joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10007954
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c9fee], 0
jne 0x100079a7
mov dword [ebp - 0x14], 0x1b140927
mov dword [ebp - 0x10], 0x1d3c1b02
mov dword [ebp - 0xc], 0x14180201
mov word [ebp - 8], 0x11
xor ecx, ecx
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100c32e3], al
cmp ecx, 0xd
jl 0x1000798a
mov byte [0x100c9fee], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c32e4
call fcn.1007048b
leave
ret

Function at 0x100079b8
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
call fcn.10003fe0
test al, al
jne 0x100079e1
push 4
call fcn.1006f5cc
pop ecx
mov ecx, dword [0x100c97a0]
mov dword [eax], ecx
cmp byte [0x100ca008], 0
jne 0x10007a49
mov edx, dword [0x100c97a0]
push ebx
lea ecx, [edx + 1]
lea eax, [edx + 2]
imul eax, ecx
imul eax, edx
xor ebx, ebx
mov dword [ebp - 0x10], 0x1b140927
mov dword [ebp - 0xc], 0xc3b1b02
mov word [ebp - 8], 6
and eax, 0x8000000f
jns 0x10007a1f
dec eax
or eax, 0xfffffff0
inc eax
cmp eax, 0xd
cmove edx, ecx
mov dword [0x100c97a0], edx
mov al, byte [ebx + 0x100c3198]
xor al, byte [ebp + ebx - 0x10]
inc ebx
mov byte [ebx + 0x100c343f], al
cmp ebx, 9
jl 0x10007a2b
mov byte [0x100ca008], 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c3440
call fcn.1007048b
leave
ret

Function at 0x10007a5a
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
call fcn.100040f6
test al, al
jne 0x10007aa0
mov eax, dword [0x100c97a0]
push 0x64
cdq
pop ecx
idiv ecx
xor ecx, ecx
push 4
lea eax, [edx + 0x141]
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1006f447
push eax
call fcn.10070c4d
pop ecx
pop ecx
cmp byte [0x100ca052], 0
jne 0x10007adf
xor ecx, ecx
mov dword [ebp - 0x10], 0x1b140927
mov dword [ebp - 0xc], 0x183b1b02
mov word [ebp - 8], 0x606
mov byte [ebp - 6], cl
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100c3823], al
cmp ecx, 0xa
jl 0x10007ac2
mov byte [0x100ca052], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c3824
call fcn.1007048b
leave
ret
Function at 0x10007af0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [0x100c97a0]
push 0xe
lea ecx, [esi + 1]
lea eax, [esi + 2]
imul eax, ecx
imul eax, esi
cdq
pop ecx
idiv ecx
xor ebx, ebx
inc ebx
cmp edx, 0xc
jne 0x10007b2d
test esi, esi
cmove esi, ebx
mov dword [0x100c97a0], esi
cmp byte [0x100ca000], 0
jne 0x10007b6b
mov dword [ebp - 0x10], 0x1b140927
mov dword [ebp - 0xc], 0x4391b02
mov byte [ebp - 8], bl
mov word [ebp - 7], 0x14
xor ecx, ecx
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100c33d3], al
cmp ecx, 0xa
jl 0x10007b4f
mov byte [0x100ca000], bl
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
mov eax, 0x100c33d4
pop ebx
call fcn.1007048b
leave
ret

Function at 0x10007b7e
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100ca015], 0
jne 0x10007bcb
mov dword [ebp - 0x10], 0x1b140927
mov dword [ebp - 0xc], 0xc381b02
mov dword [ebp - 8], 0x1b0010
xor ecx, ecx
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100c34e7], al
cmp ecx, 0xb
jl 0x10007bae
mov byte [0x100ca015], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c34e8
call fcn.1007048b
leave
ret

Function at 0x10007bdc
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100ca03d], 0
jne 0x10007c68
xor ecx, ecx
mov dword [ebp - 0x14], 0x1b140927
mov dword [ebp - 0x10], 0x2381b02
mov dword [ebp - 0xc], 0x316050b
mov byte [ebp - 8], cl
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100c3703], al
cmp ecx, 0xc
jl 0x10007c0f
mov eax, dword [0x100c97a0]
lea ecx, [eax + 1]
imul ecx, eax
and ecx, 0x8000000f
jns 0x10007c3d
dec ecx
or ecx, 0xfffffff0
inc ecx
cmp ecx, 0xf
jne 0x10007c61
push esi
push 4
call fcn.1006f5cc
mov esi, eax
call fcn.10070af8
mov dword [esi], eax
push esi
mov dword [0x100c97a0], eax
call fcn.1006f61b
pop ecx
pop ecx
pop esi
mov byte [0x100ca03d], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c3704
call fcn.1007048b
leave
ret

Function at 0x10007c79
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100ca004], 0
jne 0x10007cc8
xor ecx, ecx
mov dword [ebp - 0x10], 0x1b140927
mov dword [ebp - 0xc], 0x2b301b02
mov word [ebp - 8], 0xd05
mov byte [ebp - 6], cl
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100c340f], al
cmp ecx, 0xa
jl 0x10007cab
mov byte [0x100ca004], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c3410
call fcn.1007048b
leave
ret
Function at 0x10007cd9
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc0
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
call fcn.100040ba
xor ebx, ebx
test al, al
jne 0x10007d29
push 0x28
call fcn.1006f447
pop ecx
mov edi, eax
mov esi, ebx
call fcn.10070af8
add eax, dword [0x100c97a0]
mov dword [edi + esi*4], eax
inc esi
cmp esi, 0xa
jl 0x10007d06
mov eax, dword [edi + 0x24]
push edi
mov dword [0x100c97a0], eax
call fcn.10070c4d
pop ecx
mov esi, dword [0x100c97a0]
push 0x18
lea ecx, [esi + 1]
lea eax, [esi + 2]
imul eax, ecx
imul eax, esi
cdq
pop edi
idiv edi
cmp edx, 0x10
jne 0x10007d5e
sub esi, ebx
je 0x10007d55
dec esi
je 0x10007d51
mov esi, ecx
jmp 0x10007d58
mov esi, ebx
jmp 0x10007d58
push 2
pop esi
mov dword [0x100c97a0], esi
cmp byte [0x100ca003], bl
jne 0x10007dbf
mov dword [ebp - 0x14], 0x1b140927
mov dword [ebp - 0x10], 0x2b301b02
mov dword [ebp - 0xc], 0x1f160a16
mov word [ebp - 8], 7
mov al, byte [ebx + 0x100c3198]
xor al, byte [ebp + ebx - 0x14]
inc ebx
mov byte [ebx + 0x100c33ff], al
cmp ebx, 0xd
jl 0x10007d81
lea eax, [esi + 2]
lea ecx, [esi + 1]
imul eax, ecx
imul eax, esi
cdq
idiv edi
mov byte [0x100ca003], 1
cmp edx, 0xe
jne 0x10007dbf
lea eax, [ebp - 0xc0]
push eax
call dword [0x1008f0ac]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
mov eax, 0x100c3400
pop ebx
call fcn.1007048b
leave
ret

Function at 0x10007dd3
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
call fcn.1000418c
xor ebx, ebx
test al, al
jne 0x10007dfa
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [0x1008f094]
cmp byte [0x100ca019], bl
jne 0x10007e5a
mov dword [ebp - 0x14], 0x1b140927
mov dword [ebp - 0x10], 0x20301b02
mov dword [ebp - 0xc], 0x14180d0b
mov word [ebp - 8], 0x1a
mov ecx, ebx
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100c351b], al
cmp ecx, 0xd
jl 0x10007e1f
mov byte [0x100ca019], 1
call fcn.100040d8
test al, al
jne 0x10007e5a
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [0x1008f098]
push ebx
push ebx
call dword [0x1008f09c]
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c351c
pop ebx
call fcn.1007048b
leave
ret

Function at 0x10007e6c
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100ca05f], 0
jne 0x10007eb2
mov dword [ebp - 0xc], 0x1b140927
mov dword [ebp - 8], 0x180716
xor ecx, ecx
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0xc]
inc ecx
mov byte [ecx + 0x100c38cb], al
cmp ecx, 7
jl 0x10007e95
mov byte [0x100ca05f], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c38cc
call fcn.1007048b
leave
ret
Function at 0x10007ec3
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100ca036], 0
jne 0x10007f8e
push ebx
push esi
mov esi, dword [0x100c97a0]
mov eax, esi
imul eax, esi
imul eax, esi
push 0x12
pop ecx
cdq
idiv ecx
xor ebx, ebx
mov word [ebp - 0x14], 0x1529
mov byte [ebp - 0x12], cl
mov dword [ebp - 0x11], 0x2b1a0406
mov dword [ebp - 0xd], 0xf0508
mov word [ebp - 9], 0x515c
mov byte [ebp - 7], bl
cmp edx, 5
jne 0x10007f38
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [0x1008f098]
push ebx
push ebx
call dword [0x1008f09c]
mov esi, dword [0x100c97a0]
mov ecx, ebx
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100c369b], al
cmp ecx, 0xd
jl 0x10007f3a
call fcn.10003f7a
test al, al
jne 0x10007f85
push edi
mov edi, 0xe5
lea ecx, [edi - 0x38]
jmp 0x10007f75
mov eax, esi
or eax, 0xffffffcc
add esi, eax
mov eax, esi
imul eax, esi
inc ebx
cmp ebx, eax
jg 0x10007f7e
mov eax, esi
cdq
idiv edi
cmp edx, ecx
jne 0x10007f64
mov dword [0x100c97a0], ebx
pop edi
pop esi
mov byte [0x100ca036], 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c369c
call fcn.1007048b
leave
ret

Function at 0x10007f9f
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
call fcn.1001871e
test al, al
jne 0x10007fbe
dec dword [0x100c97a0]
cmp byte [0x100ca023], 0
jne 0x10007ff6
xor ecx, ecx
mov dword [ebp - 0xc], 0x1f140927
mov word [ebp - 8], 0x1008
mov byte [ebp - 6], cl
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0xc]
inc ecx
mov byte [ecx + 0x100c359f], al
cmp ecx, 6
jl 0x10007fd9
mov byte [0x100ca023], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c35a0
call fcn.1007048b
leave
ret

Function at 0x10008007
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100ca047], 0
jne 0x10008050
xor ecx, ecx
mov dword [ebp - 0x10], 0xb2a5d26
mov dword [ebp - 0xc], 0x1e0c0113
mov byte [ebp - 8], cl
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100c378b], al
cmp ecx, 8
jl 0x10008033
mov byte [0x100ca047], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c378c
call fcn.1007048b
leave
ret
Function at 0x10008061
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x18b90
call fcn.10070d20
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [0x100c97a0]
mov eax, esi
imul eax, esi
imul eax, esi
push edi
push 0x12
pop ecx
cdq
idiv ecx
push 0xc
pop edi
cmp edx, edi
jne 0x100080ae
xor edx, edx
xor eax, eax
push 0x5a
inc edx
inc eax
pop ecx
dec ecx
lea esi, [eax + edx]
lea edx, [eax]
mov eax, esi
jns 0x1000809e
mov dword [0x100c97a0], esi
cmp byte [0x100ca060], 0
jne 0x100081ab
lea ecx, [esi + 1]
lea eax, [esi + 2]
imul eax, ecx
imul eax, esi
push 0x14
cdq
pop ecx
idiv ecx
cmp edx, 9
jne 0x10008102
push 0x64
pop ecx
mov eax, esi
cdq
idiv ecx
xor ecx, ecx
push 4
lea eax, [edx + 0x2f4]
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1006f447
push eax
call fcn.10070c4d
mov esi, dword [0x100c97a0]
pop ecx
pop ecx
imul esi, esi
mov eax, esi
cdq
idiv edi
push ebx
xor ebx, ebx
mov dword [ebp - 0xc], 0x1f3c26
mov dword [ebp - 8], 0x1c0b08
cmp edx, 5
jne 0x1000818d
xor eax, eax
push 0x18b80
mov word [ebp - 0x18b90], ax
lea eax, [ebp - 0x18b8e]
push ebx
push eax
call fcn.10070e80
add esp, 0xc
mov edi, ebx
mov esi, ebx
mov edx, ebx
test edi, edi
je 0x1000816c
test edx, edx
je 0x1000816c
lea eax, [esi + edx]
lea ecx, [esi + edx]
mov ax, word [ebp + eax*2 - 0x18d52]
inc ax
add ax, word [ebp + ecx*2 - 0x18b92]
mov word [ebp + ecx*2 - 0x18b90], ax
inc edx
cmp edx, 0xe1
jl 0x10008144
add esi, 0xe1
inc edi
cmp esi, 0xc5c1
jl 0x10008142
movsx eax, word [ebp - 0x10]
mov dword [0x100c97a0], eax
mov al, byte [ebx + 0x100c3198]
xor al, byte [ebp + ebx - 0xc]
inc ebx
mov byte [ebx + 0x100c38d3], al
cmp ebx, 7
jl 0x1000818d
mov byte [0x100ca060], 1
pop ebx
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
mov eax, 0x100c38d4
pop esi
call fcn.1007048b
leave
ret

Function at 0x100081be
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100ca017], 0
jne 0x1000823c
push ebx
xor ebx, ebx
mov dword [ebp - 0x10], 0xb2a4224
mov dword [ebp - 0xc], 0x1e0c1a08
mov byte [ebp - 8], bl
call fcn.10004098
test al, al
jne 0x1000821e
mov eax, dword [0x100c97a0]
push 0x64
cdq
pop ecx
idiv ecx
xor ecx, ecx
push 4
lea eax, [edx + 0x63]
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1006f447
push eax
call fcn.10070c4d
pop ecx
pop ecx
mov al, byte [ebx + 0x100c3198]
xor al, byte [ebp + ebx - 0x10]
inc ebx
mov byte [ebx + 0x100c3503], al
cmp ebx, 8
jl 0x1000821e
mov byte [0x100ca017], 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c3504
call fcn.1007048b
leave
ret
Function at 0x1000824d
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
call fcn.10003f5c
xor ebx, ebx
test al, al
jne 0x1000829b
push edi
push 0x28
call fcn.1006f447
pop ecx
mov edi, eax
mov esi, ebx
call fcn.10070af8
add eax, dword [0x100c97a0]
mov dword [edi + esi*4], eax
inc esi
cmp esi, 0xa
jl 0x10008277
mov eax, dword [edi + 0x24]
push edi
mov dword [0x100c97a0], eax
call fcn.10070c4d
pop ecx
pop edi
cmp byte [0x100ca038], bl
jne 0x100082ff
mov dword [ebp - 0x10], 0x1702191d
mov dword [ebp - 0xc], 0x1b0e1b0e
mov word [ebp - 8], 0x1101
mov byte [ebp - 6], bl
mov al, byte [ebx + 0x100c3198]
xor al, byte [ebp + ebx - 0x10]
inc ebx
mov byte [ebx + 0x100c36bb], al
cmp ebx, 0xa
jl 0x100082ba
call fcn.1000427b
test al, al
jne 0x100082f8
mov esi, dword [0x100c97a0]
xor ecx, ecx
inc ecx
cmp esi, ecx
jle 0x100082f2
mov eax, esi
cdq
idiv ecx
inc ecx
add ecx, edx
cmp ecx, esi
jl 0x100082e6
mov dword [0x100c97a0], ecx
mov byte [0x100ca038], 1
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
mov eax, 0x100c36bc
pop ebx
call fcn.1007048b
leave
ret

Function at 0x10008312
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [0x100c97a0]
mov eax, esi
imul eax, esi
push edi
push 5
cdq
pop ecx
idiv ecx
cmp edx, 2
jne 0x10008340
inc dword [0x100c9b10]
call fcn.100040d8
push 4
pop edi
test al, al
jne 0x1000836e
push edi
call fcn.1006f5cc
mov esi, eax
call fcn.10070af8
mov dword [esi], eax
push esi
mov dword [0x100c97a0], eax
call fcn.1006f61b
mov esi, dword [0x100c97a0]
pop ecx
pop ecx
lea ecx, [esi + 2]
lea eax, [esi + 1]
imul eax, ecx
imul eax, esi
push 6
cdq
pop ecx
idiv ecx
cmp edx, 3
jne 0x1000839c
push 0x73
push 0x72
push str._d__d_n
call fcn.10070c67
mov esi, dword [0x100c97a0]
add esp, 0xc
cmp byte [0x100ca028], 0
jne 0x1000840b
push ebx
push 0x18
pop ebx
mov byte [ebp - 0x10], bl
mov dword [ebp - 0xf], 0x19001f1c
xor ecx, ecx
mov dword [ebp - 0xb], 0x1a0006
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100c35db], al
cmp ecx, 8
jl 0x100083bc
mov eax, esi
imul eax, esi
cdq
idiv ebx
mov byte [0x100ca028], 1
pop ebx
cmp edx, 8
jne 0x1000840b
mov eax, esi
cdq
push 0x64
pop ecx
idiv ecx
xor ecx, ecx
lea eax, [edx + 0x7b]
mul edi
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1006f447
push eax
call fcn.10070c4d
pop ecx
pop ecx
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
mov eax, 0x100c35dc
pop esi
call fcn.1007048b
leave
ret
Function at 0x1000841e
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100ca031], 0
jne 0x10008478
mov dword [ebp - 0x18], 0x170a1518
mov dword [ebp - 0x14], 0x2061c02
mov dword [ebp - 0x10], 0x1e074e0a
mov dword [ebp - 0xc], 0x2190d0c
mov word [ebp - 8], 0x1a
xor ecx, ecx
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x18]
inc ecx
mov byte [ecx + 0x100c364f], al
cmp ecx, 0x11
jl 0x1000845b
mov byte [0x100ca031], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c3650
call fcn.1007048b
leave
ret

Function at 0x10008489
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100ca041], 0
jne 0x1000851b
push ebx
xor ebx, ebx
mov dword [ebp - 0x14], 0x170a1518
mov dword [ebp - 0x10], 0x2061c02
mov dword [ebp - 0xc], 0x1e074e0a
mov word [ebp - 8], 0xd0c
mov byte [ebp - 6], bl
mov ecx, ebx
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100c3737], al
cmp ecx, 0xe
jl 0x100084c5
call fcn.100041eb
test al, al
jne 0x10008513
mov ecx, dword [0x100c97a0]
push esi
push 8
mov edx, ebx
pop esi
mov eax, edx
and eax, 1
dec eax
not eax
and eax, ecx
sar edx, 1
xor edx, eax
dec esi
jne 0x100084f0
add ecx, edx
inc ebx
cmp ebx, 0x100
jl 0x100084eb
mov dword [0x100c97a0], ecx
pop esi
mov byte [0x100ca041], 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c3738
call fcn.1007048b
leave
ret

Function at 0x1000852c
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x144
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
mov ecx, dword [0x100c97a0]
push ebx
lea eax, [ecx + 1]
imul eax, ecx
push esi
push 0x11
cdq
pop ecx
idiv ecx
xor ebx, ebx
cmp edx, 0xa
jne 0x100085b9
mov esi, ebx
call fcn.10070af8
movd xmm0, eax
cvtdq2pd xmm0, xmm0
inc esi
movsd qword [ebp + esi*8 - 0x14c], xmm0
cmp esi, 0x26
jb 0x1000855c
mov eax, ebx
push 0x25
pop ecx
cmp eax, ecx
jge 0x100085b0
movsd xmm0, qword [ebp + ecx*8 - 0x144]
movsd xmm1, qword [ebp + ecx*8 - 0x14c]
comisd xmm0, xmm1
jbe 0x100085ab
movsd qword [ebp + ecx*8 - 0x144], xmm1
movsd qword [ebp + ecx*8 - 0x14c], xmm0
dec ecx
cmp ecx, eax
jg 0x10008581
inc eax
cmp eax, 0x26
jl 0x1000857a
push 0x11
pop ecx
cmp byte [0x100ca05b], bl
jne 0x10008637
mov byte [ebp - 0x14], 0x1b
mov byte [ebp - 0x13], cl
mov dword [ebp - 0x12], 0x7160115
mov dword [ebp - 0xe], 0x1549091d
mov dword [ebp - 0xa], 0x14141a
mov al, byte [ebx + 0x100c3198]
xor al, byte [ebp + ebx - 0x14]
inc ebx
mov byte [ebx + 0x100c3897], al
cmp ebx, 0xd
jl 0x100085dd
call fcn.10004026
mov esi, str._d__d_n
test al, al
jne 0x10008614
push 0xf8
push 0xf7
push esi
call fcn.10070c67
add esp, 0xc
mov byte [0x100ca05b], 1
call fcn.10003fbe
test al, al
jne 0x10008637
push 0xa7
push 0xa6
push esi
call fcn.10070c67
add esp, 0xc
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
mov eax, 0x100c3898
pop ebx
call fcn.1007048b
leave
ret
Function at 0x1000864a
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
call fcn.100042d6
mov ecx, dword [0x100c97a0]
test al, al
jne 0x10008670
inc ecx
mov dword [0x100c97a0], ecx
cmp byte [0x100c9ff5], 0
jne 0x100086db
push ebx
xor ebx, ebx
mov dword [ebp - 0x10], 0x19141106
mov dword [ebp - 0xc], 0x1906033e
mov byte [ebp - 8], bl
mov edx, ebx
mov al, byte [edx + 0x100c3198]
xor al, byte [ebp + edx - 0x10]
inc edx
mov byte [edx + 0x100c3347], al
cmp edx, 8
jl 0x1000868f
lea eax, [ecx + 1]
imul eax, ecx
push 0x15
cdq
pop ecx
idiv ecx
mov byte [0x100c9ff5], 1
cmp edx, 1
jne 0x100086da
push ebx
push ebx
push ebx
call dword [0x1008f0a4]
mov ecx, dword [0x100c97a0]
push 7
pop edx
test eax, eax
cmove ecx, edx
mov dword [0x100c97a0], ecx
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c3348
call fcn.1007048b
leave
ret

Function at 0x100086ec
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
call fcn.10004098
push 4
pop ebx
test al, al
jne 0x10008733
mov eax, dword [0x100c97a0]
cdq
push 0x64
pop ecx
idiv ecx
xor ecx, ecx
lea eax, [edx + 0x141]
mul ebx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1006f447
push eax
call fcn.10070c4d
pop ecx
pop ecx
cmp byte [0x100ca04c], 0
jne 0x10008783
mov dword [ebp - 0x18], 0x6121529
mov byte [ebp - 0x14], bl
mov dword [ebp - 0x13], 0x803201a
mov dword [ebp - 0xf], 0x27141d0a
mov byte [ebp - 0xb], bl
mov dword [ebp - 0xa], 0x491d0713
mov word [ebp - 6], 0x52
xor ecx, ecx
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x18]
inc ecx
mov byte [ecx + 0x100c37c7], al
cmp ecx, 0x13
jl 0x10008766
mov byte [0x100ca04c], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c37c8
pop ebx
call fcn.1007048b
leave
ret

Function at 0x10008795
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100ca01c], 0
jne 0x100087e8
mov dword [ebp - 0x14], 0x1b140907
mov dword [ebp - 0x10], 0x1001b02
xor ecx, ecx
mov dword [ebp - 0xc], 0x121a111d
mov word [ebp - 8], 0x10
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100c3543], al
cmp ecx, 0xd
jl 0x100087cb
mov byte [0x100ca01c], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c3544
call fcn.1007048b
leave
ret
Function at 0x100087f9
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
call fcn.100041eb
test al, al
jne 0x10008828
call dword [0x1008f08c]
push 0x50
xor edx, edx
pop ecx
div ecx
inc edx
mov dword [0x100c97a0], edx
jmp 0x1000882e
mov edx, dword [0x100c97a0]
cmp byte [0x100ca061], 0
jne 0x1000888f
lea ecx, [edx + 1]
lea eax, [edx + 2]
imul eax, ecx
imul eax, edx
push ebx
cdq
push 0x18
pop ecx
idiv ecx
mov eax, dword [0x100c9a90]
xor ebx, ebx
mov ecx, 0x4bf9a295
mov dword [ebp - 0xc], 0x46140907
mov word [ebp - 8], 0xd0c
mov byte [ebp - 6], bl
cmp edx, 0x14
cmove eax, ecx
mov dword [0x100c9a90], eax
mov al, byte [ebx + 0x100c3198]
xor al, byte [ebp + ebx - 0xc]
inc ebx
mov byte [ebx + 0x100c38db], al
cmp ebx, 6
jl 0x10008871
mov byte [0x100ca061], 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c38dc
call fcn.1007048b
leave
ret

Function at 0x100088a0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100ca03e], 0
jne 0x1000896b
mov ecx, dword [0x100c97a0]
push ebx
push esi
push 0x16
pop eax
mov byte [ebp - 0xd], al
push 4
pop eax
mov byte [ebp - 9], al
lea eax, [ecx + 1]
imul eax, ecx
push 0x16
cdq
pop esi
idiv esi
xor ebx, ebx
mov word [ebp - 0x10], 0x190d
mov byte [ebp - 0xe], 8
mov word [ebp - 0xc], 0x110d
mov byte [ebp - 0xa], 0x1d
mov word [ebp - 8], 0x1007
mov byte [ebp - 6], bl
cmp edx, 3
jne 0x10008912
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [0x1008f0b0]
mov ecx, dword [0x100c97a0]
mov al, byte [ebx + 0x100c3198]
xor al, byte [ebp + ebx - 0x10]
inc ebx
mov byte [ebx + 0x100c3713], al
cmp ebx, 0xa
jl 0x10008912
mov eax, ecx
imul eax, ecx
imul eax, ecx
push 0x12
pop esi
cdq
idiv esi
pop esi
mov byte [0x100ca03e], 1
pop ebx
cmp edx, 7
jne 0x1000896b
mov eax, ecx
push 0x64
cdq
pop ecx
idiv ecx
xor ecx, ecx
push 4
lea eax, [edx + 0x63]
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1006f447
push eax
call fcn.10070c4d
pop ecx
pop ecx
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c3714
call fcn.1007048b
leave
ret