joyce8/EMBER2024-capa huggingface dataset:
Function at 0x46cb60
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x525481
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x587978]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
xor edi, edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x10], edi
mov eax, dword [0x587944]
mov edx, dword [eax + 0xc]
mov ecx, 0x587944
call edx
add eax, 0x10
mov dword [esi], eax
mov dword [ebp - 4], edi
mov eax, dword [esi]
mov ecx, 1
mov dword [ebp - 0x10], ecx
sub ecx, dword [eax - 4]
mov eax, dword [eax - 8]
mov edi, 0x29
sub eax, edi
or eax, ecx
jge 0x46cbcb
push edi
mov ecx, esi
call fcn.00406d20
mov eax, dword [esi]
cmp dword [eax - 8], edi
jge 0x46cbdc
push 0x80070057
call fcn.00406170
mov dword [eax - 0xc], edi
mov ecx, dword [esi]
xor edx, edx
mov word [ecx + 0x52], dx
mov ecx, 0x53c098
sub ecx, eax
mov edx, edi
mov ebx, 0xe620
xor bx, word [ecx + eax]
add eax, 2
dec edx
mov word [eax - 2], bx
jne 0x46cbf0
mov eax, dword [esi]
cmp dword [eax - 8], edi
jl 0x46cbd2
mov dword [eax - 0xc], edi
mov eax, dword [esi]
xor ecx, ecx
mov word [eax + 0x52], cx
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x46cc30
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x525481
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x587978]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
xor edi, edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x10], edi
mov eax, dword [0x587944]
mov edx, dword [eax + 0xc]
mov ecx, 0x587944
call edx
add eax, 0x10
mov dword [esi], eax
mov dword [ebp - 4], edi
mov eax, dword [esi]
mov ecx, 1
mov dword [ebp - 0x10], ecx
sub ecx, dword [eax - 4]
mov eax, dword [eax - 8]
mov edi, 0xc
sub eax, edi
or eax, ecx
jge 0x46cc9b
push edi
mov ecx, esi
call fcn.00406d20
mov eax, dword [esi]
cmp dword [eax - 8], edi
jge 0x46ccac
push 0x80070057
call fcn.00406170
mov dword [eax - 0xc], edi
mov ecx, dword [esi]
xor edx, edx
mov word [ecx + 0x18], dx
mov ecx, 0x53c0ec
sub ecx, eax
mov edx, edi
mov ebx, 0xe620
xor bx, word [ecx + eax]
add eax, 2
dec edx
mov word [eax - 2], bx
jne 0x46ccc0
mov eax, dword [esi]
cmp dword [eax - 8], edi
jl 0x46cca2
mov dword [eax - 0xc], edi
mov eax, dword [esi]
xor ecx, ecx
mov word [eax + 0x18], cx
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x46cd00
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x525481
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x587978]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
xor edi, edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x10], edi
mov eax, dword [0x587944]
mov edx, dword [eax + 0xc]
mov ecx, 0x587944
call edx
add eax, 0x10
mov dword [esi], eax
mov dword [ebp - 4], edi
mov eax, dword [esi]
mov ecx, 1
mov dword [ebp - 0x10], ecx
sub ecx, dword [eax - 4]
mov eax, dword [eax - 8]
mov edi, 0xc
sub eax, edi
or eax, ecx
jge 0x46cd6b
push edi
mov ecx, esi
call fcn.00406d20
mov eax, dword [esi]
cmp dword [eax - 8], edi
jge 0x46cd7c
push 0x80070057
call fcn.00406170
mov dword [eax - 0xc], edi
mov ecx, dword [esi]
xor edx, edx
mov word [ecx + 0x18], dx
mov ecx, 0x53c104
sub ecx, eax
mov edx, edi
mov ebx, 0xe620
xor bx, word [ecx + eax]
add eax, 2
dec edx
mov word [eax - 2], bx
jne 0x46cd90
mov eax, dword [esi]
cmp dword [eax - 8], edi
jl 0x46cd72
mov dword [eax - 0xc], edi
mov eax, dword [esi]
xor ecx, ecx
mov word [eax + 0x18], cx
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x46cdd0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x525481
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x587978]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
xor edi, edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x10], edi
mov eax, dword [0x587944]
mov edx, dword [eax + 0xc]
mov ecx, 0x587944
call edx
add eax, 0x10
mov dword [esi], eax
mov dword [ebp - 4], edi
mov eax, dword [esi]
mov ecx, 1
mov dword [ebp - 0x10], ecx
sub ecx, dword [eax - 4]
mov eax, dword [eax - 8]
mov edi, 0x20
sub eax, edi
or eax, ecx
jge 0x46ce3b
push edi
mov ecx, esi
call fcn.00406d20
mov eax, dword [esi]
cmp dword [eax - 8], edi
jge 0x46ce4c
push 0x80070057
call fcn.00406170
mov dword [eax - 0xc], edi
mov ecx, dword [esi]
xor edx, edx
mov word [ecx + 0x40], dx
mov ecx, 0x53c160
sub ecx, eax
mov edx, edi
mov ebx, 0xe620
xor bx, word [ecx + eax]
add eax, 2
dec edx
mov word [eax - 2], bx
jne 0x46ce60
mov eax, dword [esi]
cmp dword [eax - 8], edi
jl 0x46ce42
mov dword [eax - 0xc], edi
mov eax, dword [esi]
xor ecx, ecx
mov word [eax + 0x40], cx
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x46cea0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x525481
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x587978]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
xor edi, edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x10], edi
mov eax, dword [0x587944]
mov edx, dword [eax + 0xc]
mov ecx, 0x587944
call edx
add eax, 0x10
mov dword [esi], eax
mov dword [ebp - 4], edi
mov eax, dword [esi]
mov ecx, 1
mov dword [ebp - 0x10], ecx
sub ecx, dword [eax - 4]
mov eax, dword [eax - 8]
mov edi, 0x41
sub eax, edi
or eax, ecx
jge 0x46cf0b
push edi
mov ecx, esi
call fcn.00406d20
mov eax, dword [esi]
cmp dword [eax - 8], edi
jge 0x46cf1c
push 0x80070057
call fcn.00406170
mov dword [eax - 0xc], edi
mov ecx, dword [esi]
xor edx, edx
mov word [ecx + 0x82], dx
mov ecx, 0x53c1a0
sub ecx, eax
mov edx, edi
mov ebx, 0xe620
xor bx, word [ecx + eax]
add eax, 2
dec edx
mov word [eax - 2], bx
jne 0x46cf33
mov eax, dword [esi]
cmp dword [eax - 8], edi
jl 0x46cf12
mov dword [eax - 0xc], edi
mov eax, dword [esi]
xor ecx, ecx
mov word [eax + 0x82], cx
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x46cf70
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x525481
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x587978]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
xor edi, edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x10], edi
mov eax, dword [0x587944]
mov edx, dword [eax + 0xc]
mov ecx, 0x587944
call edx
add eax, 0x10
mov dword [esi], eax
mov dword [ebp - 4], edi
mov eax, dword [esi]
mov ecx, 1
mov dword [ebp - 0x10], ecx
sub ecx, dword [eax - 4]
mov eax, dword [eax - 8]
mov edi, 0x24
sub eax, edi
or eax, ecx
jge 0x46cfdb
push edi
mov ecx, esi
call fcn.00406d20
mov eax, dword [esi]
cmp dword [eax - 8], edi
jge 0x46cfec
push 0x80070057
call fcn.00406170
mov dword [eax - 0xc], edi
mov ecx, dword [esi]
xor edx, edx
mov word [ecx + 0x48], dx
mov ecx, 0x53c228
sub ecx, eax
mov edx, edi
mov ebx, 0xe620
xor bx, word [ecx + eax]
add eax, 2
dec edx
mov word [eax - 2], bx
jne 0x46d000
mov eax, dword [esi]
cmp dword [eax - 8], edi
jl 0x46cfe2
mov dword [eax - 0xc], edi
mov eax, dword [esi]
xor ecx, ecx
mov word [eax + 0x48], cx
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x46d040
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x525481
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x587978]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
xor edi, edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x10], edi
mov eax, dword [0x587944]
mov edx, dword [eax + 0xc]
mov ecx, 0x587944
call edx
add eax, 0x10
mov dword [esi], eax
mov dword [ebp - 4], edi
mov eax, dword [esi]
mov ecx, 1
mov dword [ebp - 0x10], ecx
sub ecx, dword [eax - 4]
mov eax, dword [eax - 8]
mov edi, 0x22
sub eax, edi
or eax, ecx
jge 0x46d0ab
push edi
mov ecx, esi
call fcn.00406d20
mov eax, dword [esi]
cmp dword [eax - 8], edi
jge 0x46d0bc
push 0x80070057
call fcn.00406170
mov dword [eax - 0xc], edi
mov ecx, dword [esi]
xor edx, edx
mov word [ecx + 0x44], dx
mov ecx, 0x53c270
sub ecx, eax
mov edx, edi
mov ebx, 0xe620
xor bx, word [ecx + eax]
add eax, 2
dec edx
mov word [eax - 2], bx
jne 0x46d0d0
mov eax, dword [esi]
cmp dword [eax - 8], edi
jl 0x46d0b2
mov dword [eax - 0xc], edi
mov eax, dword [esi]
xor ecx, ecx
mov word [eax + 0x44], cx
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x46d110
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x525481
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x587978]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
xor edi, edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x10], edi
mov eax, dword [0x587944]
mov edx, dword [eax + 0xc]
mov ecx, 0x587944
call edx
add eax, 0x10
mov dword [esi], eax
mov dword [ebp - 4], edi
mov eax, dword [esi]
mov ecx, 1
mov dword [ebp - 0x10], ecx
sub ecx, dword [eax - 4]
mov eax, dword [eax - 8]
mov edi, 0x39
sub eax, edi
or eax, ecx
jge 0x46d17b
push edi
mov ecx, esi
call fcn.00406d20
mov eax, dword [esi]
cmp dword [eax - 8], edi
jge 0x46d18c
push 0x80070057
call fcn.00406170
mov dword [eax - 0xc], edi
mov ecx, dword [esi]
xor edx, edx
mov word [ecx + 0x72], dx
mov ecx, 0x53c2b8
sub ecx, eax
mov edx, edi
mov ebx, 0xe620
xor bx, word [ecx + eax]
add eax, 2
dec edx
mov word [eax - 2], bx
jne 0x46d1a0
mov eax, dword [esi]
cmp dword [eax - 8], edi
jl 0x46d182
mov dword [eax - 0xc], edi
mov eax, dword [esi]
xor ecx, ecx
mov word [eax + 0x72], cx
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x46d1e0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x525481
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x587978]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
xor edi, edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x10], edi
mov eax, dword [0x587944]
mov edx, dword [eax + 0xc]
mov ecx, 0x587944
call edx
add eax, 0x10
mov dword [esi], eax
mov dword [ebp - 4], edi
mov eax, dword [esi]
mov ecx, 1
mov dword [ebp - 0x10], ecx
sub ecx, dword [eax - 4]
mov eax, dword [eax - 8]
mov edi, 0x33
sub eax, edi
or eax, ecx
jge 0x46d24b
push edi
mov ecx, esi
call fcn.00406d20
mov eax, dword [esi]
cmp dword [eax - 8], edi
jge 0x46d25c
push 0x80070057
call fcn.00406170
mov dword [eax - 0xc], edi
mov ecx, dword [esi]
xor edx, edx
mov word [ecx + 0x66], dx
mov ecx, 0x53c330
sub ecx, eax
mov edx, edi
mov ebx, 0xe620
xor bx, word [ecx + eax]
add eax, 2
dec edx
mov word [eax - 2], bx
jne 0x46d270
mov eax, dword [esi]
cmp dword [eax - 8], edi
jl 0x46d252
mov dword [eax - 0xc], edi
mov eax, dword [esi]
xor ecx, ecx
mov word [eax + 0x66], cx
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x46d2b0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x525481
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x587978]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
xor edi, edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x10], edi
mov eax, dword [0x587944]
mov edx, dword [eax + 0xc]
mov ecx, 0x587944
call edx
add eax, 0x10
mov dword [esi], eax
mov dword [ebp - 4], edi
mov eax, dword [esi]
mov ecx, 1
mov dword [ebp - 0x10], ecx
sub ecx, dword [eax - 4]
mov eax, dword [eax - 8]
mov edi, 0xb
sub eax, edi
or eax, ecx
jge 0x46d31b
push edi
mov ecx, esi
call fcn.00406d20
mov eax, dword [esi]
cmp dword [eax - 8], edi
jge 0x46d32c
push 0x80070057
call fcn.00406170
mov dword [eax - 0xc], edi
mov ecx, dword [esi]
xor edx, edx
mov word [ecx + 0x16], dx
mov ecx, 0x53c398
sub ecx, eax
mov edx, edi
mov ebx, 0xe620
xor bx, word [ecx + eax]
add eax, 2
dec edx
mov word [eax - 2], bx
jne 0x46d340
mov eax, dword [esi]
cmp dword [eax - 8], edi
jl 0x46d322
mov dword [eax - 0xc], edi
mov eax, dword [esi]
xor ecx, ecx
mov word [eax + 0x16], cx
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x46d380
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x525481
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x587978]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
xor edi, edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x10], edi
mov eax, dword [0x587944]
mov edx, dword [eax + 0xc]
mov ecx, 0x587944
call edx
add eax, 0x10
mov dword [esi], eax
mov dword [ebp - 4], edi
mov eax, dword [esi]
mov ecx, 1
mov dword [ebp - 0x10], ecx
sub ecx, dword [eax - 4]
mov eax, dword [eax - 8]
mov edi, 0xe
sub eax, edi
or eax, ecx
jge 0x46d3eb
push edi
mov ecx, esi
call fcn.00406d20
mov eax, dword [esi]
cmp dword [eax - 8], edi
jge 0x46d3fc
push 0x80070057
call fcn.00406170
mov dword [eax - 0xc], edi
mov ecx, dword [esi]
xor edx, edx
mov word [ecx + 0x1c], dx
mov ecx, 0x53c3b0
sub ecx, eax
mov edx, edi
mov ebx, 0xe620
xor bx, word [ecx + eax]
add eax, 2
dec edx
mov word [eax - 2], bx
jne 0x46d410
mov eax, dword [esi]
cmp dword [eax - 8], edi
jl 0x46d3f2
mov dword [eax - 0xc], edi
mov eax, dword [esi]
xor ecx, ecx
mov word [eax + 0x1c], cx
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x46d450
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x525481
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x587978]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
xor edi, edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x10], edi
mov eax, dword [0x587944]
mov edx, dword [eax + 0xc]
mov ecx, 0x587944
call edx
add eax, 0x10
mov dword [esi], eax
mov dword [ebp - 4], edi
mov eax, dword [esi]
mov ecx, 1
mov dword [ebp - 0x10], ecx
sub ecx, dword [eax - 4]
mov eax, dword [eax - 8]
mov edi, 0xd
sub eax, edi
or eax, ecx
jge 0x46d4bb
push edi
mov ecx, esi
call fcn.00406d20
mov eax, dword [esi]
cmp dword [eax - 8], edi
jge 0x46d4cc
push 0x80070057
call fcn.00406170
mov dword [eax - 0xc], edi
mov ecx, dword [esi]
xor edx, edx
mov word [ecx + 0x1a], dx
mov ecx, 0x53c3e4
sub ecx, eax
mov edx, edi
mov ebx, 0xe620
xor bx, word [ecx + eax]
add eax, 2
dec edx
mov word [eax - 2], bx
jne 0x46d4e0
mov eax, dword [esi]
cmp dword [eax - 8], edi
jl 0x46d4c2
mov dword [eax - 0xc], edi
mov eax, dword [esi]
xor ecx, ecx
mov word [eax + 0x1a], cx
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x46d520
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x525481
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x587978]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
xor edi, edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x10], edi
mov eax, dword [0x587944]
mov edx, dword [eax + 0xc]
mov ecx, 0x587944
call edx
add eax, 0x10
mov dword [esi], eax
mov dword [ebp - 4], edi
mov eax, dword [esi]
mov ecx, 1
mov dword [ebp - 0x10], ecx
sub ecx, dword [eax - 4]
mov eax, dword [eax - 8]
mov edi, 0xf
sub eax, edi
or eax, ecx
jge 0x46d58b
push edi
mov ecx, esi
call fcn.00406d20
mov eax, dword [esi]
cmp dword [eax - 8], edi
jge 0x46d59c
push 0x80070057
call fcn.00406170
mov dword [eax - 0xc], edi
mov ecx, dword [esi]
xor edx, edx
mov word [ecx + 0x1e], dx
mov ecx, 0x53c400
sub ecx, eax
mov edx, edi
mov ebx, 0xe620
xor bx, word [ecx + eax]
add eax, 2
dec edx
mov word [eax - 2], bx
jne 0x46d5b0
mov eax, dword [esi]
cmp dword [eax - 8], edi
jl 0x46d592
mov dword [eax - 0xc], edi
mov eax, dword [esi]
xor ecx, ecx
mov word [eax + 0x1e], cx
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x46d920
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x525481
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x587978]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
xor edi, edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x10], edi
mov eax, dword [0x587944]
mov edx, dword [eax + 0xc]
mov ecx, 0x587944
call edx
add eax, 0x10
mov dword [esi], eax
mov dword [ebp - 4], edi
mov eax, dword [esi]
mov ecx, 1
mov dword [ebp - 0x10], ecx
sub ecx, dword [eax - 4]
mov eax, dword [eax - 8]
mov edi, 0x15
sub eax, edi
or eax, ecx
jge 0x46d98b
push edi
mov ecx, esi
call fcn.00406d20
mov eax, dword [esi]
cmp dword [eax - 8], edi
jge 0x46d99c
push 0x80070057
call fcn.00406170
mov dword [eax - 0xc], edi
mov ecx, dword [esi]
xor edx, edx
mov word [ecx + 0x2a], dx
mov ecx, 0x53c464
sub ecx, eax
mov edx, edi
mov ebx, 0xe620
xor bx, word [ecx + eax]
add eax, 2
dec edx
mov word [eax - 2], bx
jne 0x46d9b0
mov eax, dword [esi]
cmp dword [eax - 8], edi
jl 0x46d992
mov dword [eax - 0xc], edi
mov eax, dword [esi]
xor ecx, ecx
mov word [eax + 0x2a], cx
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x46d9f0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x525481
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x587978]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
xor edi, edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x10], edi
mov eax, dword [0x587944]
mov edx, dword [eax + 0xc]
mov ecx, 0x587944
call edx
add eax, 0x10
mov dword [esi], eax
mov dword [ebp - 4], edi
mov eax, dword [esi]
mov ecx, 1
mov dword [ebp - 0x10], ecx
sub ecx, dword [eax - 4]
mov eax, dword [eax - 8]
mov edi, 0x25
sub eax, edi
or eax, ecx
jge 0x46da5b
push edi
mov ecx, esi
call fcn.00406d20
mov eax, dword [esi]
cmp dword [eax - 8], edi
jge 0x46da6c
push 0x80070057
call fcn.00406170
mov dword [eax - 0xc], edi
mov ecx, dword [esi]
xor edx, edx
mov word [ecx + 0x4a], dx
mov ecx, 0x53c490
sub ecx, eax
mov edx, edi
mov ebx, 0xe620
xor bx, word [ecx + eax]
add eax, 2
dec edx
mov word [eax - 2], bx
jne 0x46da80
mov eax, dword [esi]
cmp dword [eax - 8], edi
jl 0x46da62
mov dword [eax - 0xc], edi
mov eax, dword [esi]
xor ecx, ecx
mov word [eax + 0x4a], cx
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x46dac0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x525481
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x587978]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
xor edi, edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x10], edi
mov eax, dword [0x587944]
mov edx, dword [eax + 0xc]
mov ecx, 0x587944
call edx
add eax, 0x10
mov dword [esi], eax
mov dword [ebp - 4], edi
mov eax, dword [esi]
mov edi, 0x10
sub eax, edi
mov ecx, 1
mov dword [ebp - 0x10], ecx
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, edi
or eax, ecx
jge 0x46db2d
push edi
mov ecx, esi
call fcn.00406d20
mov eax, dword [esi]
cmp dword [eax - 8], edi
jge 0x46db3e
push 0x80070057
call fcn.00406170
mov dword [eax - 0xc], edi
mov ecx, dword [esi]
xor edx, edx
mov word [ecx + 0x20], dx
mov ecx, 0x53c4dc
sub ecx, eax
mov edx, edi
mov ebx, 0xe620
xor bx, word [ecx + eax]
add eax, 2
dec edx
mov word [eax - 2], bx
jne 0x46db52
mov eax, dword [esi]
cmp dword [eax - 8], edi
jl 0x46db34
mov dword [eax - 0xc], edi
mov eax, dword [esi]
xor ecx, ecx
mov word [eax + 0x20], cx
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x46db90
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x525481
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x587978]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
xor edi, edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x10], edi
mov eax, dword [0x587944]
mov edx, dword [eax + 0xc]
mov ecx, 0x587944
call edx
add eax, 0x10
mov dword [esi], eax
mov dword [ebp - 4], edi
mov eax, dword [esi]
mov ecx, 1
mov dword [ebp - 0x10], ecx
sub ecx, dword [eax - 4]
mov eax, dword [eax - 8]
mov edi, 0x24
sub eax, edi
or eax, ecx
jge 0x46dbfb
push edi
mov ecx, esi
call fcn.00406d20
mov eax, dword [esi]
cmp dword [eax - 8], edi
jge 0x46dc0c
push 0x80070057
call fcn.00406170
mov dword [eax - 0xc], edi
mov ecx, dword [esi]
xor edx, edx
mov word [ecx + 0x48], dx
mov ecx, 0x53c500
sub ecx, eax
mov edx, edi
mov ebx, 0xe620
xor bx, word [ecx + eax]
add eax, 2
dec edx
mov word [eax - 2], bx
jne 0x46dc20
mov eax, dword [esi]
cmp dword [eax - 8], edi
jl 0x46dc02
mov dword [eax - 0xc], edi
mov eax, dword [esi]
xor ecx, ecx
mov word [eax + 0x48], cx
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x46dc60
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x525481
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x587978]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
xor edi, edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x10], edi
mov eax, dword [0x587944]
mov edx, dword [eax + 0xc]
mov ecx, 0x587944
call edx
add eax, 0x10
mov dword [esi], eax
mov dword [ebp - 4], edi
mov eax, dword [esi]
mov ecx, 1
mov dword [ebp - 0x10], ecx
sub ecx, dword [eax - 4]
mov eax, dword [eax - 8]
mov edi, 0xf
sub eax, edi
or eax, ecx
jge 0x46dccb
push edi
mov ecx, esi
call fcn.00406d20
mov eax, dword [esi]
cmp dword [eax - 8], edi
jge 0x46dcdc
push 0x80070057
call fcn.00406170
mov dword [eax - 0xc], edi
mov ecx, dword [esi]
xor edx, edx
mov word [ecx + 0x1e], dx
mov ecx, 0x53c548
sub ecx, eax
mov edx, edi
mov ebx, 0xe620
xor bx, word [ecx + eax]
add eax, 2
dec edx
mov word [eax - 2], bx
jne 0x46dcf0
mov eax, dword [esi]
cmp dword [eax - 8], edi
jl 0x46dcd2
mov dword [eax - 0xc], edi
mov eax, dword [esi]
xor ecx, ecx
mov word [eax + 0x1e], cx
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret