joyce8/EMBER2024-capa huggingface dataset:
Function at 0x100d5ff0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104aba40], 0
push esi
jne 0x100d6050
mov byte [0x104aba40], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104aba54]
xor ebx, dword [0x104aba50]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104aba41], cl
inc eax
cmp eax, 0xe
jb 0x100d6010
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104aba4e
push 0x104aba41
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d6070
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104aa050], 0
push esi
jne 0x100d60d0
mov byte [0x104aa050], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104aa074]
xor ebx, dword [0x104aa070]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104aa051], cl
inc eax
cmp eax, 0x18
jb 0x100d6090
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104aa068
push 0x104aa051
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d60f0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104aa4a0], 0
push esi
jne 0x100d6150
mov byte [0x104aa4a0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104aa4b4]
xor ebx, dword [0x104aa4b0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104aa4a1], cl
inc eax
cmp eax, 0xf
jb 0x100d6110
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104aa4af
push 0x104aa4a1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d6170
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104aa2d0], 0
push esi
jne 0x100d61d0
mov byte [0x104aa2d0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104aa2ec]
xor ebx, dword [0x104aa2e8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104aa2d1], cl
inc eax
cmp eax, 0x12
jb 0x100d6190
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104aa2e2
push 0x104aa2d1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x100d61f0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104aa740], 0
push esi
jne 0x100d6250
mov byte [0x104aa740], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104aa75c]
xor ebx, dword [0x104aa758]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104aa741], cl
inc eax
cmp eax, 0x14
jb 0x100d6210
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104aa754
push 0x104aa741
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d6380
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104abbe0], 0
push esi
jne 0x100d63e0
mov byte [0x104abbe0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104abbf4]
xor ebx, dword [0x104abbf0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104abbe1], cl
inc eax
cmp eax, 0xe
jb 0x100d63a0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104abbee
push 0x104abbe1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d6610
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ab8b0], 0
push esi
jne 0x100d6670
mov byte [0x104ab8b0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ab8cc]
xor ebx, dword [0x104ab8c8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ab8b1], cl
inc eax
cmp eax, 0x11
jb 0x100d6630
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ab8c1
push 0x104ab8b1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d6690
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ac160], 0
push esi
jne 0x100d66f0
mov byte [0x104ac160], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ac17c]
xor ebx, dword [0x104ac178]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ac161], cl
inc eax
cmp eax, 0x17
jb 0x100d66b0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ac177
push 0x104ac161
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x100d6710
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ab300], 0
push esi
jne 0x100d6770
mov byte [0x104ab300], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ab31c]
xor ebx, dword [0x104ab318]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ab301], cl
inc eax
cmp eax, 0x12
jb 0x100d6730
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ab312
push 0x104ab301
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d6790
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104aaf20], 0
push esi
jne 0x100d67f0
mov byte [0x104aaf20], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104aaf3c]
xor ebx, dword [0x104aaf38]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104aaf21], cl
inc eax
cmp eax, 0x12
jb 0x100d67b0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104aaf32
push 0x104aaf21
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d6810
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104aade0], 0
push esi
jne 0x100d6870
mov byte [0x104aade0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104aadf4]
xor ebx, dword [0x104aadf0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104aade1], cl
inc eax
cmp eax, 0xb
jb 0x100d6830
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104aadeb
push 0x104aade1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d6a70
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104aa950], 0
push esi
jne 0x100d6ad0
mov byte [0x104aa950], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104aa964]
xor ebx, dword [0x104aa960]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104aa951], cl
inc eax
cmp eax, 0xc
jb 0x100d6a90
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104aa95c
push 0x104aa951
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x100d6af0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104aab20], 0
push esi
jne 0x100d6b50
mov byte [0x104aab20], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104aab3c]
xor ebx, dword [0x104aab38]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104aab21], cl
inc eax
cmp eax, 0x16
jb 0x100d6b10
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104aab36
push 0x104aab21
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d6d50
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104a9d40], 0
push esi
jne 0x100d6db0
mov byte [0x104a9d40], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104a9d54]
xor ebx, dword [0x104a9d50]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104a9d41], cl
inc eax
cmp eax, 0xe
jb 0x100d6d70
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104a9d4e
push 0x104a9d41
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d6dd0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104abd10], 0
push esi
jne 0x100d6e30
mov byte [0x104abd10], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104abd2c]
xor ebx, dword [0x104abd28]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104abd11], cl
inc eax
cmp eax, 0x11
jb 0x100d6df0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104abd21
push 0x104abd11
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d7240
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104abc90], 0
push esi
jne 0x100d72a0
mov byte [0x104abc90], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104abca4]
xor ebx, dword [0x104abca0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104abc91], cl
inc eax
cmp eax, 0xe
jb 0x100d7260
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104abc9e
push 0x104abc91
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x100d72c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104abe60], 0
push esi
jne 0x100d7320
mov byte [0x104abe60], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104abe74]
xor ebx, dword [0x104abe70]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104abe61], cl
inc eax
cmp eax, 0xd
jb 0x100d72e0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104abe6d
push 0x104abe61
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d7340
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104a9710], 0
push esi
jne 0x100d73a0
mov byte [0x104a9710], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104a9724]
xor ebx, dword [0x104a9720]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104a9711], cl
inc eax
cmp eax, 0xc
jb 0x100d7360
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104a971c
push 0x104a9711
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d73c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104aaaa0], 0
push esi
jne 0x100d7420
mov byte [0x104aaaa0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104aaab4]
xor ebx, dword [0x104aaab0]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104aaaa1], cl
inc eax
cmp eax, 0xe
jb 0x100d73e0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104aaaae
push 0x104aaaa1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d7620
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104abf60], 0
push esi
jne 0x100d7680
mov byte [0x104abf60], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104abf7c]
xor ebx, dword [0x104abf78]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104abf61], cl
inc eax
cmp eax, 0x10
jb 0x100d7640
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104abf70
push 0x104abf61
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x100d76a0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104aa520], 0
push esi
jne 0x100d7700
mov byte [0x104aa520], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104aa534]
xor ebx, dword [0x104aa530]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + str.h_F], cl
inc eax
cmp eax, 0xd
jb 0x100d76c0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104aa52d
push str.h_F
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d7720
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104aa5a0], 0
push esi
jne 0x100d7780
mov byte [0x104aa5a0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104aa5bc]
xor ebx, dword [0x104aa5b8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104aa5a1], cl
inc eax
cmp eax, 0x10
jb 0x100d7740
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104aa5b0
push 0x104aa5a1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d77a0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104abc50], 0
push esi
jne 0x100d7800
mov byte [0x104abc50], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104abc6c]
xor ebx, dword [0x104abc68]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104abc51], cl
inc eax
cmp eax, 0x15
jb 0x100d77c0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104abc65
push 0x104abc51
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d7820
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104a9ff0], 0
push esi
jne 0x100d7880
mov byte [0x104a9ff0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104aa00c]
xor ebx, dword [0x104aa008]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104a9ff1], cl
inc eax
cmp eax, 0x11
jb 0x100d7840
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104aa001
push 0x104a9ff1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x100d78a0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104aa600], 0
push esi
jne 0x100d7900
mov byte [0x104aa600], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104aa61c]
xor ebx, dword [0x104aa618]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + str.dg_aF], cl
inc eax
cmp eax, 0x15
jb 0x100d78c0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104aa615
push str.dg_aF
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d7920
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104a9ab0], 0
push esi
jne 0x100d7980
mov byte [0x104a9ab0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104a9acc]
xor ebx, dword [0x104a9ac8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104a9ab1], cl
inc eax
cmp eax, 0x12
jb 0x100d7940
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104a9ac2
push 0x104a9ab1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d79a0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ab9a0], 0
push esi
jne 0x100d7a00
mov byte [0x104ab9a0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ab9bc]
xor ebx, dword [0x104ab9b8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ab9a1], cl
inc eax
cmp eax, 0x10
jb 0x100d79c0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ab9b0
push 0x104ab9a1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d7a20
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104aa620], 0
push esi
jne 0x100d7a80
mov byte [0x104aa620], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104aa63c]
xor ebx, dword [0x104aa638]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104aa621], cl
inc eax
cmp eax, 0x13
jb 0x100d7a40
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104aa633
push 0x104aa621
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x100d7aa0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104a9900], 0
push esi
jne 0x100d7b00
mov byte [0x104a9900], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104a991c]
xor ebx, dword [0x104a9918]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + str._w], cl
inc eax
cmp eax, 0x15
jb 0x100d7ac0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104a9915
push str._w
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d7b20
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104ab1c0], 0
push esi
jne 0x100d7b80
mov byte [0x104ab1c0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104ab1dc]
xor ebx, dword [0x104ab1d8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104ab1c1], cl
inc eax
cmp eax, 0x12
jb 0x100d7b40
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104ab1d2
push 0x104ab1c1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d7ba0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104aaa60], 0
push esi
jne 0x100d7c00
mov byte [0x104aaa60], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104aaa7c]
xor ebx, dword [0x104aaa78]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104aaa61], cl
inc eax
cmp eax, 0x11
jb 0x100d7bc0
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104aaa71
push 0x104aaa61
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100d7c20
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x104aa3b0], 0
push esi
jne 0x100d7c80
mov byte [0x104aa3b0], 1
xor eax, eax
push ebx
nop word [eax + eax]
xor esi, esi
mov ebx, eax
xor esi, dword [0x104aa3cc]
xor ebx, dword [0x104aa3c8]
xor esi, 0xd28f2c5
xor ebx, 0x1de26cd5
mov edx, esi
mov ecx, ebx
shld edx, ecx, 0xd
shl ecx, 0xd
xor esi, edx
xor ebx, ecx
mov ecx, ebx
shrd ecx, esi, 7
xor cl, bl
xor byte [eax + 0x104aa3b1], cl
inc eax
cmp eax, 0x12
jb 0x100d7c40
pop ebx
push ecx
mov ecx, dword [ebp + 8]
push 0x104aa3c2
push 0x104aa3b1
call fcn.1001a620
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret 4