0x104ab8a0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ab891], cl
inc eax
cmp eax, 0xc
jb 0x100d58a0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ab89c
push 0x104ab891
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d5900
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ac420], 0
push esi
jne 0x100d5960
mov byte [0x104ac420], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ac434]
xor ebx, dword [0x104ac430]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + str.q1SJ_L], cl
inc eax
cmp eax, 0xe
jb 0x100d5920
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ac42e
push str.q1SJ_L
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d5980
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104aabe0], 0
push esi
jne 0x100d59e0
mov byte [0x104aabe0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104aac04]
xor ebx, dword [0x104aac00]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104aabe1], cl
inc eax
cmp eax, 0x1b
jb 0x100d59a0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104aabfb
push 0x104aabe1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d5a00
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104aa080], 0
push esi
jne 0x100d5a60
mov byte [0x104aa080], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104aa09c]
xor ebx, dword [0x104aa098]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104aa081], cl
inc eax
cmp eax, 0x10
jb 0x100d5a20
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104aa090
push 0x104aa081
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x100d5a80
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104a9770], 0
push esi
jne 0x100d5ae0
mov byte [0x104a9770], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104a9784]
xor ebx, dword [0x104a9780]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104a9771], cl
inc eax
cmp eax, 0xc
jb 0x100d5aa0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104a977c
push 0x104a9771
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d5b00
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104a9de0], 0
push esi
jne 0x100d5b60
mov byte [0x104a9de0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104a9df4]
xor ebx, dword [0x104a9df0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104a9de1], cl
inc eax
cmp eax, 0xd
jb 0x100d5b20
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104a9ded
push 0x104a9de1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d5b80
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ab7a0], 0
push esi
jne 0x100d5be0
mov byte [0x104ab7a0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ab7b4]
xor ebx, dword [0x104ab7b0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ab7a1], cl
inc eax
cmp eax, 0xf
jb 0x100d5ba0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ab7af
push 0x104ab7a1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d5c00
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104a9630], 0
push esi
jne 0x100d5c60
mov byte [0x104a9630], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104a964c]
xor ebx, dword [0x104a9648]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104a9631], cl
inc eax
cmp eax, 0x15
jb 0x100d5c20
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104a9645
push 0x104a9631
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x100d5c80
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104aabc0], 0
push esi
jne 0x100d5ce0
mov byte [0x104aabc0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104aabdc]
xor ebx, dword [0x104aabd8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104aabc1], cl
inc eax
cmp eax, 0x16
jb 0x100d5ca0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104aabd6
push 0x104aabc1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d5e70
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104aba00], 0
push esi
jne 0x100d5ed0
mov byte [0x104aba00], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104aba14]
xor ebx, dword [0x104aba10]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104aba01], cl
inc eax
cmp eax, 0xf
jb 0x100d5e90
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104aba0f
push 0x104aba01
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d5ef0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ab740], 0
push esi
jne 0x100d5f50
mov byte [0x104ab740], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ab754]
xor ebx, dword [0x104ab750]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ab741], cl
inc eax
cmp eax, 0xe
jb 0x100d5f10
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ab74e
push 0x104ab741
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d5f70
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104aae90], 0
push esi
jne 0x100d5fd0
mov byte [0x104aae90], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104aaea4]
xor ebx, dword [0x104aaea0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104aae91], cl
inc eax
cmp eax, 0xc
jb 0x100d5f90
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104aae9c
push 0x104aae91
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4