joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10236790
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b7650], 0
push esi
jne 0x102367f0
mov byte [0x104b7650], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b7664]
xor ebx, dword [0x104b7660]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b7651], cl
inc eax
cmp eax, 0xc
jb 0x102367b0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b765c
push 0x104b7651
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10236b00
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b6160], 0
push esi
jne 0x10236b60
mov byte [0x104b6160], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b6174]
xor ebx, dword [0x104b6170]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + str.H_vM__rA], cl
inc eax
cmp eax, 0xc
jb 0x10236b20
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b616c
push str.H_vM__rA
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10236c90
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b70c0], 0
push esi
jne 0x10236cf0
mov byte [0x104b70c0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b70d4]
xor ebx, dword [0x104b70d0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b70c1], cl
inc eax
cmp eax, 0xc
jb 0x10236cb0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b70cc
push 0x104b70c1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10236e80
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104bdd40], 0
push esi
jne 0x10236ee0
mov byte [0x104bdd40], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104bdd54]
xor ebx, dword [0x104bdd50]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104bdd41], cl
inc eax
cmp eax, 0xc
jb 0x10236ea0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104bdd4c
push 0x104bdd41
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x10237040
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b8760], 0
push esi
jne 0x102370a0
mov byte [0x104b8760], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b8774]
xor ebx, dword [0x104b8770]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b8761], cl
inc eax
cmp eax, 0xc
jb 0x10237060
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b876c
push 0x104b8761
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10237230
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104bcc60], 0
push esi
jne 0x10237290
mov byte [0x104bcc60], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104bcc74]
xor ebx, dword [0x104bcc70]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + str.R_nU], cl
inc eax
cmp eax, 0xe
jb 0x10237250
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104bcc6e
push str.R_nU
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x102373c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b5460], 0
push esi
jne 0x10237420
mov byte [0x104b5460], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b5474]
xor ebx, dword [0x104b5470]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + str._nD_], cl
inc eax
cmp eax, 0xe
jb 0x102373e0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b546e
push str._nD_
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x102375b0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b7920], 0
push esi
jne 0x10237610
mov byte [0x104b7920], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b7934]
xor ebx, dword [0x104b7930]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b7921], cl
inc eax
cmp eax, 0xe
jb 0x102375d0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b792e
push 0x104b7921
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x10237770
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b61f0], 0
push esi
jne 0x102377d0
mov byte [0x104b61f0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b6204]
xor ebx, dword [0x104b6200]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b61f1], cl
inc eax
cmp eax, 0xe
jb 0x10237790
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b61fe
push 0x104b61f1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10237960
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b6110], 0
push esi
jne 0x102379c0
mov byte [0x104b6110], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b6124]
xor ebx, dword [0x104b6120]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b6111], cl
inc eax
cmp eax, 0xf
jb 0x10237980
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b611f
push 0x104b6111
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10237af0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ba660], 0
push esi
jne 0x10237b50
mov byte [0x104ba660], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ba674]
xor ebx, dword [0x104ba670]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ba661], cl
inc eax
cmp eax, 0xf
jb 0x10237b10
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ba66f
push 0x104ba661
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10237ce0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104be700], 0
push esi
jne 0x10237d40
mov byte [0x104be700], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104be714]
xor ebx, dword [0x104be710]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104be701], cl
inc eax
cmp eax, 0xf
jb 0x10237d00
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104be70f
push 0x104be701
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x10237ea0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b4fc0], 0
push esi
jne 0x10237f00
mov byte [0x104b4fc0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b4fd4]
xor ebx, dword [0x104b4fd0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b4fc1], cl
inc eax
cmp eax, 0xf
jb 0x10237ec0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b4fcf
push 0x104b4fc1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10238090
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b71f0], 0
push esi
jne 0x102380f0
mov byte [0x104b71f0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b7204]
xor ebx, dword [0x104b7200]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b71f1], cl
inc eax
cmp eax, 0xc
jb 0x102380b0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b71fc
push 0x104b71f1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10238220
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104bc420], 0
push esi
jne 0x10238280
mov byte [0x104bc420], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104bc434]
xor ebx, dword [0x104bc430]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104bc421], cl
inc eax
cmp eax, 0xc
jb 0x10238240
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104bc42c
push 0x104bc421
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10238410
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b81d0], 0
push esi
jne 0x10238470
mov byte [0x104b81d0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b81e4]
xor ebx, dword [0x104b81e0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b81d1], cl
inc eax
cmp eax, 0xc
jb 0x10238430
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b81dc
push 0x104b81d1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x102385d0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104bd6f0], 0
push esi
jne 0x10238630
mov byte [0x104bd6f0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104bd704]
xor ebx, dword [0x104bd700]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104bd6f1], cl
inc eax
cmp eax, 0xc
jb 0x102385f0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104bd6fc
push 0x104bd6f1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1023b350
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b54b0], 0
push esi
jne 0x1023b3b0
mov byte [0x104b54b0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b54cc]
xor ebx, dword [0x104b54c8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b54b1], cl
inc eax
cmp eax, 0x12
jb 0x1023b370
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b54c2
push 0x104b54b1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1023bcc0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ba2c0], 0
push esi
jne 0x1023bd20
mov byte [0x104ba2c0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ba2d4]
xor ebx, dword [0x104ba2d0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ba2c1], cl
inc eax
cmp eax, 0xc
jb 0x1023bce0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ba2cc
push 0x104ba2c1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1023c060
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b9c10], 0
push esi
jne 0x1023c0c0
mov byte [0x104b9c10], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b9c24]
xor ebx, dword [0x104b9c20]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b9c11], cl
inc eax
cmp eax, 0xc
jb 0x1023c080
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b9c1c
push 0x104b9c11
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x1023c0e0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b6dd0], 0
push esi
jne 0x1023c140
mov byte [0x104b6dd0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b6de4]
xor ebx, dword [0x104b6de0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b6dd1], cl
inc eax
cmp eax, 0xb
jb 0x1023c100
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b6ddb
push 0x104b6dd1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1023c160
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104bb8a0], 0
push esi
jne 0x1023c1c0
mov byte [0x104bb8a0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104bb8bc]
xor ebx, dword [0x104bb8b8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104bb8a1], cl
inc eax
cmp eax, 0x10
jb 0x1023c180
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104bb8b0
push 0x104bb8a1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1023c1e0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b5350], 0
push esi
jne 0x1023c240
mov byte [0x104b5350], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b5364]
xor ebx, dword [0x104b5360]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b5351], cl
inc eax
cmp eax, 0xf
jb 0x1023c200
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b535f
push 0x104b5351
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1023c260
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104bbf00], 0
push esi
jne 0x1023c2c0
mov byte [0x104bbf00], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104bbf1c]
xor ebx, dword [0x104bbf18]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104bbf01], cl
inc eax
cmp eax, 0x15
jb 0x1023c280
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104bbf15
push 0x104bbf01
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x1023c2e0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b4d40], 0
push esi
jne 0x1023c340
mov byte [0x104b4d40], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b4d54]
xor ebx, dword [0x104b4d50]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b4d41], cl
inc eax
cmp eax, 0xd
jb 0x1023c300
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b4d4d
push 0x104b4d41
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1023c360
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b9940], 0
push esi
jne 0x1023c3c0
mov byte [0x104b9940], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b9954]
xor ebx, dword [0x104b9950]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b9941], cl
inc eax
cmp eax, 0xc
jb 0x1023c380
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b994c
push 0x104b9941
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1023c730
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b6c70], 0
push esi
jne 0x1023c790
mov byte [0x104b6c70], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b6c84]
xor ebx, dword [0x104b6c80]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b6c71], cl
inc eax
cmp eax, 0xc
jb 0x1023c750
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b6c7c
push 0x104b6c71
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1023c7b0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b5760], 0
push esi
jne 0x1023c810
mov byte [0x104b5760], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b5774]
xor ebx, dword [0x104b5770]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b5761], cl
inc eax
cmp eax, 0xc
jb 0x1023c7d0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b576c
push 0x104b5761
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x1023dac0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b9cf0], 0
push esi
jne 0x1023db20
mov byte [0x104b9cf0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b9d04]
xor ebx, dword [0x104b9d00]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b9cf1], cl
inc eax
cmp eax, 0xc
jb 0x1023dae0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b9cfc
push 0x104b9cf1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1023db40
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b52e0], 0
push esi
jne 0x1023dba0
mov byte [0x104b52e0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b52f4]
xor ebx, dword [0x104b52f0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b52e1], cl
inc eax
cmp eax, 0xc
jb 0x1023db60
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b52ec
push 0x104b52e1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1023e040
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b7dd0], 0
push esi
jne 0x1023e0a0
mov byte [0x104b7dd0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b7de4]
xor ebx, dword [0x104b7de0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b7dd1], cl
inc eax
cmp eax, 0xc
jb 0x1023e060
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b7ddc
push 0x104b7dd1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1023e4e0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104bdc90], 0
push esi
jne 0x1023e540
mov byte [0x104bdc90], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104bdca4]
xor ebx, dword [0x104bdca0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104bdc91], cl
inc eax
cmp eax, 0xc
jb 0x1023e500
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104bdc9c
push 0x104bdc91
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4