joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10006e7d
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e65], 0
jne 0x10006eca
mov dword [ebp - 0x10], 0x1a171a26
mov dword [ebp - 0xc], 0xd241112
mov dword [ebp - 8], 0x5041a
xor ecx, ecx
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf4e7], al
cmp ecx, 0xb
jl 0x10006ead
mov byte [0x100c5e65], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf4e8
call fcn.1006dcab
leave
ret

Function at 0x10006edb
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e8d], 0
jne 0x10006f2b
xor ecx, ecx
mov dword [ebp - 0x14], 0x1a171a26
mov dword [ebp - 0x10], 0x3241112
mov dword [ebp - 0xc], 0x1080101
mov byte [ebp - 8], cl
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100bf703], al
cmp ecx, 0xc
jl 0x10006f0e
mov byte [0x100c5e8d], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf704
call fcn.1006dcab
leave
ret

Function at 0x10006f3c
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e54], 0
jne 0x10006f8b
xor ecx, ecx
mov dword [ebp - 0x10], 0x1a171a26
mov dword [ebp - 0xc], 0x2a2c1112
mov word [ebp - 8], 0x90f
mov byte [ebp - 6], cl
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf40f], al
cmp ecx, 0xa
jl 0x10006f6e
mov byte [0x100c5e54], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf410
call fcn.1006dcab
leave
ret

Function at 0x10006f9c
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x534
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e53], 0
jne 0x10007077
call fcn.10004116
test al, al
jne 0x10006fcb
inc dword [0x100c59cc]
push ebx
mov dword [ebp - 0x14], 0x1a171a26
mov dword [ebp - 0x10], 0x2a2c1112
mov dword [ebp - 0xc], 0x1d080e1c
mov word [ebp - 8], 9
xor ebx, ebx
call fcn.1000413e
test al, al
jne 0x10007059
push esi
push edi
mov esi, ebx
mov edi, 0xa4
call fcn.1006e318
movd xmm0, eax
cvtdq2pd xmm0, xmm0
inc esi
movsd qword [ebp + esi*8 - 0x53c], xmm0
cmp esi, edi
jb 0x10006ffb
mov eax, ebx
mov edx, 0xa3
mov ecx, edx
cmp eax, edx
jge 0x10007052
movsd xmm0, qword [ebp + ecx*8 - 0x534]
movsd xmm1, qword [ebp + ecx*8 - 0x53c]
comisd xmm0, xmm1
jbe 0x1000704d
movsd qword [ebp + ecx*8 - 0x534], xmm1
movsd qword [ebp + ecx*8 - 0x53c], xmm0
dec ecx
cmp ecx, eax
jg 0x10007023
inc eax
cmp eax, edi
jl 0x1000701d
pop edi
pop esi
mov al, byte [ebx + 0x100bf198]
xor al, byte [ebp + ebx - 0x14]
inc ebx
mov byte [ebx + 0x100bf3ff], al
cmp ebx, 0xd
jl 0x10007059
mov byte [0x100c5e53], 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf400
call fcn.1006dcab
leave
ret
Function at 0x10007088
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [0x100c57c0]
push 0x14
lea ecx, [esi + 2]
lea eax, [esi + 1]
imul eax, ecx
imul eax, esi
cdq
pop ebx
idiv ebx
cmp edx, 0xc
jne 0x100070e1
push 0x64
pop ecx
mov eax, esi
cdq
idiv ecx
xor ecx, ecx
push 4
lea eax, [edx + 0x141]
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1006cc68
push eax
call fcn.1006e46d
pop ecx
pop ecx
cmp byte [0x100c5e69], 0
jne 0x10007124
xor ecx, ecx
mov dword [ebp - 0x14], 0x1a171a26
mov dword [ebp - 0x10], 0x212c1112
mov dword [ebp - 0xc], 0x16060901
mov byte [ebp - 8], bl
mov byte [ebp - 7], cl
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100bf51b], al
cmp ecx, 0xd
jl 0x10007107
mov byte [0x100c5e69], 1
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
mov eax, 0x100bf51c
pop ebx
call fcn.1006dcab
leave
ret

Function at 0x10007137
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
call fcn.100040ec
xor ebx, ebx
test al, al
jne 0x1000715e
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [0x1008b09c]
cmp byte [0x100c5eaf], bl
jne 0x10007191
mov dword [ebp - 0xc], 0x1a171a26
mov dword [ebp - 8], 0x40d06
mov al, byte [ebx + 0x100bf198]
xor al, byte [ebp + ebx - 0xc]
inc ebx
mov byte [ebx + 0x100bf8cb], al
cmp ebx, 7
jl 0x10007174
mov byte [0x100c5eaf], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf8cc
pop ebx
call fcn.1006dcab
leave
ret

Function at 0x100071a3
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x188
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e86], 0
jne 0x10007221
push ebx
xor ebx, ebx
push esi
mov dword [ebp - 0x14], 0x7110628
mov dword [ebp - 0x10], 0x9371014
mov dword [ebp - 0xc], 0x5e1e0b0f
mov word [ebp - 8], 0x5f
mov ecx, ebx
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100bf69b], al
cmp ecx, 0xd
jl 0x100071e0
mov esi, dword [0x100c57c0]
push 0xc
lea eax, [esi + 1]
imul eax, esi
cdq
pop ecx
idiv ecx
mov byte [0x100c5e86], 1
cmp edx, 0xa
jne 0x1000721f
push edi
mov edi, esi
inc ebx
dec edi
cmp ebx, 0x5d
jb 0x10007217
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf69c
call fcn.1006dcab
leave
ret
Function at 0x10007232
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e73], 0
jne 0x100072c0
xor ecx, ecx
mov dword [ebp - 0xc], 0x1e171a26
mov word [ebp - 8], 0x1a18
mov byte [ebp - 6], cl
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0xc]
inc ecx
mov byte [ecx + 0x100bf59f], al
cmp ecx, 6
jl 0x1000725d
push esi
mov esi, dword [0x100c57c0]
push 0x14
lea ecx, [esi + 1]
lea eax, [esi + 2]
imul eax, ecx
imul eax, esi
cdq
pop ecx
idiv ecx
mov byte [0x100c5e73], 1
cmp edx, 0xf
jne 0x100072bf
push 0x64
pop ecx
mov eax, esi
cdq
idiv ecx
xor ecx, ecx
push 4
lea eax, [edx + 0x7b]
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1006cc68
push eax
call fcn.1006e46d
pop ecx
pop ecx
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf5a0
call fcn.1006dcab
leave
ret

Function at 0x100072d1
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e97], 0
jne 0x1000731a
xor ecx, ecx
mov dword [ebp - 0x10], 0xa294e27
mov dword [ebp - 0xc], 0x1f100b03
mov byte [ebp - 8], cl
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf78b], al
cmp ecx, 8
jl 0x100072fd
mov byte [0x100c5e97], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf78c
call fcn.1006dcab
leave
ret

Function at 0x1000732b
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5eb0], 0
jne 0x10007371
mov dword [ebp - 0xc], 0x11c2f27
mov dword [ebp - 8], 0x118
xor ecx, ecx
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0xc]
inc ecx
mov byte [ecx + 0x100bf8d3], al
cmp ecx, 7
jl 0x10007354
mov byte [0x100c5eb0], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf8d4
call fcn.1006dcab
leave
ret

Function at 0x10007382
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e67], 0
jne 0x1000740b
xor ecx, ecx
mov dword [ebp - 0x10], 0xa295125
mov dword [ebp - 0xc], 0x1f101018
mov byte [ebp - 8], cl
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf503], al
cmp ecx, 8
jl 0x100073ae
mov ecx, dword [0x100c57c0]
push esi
lea eax, [ecx + 1]
imul eax, ecx
push 0x15
cdq
pop esi
idiv esi
pop esi
cmp edx, 0xa
jne 0x10007404
mov eax, ecx
push 0x64
cdq
pop ecx
idiv ecx
xor ecx, ecx
push 4
lea eax, [edx + 0x63]
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1006cc68
push eax
call fcn.1006e46d
pop ecx
pop ecx
mov byte [0x100c5e67], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf504
call fcn.1006dcab
leave
ret
Function at 0x1000741c
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1dc
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e88], 0
jne 0x10007523
push 0x15
pop eax
mov dword [ebp - 0x10], 0x16010a1c
mov dword [ebp - 0xc], 0x1a12111e
mov byte [ebp - 8], 0xb
mov byte [ebp - 7], al
mov byte [ebp - 6], 0
xor ecx, ecx
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf6bb], al
cmp ecx, 0xa
jl 0x1000745a
push ebx
mov ebx, dword [0x100c57c0]
mov eax, ebx
imul eax, ebx
push 0x15
cdq
pop ecx
idiv ecx
mov byte [0x100c5e88], 1
cmp edx, 0x11
jne 0x10007522
xor eax, eax
push esi
mov dword [ebp - 0x1d4], eax
lea ecx, [ebp - 0x1d0]
push edi
xor edx, edx
mov dword [ebp - 0x1dc], edx
mov dword [ebp - 0x1d8], ecx
lea ecx, [eax + 1]
lea edi, [edx + 1]
mov eax, ebx
cdq
idiv ecx
mov eax, ebx
mov ecx, ebx
sub ecx, dword [ebp - 0x1d4]
mov esi, edx
cdq
imul esi, ecx
idiv edi
add esi, eax
sub esi, dword [ebp - 0x1dc]
push esi
push 0x1008be80
call fcn.1006ebcc
mov eax, dword [ebp - 0x1d4]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1d8]
mov edx, edi
add ecx, 4
mov dword [ebp - 0x1dc], edi
mov dword [ebp - 0x1d8], ecx
cmp edx, 0x1c
jge 0x1000750c
mov ebx, dword [0x100c57c0]
jmp 0x100074b0
inc eax
mov dword [ebp - 0x1d4], eax
cmp eax, 4
jge 0x10007520
mov ebx, dword [0x100c57c0]
jmp 0x100074a2
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf6bc
call fcn.1006dcab
leave
ret

Function at 0x10007534
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24c
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [0x100c57c0]
mov eax, esi
imul eax, esi
imul eax, esi
push edi
push 0x12
pop ecx
cdq
idiv ecx
push 0xe
pop edi
cmp edx, edi
jne 0x100075af
movsd xmm3, qword [0x1008bd78]
movd xmm4, esi
xorps xmm2, xmm2
cvtdq2pd xmm4, xmm4
addsd xmm2, xmm3
movapd xmm0, xmm2
mulsd xmm0, xmm2
comisd xmm0, xmm4
jbe 0x10007595
subsd xmm2, xmm3
divsd xmm3, qword [0x1008bd80]
movapd xmm1, xmm2
mulsd xmm1, xmm2
movapd xmm0, xmm4
subsd xmm0, xmm1
comisd xmm0, xmmword [0x1008bd70]
ja 0x10007577
cmp byte [0x100c5e78], 0
jne 0x10007621
push ebx
call fcn.1000413e
xor ebx, ebx
test al, al
jne 0x100075d7
mov edi, ebx
mov ebx, esi
inc edi
dec ebx
cmp edi, 0x8f
jb 0x100075c8
push 0xe
xor ebx, ebx
pop edi
mov dword [ebp - 0x10], 0x11c0f19
mov dword [ebp - 0xc], 0x1b1c0c09
mov byte [ebp - 8], bl
mov al, byte [ebx + 0x100bf198]
xor al, byte [ebp + ebx - 0x10]
inc ebx
mov byte [ebx + 0x100bf5db], al
cmp ebx, 8
jl 0x100075e8
lea ecx, [esi + 1]
lea eax, [esi + 2]
imul eax, ecx
imul eax, esi
cdq
idiv edi
mov byte [0x100c5e78], 1
pop ebx
cmp edx, 0xd
cmove esi, ecx
mov dword [0x100c57c0], esi
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
mov eax, 0x100bf5dc
pop esi
call fcn.1006dcab
leave
ret
Function at 0x10007634
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e81], 0
jne 0x1000768e
mov dword [ebp - 0x18], 0x16090619
mov dword [ebp - 0x14], 0x31a1612
xor ecx, ecx
mov dword [ebp - 0x10], 0x1c194a00
mov dword [ebp - 0xc], 0x10a1f02
mov word [ebp - 8], 0x1e
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x18]
inc ecx
mov byte [ecx + 0x100bf64f], al
cmp ecx, 0x11
jl 0x10007671
mov byte [0x100c5e81], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf650
call fcn.1006dcab
leave
ret

Function at 0x1000769f
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e91], 0
jne 0x100076f5
xor ecx, ecx
mov dword [ebp - 0x14], 0x16090619
mov dword [ebp - 0x10], 0x31a1612
mov dword [ebp - 0xc], 0x1c194a00
mov word [ebp - 8], 0x1f02
mov byte [ebp - 6], cl
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100bf737], al
cmp ecx, 0xe
jl 0x100076d8
mov byte [0x100c5e91], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf738
call fcn.1006dcab
leave
ret

Function at 0x10007706
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5eab], 0
jne 0x10007759
mov dword [ebp - 0x14], 0x16021a
xor ecx, ecx
mov dword [ebp - 0x10], 0x8010d06
mov dword [ebp - 0xc], 0x16041143
mov word [ebp - 8], 0x1a
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100bf897], al
cmp ecx, 0xd
jl 0x1000773c
mov byte [0x100c5eab], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf898
call fcn.1006dcab
leave
ret

Function at 0x1000776a
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e45], 0
jne 0x100077b3
xor ecx, ecx
mov dword [ebp - 0x10], 0x18170207
mov dword [ebp - 0xc], 0x181a092e
mov byte [ebp - 8], cl
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x10]
inc ecx
mov byte [ecx + 0x100bf347], al
cmp ecx, 8
jl 0x10007796
mov byte [0x100c5e45], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf348
call fcn.1006dcab
leave
ret

Function at 0x100077c4
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e9c], 0
jne 0x1000781f
mov dword [ebp - 0x18], 0x7110628
mov dword [ebp - 0x14], 0x23c1014
mov dword [ebp - 0x10], 0x16030e02
mov dword [ebp - 0xc], 0x4001629
xor ecx, ecx
mov dword [ebp - 8], 0x5a4819
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x18]
inc ecx
mov byte [ecx + 0x100bf7c7], al
cmp ecx, 0x13
jl 0x10007802
mov byte [0x100c5e9c], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf7c8
call fcn.1006dcab
leave
ret
Function at 0x10007830
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e6c], 0
jne 0x10007883
mov dword [ebp - 0x14], 0x1a171a06
mov dword [ebp - 0x10], 0x1c1112
xor ecx, ecx
mov dword [ebp - 0xc], 0x10041517
mov word [ebp - 8], 0x1e
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100bf543], al
cmp ecx, 0xd
jl 0x10007866
mov byte [0x100c5e6c], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf544
call fcn.1006dcab
leave
ret

Function at 0x10007894
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
call fcn.10003f8b
test al, al
jne 0x100078c1
call dword [0x1008b084]
push 0x50
xor edx, edx
pop ecx
div ecx
inc edx
mov dword [0x100c57c0], edx
cmp byte [0x100c5eb1], 0
jne 0x100078f9
xor ecx, ecx
mov dword [ebp - 0xc], 0x47171a06
mov word [ebp - 8], 0x71c
mov byte [ebp - 6], cl
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0xc]
inc ecx
mov byte [ecx + 0x100bf8db], al
cmp ecx, 6
jl 0x100078dc
mov byte [0x100c5eb1], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf8dc
call fcn.1006dcab
leave
ret

Function at 0x1000790a
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
call fcn.10003ea0
xor ebx, ebx
test al, al
jne 0x1000793b
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [0x1008b0ac]
push ebx
push ebx
call dword [0x1008b0b0]
cmp byte [0x100c5e8e], bl
jne 0x10007977
mov dword [ebp - 0x10], 0x170b0a0c
mov dword [ebp - 0xc], 0x5011b1d
mov word [ebp - 8], 0x140d
mov byte [ebp - 6], bl
mov al, byte [ebx + 0x100bf198]
xor al, byte [ebp + ebx - 0x10]
inc ebx
mov byte [ebx + 0x100bf713], al
cmp ebx, 0xa
jl 0x1000795a
mov byte [0x100c5e8e], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf714
pop ebx
call fcn.1006dcab
leave
ret

Function at 0x10007989
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
call fcn.10003ff7
xor ecx, ecx
test al, al
jne 0x100079d9
push ebx
push esi
mov esi, dword [0x100c57c0]
push edi
mov edx, ecx
push 8
mov edi, edx
pop ebx
mov eax, edi
and eax, 1
dec eax
not eax
and eax, esi
sar edi, 1
xor edi, eax
dec ebx
jne 0x100079b4
add esi, edi
inc edx
cmp edx, 0x100
jl 0x100079af
pop edi
mov dword [0x100c57c0], esi
pop esi
pop ebx
cmp byte [0x100c5e9f], cl
jne 0x10007a19
mov dword [ebp - 0x14], 0x170b0a0c
mov dword [ebp - 0x10], 0x85e035c
mov dword [ebp - 0xc], 0x5e01060b
mov word [ebp - 8], 0x5e
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100bf7fb], al
cmp ecx, 0xd
jl 0x100079fc
mov byte [0x100c5e9f], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf7fc
call fcn.1006dcab
leave
ret
Function at 0x10007a2a
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
push edi
mov edi, dword [0x100c57c0]
push 0x15
lea eax, [edi + 1]
imul eax, edi
cdq
pop ecx
idiv ecx
xor ecx, ecx
cmp edx, 7
jne 0x10007ab2
mov eax, edi
cdq
sub eax, edx
push ebx
mov ebx, eax
mov dword [ebp - 0x18], 0xd1
mov eax, dword [ebp - 0x18]
push esi
mov esi, ecx
sar ebx, 1
test ebx, ebx
jle 0x10007aab
mov eax, edi
cdq
and edx, 3
add eax, edx
sar eax, 2
mov dword [ebp - 0x1c], eax
mov edx, ecx
mov edi, ebx
mov dword [ebp - 0x20], ebx
test eax, eax
jle 0x10007a9a
mov edi, dword [ebp - 0x1c]
mov eax, edx
add dword [ebp - 0x18], eax
dec eax
dec edi
jne 0x10007a8d
mov eax, dword [ebp - 0x1c]
mov edi, dword [ebp - 0x20]
add edx, esi
dec edi
mov dword [ebp - 0x20], edi
jne 0x10007a84
mov edi, dword [0x100c57c0]
mov eax, dword [ebp - 0x18]
inc esi
cmp esi, eax
jl 0x10007a6b
pop esi
pop ebx
pop edi
cmp byte [0x100c5e9e], cl
jne 0x10007af3
mov dword [ebp - 0x14], 0x170b0a0c
mov dword [ebp - 0x10], 0x85e035c
mov dword [ebp - 0xc], 0x5e01060b
mov word [ebp - 8], 0x5f
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100bf7eb], al
cmp ecx, 0xd
jl 0x10007ad6
mov byte [0x100c5e9e], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf7ec
call fcn.1006dcab
leave
ret

Function at 0x10007b04
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e9d], 0
jne 0x10007b57
mov dword [ebp - 0x14], 0x170b0a0c
mov dword [ebp - 0x10], 0x85e035c
mov dword [ebp - 0xc], 0x5e01060b
mov word [ebp - 8], 0x5c
xor ecx, ecx
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100bf7db], al
cmp ecx, 0xd
jl 0x10007b3a
mov byte [0x100c5e9d], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf7dc
call fcn.1006dcab
leave
ret

Function at 0x10007b68
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e4d], 0
jne 0x10007bbb
mov dword [ebp - 0x14], 0x10000f0f
xor ecx, ecx
mov dword [ebp - 0x10], 0x201c1005
mov dword [ebp - 0xc], 0x10041517
mov word [ebp - 8], 0x1e
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100bf3a7], al
cmp ecx, 0xd
jl 0x10007b9e
mov byte [0x100c5e4d], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf3a8
call fcn.1006dcab
leave
ret
Function at 0x10007bcc
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [0x100c57c0]
mov eax, esi
imul eax, esi
push 0xf
cdq
pop ecx
idiv ecx
xor ebx, ebx
cmp edx, 8
jne 0x10007c47
jmp 0x10007c43
mov ecx, esi
and ecx, 0x80000001
jns 0x10007c07
dec ecx
or ecx, 0xfffffffe
inc ecx
jne 0x10007c14
mov eax, esi
cdq
sub eax, edx
mov esi, eax
sar esi, 1
jmp 0x10007c1b
lea esi, [esi*2 + 1]
mov eax, esi
push 3
cdq
pop ecx
idiv ecx
mov dword [0x100c57c0], esi
sub edx, ebx
je 0x10007c36
dec edx
dec edx
je 0x10007c39
dec edx
je 0x10007c3a
jmp 0x10007c43
add esi, 2
inc esi
add esi, 2
mov dword [0x100c57c0], esi
test esi, esi
jne 0x10007bf8
cmp byte [0x100c5e5f], bl
jne 0x10007c8a
mov dword [ebp - 0x14], 0x1f04060e
mov dword [ebp - 0x10], 0x11c0102
mov dword [ebp - 0xc], 0x161f061e
mov word [ebp - 8], 0x4040
mov byte [ebp - 6], bl
mov al, byte [ebx + 0x100bf198]
xor al, byte [ebp + ebx - 0x14]
inc ebx
mov byte [ebx + 0x100bf497], al
cmp ebx, 0xe
jl 0x10007c6d
mov byte [0x100c5e5f], 1
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
mov eax, 0x100bf498
pop ebx
call fcn.1006dcab
leave
ret

Function at 0x10007c9d
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e60], 0
jne 0x10007cf3
xor ecx, ecx
mov dword [ebp - 0x14], 0x1f04060e
mov dword [ebp - 0x10], 0x11c0102
mov dword [ebp - 0xc], 0x161f061e
mov word [ebp - 8], 0x4140
mov byte [ebp - 6], cl
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100bf4a7], al
cmp ecx, 0xe
jl 0x10007cd6
mov byte [0x100c5e60], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf4a8
call fcn.1006dcab
leave
ret

Function at 0x10007d04
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x100c4370]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x100c5e41], 0
jne 0x10007d96
push ebx
xor ebx, ebx
mov dword [ebp - 0x14], 0x1f04060e
mov dword [ebp - 0x10], 0x11c0102
mov dword [ebp - 0xc], 0x161f061e
mov word [ebp - 8], 0x4240
mov byte [ebp - 6], bl
mov ecx, ebx
mov al, byte [ecx + 0x100bf198]
xor al, byte [ebp + ecx - 0x14]
inc ecx
mov byte [ecx + 0x100bf30f], al
cmp ecx, 0xe
jl 0x10007d40
mov byte [0x100c5e41], 1
call fcn.10003dcc
test al, al
jne 0x10007d95
mov ecx, dword [0x100c57c0]
push esi
push 8
mov edx, ebx
pop esi
mov eax, edx
and eax, 1
dec eax
not eax
and eax, ecx
sar edx, 1
xor edx, eax
dec esi
jne 0x10007d72
add ecx, edx
inc ebx
cmp ebx, 0x100
jl 0x10007d6d
mov dword [0x100c57c0], ecx
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x100bf310
call fcn.1006dcab
leave
ret