joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1019fcc0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b2ae0], 0
push esi
jne 0x1019fd20
mov byte [0x104b2ae0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b2b04]
xor ebx, dword [0x104b2b00]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b2ae1], cl
inc eax
cmp eax, 0x1b
jb 0x1019fce0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b2afb
push 0x104b2ae1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1019fd40
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b3660], 0
push esi
jne 0x1019fda0
mov byte [0x104b3660], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b3684]
xor ebx, dword [0x104b3680]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b3661], cl
inc eax
cmp eax, 0x1b
jb 0x1019fd60
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b367b
push 0x104b3661
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1019fdc0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b4020], 0
push esi
jne 0x1019fe20
mov byte [0x104b4020], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b403c]
xor ebx, dword [0x104b4038]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b4021], cl
inc eax
cmp eax, 0x11
jb 0x1019fde0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b4031
push 0x104b4021
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1019fe40
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b2ee0], 0
push esi
jne 0x1019fea0
mov byte [0x104b2ee0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b2efc]
xor ebx, dword [0x104b2ef8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b2ee1], cl
inc eax
cmp eax, 0x11
jb 0x1019fe60
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b2ef1
push 0x104b2ee1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x1019fec0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b4680], 0
push esi
jne 0x1019ff20
mov byte [0x104b4680], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b469c]
xor ebx, dword [0x104b4698]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b4681], cl
inc eax
cmp eax, 0x10
jb 0x1019fee0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b4690
push 0x104b4681
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1019ff40
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b3fc0], 0
push esi
jne 0x1019ffa0
mov byte [0x104b3fc0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b3fdc]
xor ebx, dword [0x104b3fd8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b3fc1], cl
inc eax
cmp eax, 0x10
jb 0x1019ff60
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b3fd0
push 0x104b3fc1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1019ffc0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b3f40], 0
push esi
jne 0x101a0020
mov byte [0x104b3f40], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b3f5c]
xor ebx, dword [0x104b3f58]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b3f41], cl
inc eax
cmp eax, 0x10
jb 0x1019ffe0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b3f50
push 0x104b3f41
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x101a0040
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b2d80], 0
push esi
jne 0x101a00a0
mov byte [0x104b2d80], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b2d9c]
xor ebx, dword [0x104b2d98]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b2d81], cl
inc eax
cmp eax, 0x10
jb 0x101a0060
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b2d90
push 0x104b2d81
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x101a00c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b4410], 0
push esi
jne 0x101a0120
mov byte [0x104b4410], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b4424]
xor ebx, dword [0x104b4420]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b4411], cl
inc eax
cmp eax, 0xe
jb 0x101a00e0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b441e
push 0x104b4411
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x101a0140
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b3b40], 0
push esi
jne 0x101a01a0
mov byte [0x104b3b40], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b3b54]
xor ebx, dword [0x104b3b50]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b3b41], cl
inc eax
cmp eax, 0xe
jb 0x101a0160
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b3b4e
push 0x104b3b41
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x101a01c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b2680], 0
push esi
jne 0x101a0220
mov byte [0x104b2680], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b269c]
xor ebx, dword [0x104b2698]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b2681], cl
inc eax
cmp eax, 0x13
jb 0x101a01e0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b2693
push 0x104b2681
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x101a0240
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b39d0], 0
push esi
jne 0x101a02a0
mov byte [0x104b39d0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b39ec]
xor ebx, dword [0x104b39e8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b39d1], cl
inc eax
cmp eax, 0x11
jb 0x101a0260
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b39e1
push 0x104b39d1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x101a02c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b4130], 0
push esi
jne 0x101a0320
mov byte [0x104b4130], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b414c]
xor ebx, dword [0x104b4148]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b4131], cl
inc eax
cmp eax, 0x11
jb 0x101a02e0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b4141
push 0x104b4131
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x101a0340
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b3640], 0
push esi
jne 0x101a03a0
mov byte [0x104b3640], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b365c]
xor ebx, dword [0x104b3658]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + str.Z.Cg], cl
inc eax
cmp eax, 0x14
jb 0x101a0360
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b3654
push str.Z.Cg
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x101a03c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b2e60], 0
push esi
jne 0x101a0420
mov byte [0x104b2e60], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b2e7c]
xor ebx, dword [0x104b2e78]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b2e61], cl
inc eax
cmp eax, 0x14
jb 0x101a03e0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b2e74
push 0x104b2e61
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x101a0440
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b33b0], 0
push esi
jne 0x101a04a0
mov byte [0x104b33b0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b33cc]
xor ebx, dword [0x104b33c8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + str.__nD], cl
inc eax
cmp eax, 0x16
jb 0x101a0460
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b33c6
push str.__nD
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x101a04c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b3ec0], 0
push esi
jne 0x101a0520
mov byte [0x104b3ec0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b3edc]
xor ebx, dword [0x104b3ed8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b3ec1], cl
inc eax
cmp eax, 0x16
jb 0x101a04e0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b3ed6
push 0x104b3ec1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x101a0540
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b41c0], 0
push esi
jne 0x101a05a0
mov byte [0x104b41c0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b41dc]
xor ebx, dword [0x104b41d8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b41c1], cl
inc eax
cmp eax, 0x16
jb 0x101a0560
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b41d6
push 0x104b41c1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x101a05c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b44e0], 0
push esi
jne 0x101a0620
mov byte [0x104b44e0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b44fc]
xor ebx, dword [0x104b44f8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b44e1], cl
inc eax
cmp eax, 0x16
jb 0x101a05e0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b44f6
push 0x104b44e1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x101a0640
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b28b0], 0
push esi
jne 0x101a06a0
mov byte [0x104b28b0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b28cc]
xor ebx, dword [0x104b28c8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b28b1], cl
inc eax
cmp eax, 0x13
jb 0x101a0660
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b28c3
push 0x104b28b1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x101a06c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b2960], 0
push esi
jne 0x101a0720
mov byte [0x104b2960], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b297c]
xor ebx, dword [0x104b2978]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b2961], cl
inc eax
cmp eax, 0x13
jb 0x101a06e0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b2973
push 0x104b2961
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x101a0740
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b3270], 0
push esi
jne 0x101a07a0
mov byte [0x104b3270], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b328c]
xor ebx, dword [0x104b3288]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b3271], cl
inc eax
cmp eax, 0x10
jb 0x101a0760
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b3280
push 0x104b3271
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x101a07c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b4000], 0
push esi
jne 0x101a0820
mov byte [0x104b4000], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b401c]
xor ebx, dword [0x104b4018]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b4001], cl
inc eax
cmp eax, 0x10
jb 0x101a07e0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b4010
push 0x104b4001
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x101a0840
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b3570], 0
push esi
jne 0x101a08a0
mov byte [0x104b3570], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b358c]
xor ebx, dword [0x104b3588]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b3571], cl
inc eax
cmp eax, 0x15
jb 0x101a0860
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b3585
push 0x104b3571
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x101a08c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b4190], 0
push esi
jne 0x101a0920
mov byte [0x104b4190], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b41ac]
xor ebx, dword [0x104b41a8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b4191], cl
inc eax
cmp eax, 0x15
jb 0x101a08e0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b41a5
push 0x104b4191
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x101a0940
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b2be0], 0
push esi
jne 0x101a09a0
mov byte [0x104b2be0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b2bfc]
xor ebx, dword [0x104b2bf8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + str.V_ODl_nF_n2], cl
inc eax
cmp eax, 0x13
jb 0x101a0960
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b2bf3
push str.V_ODl_nF_n2
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x101a09c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b39b0], 0
push esi
jne 0x101a0a20
mov byte [0x104b39b0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b39cc]
xor ebx, dword [0x104b39c8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b39b1], cl
inc eax
cmp eax, 0x11
jb 0x101a09e0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b39c1
push 0x104b39b1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x101a0a40
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b36c0], 0
push esi
jne 0x101a0aa0
mov byte [0x104b36c0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b36dc]
xor ebx, dword [0x104b36d8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b36c1], cl
inc eax
cmp eax, 0x11
jb 0x101a0a60
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b36d1
push 0x104b36c1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x101a0ac0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b26d0], 0
push esi
jne 0x101a0b20
mov byte [0x104b26d0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b26f4]
xor ebx, dword [0x104b26f0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b26d1], cl
inc eax
cmp eax, 0x19
jb 0x101a0ae0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b26e9
push 0x104b26d1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x101a0b40
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b3130], 0
push esi
jne 0x101a0ba0
mov byte [0x104b3130], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b3154]
xor ebx, dword [0x104b3150]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b3131], cl
inc eax
cmp eax, 0x19
jb 0x101a0b60
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b3149
push 0x104b3131
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x101a0bc0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b4240], 0
push esi
jne 0x101a0c20
mov byte [0x104b4240], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b425c]
xor ebx, dword [0x104b4258]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b4241], cl
inc eax
cmp eax, 0x15
jb 0x101a0be0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b4255
push 0x104b4241
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x101a0c40
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b2b20], 0
push esi
jne 0x101a0ca0
mov byte [0x104b2b20], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b2b3c]
xor ebx, dword [0x104b2b38]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b2b21], cl
inc eax
cmp eax, 0x16
jb 0x101a0c60
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b2b36
push 0x104b2b21
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4