joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1000897c
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100ca04f], 0
jne 0x10008a29
push ebx
push esi
mov dword [ebp - 0x14], 0x1608190d
mov dword [ebp - 0x10], 0x942094c
mov dword [ebp - 0xc], 0x5c1f0201
mov word [ebp - 8], 0x50
xor ebx, ebx
call fcn.1000416e
test al, al
jne 0x100089d1
call dword [0x1008f08c]
mov esi, eax
mov dword [0x100c97a0], esi
jmp 0x100089d7
mov esi, dword [0x100c97a0]
mov al, byte [ebx + 0x100c3198]
xor al, byte [ebp + ebx - 0x14]
inc ebx
mov byte [ebx + 0x100c37fb], al
cmp ebx, 0xd
jl 0x100089d7
mov byte [0x100ca04f], 1
call fcn.100040d8
test al, al
jne 0x10008a27
push 0x64
pop ecx
mov eax, esi
cdq
idiv ecx
xor ecx, ecx
push 4
lea eax, [edx + 0x2f4]
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1006f447
push eax
call fcn.10070c4d
pop ecx
pop ecx
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c37fc
call fcn.1007048b
leave
ret

Function at 0x10008a3a
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100ca04e], 0
jne 0x10008a8d
mov dword [ebp - 0x14], 0x1608190d
mov dword [ebp - 0x10], 0x942094c
mov dword [ebp - 0xc], 0x5c1f0201
mov word [ebp - 8], 0x51
xor ecx, ecx
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100c37eb], al
cmp ecx, 0xd
jl 0x10008a70
mov byte [0x100ca04e], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c37ec
call fcn.1007048b
leave
ret

Function at 0x10008a9e
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100ca04d], 0
jne 0x10008af1
mov dword [ebp - 0x14], 0x1608190d
mov dword [ebp - 0x10], 0x942094c
mov dword [ebp - 0xc], 0x5c1f0201
mov word [ebp - 8], 0x52
xor ecx, ecx
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100c37db], al
cmp ecx, 0xd
jl 0x10008ad4
mov byte [0x100ca04d], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c37dc
call fcn.1007048b
leave
ret

Function at 0x10008b02
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c9ffd], 0
jne 0x10008b77
push ebx
mov dword [ebp - 0x14], 0x11031c0e
mov dword [ebp - 0x10], 0x21001a15
xor ebx, ebx
mov dword [ebp - 0xc], 0x121a111d
mov word [ebp - 8], 0x10
call fcn.1000404e
test al, al
jne 0x10008b59
push 0x82
push 0x81
push str._d__d_n
call fcn.10070c67
add esp, 0xc
mov al, byte [ebx + 0x100c3198]
xor al, byte [ebp + ebx - 0x14]
inc ebx
mov byte [ebx + 0x100c33a7], al
cmp ebx, 0xd
jl 0x10008b59
mov byte [0x100c9ffd], 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c33a8
call fcn.1007048b
leave
ret
Function at 0x10008b88
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100ca00f], 0
jne 0x10008bde
xor ecx, ecx
mov dword [ebp - 0x14], 0x1e07150f
mov dword [ebp - 0x10], 0xb12
mov dword [ebp - 0xc], 0x14010214
mov word [ebp - 8], 0x524e
mov byte [ebp - 6], cl
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100c3497], al
cmp ecx, 0xe
jl 0x10008bc1
mov byte [0x100ca00f], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c3498
call fcn.1007048b
leave
ret

Function at 0x10008bef
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100ca010], 0
jne 0x10008c45
xor ecx, ecx
mov dword [ebp - 0x14], 0x1e07150f
mov dword [ebp - 0x10], 0xb12
mov dword [ebp - 0xc], 0x14010214
mov word [ebp - 8], 0x534e
mov byte [ebp - 6], cl
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100c34a7], al
cmp ecx, 0xe
jl 0x10008c28
mov byte [0x100ca010], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c34a8
call fcn.1007048b
leave
ret

Function at 0x10008c56
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x100c97a0]
imul eax, eax
push 0x17
cdq
pop ecx
idiv ecx
cmp edx, 0x16
jne 0x10008c7f
inc dword [0x100c9b20]
cmp byte [0x100c9ff1], 0
jne 0x10008cc5
xor ecx, ecx
mov dword [ebp - 0x14], 0x1e07150f
mov dword [ebp - 0x10], 0xb12
mov dword [ebp - 0xc], 0x14010214
mov word [ebp - 8], 0x504e
mov byte [ebp - 6], cl
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100c330f], al
cmp ecx, 0xe
jl 0x10008ca8
mov byte [0x100c9ff1], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c3310
call fcn.1007048b
leave
ret

Function at 0x10008cd6
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100ca04a], 0
jne 0x10008d25
xor ecx, ecx
mov dword [ebp - 0x10], 0xb041f29
mov dword [ebp - 0xc], 0x41d112d
mov word [ebp - 8], 0x1007
mov byte [ebp - 6], cl
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100c37af], al
cmp ecx, 0xa
jl 0x10008d08
mov byte [0x100ca04a], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c37b0
call fcn.1007048b
leave
ret
Function at 0x10008d36
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100ca024], 0
jne 0x10008dbc
xor eax, eax
push ebx
inc eax
push esi
mov esi, dword [0x100c97a0]
mov byte [ebp - 0xa], al
lea eax, [esi + 1]
imul eax, esi
push 0x14
pop ebx
cdq
idiv ebx
xor ecx, ecx
mov dword [ebp - 0x14], 0x1e07150f
mov dword [ebp - 0x10], 0xb12
mov byte [ebp - 0xc], bl
mov byte [ebp - 0xb], 2
mov byte [ebp - 9], bl
mov byte [ebp - 8], cl
cmp edx, 5
jne 0x10008d9b
push 1
test esi, esi
pop edx
cmove esi, edx
mov dword [0x100c97a0], esi
jmp 0x10008d9e
xor edx, edx
inc edx
pop esi
pop ebx
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100c35a7], al
cmp ecx, 0xc
jl 0x10008da0
mov byte [0x100ca024], dl
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c35a8
call fcn.1007048b
leave
ret

Function at 0x10008dcd
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
call fcn.1000404e
test al, al
jne 0x10008dec
dec dword [0x100c9ab4]
call fcn.100040ba
test al, al
jne 0x10008e1f
mov eax, dword [0x100c97a0]
push 0x64
cdq
pop ecx
idiv ecx
xor ecx, ecx
push 4
lea eax, [edx + 0x7b]
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1006f447
push eax
call fcn.10070c4d
pop ecx
pop ecx
cmp byte [0x100c9fe6], 0
jne 0x10008e74
xor ecx, ecx
mov dword [ebp - 0x14], 0x110f1c08
mov dword [ebp - 0x10], 0x4001450a
mov dword [ebp - 0xc], 0x1a010209
mov word [ebp - 8], 0x544e
mov byte [ebp - 6], cl
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100c3273], al
cmp ecx, 0xe
jl 0x10008e48
mov byte [0x100c9fe6], 1
call fcn.1000427b
test al, al
jne 0x10008e74
dec dword [0x100c9cc4]
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c3274
call fcn.1007048b
leave
ret

Function at 0x10008e85
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
call fcn.100040ba
mov ecx, dword [0x100c97a0]
xor ebx, ebx
inc ebx
test al, al
jne 0x10008eb3
test ecx, ecx
cmove ecx, ebx
mov dword [0x100c97a0], ecx
cmp byte [0x100c9fe9], 0
jne 0x10008f35
mov dword [ebp - 0x14], 0x110f1c08
mov word [ebp - 0x10], 0x450a
mov byte [ebp - 0xe], bl
mov word [ebp - 0xd], 0x940
mov byte [ebp - 0xb], 2
mov byte [ebp - 0xa], bl
mov dword [ebp - 9], 0x534e1a
xor edx, edx
mov al, byte [edx + 0x100c3198]
xor al, byte [ebp + edx - 0x14]
inc edx
mov byte [edx + 0x100c329f], al
cmp edx, 0xe
jl 0x10008ee2
imul ecx, ecx
and ecx, 0x8000000f
jns 0x10008f08
dec ecx
or ecx, 0xfffffff0
inc ecx
cmp ecx, 2
jne 0x10008f2f
mov eax, 0xea
push esi
lea esi, [eax - 0x4a]
test esi, esi
je 0x10008f27
cdq
idiv esi
mov ecx, esi
mov eax, ecx
mov esi, edx
test ecx, ecx
jne 0x10008f16
add eax, esi
mov dword [0x100c97a0], eax
pop esi
mov byte [0x100c9fe9], bl
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c32a0
pop ebx
call fcn.1007048b
leave
ret
Function at 0x10008f47
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100ca03b], 0
jne 0x10008f97
xor ecx, ecx
mov dword [ebp - 0x14], 0x110f1c08
mov dword [ebp - 0x10], 0x4001450a
mov dword [ebp - 0xc], 0x1a010209
mov byte [ebp - 8], cl
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100c36e7], al
cmp ecx, 0xc
jl 0x10008f7a
mov byte [0x100ca03b], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c36e8
call fcn.1007048b
leave
ret

Function at 0x10008fa8
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100ca025], 0
jne 0x1000900c
push ebx
mov dword [ebp - 0x14], 0x6121509
mov dword [ebp - 0x10], 0x301a04
xor ebx, ebx
mov dword [ebp - 0xc], 0x18181105
mov word [ebp - 8], 0x17
call fcn.1000416e
test al, al
jne 0x10008fee
inc dword [0x100c9ca0]
mov al, byte [ebx + 0x100c3198]
xor al, byte [ebp + ebx - 0x14]
inc ebx
mov byte [ebx + 0x100c35b7], al
cmp ebx, 0xd
jl 0x10008fee
mov byte [0x100ca025], 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c35b8
call fcn.1007048b
leave
ret

Function at 0x1000901d
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c9fe0], 0
jne 0x100090a6
push ebx
xor ebx, ebx
mov dword [ebp - 0x10], 0x6151509
mov dword [ebp - 0xc], 0x1f0e053e
mov dword [ebp - 8], 0x70a0f
mov ecx, ebx
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100c3227], al
cmp ecx, 0xb
jl 0x10009050
mov byte [0x100c9fe0], 1
call fcn.1000416e
test al, al
jne 0x100090a5
mov ecx, dword [0x100c97a0]
push esi
push 8
mov edx, ebx
pop esi
mov eax, edx
and eax, 1
dec eax
not eax
and eax, ecx
sar edx, 1
xor edx, eax
dec esi
jne 0x10009082
add ecx, edx
inc ebx
cmp ebx, 0x100
jl 0x1000907d
mov dword [0x100c97a0], ecx
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c3228
call fcn.1007048b
leave
ret
Function at 0x100090b7
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
call fcn.1000418c
xor ebx, ebx
test al, al
jne 0x10009108
mov ecx, dword [0x100c97a0]
push edi
mov esi, ebx
mov edi, 0xe5
jmp 0x100090f5
mov eax, ecx
or eax, 0xffffffac
add ecx, eax
mov eax, ecx
imul eax, ecx
inc esi
cmp esi, eax
jg 0x100090ff
mov eax, ecx
cdq
idiv edi
cmp edx, 0x4b
jne 0x100090e4
mov dword [0x100c97a0], esi
pop edi
jmp 0x1000910e
mov esi, dword [0x100c97a0]
cmp byte [0x100c9fdf], bl
jne 0x10009161
mov dword [ebp - 0xc], 0x1f3c09
mov dword [ebp - 8], 0x1c0b08
mov ecx, ebx
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0xc]
inc ecx
mov byte [ecx + 0x100c321f], al
cmp ecx, 7
jl 0x10009126
mov eax, esi
imul eax, esi
imul eax, esi
push 0x15
cdq
pop ecx
idiv ecx
mov byte [0x100c9fdf], 1
cmp edx, 0xc
jne 0x10009161
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [0x1008f094]
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
mov eax, 0x100c3220
pop ebx
call fcn.1007048b
leave
ret

Function at 0x10009174
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x80
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
call fcn.1000e5ac
xor ebx, ebx
test al, al
jne 0x100091eb
push esi
mov esi, ebx
call fcn.10070af8
movd xmm0, eax
cvtdq2pd xmm0, xmm0
inc esi
movsd qword [ebp + esi*8 - 0x88], xmm0
cmp esi, 0xe
jb 0x10009196
mov eax, ebx
pop esi
push 0xd
pop ecx
cmp eax, ecx
jge 0x100091e5
movsd xmm0, qword [ebp + ecx*8 - 0x80]
movsd xmm1, qword [ebp + ecx*8 - 0x88]
comisd xmm0, xmm1
jbe 0x100091e0
movsd qword [ebp + ecx*8 - 0x80], xmm1
movsd qword [ebp + ecx*8 - 0x88], xmm0
dec ecx
cmp ecx, eax
jg 0x100091bc
inc eax
cmp eax, 0xe
jl 0x100091b5
cmp byte [0x100ca032], bl
jne 0x10009224
mov dword [ebp - 0x10], 0x1e02140a
mov dword [ebp - 0xc], 0xe061a18
mov word [ebp - 8], 0x17
mov al, byte [ebx + 0x100c3198]
xor al, byte [ebp + ebx - 0x10]
inc ebx
mov byte [ebx + 0x100c3663], al
cmp ebx, 9
jl 0x10009207
mov byte [0x100ca032], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c3664
pop ebx
call fcn.1007048b
leave
ret

Function at 0x10009236
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100ca055], 0
jne 0x100092a6
xor ecx, ecx
mov dword [ebp - 0x10], 0x5f02140a
mov dword [ebp - 0xc], 0x41d110d
mov word [ebp - 8], 0x1007
mov byte [ebp - 6], cl
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100c384b], al
cmp ecx, 0xa
jl 0x10009268
push ebx
xor ebx, ebx
inc ebx
mov byte [0x100ca055], bl
call fcn.1000427b
test al, al
jne 0x100092a5
push 9
mov ecx, ebx
pop edx
dec edx
lea eax, [ecx + ebx]
lea ebx, [ecx]
mov ecx, eax
jns 0x10009296
mov dword [0x100c97a0], eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c384c
call fcn.1007048b
leave
ret
Function at 0x100092b7
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100ca035], 0
jne 0x10009303
mov dword [ebp - 0x10], 0x3e131f32
mov dword [ebp - 0xc], 0xe061a18
mov word [ebp - 8], 0x17
xor ecx, ecx
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100c368f], al
cmp ecx, 9
jl 0x100092e6
mov byte [0x100ca035], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c3690
call fcn.1007048b
leave
ret

Function at 0x10009314
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
call fcn.10003fbe
test al, al
jne 0x10009348
push esi
xor esi, esi
xor eax, eax
push 0x4b
inc esi
inc eax
pop edx
dec edx
lea ecx, [eax + esi]
lea esi, [eax]
mov eax, ecx
jns 0x10009337
mov dword [0x100c97a0], ecx
pop esi
cmp byte [0x100ca051], 0
jne 0x10009381
xor ecx, ecx
mov dword [ebp - 0x10], 0x1c071828
mov dword [ebp - 0xc], 0x28220d06
mov byte [ebp - 8], cl
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100c3817], al
cmp ecx, 8
jl 0x10009364
mov byte [0x100ca051], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c3818
call fcn.1007048b
leave
ret

Function at 0x10009392
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100ca02c], 0
jne 0x1000940b
mov ecx, dword [0x100c97a0]
push 0xc
lea eax, [ecx + 1]
imul eax, ecx
cdq
pop ecx
idiv ecx
cmp edx, 5
jne 0x100093d8
call fcn.10070af8
mov ecx, dword [0x100c97a0]
cmp ecx, eax
jne 0x100093d8
dec ecx
mov dword [0x100c97a0], ecx
mov dword [ebp - 0x10], 0x132d2432
mov dword [ebp - 0xc], 0x6000913
xor ecx, ecx
mov word [ebp - 8], 1
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100c360f], al
cmp ecx, 9
jl 0x100093ee
mov byte [0x100ca02c], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c3610
call fcn.1007048b
leave
ret
Function at 0x1000941c
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
mov ecx, dword [0x100c97a0]
mov eax, ecx
imul eax, ecx
imul eax, ecx
push ebx
and eax, 0x8000000f
jns 0x10009447
dec eax
or eax, 0xfffffff0
inc eax
xor ebx, ebx
cmp eax, 0xa
jne 0x10009469
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [0x1008f098]
push ebx
push ebx
call dword [0x1008f09c]
mov ecx, dword [0x100c97a0]
cmp byte [0x100ca043], bl
jne 0x100094c7
mov dword [ebp - 0x14], 0x15081933
mov dword [ebp - 0x10], 0x21000929
mov dword [ebp - 0xc], 0x121a111d
mov word [ebp - 8], 0x10
mov edx, ebx
mov al, byte [edx + 0x100c3198]
xor al, byte [ebp + edx - 0x14]
inc edx
mov byte [edx + 0x100c3753], al
cmp edx, 0xd
jl 0x1000948e
imul ecx, ecx
and ecx, 0x80000007
jns 0x100094b4
dec ecx
or ecx, 0xfffffff8
inc ecx
cmp ecx, 5
jne 0x100094c0
push ebx
call dword [0x1008f0a8]
mov byte [0x100ca043], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c3754
pop ebx
call fcn.1007048b
leave
ret

Function at 0x100094d9
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100ca056], 0
jne 0x10009552
xor ecx, ecx
mov dword [ebp - 0x14], 0x503193d
mov dword [ebp - 0x10], 0x1e1c0931
mov dword [ebp - 0xc], 0x15010c13
mov byte [ebp - 8], cl
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100c3857], al
cmp ecx, 0xc
jl 0x1000950c
call fcn.10004076
test al, al
jne 0x1000954b
push esi
push 0x42
pop eax
push 0x1b
pop esi
test esi, esi
je 0x10009543
cdq
idiv esi
mov ecx, esi
mov eax, ecx
mov esi, edx
test ecx, ecx
jne 0x10009532
add eax, esi
mov dword [0x100c97a0], eax
pop esi
mov byte [0x100ca056], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c3858
call fcn.1007048b
leave
ret

Function at 0x10009563
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c9fed], 0
jne 0x100095f2
push ebx
xor ebx, ebx
mov dword [ebp - 0x14], 0x1702193d
mov dword [ebp - 0x10], 0xc3c450e
mov dword [ebp - 0xc], 0x5c010612
mov word [ebp - 8], 0x52
mov ecx, ebx
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100c32d3], al
cmp ecx, 0xd
jl 0x1000959c
call fcn.1000416e
test al, al
jne 0x100095ea
mov ecx, dword [0x100c97a0]
push esi
push 8
mov edx, ebx
pop esi
mov eax, edx
and eax, 1
dec eax
not eax
and eax, ecx
sar edx, 1
xor edx, eax
dec esi
jne 0x100095c7
add ecx, edx
inc ebx
cmp ebx, 0x100
jl 0x100095c2
mov dword [0x100c97a0], ecx
pop esi
mov byte [0x100c9fed], 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c32d4
call fcn.1007048b
leave
ret
Function at 0x10009603
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100ca01b], 0
jne 0x10009683
call fcn.10003f5c
test al, al
jne 0x1000964f
mov eax, dword [0x100c97a0]
push 0x64
cdq
pop ecx
idiv ecx
xor ecx, ecx
push 4
lea eax, [edx + 0x63]
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1006f447
push eax
call fcn.10070c4d
pop ecx
pop ecx
mov dword [ebp - 0x10], 0x1702193d
mov dword [ebp - 0xc], 0xc3c450e
mov dword [ebp - 8], 0x10612
xor ecx, ecx
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100c3537], al
cmp ecx, 0xb
jl 0x10009666
mov byte [0x100ca01b], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c3538
call fcn.1007048b
leave
ret

Function at 0x10009694
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c9ff2], 0
jne 0x10009710
xor ecx, ecx
mov dword [ebp - 0x10], 0x60f1e3e
mov dword [ebp - 0xc], 0x19061f32
mov word [ebp - 8], 0xb07
mov byte [ebp - 6], cl
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100c331f], al
cmp ecx, 0xa
jl 0x100096c6
mov edx, dword [0x100c97a0]
push 0xc
lea ecx, [edx + 1]
lea eax, [edx + 2]
imul eax, ecx
imul eax, edx
cdq
pop ecx
idiv ecx
mov eax, dword [0x100c9c40]
mov ecx, 0x81e48082
mov byte [0x100c9ff2], 1
cmp edx, 4
cmove eax, ecx
mov dword [0x100c9c40], eax
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c3320
call fcn.1007048b
leave
ret

Function at 0x10009721
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100ca020], 0
jne 0x10009780
mov dword [ebp - 0x10], 0x1704053f
mov dword [ebp - 0xc], 0x8190932
mov word [ebp - 8], 0x16
xor ecx, ecx
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100c357b], al
cmp ecx, 9
jl 0x10009750
call fcn.10004004
test al, al
jne 0x10009779
call fcn.10070af8
mov dword [0x100c97a0], eax
mov byte [0x100ca020], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c357c
call fcn.1007048b
leave
ret

Function at 0x10009791
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c9ffb], 0
jne 0x100097d7
mov dword [ebp - 0xc], 0x1702003f
xor ecx, ecx
mov dword [ebp - 8], 0x1c0400
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0xc]
inc ecx
mov byte [ecx + 0x100c3393], al
cmp ecx, 7
jl 0x100097ba
mov byte [0x100c9ffb], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c3394
call fcn.1007048b
leave
ret
Function at 0x100097e8
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
mov ecx, dword [0x100c97a0]
mov eax, ecx
imul eax, ecx
push esi
push 0xf
cdq
pop esi
idiv esi
cmp edx, 0xe
jne 0x10009826
push 0x3c
push 0x3b
push str._d__d_n
call fcn.10070c67
mov ecx, dword [0x100c97a0]
add esp, 0xc
lea eax, [ecx + 1]
imul eax, ecx
push 5
cdq
pop esi
idiv esi
pop esi
cmp edx, 4
jne 0x1000983f
dec ecx
mov dword [0x100c97a0], ecx
cmp byte [0x100ca001], 0
jne 0x1000987c
mov dword [ebp - 0x10], 0x2603183f
mov dword [ebp - 0xc], 0x3e0a0a14
mov dword [ebp - 8], 0x140d0d
xor ecx, ecx
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100c33df], al
cmp ecx, 0xb
jl 0x1000985f
mov byte [0x100ca001], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c33e0
call fcn.1007048b
leave
ret

Function at 0x1000988d
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x184
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [0x100c97a0]
push 0x17
lea ecx, [esi + 1]
lea eax, [esi + 2]
imul eax, ecx
mov ecx, esi
imul eax, ecx
cdq
pop ebx
idiv ebx
xor ebx, ebx
cmp edx, 0xc
jne 0x10009922
mov eax, ebx
push edi
mov dword [ebp - 0x17c], eax
lea edi, [ebp - 0x170]
mov esi, ebx
mov eax, ecx
cdq
inc esi
idiv esi
mov dword [ebp - 0x178], ebx
mov dword [ebp - 0x184], esi
mov eax, ebx
mov dword [ebp - 0x180], edx
lea ecx, [eax + 1]
mov eax, ecx
cmp eax, 9
jl 0x100098ee
mov esi, dword [ebp - 0x184]
mov ecx, dword [0x100c97a0]
add edi, 9
push 0
pop ebx
cmp esi, 3
jl 0x100098d4
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp eax, 0xd
jl 0x100098d2
pop edi
cmp byte [0x100c9fe1], 0
jne 0x1000995f
mov dword [ebp - 0x10], 0x2603183f
mov dword [ebp - 0xc], 0x260a0a14
mov word [ebp - 8], 0x170d
mov byte [ebp - 6], bl
mov al, byte [ebx + 0x100c3198]
xor al, byte [ebp + ebx - 0x10]
inc ebx
mov byte [ebx + 0x100c3233], al
cmp ebx, 0xa
jl 0x10009942
mov byte [0x100c9fe1], 1
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
mov eax, 0x100c3234
pop ebx
call fcn.1007048b
leave
ret

Function at 0x10009972
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100ca03c], 0
jne 0x100099bf
mov dword [ebp - 0x10], 0x1e091f28
mov dword [ebp - 0xc], 0x1f16244c
mov dword [ebp - 8], 0xd
xor ecx, ecx
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100c36f7], al
cmp ecx, 0xb
jl 0x100099a2
mov byte [0x100ca03c], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c36f8
call fcn.1007048b
leave
ret