joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1000698d
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
call fcn.10003f5c
test al, al
jne 0x100069bd
push 0xf9
push 0xf8
push str._d__d_n
call fcn.10070c67
add esp, 0xc
cmp byte [0x100ca04b], 0
jne 0x10006a72
push ebx
push esi
mov esi, dword [0x100c97a0]
push 0x18
lea ecx, [esi + 1]
lea eax, [esi + 2]
imul eax, ecx
imul eax, esi
cdq
pop ecx
idiv ecx
xor ebx, ebx
mov dword [ebp - 0x10], 0x1b140927
mov dword [ebp - 0xc], 0x1f2b1b02
mov dword [ebp - 8], 0x170a0b
cmp edx, 0xb
jne 0x10006a1d
push ebx
push ebx
push ebx
call dword [0x1008f0a4]
mov esi, dword [0x100c97a0]
test eax, eax
push 7
pop eax
cmove esi, eax
mov dword [0x100c97a0], esi
mov ecx, ebx
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100c37bb], al
cmp ecx, 0xb
jl 0x10006a1f
lea ecx, [esi + 1]
lea eax, [esi + 2]
imul eax, ecx
imul eax, esi
push 6
cdq
pop ecx
idiv ecx
cmp edx, 2
jne 0x10006a69
push ebx
push ebx
push ebx
call dword [0x1008f0a4]
mov ecx, dword [0x100c97a0]
test eax, eax
push 7
pop eax
cmove ecx, eax
mov dword [0x100c97a0], ecx
pop esi
mov byte [0x100ca04b], 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c37bc
call fcn.1007048b
leave
ret
Function at 0x10006a83
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
call fcn.1000e5ac
mov esi, dword [0x100c97a0]
xor ebx, ebx
push 3
pop edi
test al, al
jne 0x10006b07
mov eax, esi
cdq
sub eax, edx
mov edi, eax
mov dword [ebp - 0x14], 0x76
mov eax, dword [ebp - 0x14]
mov ecx, ebx
sar edi, 1
test edi, edi
jle 0x10006aff
mov eax, esi
cdq
and edx, 3
add eax, edx
sar eax, 2
mov dword [ebp - 0x18], eax
mov edx, ebx
mov esi, edi
mov dword [ebp - 0x1c], edi
test eax, eax
jle 0x10006aee
mov esi, dword [ebp - 0x18]
mov eax, edx
add dword [ebp - 0x14], eax
dec eax
dec esi
jne 0x10006ae1
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0x1c]
add edx, ecx
dec esi
mov dword [ebp - 0x1c], esi
jne 0x10006ad8
mov esi, dword [0x100c97a0]
mov eax, dword [ebp - 0x14]
inc ecx
cmp ecx, eax
jl 0x10006abf
push 3
pop edi
cmp byte [0x100ca007], bl
jne 0x10006bd9
lea ecx, [esi + 2]
lea eax, [esi + 1]
imul eax, ecx
imul eax, esi
push 0x18
cdq
pop ecx
idiv ecx
cmp edx, 1
jne 0x10006b40
call dword [0x1008f08c]
push 0x50
xor edx, edx
pop ecx
div ecx
lea esi, [edx + 1]
mov dword [0x100c97a0], esi
lea ecx, [esi + 2]
lea eax, [esi + 1]
imul eax, ecx
imul eax, esi
push 0xc
cdq
pop ecx
idiv ecx
mov dword [ebp - 0x10], 0x1d12052a
mov dword [ebp - 0xc], 0x41d112d
mov word [ebp - 8], 0x1007
mov byte [ebp - 6], bl
cmp edx, 0xb
jne 0x10006bbc
jmp 0x10006bb8
mov ecx, esi
and ecx, 0x80000001
jns 0x10006b7f
dec ecx
or ecx, 0xfffffffe
inc ecx
jne 0x10006b8c
mov eax, esi
cdq
sub eax, edx
mov esi, eax
sar esi, 1
jmp 0x10006b93
lea esi, [esi*2 + 1]
mov eax, esi
cdq
idiv edi
mov dword [0x100c97a0], esi
sub edx, ebx
je 0x10006bab
dec edx
dec edx
je 0x10006bae
dec edx
je 0x10006baf
jmp 0x10006bb8
add esi, 2
inc esi
add esi, 2
mov dword [0x100c97a0], esi
test esi, esi
jne 0x10006b70
mov al, byte [ebx + 0x100c3198]
xor al, byte [ebp + ebx - 0x10]
inc ebx
mov byte [ebx + 0x100c3433], al
cmp ebx, 0xa
jl 0x10006bbc
mov byte [0x100ca007], 1
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
mov eax, 0x100c3434
pop ebx
call fcn.1007048b
leave
ret

Function at 0x10006bed
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xbc
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
call fcn.10004098
test al, al
jne 0x10006c16
lea eax, [ebp - 0xbc]
push eax
call dword [0x1008f0ac]
call fcn.10003fe0
test al, al
jne 0x10006c3e
push esi
push 4
call fcn.1006f5cc
mov esi, eax
call fcn.10070af8
mov dword [esi], eax
push esi
mov dword [0x100c97a0], eax
call fcn.1006f61b
pop ecx
pop ecx
pop esi
cmp byte [0x100c9ff9], 0
jne 0x10006c95
mov dword [ebp - 0x10], 0x1b140927
mov dword [ebp - 0xc], 0xc291b02
mov word [ebp - 8], 0xa
xor ecx, ecx
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100c337b], al
cmp ecx, 9
jl 0x10006c5d
mov byte [0x100c9ff9], 1
call fcn.10003f7a
mov ecx, dword [0x100c99f8]
mov edx, 0x2296cb8f
test al, al
cmove ecx, edx
mov dword [0x100c99f8], ecx
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c337c
call fcn.1007048b
leave
ret
Function at 0x10006ca6
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c9fe7], 0
jne 0x10006cf6
xor ecx, ecx
mov dword [ebp - 0x14], 0x1b140927
mov dword [ebp - 0x10], 0x4291b02
mov dword [ebp - 0xc], 0x316070a
mov byte [ebp - 8], cl
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100c3283], al
cmp ecx, 0xc
jl 0x10006cd9
mov byte [0x100c9fe7], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c3284
call fcn.1007048b
leave
ret

Function at 0x10006d07
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
call fcn.10003fbe
test al, al
jne 0x10006d6f
movd xmm4, dword [0x100c97a0]
movsd xmm3, qword [0x10090118]
xorps xmm2, xmm2
cvtdq2pd xmm4, xmm4
addsd xmm2, xmm3
movapd xmm0, xmm2
mulsd xmm0, xmm2
comisd xmm0, xmm4
jbe 0x10006d55
subsd xmm2, xmm3
divsd xmm3, qword [0x10090120]
movapd xmm1, xmm2
mulsd xmm1, xmm2
movapd xmm0, xmm4
subsd xmm0, xmm1
comisd xmm0, xmmword [0x10090110]
ja 0x10006d37
cmp byte [0x100c9fe5], 0
jne 0x10006db4
xor ecx, ecx
mov dword [ebp - 0x14], 0x1b140927
mov dword [ebp - 0x10], 0x2291b02
mov dword [ebp - 0xc], 0x3160708
mov byte [ebp - 8], cl
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100c3263], al
cmp ecx, 0xc
jl 0x10006d92
mov byte [0x100c9fe5], 1
call fcn.1000427b
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c3264
call fcn.1007048b
leave
ret

Function at 0x10006dc5
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
call fcn.100040d8
test al, al
jne 0x10006dff
xor ecx, ecx
push esi
mov esi, dword [0x100c97a0]
inc ecx
cmp esi, ecx
jle 0x10006df8
mov eax, esi
cdq
idiv ecx
inc ecx
add ecx, edx
cmp ecx, esi
jl 0x10006dec
mov dword [0x100c97a0], ecx
pop esi
cmp byte [0x100ca018], 0
jne 0x10006e54
push ebx
xor ebx, ebx
mov dword [ebp - 0x10], 0x1b140927
mov dword [ebp - 0xc], 0x8281b02
mov word [ebp - 8], 0x10
mov ecx, ebx
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100c350f], al
cmp ecx, 9
jl 0x10006e21
call fcn.10003f7a
test al, al
jne 0x10006e4c
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [0x1008f090]
mov byte [0x100ca018], 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c3510
call fcn.1007048b
leave
ret
Function at 0x10006e65
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2a0
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100ca064], 0
jne 0x10006edd
push ebx
xor ebx, ebx
push esi
mov dword [ebp - 0x10], 0x1b140927
mov dword [ebp - 0xc], 0x4241b02
mov word [ebp - 8], bx
mov ecx, ebx
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100c38fb], al
cmp ecx, 9
jl 0x10006e99
mov esi, dword [0x100c97a0]
push 0xf
lea eax, [esi + 1]
imul eax, esi
cdq
pop ecx
idiv ecx
mov byte [0x100ca064], 1
cmp edx, 0xa
jne 0x10006edb
push edi
mov edi, esi
inc ebx
dec edi
cmp ebx, 0xa4
jb 0x10006ed0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c38fc
call fcn.1007048b
leave
ret

Function at 0x10006eee
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c9fff], 0
jne 0x10006f44
xor ecx, ecx
mov dword [ebp - 0x14], 0x1b140927
mov dword [ebp - 0x10], 0xc231b02
mov dword [ebp - 0xc], 0x19100d11
mov word [ebp - 8], 0x1306
mov byte [ebp - 6], cl
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100c33c3], al
cmp ecx, 0xe
jl 0x10006f27
mov byte [0x100c9fff], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c33c4
call fcn.1007048b
leave
ret

Function at 0x10006f55
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x150
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
mov edx, dword [0x100c97a0]
push ebx
lea ecx, [edx + 2]
lea eax, [edx + 1]
imul eax, ecx
imul eax, edx
push 0x12
cdq
pop ecx
idiv ecx
xor ebx, ebx
cmp edx, 0xf
jne 0x10007015
mov eax, ebx
push esi
mov dword [ebp - 0x148], eax
lea ecx, [ebp - 0x144]
push edi
mov edx, ebx
mov dword [ebp - 0x150], edx
mov dword [ebp - 0x14c], ecx
mov ebx, dword [0x100c97a0]
lea ecx, [eax + 1]
lea edi, [edx + 1]
mov eax, ebx
cdq
idiv ecx
mov eax, ebx
mov ecx, ebx
sub ecx, dword [ebp - 0x148]
mov esi, edx
cdq
imul esi, ecx
idiv edi
add esi, eax
sub esi, dword [ebp - 0x150]
push esi
push 0x100900a8
call fcn.10070c67
mov eax, dword [ebp - 0x148]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x14c]
mov edx, edi
add ecx, 4
mov dword [ebp - 0x150], edi
mov dword [ebp - 0x14c], ecx
cmp edx, 0x13
jl 0x10006faa
inc eax
push 0
mov dword [ebp - 0x148], eax
pop ebx
cmp eax, 4
jl 0x10006f9c
pop edi
pop esi
cmp byte [0x100ca054], 0
jne 0x10007053
mov dword [ebp - 0x14], 0x1b140927
mov dword [ebp - 0x10], 0x2221b02
mov dword [ebp - 0xc], 0x816080a
mov byte [ebp - 8], bl
mov al, byte [ebx + 0x100c3198]
xor al, byte [ebp + ebx - 0x14]
inc ebx
mov byte [ebx + 0x100c383b], al
cmp ebx, 0xc
jl 0x10007036
mov byte [0x100ca054], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c383c
pop ebx
call fcn.1007048b
leave
ret
Function at 0x10007065
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
mov ecx, dword [0x100c97a0]
push 0x13
lea eax, [ecx + 1]
imul eax, ecx
cdq
pop ecx
idiv ecx
cmp edx, 0x11
jne 0x100070a2
call fcn.10070af8
mov ecx, dword [0x100c97a0]
cmp ecx, eax
jne 0x100070a2
dec ecx
mov dword [0x100c97a0], ecx
cmp byte [0x100c9ffa], 0
jne 0x100070df
mov dword [ebp - 0x10], 0x1b140927
mov dword [ebp - 0xc], 0x2211b02
mov dword [ebp - 8], 0x610
xor ecx, ecx
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100c3387], al
cmp ecx, 0xb
jl 0x100070c2
mov byte [0x100c9ffa], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c3388
call fcn.1007048b
leave
ret

Function at 0x100070f0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c9ffe], 0
jne 0x100071c6
mov ecx, dword [0x100c97a0]
mov eax, ecx
imul eax, ecx
imul eax, ecx
push ebx
push esi
push 0xc
cdq
pop esi
idiv esi
xor ebx, ebx
cmp edx, 2
jne 0x1000714e
mov eax, ecx
sub eax, ebx
je 0x10007144
dec eax
je 0x1000713c
inc ecx
mov dword [0x100c97a0], ecx
jmp 0x1000714e
mov dword [0x100c97a0], ebx
jmp 0x1000714e
mov dword [0x100c97a0], 2
mov dword [ebp - 0x10], 0x1b140927
mov dword [ebp - 0xc], 0x3201b02
mov byte [ebp - 8], bl
call fcn.100040f6
test al, al
jne 0x100071a7
mov ecx, dword [0x100c97a0]
mov eax, ecx
push edi
mov edi, 0xb3
cdq
mov dword [ebp - 0x14], edi
idiv edi
mov esi, ebx
add edi, 0x4b
jmp 0x1000719c
mov eax, ecx
or eax, 0xffffff49
add ecx, eax
mov eax, ecx
imul eax, ecx
inc esi
cmp esi, eax
jg 0x100071a0
mov eax, ecx
cdq
idiv dword [ebp - 0x14]
cmp edx, edi
jne 0x10007183
mov dword [0x100c97a0], esi
pop edi
mov al, byte [ebx + 0x100c3198]
xor al, byte [ebp + ebx - 0x10]
inc ebx
mov byte [ebx + 0x100c33b7], al
cmp ebx, 8
jl 0x100071a7
pop esi
mov byte [0x100c9ffe], 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c33b8
call fcn.1007048b
leave
ret

Function at 0x100071d7
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100ca00a], 0
jne 0x10007245
push ebx
xor ebx, ebx
mov dword [ebp - 0x10], 0x1b140927
mov dword [ebp - 0xc], 0xc3f1b02
mov word [ebp - 8], 0x807
mov byte [ebp - 6], bl
call fcn.10004231
test al, al
jne 0x10007227
call dword [0x1008f08c]
push 0x50
xor edx, edx
pop ecx
div ecx
inc edx
mov dword [0x100c97a0], edx
mov al, byte [ebx + 0x100c3198]
xor al, byte [ebp + ebx - 0x10]
inc ebx
mov byte [ebx + 0x100c3457], al
cmp ebx, 0xa
jl 0x10007227
mov byte [0x100ca00a], 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c3458
call fcn.1007048b
leave
ret
Function at 0x10007256
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
mov ecx, dword [0x100c97a0]
push ebx
lea eax, [ecx + 1]
imul eax, ecx
push esi
push 0x15
pop ebx
cdq
idiv ebx
push 4
pop esi
cmp edx, esi
jne 0x100072a5
mov eax, ecx
cdq
push 0x64
pop ecx
idiv ecx
xor ecx, ecx
lea eax, [edx + 0x63]
mul esi
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1006f447
push eax
call fcn.10070c4d
pop ecx
pop ecx
cmp byte [0x100ca00e], 0
jne 0x100072e5
mov byte [ebp - 0x10], 0x29
mov byte [ebp - 0xf], bl
mov byte [ebp - 0xe], bl
mov dword [ebp - 0xd], 0xa2c4c06
mov dword [ebp - 9], 0x10080c
xor ecx, ecx
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100c348b], al
cmp ecx, 0xa
jl 0x100072c8
mov byte [0x100ca00e], 1
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
mov eax, 0x100c348c
pop ebx
call fcn.1007048b
leave
ret

Function at 0x100072f8
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100ca011], 0
jne 0x10007344
mov dword [ebp - 0x10], 0x1b140927
mov dword [ebp - 0xc], 0xc3f1b02
mov word [ebp - 8], 8
xor ecx, ecx
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100c34b7], al
cmp ecx, 9
jl 0x10007327
mov byte [0x100ca011], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c34b8
call fcn.1007048b
leave
ret

Function at 0x10007355
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x380
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100ca012], 0
jne 0x100073e5
push ebx
push esi
push 9
pop ebx
xor ecx, ecx
mov byte [ebp - 0x10], 0x27
mov byte [ebp - 0xf], bl
mov dword [ebp - 0xe], 0x1b021b14
mov dword [ebp - 0xa], 0x17160c3f
mov word [ebp - 6], 0xa
mov edx, ecx
mov al, byte [edx + 0x100c3198]
xor al, byte [ebp + edx - 0x10]
inc edx
mov byte [edx + 0x100c34c3], al
cmp edx, 0xb
jl 0x10007395
mov esi, dword [0x100c97a0]
mov eax, esi
imul eax, esi
cdq
idiv ebx
mov byte [0x100ca012], 1
cmp edx, 5
jne 0x100073e3
mov eax, dword [ebp + ecx*4 - 0x380]
imul eax, eax, 0xe8
add esi, eax
inc ecx
cmp ecx, 0x370
jb 0x100073c5
mov dword [0x100c97a0], esi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c34c4
call fcn.1007048b
leave
ret
Function at 0x100073f6
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
call fcn.10004231
test al, al
jne 0x1000741f
call fcn.10070af8
mov esi, eax
mov dword [0x100c97a0], esi
jmp 0x10007425
mov esi, dword [0x100c97a0]
cmp byte [0x100c9ff6], 0
jne 0x1000749e
call fcn.10004098
xor ecx, ecx
test al, al
jne 0x10007466
push ebx
mov edx, ecx
push edi
push 8
mov edi, edx
pop ebx
mov eax, edi
and eax, 1
dec eax
not eax
and eax, esi
sar edi, 1
xor edi, eax
dec ebx
jne 0x10007442
add esi, edi
inc edx
cmp edx, 0x100
jl 0x1000743d
pop edi
mov dword [0x100c97a0], esi
pop ebx
mov dword [ebp - 0x14], 0x1b140927
mov dword [ebp - 0x10], 0x83f1b02
mov dword [ebp - 0xc], 0x1806040a
mov word [ebp - 8], 0xd
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100c3353], al
cmp ecx, 0xd
jl 0x10007481
mov byte [0x100c9ff6], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c3354
pop esi
call fcn.1007048b
leave
ret

Function at 0x100074b0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100ca05e], 0
jne 0x1000752b
mov edx, dword [0x100c97a0]
push ebx
push 0x11
pop eax
mov byte [ebp - 8], al
lea ecx, [edx + 1]
lea eax, [edx + 2]
imul eax, ecx
imul eax, edx
push 0x11
cdq
pop ecx
idiv ecx
xor ebx, ebx
mov dword [ebp - 0x10], 0x1b140927
mov dword [ebp - 0xc], 0x13f1b02
mov word [ebp - 7], 4
cmp edx, 3
jne 0x1000750d
call fcn.10070af8
mov dword [0x100c97a0], eax
mov al, byte [ebx + 0x100c3198]
xor al, byte [ebp + ebx - 0x10]
inc ebx
mov byte [ebx + 0x100c38bf], al
cmp ebx, 0xa
jl 0x1000750d
mov byte [0x100ca05e], 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c38c0
call fcn.1007048b
leave
ret

Function at 0x1000753c
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
call fcn.100040d8
xor ecx, ecx
test al, al
jne 0x1000757f
mov eax, dword [0x100c97a0]
mov edx, eax
sub edx, ecx
je 0x10007575
dec edx
je 0x1000756d
inc eax
mov dword [0x100c97a0], eax
jmp 0x1000757f
mov dword [0x100c97a0], ecx
jmp 0x1000757f
mov dword [0x100c97a0], 2
cmp byte [0x100ca063], cl
jne 0x100075bb
mov dword [ebp - 0x10], 0x1b140927
mov dword [ebp - 0xc], 0x13f1b02
mov word [ebp - 8], 0x1011
mov byte [ebp - 6], cl
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100c38ef], al
cmp ecx, 0xa
jl 0x1000759e
mov byte [0x100ca063], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c38f0
call fcn.1007048b
leave
ret
Function at 0x100075cc
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c9fde], 0
jne 0x10007616
xor ecx, ecx
mov dword [ebp - 0x10], 0x1b140927
mov dword [ebp - 0xc], 0x23f1b02
mov word [ebp - 8], cx
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100c3213], al
cmp ecx, 9
jl 0x100075f9
mov byte [0x100c9fde], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c3214
call fcn.1007048b
leave
ret

Function at 0x10007627
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc0
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
mov ecx, dword [0x100c97a0]
push ebx
lea eax, [ecx + 1]
imul eax, ecx
push 0x16
cdq
pop ecx
idiv ecx
xor ebx, ebx
cmp edx, 9
jne 0x10007663
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [0x1008f090]
push 0x16
pop ecx
cmp byte [0x100ca00b], bl
jne 0x100076b6
mov dword [ebp - 0x14], 0x1b140927
mov dword [ebp - 0x10], 0xe3c1b02
mov byte [ebp - 0xc], cl
mov dword [ebp - 0xb], 0x5030a
mov al, byte [ebx + 0x100c3198]
xor al, byte [ebp + ebx - 0x14]
inc ebx
mov byte [ebx + 0x100c3463], al
cmp ebx, 0xc
jl 0x10007683
mov byte [0x100ca00b], 1
call fcn.10004076
test al, al
jne 0x100076b6
lea eax, [ebp - 0xc0]
push eax
call dword [0x1008f0ac]
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c3464
pop ebx
call fcn.1007048b
leave
ret

Function at 0x100076c8
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100ca014], 0
jne 0x1000777c
mov ecx, dword [0x100c97a0]
mov eax, ecx
imul eax, ecx
imul eax, ecx
push esi
push 0x15
cdq
pop esi
idiv esi
pop esi
cmp edx, 0x11
jne 0x10007707
inc ecx
mov dword [0x100c97a0], ecx
push ebx
push 0xb
pop ebx
xor edx, edx
mov dword [ebp - 0x10], 0x1b140927
mov dword [ebp - 0xc], 0x53c1b02
mov byte [ebp - 8], bl
mov word [ebp - 7], 0x716
mov byte [ebp - 5], dl
mov al, byte [edx + 0x100c3198]
xor al, byte [ebp + edx - 0x10]
inc edx
mov byte [edx + 0x100c34db], al
cmp edx, ebx
jl 0x10007727
lea eax, [ecx + 1]
imul eax, ecx
cdq
idiv ebx
pop ebx
cmp edx, 3
jne 0x10007775
mov eax, ecx
push 0x64
cdq
pop ecx
idiv ecx
xor ecx, ecx
push 4
lea eax, [edx + 0x141]
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1006f447
push eax
call fcn.10070c4d
pop ecx
pop ecx
mov byte [0x100ca014], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c34dc
call fcn.1007048b
leave
ret
Function at 0x1000778d
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
call fcn.10004231
xor ecx, ecx
test al, al
jne 0x10007801
mov eax, dword [0x100c97a0]
push ebx
cdq
push esi
sub eax, edx
push edi
mov edi, eax
mov ebx, 0xd3
mov esi, ecx
sar edi, 1
test edi, edi
jle 0x100077f9
mov eax, dword [0x100c97a0]
cdq
and edx, 3
add eax, edx
sar eax, 2
mov edx, ecx
mov dword [ebp - 0x18], eax
mov ecx, edi
mov dword [ebp - 0x14], edi
test eax, eax
jle 0x100077ef
mov ecx, dword [ebp - 0x18]
mov eax, edx
add ebx, eax
dec eax
dec ecx
jne 0x100077e3
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
add edx, esi
dec ecx
mov dword [ebp - 0x14], ecx
jne 0x100077da
xor ecx, ecx
inc esi
cmp esi, ebx
jl 0x100077be
pop edi
pop esi
pop ebx
cmp byte [0x100ca048], 0
jne 0x1000783e
mov dword [ebp - 0x10], 0x1b140927
mov dword [ebp - 0xc], 0x53c1b02
mov word [ebp - 8], 0x140b
mov byte [ebp - 6], cl
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100c3797], al
cmp ecx, 0xa
jl 0x10007821
mov byte [0x100ca048], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c3798
call fcn.1007048b
leave
ret

Function at 0x1000784f
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100ca00c], 0
jne 0x100078ad
push ebx
mov dword [ebp - 0x10], 0x1b140927
mov dword [ebp - 0xc], 0x3c1b02
xor ebx, ebx
mov dword [ebp - 8], 0x71105
call fcn.10003f5c
test al, al
jne 0x1000788f
inc dword [0x100c97a0]
mov al, byte [ebx + 0x100c3198]
xor al, byte [ebp + ebx - 0x10]
inc ebx
mov byte [ebx + 0x100c3473], al
cmp ebx, 0xb
jl 0x1000788f
mov byte [0x100ca00c], 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c3474
call fcn.1007048b
leave
ret

Function at 0x100078be
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c8360]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [0x100c97a0]
push 0xd
lea ecx, [esi + 1]
lea eax, [esi + 2]
imul eax, ecx
imul eax, esi
cdq
pop ecx
idiv ecx
cmp edx, 1
jne 0x100078f3
dec esi
mov dword [0x100c97a0], esi
cmp byte [0x100ca034], 0
pop esi
jne 0x10007943
xor ecx, ecx
mov dword [ebp - 0x14], 0x6121529
mov dword [ebp - 0x10], 0x182d1a04
mov dword [ebp - 0xc], 0x405e101d
mov byte [ebp - 8], cl
mov al, byte [ecx + 0x100c3198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100c367f], al
cmp ecx, 0xc
jl 0x10007917
call fcn.10004076
test al, al
jne 0x1000793c
dec dword [0x100c9b8c]
mov byte [0x100ca034], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100c3680
call fcn.1007048b
leave
ret