joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10154780
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104af2c0], 0
push esi
jne 0x101547e0
mov byte [0x104af2c0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104af2d4]
xor ebx, dword [0x104af2d0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104af2c1], cl
inc eax
cmp eax, 0xc
jb 0x101547a0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104af2cc
push 0x104af2c1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10154800
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104aefe0], 0
push esi
jne 0x10154860
mov byte [0x104aefe0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104aeffc]
xor ebx, dword [0x104aeff8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104aefe1], cl
inc eax
cmp eax, 0x14
jb 0x10154820
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104aeff4
push 0x104aefe1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10154880
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ad160], 0
push esi
jne 0x101548e0
mov byte [0x104ad160], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ad174]
xor ebx, dword [0x104ad170]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ad161], cl
inc eax
cmp eax, 0xf
jb 0x101548a0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ad16f
push 0x104ad161
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10154b10
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ae900], 0
push esi
jne 0x10154b70
mov byte [0x104ae900], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ae91c]
xor ebx, dword [0x104ae918]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ae901], cl
inc eax
cmp eax, 0x11
jb 0x10154b30
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ae911
push 0x104ae901
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x10154b90
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b0c10], 0
push esi
jne 0x10154bf0
mov byte [0x104b0c10], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b0c24]
xor ebx, dword [0x104b0c20]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b0c11], cl
inc eax
cmp eax, 0xe
jb 0x10154bb0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b0c1e
push 0x104b0c11
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10154c10
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b0130], 0
push esi
jne 0x10154c70
mov byte [0x104b0130], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b0144]
xor ebx, dword [0x104b0140]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b0131], cl
inc eax
cmp eax, 0xe
jb 0x10154c30
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b013e
push 0x104b0131
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10155690
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ada30], 0
push esi
jne 0x101556f0
mov byte [0x104ada30], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ada44]
xor ebx, dword [0x104ada40]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ada31], cl
inc eax
cmp eax, 0xe
jb 0x101556b0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ada3e
push 0x104ada31
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10155710
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b0ed0], 0
push esi
jne 0x10155770
mov byte [0x104b0ed0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b0eec]
xor ebx, dword [0x104b0ee8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b0ed1], cl
inc eax
cmp eax, 0x16
jb 0x10155730
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b0ee6
push 0x104b0ed1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x10155be0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ae8c0], 0
push esi
jne 0x10155c40
mov byte [0x104ae8c0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ae8d4]
xor ebx, dword [0x104ae8d0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ae8c1], cl
inc eax
cmp eax, 0xc
jb 0x10155c00
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ae8cc
push 0x104ae8c1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10155e10
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b0a30], 0
push esi
jne 0x10155e70
mov byte [0x104b0a30], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b0a4c]
xor ebx, dword [0x104b0a48]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b0a31], cl
inc eax
cmp eax, 0x10
jb 0x10155e30
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b0a40
push 0x104b0a31
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10155e90
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ad770], 0
push esi
jne 0x10155ef0
mov byte [0x104ad770], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ad78c]
xor ebx, dword [0x104ad788]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ad771], cl
inc eax
cmp eax, 0x11
jb 0x10155eb0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ad781
push 0x104ad771
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10155f10
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ae4c0], 0
push esi
jne 0x10155f70
mov byte [0x104ae4c0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ae4d4]
xor ebx, dword [0x104ae4d0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ae4c1], cl
inc eax
cmp eax, 0xc
jb 0x10155f30
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ae4cc
push 0x104ae4c1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x10155f90
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ae630], 0
push esi
jne 0x10155ff0
mov byte [0x104ae630], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ae65c]
xor ebx, dword [0x104ae658]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ae631], cl
inc eax
cmp eax, 0x21
jb 0x10155fb0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ae651
push 0x104ae631
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10156010
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ad3c0], 0
push esi
jne 0x10156070
mov byte [0x104ad3c0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ad3ec]
xor ebx, dword [0x104ad3e8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + str.j_tFB__aE], cl
inc eax
cmp eax, 0x21
jb 0x10156030
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ad3e1
push str.j_tFB__aE
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10156520
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ac570], 0
push esi
jne 0x10156580
mov byte [0x104ac570], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ac58c]
xor ebx, dword [0x104ac588]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + str.s_a_a_aB], cl
inc eax
cmp eax, 0x10
jb 0x10156540
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ac580
push str.s_a_a_aB
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x101566e0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b0ca0], 0
push esi
jne 0x10156740
mov byte [0x104b0ca0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b0cb4]
xor ebx, dword [0x104b0cb0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b0ca1], cl
inc eax
cmp eax, 0xe
jb 0x10156700
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b0cae
push 0x104b0ca1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x10156760
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ae130], 0
push esi
jne 0x101567c0
mov byte [0x104ae130], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ae14c]
xor ebx, dword [0x104ae148]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ae131], cl
inc eax
cmp eax, 0x17
jb 0x10156780
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ae147
push 0x104ae131
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x101567e0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ad3a0], 0
push esi
jne 0x10156840
mov byte [0x104ad3a0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ad3b4]
xor ebx, dword [0x104ad3b0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ad3a1], cl
inc eax
cmp eax, 0xb
jb 0x10156800
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ad3ab
push 0x104ad3a1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10156860
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ad710], 0
push esi
jne 0x101568c0
mov byte [0x104ad710], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ad72c]
xor ebx, dword [0x104ad728]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ad711], cl
inc eax
cmp eax, 0x11
jb 0x10156880
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ad721
push 0x104ad711
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10156a20
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ae550], 0
push esi
jne 0x10156a80
mov byte [0x104ae550], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ae56c]
xor ebx, dword [0x104ae568]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ae551], cl
inc eax
cmp eax, 0x13
jb 0x10156a40
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ae563
push 0x104ae551
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x10156be0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104afc20], 0
push esi
jne 0x10156c40
mov byte [0x104afc20], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104afc34]
xor ebx, dword [0x104afc30]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104afc21], cl
inc eax
cmp eax, 0xe
jb 0x10156c00
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104afc2e
push 0x104afc21
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10156da0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ac750], 0
push esi
jne 0x10156e00
mov byte [0x104ac750], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ac764]
xor ebx, dword [0x104ac760]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ac751], cl
inc eax
cmp eax, 0xc
jb 0x10156dc0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ac75c
push 0x104ac751
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10156e20
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ade60], 0
push esi
jne 0x10156e80
mov byte [0x104ade60], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ade74]
xor ebx, dword [0x104ade70]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ade61], cl
inc eax
cmp eax, 0xe
jb 0x10156e40
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ade6e
push 0x104ade61
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10156ea0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b00f0], 0
push esi
jne 0x10156f00
mov byte [0x104b00f0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b0104]
xor ebx, dword [0x104b0100]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b00f1], cl
inc eax
cmp eax, 0xf
jb 0x10156ec0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b00ff
push 0x104b00f1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x10156f20
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104aeb20], 0
push esi
jne 0x10156f80
mov byte [0x104aeb20], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104aeb3c]
xor ebx, dword [0x104aeb38]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104aeb21], cl
inc eax
cmp eax, 0x14
jb 0x10156f40
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104aeb34
push 0x104aeb21
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10156fa0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ad660], 0
push esi
jne 0x10157000
mov byte [0x104ad660], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ad67c]
xor ebx, dword [0x104ad678]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ad661], cl
inc eax
cmp eax, 0x14
jb 0x10156fc0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ad674
push 0x104ad661
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10157020
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104aeb70], 0
push esi
jne 0x10157080
mov byte [0x104aeb70], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104aeb84]
xor ebx, dword [0x104aeb80]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104aeb71], cl
inc eax
cmp eax, 0xb
jb 0x10157040
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104aeb7b
push 0x104aeb71
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x101571b0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104afe70], 0
push esi
jne 0x10157210
mov byte [0x104afe70], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104afe84]
xor ebx, dword [0x104afe80]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104afe71], cl
inc eax
cmp eax, 0xc
jb 0x101571d0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104afe7c
push 0x104afe71
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x10157340
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104add20], 0
push esi
jne 0x101573a0
mov byte [0x104add20], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104add34]
xor ebx, dword [0x104add30]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104add21], cl
inc eax
cmp eax, 0xb
jb 0x10157360
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104add2b
push 0x104add21
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x101573c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ae600], 0
push esi
jne 0x10157420
mov byte [0x104ae600], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ae614]
xor ebx, dword [0x104ae610]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ae601], cl
inc eax
cmp eax, 0xb
jb 0x101573e0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ae60b
push 0x104ae601
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10157a10
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b0110], 0
push esi
jne 0x10157a70
mov byte [0x104b0110], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b0124]
xor ebx, dword [0x104b0120]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b0111], cl
inc eax
cmp eax, 0xb
jb 0x10157a30
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b011b
push 0x104b0111
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10157a90
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b01e0], 0
push esi
jne 0x10157af0
mov byte [0x104b01e0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b01f4]
xor ebx, dword [0x104b01f0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b01e1], cl
inc eax
cmp eax, 0xb
jb 0x10157ab0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b01eb
push 0x104b01e1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4