joyce8/EMBER2024-capa huggingface dataset:
Function at 0x101fe420
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10328120
mov eax, dword fs:[0]
push eax
sub esp, 0x20
mov eax, dword [0x1043900c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ecx, dword [ebp + 8]
call fcn.101fdd70
mov eax, dword [0x1060b5e0]
cmp byte [eax + 0x7f60], 0
je 0x101fe599
cmp dword [eax + 0xaa8], 0
je 0x101fe599
mov ecx, dword [eax + 0x6ef8]
test ecx, ecx
je 0x101fe486
mov dword [ecx + 0x174], 0xffffffff
mov dword [ebp - 4], 0
cmp byte [eax + 0xc50], 0
je 0x101fe599
cmp byte [eax + 0xc68], 0
je 0x101fe599
mov ecx, dword [0x1060b288]
mov eax, dword [ecx]
mov eax, dword [eax + 0x68]
call eax
test al, al
je 0x101fe599
cmp byte [0x104b4ae0], 0
mov eax, dword [0x1060b254]
mov dword [ebp - 0x2c], eax
jne 0x101fe52d
mov byte [0x104b4ae0], 1
xor ebx, ebx
xor edi, edi
mov esi, ebx
xor esi, dword [0x104b4b00]
xor edi, dword [0x104b4b04]
xor esi, 0x1de26cd5
xor edi, 0xd28f2c5
mov eax, esi
mov ecx, edi
shld ecx, eax, 0xd
shl eax, 0xd
xor edi, ecx
xor esi, eax
mov ecx, edi
mov edx, esi
shrd edx, ecx, 7
shr ecx, 7
xor edx, esi
xor ecx, edi
mov eax, edx
shld ecx, eax, 0x11
shl eax, 0x11
xor al, byte [ebx + 0x104b4ae1]
xor al, dl
mov byte [ebx + 0x104b4ae1], al
inc ebx
cmp ebx, 0x19
jb 0x101fe4d6
push ecx
push 0x104b4af9
push 0x104b4ae1
lea ecx, [ebp - 0x28]
call fcn.1001a620
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
mov ecx, dword [0x1060b258]
cmovae eax, dword [ebp - 0x28]
push eax
call dword [ebp - 0x2c]
lea ecx, [ebp - 0x28]
mov esi, eax
call fcn.10019dd0
add esi, 0xffffff60
je 0x101fe599
cmp dword [esi + 0x80], 1
jl 0x101fe599
xor ecx, ecx
mov eax, dword [0x1060b5e0]
push ecx
mov ecx, esi
mov eax, dword [eax + 0x7ecc]
call eax
lea ecx, [eax + 1]
cmp ecx, dword [esi + 0x80]
jl 0x101fe572
mov eax, dword [0x1060b5e0]
mov byte [eax + 0x7f60], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.102bb91c
mov esp, ebp
pop ebp
ret 4
Function at 0x10203ce0
Capabilities:
Encode data using xor

Disassembly:
mov edx, dword [ecx]
push ebx
mov ebx, dword [ecx + 4]
cmp edx, ebx
je 0x10203d10
push esi
push edi
mov edi, dword [0x1060bf38]
mov esi, dword [edi + 4]
mov eax, dword [edi]
cmp eax, esi
je 0x10203d09
nop dword [eax + eax]
mov cl, byte [eax]
inc eax
xor byte [edx], cl
cmp eax, esi
jne 0x10203d00
inc edx
cmp edx, ebx
jne 0x10203cf2
pop edi
pop esi
pop ebx
ret
Function at 0x10219410
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b4e40], 0
push esi
jne 0x10219470
mov byte [0x104b4e40], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b4e54]
xor ebx, dword [0x104b4e50]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b4e41], cl
inc eax
cmp eax, 0xb
jb 0x10219430
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b4e4b
push 0x104b4e41
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10219490
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104bdb10], 0
push esi
jne 0x102194f0
mov byte [0x104bdb10], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104bdb24]
xor ebx, dword [0x104bdb20]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104bdb11], cl
inc eax
cmp eax, 0xc
jb 0x102194b0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104bdb1c
push 0x104bdb11
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10219510
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ba1d0], 0
push esi
jne 0x10219570
mov byte [0x104ba1d0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ba1e4]
xor ebx, dword [0x104ba1e0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ba1d1], cl
inc eax
cmp eax, 0xc
jb 0x10219530
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ba1dc
push 0x104ba1d1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10219950
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104bb6c0], 0
push esi
jne 0x102199b0
mov byte [0x104bb6c0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104bb6d4]
xor ebx, dword [0x104bb6d0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104bb6c1], cl
inc eax
cmp eax, 0xb
jb 0x10219970
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104bb6cb
push 0x104bb6c1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x1021a2e0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b8940], 0
push esi
jne 0x1021a340
mov byte [0x104b8940], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b8954]
xor ebx, dword [0x104b8950]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b8941], cl
inc eax
cmp eax, 0xe
jb 0x1021a300
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b894e
push 0x104b8941
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1021a510
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104bcfe0], 0
push esi
jne 0x1021a570
mov byte [0x104bcfe0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104bcff4]
xor ebx, dword [0x104bcff0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104bcfe1], cl
inc eax
cmp eax, 0xd
jb 0x1021a530
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104bcfed
push 0x104bcfe1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1021b580
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104bd190], 0
push esi
jne 0x1021b5e0
mov byte [0x104bd190], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104bd1a4]
xor ebx, dword [0x104bd1a0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + str.J_nF_rDm], cl
inc eax
cmp eax, 0xc
jb 0x1021b5a0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104bd19c
push str.J_nF_rDm
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1021b600
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b61d0], 0
push esi
jne 0x1021b660
mov byte [0x104b61d0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b61e4]
xor ebx, dword [0x104b61e0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b61d1], cl
inc eax
cmp eax, 0xc
jb 0x1021b620
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b61dc
push 0x104b61d1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x1021b900
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b6c30], 0
push esi
jne 0x1021b960
mov byte [0x104b6c30], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b6c44]
xor ebx, dword [0x104b6c40]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b6c31], cl
inc eax
cmp eax, 0xb
jb 0x1021b920
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b6c3b
push 0x104b6c31
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1021bb30
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b8240], 0
push esi
jne 0x1021bb90
mov byte [0x104b8240], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b8254]
xor ebx, dword [0x104b8250]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b8241], cl
inc eax
cmp eax, 0xb
jb 0x1021bb50
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b824b
push 0x104b8241
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1021c720
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b6c90], 0
push esi
jne 0x1021c780
mov byte [0x104b6c90], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b6ca4]
xor ebx, dword [0x104b6ca0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b6c91], cl
inc eax
cmp eax, 0xb
jb 0x1021c740
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b6c9b
push 0x104b6c91
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1021c7a0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104bb740], 0
push esi
jne 0x1021c800
mov byte [0x104bb740], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104bb754]
xor ebx, dword [0x104bb750]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104bb741], cl
inc eax
cmp eax, 0xb
jb 0x1021c7c0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104bb74b
push 0x104bb741
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x1021c820
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104bb690], 0
push esi
jne 0x1021c880
mov byte [0x104bb690], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104bb6a4]
xor ebx, dword [0x104bb6a0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104bb691], cl
inc eax
cmp eax, 0xb
jb 0x1021c840
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104bb69b
push 0x104bb691
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1021cae0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104be0f0], 0
push esi
jne 0x1021cb40
mov byte [0x104be0f0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104be10c]
xor ebx, dword [0x104be108]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104be0f1], cl
inc eax
cmp eax, 0x11
jb 0x1021cb00
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104be101
push 0x104be0f1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1021cef0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b9580], 0
push esi
jne 0x1021cf50
mov byte [0x104b9580], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b9594]
xor ebx, dword [0x104b9590]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b9581], cl
inc eax
cmp eax, 0xb
jb 0x1021cf10
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b958b
push 0x104b9581
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1021d180
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b5480], 0
push esi
jne 0x1021d1e0
mov byte [0x104b5480], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b5494]
xor ebx, dword [0x104b5490]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b5481], cl
inc eax
cmp eax, 0xb
jb 0x1021d1a0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b548b
push 0x104b5481
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x1021d4c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104bab10], 0
push esi
jne 0x1021d520
mov byte [0x104bab10], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104bab24]
xor ebx, dword [0x104bab20]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104bab11], cl
inc eax
cmp eax, 0xb
jb 0x1021d4e0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104bab1b
push 0x104bab11
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1021d720
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b7ed0], 0
push esi
jne 0x1021d780
mov byte [0x104b7ed0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b7ee4]
xor ebx, dword [0x104b7ee0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b7ed1], cl
inc eax
cmp eax, 0xb
jb 0x1021d740
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b7edb
push 0x104b7ed1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1021d9b0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b66a0], 0
push esi
jne 0x1021da10
mov byte [0x104b66a0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b66b4]
xor ebx, dword [0x104b66b0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b66a1], cl
inc eax
cmp eax, 0xc
jb 0x1021d9d0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b66ac
push 0x104b66a1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1021da30
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104bc170], 0
push esi
jne 0x1021da90
mov byte [0x104bc170], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104bc184]
xor ebx, dword [0x104bc180]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104bc171], cl
inc eax
cmp eax, 0xc
jb 0x1021da50
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104bc17c
push 0x104bc171
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x1021dab0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104bd910], 0
push esi
jne 0x1021db10
mov byte [0x104bd910], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104bd924]
xor ebx, dword [0x104bd920]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104bd911], cl
inc eax
cmp eax, 0xd
jb 0x1021dad0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104bd91d
push 0x104bd911
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1021db30
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104bb970], 0
push esi
jne 0x1021db90
mov byte [0x104bb970], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104bb98c]
xor ebx, dword [0x104bb988]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104bb971], cl
inc eax
cmp eax, 0x10
jb 0x1021db50
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104bb980
push 0x104bb971
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1021dcf0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b5df0], 0
push esi
jne 0x1021dd50
mov byte [0x104b5df0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b5e04]
xor ebx, dword [0x104b5e00]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b5df1], cl
inc eax
cmp eax, 0xb
jb 0x1021dd10
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b5dfb
push 0x104b5df1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1021dfb0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b5200], 0
push esi
jne 0x1021e010
mov byte [0x104b5200], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b5214]
xor ebx, dword [0x104b5210]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b5201], cl
inc eax
cmp eax, 0xb
jb 0x1021dfd0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b520b
push 0x104b5201
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x1021e600
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b8550], 0
push esi
jne 0x1021e660
mov byte [0x104b8550], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b856c]
xor ebx, dword [0x104b8568]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b8551], cl
inc eax
cmp eax, 0x13
jb 0x1021e620
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b8563
push 0x104b8551
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1021e8c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b60e0], 0
push esi
jne 0x1021e920
mov byte [0x104b60e0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b60f4]
xor ebx, dword [0x104b60f0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b60e1], cl
inc eax
cmp eax, 0xd
jb 0x1021e8e0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b60ed
push 0x104b60e1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1021e940
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104bcae0], 0
push esi
jne 0x1021e9a0
mov byte [0x104bcae0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104bcaf4]
xor ebx, dword [0x104bcaf0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104bcae1], cl
inc eax
cmp eax, 0xd
jb 0x1021e960
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104bcaed
push 0x104bcae1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x1021fe90
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104b5500], 0
push esi
jne 0x1021fef0
mov byte [0x104b5500], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104b5514]
xor ebx, dword [0x104b5510]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104b5501], cl
inc eax
cmp eax, 0xd
jb 0x1021feb0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104b550d
push 0x104b5501
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4