joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10066890
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x1024ca78], 0
push ebx
push esi
je 0x10066901
cmp byte [0x1024ca79], 0
jne 0x10066942
mov byte [0x1024ca79], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024cabc]
xor ebx, dword [0x1024cab8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024ca7a], al
inc esi
cmp esi, 0x37
jb 0x100668c0
jmp 0x10066942
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024cabc]
xor ebx, dword [0x1024cab8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024ca7a], al
inc esi
cmp esi, 0x37
jb 0x10066903
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x1024cab0
push 0x1024ca7a
call fcn.1004ef20
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10066970
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x1024cc90], 0
push ebx
push esi
je 0x100669e4
cmp byte [0x1024cc91], 0
jne 0x10066a28
mov byte [0x1024cc91], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024cd3c]
xor ebx, dword [0x1024cd38]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024cc92], al
inc esi
cmp esi, 0xa3
jb 0x100669a0
jmp 0x10066a28
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024cd3c]
xor ebx, dword [0x1024cd38]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024cc92], al
inc esi
cmp esi, 0xa3
jb 0x100669e6
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x1024cd34
push 0x1024cc92
call fcn.1004ef20
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10066a50
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x1024cdb0], 0
push ebx
push esi
je 0x10066ac1
cmp byte [0x1024cdb1], 0
jne 0x10066b02
mov byte [0x1024cdb1], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024ce34]
xor ebx, dword [0x1024ce30]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024cdb2], al
inc esi
cmp esi, 0x78
jb 0x10066a80
jmp 0x10066b02
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024ce34]
xor ebx, dword [0x1024ce30]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024cdb2], al
inc esi
cmp esi, 0x78
jb 0x10066ac3
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x1024ce29
push 0x1024cdb2
call fcn.1004ef20
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10066b30
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x1024ce38], 0
push ebx
push esi
je 0x10066ba4
cmp byte [0x1024ce39], 0
jne 0x10066be8
mov byte [0x1024ce39], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024ced4]
xor ebx, dword [0x1024ced0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024ce3a], al
inc esi
cmp esi, 0x96
jb 0x10066b60
jmp 0x10066be8
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024ced4]
xor ebx, dword [0x1024ced0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024ce3a], al
inc esi
cmp esi, 0x96
jb 0x10066ba6
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x1024cecf
push 0x1024ce3a
call fcn.1004ef20
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10066c10
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x1024add0], 0
push ebx
push esi
je 0x10066c81
cmp byte [0x1024add1], 0
jne 0x10066cc2
mov byte [0x1024add1], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024adec]
xor ebx, dword [0x1024ade8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024add2], al
inc esi
cmp esi, 0x15
jb 0x10066c40
jmp 0x10066cc2
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024adec]
xor ebx, dword [0x1024ade8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024add2], al
inc esi
cmp esi, 0x15
jb 0x10066c83
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x1024ade6
push 0x1024add2
call fcn.1004ef20
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10066cf0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x1024aff8], 0
push ebx
push esi
je 0x10066d61
cmp byte [0x1024aff9], 0
jne 0x10066da2
mov byte [0x1024aff9], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024b04c]
xor ebx, dword [0x1024b048]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024affa], al
inc esi
cmp esi, 0x48
jb 0x10066d20
jmp 0x10066da2
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024b04c]
xor ebx, dword [0x1024b048]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024affa], al
inc esi
cmp esi, 0x48
jb 0x10066d63
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x1024b041
push 0x1024affa
call fcn.1004ef20
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10066dd0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x1024b080], 0
push ebx
push esi
je 0x10066e41
cmp byte [0x1024b081], 0
jne 0x10066e82
mov byte [0x1024b081], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024b0cc]
xor ebx, dword [0x1024b0c8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024b082], al
inc esi
cmp esi, 0x43
jb 0x10066e00
jmp 0x10066e82
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024b0cc]
xor ebx, dword [0x1024b0c8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024b082], al
inc esi
cmp esi, 0x43
jb 0x10066e43
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x1024b0c4
push 0x1024b082
call fcn.1004ef20
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10066eb0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x1024b0d0], 0
push ebx
push esi
je 0x10066f21
cmp byte [0x1024b0d1], 0
jne 0x10066f62
mov byte [0x1024b0d1], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024b114]
xor ebx, dword [0x1024b110]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024b0d2], al
inc esi
cmp esi, 0x3b
jb 0x10066ee0
jmp 0x10066f62
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024b114]
xor ebx, dword [0x1024b110]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024b0d2], al
inc esi
cmp esi, 0x3b
jb 0x10066f23
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x1024b10c
push 0x1024b0d2
call fcn.1004ef20
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10066f90
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x1024b198], 0
push ebx
push esi
je 0x10067001
cmp byte [0x1024b199], 0
jne 0x10067042
mov byte [0x1024b199], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024b1ec]
xor ebx, dword [0x1024b1e8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024b19a], al
inc esi
cmp esi, 0x4d
jb 0x10066fc0
jmp 0x10067042
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024b1ec]
xor ebx, dword [0x1024b1e8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024b19a], al
inc esi
cmp esi, 0x4d
jb 0x10067003
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x1024b1e6
push 0x1024b19a
call fcn.1004ef20
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10067070
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x1024b220], 0
push ebx
push esi
je 0x100670e1
cmp byte [0x1024b221], 0
jne 0x10067122
mov byte [0x1024b221], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024b23c]
xor ebx, dword [0x1024b238]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024b222], al
inc esi
cmp esi, 0xf
jb 0x100670a0
jmp 0x10067122
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024b23c]
xor ebx, dword [0x1024b238]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024b222], al
inc esi
cmp esi, 0xf
jb 0x100670e3
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x1024b230
push 0x1024b222
call fcn.1004ef20
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10067150
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x1024b458], 0
push ebx
push esi
je 0x100671c1
cmp byte [0x1024b459], 0
jne 0x10067202
mov byte [0x1024b459], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024b4b4]
xor ebx, dword [0x1024b4b0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024b45a], al
inc esi
cmp esi, 0x50
jb 0x10067180
jmp 0x10067202
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024b4b4]
xor ebx, dword [0x1024b4b0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024b45a], al
inc esi
cmp esi, 0x50
jb 0x100671c3
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x1024b4a9
push 0x1024b45a
call fcn.1004ef20
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10067230
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x1024b5b0], 0
push ebx
push esi
je 0x100672a1
cmp byte [0x1024b5b1], 0
jne 0x100672e2
mov byte [0x1024b5b1], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024b5fc]
xor ebx, dword [0x1024b5f8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024b5b2], al
inc esi
cmp esi, 0x42
jb 0x10067260
jmp 0x100672e2
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024b5fc]
xor ebx, dword [0x1024b5f8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024b5b2], al
inc esi
cmp esi, 0x42
jb 0x100672a3
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x1024b5f3
push 0x1024b5b2
call fcn.1004ef20
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10067310
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x1024b680], 0
push ebx
push esi
je 0x10067381
cmp byte [0x1024b681], 0
jne 0x100673c2
mov byte [0x1024b681], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024b6d4]
xor ebx, dword [0x1024b6d0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024b682], al
inc esi
cmp esi, 0x49
jb 0x10067340
jmp 0x100673c2
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024b6d4]
xor ebx, dword [0x1024b6d0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024b682], al
inc esi
cmp esi, 0x49
jb 0x10067383
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x1024b6ca
push 0x1024b682
call fcn.1004ef20
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x100673f0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x1024b7a8], 0
push ebx
push esi
je 0x10067461
cmp byte [0x1024b7a9], 0
jne 0x100674a2
mov byte [0x1024b7a9], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024b7fc]
xor ebx, dword [0x1024b7f8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024b7aa], al
inc esi
cmp esi, 0x4a
jb 0x10067420
jmp 0x100674a2
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024b7fc]
xor ebx, dword [0x1024b7f8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024b7aa], al
inc esi
cmp esi, 0x4a
jb 0x10067463
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x1024b7f3
push 0x1024b7aa
call fcn.1004ef20
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x100674d0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x1024b8f0], 0
push ebx
push esi
je 0x10067541
cmp byte [0x1024b8f1], 0
jne 0x10067582
mov byte [0x1024b8f1], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024b93c]
xor ebx, dword [0x1024b938]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024b8f2], al
inc esi
cmp esi, 0x45
jb 0x10067500
jmp 0x10067582
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024b93c]
xor ebx, dword [0x1024b938]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024b8f2], al
inc esi
cmp esi, 0x45
jb 0x10067543
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x1024b936
push 0x1024b8f2
call fcn.1004ef20
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x100675b0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x1024a828], 0
push ebx
push esi
je 0x10067624
cmp byte [0x1024a829], 0
jne 0x10067668
mov byte [0x1024a829], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024a96c]
xor ebx, dword [0x1024a968]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024a82a], al
inc esi
cmp esi, 0x137
jb 0x100675e0
jmp 0x10067668
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024a96c]
xor ebx, dword [0x1024a968]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024a82a], al
inc esi
cmp esi, 0x137
jb 0x10067626
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x1024a960
push 0x1024a82a
call fcn.1004ef20
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10067690
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x1024b9f0], 0
push ebx
push esi
je 0x10067701
cmp byte [0x1024b9f1], 0
jne 0x10067742
mov byte [0x1024b9f1], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024ba34]
xor ebx, dword [0x1024ba30]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024b9f2], al
inc esi
cmp esi, 0x3a
jb 0x100676c0
jmp 0x10067742
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024ba34]
xor ebx, dword [0x1024ba30]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024b9f2], al
inc esi
cmp esi, 0x3a
jb 0x10067703
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x1024ba2b
push 0x1024b9f2
call fcn.1004ef20
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10067770
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x1024a608], 0
push ebx
push esi
je 0x100677e1
cmp byte [0x1024a609], 0
jne 0x10067822
mov byte [0x1024a609], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024a624]
xor ebx, dword [0x1024a620]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024a60a], al
inc esi
cmp esi, 0x10
jb 0x100677a0
jmp 0x10067822
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024a624]
xor ebx, dword [0x1024a620]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024a60a], al
inc esi
cmp esi, 0x10
jb 0x100677e3
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x1024a619
push 0x1024a60a
call fcn.1004ef20
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10067850
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x1024a628], 0
push ebx
push esi
je 0x100678c1
cmp byte [0x1024a629], 0
jne 0x10067902
mov byte [0x1024a629], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024a63c]
xor ebx, dword [0x1024a638]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024a62a], al
inc esi
cmp esi, 0xc
jb 0x10067880
jmp 0x10067902
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024a63c]
xor ebx, dword [0x1024a638]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024a62a], al
inc esi
cmp esi, 0xc
jb 0x100678c3
mov ecx, dword [ebp + 8]
lea eax, [ebp - 1]
push eax
push 0x1024a635
push 0x1024a62a
call fcn.1004ef20
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x1006b360
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
mov eax, dword [0x10266a40]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x1024ced8], 0
mov eax, dword [ebp + 0xc]
push ebx
mov ebx, dword [ebp + 0x10]
push esi
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], ebx
je 0x1006b3e2
cmp byte [0x1024ced9], 0
jne 0x1006b426
mov byte [0x1024ced9], 1
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024cef4]
xor ebx, dword [0x1024cef0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024ceda], al
inc esi
cmp esi, 0x10
jb 0x1006b3a1
jmp 0x1006b423
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x1024cef4]
xor ebx, dword [0x1024cef0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1024ceda], al
inc esi
cmp esi, 0x10
jb 0x1006b3e4
mov ebx, dword [ebp - 0x24]
lea eax, [ebp - 0x1d]
push eax
push 0x1024cee9
push 0x1024ceda
lea ecx, [ebp - 0x1c]
call fcn.1004ef20
cmp dword [ebp - 8], 0xf
lea eax, [ebp - 0x1c]
cmova eax, dword [ebp - 0x1c]
push eax
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 8]
mov esi, eax
cmp ecx, 0xf
jbe 0x1006b489
mov edx, dword [ebp - 0x1c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1006b47f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1006b47f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1010be7a
add esp, 8
mov dword [ebp - 0xc], 0
mov dword [ebp - 8], 0xf
mov byte [ebp - 0x1c], 0
test esi, esi
jne 0x1006b4a3
mov dword [edi], esi
jmp 0x1006b4b5
cmp dword [ebx + 0x14], 0xf
jbe 0x1006b4ab
mov ebx, dword [ebx]
push 0
push ebx
call esi
add esp, 8
mov dword [edi], eax
mov ecx, dword [ebp - 4]
mov eax, edi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1010c1a2
mov esp, ebp
pop ebp
ret 0xc

Function at 0x10072970
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
mov edx, dword [ebp + 8]
movzx eax, byte [edx]
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
movzx eax, byte [edx + 1]
xor ecx, eax
movzx eax, byte [edx + 2]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [edx + 3]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [edx + 4]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [edx + 5]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [edx + 6]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [edx + 7]
imul ecx, ecx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
pop ebp
ret 4