joyce8/EMBER2024-capa huggingface dataset:
Function at 0x441d90
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
mov eax, dword [0x539c80]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x53fb4a], 0
jne 0x441ed8
push ebx
push esi
mov esi, dword [0x53ed90]
push edi
lea ecx, [esi + 2]
lea eax, [esi + 1]
imul eax, ecx
imul eax, esi
cdq
mov edi, 0xb
idiv edi
mov ebx, 4
cmp edx, ebx
jne 0x441e09
mov eax, 0x51eb851f
imul esi
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
imul ecx, ecx, 0x64
sub esi, ecx
xor ecx, ecx
lea eax, [esi + 0x141]
mul ebx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004abd49
push eax
call fcn.004acddb
add esp, 8
pop edi
xor eax, eax
pop esi
mov dword [ebp - 0x2c], 0x1a0007
mov dword [ebp - 0x28], 0x190037
mov dword [ebp - 0x24], 0x1c0014
mov dword [ebp - 0x20], 0xb0001
mov dword [ebp - 0x1c], 0x4001c
mov dword [ebp - 0x18], 0x30
mov dword [ebp - 0x14], 0x30005
mov dword [ebp - 0x10], 0x30007
mov dword [ebp - 0xc], 0x36000b
mov word [ebp - 8], ax
pop ebx
movzx ecx, byte [eax + 0x53b360]
xor cx, word [ebp + eax*2 - 0x2c]
add eax, 6
mov word [eax*2 + 0x53baac], cx
movzx ecx, byte [eax + 0x53b35b]
xor cx, word [ebp + eax*2 - 0x36]
mov word [eax*2 + 0x53baae], cx
movzx ecx, byte [eax + 0x53b35c]
xor cx, word [ebp + eax*2 - 0x34]
mov word [eax*2 + 0x53bab0], cx
movzx ecx, byte [eax + 0x53b35d]
xor cx, word [ebp + eax*2 - 0x32]
mov word [eax*2 + 0x53bab2], cx
movzx ecx, byte [eax + 0x53b35e]
xor cx, word [ebp + eax*2 - 0x30]
mov word [eax*2 + 0x53bab4], cx
movzx ecx, byte [eax + 0x53b35f]
xor cx, word [ebp + eax*2 - 0x2e]
mov word [eax*2 + 0x53bab6], cx
cmp eax, 0x12
jl 0x441e51
mov byte [0x53fb4a], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x53bab8
call fcn.004ac57a
mov esp, ebp
pop ebp
ret

Function at 0x441fb0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
mov eax, dword [0x539c80]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x53fb2c], 0
jne 0x442041
xor eax, eax
mov dword [ebp - 0x34], 0x130007
mov dword [ebp - 0x30], 0x1b0006
mov dword [ebp - 0x2c], 0x80051
mov dword [ebp - 0x28], 0xc001b
mov dword [ebp - 0x24], 0x4a0017
mov dword [ebp - 0x20], 0x16000c
mov dword [ebp - 0x1c], 0x10001f
mov dword [ebp - 0x18], 0xa000c
mov dword [ebp - 0x14], 0x24001a
mov dword [ebp - 0x10], 0xf0002
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], 0xb
jmp 0x442020
movzx ecx, byte [eax + 0x53b360]
xor cx, word [ebp + eax*2 - 0x34]
inc eax
mov word [eax*2 + 0x53bcae], cx
cmp eax, 0x17
jl 0x442020
mov byte [0x53fb2c], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x53bcb0
call fcn.004ac57a
mov esp, ebp
pop ebp
ret
Function at 0x442060
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [0x539c80]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x53fb56], 0
jne 0x44211f
xor eax, eax
mov dword [ebp - 0x28], 0x4000a
mov dword [ebp - 0x24], 0x300018
mov dword [ebp - 0x20], 0x1e0018
mov dword [ebp - 0x1c], 0x3d0011
mov dword [ebp - 0x18], 0x30007
mov dword [ebp - 0x14], 0x60002
mov dword [ebp - 0x10], 0xd0009
mov dword [ebp - 0xc], 0x10001c
mov word [ebp - 8], ax
jmp 0x4420c0
movzx ecx, byte [eax + 0x53b360]
xor cx, word [ebp + eax*2 - 0x28]
add eax, 4
mov word [eax*2 + 0x53b874], cx
movzx ecx, byte [eax + 0x53b35d]
xor cx, word [ebp + eax*2 - 0x2e]
mov word [eax*2 + 0x53b876], cx
movzx ecx, byte [eax + 0x53b35e]
xor cx, word [ebp + eax*2 - 0x2c]
mov word [eax*2 + 0x53b878], cx
movzx ecx, byte [eax + 0x53b35f]
xor cx, word [ebp + eax*2 - 0x2a]
mov word [eax*2 + 0x53b87a], cx
cmp eax, 0x10
jl 0x4420c0
mov byte [0x53fb56], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x53b87c
call fcn.004ac57a
mov esp, ebp
pop ebp
ret

Function at 0x442140
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
mov eax, dword [0x539c80]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x53fb2e], 0
jne 0x442247
push ebx
push esi
push edi
pop edi
xor eax, eax
pop esi
mov dword [ebp - 0x38], 0x2002b
mov dword [ebp - 0x34], 0x1000d
mov dword [ebp - 0x30], 0x1c0021
mov dword [ebp - 0x2c], 0x1001d
mov dword [ebp - 0x28], 0x190016
mov dword [ebp - 0x24], 0x37001c
mov dword [ebp - 0x20], 0x90002
mov dword [ebp - 0x1c], 0xa000c
mov dword [ebp - 0x18], 0xf004e
mov dword [ebp - 0x14], 0x2000c
mov dword [ebp - 0x10], 0x90019
mov dword [ebp - 0xc], 0x4d000a
mov word [ebp - 8], ax
pop ebx
lea ecx, [ecx]
movzx ecx, byte [eax + 0x53b360]
xor cx, word [ebp + eax*2 - 0x38]
add eax, 6
mov word [eax*2 + 0x53b634], cx
movzx ecx, byte [eax + 0x53b35b]
xor cx, word [ebp + eax*2 - 0x42]
mov word [eax*2 + 0x53b636], cx
movzx ecx, byte [eax + 0x53b35c]
xor cx, word [ebp + eax*2 - 0x40]
mov word [eax*2 + 0x53b638], cx
movzx ecx, byte [eax + 0x53b35d]
xor cx, word [ebp + eax*2 - 0x3e]
mov word [eax*2 + 0x53b63a], cx
movzx ecx, byte [eax + 0x53b35e]
xor cx, word [ebp + eax*2 - 0x3c]
mov word [eax*2 + 0x53b63c], cx
movzx ecx, byte [eax + 0x53b35f]
xor cx, word [ebp + eax*2 - 0x3a]
mov word [eax*2 + 0x53b63e], cx
cmp eax, 0x18
jl 0x4421c0
mov byte [0x53fb2e], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x53b640
call fcn.004ac57a
mov esp, ebp
pop ebp
ret
Function at 0x442260
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
mov eax, dword [0x539c80]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x53fb60], 0
jne 0x442343
xor eax, eax
mov dword [ebp - 0x30], 0x27
mov dword [ebp - 0x2c], 0xe000d
mov dword [ebp - 0x28], 0xb0005
mov dword [ebp - 0x24], 0x70020
mov dword [ebp - 0x20], 0x5001e
mov dword [ebp - 0x1c], 0x6001b
mov dword [ebp - 0x18], 0xa0039
mov dword [ebp - 0x14], 0x1001b
mov dword [ebp - 0x10], 0xd000f
mov dword [ebp - 0xc], 0x4b0057
mov word [ebp - 8], ax
lea esp, [esp]
movzx ecx, byte [eax + 0x53b360]
xor cx, word [ebp + eax*2 - 0x30]
add eax, 5
mov word [eax*2 + 0x53b47e], cx
movzx ecx, byte [eax + 0x53b35c]
xor cx, word [ebp + eax*2 - 0x38]
mov word [eax*2 + 0x53b480], cx
movzx ecx, byte [eax + 0x53b35d]
xor cx, word [ebp + eax*2 - 0x36]
mov word [eax*2 + 0x53b482], cx
movzx ecx, byte [eax + 0x53b35e]
xor cx, word [ebp + eax*2 - 0x34]
mov word [eax*2 + 0x53b484], cx
movzx ecx, byte [eax + 0x53b35f]
xor cx, word [ebp + eax*2 - 0x32]
mov word [eax*2 + 0x53b486], cx
cmp eax, 0x14
jl 0x4422d0
mov byte [0x53fb60], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x53b488
call fcn.004ac57a
mov esp, ebp
pop ebp
ret

Function at 0x442360
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
mov eax, dword [0x539c80]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x53fb5e], 0
jne 0x442453
mov dword [ebp - 0x38], 0x6002a
mov dword [ebp - 0x34], 0x30029
mov dword [ebp - 0x30], 0x1001d
mov dword [ebp - 0x2c], 0x30011
mov dword [ebp - 0x28], 0xf0007
mov dword [ebp - 0x24], 0xa0039
mov dword [ebp - 0x20], 0x16001f
mov dword [ebp - 0x1c], 0x5001c
mov dword [ebp - 0x18], 0x240002
mov dword [ebp - 0x14], 0x60008
mov dword [ebp - 0x10], 0x1e001a
mov dword [ebp - 0xc], 0x570017
mov dword [ebp - 8], 0x4f
xor eax, eax
lea ebx, [ebx]
movzx ecx, byte [eax + 0x53b360]
xor cx, word [ebp + eax*2 - 0x38]
add eax, 5
mov word [eax*2 + 0x53bbd6], cx
movzx ecx, byte [eax + 0x53b35c]
xor cx, word [ebp + eax*2 - 0x40]
mov word [eax*2 + 0x53bbd8], cx
movzx ecx, byte [eax + 0x53b35d]
xor cx, word [ebp + eax*2 - 0x3e]
mov word [eax*2 + 0x53bbda], cx
movzx ecx, byte [eax + 0x53b35e]
xor cx, word [ebp + eax*2 - 0x3c]
mov word [eax*2 + 0x53bbdc], cx
movzx ecx, byte [eax + 0x53b35f]
xor cx, word [ebp + eax*2 - 0x3a]
mov word [eax*2 + 0x53bbde], cx
cmp eax, 0x19
jl 0x4423e0
mov byte [0x53fb5e], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x53bbe0
call fcn.004ac57a
mov esp, ebp
pop ebp
ret
Function at 0x442470
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3c
mov eax, dword [0x539c80]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x53fb5a], 0
jne 0x44254b
push esi
push edi
pop edi
mov dword [ebp - 0x3c], 0x27
mov dword [ebp - 0x38], 0xe000d
mov dword [ebp - 0x34], 0xb0005
mov dword [ebp - 0x30], 0xa0026
mov dword [ebp - 0x2c], 0xf0001
mov dword [ebp - 0x28], 0x7000e
mov dword [ebp - 0x24], 0x1a0028
mov dword [ebp - 0x20], 0x49
mov dword [ebp - 0x1c], 0xc0001
mov dword [ebp - 0x18], 0x5001e
mov dword [ebp - 0x14], 0x4c0001
mov dword [ebp - 0x10], 0x15000b
mov dword [ebp - 0xc], 0x180006
mov dword [ebp - 8], 0x1b
xor eax, eax
pop esi
jmp 0x442500
movzx ecx, byte [eax + 0x53b360]
xor cx, word [ebp + eax*2 - 0x3c]
add eax, 3
mov word [eax*2 + 0x53b8a6], cx
movzx ecx, byte [eax + 0x53b35e]
xor cx, word [ebp + eax*2 - 0x40]
mov word [eax*2 + 0x53b8a8], cx
movzx ecx, byte [eax + 0x53b35f]
xor cx, word [ebp + eax*2 - 0x3e]
mov word [eax*2 + 0x53b8aa], cx
cmp eax, 0x1b
jl 0x442500
mov byte [0x53fb5a], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x53b8ac
call fcn.004ac57a
mov esp, ebp
pop ebp
ret

Function at 0x442650
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x40
mov eax, dword [0x539c80]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x53fb2d], 0
jne 0x44273f
push esi
xor eax, eax
mov dword [ebp - 0x40], 0x1d0028
mov dword [ebp - 0x3c], 0x40007
mov dword [ebp - 0x38], 0x1e0004
mov dword [ebp - 0x34], 0x100022
mov dword [ebp - 0x30], 0x1c001a
mov dword [ebp - 0x2c], 0xf0006
mov dword [ebp - 0x28], 0x50008
mov dword [ebp - 0x24], 0x32000c
mov dword [ebp - 0x20], 0x5000f
mov dword [ebp - 0x1c], 0xe0018
mov dword [ebp - 0x18], 0xa0055
mov dword [ebp - 0x14], 0x4000f
mov dword [ebp - 0x10], 0xe0003
mov dword [ebp - 0xc], 0x50000b
mov word [ebp - 8], ax
pop esi
jmp 0x4426e0
movzx ecx, byte [eax + 0x53b360]
xor cx, word [ebp + eax*2 - 0x40]
add eax, 4
mov word [eax*2 + 0x53bad8], cx
movzx ecx, byte [eax + 0x53b35d]
xor cx, word [ebp + eax*2 - 0x46]
mov word [eax*2 + 0x53bada], cx
movzx ecx, byte [eax + 0x53b35e]
xor cx, word [ebp + eax*2 - 0x44]
mov word [eax*2 + 0x53badc], cx
movzx ecx, byte [eax + 0x53b35f]
xor cx, word [ebp + eax*2 - 0x42]
mov word [eax*2 + 0x53bade], cx
cmp eax, 0x1c
jl 0x4426e0
mov byte [0x53fb2d], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x53bae0
call fcn.004ac57a
mov esp, ebp
pop ebp
ret
Function at 0x442760
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
mov eax, dword [0x539c80]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [0x53ed90]
mov eax, esi
imul eax, esi
imul eax, esi
cdq
mov ecx, 0xe
idiv ecx
push edi
lea edi, [ecx - 0xa]
cmp edx, 3
jne 0x4427c3
mov eax, 0x51eb851f
imul esi
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
imul ecx, ecx, 0x64
sub esi, ecx
xor ecx, ecx
lea eax, [esi + 0x63]
mul edi
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004abd49
push eax
call fcn.004acddb
add esp, 8
cmp byte [0x53fb5f], 0
jne 0x442887
xor eax, eax
mov dword [ebp - 0x20], 0x360042
mov dword [ebp - 0x1c], 0x30004
mov dword [ebp - 0x18], 0xb0027
mov dword [ebp - 0x14], 0x110000
mov dword [ebp - 0x10], 0x5001a
mov dword [ebp - 0xc], 0x5e0001
mov word [ebp - 8], ax
movzx ecx, byte [eax + 0x53b360]
xor cx, word [ebp + eax*2 - 0x20]
add eax, 6
mov word [eax*2 + 0x53b7c8], cx
movzx ecx, byte [eax + 0x53b35b]
xor cx, word [ebp + eax*2 - 0x2a]
mov word [eax*2 + 0x53b7ca], cx
movzx ecx, byte [eax + 0x53b35c]
xor cx, word [ebp + eax*2 - 0x28]
mov word [eax*2 + 0x53b7cc], cx
movzx ecx, byte [eax + 0x53b35d]
xor cx, word [ebp + eax*2 - 0x26]
mov word [eax*2 + 0x53b7ce], cx
movzx ecx, byte [eax + 0x53b35e]
xor cx, word [ebp + eax*2 - 0x24]
mov word [eax*2 + 0x53b7d0], cx
movzx ecx, byte [eax + 0x53b35f]
xor cx, word [ebp + eax*2 - 0x22]
mov word [eax*2 + 0x53b7d2], cx
cmp eax, 0xc
jl 0x442800
mov byte [0x53fb5f], 1
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
mov eax, 0x53b7d4
pop esi
call fcn.004ac57a
mov esp, ebp
pop ebp
ret

Function at 0x4428a0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [0x539c80]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x53fb39], 0
jne 0x442921
xor eax, eax
mov dword [ebp - 0x28], 0x4000a
mov dword [ebp - 0x24], 0x300018
mov dword [ebp - 0x20], 0x1a0002
mov dword [ebp - 0x1c], 0x3d0016
mov dword [ebp - 0x18], 0x120016
mov dword [ebp - 0x14], 0x6000c
mov dword [ebp - 0x10], 0x16001d
mov dword [ebp - 0xc], 0xb0000
mov dword [ebp - 8], eax
jmp 0x442900
movzx ecx, byte [eax + 0x53b360]
xor cx, word [ebp + eax*2 - 0x28]
inc eax
mov word [eax*2 + 0x53bc12], cx
cmp eax, 0x11
jl 0x442900
mov byte [0x53fb39], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x53bc14
call fcn.004ac57a
mov esp, ebp
pop ebp
ret
Function at 0x442940
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
mov eax, dword [0x539c80]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x53fb51], 0
jne 0x442a73
push esi
xor eax, eax
push edi
mov dword [ebp - 0x38], 0x4000a
mov dword [ebp - 0x34], 0x300018
mov dword [ebp - 0x30], 4
mov dword [ebp - 0x2c], 0x1a0017
mov dword [ebp - 0x28], 0xf0003
mov dword [ebp - 0x24], 0x17000c
mov dword [ebp - 0x20], 0x60008
mov dword [ebp - 0x1c], 0x10036
mov dword [ebp - 0x18], 0xa0016
mov dword [ebp - 0x14], 0x1b0008
mov dword [ebp - 0x10], 0x50001
mov dword [ebp - 0xc], 0x30001
mov word [ebp - 8], ax
lea esp, [esp]
movzx ecx, byte [eax + 0x53b360]
xor cx, word [ebp + eax*2 - 0x38]
add eax, 6
mov word [eax*2 + 0x53ba78], cx
movzx ecx, byte [eax + 0x53b35b]
xor cx, word [ebp + eax*2 - 0x42]
mov word [eax*2 + 0x53ba7a], cx
movzx ecx, byte [eax + 0x53b35c]
xor cx, word [ebp + eax*2 - 0x40]
mov word [eax*2 + 0x53ba7c], cx
movzx ecx, byte [eax + 0x53b35d]
xor cx, word [ebp + eax*2 - 0x3e]
mov word [eax*2 + 0x53ba7e], cx
movzx ecx, byte [eax + 0x53b35e]
xor cx, word [ebp + eax*2 - 0x3c]
mov word [eax*2 + 0x53ba80], cx
movzx ecx, byte [eax + 0x53b35f]
xor cx, word [ebp + eax*2 - 0x3a]
mov word [eax*2 + 0x53ba82], cx
cmp eax, 0x18
jl 0x4429c0
call fcn.00440aa0
test al, al
jne 0x442a6a
mov esi, dword [0x53ed90]
mov ecx, 1
cmp esi, ecx
jle 0x442a64
mov eax, esi
cdq
idiv ecx
inc ecx
add ecx, edx
cmp ecx, esi
jl 0x442a58
mov dword [0x53ed90], ecx
pop edi
mov byte [0x53fb51], 1
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x53ba84
call fcn.004ac57a
mov esp, ebp
pop ebp
ret
Function at 0x442b70
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44
mov eax, dword [0x539c80]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x53fb2b], 0
jne 0x442ce0
push ebx
push esi
push edi
mov edi, 0xc
xor eax, eax
mov dword [ebp - 0x44], 0x130007
mov dword [ebp - 0x40], 0x1b0006
mov dword [ebp - 0x3c], 0x80051
mov dword [ebp - 0x38], 0xc001b
mov dword [ebp - 0x34], 0x4a0017
mov dword [ebp - 0x30], 0x16000c
mov dword [ebp - 0x2c], 0x10001f
mov dword [ebp - 0x28], 0xa000c
mov dword [ebp - 0x24], 0x24001a
mov dword [ebp - 0x20], 0xf0002
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], 0x4d000b
mov dword [ebp - 0x14], 0x40009
lea ebx, [edi - 8]
mov dword [ebp - 0x10], 0x50001d
mov dword [ebp - 0xc], 0x560054
mov word [ebp - 8], ax
jmp 0x442c10
movzx ecx, byte [eax + 0x53b360]
xor cx, word [ebp + eax*2 - 0x44]
add eax, 6
mov word [eax*2 + 0x53b578], cx
movzx ecx, byte [eax + 0x53b35b]
xor cx, word [ebp + eax*2 - 0x4e]
mov word [eax*2 + 0x53b57a], cx
movzx ecx, byte [eax + 0x53b35c]
xor cx, word [ebp + eax*2 - 0x4c]
mov word [eax*2 + 0x53b57c], cx
movzx ecx, byte [eax + 0x53b35d]
xor cx, word [ebp + eax*2 - 0x4a]
mov word [eax*2 + 0x53b57e], cx
movzx ecx, byte [eax + 0x53b35e]
xor cx, word [ebp + eax*2 - 0x48]
mov word [eax*2 + 0x53b580], cx
movzx ecx, byte [eax + 0x53b35f]
xor cx, word [ebp + eax*2 - 0x46]
mov word [eax*2 + 0x53b582], cx
cmp eax, 0x1e
jl 0x442c10
mov esi, dword [0x53ed90]
mov eax, esi
imul eax, esi
cdq
idiv edi
mov byte [0x53fb2b], 1
cmp edx, 0xa
jne 0x442cdd
mov eax, 0x51eb851f
imul esi
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
imul ecx, ecx, 0x64
sub esi, ecx
xor ecx, ecx
lea eax, [esi + 0x7b]
mul ebx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004abd49
push eax
call fcn.004acddb
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x53b584
call fcn.004ac57a
mov esp, ebp
pop ebp
ret
Function at 0x442dd0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
mov eax, dword [0x539c80]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x53fb2f], 0
jne 0x442ecf
push ebx
push esi
push edi
pop edi
xor eax, eax
pop esi
mov dword [ebp - 0x48], 1
mov dword [ebp - 0x44], 0x1a
mov dword [ebp - 0x40], 0x310003
mov dword [ebp - 0x3c], 0xd0011
mov dword [ebp - 0x38], 0x7001e
mov dword [ebp - 0x34], 0xd001a
mov dword [ebp - 0x30], 0x10004
mov dword [ebp - 0x2c], 0x100008
mov dword [ebp - 0x28], 0x70007
mov dword [ebp - 0x24], 0x34000a
mov dword [ebp - 0x20], 0x11
mov dword [ebp - 0x1c], 0x320002
mov dword [ebp - 0x18], 0xe001d
mov dword [ebp - 0x14], 0x190008
mov dword [ebp - 0x10], 0x160011
mov dword [ebp - 0xc], 0x120018
mov word [ebp - 8], ax
pop ebx
lea esp, [esp]
movzx ecx, byte [eax + 0x53b360]
xor cx, word [ebp + eax*2 - 0x48]
add eax, 4
mov word [eax*2 + 0x53b988], cx
movzx ecx, byte [eax + 0x53b35d]
xor cx, word [ebp + eax*2 - 0x4e]
mov word [eax*2 + 0x53b98a], cx
movzx ecx, byte [eax + 0x53b35e]
xor cx, word [ebp + eax*2 - 0x4c]
mov word [eax*2 + 0x53b98c], cx
movzx ecx, byte [eax + 0x53b35f]
xor cx, word [ebp + eax*2 - 0x4a]
mov word [eax*2 + 0x53b98e], cx
cmp eax, 0x20
jl 0x442e70
mov byte [0x53fb2f], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x53b990
call fcn.004ac57a
mov esp, ebp
pop ebp
ret

Function at 0x442ef0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
mov eax, dword [0x539c80]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x53fb2a], 0
jne 0x442fc3
mov dword [ebp - 0x24], 0x27
mov dword [ebp - 0x20], 0xe000d
mov dword [ebp - 0x1c], 0xb0005
mov dword [ebp - 0x18], 0xa0026
mov dword [ebp - 0x14], 0xf0001
mov dword [ebp - 0x10], 0x7000e
mov dword [ebp - 0xc], 0x1a0028
mov dword [ebp - 8], 0x53
xor ecx, ecx
jmp 0x442f50
movzx eax, byte [ecx + 0x53b360]
xor ax, word [ebp + ecx*2 - 0x24]
add ecx, 5
mov word [ecx*2 + 0x53bb12], ax
movzx eax, byte [ecx + 0x53b35c]
xor ax, word [ebp + ecx*2 - 0x2c]
mov word [ecx*2 + 0x53bb14], ax
movzx eax, byte [ecx + 0x53b35d]
xor ax, word [ebp + ecx*2 - 0x2a]
mov word [ecx*2 + 0x53bb16], ax
movzx eax, byte [ecx + 0x53b35e]
xor ax, word [ebp + ecx*2 - 0x28]
mov word [ecx*2 + 0x53bb18], ax
movzx eax, byte [ecx + 0x53b35f]
xor ax, word [ebp + ecx*2 - 0x26]
mov word [ecx*2 + 0x53bb1a], ax
cmp ecx, 0xf
jl 0x442f50
mov byte [0x53fb2a], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x53bb1c
call fcn.004ac57a
mov esp, ebp
pop ebp
ret
Function at 0x442fe0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
mov eax, dword [0x539c80]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x53fb35], 0
jne 0x4430b3
mov dword [ebp - 0x24], 0x1f000d
mov dword [ebp - 0x20], 0x80009
mov dword [ebp - 0x1c], 0x4e0014
mov dword [ebp - 0x18], 0x100002
mov dword [ebp - 0x14], 0x9001c
mov dword [ebp - 0x10], 0xd004f
mov dword [ebp - 0xc], 0xf000c
mov dword [ebp - 8], 0xc
xor eax, eax
jmp 0x443040
movzx ecx, byte [eax + 0x53b360]
xor cx, word [ebp + eax*2 - 0x24]
add eax, 5
mov word [eax*2 + 0x53ba5a], cx
movzx ecx, byte [eax + 0x53b35c]
xor cx, word [ebp + eax*2 - 0x2c]
mov word [eax*2 + 0x53ba5c], cx
movzx ecx, byte [eax + 0x53b35d]
xor cx, word [ebp + eax*2 - 0x2a]
mov word [eax*2 + 0x53ba5e], cx
movzx ecx, byte [eax + 0x53b35e]
xor cx, word [ebp + eax*2 - 0x28]
mov word [eax*2 + 0x53ba60], cx
movzx ecx, byte [eax + 0x53b35f]
xor cx, word [ebp + eax*2 - 0x26]
mov word [eax*2 + 0x53ba62], cx
cmp eax, 0xf
jl 0x443040
mov byte [0x53fb35], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x53ba64
call fcn.004ac57a
mov esp, ebp
pop ebp
ret

Function at 0x443230
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
mov eax, dword [0x539c80]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [0x53ed90]
lea eax, [esi + 1]
imul eax, eax
imul eax, esi
imul eax, esi
and eax, 0x80000003
jns 0x44325f
dec eax
or eax, 0xfffffffc
inc eax
je 0x44329c
mov eax, 0x51eb851f
imul esi
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
imul ecx, ecx, 0x64
sub esi, ecx
xor ecx, ecx
lea eax, [esi + 0x141]
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004abd49
push eax
call fcn.004acddb
add esp, 8
cmp byte [0x53fb46], 0
jne 0x443397
xor eax, eax
mov dword [ebp - 0x38], 0x130007
mov dword [ebp - 0x34], 0x1b0006
mov dword [ebp - 0x30], 0xf0051
mov dword [ebp - 0x2c], 0xe001e
mov dword [ebp - 0x28], 0x9001c
mov dword [ebp - 0x24], 0x2004f
mov dword [ebp - 0x20], 0x1000e
mov dword [ebp - 0x1c], 0x17000c
mov dword [ebp - 0x18], 0x49001d
mov dword [ebp - 0x14], 0xe0009
mov dword [ebp - 0x10], 0x5001b
mov dword [ebp - 0xc], 0x9000b
mov word [ebp - 8], ax
jmp 0x443310
movzx ecx, byte [eax + 0x53b360]
xor cx, word [ebp + eax*2 - 0x38]
add eax, 6
mov word [eax*2 + 0x53b94c], cx
movzx ecx, byte [eax + 0x53b35b]
xor cx, word [ebp + eax*2 - 0x42]
mov word [eax*2 + 0x53b94e], cx
movzx ecx, byte [eax + 0x53b35c]
xor cx, word [ebp + eax*2 - 0x40]
mov word [eax*2 + 0x53b950], cx
movzx ecx, byte [eax + 0x53b35d]
xor cx, word [ebp + eax*2 - 0x3e]
mov word [eax*2 + 0x53b952], cx
movzx ecx, byte [eax + 0x53b35e]
xor cx, word [ebp + eax*2 - 0x3c]
mov word [eax*2 + 0x53b954], cx
movzx ecx, byte [eax + 0x53b35f]
xor cx, word [ebp + eax*2 - 0x3a]
mov word [eax*2 + 0x53b956], cx
cmp eax, 0x18
jl 0x443310
mov byte [0x53fb46], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x53b958
pop esi
call fcn.004ac57a
mov esp, ebp
pop ebp
ret
Function at 0x443480
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
mov eax, dword [0x539c80]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x53fb43], 0
jne 0x4435b6
mov ecx, dword [0x53ed90]
mov eax, ecx
imul eax, ecx
push ebx
push esi
cdq
mov esi, 0x17
idiv esi
push edi
cmp edx, 0x16
jne 0x4434c8
mov eax, 1
test ecx, ecx
cmove ecx, eax
mov dword [0x53ed90], ecx
xor eax, eax
mov dword [ebp - 8], eax
lea eax, [ecx + 1]
imul eax, ecx
mov ebx, 4
cdq
lea edi, [ebx + 8]
idiv edi
mov dword [ebp - 0x28], 0x4000a
mov dword [ebp - 0x24], 0x300018
mov dword [ebp - 0x20], 0x1e0018
mov dword [ebp - 0x1c], 0x3d0011
mov dword [ebp - 0x18], 0x120016
mov dword [ebp - 0x14], 0x6000c
mov dword [ebp - 0x10], 0x16001d
mov dword [ebp - 0xc], 0xb0000
cmp edx, ebx
jne 0x443536
mov esi, 1
mov eax, esi
mov edx, 0x51
dec edx
lea ecx, [eax + esi]
lea esi, [eax]
mov eax, ecx
jns 0x443526
mov dword [0x53ed90], ecx
xor edx, edx
jmp 0x443540
movzx eax, byte [edx + 0x53b360]
xor ax, word [ebp + edx*2 - 0x28]
inc edx
mov word [edx*2 + 0x53b672], ax
cmp edx, 0x11
jl 0x443540
imul ecx, ecx
mov eax, ecx
cdq
idiv edi
mov byte [0x53fb43], 1
cmp edx, 0xa
jne 0x4435b3
mov eax, dword [0x51fdcc]
movq xmm0, qword [str.2K8IBAHr6vE]
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x34]
movq qword [ebp - 0x34], xmm0
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x443590
xor ecx, ecx
sub eax, edx
mul ebx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004abd49
push eax
call fcn.004acddb
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x53b674
call fcn.004ac57a
mov esp, ebp
pop ebp
ret

Function at 0x4436d0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x40
mov eax, dword [0x539c80]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x53fb33], 0
jne 0x4437bf
push esi
push edi
xor eax, eax
pop edi
mov dword [ebp - 0x40], 0x4000a
mov dword [ebp - 0x3c], 0x300018
mov dword [ebp - 0x38], 0x70017
mov dword [ebp - 0x34], 0x110000
mov dword [ebp - 0x30], 0x350007
mov dword [ebp - 0x2c], 0xd0006
mov dword [ebp - 0x28], 0x70007
mov dword [ebp - 0x24], 0x10000a
mov dword [ebp - 0x20], 0x60007
mov dword [ebp - 0x1c], 0x340003
mov dword [ebp - 0x18], 0x90011
mov dword [ebp - 0x14], 0x8001a
mov dword [ebp - 0x10], 0x1f000c
mov dword [ebp - 0xc], 0x14000a
mov word [ebp - 8], ax
pop esi
lea esp, [esp]
movzx ecx, byte [eax + 0x53b360]
xor cx, word [ebp + eax*2 - 0x40]
add eax, 4
mov word [eax*2 + 0x53bc60], cx
movzx ecx, byte [eax + 0x53b35d]
xor cx, word [ebp + eax*2 - 0x46]
mov word [eax*2 + 0x53bc62], cx
movzx ecx, byte [eax + 0x53b35e]
xor cx, word [ebp + eax*2 - 0x44]
mov word [eax*2 + 0x53bc64], cx
movzx ecx, byte [eax + 0x53b35f]
xor cx, word [ebp + eax*2 - 0x42]
mov word [eax*2 + 0x53bc66], cx
cmp eax, 0x1c
jl 0x443760
mov byte [0x53fb33], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov eax, 0x53bc68
call fcn.004ac57a
mov esp, ebp
pop ebp
ret