joyce8/EMBER2024-capa huggingface dataset:
Function at 0x100050af
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e3a], 0
jne 0x100050fd
call fcn.10003e3a
xor ecx, ecx
mov dword [ebp - 0x10], 0x41212a3a
mov dword [ebp - 0xc], 0x5d455a42
mov byte [ebp - 8], cl
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf2af], al
cmp ecx, 8
jl 0x100050e0
mov byte [0x100c5e3a], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf2b0
call fcn.1006dcab
leave
ret

Function at 0x1000510e
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5ea3], 0
jne 0x1000515d
xor ecx, ecx
mov dword [ebp - 0x10], 0xa1d0c2c
mov dword [ebp - 0xc], 0x5011b3d
mov word [ebp - 8], 0x140d
mov byte [ebp - 6], cl
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf82f], al
cmp ecx, 0xa
jl 0x10005140
mov byte [0x100c5ea3], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf830
call fcn.1006dcab
leave
ret

Function at 0x1000516e
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e90], 0
jne 0x100051e1
mov edx, dword [0x100c57c0]
push ebx
lea ecx, [edx + 1]
lea eax, [edx + 2]
imul eax, ecx
imul eax, edx
push 0x14
cdq
pop ecx
idiv ecx
xor ebx, ebx
mov dword [ebp - 0x10], 0x41212a3a
mov dword [ebp - 0xc], 0x5f455a42
mov byte [ebp - 8], bl
cmp edx, 3
jne 0x100051c3
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [0x1008b0a0]
mov al, byte [ebx + 0x100bf198]
xor al, byte [ebp + ebx - 0x10]
inc ebx
mov byte [ebx + 0x100bf72b], al
cmp ebx, 8
jl 0x100051c3
mov byte [0x100c5e90], 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf72c
call fcn.1006dcab
leave
ret

Function at 0x100051f2
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e72], 0
jne 0x10005258
push ebx
xor ebx, ebx
mov dword [ebp - 0x10], 0x41212a3a
mov dword [ebp - 0xc], 0x54475245
mov byte [ebp - 8], bl
call fcn.10004086
mov ecx, dword [0x100c5a94]
mov edx, 0xb8b73090
test al, al
cmove ecx, edx
mov dword [0x100c5a94], ecx
mov al, byte [ebx + 0x100bf198]
xor al, byte [ebp + ebx - 0x10]
inc ebx
mov byte [ebx + 0x100bf593], al
cmp ebx, 8
jl 0x1000523a
mov byte [0x100c5e72], 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf594
call fcn.1006dcab
leave
ret
Function at 0x10005269
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e71], 0
jne 0x100052e4
push ebx
xor ebx, ebx
mov dword [ebp - 0x10], 0x41212a3a
mov dword [ebp - 0xc], 0x55475245
mov byte [ebp - 8], bl
mov ecx, ebx
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf587], al
cmp ecx, 8
jl 0x10005298
mov eax, dword [0x100c57c0]
imul eax, eax
mov byte [0x100c5e71], 1
and eax, 0x80000007
jns 0x100052c9
dec eax
or eax, 0xfffffff8
inc eax
cmp eax, 6
jne 0x100052e3
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [0x1008b0ac]
push ebx
push ebx
call dword [0x1008b0b0]
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf588
call fcn.1006dcab
leave
ret

Function at 0x100052f5
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e99], 0
jne 0x10005374
xor ecx, ecx
mov dword [ebp - 0x10], 0x41212a3a
mov dword [ebp - 0xc], 0x5a425645
mov byte [ebp - 8], cl
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf7a3], al
cmp ecx, 8
jl 0x10005321
call fcn.10003e3a
test al, al
jne 0x1000536d
mov eax, dword [0x100c57c0]
push 0x64
cdq
pop ecx
idiv ecx
xor ecx, ecx
push 4
lea eax, [edx + 0x2f4]
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1006cc68
push eax
call fcn.1006e46d
pop ecx
pop ecx
mov byte [0x100c5e99], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf7a4
call fcn.1006dcab
leave
ret

Function at 0x10005385
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x100c57c0]
imul eax, eax
push ebx
push 0x16
pop ecx
cdq
idiv ecx
push 4
pop ebx
cmp edx, 0x13
jne 0x100053df
push esi
push edi
mov esi, str.UapBgIOzH
lea edi, [ebp - 0x10]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x10]
push eax
movsw word es:[edi], word [esi]
call fcn.1006dc20
xor ecx, ecx
mul ebx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1006cc68
push eax
call fcn.1006e46d
add esp, 0xc
pop edi
pop esi
cmp byte [0x100c5e6a], 0
jne 0x1000546c
call fcn.10003e3a
test al, al
jne 0x1000541f
mov eax, dword [0x100c57c0]
cdq
push 0x64
pop ecx
idiv ecx
xor ecx, ecx
lea eax, [edx + 0x2f4]
mul ebx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1006cc68
push eax
call fcn.1006e46d
pop ecx
pop ecx
xor ecx, ecx
mov dword [ebp - 0x10], 0x41212a3a
mov dword [ebp - 0xc], 0x59435445
mov byte [ebp - 8], cl
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf52b], al
cmp ecx, 8
jl 0x10005432
call fcn.10003df4
test al, al
jne 0x10005465
call dword [0x1008b084]
push 0x50
xor edx, edx
pop ecx
div ecx
inc edx
mov dword [0x100c57c0], edx
mov byte [0x100c5e6a], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf52c
pop ebx
call fcn.1006dcab
leave
ret
Function at 0x1000547e
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
call fcn.10003ec2
test al, al
jne 0x100054b8
xor ecx, ecx
push esi
mov esi, dword [0x100c57c0]
inc ecx
cmp esi, ecx
jle 0x100054b1
mov eax, esi
cdq
idiv ecx
inc ecx
add ecx, edx
cmp ecx, esi
jl 0x100054a5
mov dword [0x100c57c0], ecx
pop esi
cmp byte [0x100c5e8f], 0
jne 0x100054f1
xor ecx, ecx
mov dword [ebp - 0x10], 0x41212a3a
mov dword [ebp - 0xc], 0x58435545
mov byte [ebp - 8], cl
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf71f], al
cmp ecx, 8
jl 0x100054d4
mov byte [0x100c5e8f], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf720
call fcn.1006dcab
leave
ret

Function at 0x10005502
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb8
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e6f], 0
jne 0x100055cb
push ebx
xor ebx, ebx
mov dword [ebp - 0x10], 0x41212a3a
mov dword [ebp - 0xc], 0x59455545
mov byte [ebp - 8], bl
mov ecx, ebx
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf56f], al
cmp ecx, 8
jl 0x10005538
mov ecx, dword [0x100c57c0]
mov eax, ecx
imul eax, ecx
imul eax, ecx
push 0xd
cdq
pop ecx
idiv ecx
mov byte [0x100c5e6f], 1
cmp edx, 0xb
jne 0x100055ca
push esi
mov esi, ebx
call fcn.1006e318
movd xmm0, eax
cvtdq2pd xmm0, xmm0
inc esi
movsd qword [ebp + esi*8 - 0xc0], xmm0
cmp esi, 0x15
jb 0x10005571
pop esi
push 0x14
pop eax
cmp ebx, eax
jge 0x100055c4
movsd xmm0, qword [ebp + eax*8 - 0xb8]
movsd xmm1, qword [ebp + eax*8 - 0xc0]
comisd xmm0, xmm1
jbe 0x100055bf
movsd qword [ebp + eax*8 - 0xb8], xmm1
movsd qword [ebp + eax*8 - 0xc0], xmm0
dec eax
cmp eax, ebx
jg 0x10005595
inc ebx
cmp ebx, 0x15
jl 0x1000558e
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf570
call fcn.1006dcab
leave
ret

Function at 0x100055dc
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e7b], 0
jne 0x1000562b
xor ecx, ecx
mov dword [ebp - 0x10], 0x180b162c
mov dword [ebp - 0xc], 0x5011b3d
mov word [ebp - 8], 0x140d
mov byte [ebp - 6], cl
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf603], al
cmp ecx, 0xa
jl 0x1000560e
mov byte [0x100c5e7b], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf604
call fcn.1006dcab
leave
ret
Function at 0x1000563c
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x110
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [0x100c57c0]
push 0x15
lea ecx, [esi + 2]
lea eax, [esi + 1]
imul eax, ecx
imul eax, esi
cdq
pop ecx
idiv ecx
cmp edx, 0x10
jne 0x1000568f
push 8
mov eax, 0xff
pop esi
test esi, esi
je 0x10005687
cdq
idiv esi
mov ecx, esi
mov eax, ecx
mov esi, edx
test ecx, ecx
jne 0x10005676
add esi, eax
mov dword [0x100c57c0], esi
lea eax, [esi + 1]
imul eax, esi
push 0x18
cdq
pop ecx
idiv ecx
xor ebx, ebx
cmp edx, 4
jne 0x100056b1
push edi
mov edi, ebx
mov ebx, esi
inc edi
dec ebx
cmp edi, 0x3f
jb 0x100056a7
xor ebx, ebx
pop edi
imul esi, esi
mov eax, esi
push 0x14
cdq
pop ecx
idiv ecx
cmp edx, 0xd
jne 0x100056d6
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [0x1008b0ac]
push ebx
push ebx
call dword [0x1008b0b0]
cmp byte [0x100c5e43], 0
jne 0x10005714
mov dword [ebp - 0x14], 0x160b062d
mov dword [ebp - 0x10], 0x2d100b03
mov dword [ebp - 0xc], 0x1d02030a
mov byte [ebp - 8], bl
mov al, byte [ebx + 0x100bf198]
xor al, byte [ebp + ebx - 0x14]
inc ebx
mov byte [ebx + 0x100bf32b], al
cmp ebx, 0xc
jl 0x100056f7
mov byte [0x100c5e43], 1
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
mov eax, 0x100bf32c
pop ebx
call fcn.1006dcab
leave
ret

Function at 0x10005727
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5ea9], 0
jne 0x10005773
mov dword [ebp - 0x10], 0x3f11062d
mov dword [ebp - 0xc], 0xf1a1008
mov word [ebp - 8], 0x1d
xor ecx, ecx
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf87f], al
cmp ecx, 9
jl 0x10005756
mov byte [0x100c5ea9], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf880
call fcn.1006dcab
leave
ret

Function at 0x10005784
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e38], 0
jne 0x100057d1
mov dword [ebp - 0x10], 0x3150222
mov dword [ebp - 0xc], 0x1e0a2e08
mov dword [ebp - 8], 0x1e0407
xor ecx, ecx
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf293], al
cmp ecx, 0xb
jl 0x100057b4
mov byte [0x100c5e38], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf294
call fcn.1006dcab
leave
ret

Function at 0x100057e2
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e76], 0
jne 0x1000582a
xor ecx, ecx
mov dword [ebp - 0xc], 0x17100126
mov word [ebp - 8], 0x1b15
mov byte [ebp - 6], cl
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0xc]
inc ecx
mov byte [ecx + 0x100bf5c7], al
cmp ecx, 6
jl 0x1000580d
mov byte [0x100c5e76], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf5c8
call fcn.1006dcab
leave
ret
Function at 0x1000583b
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e7d], 0
jne 0x1000588a
xor ecx, ecx
mov dword [ebp - 0x10], 0x1a171a26
mov dword [ebp - 0xc], 0x7160729
mov word [ebp - 8], 0x150b
mov byte [ebp - 6], cl
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf61b], al
cmp ecx, 0xa
jl 0x1000586d
mov byte [0x100c5e7d], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf61c
call fcn.1006dcab
leave
ret

Function at 0x1000589b
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
mov edx, dword [0x100c57c0]
push ebx
lea eax, [edx + 1]
imul eax, edx
and eax, 0x80000003
jns 0x100058c4
dec eax
or eax, 0xfffffffc
inc eax
xor ebx, ebx
cmp eax, 3
jne 0x100058dc
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [0x1008b09c]
mov edx, dword [0x100c57c0]
lea ecx, [edx + 2]
lea eax, [edx + 1]
imul ecx, eax
imul ecx, edx
and ecx, 0x80000003
jns 0x100058f5
dec ecx
or ecx, 0xfffffffc
inc ecx
cmp ecx, 3
jne 0x1000590e
call dword [0x1008b084]
push 0x50
xor edx, edx
pop ecx
div ecx
inc edx
mov dword [0x100c57c0], edx
cmp byte [0x100c5e32], bl
jne 0x10005948
mov dword [ebp - 0x10], 0x1a171a26
mov dword [ebp - 0xc], 0xd163112
mov dword [ebp - 8], 0x5041c
mov al, byte [ebx + 0x100bf198]
xor al, byte [ebp + ebx - 0x10]
inc ebx
mov byte [ebx + 0x100bf23f], al
cmp ebx, 0xb
jl 0x1000592b
mov byte [0x100c5e32], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf240
pop ebx
call fcn.1006dcab
leave
ret

Function at 0x1000595a
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xbc
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
mov edx, dword [0x100c57c0]
push ebx
lea eax, [edx + 2]
lea ecx, [edx + 1]
imul eax, ecx
imul eax, edx
push 0x16
cdq
pop ebx
idiv ebx
cmp edx, 7
jne 0x10005998
lea eax, [ebp - 0xbc]
push eax
call dword [0x1008b094]
cmp byte [0x100c5e59], 0
jne 0x100059db
mov byte [ebp - 0x10], 0x2b
mov byte [ebp - 0xf], bl
mov dword [ebp - 0xe], 0x2e5c1c11
mov dword [ebp - 0xa], 0x4071e0a
mov word [ebp - 6], 0x1e
xor ecx, ecx
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf44b], al
cmp ecx, 0xb
jl 0x100059be
mov byte [0x100c5e59], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf44c
pop ebx
call fcn.1006dcab
leave
ret
Function at 0x100059ed
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [0x100c57c0]
push 0xa
lea ecx, [esi + 2]
lea eax, [esi + 1]
imul eax, ecx
imul eax, esi
cdq
pop ecx
idiv ecx
cmp edx, 9
jne 0x10005a56
push edi
mov esi, str.GvOrbenvlQ
lea edi, [ebp - 0x10]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x10]
push eax
movsb byte es:[edi], byte [esi]
call fcn.1006dc20
xor ecx, ecx
push 4
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1006cc68
push eax
call fcn.1006e46d
mov esi, dword [0x100c57c0]
add esp, 0xc
pop edi
cmp byte [0x100c5e44], 0
jne 0x10005aa8
imul esi, esi
mov eax, esi
push 0x18
cdq
pop esi
idiv esi
xor ecx, ecx
mov dword [ebp - 0x10], 0x1a171a26
mov dword [ebp - 0xc], 0x21a3112
mov word [ebp - 8], 9
cmp edx, 6
jne 0x10005a8b
inc dword [0x100c5afc]
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf33b], al
cmp ecx, 9
jl 0x10005a8b
mov byte [0x100c5e44], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf33c
pop esi
call fcn.1006dcab
leave
ret

Function at 0x10005aba
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5ea7], 0
jne 0x10005b48
mov dword [ebp - 0x10], 0x1a171a26
mov dword [ebp - 0xc], 0xd073112
mov word [ebp - 8], 0x1c
xor ecx, ecx
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf867], al
cmp ecx, 9
jl 0x10005ae9
mov ecx, dword [0x100c57c0]
lea edx, [ecx + 1]
mov eax, edx
imul eax, ecx
and eax, 0x8000000f
jns 0x10005b19
dec eax
or eax, 0xfffffff0
inc eax
cmp eax, 0xd
jne 0x10005b41
sub ecx, 0
je 0x10005b37
dec ecx
je 0x10005b2e
mov dword [0x100c57c0], edx
jmp 0x10005b41
and dword [0x100c57c0], 0
jmp 0x10005b41
mov dword [0x100c57c0], 2
mov byte [0x100c5ea7], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf868
call fcn.1006dcab
leave
ret
Function at 0x10005b59
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e92], 0
jne 0x10005c5c
push esi
mov esi, dword [0x100c57c0]
mov eax, esi
imul eax, esi
imul eax, esi
push 0xe
cdq
pop ecx
idiv ecx
cmp edx, 3
jne 0x10005bc0
push 0x64
pop ecx
mov eax, esi
cdq
idiv ecx
xor ecx, ecx
push 4
lea eax, [edx + 0x141]
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1006cc68
push eax
call fcn.1006e46d
mov esi, dword [0x100c57c0]
pop ecx
pop ecx
mov dword [ebp - 0x10], 0x1a171a26
mov dword [ebp - 0xc], 0x275e1112
mov word [ebp - 8], 0x307
mov byte [ebp - 6], 0
xor ecx, ecx
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf747], al
cmp ecx, 0xa
jl 0x10005bda
lea eax, [esi + 1]
imul eax, esi
push 0x18
cdq
pop ecx
idiv ecx
mov byte [0x100c5e92], 1
cmp edx, 3
jne 0x10005c5b
mov eax, esi
push ebx
push edi
cdq
sub eax, edx
push 0x60
mov edi, eax
xor ecx, ecx
pop ebx
sar edi, 1
test edi, edi
jle 0x10005c54
mov eax, esi
cdq
and edx, 3
add eax, edx
sar eax, 2
mov dword [ebp - 0x18], eax
xor edx, edx
mov esi, edi
mov dword [ebp - 0x14], edi
test eax, eax
jle 0x10005c46
mov esi, dword [ebp - 0x18]
mov eax, edx
add ebx, eax
dec eax
dec esi
jne 0x10005c3a
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0x14]
add edx, ecx
dec esi
mov dword [ebp - 0x14], esi
jne 0x10005c31
mov esi, dword [0x100c57c0]
inc ecx
cmp ecx, ebx
jl 0x10005c18
pop edi
pop ebx
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf748
call fcn.1006dcab
leave
ret

Function at 0x10005c6d
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e79], 0
jne 0x10005cc0
mov dword [ebp - 0x14], 0x1a171a26
mov dword [ebp - 0x10], 0x3a5e1112
mov dword [ebp - 0xc], 0x161a0207
mov word [ebp - 8], 0x1f
xor ecx, ecx
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100bf5e7], al
cmp ecx, 0xd
jl 0x10005ca3
mov byte [0x100c5e79], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf5e8
call fcn.1006dcab
leave
ret

Function at 0x10005cd1
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e6d], 0
jne 0x10005d27
xor ecx, ecx
mov dword [ebp - 0x14], 0x1a171a26
mov dword [ebp - 0x10], 0x3a5e1112
mov dword [ebp - 0xc], 0x1a1a0207
mov word [ebp - 8], 0x1403
mov byte [ebp - 6], cl
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100bf553], al
cmp ecx, 0xe
jl 0x10005d0a
mov byte [0x100c5e6d], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf554
call fcn.1006dcab
leave
ret
Function at 0x10005d38
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x298
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
call fcn.10003d88
xor ecx, ecx
test al, al
jne 0x10005d7e
push esi
mov esi, dword [0x100c57c0]
mov edx, ecx
mov eax, dword [ebp + edx*4 - 0x298]
imul eax, eax, 0xd7
add esi, eax
inc edx
cmp edx, 0x288
jb 0x10005d5f
mov dword [0x100c57c0], esi
pop esi
cmp byte [0x100c5e2d], cl
jne 0x10005db7
mov dword [ebp - 0x10], 0x1a171a26
mov dword [ebp - 0xc], 0x1e321112
mov word [ebp - 8], 0x1a
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf207], al
cmp ecx, 9
jl 0x10005d9a
mov byte [0x100c5e2d], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf208
call fcn.1006dcab
leave
ret

Function at 0x10005dc8
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e6e], 0
jne 0x10005e14
mov dword [ebp - 0x10], 0x1a171a26
mov dword [ebp - 0xc], 0x3311112
mov word [ebp - 8], 0x1a
xor ecx, ecx
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf563], al
cmp ecx, 9
jl 0x10005df7
mov byte [0x100c5e6e], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf564
call fcn.1006dcab
leave
ret

Function at 0x10005e25
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x220
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [0x100c57c0]
push 0x17
lea eax, [esi + 1]
imul eax, esi
cdq
pop ecx
idiv ecx
cmp edx, 0x10
jne 0x10005ea3
jmp 0x10005e9f
mov ecx, esi
and ecx, 0x80000001
jns 0x10005e62
dec ecx
or ecx, 0xfffffffe
inc ecx
jne 0x10005e6f
mov eax, esi
cdq
sub eax, edx
mov esi, eax
sar esi, 1
jmp 0x10005e76
lea esi, [esi*2 + 1]
mov eax, esi
push 3
cdq
pop ecx
idiv ecx
mov dword [0x100c57c0], esi
sub edx, 0
je 0x10005e92
dec edx
dec edx
je 0x10005e95
dec edx
je 0x10005e96
jmp 0x10005e9f
add esi, 2
inc esi
add esi, 2
mov dword [0x100c57c0], esi
test esi, esi
jne 0x10005e53
lea eax, [esi + 1]
lea ebx, [esi + 2]
imul ebx, eax
imul ebx, esi
mov eax, ebx
push 0x16
cdq
pop ecx
idiv ecx
mov dword [ebp - 0x220], ebx
cmp edx, 7
jne 0x10005ed8
push edi
xor edi, edi
mov ebx, esi
inc edi
dec ebx
cmp edi, 0x83
jb 0x10005ec7
mov ebx, dword [ebp - 0x220]
pop edi
cmp byte [0x100c5e3c], 0
jne 0x10005f2f
mov dword [ebp - 0x10], 0x1a171a26
mov dword [ebp - 0xc], 0x4301112
mov dword [ebp - 8], 0x19140b
xor edx, edx
mov cl, byte [edx + 0x100bf198]
xor cl, byte [ebp + edx - 0x10]
inc edx
mov byte [edx + 0x100bf2c7], cl
cmp edx, 0xb
jl 0x10005ef8
mov eax, ebx
push 0xc
cdq
pop ecx
idiv ecx
mov byte [0x100c5e3c], 1
cmp edx, 7
jne 0x10005f2f
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [0x1008b09c]
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
mov eax, 0x100bf2c8
pop ebx
call fcn.1006dcab
leave
ret