joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10008dc0
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x12
mov dword [esp + 0x10], eax
mov ecx, dword [0x10020310]
xor eax, eax
cmp dword [ecx - 0x62e143d7], 1
mov dword [esp + 0x14], eax
je 0x10008e46
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x12
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 5
mov dword [esp + 0x14], eax
jne 0x10008df5
mov eax, dword [0x10020310]
mov dword [eax - 0x62e143d7], 1
add esp, 0x18
pop esi
pop edi
ret

Function at 0x10008e50
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x14
mov dword [esp + 0x10], eax
mov ecx, dword [0x10020314]
xor eax, eax
cmp dword [ecx - 0x1482c01b], 1
mov dword [esp + 0x14], eax
je 0x10008ed6
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x14
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 5
mov dword [esp + 0x14], eax
jne 0x10008e85
mov eax, dword [0x10020314]
mov dword [eax - 0x1482c01b], 1
add esp, 0x18
pop esi
pop edi
ret

Function at 0x10008ee0
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x10
mov eax, dword [esp + 0x20]
mov dword [esp], eax
mov ecx, dword [esp + 0x1c]
mov dword [esp + 4], ecx
add eax, 0x10
mov dword [esp + 8], eax
mov ecx, dword [0x10020318]
xor eax, eax
cmp dword [ecx + 0x405d438f], 1
mov dword [esp + 0xc], eax
je 0x10008f50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 4]
mov esi, dword [esp]
mov edx, dword [esp + 8]
mov dl, byte [edx + eax]
mov edi, eax
and edi, 0xf
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 7
mov dword [esp + 0xc], eax
jne 0x10008f14
mov eax, dword [0x10020318]
mov dword [eax + 0x405d438f], 1
add esp, 0x10
pop esi
pop edi
ret
Function at 0x10008f60
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x19
mov dword [esp + 0x10], eax
mov ecx, dword [0x1002031c]
xor eax, eax
cmp dword [ecx - 0x2ecdcdde], 1
mov dword [esp + 0x14], eax
je 0x10008fe6
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x19
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 5
mov dword [esp + 0x14], eax
jne 0x10008f95
mov eax, dword [0x1002031c]
mov dword [eax - 0x2ecdcdde], 1
add esp, 0x18
pop esi
pop edi
ret

Function at 0x10009140
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x19
mov dword [esp + 0x10], eax
mov ecx, dword [0x10020324]
xor eax, eax
cmp dword [ecx - 0x43db5321], 1
mov dword [esp + 0x14], eax
je 0x100091c6
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x19
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 0xd
mov dword [esp + 0x14], eax
jne 0x10009175
mov eax, dword [0x10020324]
mov dword [eax - 0x43db5321], 1
mov eax, dword [0x10021cb8]
mov ecx, dword [0x10021cb4]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x100091f7
jmp 0x1000922e
mov eax, dword [0x10021cb8]
mov ecx, dword [0x10021cb4]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x10009228
jmp 0x1000922e
add esp, 0x18
pop esi
pop edi
ret
jmp 0x100091f7

Function at 0x10009240
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x1b
mov dword [esp + 0x10], eax
mov ecx, dword [0x10020328]
xor eax, eax
cmp dword [ecx + 0x4909618c], 1
mov dword [esp + 0x14], eax
je 0x100092c6
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x1b
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 0x11
mov dword [esp + 0x14], eax
jne 0x10009275
mov eax, dword [0x10020328]
mov dword [eax + 0x4909618c], 1
add esp, 0x18
pop esi
pop edi
ret
Function at 0x100092d0
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x1e
mov dword [esp + 0x10], eax
mov ecx, dword [0x1002032c]
xor eax, eax
cmp dword [ecx - 0x101b40f1], 1
mov dword [esp + 0x14], eax
je 0x10009356
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x1e
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 0xd
mov dword [esp + 0x14], eax
jne 0x10009305
mov eax, dword [0x1002032c]
mov dword [eax - 0x101b40f1], 1
mov eax, dword [0x10021cb0]
mov ecx, dword [0x10021cac]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x10009387
jmp 0x100093be
mov eax, dword [0x10021cb0]
mov ecx, dword [0x10021cac]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x100093b8
jmp 0x100093be
add esp, 0x18
pop esi
pop edi
ret
jmp 0x10009387

Function at 0x100093d0
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x11
mov dword [esp + 0x10], eax
mov ecx, dword [0x10020330]
xor eax, eax
cmp dword [ecx + 0x4b2e5aea], 1
mov dword [esp + 0x14], eax
je 0x10009456
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x11
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 0xd
mov dword [esp + 0x14], eax
jne 0x10009405
mov eax, dword [0x10020330]
mov dword [eax + 0x4b2e5aea], 1
add esp, 0x18
pop esi
pop edi
ret

Function at 0x10009460
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x1e
mov dword [esp + 0x10], eax
mov ecx, dword [0x10020334]
xor eax, eax
cmp dword [ecx - 0x190812f5], 1
mov dword [esp + 0x14], eax
je 0x100094e6
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x1e
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 0xb
mov dword [esp + 0x14], eax
jne 0x10009495
mov eax, dword [0x10020334]
mov dword [eax - 0x190812f5], 1
add esp, 0x18
pop esi
pop edi
ret
Function at 0x100094f0
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x1c
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x18], eax
mov eax, dword [0x10021ca8]
mov ecx, dword [0x10021ca4]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x10009536
jmp 0x100095f4
mov eax, dword [esp + 0x14]
add eax, 0x1d
mov dword [esp + 0xc], eax
mov eax, dword [0x10020338]
cmp dword [eax + 0x55ee6d53], 1
sete al
mov byte [esp + 0x13], al
mov eax, dword [0x10021ca8]
mov ecx, dword [0x10021ca4]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x10009585
jmp 0x100095f4
mov cl, byte [esp + 0x13]
xor eax, eax
test cl, 1
mov dword [esp + 8], eax
jne 0x100095ee
jmp 0x1000959d
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0xc]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x1d
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 0xb
mov dword [esp + 8], eax
jne 0x1000959d
mov eax, dword [0x10020338]
mov dword [eax + 0x55ee6d53], 1
add esp, 0x1c
pop esi
pop edi
ret
jmp 0x10009536

Function at 0x10009600
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x11
mov dword [esp + 0x10], eax
mov ecx, dword [0x1002033c]
xor eax, eax
cmp dword [ecx - 0x66321f0a], 1
mov dword [esp + 0x14], eax
je 0x100096ed
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x11
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 8
mov dword [esp + 0x14], eax
jne 0x10009635
mov eax, dword [0x10021ca0]
mov ecx, dword [0x10021c9c]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x100096a8
jmp 0x100096f3
mov eax, dword [0x1002033c]
mov dword [eax - 0x66321f0a], 1
mov eax, dword [0x10021ca0]
mov ecx, dword [0x10021c9c]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x100096e8
jmp 0x100096f3
jmp 0x100096ed
add esp, 0x18
pop esi
pop edi
ret
mov eax, dword [0x1002033c]
mov dword [eax - 0x66321f0a], 1
jmp 0x100096a8
Function at 0x10009710
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x17
mov dword [esp + 0x10], eax
mov ecx, dword [0x10020340]
xor eax, eax
cmp dword [ecx - 0x40df6626], 1
mov dword [esp + 0x14], eax
je 0x100097fd
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x17
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 7
mov dword [esp + 0x14], eax
jne 0x10009745
mov eax, dword [0x10021c98]
mov ecx, dword [0x10021c94]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x100097b8
jmp 0x10009803
mov eax, dword [0x10020340]
mov dword [eax - 0x40df6626], 1
mov eax, dword [0x10021c98]
mov ecx, dword [0x10021c94]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x100097f8
jmp 0x10009803
jmp 0x100097fd
add esp, 0x18
pop esi
pop edi
ret
mov eax, dword [0x10020340]
mov dword [eax - 0x40df6626], 1
jmp 0x100097b8

Function at 0x10009820
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x1e
mov dword [esp + 0x10], eax
mov ecx, dword [0x10020344]
xor eax, eax
cmp dword [ecx + 0x24f34454], 1
mov dword [esp + 0x14], eax
je 0x100098a6
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x1e
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 6
mov dword [esp + 0x14], eax
jne 0x10009855
mov eax, dword [0x10020344]
mov dword [eax + 0x24f34454], 1
add esp, 0x18
pop esi
pop edi
ret

Function at 0x10009ca0
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x11
mov dword [esp + 0x10], eax
mov ecx, dword [0x10020354]
xor eax, eax
cmp dword [ecx + 0x90488d7], 1
mov dword [esp + 0x14], eax
je 0x10009d26
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x11
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 0x16
mov dword [esp + 0x14], eax
jne 0x10009cd5
mov eax, dword [0x10020354]
mov dword [eax + 0x90488d7], 1
add esp, 0x18
pop esi
pop edi
ret
Function at 0x10009ef0
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x19
mov dword [esp + 0x10], eax
mov ecx, dword [0x1002035c]
xor eax, eax
cmp dword [ecx + 0x1cac33da], 1
mov dword [esp + 0x14], eax
je 0x10009f76
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x19
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 0xc
mov dword [esp + 0x14], eax
jne 0x10009f25
mov eax, dword [0x1002035c]
mov dword [eax + 0x1cac33da], 1
add esp, 0x18
pop esi
pop edi
ret

Function at 0x10009f80
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x1c
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x18], eax
mov eax, dword [0x10021c70]
mov ecx, dword [0x10021c6c]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x10009fc6
jmp 0x1000a084
mov eax, dword [esp + 0x14]
add eax, 0x11
mov dword [esp + 0xc], eax
mov eax, dword [0x10020360]
cmp dword [eax + 0x7081148], 1
sete al
mov byte [esp + 0x13], al
mov eax, dword [0x10021c70]
mov ecx, dword [0x10021c6c]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1000a015
jmp 0x1000a084
mov cl, byte [esp + 0x13]
xor eax, eax
test cl, 1
mov dword [esp + 8], eax
jne 0x1000a07e
jmp 0x1000a02d
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0xc]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x11
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 0xa
mov dword [esp + 8], eax
jne 0x1000a02d
mov eax, dword [0x10020360]
mov dword [eax + 0x7081148], 1
add esp, 0x1c
pop esi
pop edi
ret
jmp 0x10009fc6
Function at 0x1000a1e0
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x15
mov dword [esp + 0x10], eax
mov ecx, dword [0x10020368]
xor eax, eax
cmp dword [ecx - 0x14c5b114], 1
mov dword [esp + 0x14], eax
je 0x1000a2cd
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x15
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 0x14
mov dword [esp + 0x14], eax
jne 0x1000a215
mov eax, dword [0x10021c60]
mov ecx, dword [0x10021c5c]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1000a288
jmp 0x1000a2d3
mov eax, dword [0x10020368]
mov dword [eax - 0x14c5b114], 1
mov eax, dword [0x10021c60]
mov ecx, dword [0x10021c5c]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1000a2c8
jmp 0x1000a2d3
jmp 0x1000a2cd
add esp, 0x18
pop esi
pop edi
ret
mov eax, dword [0x10020368]
mov dword [eax - 0x14c5b114], 1
jmp 0x1000a288

Function at 0x1000a2f0
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x14
mov dword [esp + 0x10], eax
mov ecx, dword [0x1002036c]
xor eax, eax
cmp dword [ecx - 0x6373cd51], 1
mov dword [esp + 0x14], eax
je 0x1000a376
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x14
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 2
mov dword [esp + 0x14], eax
jne 0x1000a325
mov eax, dword [0x1002036c]
mov dword [eax - 0x6373cd51], 1
add esp, 0x18
pop esi
pop edi
ret
Function at 0x1000a380
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x1c
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x18], eax
mov eax, dword [0x10021c58]
mov ecx, dword [0x10021c54]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1000a3c6
jmp 0x1000a484
mov eax, dword [esp + 0x14]
add eax, 0x14
mov dword [esp + 0xc], eax
mov eax, dword [0x10020370]
cmp dword [eax + 0x2c86c18], 1
sete al
mov byte [esp + 0x13], al
mov eax, dword [0x10021c58]
mov ecx, dword [0x10021c54]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1000a415
jmp 0x1000a484
mov cl, byte [esp + 0x13]
xor eax, eax
test cl, 1
mov dword [esp + 8], eax
jne 0x1000a47e
jmp 0x1000a42d
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0xc]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x14
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 4
mov dword [esp + 8], eax
jne 0x1000a42d
mov eax, dword [0x10020370]
mov dword [eax + 0x2c86c18], 1
add esp, 0x1c
pop esi
pop edi
ret
jmp 0x1000a3c6

Function at 0x1000a490
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x13
mov dword [esp + 0x10], eax
mov ecx, dword [0x10020374]
xor eax, eax
cmp dword [ecx + 0x6f982c62], 1
mov dword [esp + 0x14], eax
je 0x1000a57d
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x13
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 2
mov dword [esp + 0x14], eax
jne 0x1000a4c5
mov eax, dword [0x10021c50]
mov ecx, dword [0x10021c4c]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1000a538
jmp 0x1000a583
mov eax, dword [0x10020374]
mov dword [eax + 0x6f982c62], 1
mov eax, dword [0x10021c50]
mov ecx, dword [0x10021c4c]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1000a578
jmp 0x1000a583
jmp 0x1000a57d
add esp, 0x18
pop esi
pop edi
ret
mov eax, dword [0x10020374]
mov dword [eax + 0x6f982c62], 1
jmp 0x1000a538
Function at 0x1000a5a0
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x19
mov dword [esp + 0x10], eax
mov ecx, dword [0x10020378]
xor eax, eax
cmp dword [ecx + 0x6f712e9e], 1
mov dword [esp + 0x14], eax
je 0x1000a68d
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x19
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 0x13
mov dword [esp + 0x14], eax
jne 0x1000a5d5
mov eax, dword [0x10021c48]
mov ecx, dword [0x10021c44]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1000a648
jmp 0x1000a693
mov eax, dword [0x10020378]
mov dword [eax + 0x6f712e9e], 1
mov eax, dword [0x10021c48]
mov ecx, dword [0x10021c44]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1000a688
jmp 0x1000a693
jmp 0x1000a68d
add esp, 0x18
pop esi
pop edi
ret
mov eax, dword [0x10020378]
mov dword [eax + 0x6f712e9e], 1
jmp 0x1000a648

Function at 0x1000a6b0
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x1c
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x18], eax
mov eax, dword [0x10021c40]
mov ecx, dword [0x10021c3c]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1000a6f6
jmp 0x1000a7b4
mov eax, dword [esp + 0x14]
add eax, 0x11
mov dword [esp + 0xc], eax
mov eax, dword [0x1002037c]
cmp dword [eax - 0x6da0c12d], 1
sete al
mov byte [esp + 0x13], al
mov eax, dword [0x10021c40]
mov ecx, dword [0x10021c3c]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1000a745
jmp 0x1000a7b4
mov cl, byte [esp + 0x13]
xor eax, eax
test cl, 1
mov dword [esp + 8], eax
jne 0x1000a7ae
jmp 0x1000a75d
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0xc]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x11
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 2
mov dword [esp + 8], eax
jne 0x1000a75d
mov eax, dword [0x1002037c]
mov dword [eax - 0x6da0c12d], 1
add esp, 0x1c
pop esi
pop edi
ret
jmp 0x1000a6f6