joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10009630
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x1c
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x18], eax
mov eax, dword [0x10022ca0]
mov ecx, dword [0x10022c9c]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x10009676
jmp 0x10009796
mov eax, dword [esp + 0x14]
add eax, 0x1f
mov dword [esp + 0xc], eax
mov eax, dword [0x1002130c]
cmp dword [eax - 0x3702f1e6], 1
sete al
mov byte [esp + 0x13], al
mov eax, dword [0x10022ca0]
mov ecx, dword [0x10022c9c]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x100096c5
jmp 0x10009796
mov cl, byte [esp + 0x13]
xor eax, eax
test cl, 1
mov dword [esp + 8], eax
jne 0x1000972e
jmp 0x100096dd
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0xc]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x1f
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 0xb
mov dword [esp + 8], eax
jne 0x100096dd
mov eax, dword [0x1002130c]
mov dword [eax - 0x3702f1e6], 1
mov eax, dword [0x10022ca0]
mov ecx, dword [0x10022c9c]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1000975f
jmp 0x1000979b
mov eax, dword [0x10022ca0]
mov ecx, dword [0x10022c9c]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x10009790
jmp 0x1000979b
add esp, 0x1c
pop esi
pop edi
ret
jmp 0x10009676
jmp 0x1000975f

Function at 0x100097a0
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x11
mov dword [esp + 0x10], eax
mov ecx, dword [0x10021310]
xor eax, eax
cmp dword [ecx + 0x2c821b8e], 1
mov dword [esp + 0x14], eax
je 0x10009826
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x11
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 5
mov dword [esp + 0x14], eax
jne 0x100097d5
mov eax, dword [0x10021310]
mov dword [eax + 0x2c821b8e], 1
add esp, 0x18
pop esi
pop edi
ret
Function at 0x10009830
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x1c
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x18], eax
mov eax, dword [0x10022c98]
mov ecx, dword [0x10022c94]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x10009876
jmp 0x1000999b
mov eax, dword [esp + 0x14]
add eax, 0x13
mov dword [esp + 0xc], eax
mov eax, dword [0x10021314]
cmp dword [eax - 0x22cd38fc], 1
sete al
mov byte [esp + 0x13], al
mov eax, dword [0x10022c98]
mov ecx, dword [0x10022c94]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x100098c5
jmp 0x1000999b
mov cl, byte [esp + 0x13]
xor eax, eax
test cl, 1
mov dword [esp + 8], eax
jne 0x10009995
jmp 0x100098dd
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0xc]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x13
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 5
mov dword [esp + 8], eax
jne 0x100098dd
mov eax, dword [0x10022c98]
mov ecx, dword [0x10022c94]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x10009950
jmp 0x100099a0
mov eax, dword [0x10021314]
mov dword [eax - 0x22cd38fc], 1
mov eax, dword [0x10022c98]
mov ecx, dword [0x10022c94]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x10009990
jmp 0x100099a0
jmp 0x10009995
add esp, 0x1c
pop esi
pop edi
ret
jmp 0x10009876
mov eax, dword [0x10021314]
mov dword [eax - 0x22cd38fc], 1
jmp 0x10009950

Function at 0x10009b10
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x1e
mov dword [esp + 0x10], eax
mov ecx, dword [str.s__]
xor eax, eax
cmp dword [ecx - 0x16391e1b], 1
mov dword [esp + 0x14], eax
je 0x10009b96
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x1e
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 5
mov dword [esp + 0x14], eax
jne 0x10009b45
mov eax, dword [str.s__]
mov dword [eax - 0x16391e1b], 1
add esp, 0x18
pop esi
pop edi
ret
Function at 0x10009ba0
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x14
mov dword [esp + 0x10], eax
mov ecx, dword [0x10021320]
xor eax, eax
cmp dword [ecx - 0x789b0524], 1
mov dword [esp + 0x14], eax
je 0x10009c26
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x14
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 0x16
mov dword [esp + 0x14], eax
jne 0x10009bd5
mov eax, dword [0x10021320]
mov dword [eax - 0x789b0524], 1
mov eax, dword [0x10022c88]
mov ecx, dword [0x10022c84]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x10009c57
jmp 0x10009c8e
mov eax, dword [0x10022c88]
mov ecx, dword [0x10022c84]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x10009c88
jmp 0x10009c8e
add esp, 0x18
pop esi
pop edi
ret
jmp 0x10009c57

Function at 0x10009ca0
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x10
mov eax, dword [esp + 0x20]
mov dword [esp], eax
mov ecx, dword [esp + 0x1c]
mov dword [esp + 4], ecx
add eax, 0x10
mov dword [esp + 8], eax
mov ecx, dword [0x10021324]
xor eax, eax
cmp dword [ecx + 0x14572b2d], 1
mov dword [esp + 0xc], eax
je 0x10009d10
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 4]
mov esi, dword [esp]
mov edx, dword [esp + 8]
mov dl, byte [edx + eax]
mov edi, eax
and edi, 0xf
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 0xd
mov dword [esp + 0xc], eax
jne 0x10009cd4
mov eax, dword [0x10021324]
mov dword [eax + 0x14572b2d], 1
add esp, 0x10
pop esi
pop edi
ret

Function at 0x10009ed0
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x14
mov dword [esp + 0x10], eax
mov ecx, dword [0x1002132c]
xor eax, eax
cmp dword [ecx - 0x1411e2f0], 1
mov dword [esp + 0x14], eax
je 0x10009f56
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x14
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 0xd
mov dword [esp + 0x14], eax
jne 0x10009f05
mov eax, dword [0x1002132c]
mov dword [eax - 0x1411e2f0], 1
add esp, 0x18
pop esi
pop edi
ret
Function at 0x10009f60
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x16
mov dword [esp + 0x10], eax
mov ecx, dword [0x10021330]
xor eax, eax
cmp dword [ecx + 0x2fb4f007], 1
mov dword [esp + 0x14], eax
je 0x10009fe6
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x16
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 0xd
mov dword [esp + 0x14], eax
jne 0x10009f95
mov eax, dword [0x10021330]
mov dword [eax + 0x2fb4f007], 1
add esp, 0x18
pop esi
pop edi
ret

Function at 0x10009ff0
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x1c
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x18], eax
mov eax, dword [0x10022c78]
mov ecx, dword [0x10022c74]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1000a036
jmp 0x1000a0f4
mov eax, dword [esp + 0x14]
add eax, 0x1d
mov dword [esp + 0xc], eax
mov eax, dword [0x10021334]
cmp dword [eax + 0x46783594], 1
sete al
mov byte [esp + 0x13], al
mov eax, dword [0x10022c78]
mov ecx, dword [0x10022c74]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1000a085
jmp 0x1000a0f4
mov cl, byte [esp + 0x13]
xor eax, eax
test cl, 1
mov dword [esp + 8], eax
jne 0x1000a0ee
jmp 0x1000a09d
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0xc]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x1d
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 0xb
mov dword [esp + 8], eax
jne 0x1000a09d
mov eax, dword [0x10021334]
mov dword [eax + 0x46783594], 1
add esp, 0x1c
pop esi
pop edi
ret
jmp 0x1000a036
Function at 0x1000a100
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x1c
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x18], eax
mov eax, dword [0x10022c70]
mov ecx, dword [0x10022c6c]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1000a146
jmp 0x1000a204
mov eax, dword [esp + 0x14]
add eax, 0x1a
mov dword [esp + 0xc], eax
mov eax, dword [0x10021338]
cmp dword [eax - 0x1b47971f], 1
sete al
mov byte [esp + 0x13], al
mov eax, dword [0x10022c70]
mov ecx, dword [0x10022c6c]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1000a195
jmp 0x1000a204
mov cl, byte [esp + 0x13]
xor eax, eax
test cl, 1
mov dword [esp + 8], eax
jne 0x1000a1fe
jmp 0x1000a1ad
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0xc]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x1a
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 0xb
mov dword [esp + 8], eax
jne 0x1000a1ad
mov eax, dword [0x10021338]
mov dword [eax - 0x1b47971f], 1
add esp, 0x1c
pop esi
pop edi
ret
jmp 0x1000a146

Function at 0x1000a210
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x1d
mov dword [esp + 0x10], eax
mov ecx, dword [0x1002133c]
xor eax, eax
cmp dword [ecx - 0x31ffdf5b], 1
mov dword [esp + 0x14], eax
je 0x1000a296
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x1d
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 8
mov dword [esp + 0x14], eax
jne 0x1000a245
mov eax, dword [0x1002133c]
mov dword [eax - 0x31ffdf5b], 1
add esp, 0x18
pop esi
pop edi
ret

Function at 0x1000a2a0
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x1f
mov dword [esp + 0x10], eax
mov ecx, dword [0x10021340]
xor eax, eax
cmp dword [ecx - 0x5a7f8c6], 1
mov dword [esp + 0x14], eax
je 0x1000a326
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x1f
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 7
mov dword [esp + 0x14], eax
jne 0x1000a2d5
mov eax, dword [0x10021340]
mov dword [eax - 0x5a7f8c6], 1
add esp, 0x18
pop esi
pop edi
ret
Function at 0x1000a330
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x1c
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x18], eax
mov eax, dword [0x10022c68]
mov ecx, dword [0x10022c64]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1000a376
jmp 0x1000a4fd
mov eax, dword [esp + 0x14]
add eax, 0x1a
mov dword [esp + 0xc], eax
mov eax, dword [0x10021344]
cmp dword [eax + 0x7b7a80fc], 1
sete al
mov byte [esp + 0x13], al
mov eax, dword [0x10022c68]
mov ecx, dword [0x10022c64]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1000a3c5
jmp 0x1000a4fd
mov cl, byte [esp + 0x13]
xor eax, eax
test cl, 1
mov dword [esp + 8], eax
jne 0x1000a495
jmp 0x1000a3dd
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0xc]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x1a
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 6
mov dword [esp + 8], eax
jne 0x1000a3dd
mov eax, dword [0x10022c68]
mov ecx, dword [0x10022c64]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1000a450
jmp 0x1000a502
mov eax, dword [0x10021344]
mov dword [eax + 0x7b7a80fc], 1
mov eax, dword [0x10022c68]
mov ecx, dword [0x10022c64]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1000a490
jmp 0x1000a502
jmp 0x1000a495
mov eax, dword [0x10022c68]
mov ecx, dword [0x10022c64]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1000a4c6
jmp 0x1000a516
mov eax, dword [0x10022c68]
mov ecx, dword [0x10022c64]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1000a4f7
jmp 0x1000a516
add esp, 0x1c
pop esi
pop edi
ret
jmp 0x1000a376
mov eax, dword [0x10021344]
mov dword [eax + 0x7b7a80fc], 1
jmp 0x1000a450
jmp 0x1000a4c6
Function at 0x1000a520
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x1c
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x18], eax
mov eax, dword [0x10022c60]
mov ecx, dword [0x10022c5c]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1000a566
jmp 0x1000a624
mov eax, dword [esp + 0x14]
add eax, 0x11
mov dword [esp + 0xc], eax
mov eax, dword [0x10021348]
cmp dword [eax - 0x1b00f475], 1
sete al
mov byte [esp + 0x13], al
mov eax, dword [0x10022c60]
mov ecx, dword [0x10022c5c]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1000a5b5
jmp 0x1000a624
mov cl, byte [esp + 0x13]
xor eax, eax
test cl, 1
mov dword [esp + 8], eax
jne 0x1000a61e
jmp 0x1000a5cd
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0xc]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x11
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 8
mov dword [esp + 8], eax
jne 0x1000a5cd
mov eax, dword [0x10021348]
mov dword [eax - 0x1b00f475], 1
add esp, 0x1c
pop esi
pop edi
ret
jmp 0x1000a566

Function at 0x1000a630
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x12
mov dword [esp + 0x10], eax
mov ecx, dword [0x1002134c]
xor eax, eax
cmp dword [ecx - 0x6ba5e191], 1
mov dword [esp + 0x14], eax
je 0x1000a6b6
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x12
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 0xc
mov dword [esp + 0x14], eax
jne 0x1000a665
mov eax, dword [0x1002134c]
mov dword [eax - 0x6ba5e191], 1
mov eax, dword [0x10022c58]
mov ecx, dword [0x10022c54]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1000a6e7
jmp 0x1000a71e
mov eax, dword [0x10022c58]
mov ecx, dword [0x10022c54]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1000a718
jmp 0x1000a71e
add esp, 0x18
pop esi
pop edi
ret
jmp 0x1000a6e7
Function at 0x1000a730
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x13
mov dword [esp + 0x10], eax
mov ecx, dword [0x10021350]
xor eax, eax
cmp dword [ecx - 0x597af647], 1
mov dword [esp + 0x14], eax
je 0x1000a7b6
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x13
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 6
mov dword [esp + 0x14], eax
jne 0x1000a765
mov eax, dword [0x10021350]
mov dword [eax - 0x597af647], 1
add esp, 0x18
pop esi
pop edi
ret

Function at 0x1000a7c0
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x14
mov dword [esp + 0x10], eax
mov ecx, dword [0x10021354]
xor eax, eax
cmp dword [ecx - 0x276986d2], 1
mov dword [esp + 0x14], eax
je 0x1000a846
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x14
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 0x16
mov dword [esp + 0x14], eax
jne 0x1000a7f5
mov eax, dword [0x10021354]
mov dword [eax - 0x276986d2], 1
add esp, 0x18
pop esi
pop edi
ret

Function at 0x1000a850
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x19
mov dword [esp + 0x10], eax
mov ecx, dword [0x10021358]
xor eax, eax
cmp dword [ecx - 0x4236fdd9], 1
mov dword [esp + 0x14], eax
je 0x1000a8d6
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x19
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 0xa
mov dword [esp + 0x14], eax
jne 0x1000a885
mov eax, dword [0x10021358]
mov dword [eax - 0x4236fdd9], 1
add esp, 0x18
pop esi
pop edi
ret
Function at 0x1000a8e0
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x1f
mov dword [esp + 0x10], eax
mov ecx, dword [0x1002135c]
xor eax, eax
cmp dword [ecx - 0xbad810c], 1
mov dword [esp + 0x14], eax
je 0x1000a966
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x1f
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 0xc
mov dword [esp + 0x14], eax
jne 0x1000a915
mov eax, dword [0x1002135c]
mov dword [eax - 0xbad810c], 1
add esp, 0x18
pop esi
pop edi
ret

Function at 0x1000a970
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x18
mov dword [esp + 0x10], eax
mov ecx, dword [0x10021360]
xor eax, eax
cmp dword [ecx + 0xb0e39c9], 1
mov dword [esp + 0x14], eax
je 0x1000a9f6
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x18
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 0xa
mov dword [esp + 0x14], eax
jne 0x1000a9a5
mov eax, dword [0x10021360]
mov dword [eax + 0xb0e39c9], 1
add esp, 0x18
pop esi
pop edi
ret

Function at 0x1000aa00
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x12
mov dword [esp + 0x10], eax
mov ecx, dword [str.4ZQPn]
xor eax, eax
cmp dword [ecx - 0x404f3a98], 1
mov dword [esp + 0x14], eax
je 0x1000aa86
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x12
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 0x15
mov dword [esp + 0x14], eax
jne 0x1000aa35
mov eax, dword [str.4ZQPn]
mov dword [eax - 0x404f3a98], 1
add esp, 0x18
pop esi
pop edi
ret