joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10008ca0
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x15
mov dword [esp + 0x10], eax
mov ecx, dword [0x10020308]
xor eax, eax
cmp dword [ecx - 0x4fef4c6b], 1
mov dword [esp + 0x14], eax
je 0x10008d26
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x15
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 0xe
mov dword [esp + 0x14], eax
jne 0x10008cd5
mov eax, dword [0x10020308]
mov dword [eax - 0x4fef4c6b], 1
mov eax, dword [0x10021c98]
mov ecx, dword [0x10021c94]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x10008d57
jmp 0x10008d8e
mov eax, dword [0x10021c98]
mov ecx, dword [0x10021c94]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x10008d88
jmp 0x10008d8e
add esp, 0x18
pop esi
pop edi
ret
jmp 0x10008d57

Function at 0x10008da0
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x1a
mov dword [esp + 0x10], eax
mov ecx, dword [0x1002030c]
xor eax, eax
cmp dword [ecx - 0x5afdb14b], 1
mov dword [esp + 0x14], eax
je 0x10008e26
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x1a
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 0xb
mov dword [esp + 0x14], eax
jne 0x10008dd5
mov eax, dword [0x1002030c]
mov dword [eax - 0x5afdb14b], 1
mov eax, dword [0x10021c90]
mov ecx, dword [0x10021c8c]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x10008e57
jmp 0x10008e8e
mov eax, dword [0x10021c90]
mov ecx, dword [0x10021c8c]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x10008e88
jmp 0x10008e8e
add esp, 0x18
pop esi
pop edi
ret
jmp 0x10008e57
Function at 0x10008ea0
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x1a
mov dword [esp + 0x10], eax
mov ecx, dword [0x10020310]
xor eax, eax
cmp dword [ecx + 0x4dfdce45], 1
mov dword [esp + 0x14], eax
je 0x10008f26
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x1a
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 5
mov dword [esp + 0x14], eax
jne 0x10008ed5
mov eax, dword [0x10020310]
mov dword [eax + 0x4dfdce45], 1
add esp, 0x18
pop esi
pop edi
ret

Function at 0x10008f30
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x1a
mov dword [esp + 0x10], eax
mov ecx, dword [0x10020314]
xor eax, eax
cmp dword [ecx - 0x5063289d], 1
mov dword [esp + 0x14], eax
je 0x1000901d
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x1a
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 5
mov dword [esp + 0x14], eax
jne 0x10008f65
mov eax, dword [0x10021c88]
mov ecx, dword [0x10021c84]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x10008fd8
jmp 0x10009023
mov eax, dword [0x10020314]
mov dword [eax - 0x5063289d], 1
mov eax, dword [0x10021c88]
mov ecx, dword [0x10021c84]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x10009018
jmp 0x10009023
jmp 0x1000901d
add esp, 0x18
pop esi
pop edi
ret
mov eax, dword [0x10020314]
mov dword [eax - 0x5063289d], 1
jmp 0x10008fd8

Function at 0x10009040
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x1f
mov dword [esp + 0x10], eax
mov ecx, dword [0x10020318]
xor eax, eax
cmp dword [ecx - 0x60d48c46], 1
mov dword [esp + 0x14], eax
je 0x100090c6
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x1f
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 7
mov dword [esp + 0x14], eax
jne 0x10009075
mov eax, dword [0x10020318]
mov dword [eax - 0x60d48c46], 1
add esp, 0x18
pop esi
pop edi
ret
Function at 0x100090d0
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x19
mov dword [esp + 0x10], eax
mov ecx, dword [0x1002031c]
xor eax, eax
cmp dword [ecx + 0x63308a01], 1
mov dword [esp + 0x14], eax
je 0x10009156
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x19
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 5
mov dword [esp + 0x14], eax
jne 0x10009105
mov eax, dword [0x1002031c]
mov dword [eax + 0x63308a01], 1
mov eax, dword [0x10021c80]
mov ecx, dword [0x10021c7c]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x10009187
jmp 0x100091be
mov eax, dword [0x10021c80]
mov ecx, dword [0x10021c7c]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x100091b8
jmp 0x100091be
add esp, 0x18
pop esi
pop edi
ret
jmp 0x10009187

Function at 0x100091d0
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x12
mov dword [esp + 0x10], eax
mov ecx, dword [0x10020320]
xor eax, eax
cmp dword [ecx - 0x705584ac], 1
mov dword [esp + 0x14], eax
je 0x10009256
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x12
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 0x16
mov dword [esp + 0x14], eax
jne 0x10009205
mov eax, dword [0x10020320]
mov dword [eax - 0x705584ac], 1
add esp, 0x18
pop esi
pop edi
ret

Function at 0x10009260
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x12
mov dword [esp + 0x10], eax
mov ecx, dword [0x10020324]
xor eax, eax
cmp dword [ecx - 0x7e40f81], 1
mov dword [esp + 0x14], eax
je 0x100092e6
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x12
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 0xd
mov dword [esp + 0x14], eax
jne 0x10009295
mov eax, dword [0x10020324]
mov dword [eax - 0x7e40f81], 1
add esp, 0x18
pop esi
pop edi
ret
Function at 0x100092f0
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x11
mov dword [esp + 0x10], eax
mov ecx, dword [0x10020328]
xor eax, eax
cmp dword [ecx + 0x58c56100], 1
mov dword [esp + 0x14], eax
je 0x10009376
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x11
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 0x11
mov dword [esp + 0x14], eax
jne 0x10009325
mov eax, dword [0x10020328]
mov dword [eax + 0x58c56100], 1
add esp, 0x18
pop esi
pop edi
ret

Function at 0x10009380
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x1d
mov dword [esp + 0x10], eax
mov ecx, dword [0x1002032c]
xor eax, eax
cmp dword [ecx - 0x2638d366], 1
mov dword [esp + 0x14], eax
je 0x10009406
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x1d
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 0xd
mov dword [esp + 0x14], eax
jne 0x100093b5
mov eax, dword [0x1002032c]
mov dword [eax - 0x2638d366], 1
add esp, 0x18
pop esi
pop edi
ret

Function at 0x10009410
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x13
mov dword [esp + 0x10], eax
mov ecx, dword [0x10020330]
xor eax, eax
cmp dword [ecx + 0x7e80a3b5], 1
mov dword [esp + 0x14], eax
je 0x10009496
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x13
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 0xd
mov dword [esp + 0x14], eax
jne 0x10009445
mov eax, dword [0x10020330]
mov dword [eax + 0x7e80a3b5], 1
add esp, 0x18
pop esi
pop edi
ret
Function at 0x100094a0
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x10
mov eax, dword [esp + 0x20]
mov dword [esp], eax
mov ecx, dword [esp + 0x1c]
mov dword [esp + 4], ecx
add eax, 0x10
mov dword [esp + 8], eax
mov ecx, dword [0x10020334]
xor eax, eax
cmp dword [ecx + 0x4e32c5e9], 1
mov dword [esp + 0xc], eax
je 0x10009510
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 4]
mov esi, dword [esp]
mov edx, dword [esp + 8]
mov dl, byte [edx + eax]
mov edi, eax
and edi, 0xf
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 0xb
mov dword [esp + 0xc], eax
jne 0x100094d4
mov eax, dword [0x10020334]
mov dword [eax + 0x4e32c5e9], 1
mov eax, dword [0x10021c78]
mov ecx, dword [0x10021c74]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x10009541
jmp 0x10009578
mov eax, dword [0x10021c78]
mov ecx, dword [0x10021c74]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x10009572
jmp 0x10009578
add esp, 0x10
pop esi
pop edi
ret
jmp 0x10009541

Function at 0x10009580
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x11
mov dword [esp + 0x10], eax
mov ecx, dword [0x10020338]
xor eax, eax
cmp dword [ecx - 0x1061eb10], 1
mov dword [esp + 0x14], eax
je 0x1000966d
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x11
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 0xb
mov dword [esp + 0x14], eax
jne 0x100095b5
mov eax, dword [0x10021c70]
mov ecx, dword [0x10021c6c]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x10009628
jmp 0x10009673
mov eax, dword [0x10020338]
mov dword [eax - 0x1061eb10], 1
mov eax, dword [0x10021c70]
mov ecx, dword [0x10021c6c]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x10009668
jmp 0x10009673
jmp 0x1000966d
add esp, 0x18
pop esi
pop edi
ret
mov eax, dword [0x10020338]
mov dword [eax - 0x1061eb10], 1
jmp 0x10009628
Function at 0x10009690
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x18
mov dword [esp + 0x10], eax
mov ecx, dword [0x1002033c]
xor eax, eax
cmp dword [ecx - 0x1dfbb1f5], 1
mov dword [esp + 0x14], eax
je 0x10009716
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x18
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 8
mov dword [esp + 0x14], eax
jne 0x100096c5
mov eax, dword [0x1002033c]
mov dword [eax - 0x1dfbb1f5], 1
add esp, 0x18
pop esi
pop edi
ret

Function at 0x10009720
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x1f
mov dword [esp + 0x10], eax
mov ecx, dword [0x10020340]
xor eax, eax
cmp dword [ecx - 0x7b8b49aa], 1
mov dword [esp + 0x14], eax
je 0x100097a6
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x1f
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 7
mov dword [esp + 0x14], eax
jne 0x10009755
mov eax, dword [0x10020340]
mov dword [eax - 0x7b8b49aa], 1
add esp, 0x18
pop esi
pop edi
ret

Function at 0x100097b0
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x1c
mov dword [esp + 0x10], eax
mov ecx, dword [0x10020344]
xor eax, eax
cmp dword [ecx + 0x7463e968], 1
mov dword [esp + 0x14], eax
je 0x10009836
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x1c
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 6
mov dword [esp + 0x14], eax
jne 0x100097e5
mov eax, dword [0x10020344]
mov dword [eax + 0x7463e968], 1
add esp, 0x18
pop esi
pop edi
ret
Function at 0x10009840
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x11
mov dword [esp + 0x10], eax
mov ecx, dword [0x10020348]
xor eax, eax
cmp dword [ecx + 0xf8aaf12], 1
mov dword [esp + 0x14], eax
je 0x100098c6
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x11
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 8
mov dword [esp + 0x14], eax
jne 0x10009875
mov eax, dword [0x10020348]
mov dword [eax + 0xf8aaf12], 1
add esp, 0x18
pop esi
pop edi
ret

Function at 0x10009bf0
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x1f
mov dword [esp + 0x10], eax
mov ecx, dword [0x10020354]
xor eax, eax
cmp dword [ecx - 0x76c193c8], 1
mov dword [esp + 0x14], eax
je 0x10009cdd
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x1f
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 0x16
mov dword [esp + 0x14], eax
jne 0x10009c25
mov eax, dword [0x10021c58]
mov ecx, dword [0x10021c54]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x10009c98
jmp 0x10009d45
mov eax, dword [0x10020354]
mov dword [eax - 0x76c193c8], 1
mov eax, dword [0x10021c58]
mov ecx, dword [0x10021c54]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x10009cd8
jmp 0x10009d45
jmp 0x10009cdd
mov eax, dword [0x10021c58]
mov ecx, dword [0x10021c54]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x10009d0e
jmp 0x10009d59
mov eax, dword [0x10021c58]
mov ecx, dword [0x10021c54]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x10009d3f
jmp 0x10009d59
add esp, 0x18
pop esi
pop edi
ret
mov eax, dword [0x10020354]
mov dword [eax - 0x76c193c8], 1
jmp 0x10009c98
jmp 0x10009d0e
Function at 0x10009d60
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x1c
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x18], eax
mov eax, dword [0x10021c50]
mov ecx, dword [0x10021c4c]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x10009da6
jmp 0x10009e64
mov eax, dword [esp + 0x14]
add eax, 0x14
mov dword [esp + 0xc], eax
mov eax, dword [0x10020358]
cmp dword [eax + 0x44a2cbbc], 1
sete al
mov byte [esp + 0x13], al
mov eax, dword [0x10021c50]
mov ecx, dword [0x10021c4c]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x10009df5
jmp 0x10009e64
mov cl, byte [esp + 0x13]
xor eax, eax
test cl, 1
mov dword [esp + 8], eax
jne 0x10009e5e
jmp 0x10009e0d
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0xc]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x14
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 0xa
mov dword [esp + 8], eax
jne 0x10009e0d
mov eax, dword [0x10020358]
mov dword [eax + 0x44a2cbbc], 1
add esp, 0x1c
pop esi
pop edi
ret
jmp 0x10009da6

Function at 0x10009e70
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x1a
mov dword [esp + 0x10], eax
mov ecx, dword [0x1002035c]
xor eax, eax
cmp dword [ecx + 0x15afc110], 1
mov dword [esp + 0x14], eax
je 0x10009ef6
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x1a
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 0xc
mov dword [esp + 0x14], eax
jne 0x10009ea5
mov eax, dword [0x1002035c]
mov dword [eax + 0x15afc110], 1
add esp, 0x18
pop esi
pop edi
ret
Function at 0x10009f00
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x1a
mov dword [esp + 0x10], eax
mov ecx, dword [0x10020360]
xor eax, eax
cmp dword [ecx + 0x13a9489e], 1
mov dword [esp + 0x14], eax
je 0x10009f86
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x1a
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 0xa
mov dword [esp + 0x14], eax
jne 0x10009f35
mov eax, dword [0x10020360]
mov dword [eax + 0x13a9489e], 1
mov eax, dword [0x10021c48]
mov ecx, dword [0x10021c44]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x10009fb7
jmp 0x10009fee
mov eax, dword [0x10021c48]
mov ecx, dword [0x10021c44]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x10009fe8
jmp 0x10009fee
add esp, 0x18
pop esi
pop edi
ret
jmp 0x10009fb7

Function at 0x1000a000
Capabilities:
Encode data using xor

Disassembly:
push edi
push esi
sub esp, 0x18
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
add eax, 0x18
mov dword [esp + 0x10], eax
mov ecx, dword [str.9_a_]
xor eax, eax
cmp dword [ecx + 0x3dde0863], 1
mov dword [esp + 0x14], eax
je 0x1000a086
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dl, byte [edx + eax]
mov byte [esp + 7], dl
mov edi, 0x18
xor edx, edx
div edi
mov eax, dword [esp]
mov edi, edx
mov dl, byte [esp + 7]
xor dl, byte [esi + edi]
mov byte [ecx + eax], dl
add eax, 1
cmp eax, 0x15
mov dword [esp + 0x14], eax
jne 0x1000a035
mov eax, dword [str.9_a_]
mov dword [eax + 0x3dde0863], 1
mov eax, dword [0x10021c40]
mov ecx, dword [0x10021c3c]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1000a0b7
jmp 0x1000a0ee
mov eax, dword [0x10021c40]
mov ecx, dword [0x10021c3c]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1000a0e8
jmp 0x1000a0ee
add esp, 0x18
pop esi
pop edi
ret
jmp 0x1000a0b7