joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10005f42
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e7e], 0
jne 0x10005f96
mov dword [ebp - 0x14], 0x1a171a26
mov dword [ebp - 0x10], 0x3301112
xor ecx, ecx
mov dword [ebp - 0xc], 0x1a0c1300
mov dword [ebp - 8], 0x131603
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100bf627], al
cmp ecx, 0xf
jl 0x10005f79
mov byte [0x100c5e7e], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf628
call fcn.1006dcab
leave
ret

Function at 0x10005fa8
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e9b], 0
jne 0x1000603a
mov eax, dword [0x100c57c0]
imul eax, eax
push ebx
push 0x11
cdq
pop ecx
idiv ecx
xor ebx, ebx
cmp edx, 0xc
jne 0x10005fe1
push ebx
call dword [0x1008b0a8]
push 0x11
pop ecx
mov byte [ebp - 0xb], cl
mov dword [ebp - 0x10], 0x1a171a26
mov byte [ebp - 0xc], 0x12
mov dword [ebp - 0xa], 0xe011e37
mov word [ebp - 6], 9
mov ecx, ebx
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf7bb], al
cmp ecx, 0xb
jl 0x10005ffe
mov byte [0x100c5e9b], 1
call fcn.10004086
test al, al
jne 0x10006039
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [0x1008b0ac]
push ebx
push ebx
call dword [0x1008b0b0]
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf7bc
call fcn.1006dcab
leave
ret

Function at 0x1000604b
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3d4
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
call fcn.10004064
xor ebx, ebx
test al, al
jne 0x10006082
mov esi, ebx
mov ebx, dword [0x100c57c0]
mov edi, ebx
inc esi
dec edi
cmp esi, 0xee
jb 0x10006076
xor ebx, ebx
cmp byte [0x100c5e57], 0
jne 0x10006155
call fcn.10003e3a
test al, al
jne 0x10006121
mov eax, ebx
mov dword [ebp - 0x3cc], eax
lea esi, [ebp - 0x384]
mov ecx, ebx
mov dword [ebp - 0x3d4], ecx
mov dword [ebp - 0x3d0], esi
mov esi, dword [0x100c57c0]
lea ebx, [ecx + 1]
lea ecx, [eax + 1]
mov eax, esi
cdq
idiv ecx
mov eax, esi
mov ecx, esi
sub ecx, dword [ebp - 0x3cc]
mov esi, dword [ebp - 0x3d0]
mov edi, edx
cdq
imul edi, ecx
idiv ebx
add edi, eax
sub edi, dword [ebp - 0x3d4]
push edi
push 0x1008be80
call fcn.1006ebcc
mov eax, dword [ebp - 0x3cc]
pop ecx
pop ecx
mov ecx, ebx
add esi, 4
mov dword [ebp - 0x3d4], ecx
mov dword [ebp - 0x3d0], esi
cmp ecx, 0x11
jl 0x100060b8
inc eax
push 0
mov dword [ebp - 0x3cc], eax
pop ebx
cmp eax, 0xd
jl 0x100060aa
mov dword [ebp - 0x10], 0x1c11162b
mov dword [ebp - 0xc], 0x5011b3d
mov word [ebp - 8], 0x140d
mov byte [ebp - 6], bl
mov al, byte [ebx + 0x100bf198]
xor al, byte [ebp + ebx - 0x10]
inc ebx
mov byte [ebx + 0x100bf433], al
cmp ebx, 0xa
jl 0x10006138
mov byte [0x100c5e57], 1
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
mov eax, 0x100bf434
pop ebx
call fcn.1006dcab
leave
ret
Function at 0x10006169
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e49], 0
jne 0x1000624b
push ebx
push 0x11
pop ebx
mov dword [ebp - 0x10], 0x1a171a26
mov byte [ebp - 0xc], 0x12
mov byte [ebp - 0xb], bl
mov dword [ebp - 0xa], 0xd35
call fcn.10004044
test al, al
jne 0x100061d5
mov eax, dword [0x100c57c0]
push 0x64
cdq
pop ecx
idiv ecx
xor ecx, ecx
push 4
lea eax, [edx + 0x2f4]
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1006cc68
push eax
call fcn.1006e46d
pop ecx
pop ecx
xor ecx, ecx
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf37b], al
cmp ecx, 9
jl 0x100061d7
call fcn.100040cc
test al, al
jne 0x10006243
mov eax, dword [0x100c57c0]
cdq
push esi
sub eax, edx
mov esi, eax
xor ecx, ecx
push edi
sar esi, 1
test esi, esi
jle 0x1000623c
mov eax, dword [0x100c57c0]
cdq
and edx, 3
mov dword [ebp - 0x14], esi
lea edi, [edx + eax]
sar edi, 2
xor edx, edx
mov eax, esi
test edi, edi
jle 0x10006234
mov eax, edx
mov dword [ebp - 0x18], edi
add ebx, eax
dec eax
dec dword [ebp - 0x18]
jne 0x10006229
mov eax, dword [ebp - 0x14]
add edx, ecx
dec eax
mov dword [ebp - 0x14], eax
jne 0x10006220
inc ecx
cmp ecx, ebx
jl 0x10006206
pop edi
pop esi
mov byte [0x100c5e49], 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf37c
call fcn.1006dcab
leave
ret

Function at 0x1000625c
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e37], 0
jne 0x100062ac
xor ecx, ecx
mov dword [ebp - 0x14], 0x1a171a26
mov dword [ebp - 0x10], 0x5351112
mov dword [ebp - 0xc], 0x1080300
mov byte [ebp - 8], cl
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100bf283], al
cmp ecx, 0xc
jl 0x1000628f
mov byte [0x100c5e37], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf284
call fcn.1006dcab
leave
ret

Function at 0x100062bd
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
call fcn.10004086
mov esi, dword [0x100c57c0]
test al, al
jne 0x100062e4
dec esi
mov dword [0x100c57c0], esi
cmp byte [0x100c5e35], 0
jne 0x1000635c
xor ecx, ecx
mov dword [ebp - 0x14], 0x1a171a26
mov dword [ebp - 0x10], 0x3351112
mov dword [ebp - 0xc], 0x1080302
mov byte [ebp - 8], cl
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100bf263], al
cmp ecx, 0xc
jl 0x10006307
lea eax, [esi + 1]
imul eax, esi
push 0x16
cdq
pop ecx
idiv ecx
cmp edx, 0x15
jne 0x10006355
push 0x64
pop ecx
mov eax, esi
cdq
idiv ecx
xor ecx, ecx
push 4
lea eax, [edx + 0x63]
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1006cc68
push eax
call fcn.1006e46d
pop ecx
pop ecx
mov byte [0x100c5e35], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf264
pop esi
call fcn.1006dcab
leave
ret
Function at 0x1000636e
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e68], 0
jne 0x100063ba
mov dword [ebp - 0x10], 0x1a171a26
mov dword [ebp - 0xc], 0x9341112
mov word [ebp - 8], 0x1a
xor ecx, ecx
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf50f], al
cmp ecx, 9
jl 0x1000639d
mov byte [0x100c5e68], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf510
call fcn.1006dcab
leave
ret

Function at 0x100063cb
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
call fcn.10004064
mov esi, dword [0x100c57c0]
xor ebx, ebx
test al, al
jne 0x10006440
jmp 0x1000643c
mov ecx, esi
and ecx, 0x80000001
jns 0x10006400
dec ecx
or ecx, 0xfffffffe
inc ecx
jne 0x1000640d
mov eax, esi
cdq
sub eax, edx
mov esi, eax
sar esi, 1
jmp 0x10006414
lea esi, [esi*2 + 1]
mov eax, esi
push 3
cdq
pop ecx
idiv ecx
mov dword [0x100c57c0], esi
sub edx, ebx
je 0x1000642f
dec edx
dec edx
je 0x10006432
dec edx
je 0x10006433
jmp 0x1000643c
add esi, 2
inc esi
add esi, 2
mov dword [0x100c57c0], esi
test esi, esi
jne 0x100063f1
lea ecx, [esi + 1]
lea eax, [esi + 2]
imul eax, ecx
imul eax, esi
push 0xa
pop ecx
cdq
idiv ecx
push 4
pop edi
push 0x64
cmp edx, 7
jne 0x10006486
mov eax, esi
cdq
pop esi
idiv esi
xor ecx, ecx
lea eax, [edx + 0x141]
mul edi
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1006cc68
push eax
call fcn.1006e46d
pop ecx
pop ecx
push 0xa
pop ecx
jmp 0x10006487
pop esi
cmp byte [0x100c5eb4], bl
jne 0x10006529
push 0x12
pop eax
mov dword [ebp - 0x10], 0x1a171a26
mov byte [ebp - 0xc], al
mov word [ebp - 0xb], 0x3811
mov byte [ebp - 9], 5
mov byte [ebp - 8], cl
mov byte [ebp - 7], bl
mov al, byte [ebx + 0x100bf198]
xor al, byte [ebp + ebx - 0x10]
inc ebx
mov byte [ebx + 0x100bf8fb], al
cmp ebx, 9
jl 0x100064b0
call fcn.10003f47
test al, al
jne 0x100064f3
mov eax, dword [0x100c57c0]
cdq
idiv esi
xor ecx, ecx
lea eax, [edx + 0x7b]
mul edi
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1006cc68
push eax
call fcn.1006e46d
pop ecx
pop ecx
mov eax, dword [0x100c57c0]
imul eax, eax
push 0x12
cdq
pop ecx
idiv ecx
mov byte [0x100c5eb4], 1
cmp edx, 0xc
jne 0x10006529
push edi
call fcn.1006cded
mov esi, eax
call fcn.1006e318
mov dword [esi], eax
push esi
mov dword [0x100c57c0], eax
call fcn.1006ce3c
pop ecx
pop ecx
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
mov eax, 0x100bf8fc
pop ebx
call fcn.1006dcab
leave
ret
Function at 0x1000653d
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e4f], 0
jne 0x10006593
xor ecx, ecx
mov dword [ebp - 0x14], 0x1a171a26
mov dword [ebp - 0x10], 0xd3f1112
mov dword [ebp - 0xc], 0x1b0e091b
mov word [ebp - 8], pe_nt_image_headers32
mov byte [ebp - 6], cl
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100bf3c3], al
cmp ecx, 0xe
jl 0x10006576
mov byte [0x100c5e4f], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf3c4
call fcn.1006dcab
leave
ret

Function at 0x100065a4
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5ea4], 0
jne 0x100065f4
xor ecx, ecx
mov dword [ebp - 0x14], 0x1a171a26
mov dword [ebp - 0x10], 0x33e1112
mov dword [ebp - 0xc], 0xa080c00
mov byte [ebp - 8], cl
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100bf83b], al
cmp ecx, 0xc
jl 0x100065d7
mov byte [0x100c5ea4], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf83c
call fcn.1006dcab
leave
ret

Function at 0x10006605
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e4a], 0
jne 0x10006652
mov dword [ebp - 0x10], 0x1a171a26
mov dword [ebp - 0xc], 0x33d1112
mov dword [ebp - 8], 0x1e021a
xor ecx, ecx
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf387], al
cmp ecx, 0xb
jl 0x10006635
mov byte [0x100c5e4a], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf388
call fcn.1006dcab
leave
ret

Function at 0x10006663
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e4e], 0
jne 0x100066ac
xor ecx, ecx
mov dword [ebp - 0x10], 0x1a171a26
mov dword [ebp - 0xc], 0x23c1112
mov byte [ebp - 8], cl
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf3b7], al
cmp ecx, 8
jl 0x1000668f
mov byte [0x100c5e4e], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf3b8
call fcn.1006dcab
leave
ret

Function at 0x100066bd
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e5a], 0
jne 0x1000670c
xor ecx, ecx
mov dword [ebp - 0x10], 0x1a171a26
mov dword [ebp - 0xc], 0xd231112
mov word [ebp - 8], 0xc0d
mov byte [ebp - 6], cl
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf457], al
cmp ecx, 0xa
jl 0x100066ef
mov byte [0x100c5e5a], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf458
call fcn.1006dcab
leave
ret
Function at 0x1000671d
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e5e], 0
jne 0x1000678e
mov ecx, dword [0x100c57c0]
push 0x12
lea eax, [ecx + 1]
imul eax, ecx
cdq
pop ecx
idiv ecx
cmp edx, 0x10
jne 0x10006758
call dword [0x1008b084]
mov dword [0x100c57c0], eax
xor ecx, ecx
mov dword [ebp - 0x10], 0x7160628
mov dword [ebp - 0xc], 0xd16265c
mov word [ebp - 8], 0x1402
mov byte [ebp - 6], cl
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf48b], al
cmp ecx, 0xa
jl 0x10006771
mov byte [0x100c5e5e], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf48c
call fcn.1006dcab
leave
ret

Function at 0x1000679f
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e61], 0
jne 0x1000680c
push ebx
mov dword [ebp - 0x10], 0x1a171a26
mov dword [ebp - 0xc], 0xd231112
mov word [ebp - 8], 2
xor ebx, ebx
call fcn.10003e18
test al, al
jne 0x100067ee
call fcn.1006e318
mov ecx, dword [0x100c57c0]
cmp ecx, eax
jne 0x100067ee
dec ecx
mov dword [0x100c57c0], ecx
mov al, byte [ebx + 0x100bf198]
xor al, byte [ebp + ebx - 0x10]
inc ebx
mov byte [ebx + 0x100bf4b7], al
cmp ebx, 9
jl 0x100067ee
mov byte [0x100c5e61], 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf4b8
call fcn.1006dcab
leave
ret

Function at 0x1000681d
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
call fcn.10003dcc
test al, al
jne 0x10006858
push esi
push 0x3e
mov eax, 0xbc
pop esi
test esi, esi
je 0x10006850
cdq
idiv esi
mov ecx, esi
mov eax, ecx
mov esi, edx
test ecx, ecx
jne 0x1000683f
add eax, esi
mov dword [0x100c57c0], eax
pop esi
cmp byte [0x100c5e62], 0
jne 0x100068b0
mov dword [ebp - 0x10], 0x1a171a26
mov dword [ebp - 0xc], 0xd231112
mov dword [ebp - 8], 0x14131c
xor ecx, ecx
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf4c3], al
cmp ecx, 0xb
jl 0x10006878
mov byte [0x100c5e62], 1
call fcn.10004116
mov ecx, dword [0x100c5c00]
mov edx, 0xae0e6b1d
test al, al
cmove ecx, edx
mov dword [0x100c5c00], ecx
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf4c4
call fcn.1006dcab
leave
ret

Function at 0x100068c1
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e46], 0
jne 0x10006914
mov dword [ebp - 0x14], 0x1a171a26
mov dword [ebp - 0x10], 0x9231112
xor ecx, ecx
mov dword [ebp - 0xc], 0x1a180000
mov word [ebp - 8], 3
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100bf353], al
cmp ecx, 0xd
jl 0x100068f7
mov byte [0x100c5e46], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf354
call fcn.1006dcab
leave
ret
Function at 0x10006925
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
call fcn.10003fd5
test al, al
jne 0x10006944
dec dword [0x100c5ab4]
cmp byte [0x100c5eae], 0
jne 0x10006983
xor ecx, ecx
mov dword [ebp - 0x10], 0x1a171a26
mov dword [ebp - 0xc], 0x231112
mov word [ebp - 8], 0x1b
mov byte [ebp - 6], cl
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf8bf], al
cmp ecx, 0xa
jl 0x10006966
mov byte [0x100c5eae], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf8c0
call fcn.1006dcab
leave
ret

Function at 0x10006994
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5eb3], 0
jne 0x100069e3
xor ecx, ecx
mov dword [ebp - 0x10], 0x1a171a26
mov dword [ebp - 0xc], 0x231112
mov word [ebp - 8], 0x141b
mov byte [ebp - 6], cl
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf8ef], al
cmp ecx, 0xa
jl 0x100069c6
mov byte [0x100c5eb3], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf8f0
call fcn.1006dcab
leave
ret

Function at 0x100069f4
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e2e], 0
jne 0x10006a40
mov dword [ebp - 0x10], 0x1a171a26
mov dword [ebp - 0xc], 0x3231112
mov word [ebp - 8], 0xa
xor ecx, ecx
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf213], al
cmp ecx, 9
jl 0x10006a23
mov byte [0x100c5e2e], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf214
call fcn.1006dcab
leave
ret

Function at 0x10006a51
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e5b], 0
jne 0x10006aa1
xor ecx, ecx
mov dword [ebp - 0x14], 0x1a171a26
mov dword [ebp - 0x10], 0xf201112
mov dword [ebp - 0xc], 0x71d0e1c
mov byte [ebp - 8], cl
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100bf463], al
cmp ecx, 0xc
jl 0x10006a84
mov byte [0x100c5e5b], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf464
call fcn.1006dcab
leave
ret
Function at 0x10006ab2
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e64], 0
jne 0x10006b56
mov eax, dword [0x100c57c0]
push ebx
lea edx, [eax + 2]
lea ecx, [eax + 1]
imul edx, ecx
imul edx, eax
and edx, 0x8000000f
jns 0x10006aee
dec edx
or edx, 0xfffffff0
inc edx
push 4
pop ebx
cmp edx, 9
jne 0x10006b1b
cdq
push 0x64
pop ecx
idiv ecx
xor ecx, ecx
lea eax, [edx + 0x141]
mul ebx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1006cc68
push eax
call fcn.1006e46d
pop ecx
pop ecx
mov byte [ebp - 9], bl
mov dword [ebp - 0x10], 0x1a171a26
mov word [ebp - 0xc], 0x1112
mov byte [ebp - 0xa], 0x20
mov dword [ebp - 8], 0x191201
xor ecx, ecx
pop ebx
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf4db], al
cmp ecx, 0xb
jl 0x10006b39
mov byte [0x100c5e64], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf4dc
call fcn.1006dcab
leave
ret

Function at 0x10006b67
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e98], 0
jne 0x10006bb6
xor ecx, ecx
mov dword [ebp - 0x10], 0x1a171a26
mov dword [ebp - 0xc], 0x4201112
mov word [ebp - 8], 0x1001
mov byte [ebp - 6], cl
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf797], al
cmp ecx, 0xa
jl 0x10006b99
mov byte [0x100c5e98], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf798
call fcn.1006dcab
leave
ret

Function at 0x10006bc7
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e5c], 0
jne 0x10006c14
mov dword [ebp - 0x10], 0x1a171a26
mov dword [ebp - 0xc], 0x1201112
mov dword [ebp - 8], 0x19150f
xor ecx, ecx
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf473], al
cmp ecx, 0xb
jl 0x10006bf7
mov byte [0x100c5e5c], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf474
call fcn.1006dcab
leave
ret

Function at 0x10006c25
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e84], 0
jne 0x10006c75
xor ecx, ecx
mov dword [ebp - 0x14], 0x7110628
mov dword [ebp - 0x10], 0x19311014
mov dword [ebp - 0xc], 0x42401417
mov byte [ebp - 8], cl
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100bf67f], al
cmp ecx, 0xc
jl 0x10006c58
mov byte [0x100c5e84], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf680
call fcn.1006dcab
leave
ret
Function at 0x10006c86
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e3e], 0
jne 0x10006d02
push ebx
push esi
push 0x17
pop ebx
xor ecx, ecx
mov word [ebp - 0x14], 0x1a26
mov byte [ebp - 0x12], bl
mov dword [ebp - 0x11], 0x2011121a
mov dword [ebp - 0xd], 0x6060b1c
mov word [ebp - 9], 0x1f16
mov byte [ebp - 7], cl
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100bf2e3], al
cmp ecx, 0xd
jl 0x10006cc6
mov esi, dword [0x100c57c0]
mov byte [0x100c5e3e], 1
lea ecx, [esi + 1]
mov eax, ecx
imul eax, esi
cdq
idiv ebx
cmp edx, 0x10
cmove esi, ecx
mov dword [0x100c57c0], esi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf2e4
call fcn.1006dcab
leave
ret

Function at 0x10006d13
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e58], 0
jne 0x10006d5f
mov dword [ebp - 0x10], 0x1a171a26
mov dword [ebp - 0xc], 0xd271112
mov word [ebp - 8], 0xc
xor ecx, ecx
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf43f], al
cmp ecx, 9
jl 0x10006d42
mov byte [0x100c5e58], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf440
call fcn.1006dcab
leave
ret

Function at 0x10006d70
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5ea2], 0
jne 0x10006dce
xor ecx, ecx
mov dword [ebp - 0x10], 0x1a171a26
mov dword [ebp - 0xc], 0x19271112
mov word [ebp - 8], 0x20c
mov byte [ebp - 6], cl
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf823], al
cmp ecx, 0xa
jl 0x10006da2
mov byte [0x100c5ea2], 1
call fcn.10003e18
test al, al
jne 0x10006dce
inc dword [0x100c5b9c]
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf824
call fcn.1006dcab
leave
ret

Function at 0x10006ddf
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e50], 0
jne 0x10006e6c
push ebx
xor ebx, ebx
mov dword [ebp - 0x10], 0x1a171a26
mov dword [ebp - 0xc], 0x5251112
mov word [ebp - 8], 0x100b
mov byte [ebp - 6], bl
call fcn.1000413e
test al, al
jne 0x10006e4e
push esi
push edi
push 0x28
call fcn.1006cc68
pop ecx
mov edi, eax
mov esi, ebx
call fcn.1006e318
add eax, dword [0x100c57c0]
mov dword [edi + esi*4], eax
inc esi
cmp esi, 0xa
jl 0x10006e29
mov eax, dword [edi + 0x24]
push edi
mov dword [0x100c57c0], eax
call fcn.1006e46d
pop ecx
pop edi
pop esi
mov al, byte [ebx + 0x100bf198]
xor al, byte [ebp + ebx - 0x10]
inc ebx
mov byte [ebx + 0x100bf3d3], al
cmp ebx, 0xa
jl 0x10006e4e
mov byte [0x100c5e50], 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf3d4
call fcn.1006dcab
leave
ret