joyce8/EMBER2024-capa huggingface dataset:
Function at 0x101515d0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b0a50], 0
push esi
jne 0x10151630
mov byte [0x104b0a50], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b0a64]
xor ebx, dword [0x104b0a60]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b0a51], cl
inc eax
cmp eax, 0xc
jb 0x101515f0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b0a5c
push 0x104b0a51
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10151dc0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104acba0], 0
push esi
jne 0x10151e20
mov byte [0x104acba0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104acbb4]
xor ebx, dword [0x104acbb0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104acba1], cl
inc eax
cmp eax, 0xb
jb 0x10151de0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104acbab
push 0x104acba1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x101524f0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ae780], 0
push esi
jne 0x10152550
mov byte [0x104ae780], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ae794]
xor ebx, dword [0x104ae790]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ae781], cl
inc eax
cmp eax, 0xb
jb 0x10152510
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ae78b
push 0x104ae781
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10152720
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b0390], 0
push esi
jne 0x10152780
mov byte [0x104b0390], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b03a4]
xor ebx, dword [0x104b03a0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b0391], cl
inc eax
cmp eax, 0xe
jb 0x10152740
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b039e
push 0x104b0391
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x101527a0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b0720], 0
push esi
jne 0x10152800
mov byte [0x104b0720], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b0744]
xor ebx, dword [0x104b0740]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b0721], cl
inc eax
cmp eax, 0x1b
jb 0x101527c0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b073b
push 0x104b0721
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10152c70
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b00d0], 0
push esi
jne 0x10152cd0
mov byte [0x104b00d0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b00ec]
xor ebx, dword [0x104b00e8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + str.t_nG_vOKC], cl
inc eax
cmp eax, 0x11
jb 0x10152c90
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b00e1
push str.t_nG_vOKC
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10152cf0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104aef60], 0
push esi
jne 0x10152d50
mov byte [0x104aef60], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104aef74]
xor ebx, dword [0x104aef70]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104aef61], cl
inc eax
cmp eax, 0xf
jb 0x10152d10
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104aef6f
push 0x104aef61
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10152d70
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104adc20], 0
push esi
jne 0x10152dd0
mov byte [0x104adc20], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104adc3c]
xor ebx, dword [0x104adc38]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104adc21], cl
inc eax
cmp eax, 0x13
jb 0x10152d90
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104adc33
push 0x104adc21
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x10152df0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ae870], 0
push esi
jne 0x10152e50
mov byte [0x104ae870], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ae884]
xor ebx, dword [0x104ae880]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ae871], cl
inc eax
cmp eax, 0xf
jb 0x10152e10
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ae87f
push 0x104ae871
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10152e70
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ae230], 0
push esi
jne 0x10152ed0
mov byte [0x104ae230], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ae24c]
xor ebx, dword [0x104ae248]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ae231], cl
inc eax
cmp eax, 0x12
jb 0x10152e90
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ae242
push 0x104ae231
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10152ef0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ae180], 0
push esi
jne 0x10152f50
mov byte [0x104ae180], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ae19c]
xor ebx, dword [0x104ae198]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ae181], cl
inc eax
cmp eax, 0x10
jb 0x10152f10
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ae190
push 0x104ae181
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10152f70
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ac6b0], 0
push esi
jne 0x10152fd0
mov byte [0x104ac6b0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ac6cc]
xor ebx, dword [0x104ac6c8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ac6b1], cl
inc eax
cmp eax, 0x11
jb 0x10152f90
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ac6c1
push 0x104ac6b1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x10152ff0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b0890], 0
push esi
jne 0x10153050
mov byte [0x104b0890], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b08a4]
xor ebx, dword [0x104b08a0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b0891], cl
inc eax
cmp eax, 0xd
jb 0x10153010
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b089d
push 0x104b0891
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10153700
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104aea00], 0
push esi
jne 0x10153760
mov byte [0x104aea00], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104aea14]
xor ebx, dword [0x104aea10]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104aea01], cl
inc eax
cmp eax, 0xe
jb 0x10153720
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104aea0e
push 0x104aea01
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10153780
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ae0a0], 0
push esi
jne 0x101537e0
mov byte [0x104ae0a0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ae0c4]
xor ebx, dword [0x104ae0c0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ae0a1], cl
inc eax
cmp eax, 0x18
jb 0x101537a0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ae0b8
push 0x104ae0a1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10153800
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104afda0], 0
push esi
jne 0x10153860
mov byte [0x104afda0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104afdb4]
xor ebx, dword [0x104afdb0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104afda1], cl
inc eax
cmp eax, 0xd
jb 0x10153820
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104afdad
push 0x104afda1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x10153ac0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ad060], 0
push esi
jne 0x10153b20
mov byte [0x104ad060], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ad084]
xor ebx, dword [0x104ad080]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ad061], cl
inc eax
cmp eax, 0x1c
jb 0x10153ae0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ad07c
push 0x104ad061
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10153b40
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104af750], 0
push esi
jne 0x10153ba0
mov byte [0x104af750], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104af764]
xor ebx, dword [0x104af760]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104af751], cl
inc eax
cmp eax, 0xf
jb 0x10153b60
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104af75f
push 0x104af751
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10153bc0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104af100], 0
push esi
jne 0x10153c20
mov byte [0x104af100], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104af114]
xor ebx, dword [0x104af110]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104af101], cl
inc eax
cmp eax, 0xd
jb 0x10153be0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104af10d
push 0x104af101
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10153c40
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b0800], 0
push esi
jne 0x10153ca0
mov byte [0x104b0800], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b081c]
xor ebx, dword [0x104b0818]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + str._tN_Q], cl
inc eax
cmp eax, 0x13
jb 0x10153c60
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b0813
push str._tN_Q
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x10153cc0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104af610], 0
push esi
jne 0x10153d20
mov byte [0x104af610], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104af62c]
xor ebx, dword [0x104af628]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104af611], cl
inc eax
cmp eax, 0x14
jb 0x10153ce0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104af624
push 0x104af611
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10153d40
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ae160], 0
push esi
jne 0x10153da0
mov byte [0x104ae160], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ae174]
xor ebx, dword [0x104ae170]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ae161], cl
inc eax
cmp eax, 0xf
jb 0x10153d60
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ae16f
push 0x104ae161
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10153dc0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ae6e0], 0
push esi
jne 0x10153e20
mov byte [0x104ae6e0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ae6f4]
xor ebx, dword [0x104ae6f0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ae6e1], cl
inc eax
cmp eax, 0xd
jb 0x10153de0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ae6ed
push 0x104ae6e1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10153e40
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ae680], 0
push esi
jne 0x10153ea0
mov byte [0x104ae680], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ae694]
xor ebx, dword [0x104ae690]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ae681], cl
inc eax
cmp eax, 0xc
jb 0x10153e60
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ae68c
push 0x104ae681
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x10154030
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ac860], 0
push esi
jne 0x10154090
mov byte [0x104ac860], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ac87c]
xor ebx, dword [0x104ac878]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ac861], cl
inc eax
cmp eax, 0x12
jb 0x10154050
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ac872
push 0x104ac861
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x101540b0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b0190], 0
push esi
jne 0x10154110
mov byte [0x104b0190], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b01ac]
xor ebx, dword [0x104b01a8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b0191], cl
inc eax
cmp eax, 0x12
jb 0x101540d0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b01a2
push 0x104b0191
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x101542a0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ad750], 0
push esi
jne 0x10154300
mov byte [0x104ad750], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ad764]
xor ebx, dword [0x104ad760]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ad751], cl
inc eax
cmp eax, 0xf
jb 0x101542c0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ad75f
push 0x104ad751
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10154320
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ad300], 0
push esi
jne 0x10154380
mov byte [0x104ad300], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ad324]
xor ebx, dword [0x104ad320]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ad301], cl
inc eax
cmp eax, 0x18
jb 0x10154340
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ad318
push 0x104ad301
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x10154580
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ac9f0], 0
push esi
jne 0x101545e0
mov byte [0x104ac9f0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104aca04]
xor ebx, dword [0x104aca00]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ac9f1], cl
inc eax
cmp eax, 0xc
jb 0x101545a0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ac9fc
push 0x104ac9f1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10154600
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104afc40], 0
push esi
jne 0x10154660
mov byte [0x104afc40], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104afc5c]
xor ebx, dword [0x104afc58]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104afc41], cl
inc eax
cmp eax, 0x10
jb 0x10154620
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104afc50
push 0x104afc41
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10154680
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ae1a0], 0
push esi
jne 0x101546e0
mov byte [0x104ae1a0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ae1bc]
xor ebx, dword [0x104ae1b8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ae1a1], cl
inc eax
cmp eax, 0x10
jb 0x101546a0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ae1b0
push 0x104ae1a1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10154700
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b02a0], 0
push esi
jne 0x10154760
mov byte [0x104b02a0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b02b4]
xor ebx, dword [0x104b02b0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b02a1], cl
inc eax
cmp eax, 0xd
jb 0x10154720
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b02ad
push 0x104b02a1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4