joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10010a20
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x100d4a61
push eax
mov dword fs:[0], esp
sub esp, 0x28
mov eax, dword fs:[0x2c]
mov edx, dword [0x100fbfac]
push esi
mov esi, ecx
mov edx, dword [eax + edx*4]
mov eax, dword [0x100fc460]
cmp eax, dword [edx + 4]
jle 0x10010af5
push 0x100fc460
call fcn.100d136a
add esp, 4
cmp dword [0x100fc460], 0xffffffff
jne 0x10010af5
mov dword [ebp - 4], 0
xor ecx, ecx
movaps xmm0, xmmword [0x100f13e0]
movups xmmword [ebp - 0x2f], xmm0
mov dword [ebp - 0x1f], 0x100b4bd
lea eax, [ecx - 0x40]
xor byte [ebp + ecx - 0x2f], al
inc ecx
cmp ecx, 0x12
jb 0x10010a93
mov byte [ebp - 0x1c], 0
xor ecx, ecx
mov dword [ebp - 0x1b], 0x819d9584
mov dword [ebp - 0x17], 0x82a3b6a5
mov dword [ebp - 0x13], 0xbfa3bda6
mov word [ebp - 0xf], 0xb5
mov byte [ebp - 0xd], 1
lea eax, [ecx - 0x40]
xor byte [ebp + ecx - 0x1b], al
inc ecx
cmp ecx, 0xd
jb 0x10010ac5
lea eax, [ebp - 0x2f]
mov byte [ebp - 0xd], 0
push eax
lea eax, [ebp - 0x1b]
push eax
call fcn.10007f10
push 0x100fc460
mov dword [0x100fc490], eax
call fcn.100d1320
add esp, 4
mov eax, dword [0x100fc490]
mov ecx, dword [ebp - 0xc]
movss xmm0, dword [eax + esi]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret

Function at 0x10010b10
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x100d4a81
push eax
mov dword fs:[0], esp
sub esp, 0x20
mov eax, dword fs:[0x2c]
mov edx, dword [0x100fbfac]
push esi
mov esi, ecx
mov edx, dword [eax + edx*4]
mov eax, dword [0x100fc45c]
cmp eax, dword [edx + 4]
jle 0x10010bf2
push 0x100fc45c
call fcn.100d136a
add esp, 4
cmp dword [0x100fc45c], 0xffffffff
jne 0x10010bf2
mov dword [ebp - 4], 0
xor ecx, ecx
mov dword [ebp - 0x17], 0x8bab9ead
mov dword [ebp - 0x13], 0xb3aaa4a1
mov word [ebp - 0xf], 0xa0
mov byte [ebp - 0xd], 1
nop dword [eax]
lea eax, [ecx - 0x40]
xor byte [ebp + ecx - 0x17], al
inc ecx
cmp ecx, 9
jb 0x10010b90
mov byte [ebp - 0xd], 0
xor ecx, ecx
mov dword [ebp - 0x26], 0x819d9584
mov dword [ebp - 0x22], 0x97a3b6a5
mov dword [ebp - 0x1e], 0xaeb3a8a4
mov word [ebp - 0x1a], 0xbe
mov byte [ebp - 0x18], 1
lea eax, [ecx - 0x40]
xor byte [ebp + ecx - 0x26], al
inc ecx
cmp ecx, 0xd
jb 0x10010bc2
lea eax, [ebp - 0x17]
mov byte [ebp - 0x18], 0
push eax
lea eax, [ebp - 0x26]
push eax
call fcn.10007f10
push 0x100fc45c
mov dword [0x100fc478], eax
call fcn.100d1320
add esp, 4
mov eax, dword [0x100fc478]
mov ecx, dword [ebp - 0xc]
mov eax, dword [eax + esi]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x10010c10
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x100d4aa1
push eax
mov dword fs:[0], esp
sub esp, 0x28
mov eax, dword fs:[0x2c]
mov edx, dword [0x100fbfac]
push esi
mov esi, ecx
mov edx, dword [eax + edx*4]
mov eax, dword [0x100fc468]
cmp eax, dword [edx + 4]
jle 0x10010d17
push 0x100fc468
call fcn.100d136a
add esp, 4
cmp dword [0x100fc468], 0xffffffff
jne 0x10010d17
mov dword [ebp - 4], 0
xor ecx, ecx
mov dword [ebp - 0x16], 0x80ab9ead
mov dword [ebp - 0x12], 0xb4b5a4a8
mov word [ebp - 0xe], 0x100
lea eax, [ecx - 0x40]
xor byte [ebp + ecx - 0x16], al
inc ecx
cmp ecx, 8
jb 0x10010c85
mov byte [ebp - 0xd], 0
xor ecx, ecx
mov dword [ebp - 0x32], 0xaf929ead
mov dword [ebp - 0x2e], 0xb5a3bca5
mov dword [ebp - 0x2a], 0xb8aba58b
mov word [ebp - 0x26], 0xbf
mov byte [ebp - 0x24], 1
lea eax, [ecx - 0x40]
xor byte [ebp + ecx - 0x32], al
inc ecx
cmp ecx, 0xd
jb 0x10010cb7
mov byte [ebp - 0x24], 0
xor ecx, ecx
mov dword [ebp - 0x23], 0x979d9584
mov dword [ebp - 0x1f], 0xa6aa9582
mov dword [ebp - 0x1b], 0xb8acb1
mov byte [ebp - 0x17], 1
lea eax, [ecx - 0x40]
xor byte [ebp + ecx - 0x23], al
inc ecx
cmp ecx, 0xb
jb 0x10010ce3
lea eax, [ebp - 0x16]
mov byte [ebp - 0x17], 0
push eax
lea eax, [ebp - 0x32]
push eax
lea eax, [ebp - 0x23]
push eax
call fcn.1000ef40
push 0x100fc468
mov dword [0x100fc470], eax
call fcn.100d1320
add esp, 4
mov eax, dword [0x100fc470]
mov ecx, dword [ebp - 0xc]
mov eax, dword [eax + esi]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret

Function at 0x10010d30
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x100d4ac1
push eax
mov dword fs:[0], esp
sub esp, 0x28
mov eax, dword fs:[0x2c]
mov edx, dword [0x100fbfac]
push esi
mov esi, ecx
mov edx, dword [eax + edx*4]
mov eax, dword [0x100fc474]
cmp eax, dword [edx + 4]
jle 0x10010e27
push 0x100fc474
call fcn.100d136a
add esp, 4
cmp dword [0x100fc474], 0xffffffff
jne 0x10010e27
mov dword [ebp - 4], 0
xor ecx, ecx
movaps xmm0, xmmword [0x100f0b60]
movups xmmword [ebp - 0x34], xmm0
mov byte [ebp - 0x24], 1
lea eax, [ecx - 0x40]
xor byte [ebp + ecx - 0x34], al
inc ecx
cmp ecx, 0xf
jb 0x10010da0
mov byte [ebp - 0x24], 0
xor ecx, ecx
mov dword [ebp - 0x16], 0xab919ead
mov dword [ebp - 0x12], 0xa3a3b7a5
mov word [ebp - 0xe], 0x100
lea eax, [ecx - 0x40]
xor byte [ebp + ecx - 0x16], al
inc ecx
cmp ecx, 8
jb 0x10010dc7
mov byte [ebp - 0xd], 0
xor ecx, ecx
mov dword [ebp - 0x23], 0x979d9584
mov dword [ebp - 0x1f], 0xa6aa9582
mov dword [ebp - 0x1b], 0xb8acb1
mov byte [ebp - 0x17], 1
lea eax, [ecx - 0x40]
xor byte [ebp + ecx - 0x23], al
inc ecx
cmp ecx, 0xb
jb 0x10010df3
lea eax, [ebp - 0x34]
mov byte [ebp - 0x17], 0
push eax
lea eax, [ebp - 0x16]
push eax
lea eax, [ebp - 0x23]
push eax
call fcn.1000ef40
push 0x100fc474
mov dword [0x100fc47c], eax
call fcn.100d1320
add esp, 4
mov eax, dword [0x100fc47c]
mov ecx, dword [ebp - 0xc]
mov eax, dword [eax + esi]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x10010e40
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x100d4ae1
push eax
mov dword fs:[0], esp
sub esp, 0x2c
mov eax, dword fs:[0x2c]
mov edx, dword [0x100fbfac]
push esi
mov esi, ecx
mov edx, dword [eax + edx*4]
mov eax, dword [0x100fc454]
cmp eax, dword [edx + 4]
jle 0x10010f56
push 0x100fc454
call fcn.100d136a
add esp, 4
cmp dword [0x100fc454], 0xffffffff
jne 0x10010f56
mov dword [ebp - 4], 0
xor ecx, ecx
mov dword [ebp - 0x17], 0xa6b49ead
mov dword [ebp - 0x13], 0xa9af88a7
mov word [ebp - 0xf], 0xbb
mov byte [ebp - 0xd], 1
nop dword [eax]
lea eax, [ecx - 0x40]
xor byte [ebp + ecx - 0x17], al
inc ecx
cmp ecx, 9
jb 0x10010ec0
mov byte [ebp - 0xd], 0
xor ecx, ecx
mov dword [ebp - 0x24], 0xac819ead
mov dword [ebp - 0x20], 0xb4afa9a8
mov dword [ebp - 0x1c], 0xa4a6a1
mov byte [ebp - 0x18], 1
nop dword [eax]
lea eax, [ecx - 0x40]
xor byte [ebp + ecx - 0x24], al
inc ecx
cmp ecx, 0xb
jb 0x10010ef0
mov byte [ebp - 0x18], 0
xor ecx, ecx
mov dword [ebp - 0x33], 0x819d9584
mov dword [ebp - 0x2f], 0x82a3b6a5
mov dword [ebp - 0x2b], 0xbfa3bda6
mov word [ebp - 0x27], 0xb5
mov byte [ebp - 0x25], 1
lea eax, [ecx - 0x40]
xor byte [ebp + ecx - 0x33], al
inc ecx
cmp ecx, 0xd
jb 0x10010f22
lea eax, [ebp - 0x17]
mov byte [ebp - 0x25], 0
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x33]
push eax
call fcn.1000ef40
push 0x100fc454
mov dword [0x100fc420], eax
call fcn.100d1320
add esp, 4
mov edx, dword [0x100fc420]
mov eax, dword [ebp + 8]
mov ecx, dword [edx + esi]
mov dword [eax], ecx
mov ecx, dword [edx + esi + 4]
mov dword [eax + 4], ecx
mov ecx, dword [edx + esi + 8]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x10010f90
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x100d4b01
push eax
mov dword fs:[0], esp
sub esp, 0x2c
mov eax, dword fs:[0x2c]
mov edx, dword [0x100fbfac]
push esi
mov esi, ecx
mov edx, dword [eax + edx*4]
mov eax, dword [0x100fc488]
cmp eax, dword [edx + 4]
jle 0x100110a6
push 0x100fc488
call fcn.100d136a
add esp, 4
cmp dword [0x100fc488], 0xffffffff
jne 0x100110a6
mov dword [ebp - 4], 0
xor ecx, ecx
mov dword [ebp - 0x17], 0xa6b49ead
mov dword [ebp - 0x13], 0xbfa788a7
mov word [ebp - 0xf], 0xbb
mov byte [ebp - 0xd], 1
nop dword [eax]
lea eax, [ecx - 0x40]
xor byte [ebp + ecx - 0x17], al
inc ecx
cmp ecx, 9
jb 0x10011010
mov byte [ebp - 0xd], 0
xor ecx, ecx
mov dword [ebp - 0x24], 0xac819ead
mov dword [ebp - 0x20], 0xb4afa9a8
mov dword [ebp - 0x1c], 0xa4a6a1
mov byte [ebp - 0x18], 1
nop dword [eax]
lea eax, [ecx - 0x40]
xor byte [ebp + ecx - 0x24], al
inc ecx
cmp ecx, 0xb
jb 0x10011040
mov byte [ebp - 0x18], 0
xor ecx, ecx
mov dword [ebp - 0x33], 0x819d9584
mov dword [ebp - 0x2f], 0x82a3b6a5
mov dword [ebp - 0x2b], 0xbfa3bda6
mov word [ebp - 0x27], 0xb5
mov byte [ebp - 0x25], 1
lea eax, [ecx - 0x40]
xor byte [ebp + ecx - 0x33], al
inc ecx
cmp ecx, 0xd
jb 0x10011072
lea eax, [ebp - 0x17]
mov byte [ebp - 0x25], 0
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x33]
push eax
call fcn.1000ef40
push 0x100fc488
mov dword [0x100fc424], eax
call fcn.100d1320
add esp, 4
mov edx, dword [0x100fc424]
mov eax, dword [ebp + 8]
mov ecx, dword [edx + esi]
mov dword [eax], ecx
mov ecx, dword [edx + esi + 4]
mov dword [eax + 4], ecx
mov ecx, dword [edx + esi + 8]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x10011480
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x100d4b21
push eax
mov dword fs:[0], esp
sub esp, 0x34
mov eax, dword fs:[0x2c]
mov edx, dword [0x100fbfac]
push esi
mov esi, ecx
mov edx, dword [eax + edx*4]
mov eax, dword [0x100fc494]
cmp eax, dword [edx + 4]
jle 0x10011569
push 0x100fc494
call fcn.100d136a
add esp, 4
cmp dword [0x100fc494], 0xffffffff
jne 0x10011569
mov dword [ebp - 4], 0
xor ecx, ecx
mov dword [ebp - 0x31], 0xa6b49ead
mov dword [ebp - 0x2d], 0xaeb48aa7
mov dword [ebp - 0x29], 0xa4a0af
mov byte [ebp - 0x25], 1
nop word [eax + eax]
lea eax, [ecx - 0x40]
xor byte [ebp + ecx - 0x31], al
inc ecx
cmp ecx, 0xb
jb 0x10011500
mov byte [ebp - 0x25], 0
xor ecx, ecx
mov dword [ebp - 0x40], 0x819d9584
mov dword [ebp - 0x3c], 0x82a3b6a5
mov dword [ebp - 0x38], 0xbfa3bda6
mov word [ebp - 0x34], 0xb5
mov byte [ebp - 0x32], 1
lea eax, [ecx - 0x40]
xor byte [ebp + ecx - 0x40], al
inc ecx
cmp ecx, 0xd
jb 0x10011532
lea eax, [ebp - 0x31]
mov byte [ebp - 0x32], 0
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.10007f10
push 0x100fc494
mov dword [0x100fc43c], eax
mov dword [ebp - 4], 0xffffffff
call fcn.100d1320
add esp, 4
mov eax, dword [0x100fc43c]
mov ecx, esi
movss xmm0, dword [eax + esi]
movss dword [ebp - 0x10], xmm0
movss xmm0, dword [eax + esi + 4]
movss dword [ebp - 0x14], xmm0
movss xmm0, dword [eax + esi + 8]
lea eax, [ebp - 0x24]
push eax
movss dword [ebp - 0x18], xmm0
call fcn.100106c0
movss xmm0, dword [ebp - 0x10]
mov ecx, eax
mov eax, dword [ebp + 8]
pop esi
addss xmm0, dword [ecx]
movss dword [eax], xmm0
movss xmm0, dword [ebp - 0x14]
addss xmm0, dword [ecx + 4]
movss dword [eax + 4], xmm0
movss xmm0, dword [ebp - 0x18]
addss xmm0, dword [ecx + 8]
mov ecx, dword [ebp - 0xc]
movss dword [eax + 8], xmm0
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 4
Function at 0x100115e0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x100d4b41
push eax
mov dword fs:[0], esp
sub esp, 0x40
mov eax, dword fs:[0x2c]
mov edx, dword [0x100fbfac]
push esi
mov esi, ecx
mov edx, dword [eax + edx*4]
mov eax, dword [0x100fc480]
cmp eax, dword [edx + 4]
jle 0x100116d9
push 0x100fc480
call fcn.100d136a
add esp, 4
cmp dword [0x100fc480], 0xffffffff
jne 0x100116d9
mov dword [ebp - 4], 0
xor ecx, ecx
movaps xmm0, xmmword [0x100f1410]
movups xmmword [ebp - 0x31], xmm0
mov word [ebp - 0x21], 0xb5
mov byte [ebp - 0x1f], 1
lea eax, [ecx - 0x40]
xor byte [ebp + ecx - 0x31], al
inc ecx
cmp ecx, 0x11
jb 0x10011656
movaps xmm0, xmmword [0x100f1390]
xor ecx, ecx
mov byte [ebp - 0x1f], 0
movups xmmword [ebp - 0x47], xmm0
mov dword [ebp - 0x37], 0xb2a6b094
mov word [ebp - 0x33], 0x100
lea eax, [ecx - 0x40]
xor byte [ebp + ecx - 0x47], al
inc ecx
cmp ecx, 0x14
jb 0x10011681
movaps xmm0, xmmword [0x100f1450]
xor ecx, ecx
mov byte [ebp - 0x32], 0
movups xmmword [ebp - 0x1e], xmm0
mov word [ebp - 0xe], 0x100
lea eax, [ecx - 0x40]
xor byte [ebp + ecx - 0x1e], al
inc ecx
cmp ecx, 0x10
jb 0x100116a5
lea eax, [ebp - 0x31]
mov byte [ebp - 0xd], 0
push eax
lea eax, [ebp - 0x47]
push eax
lea eax, [ebp - 0x1e]
push eax
call fcn.1000ef40
push 0x100fc480
mov dword [0x100fc42c], eax
call fcn.100d1320
add esp, 4
mov eax, dword [0x100fc42c]
mov ecx, dword [ebp - 0xc]
movss xmm0, dword [eax + esi]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret

Function at 0x10011700
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x100d4b61
push eax
mov dword fs:[0], esp
sub esp, 0x40
mov eax, dword fs:[0x2c]
mov edx, dword [0x100fbfac]
push esi
mov esi, ecx
mov edx, dword [eax + edx*4]
mov eax, dword [0x100fc450]
cmp eax, dword [edx + 4]
jle 0x100117f8
push 0x100fc450
call fcn.100d136a
add esp, 4
cmp dword [0x100fc450], 0xffffffff
jne 0x100117f8
mov dword [ebp - 4], 0
xor ecx, ecx
movaps xmm0, xmmword [0x100f1460]
movups xmmword [ebp - 0x2f], xmm0
mov word [ebp - 0x1f], 0x100
lea eax, [ecx - 0x40]
xor byte [ebp + ecx - 0x2f], al
inc ecx
cmp ecx, 0x10
jb 0x10011772
movaps xmm0, xmmword [0x100f1580]
xor ecx, ecx
mov byte [ebp - 0x1e], 0
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0x97bcbea0
mov dword [ebp - 0x34], 0xb7a1b5
mov byte [ebp - 0x30], 1
lea eax, [ecx - 0x40]
xor byte [ebp + ecx - 0x48], al
inc ecx
cmp ecx, 0x17
jb 0x100117a2
movaps xmm0, xmmword [0x100f0b40]
xor ecx, ecx
mov byte [ebp - 0x30], 0
movups xmmword [ebp - 0x1d], xmm0
mov byte [ebp - 0xd], 1
lea eax, [ecx - 0x40]
xor byte [ebp + ecx - 0x1d], al
inc ecx
cmp ecx, 0xf
jb 0x100117c4
lea eax, [ebp - 0x2f]
mov byte [ebp - 0xd], 0
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x1d]
push eax
call fcn.1000ef40
push 0x100fc450
mov dword [0x100fc434], eax
call fcn.100d1320
add esp, 4
mov eax, dword [0x100fc434]
mov ecx, dword [ebp - 0xc]
movss xmm0, dword [eax + esi]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x10011820
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x18], 0
je 0x10011842
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x40]
inc eax
xor byte [edx], cl
cmp eax, 0x17
jb 0x10011830
mov byte [esi + 0x18], 0
mov eax, esi
pop esi
ret

Function at 0x10011850
Capabilities:
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x100d4b81
push eax
mov dword fs:[0], esp
mov eax, dword fs:[0x2c]
mov edx, dword [0x100fbfac]
push ebx
sub esp, 0x68
push esi
mov esi, dword [eax + edx*4]
mov eax, dword [0x100fc46c]
push edi
mov edi, ecx
cmp eax, dword [esi + 4]
jle 0x100119dd
push 0x100fc46c
call fcn.100d136a
add esp, 4
cmp dword [0x100fc46c], 0xffffffff
jne 0x100119dd
mov dword [ebp - 4], 0
xor eax, eax
mov dword [ebp - 0x78], 0x4f404f5
xor ecx, ecx
mov dword [ebp - 0x74], 0x4fb04e2
mov dword [ebp - 0x70], 0x4e50486
mov dword [ebp - 0x6c], 0x4840483
mov dword [ebp - 0x68], 0x4ff04e8
mov dword [ebp - 0x64], 0x4eb04fc
mov dword [ebp - 0x60], 0x48f04f4
mov dword [ebp - 0x5c], 0x4f004ee
mov dword [ebp - 0x58], 0x4ee04f0
mov dword [ebp - 0x54], 0x4e504f2
mov dword [ebp - 0x50], 0x4f504e2
mov dword [ebp - 0x4c], 0x49504e5
mov dword [ebp - 0x48], 0x4e904f8
mov dword [ebp - 0x44], 0x4fb04ef
mov dword [ebp - 0x40], 0x4fd04e3
mov dword [ebp - 0x3c], 0x4ff04e1
mov dword [ebp - 0x38], 0x4c104df
mov dword [ebp - 0x34], 0x4c304dd
mov dword [ebp - 0x30], 0x4d604d3
mov word [ebp - 0x2c], ax
mov byte [ebp - 0x2a], 1
nop word [eax + eax]
lea eax, [ecx + 0x4c0]
xor word [ebp + ecx*2 - 0x78], ax
inc ecx
cmp ecx, 0x26
jb 0x10011960
xor eax, eax
mov byte [ebp - 0x2a], 0
mov dword [ebp - 0x28], 0x4ad04a3
mov dword [ebp - 0x24], 0x4a604ab
mov dword [ebp - 0x20], 0x4b104aa
mov dword [ebp - 0x1c], 0x4a304e8
mov dword [ebp - 0x18], 0x4a504a4
mov word [ebp - 0x14], ax
mov byte [ebp - 0x12], 1
lea ecx, [eax + 0x4c0]
xor word [ebp + eax*2 - 0x28], cx
inc eax
cmp eax, 0xa
jb 0x100119a2
lea eax, [ebp - 0x78]
mov byte [ebp - 0x12], 0
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.100d08f0
push 0x100fc46c
mov dword [0x100fc484], eax
mov dword [ebp - 4], 0xffffffff
call fcn.100d1320
add esp, 4
mov eax, dword [0x100fc44c]
cmp eax, dword [esi + 4]
jle 0x10011a17
push 0x100fc44c
call fcn.100d136a
add esp, 4
cmp dword [0x100fc44c], 0xffffffff
jne 0x10011a17
mov eax, dword [0x100fc484]
push 0x100fc44c
mov dword [0x100fc438], eax
call fcn.100d1320
add esp, 4
mov eax, dword [edi]
mov ecx, edi
mov esi, dword [0x100fc438]
mov eax, dword [eax + 0x5e4]
call eax
push eax
call esi
mov ecx, eax
add esp, 4
mov eax, dword [ebx + 8]
movups xmm0, xmmword [ecx + 0x6f8]
pop edi
pop esi
movups xmmword [eax], xmm0
movups xmm0, xmmword [ecx + 0x708]
movups xmmword [eax + 0x10], xmm0
movups xmm0, xmmword [ecx + 0x718]
movups xmmword [eax + 0x20], xmm0
movups xmm0, xmmword [ecx + 0x728]
mov ecx, dword [ebp - 0xc]
movups xmmword [eax + 0x30], xmm0
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4
Function at 0x10011a80
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x4e], 0
je 0x10011aa4
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c0]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x26
jb 0x10011a90
mov byte [edx + 0x4e], 0
mov eax, edx
ret
Function at 0x10011ab0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x100d4ba1
push eax
mov dword fs:[0], esp
sub esp, 0xe0
mov eax, dword fs:[0x2c]
mov edx, dword [0x100fbfac]
push ebx
push esi
mov edx, dword [eax + edx*4]
mov esi, ecx
mov eax, dword [0x100fc448]
push edi
cmp eax, dword [edx + 4]
jle 0x10011d4e
push 0x100fc448
call fcn.100d136a
add esp, 4
cmp dword [0x100fc448], 0xffffffff
jne 0x10011d4e
mov dword [ebp - 4], 0
xor ecx, ecx
mov dword [ebp - 0xea], 0x4f404f5
mov dword [ebp - 0xe6], 0x4fb04e2
mov dword [ebp - 0xe2], 0x4e50486
mov dword [ebp - 0xde], 0x4840483
mov dword [ebp - 0xda], 0x4f104e8
mov dword [ebp - 0xd6], 0x4eb04f9
mov dword [ebp - 0xd2], 0x48e0489
mov dword [ebp - 0xce], 0x4ff04ee
mov dword [ebp - 0xca], 0x4f104e8
mov dword [ebp - 0xc6], 0x4e504e7
mov dword [ebp - 0xc2], 0x4ed04f4
mov dword [ebp - 0xbe], 0x4f70494
mov dword [ebp - 0xba], 0x4e8049e
mov dword [ebp - 0xb6], 0x4ee04fa
mov dword [ebp - 0xb2], 0x4fd04eb
mov dword [ebp - 0xae], 0x49e04e8
mov dword [ebp - 0xaa], 0x4d104c0
mov dword [ebp - 0xa6], 0x4c304d3
mov dword [ebp - 0xa2], 0x4a404d2
mov dword [ebp - 0x9e], 0x4d704c6
mov dword [ebp - 0x9a], 0x4c904d8
mov dword [ebp - 0x96], 0x4a904d2
mov dword [ebp - 0x92], 0x4d404cc
mov dword [ebp - 0x8e], 0x4cf04d8
mov dword [ebp - 0x8a], 0x4d104cf
mov dword [ebp - 0x86], 0x4d304cd
mov dword [ebp - 0x82], 0x4d504cb
mov dword [ebp - 0x7e], 0x4d704c9
mov dword [ebp - 0x7a], 0x4bb04c0
mov dword [ebp - 0x76], 0x4c304da
mov dword [ebp - 0x72], 0x4dd04ca
mov dword [ebp - 0x6e], 0x4df04c1
mov dword [ebp - 0x6a], 0x521053f
mov dword [ebp - 0x66], 0x523053d
mov dword [ebp - 0x62], 0x525053b
mov dword [ebp - 0x5e], 0x5360545
mov dword [ebp - 0x5a], 0x54c0528
mov dword [ebp - 0x56], 0x52b0538
mov dword [ebp - 0x52], 0x53b053c
mov dword [ebp - 0x4e], 0x53a052e
mov dword [ebp - 0x4a], 0x5310526
mov dword [ebp - 0x46], 0x52b0524
mov dword [ebp - 0x42], 0x52a0534
mov dword [ebp - 0x3e], 0x5280536
mov dword [ebp - 0x3a], 0x5260538
mov dword [ebp - 0x36], 0x524053a
mov dword [ebp - 0x32], 0x528053c
mov dword [ebp - 0x2e], 0x52f
mov byte [ebp - 0x2a], 1
nop dword [eax + eax]
lea eax, [ecx + 0x4c0]
xor word [ebp + ecx*2 - 0xea], ax
inc ecx
cmp ecx, 0x5f
jb 0x10011cc0
xor eax, eax
mov byte [ebp - 0x2a], 0
mov dword [ebp - 0x28], 0x4ad04a3
xor ecx, ecx
mov dword [ebp - 0x24], 0x4a604ab
mov dword [ebp - 0x20], 0x4b104aa
mov dword [ebp - 0x1c], 0x4a304e8
mov dword [ebp - 0x18], 0x4a504a4
mov word [ebp - 0x14], ax
mov byte [ebp - 0x12], 1
nop word [eax + eax]
lea eax, [ecx + 0x4c0]
xor word [ebp + ecx*2 - 0x28], ax
inc ecx
cmp ecx, 0xa
jb 0x10011d10
lea eax, [ebp - 0xea]
mov byte [ebp - 0x12], 0
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.100d08f0
push 0x100fc448
mov dword [0x100fc444], eax
mov dword [ebp - 4], 0xffffffff
call fcn.100d1320
add esp, 4
mov eax, dword [0x100fc444]
mov ecx, esi
mov dword [ebp - 0x10], eax
call dword [ebp - 0x10]
mov ecx, dword [ebp - 0xc]
pop edi
fstp dword [ebp - 0x10]
movss xmm0, dword [ebp - 0x10]
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x10014120
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x4e], 0
je 0x10014144
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c0]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0x26
jb 0x10014130
mov byte [edx + 0x4e], 0
ret

Function at 0x10014150
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x15], 0
je 0x10014172
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x40]
inc eax
xor byte [edx], cl
cmp eax, 0x14
jb 0x10014160
mov byte [esi + 0x15], 0
pop esi
ret

Function at 0x10014180
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, ecx
cmp byte [esi + 0x12], 0
je 0x100141a2
xor eax, eax
nop dword [eax + eax]
lea edx, [eax + esi]
lea ecx, [eax - 0x40]
inc eax
xor byte [edx], cl
cmp eax, 0x11
jb 0x10014190
mov byte [esi + 0x12], 0
pop esi
ret

Function at 0x100141b0
Capabilities:
Encode data using xor

Disassembly:
mov edx, ecx
cmp byte [edx + 0x16], 0
je 0x100141d4
xor eax, eax
nop word [eax + eax]
lea ecx, [eax + 0x4c0]
xor word [edx + eax*2], cx
inc eax
cmp eax, 0xa
jb 0x100141c0
mov byte [edx + 0x16], 0
ret

Function at 0x10014530
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x100d4c01
push eax
mov dword fs:[0], esp
sub esp, 0x20
mov eax, dword fs:[0x2c]
mov edx, dword [0x100fbfac]
push esi
mov esi, ecx
mov edx, dword [eax + edx*4]
mov eax, dword [0x100fc4b0]
cmp eax, dword [edx + 4]
jle 0x10014607
push 0x100fc4b0
call fcn.100d136a
add esp, 4
cmp dword [0x100fc4b0], 0xffffffff
jne 0x10014607
mov dword [ebp - 4], 0
xor ecx, ecx
mov dword [ebp - 0x16], 0x85a49ead
mov dword [ebp - 0x12], 0xb4a1a4a8
mov word [ebp - 0xe], 0x100
lea eax, [ecx - 0x40]
xor byte [ebp + ecx - 0x16], al
inc ecx
cmp ecx, 8
jb 0x100145a5
mov byte [ebp - 0xd], 0
xor ecx, ecx
mov dword [ebp - 0x25], 0x819d9584
mov dword [ebp - 0x21], 0x97a3b6a5
mov dword [ebp - 0x1d], 0xaeb3a8a4
mov word [ebp - 0x19], 0xbe
mov byte [ebp - 0x17], 1
lea eax, [ecx - 0x40]
xor byte [ebp + ecx - 0x25], al
inc ecx
cmp ecx, 0xd
jb 0x100145d7
lea eax, [ebp - 0x16]
mov byte [ebp - 0x17], 0
push eax
lea eax, [ebp - 0x25]
push eax
call fcn.10007f10
push 0x100fc4b0
mov dword [0x100fc4bc], eax
call fcn.100d1320
add esp, 4
mov eax, dword [0x100fc4bc]
mov ecx, dword [ebp - 0xc]
mov eax, dword [eax + esi]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret