joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10025b24
Capabilities:
Encode data using xor
Resolve function by fnv-1a hash

Disassembly:
push edi
push esi
sub esp, 0x1c
mov edi, dword [esp + 0x28]
mov ecx, dword [0x10055190]
test ecx, ecx
jne 0x10025bda
mov esi, dword [0x10054f70]
test esi, esi
jne 0x10025b56
mov ecx, 0xf8f45725
call fcn.10026355
mov esi, eax
mov dword [0x10054f70], eax
mov dword [esp + 0x18], 0x818f86
movaps xmm0, xmmword [0x10041cd0]
movups xmmword [esp + 8], xmm0
xor eax, eax
inc eax
mov ecx, eax
add cl, 0xd2
xor byte [esp + eax + 8], cl
inc eax
cmp eax, 0x13
jne 0x10025b6d
mov byte [esp + 0x1b], 0
mov ecx, dword [0x10054f74]
test ecx, ecx
jne 0x10025b9c
mov ecx, 0x53b2070f
call fcn.10026355
mov ecx, eax
mov dword [0x10054f74], eax
mov dword [esp + 2], 0xb2b8bcba
mov word [esp + 6], 0xac
mov word [esp], 0xba77
xor eax, eax
inc eax
mov edx, eax
add dl, 0xd2
xor byte [esp + eax], dl
inc eax
cmp eax, 7
jne 0x10025bb4
mov eax, esp
mov byte [eax + 7], 0
push eax
call ecx
lea ecx, [esp + 8]
push ecx
push eax
call esi
mov ecx, eax
mov dword [0x10055190], eax
push edi
call ecx
add esp, 0x1c
pop esi
pop edi
ret 4

Function at 0x10025be6
Capabilities:
Encode data using xor
Resolve function by fnv-1a hash

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x1c
mov eax, dword [esp + 0x4c]
mov ebx, dword [esp + 0x48]
mov edx, dword [esp + 0x44]
mov edi, dword [esp + 0x40]
mov ebp, dword [esp + 0x3c]
mov esi, dword [esp + 0x38]
mov ecx, dword [0x10055194]
test ecx, ecx
jne 0x10025cc7
mov esi, dword [0x10054f70]
test esi, esi
jne 0x10025c2e
mov ecx, 0xf8f45725
call fcn.10026355
mov esi, eax
mov dword [0x10054f70], eax
mov byte [esp + 0x18], 0
movaps xmm0, xmmword [0x10041ce0]
movups xmmword [esp + 8], xmm0
xor eax, eax
inc eax
mov ecx, eax
add cl, 0xd2
xor byte [esp + eax + 8], cl
inc eax
cmp eax, 0x10
jne 0x10025c42
mov byte [esp + 0x18], 0
mov ecx, dword [0x10054f74]
test ecx, ecx
jne 0x10025c71
mov ecx, 0x53b2070f
call fcn.10026355
mov ecx, eax
mov dword [0x10054f74], eax
mov dword [esp + 2], 0xb2b8bcba
mov word [esp + 6], 0xac
mov word [esp], 0xba77
xor eax, eax
inc eax
mov edx, eax
add dl, 0xd2
xor byte [esp + eax], dl
inc eax
cmp eax, 7
jne 0x10025c89
mov eax, esp
mov byte [eax + 7], 0
push eax
call ecx
lea ecx, [esp + 8]
push ecx
push eax
call esi
mov ecx, eax
mov dword [0x10055194], eax
mov esi, dword [esp + 0x38]
mov ebp, dword [esp + 0x3c]
mov edi, dword [esp + 0x40]
mov ebx, dword [esp + 0x48]
mov eax, dword [esp + 0x4c]
mov edx, dword [esp + 0x44]
push eax
push ebx
push edx
push edi
push ebp
push esi
push dword [esp + 0x4c]
push dword [esp + 0x4c]
call ecx
add esp, 0x1c
pop esi
pop edi
pop ebx
pop ebp
ret 0x20
Function at 0x10025ce2
Capabilities:
Encode data using xor
Resolve function by fnv-1a hash

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x1c
mov edi, dword [esp + 0x3c]
mov ebp, dword [esp + 0x38]
mov ebx, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
mov ecx, dword [0x10055198]
test ecx, ecx
jne 0x10025dae
mov esi, dword [0x10054f70]
test esi, esi
jne 0x10025d22
mov ecx, 0xf8f45725
call fcn.10026355
mov esi, eax
mov dword [0x10054f70], eax
mov word [esp + 0x18], 0xa28c
mov byte [esp + 0x1a], 0
movaps xmm0, xmmword [0x10041cf0]
movups xmmword [esp + 8], xmm0
xor eax, eax
inc eax
mov ecx, eax
add cl, 0xd2
xor byte [esp + eax + 8], cl
inc eax
cmp eax, 0x12
jne 0x10025d3d
mov byte [esp + 0x1a], 0
mov ecx, dword [0x10054f74]
test ecx, ecx
jne 0x10025d6c
mov ecx, 0x53b2070f
call fcn.10026355
mov ecx, eax
mov dword [0x10054f74], eax
mov dword [esp + 2], 0xb2b8bcba
mov word [esp + 6], 0xac
mov word [esp], 0xba77
xor eax, eax
inc eax
mov edx, eax
add dl, 0xd2
xor byte [esp + eax], dl
inc eax
cmp eax, 7
jne 0x10025d84
mov eax, esp
mov byte [eax + 7], 0
push eax
call ecx
lea ecx, [esp + 8]
push ecx
push eax
call esi
mov ecx, eax
mov dword [0x10055198], eax
mov eax, dword [esp + 0x30]
push edi
push ebp
push ebx
push eax
call ecx
add esp, 0x1c
pop esi
pop edi
pop ebx
pop ebp
ret 0x10

Function at 0x10025dbe
Capabilities:
Encode data using xor
Resolve function by fnv-1a hash

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x20
mov edi, dword [esp + 0x40]
mov ebp, dword [esp + 0x3c]
mov ebx, dword [esp + 0x38]
mov eax, dword [esp + 0x34]
mov ecx, dword [0x1005519c]
test ecx, ecx
jne 0x10025e92
mov esi, dword [0x10054f70]
test esi, esi
jne 0x10025dfe
mov ecx, 0xf8f45725
call fcn.10026355
mov esi, eax
mov dword [0x10054f70], eax
mov dword [esp + 0x18], 0x97818783
mov word [esp + 0x1c], 0xa695
mov byte [esp + 0x1e], 0
movaps xmm0, xmmword [0x10041d00]
movups xmmword [esp + 8], xmm0
xor eax, eax
inc eax
mov ecx, eax
add cl, 0xd2
xor byte [esp + eax + 8], cl
inc eax
cmp eax, 0x16
jne 0x10025e21
mov byte [esp + 0x1e], 0
mov ecx, dword [0x10054f74]
test ecx, ecx
jne 0x10025e50
mov ecx, 0x53b2070f
call fcn.10026355
mov ecx, eax
mov dword [0x10054f74], eax
mov dword [esp + 2], 0xb2b8bcba
mov word [esp + 6], 0xac
mov word [esp], 0xba77
xor eax, eax
inc eax
mov edx, eax
add dl, 0xd2
xor byte [esp + eax], dl
inc eax
cmp eax, 7
jne 0x10025e68
mov eax, esp
mov byte [eax + 7], 0
push eax
call ecx
lea ecx, [esp + 8]
push ecx
push eax
call esi
mov ecx, eax
mov dword [0x1005519c], eax
mov eax, dword [esp + 0x34]
push edi
push ebp
push ebx
push eax
call ecx
add esp, 0x20
pop esi
pop edi
pop ebx
pop ebp
ret 0x10
Function at 0x10025ea2
Capabilities:
Encode data using xor
Resolve function by fnv-1a hash

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x1c
mov ebx, dword [esp + 0x40]
mov edi, dword [esp + 0x3c]
mov ebp, dword [esp + 0x38]
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
mov ecx, dword [0x100551a0]
test ecx, ecx
jne 0x10025f76
mov esi, dword [0x10054f70]
test esi, esi
jne 0x10025ee6
mov ecx, 0xf8f45725
call fcn.10026355
mov esi, eax
mov dword [0x10054f70], eax
mov word [esp + 0x18], 0xa29a
mov byte [esp + 0x1a], 0
movaps xmm0, xmmword [0x10041d10]
movups xmmword [esp + 8], xmm0
xor eax, eax
inc eax
mov ecx, eax
add cl, 0xd2
xor byte [esp + eax + 8], cl
inc eax
cmp eax, 0x12
jne 0x10025f01
mov byte [esp + 0x1a], 0
mov ecx, dword [0x10054f74]
test ecx, ecx
jne 0x10025f30
mov ecx, 0x53b2070f
call fcn.10026355
mov ecx, eax
mov dword [0x10054f74], eax
mov dword [esp + 2], 0xb2b8bcba
mov word [esp + 6], 0xac
mov word [esp], 0xba77
xor eax, eax
inc eax
mov edx, eax
add dl, 0xd2
xor byte [esp + eax], dl
inc eax
cmp eax, 7
jne 0x10025f48
mov eax, esp
mov byte [eax + 7], 0
push eax
call ecx
lea ecx, [esp + 8]
push ecx
push eax
call esi
mov ecx, eax
mov dword [0x100551a0], eax
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x34]
push ebx
push edi
push ebp
push edx
push eax
call ecx
add esp, 0x1c
pop esi
pop edi
pop ebx
pop ebp
ret 0x14

Function at 0x10025f88
Capabilities:
Encode data using xor
Resolve function by fnv-1a hash

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x1c
mov edi, dword [esp + 0x3c]
mov ebp, dword [esp + 0x38]
mov ebx, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
mov ecx, dword [0x100551a4]
test ecx, ecx
jne 0x10026049
mov esi, dword [0x10054f70]
test esi, esi
jne 0x10025fc8
mov ecx, 0xf8f45725
call fcn.10026355
mov esi, eax
mov dword [0x10054f70], eax
mov word [esp + 0x18], 0x87
movaps xmm0, xmmword [0x10041d20]
movups xmmword [esp + 8], xmm0
movups xmm0, xmmword [esp + 9]
xorps xmm0, xmmword [0x10041ca0]
movups xmmword [esp + 9], xmm0
mov ecx, dword [0x10054f74]
test ecx, ecx
jne 0x10026007
mov ecx, 0x53b2070f
call fcn.10026355
mov ecx, eax
mov dword [0x10054f74], eax
mov dword [esp + 2], 0xb2b8bcba
mov word [esp + 6], 0xac
mov word [esp], 0xba77
xor eax, eax
inc eax
mov edx, eax
add dl, 0xd2
xor byte [esp + eax], dl
inc eax
cmp eax, 7
jne 0x1002601f
mov eax, esp
mov byte [eax + 7], 0
push eax
call ecx
lea ecx, [esp + 8]
push ecx
push eax
call esi
mov ecx, eax
mov dword [0x100551a4], eax
mov eax, dword [esp + 0x30]
push edi
push ebp
push ebx
push eax
call ecx
add esp, 0x1c
pop esi
pop edi
pop ebx
pop ebp
ret 0x10
Function at 0x1002605a
Capabilities:
Encode data using xor
Resolve function by fnv-1a hash

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x18
mov edi, dword [esp + 0x38]
mov ebp, dword [esp + 0x34]
mov ebx, dword [esp + 0x30]
mov eax, dword [esp + 0x2c]
mov ecx, dword [0x100551a8]
test ecx, ecx
jne 0x1002611a
mov esi, dword [0x10054f70]
test esi, esi
jne 0x1002609a
mov ecx, 0xf8f45725
call fcn.10026355
mov esi, eax
mov dword [0x10054f70], eax
movaps xmm0, xmmword [0x10041d30]
movups xmmword [esp + 8], xmm0
xor eax, eax
inc eax
mov ecx, eax
add cl, 0xd2
xor byte [esp + eax + 8], cl
inc eax
cmp eax, 0xf
jne 0x100260a9
mov byte [esp + 0x17], 0
mov ecx, dword [0x10054f74]
test ecx, ecx
jne 0x100260d8
mov ecx, 0x53b2070f
call fcn.10026355
mov ecx, eax
mov dword [0x10054f74], eax
mov dword [esp + 2], 0xb2b8bcba
mov word [esp + 6], 0xac
mov word [esp], 0xba77
xor eax, eax
inc eax
mov edx, eax
add dl, 0xd2
xor byte [esp + eax], dl
inc eax
cmp eax, 7
jne 0x100260f0
mov eax, esp
mov byte [eax + 7], 0
push eax
call ecx
lea ecx, [esp + 8]
push ecx
push eax
call esi
mov ecx, eax
mov dword [0x100551a8], eax
mov eax, dword [esp + 0x2c]
push edi
push ebp
push ebx
push eax
call ecx
add esp, 0x18
pop esi
pop edi
pop ebx
pop ebp
ret 0x10

Function at 0x1002618e
Capabilities:
Encode data using xor
Resolve function by fnv-1a hash

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x18
mov ebx, dword [esp + 0x3c]
mov edi, dword [esp + 0x38]
mov ebp, dword [esp + 0x34]
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x2c]
mov ecx, dword [0x100551ac]
test ecx, ecx
jne 0x1002626e
mov esi, dword [0x10054f70]
test esi, esi
jne 0x100261d2
mov ecx, 0xf8f45725
call fcn.10026355
mov esi, eax
mov dword [0x10054f70], eax
mov dword [esp + 0xa], 0xa287a5a0
mov dword [esp + 0xe], 0x92a3abbd
mov dword [esp + 0x12], 0x9eb1bbb2
mov byte [esp + 0x16], 0
mov word [esp + 8], 0xa748
xor eax, eax
inc eax
mov ecx, eax
add cl, 0xd2
xor byte [esp + eax + 8], cl
inc eax
cmp eax, 0xe
jne 0x100261f9
mov byte [esp + 0x16], 0
mov ecx, dword [0x10054f74]
test ecx, ecx
jne 0x10026228
mov ecx, 0x53b2070f
call fcn.10026355
mov ecx, eax
mov dword [0x10054f74], eax
mov dword [esp + 2], 0xb2b8bcba
mov word [esp + 6], 0xac
mov word [esp], 0xba77
xor eax, eax
inc eax
mov edx, eax
add dl, 0xd2
xor byte [esp + eax], dl
inc eax
cmp eax, 7
jne 0x10026240
mov eax, esp
mov byte [eax + 7], 0
push eax
call ecx
lea ecx, [esp + 8]
push ecx
push eax
call esi
mov ecx, eax
mov dword [0x100551ac], eax
mov eax, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
push ebx
push edi
push ebp
push edx
push eax
call ecx
add esp, 0x18
pop esi
pop edi
pop ebx
pop ebp
ret 0x14
Function at 0x10026280
Capabilities:
Encode data using xor
Resolve function by fnv-1a hash

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x1c
mov edi, dword [esp + 0x3c]
mov ebp, dword [esp + 0x38]
mov ebx, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
mov ecx, dword [0x100551b0]
test ecx, ecx
jne 0x10026345
mov esi, dword [0x10054f70]
test esi, esi
jne 0x100262c0
mov ecx, 0xf8f45725
call fcn.10026355
mov esi, eax
mov dword [0x10054f70], eax
mov byte [esp + 0x18], 0
movaps xmm0, xmmword [0x10041d40]
movups xmmword [esp + 8], xmm0
xor eax, eax
inc eax
mov ecx, eax
add cl, 0xd2
xor byte [esp + eax + 8], cl
inc eax
cmp eax, 0x10
jne 0x100262d4
mov byte [esp + 0x18], 0
mov ecx, dword [0x10054f74]
test ecx, ecx
jne 0x10026303
mov ecx, 0x53b2070f
call fcn.10026355
mov ecx, eax
mov dword [0x10054f74], eax
mov dword [esp + 2], 0xb2b8bcba
mov word [esp + 6], 0xac
mov word [esp], 0xba77
xor eax, eax
inc eax
mov edx, eax
add dl, 0xd2
xor byte [esp + eax], dl
inc eax
cmp eax, 7
jne 0x1002631b
mov eax, esp
mov byte [eax + 7], 0
push eax
call ecx
lea ecx, [esp + 8]
push ecx
push eax
call esi
mov ecx, eax
mov dword [0x100551b0], eax
mov eax, dword [esp + 0x30]
push edi
push ebp
push ebx
push eax
call ecx
add esp, 0x1c
pop esi
pop edi
pop ebx
pop ebp
ret 0x10

Function at 0x10026355
Capabilities:
Encode data using xor
Hash data using fnv
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x14
mov dword [esp + 0xc], ecx
mov eax, dword [0x10054f6c]
mov eax, dword [eax + 0x30]
mov edi, dword [eax + 0xc]
mov esi, dword [edi + 0x14]
add edi, 0x14
mov eax, dword [esi + 0x10]
movzx ecx, word [eax]
cmp ecx, 0x5a4d
jne 0x10026417
mov ecx, dword [eax + 0x3c]
cmp dword [eax + ecx], 0x4550
jne 0x10026417
cmp word [eax + ecx + 0x14], 0x60
jb 0x10026417
cmp dword [eax + ecx + 0x74], 0
je 0x10026417
mov edx, dword [eax + ecx + 0x78]
mov ecx, edx
mov dword [esp], edx
test edx, edx
je 0x10026417
mov ecx, dword [esp]
mov ecx, dword [eax + ecx + 0x18]
mov dword [esp + 0x10], ecx
test ecx, ecx
je 0x10026417
mov ecx, dword [esp]
mov ecx, dword [eax + ecx + 0x20]
add ecx, eax
mov dword [esp + 8], ecx
lea ecx, [eax + 1]
mov dword [esp + 4], ecx
xor ebx, ebx
mov ecx, dword [esp + 8]
mov ecx, dword [ecx + ebx*4]
mov dl, byte [eax + ecx]
test dl, dl
je 0x100263ff
add ecx, dword [esp + 4]
mov ebp, 0x811c9dc5
movsx edx, dl
xor edx, ebp
imul ebp, edx, 0x1000193
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x100263eb
jmp 0x10026404
mov ebp, 0x811c9dc5
cmp ebp, dword [esp + 0xc]
je 0x10026413
inc ebx
cmp ebx, dword [esp + 0x10]
jne 0x100263d4
jmp 0x10026417
test eax, eax
jne 0x1002642b
mov esi, dword [esi]
cmp esi, edi
jne 0x10026371
xor eax, eax
add esp, 0x14
pop esi
pop edi
pop ebx
pop ebp
ret
mov edx, dword [esp]
mov ecx, dword [eax + edx + 0x24]
add ecx, eax
mov edx, dword [eax + edx + 0x1c]
add edx, eax
movzx ecx, word [ecx + ebx*2]
add eax, dword [edx + ecx*4]
jmp 0x10026423
Function at 0x10026444
Capabilities:
Encode data using xor
Resolve function by fnv-1a hash

Disassembly:
push edi
push esi
sub esp, 0x24
mov edi, dword [esp + 0x30]
mov eax, dword [0x10055178]
test eax, eax
jne 0x10026501
mov esi, dword [0x10054f70]
test esi, esi
jne 0x10026475
mov ecx, 0xf8f45725
call fcn.10026355
mov esi, eax
mov dword [0x10054f70], eax
mov dword [esp + 0x1c], 0x8b8b8a96
mov byte [esp + 0x20], 0
movaps xmm0, xmmword [0x10041d50]
movups xmmword [esp + 0xc], xmm0
xor eax, eax
inc eax
mov ecx, eax
add cl, 0xd2
xor byte [esp + eax + 0xc], cl
inc eax
cmp eax, 0x14
jne 0x10026491
mov byte [esp + 0x20], 0
mov ecx, dword [0x10054f74]
test ecx, ecx
jne 0x100264c0
mov ecx, 0x53b2070f
call fcn.10026355
mov ecx, eax
mov dword [0x10054f74], eax
mov dword [esp + 2], 0xbbb3bba6
mov word [esp + 6], 0xebeb
mov byte [esp + 8], 0
mov word [esp], 0xb66b
xor eax, eax
inc eax
mov edx, eax
add dl, 0xd2
xor byte [esp + eax], dl
inc eax
cmp eax, 8
jne 0x100264dd
mov eax, esp
mov byte [eax + 8], 0
push eax
call ecx
lea ecx, [esp + 0xc]
push ecx
push eax
call esi
mov dword [0x10055178], eax
push edi
call eax
add esp, 0x24
pop esi
pop edi
ret 4

Function at 0x1002650c
Capabilities:
Encode data using xor
Resolve function by fnv-1a hash

Disassembly:
push edi
push esi
sub esp, 0x24
mov edi, dword [esp + 0x30]
mov eax, dword [0x1005517c]
test eax, eax
jne 0x100265c9
mov esi, dword [0x10054f70]
test esi, esi
jne 0x1002653d
mov ecx, 0xf8f45725
call fcn.10026355
mov esi, eax
mov dword [0x10054f70], eax
mov dword [esp + 0x1c], 0x8b8b8a96
mov byte [esp + 0x20], 0
movaps xmm0, xmmword [0x10041d60]
movups xmmword [esp + 0xc], xmm0
xor eax, eax
inc eax
mov ecx, eax
add cl, 0xd2
xor byte [esp + eax + 0xc], cl
inc eax
cmp eax, 0x14
jne 0x10026559
mov byte [esp + 0x20], 0
mov ecx, dword [0x10054f74]
test ecx, ecx
jne 0x10026588
mov ecx, 0x53b2070f
call fcn.10026355
mov ecx, eax
mov dword [0x10054f74], eax
mov dword [esp + 2], 0xbbb3bba6
mov word [esp + 6], 0xebeb
mov byte [esp + 8], 0
mov word [esp], 0xb66b
xor eax, eax
inc eax
mov edx, eax
add dl, 0xd2
xor byte [esp + eax], dl
inc eax
cmp eax, 8
jne 0x100265a5
mov eax, esp
mov byte [eax + 8], 0
push eax
call ecx
lea ecx, [esp + 0xc]
push ecx
push eax
call esi
mov dword [0x1005517c], eax
push edi
call eax
add esp, 0x24
pop esi
pop edi
ret 4

Function at 0x100266b0
Capabilities:
Resolve function by fnv-1a hash

Disassembly:
call fcn.1001b36a
test eax, eax
jne fcn.1001af02
xor eax, eax
ret

Function at 0x100266c0
Capabilities:
Encode data using xor
Resolve function by fnv-1a hash

Disassembly:
push esi
mov esi, ecx
push 0
push 1
push 2
call fcn.100266e0
mov dword [esi + 0x54], eax
cmp eax, 0xffffffff
je 0x100266da
xor eax, eax
pop esi
ret
pop esi
jmp fcn.1001af02
Function at 0x100266e0
Capabilities:
Encode data using xor
Resolve function by fnv-1a hash

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x10
mov ebp, dword [esp + 0x2c]
mov ebx, dword [esp + 0x28]
mov edi, dword [esp + 0x24]
mov ecx, dword [0x100551c0]
test ecx, ecx
jne 0x1002679e
mov esi, dword [0x100551b8]
test esi, esi
jne 0x1002671c
mov ecx, 0xf8f45725
call fcn.1002805c
mov esi, eax
mov dword [0x100551b8], eax
mov dword [esp + 2], 0x3525545d
mov byte [esp + 6], 0
mov word [esp], 0x5273
xor eax, eax
inc eax
mov ecx, eax
add cl, 0x3c
xor byte [esp + eax], cl
inc eax
cmp eax, 6
jne 0x10026732
mov byte [esp + 6], 0
mov ecx, dword [0x100551bc]
test ecx, ecx
jne 0x10026760
mov ecx, 0x53b2070f
call fcn.1002805c
mov ecx, eax
mov dword [0x100551bc], eax
mov dword [esp + 0xa], 0x7373600c
mov byte [esp + 0xe], 0
mov word [esp + 8], 0x4e77
xor eax, eax
inc eax
mov edx, eax
add dl, 0x3c
xor byte [esp + eax + 8], dl
inc eax
cmp eax, 6
jne 0x10026777
lea eax, [esp + 8]
mov byte [eax + 6], 0
push eax
call ecx
mov ecx, esp
push ecx
push eax
call esi
mov ecx, eax
mov dword [0x100551c0], eax
push ebp
push ebx
push edi
call ecx
add esp, 0x10
pop esi
pop edi
pop ebx
pop ebp
ret 0xc

Function at 0x10026908
Capabilities:
Encode data using xor
Resolve function by fnv-1a hash

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x14
mov ebp, dword [esp + 0x30]
mov ebx, dword [esp + 0x2c]
mov edi, dword [esp + 0x28]
mov ecx, dword [0x100551c4]
test ecx, ecx
jne 0x100269c4
mov esi, dword [0x100551b8]
test esi, esi
jne 0x10026944
mov ecx, 0xf8f45725
call fcn.1002805c
mov esi, eax
mov dword [0x100551b8], eax
mov dword [esp + 0xa], 0x311f4b5b
mov dword [esp + 0xe], 0x2a2c36
mov word [esp + 8], 0x5369
movsd xmm0, qword [esp + 9]
xorps xmm0, xmmword [str.___ABCD]
movlps qword [esp + 9], xmm0
mov ecx, dword [0x100551bc]
test ecx, ecx
jne 0x10026988
mov ecx, 0x53b2070f
call fcn.1002805c
mov ecx, eax
mov dword [0x100551bc], eax
mov dword [esp + 2], 0x7373600c
mov byte [esp + 6], 0
mov word [esp], 0x4e77
xor eax, eax
inc eax
mov edx, eax
add dl, 0x3c
xor byte [esp + eax], dl
inc eax
cmp eax, 6
jne 0x1002699e
mov eax, esp
mov byte [eax + 6], 0
push eax
call ecx
lea ecx, [esp + 8]
push ecx
push eax
call esi
mov ecx, eax
mov dword [0x100551c4], eax
push ebp
push ebx
push edi
call ecx
add esp, 0x14
pop esi
pop edi
pop ebx
pop ebp
ret 0xc
Function at 0x100269d4
Capabilities:
Encode data using xor
Resolve function by fnv-1a hash

Disassembly:
push edi
push esi
sub esp, 0x14
mov edi, dword [esp + 0x20]
mov ecx, dword [0x100551c8]
test ecx, ecx
jne 0x10026a86
mov esi, dword [0x100551b8]
test esi, esi
jne 0x10026a06
mov ecx, 0xf8f45725
call fcn.1002805c
mov esi, eax
mov dword [0x100551b8], eax
mov dword [esp + 0xa], 0x201f4b5b
mov dword [esp + 0xe], 0x362726
mov word [esp + 8], 0x5369
movsd xmm0, qword [esp + 9]
xorps xmm0, xmmword [str.___ABCD]
movlps qword [esp + 9], xmm0
mov ecx, dword [0x100551bc]
test ecx, ecx
jne 0x10026a4a
mov ecx, 0x53b2070f
call fcn.1002805c
mov ecx, eax
mov dword [0x100551bc], eax
mov dword [esp + 2], 0x7373600c
mov byte [esp + 6], 0
mov word [esp], 0x4e77
xor eax, eax
inc eax
mov edx, eax
add dl, 0x3c
xor byte [esp + eax], dl
inc eax
cmp eax, 6
jne 0x10026a60
mov eax, esp
mov byte [eax + 6], 0
push eax
call ecx
lea ecx, [esp + 8]
push ecx
push eax
call esi
mov ecx, eax
mov dword [0x100551c8], eax
push edi
call ecx
add esp, 0x14
pop esi
pop edi
ret 4
Function at 0x10026d36
Capabilities:
Encode data using xor
Resolve function by fnv-1a hash

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x14
mov ebp, dword [esp + 0x3c]
mov ebx, dword [esp + 0x38]
mov edi, dword [esp + 0x34]
mov esi, dword [esp + 0x30]
movzx eax, word [esp + 0x2c]
mov edx, dword [esp + 0x28]
mov ecx, dword [0x100551cc]
test ecx, ecx
jne 0x10026e22
mov esi, dword [0x100551b8]
test esi, esi
jne 0x10026d7f
mov ecx, 0xf8f45725
call fcn.1002805c
mov esi, eax
mov dword [0x100551b8], eax
mov dword [esp + 0xa], 0x24356e4d
mov dword [esp + 0xe], 0x41b3a30
mov byte [esp + 0x12], 0
mov word [esp + 8], 0x5344
xor eax, eax
inc eax
mov ecx, eax
add cl, 0x3c
xor byte [esp + eax + 8], cl
inc eax
cmp eax, 0xa
jne 0x10026d9e
mov byte [esp + 0x12], 0
mov ecx, dword [0x100551bc]
test ecx, ecx
jne 0x10026dcd
mov ecx, 0x53b2070f
call fcn.1002805c
mov ecx, eax
mov dword [0x100551bc], eax
mov dword [esp + 2], 0x28305e4d
mov byte [esp + 6], 0
mov word [esp], 0x5364
xor eax, eax
inc eax
mov edx, eax
add dl, 0x3c
xor byte [esp + eax], dl
inc eax
cmp eax, 6
jne 0x10026de3
mov eax, esp
mov byte [eax + 6], 0
push eax
call ecx
lea ecx, [esp + 8]
push ecx
push eax
call esi
mov ecx, eax
mov dword [0x100551cc], eax
mov edx, dword [esp + 0x28]
mov esi, dword [esp + 0x30]
mov edi, dword [esp + 0x34]
mov ebx, dword [esp + 0x38]
mov ebp, dword [esp + 0x3c]
movzx eax, word [esp + 0x2c]
movzx eax, ax
push ebp
push ebx
push edi
push esi
push eax
push edx
call ecx
add esp, 0x14
pop esi
pop edi
pop ebx
pop ebp
ret 0x18

Function at 0x10026e38
Capabilities:
Encode data using xor
Resolve function by fnv-1a hash

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x10
mov ebp, dword [esp + 0x2c]
mov ebx, dword [esp + 0x28]
mov edi, dword [esp + 0x24]
mov ecx, dword [0x100551d0]
test ecx, ecx
jne 0x10026ef8
mov esi, dword [0x100551b8]
test esi, esi
jne 0x10026e74
mov ecx, 0xf8f45725
call fcn.1002805c
mov esi, eax
mov dword [0x100551b8], eax
mov dword [esp + 2], 0x22255150
mov word [esp + 6], 0x36
mov word [esp], 0x5263
xor eax, eax
inc eax
mov ecx, eax
add cl, 0x3c
xor byte [esp + eax], cl
inc eax
cmp eax, 7
jne 0x10026e8c
mov byte [esp + 7], 0
mov ecx, dword [0x100551bc]
test ecx, ecx
jne 0x10026eba
mov ecx, 0x53b2070f
call fcn.1002805c
mov ecx, eax
mov dword [0x100551bc], eax
mov dword [esp + 0xa], 0x7373600c
mov byte [esp + 0xe], 0
mov word [esp + 8], 0x4e77
xor eax, eax
inc eax
mov edx, eax
add dl, 0x3c
xor byte [esp + eax + 8], dl
inc eax
cmp eax, 6
jne 0x10026ed1
lea eax, [esp + 8]
mov byte [eax + 6], 0
push eax
call ecx
mov ecx, esp
push ecx
push eax
call esi
mov ecx, eax
mov dword [0x100551d0], eax
push ebp
push ebx
push edi
call ecx
add esp, 0x10
pop esi
pop edi
pop ebx
pop ebp
ret 0xc