joyce8/EMBER2024-capa huggingface dataset:
Function at 0x45a92e
Capabilities:
Encode data using xor

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [ebp + 8]
and dword [ebp - 8], 0
push ebx
push esi
and dword [eax], 0
mov ebx, ecx
push edi
lea eax, [ebp - 8]
mov dword [ebp - 0xc], edx
push eax
push 0x20
xor edx, edx
pop ecx
call fcn.0045777a
mov edi, dword [ebp - 8]
mov esi, eax
test esi, esi
js 0x45aa00
xor edx, edx
mov ecx, ebx
inc edx
call fcn.00454d62
mov esi, eax
test esi, esi
js 0x45aa00
lea eax, [ebp - 4]
mov ecx, ebx
push eax
lea edx, [ebp - 8]
call fcn.00454cbe
mov esi, eax
push 0x20
pop ebx
test esi, esi
js 0x45aa03
cmp word [ebp - 4], bx
je 0x45a99b
mov esi, 0xc000000d
jmp 0x45aa03
push ebx
push dword [ebp - 8]
push edi
call fcn.004a2880
mov ebx, dword [ebp - 0xc]
add esp, 0xc
xor edx, edx
mov ecx, ebx
inc edx
call fcn.00454d62
mov esi, eax
test esi, esi
js 0x45aa00
lea eax, [ebp - 4]
mov ecx, ebx
push eax
lea edx, [ebp - 8]
call fcn.00454cbe
mov esi, eax
push 0x20
pop ebx
test esi, esi
js 0x45aa03
cmp word [ebp - 4], bx
jne 0x45a994
mov edx, dword [ebp - 8]
mov ecx, edi
sub edx, edi
mov esi, ebx
mov al, byte [edx + ecx]
xor byte [ecx], al
inc ecx
sub esi, 1
jne 0x45a9e1
push dword [ebp + 8]
mov edx, edi
mov ecx, 0x2000
push ebx
call fcn.0045795a
mov esi, eax
jmp 0x45aa03
push 0x20
pop ebx
test edi, edi
je 0x45aa12
push 0
mov edx, ebx
mov ecx, edi
call fcn.004577be
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x45aa62
Capabilities:
Encode data using xor

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [0x4c0548]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x1c], ecx
mov cl, byte [ebp + 0x20]
sub cl, 2
mov dword [ebp - 0x24], eax
push ebx
mov ebx, dword [ebp + 8]
and cl, 0xfe
mov al, 0xe
shl cl, 2
sub al, bl
push esi
mov esi, dword [ebp + 0x10]
or cl, al
mov byte [ebp - 0x18], cl
push edi
test esi, esi
je 0x45aaa5
or cl, 0x40
mov byte [ebp - 0x18], cl
push ebx
push edx
lea eax, [ebp - 0x17]
push eax
call fcn.004a2880
mov edi, dword [ebp + 0x18]
add esp, 0xc
mov ecx, edi
push 0xf
pop eax
cmp ebx, eax
jae 0x45aacb
mov byte [ebp + eax - 0x18], cl
shr ecx, 8
dec eax
cmp eax, ebx
ja 0x45aabf
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
push eax
mov edx, eax
call fcn.0047c426
push 0x10
pop ebx
test esi, esi
je 0x45ab4e
xor ecx, ecx
push 2
pop eax
cmp esi, 0xff00
jb 0x45aaf9
not byte [ebp - 0x18]
mov ecx, eax
xor byte [ebp - 0x17], 0xfe
push 4
pop eax
lea edi, [ebp - 0x18]
mov ebx, esi
lea edx, [eax - 1]
add edi, ecx
xor byte [edi + edx], bl
shr ebx, 8
sub edx, 1
jns 0x45ab03
mov edi, dword [ebp + 0x18]
add ecx, eax
mov edx, dword [ebp + 0xc]
push 0x10
pop ebx
cmp ecx, ebx
jne 0x45ab30
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
push eax
mov edx, eax
call fcn.0047c426
mov edx, dword [ebp + 0xc]
xor ecx, ecx
mov al, byte [edx]
xor byte [ebp + ecx - 0x18], al
inc ecx
inc edx
mov dword [ebp + 0xc], edx
sub esi, 1
jne 0x45ab19
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
push eax
mov edx, eax
call fcn.0047c426
mov esi, dword [ebp + 0x14]
cmp edi, ebx
jb 0x45ab8f
mov eax, edi
shr eax, 4
mov dword [ebp - 0x20], eax
mov eax, dword [esi]
xor dword [ebp - 0x18], eax
mov eax, dword [esi + 4]
xor dword [ebp - 0x14], eax
mov eax, dword [esi + 8]
xor dword [ebp - 0x10], eax
mov eax, dword [esi + 0xc]
xor dword [ebp - 0xc], eax
lea eax, [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
mov edx, eax
push eax
call fcn.0047c426
add esi, ebx
sub edi, ebx
sub dword [ebp - 0x20], 1
jne 0x45ab5d
mov dword [ebp + 0x18], edi
test edi, edi
je 0x45abba
mov ecx, dword [ebp + 0x18]
lea eax, [ebp - 0x18]
xor edi, edi
sub esi, eax
lea edx, [ebp - 0x18]
add edx, edi
mov al, byte [esi + edx]
xor byte [edx], al
inc edi
cmp edi, ecx
jb 0x45ab9d
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
push eax
mov edx, eax
call fcn.0047c426
push dword [ebp + 0x20]
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x24]
call fcn.004a2880
add esp, 0xc
lea eax, [ebp - 0x18]
mov byte [eax], 0
inc eax
sub ebx, 1
jne 0x45abcf
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004055b8
mov esp, ebp
pop ebp
ret 0x1c
Function at 0x45abec
Capabilities:
Encode data using xor

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x30
mov eax, dword [0x4c0548]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
mov ebx, dword [ebp + 0x14]
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, dword [ebp + 0xc]
push 0xf
pop eax
sub eax, esi
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x2c], eax
dec al
push esi
mov byte [ebp - 0x18], al
lea eax, [ebp - 0x17]
push edx
push eax
call fcn.004a2880
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x17]
add esp, 0xc
add ecx, esi
test eax, eax
je 0x45ac3d
mov byte [ecx], 0
inc ecx
sub eax, 1
jne 0x45ac34
mov ecx, dword [ebp - 0x30]
lea eax, [ebp - 0x28]
push eax
lea edx, [ebp - 0x18]
call fcn.0047c426
mov ecx, dword [ebp + 0x18]
test ecx, ecx
je 0x45ac63
lea edx, [ebp - 0x28]
sub edx, ebx
mov al, byte [edx + ebx]
xor byte [ebx], al
inc ebx
sub ecx, 1
jne 0x45ac58
mov esi, dword [ebp + 0x10]
push 0x10
pop ebx
mov byte [ebp - 9], 1
cmp esi, ebx
jb 0x45acb8
mov eax, esi
shr eax, 4
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x30]
lea eax, [ebp - 0x28]
push eax
lea edx, [ebp - 0x18]
call fcn.0047c426
mov eax, dword [ebp - 0x28]
xor dword [edi], eax
mov eax, dword [ebp - 0x24]
xor dword [edi + 4], eax
mov eax, dword [ebp - 0x20]
xor dword [edi + 8], eax
mov eax, dword [ebp - 0x1c]
xor dword [edi + 0xc], eax
add byte [ebp - 9], 1
jne 0x45acae
lea ecx, [ebp - 9]
dec ecx
add byte [ecx], 1
je 0x45aca8
add edi, ebx
sub esi, ebx
sub dword [ebp - 0x2c], 1
jne 0x45ac79
test esi, esi
je 0x45acdb
mov ecx, dword [ebp - 0x30]
lea eax, [ebp - 0x28]
push eax
lea edx, [ebp - 0x18]
call fcn.0047c426
lea ecx, [ebp - 0x28]
sub ecx, edi
mov al, byte [ecx + edi]
xor byte [edi], al
inc edi
sub esi, 1
jne 0x45acd0
mov ecx, ebx
lea eax, [ebp - 0x28]
mov byte [eax], 0
inc eax
sub ecx, 1
jne 0x45ace0
lea eax, [ebp - 0x18]
mov byte [eax], 0
inc eax
sub ebx, 1
jne 0x45acec
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004055b8
mov esp, ebp
pop ebp
ret 0x14
Function at 0x45af36
Capabilities:
Encode data using xor

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x2c
push ebx
mov ebx, ecx
mov dword [ebp - 0x1c], 5
push esi
push edi
mov edi, edx
mov dword [ebp - 0x28], ebx
lea ecx, [ebx + 0x40]
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x24], ecx
mov eax, dword [ebx + edi*4 - 0x18]
mov esi, dword [ebx + edi*4 - 0xc]
mov dword [ebp - 8], eax
mov eax, dword [ebx + edi*4 - 0x14]
mov dword [ebp - 0x14], eax
mov eax, dword [ebx + edi*4 - 0x10]
mov dword [ebp - 0xc], eax
lea eax, [ebx + edi*4]
mov dword [ebp - 0x2c], eax
mov edx, eax
mov eax, dword [ebp - 8]
mov dword [ebp - 4], edx
cmp edx, ecx
jb 0x45b015
mov edi, dword [edx - 0x1c]
lea ebx, [edx - 0x20]
xor esi, eax
mov ecx, dword [edx - 0x24]
sub dword [edx - 4], esi
mov eax, edi
mov esi, dword [ebx]
rol eax, 0xd
xor eax, dword [ebp - 0xc]
sub dword [edx - 8], eax
mov eax, esi
xor eax, dword [ebp - 0x14]
sub dword [edx - 0xc], eax
mov eax, ecx
rol eax, 9
xor eax, dword [ebp - 8]
sub dword [edx - 0x10], eax
mov eax, edi
mov edx, dword [edx - 0x28]
xor eax, edx
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 4]
sub dword [ebx - 0x14], eax
mov eax, ebx
mov eax, dword [eax - 0x2c]
mov dword [ebp - 0x18], eax
rol eax, 0xd
xor eax, esi
sub dword [ebx - 0x18], eax
mov eax, ebx
mov eax, dword [eax - 0x30]
mov dword [ebp - 0xc], eax
xor eax, ecx
sub edi, eax
mov eax, ebx
mov ebx, dword [ebp - 0x20]
mov dword [eax - 0x1c], edi
mov eax, dword [eax - 0x34]
mov dword [ebp - 0x14], eax
rol eax, 9
xor eax, edx
mov edx, dword [ebp - 4]
sub esi, eax
mov dword [ebx], esi
mov esi, dword [ebp - 0x18]
mov eax, dword [edx - 0x38]
mov edx, ebx
mov dword [ebp - 8], eax
mov dword [ebp - 4], edx
cmp edx, dword [ebp - 0x24]
jae 0x45af87
mov ebx, dword [ebp - 0x28]
mov edi, dword [edx - 0x1c]
xor esi, eax
sub dword [edx - 4], esi
mov eax, edi
mov esi, dword [edx - 0x20]
mov ecx, dword [ebp - 0x2c]
rol eax, 0xd
xor eax, dword [ebp - 0xc]
sub dword [edx - 8], eax
mov eax, esi
xor eax, dword [ebp - 0x14]
sub dword [edx - 0xc], eax
mov ecx, dword [ecx - 4]
mov eax, ecx
rol eax, 9
xor eax, dword [ebp - 8]
sub dword [edx - 0x10], eax
mov eax, edi
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 4]
mov edx, dword [ebx + edx*4 - 8]
xor eax, edx
sub dword [ecx - 0x14], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebx + eax*4 - 0xc]
mov dword [ebp - 0x18], eax
rol eax, 0xd
xor eax, esi
sub dword [ecx - 0x18], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebx + eax*4 - 0x10]
mov dword [ebp - 0xc], eax
xor eax, dword [ebp - 0x20]
sub edi, eax
mov dword [ecx - 0x1c], edi
mov edi, dword [ebp - 0x10]
mov eax, dword [ebx + edi*4 - 0x14]
mov dword [ebp - 0x14], eax
rol eax, 9
xor eax, edx
sub esi, eax
sub dword [ebp - 0x1c], 1
mov dword [ecx - 0x20], esi
lea ecx, [ebx + 0x40]
mov eax, dword [ebx + edi*4 - 0x18]
mov esi, dword [ebp - 0x18]
mov dword [ebp - 8], eax
lea eax, [ebx + edi*4]
jne 0x45af77
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x45b0b2
Capabilities:
Encode data using xor

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x28
push ebx
push esi
mov esi, ecx
push edi
push 5
pop ebx
mov eax, dword [esi + edx*4 - 0x14]
mov ecx, dword [esi + edx*4 - 0xc]
mov dword [ebp - 0xc], eax
mov eax, dword [esi + edx*4 - 0x10]
mov dword [ebp - 0x18], eax
mov eax, dword [esi + edx*4 - 8]
mov dword [ebp - 0x14], eax
mov eax, dword [esi + edx*4 - 4]
mov dword [ebp - 8], eax
lea eax, [edx*4 - 0x40]
lea edx, [eax + esi]
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x1c], ebx
cmp esi, edx
ja 0x45b1ef
mov ebx, dword [ebp - 0x14]
lea edi, [esi + 8]
mov esi, dword [ebp - 0x18]
mov edx, eax
shr edx, 6
inc edx
mov dword [ebp - 0x10], edx
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
xor eax, esi
rol edx, 9
add eax, dword [edi - 4]
xor edx, ebx
add edx, dword [edi - 8]
mov esi, ecx
mov ecx, ebx
rol esi, 0xd
mov ebx, dword [ebp - 8]
xor esi, edx
add esi, dword [edi]
xor ecx, eax
add ecx, dword [edi + 4]
rol ebx, 9
xor ebx, esi
mov dword [ebp - 4], ecx
add ebx, dword [edi + 8]
mov dword [edi - 8], edx
mov dword [edi + 4], ecx
xor ecx, edx
add ecx, dword [edi + 0xc]
mov edx, dword [ebp - 4]
mov dword [edi - 4], eax
rol eax, 0xd
xor eax, ebx
rol edx, 9
add eax, dword [edi + 0x10]
xor edx, eax
mov dword [edi], esi
add edx, dword [edi + 0x18]
lea edi, [edi + 0x40]
xor esi, ecx
mov dword [edi - 0x38], ebx
add esi, dword [edi - 0x2c]
xor ebx, esi
mov dword [edi - 0x34], ecx
add ebx, dword [edi - 0x24]
mov dword [ebp - 4], edx
rol ecx, 0xd
xor ecx, edx
mov dword [edi - 0x30], eax
add ecx, dword [edi - 0x20]
mov edx, ebx
xor edx, eax
mov dword [edi - 0x2c], esi
add edx, dword [edi - 0x1c]
mov eax, dword [ebp - 4]
mov dword [edi - 0x28], eax
xor eax, edx
add eax, dword [edi - 0x14]
rol esi, 9
mov dword [edi - 0x24], ebx
xor esi, ecx
add esi, dword [edi - 0x18]
mov dword [edi - 0x1c], edx
mov dword [ebp - 0xc], edx
mov edx, eax
rol ebx, 0xd
xor edx, ecx
add edx, dword [edi - 0xc]
xor ebx, esi
add ebx, dword [edi - 0x10]
sub dword [ebp - 0x10], 1
mov dword [edi - 0x20], ecx
mov ecx, eax
mov dword [edi - 0x18], esi
mov dword [edi - 0x14], eax
mov dword [edi - 0x10], ebx
mov dword [edi - 0xc], edx
mov dword [ebp - 4], eax
mov dword [ebp - 8], edx
jne 0x45b112
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x14], ebx
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x18], esi
mov esi, dword [ebp - 0x20]
sub ebx, 1
mov dword [ebp - 0x1c], ebx
jne 0x45b0f8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x45b202
Capabilities:
Encode data using xor

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x24
mov eax, dword [ecx]
lea edx, [ecx + edx*4]
push ebx
mov ebx, dword [ecx + 0x10]
push esi
mov esi, dword [ecx + 4]
mov dword [ebp - 0xc], eax
mov eax, dword [ecx + 8]
push edi
mov dword [ebp - 0x14], eax
mov eax, dword [ecx + 0xc]
add ecx, 0x40
push 3
mov dword [ebp - 0x10], eax
pop eax
mov dword [ebp - 8], esi
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], eax
mov edi, edx
mov dword [ebp - 4], edi
cmp edi, ecx
jb 0x45b376
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x10]
mov ecx, dword [edi - 0xc]
xor eax, edx
rol ebx, 0x19
xor ebx, esi
rol edx, 0x19
mov esi, dword [edi - 4]
sub esi, ebx
mov ebx, dword [edi - 8]
sub ebx, eax
mov edi, dword [ebp - 4]
mov eax, dword [ebp - 0x14]
rol eax, 0xa
xor eax, esi
mov edi, dword [edi - 0x10]
sub ecx, eax
mov eax, ebx
xor edx, ecx
xor eax, dword [ebp - 8]
sub edi, eax
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
mov dword [ebp - 0x14], edi
mov edx, dword [eax - 0x14]
sub edx, dword [ebp - 0xc]
mov dword [eax - 8], ebx
mov dword [eax - 0xc], ecx
mov dword [eax - 4], esi
xor esi, edi
mov dword [eax - 0x10], edi
mov eax, dword [eax - 0x18]
sub eax, esi
rol ebx, 0xa
mov esi, dword [ebp - 4]
xor ebx, edx
mov dword [ebp - 0x18], eax
xor eax, ecx
mov ecx, dword [ebp - 0x18]
mov edi, dword [esi - 0x1c]
sub edi, ebx
mov dword [esi - 0x18], ecx
mov ebx, dword [esi - 0x20]
sub ebx, eax
mov dword [esi - 0x14], edx
mov eax, dword [ebp - 0x14]
rol eax, 0x19
xor eax, edi
mov dword [ebp - 0x10], ebx
mov dword [esi - 0x20], ebx
xor ebx, edx
mov edx, dword [ebp - 4]
mov dword [esi - 0x1c], edi
mov esi, dword [esi - 0x24]
sub esi, eax
rol ecx, 0xa
mov eax, dword [ebp - 4]
xor ecx, esi
mov edx, dword [edx - 0x28]
sub edx, ebx
xor edi, edx
mov dword [ebp - 0xc], edx
mov ebx, dword [eax - 0x2c]
mov eax, dword [eax - 0x30]
sub ebx, ecx
sub eax, edi
mov edi, dword [ebp - 4]
mov dword [ebp - 0x18], eax
mov dword [edi - 0x30], eax
mov eax, dword [ebp - 0x10]
rol eax, 0x19
mov dword [edi - 0x28], edx
xor eax, ebx
lea edx, [edi - 0x34]
mov dword [edi - 0x24], esi
mov ecx, dword [edx]
sub ecx, eax
mov dword [edi - 0x2c], ebx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x10], ecx
lea ecx, [edi - 0x38]
xor eax, esi
mov esi, dword [ecx]
sub esi, eax
lea eax, [edi - 0x3c]
mov edi, dword [eax]
mov dword [ebp - 0x14], esi
mov esi, dword [ebp - 0xc]
xor ebx, dword [ebp - 0x14]
rol esi, 0xa
xor esi, dword [ebp - 0x10]
sub edi, esi
mov dword [ebp - 8], edi
mov edi, dword [ebp - 4]
add edi, 0xffffffc0
mov dword [ebp - 4], edi
mov esi, dword [edi]
sub esi, ebx
mov ebx, dword [ebp - 0x10]
mov dword [edx], ebx
mov edx, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x18]
mov dword [ecx], edx
mov ecx, dword [ebp - 8]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0xc], esi
mov dword [edi], esi
mov esi, dword [ebp - 8]
cmp edi, ecx
jae 0x45b246
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x24]
sub eax, 1
mov dword [ebp - 0x1c], eax
jne 0x45b239
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x45b38a
Capabilities:
Encode data using xor

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x20
push ebx
mov ebx, ecx
mov dword [ebp - 0x18], 3
add edx, 0xfffffff0
mov dword [ebp - 0x20], ebx
push esi
push edi
mov eax, dword [ebx + 0xc]
mov edi, dword [ebx + 0x14]
mov esi, dword [ebx + 8]
mov dword [ebp - 4], eax
mov eax, dword [ebx + 0x10]
mov dword [ebp - 0xc], eax
lea eax, [ebx + edx*4]
mov edx, dword [ebp - 0xc]
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x1c], eax
mov ecx, ebx
mov dword [ebp - 8], ecx
cmp ebx, eax
ja 0x45b455
mov ecx, dword [ebx]
xor edi, esi
mov esi, dword [ebx + 0x1c]
add edi, ecx
xor edx, esi
mov ecx, dword [ebx + 0x24]
mov dword [ebx], edi
mov edi, dword [ebx + 0x18]
mov eax, edi
rol eax, 0xa
xor eax, dword [ebp - 4]
add dword [ebx + 4], eax
mov eax, dword [ebx + 0x20]
mov dword [ebp - 8], eax
rol eax, 0x19
xor eax, dword [ebp - 0x10]
add dword [ebx + 0xc], eax
mov eax, ecx
xor eax, edi
add dword [ebx + 8], edx
add dword [ebx + 0x10], eax
mov eax, dword [ebx + 0x28]
mov dword [ebp - 0x14], eax
rol eax, 0xa
xor eax, esi
add dword [ebx + 0x14], eax
mov eax, dword [ebx + 0x2c]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
xor eax, dword [ebp - 4]
add eax, edi
mov edi, dword [ebx + 0x34]
mov dword [ebx + 0x18], eax
mov eax, dword [ebx + 0x30]
mov dword [ebp - 0xc], eax
mov edx, dword [ebp - 0xc]
rol eax, 0x19
xor eax, ecx
mov dword [ebp - 0x10], edi
mov ecx, dword [ebp - 8]
add eax, esi
mov esi, dword [ebp - 0x14]
mov dword [ebx + 0x1c], eax
add ebx, 0x20
cmp ebx, dword [ebp - 0x1c]
jbe 0x45b3d1
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 0x20]
mov ecx, dword [ebp - 8]
xor edi, esi
mov esi, dword [ecx + 0x1c]
add dword [ecx], edi
xor edx, esi
mov edi, dword [ecx + 0x18]
mov eax, edi
add dword [ecx + 8], edx
rol eax, 0xa
xor eax, dword [ebp - 4]
add dword [ecx + 4], eax
mov edx, dword [ebx]
mov eax, edx
rol eax, 0x19
xor eax, dword [ebp - 0x10]
add dword [ecx + 0xc], eax
mov ecx, dword [ebx + 4]
mov eax, ecx
xor eax, edi
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 8]
add dword [ecx + 0x10], eax
mov eax, dword [ebx + 8]
mov dword [ebp - 0x14], eax
rol eax, 0xa
xor eax, esi
add dword [ecx + 0x14], eax
mov eax, dword [ebx + 0xc]
xor edx, eax
add edx, edi
mov dword [ebp - 4], eax
mov edi, ecx
mov dword [edi + 0x18], edx
mov edx, dword [ebx + 0x10]
mov eax, edx
rol eax, 0x19
xor eax, dword [ebp - 0x10]
add eax, esi
sub dword [ebp - 0x18], 1
mov esi, dword [ebp - 0x14]
mov dword [edi + 0x1c], eax
mov edi, dword [ebx + 0x14]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], edi
jne 0x45b3c2
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x45b4d6
Capabilities:
Encode data using xor

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, edx
mov edx, dword [ecx + 0xc]
mov dword [ebp - 8], edx
mov edx, dword [ebp + 8]
push ebx
mov ebx, dword [ecx + 8]
mov dword [ebp - 0x10], eax
add eax, 8
shr edx, 4
push esi
mov esi, dword [ecx]
push edi
mov edi, dword [ecx + 4]
mov dword [ebp - 0xc], edx
mov dword [ebp - 4], edx
mov edx, dword [ebp - 8]
xor dword [eax - 8], esi
xor dword [eax - 4], edi
xor dword [eax], ebx
lea eax, [eax + 0x40]
xor dword [eax - 0x3c], edx
xor dword [eax - 0x28], esi
xor dword [eax - 0x24], edi
xor dword [eax - 0x20], ebx
xor dword [eax - 0x1c], edx
sub dword [ebp - 4], 1
jne 0x45b506
mov eax, dword [ebp + 8]
mov esi, dword [ecx + 0x10]
add eax, 0xfffffff4
mov edi, dword [ecx + 0x14]
mov ebx, dword [ecx + 0x18]
mov ecx, dword [ecx + 0x1c]
mov edx, dword [ebp - 0xc]
cmp eax, 4
jb 0x45b565
mov eax, dword [ebp - 0x10]
add eax, 0x18
xor dword [eax - 8], esi
xor dword [eax - 4], edi
xor dword [eax], ebx
lea eax, [eax + 0x40]
xor dword [eax - 0x3c], ecx
xor dword [eax - 0x28], esi
xor dword [eax - 0x24], edi
xor dword [eax - 0x20], ebx
xor dword [eax - 0x1c], ecx
sub edx, 1
jne 0x45b546
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x45b71a
Capabilities:
Encode data using xor

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x434
mov eax, dword [0x4c0548]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x14]
push ebx
push esi
mov dword [ebp - 0x410], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x40c], edx
xor edx, edx
push edi
mov edi, dword [ebp + 0x18]
div edi
mov dword [ebp - 0x424], ecx
xor ecx, ecx
mov esi, eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x41c], esi
test eax, eax
je 0x45b76f
test dword [eax], 0x800
je 0x45b76f
mov eax, dword [eax + 0x10]
jmp 0x45b774
mov eax, dword [0x4c0814]
cmp eax, edi
ja 0x45b77d
xor ebx, ebx
inc ebx
jmp 0x45b791
xor edx, edx
div edi
mov ebx, eax
mov dword [ebp - 0x414], ebx
cmp ebx, 0x40
jb 0x45b797
push 0x40
pop ebx
mov dword [ebp - 0x414], ebx
test esi, esi
je 0x45b926
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
mov dword [ebp - 0x428], edx
mov dword [ebp - 0x420], eax
cmp esi, ebx
jae 0x45b7bd
mov dword [ebp - 0x418], esi
jmp 0x45b7c5
mov esi, ebx
mov dword [ebp - 0x418], ebx
test esi, esi
je 0x45b808
mov ecx, esi
lea eax, [ebp - 0x400]
mov esi, dword [ebp - 0x420]
xor ebx, ebx
mov dword [eax - 8], esi
add esi, edi
mov dword [eax - 4], edx
adc edx, ebx
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [eax + 0x10]
sub ecx, 1
jne 0x45b7d9
mov ebx, dword [ebp - 0x414]
mov dword [ebp - 0x420], esi
mov esi, dword [ebp - 0x418]
mov dword [ebp - 0x428], edx
mov ecx, dword [ebp - 0x424]
lea eax, [ebp - 0x408]
push eax
mov eax, esi
lea edx, [ebp - 0x408]
shl eax, 4
push eax
call fcn.0045a550
mov ecx, eax
test ecx, ecx
js 0x45b926
mov edx, dword [ebp - 0x40c]
add edx, 0xfffffff0
add edx, edi
cmp esi, 1
jbe 0x45b86f
lea ecx, [ebp - 0x3f0]
lea ebx, [esi - 1]
mov eax, dword [edx]
xor dword [ecx - 8], eax
mov eax, dword [edx + 4]
xor dword [ecx - 4], eax
mov eax, dword [edx + 8]
xor dword [ecx], eax
lea ecx, [ecx + 0x10]
mov eax, dword [edx + 0xc]
add edx, edi
xor dword [ecx - 0xc], eax
sub ebx, 1
jne 0x45b849
mov ebx, dword [ebp - 0x414]
mov ecx, dword [ebp - 0x424]
lea edx, [ebp - 0x408]
mov eax, edi
imul eax, esi
push eax
push dword [ebp - 0x410]
push dword [ebp - 0x40c]
call fcn.0047c560
add dword [ebp - 0x410], edi
xor ecx, ecx
add dword [ebp - 0x40c], edi
sub dword [ebp + 0x10], edi
mov dword [ebp - 0x430], ecx
cmp esi, 1
jbe 0x45b90e
mov ebx, dword [ebp - 0x410]
lea eax, [esi - 1]
mov ecx, dword [ebp + 0x10]
lea edx, [ebp - 0x3f0]
mov dword [ebp - 0x42c], eax
mov esi, eax
imul eax, edi
add dword [ebp - 0x40c], eax
mov eax, dword [edx - 8]
sub ecx, edi
xor dword [ebx], eax
mov eax, dword [edx - 4]
xor dword [ebx + 4], eax
mov eax, dword [edx]
lea edx, [edx + 0x10]
xor dword [ebx + 8], eax
mov eax, dword [edx - 0xc]
xor dword [ebx + 0xc], eax
add ebx, edi
sub esi, 1
jne 0x45b8d1
mov esi, dword [ebp - 0x418]
mov dword [ebp + 0x10], ecx
mov ecx, dword [ebp - 0x430]
mov dword [ebp - 0x410], ebx
mov ebx, dword [ebp - 0x414]
sub dword [ebp - 0x41c], esi
mov esi, dword [ebp - 0x41c]
mov edx, dword [ebp - 0x428]
jne 0x45b7b1
mov eax, ecx
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004055b8
mov esp, ebp
pop ebp
ret 0x18
Function at 0x4616c2
Capabilities:
Reference processor manufacturer constants

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4c0548]
xor eax, ebp
mov dword [ebp - 4], eax
call fcn.00461650
test al, al
je 0x46171d
push ebx
push esi
push edi
mov eax, 0x40000000
lea edi, [ebp - 0x14]
xor ecx, ecx
push ebx
cpuid
mov esi, ebx
pop ebx
mov dword [edi], eax
mov dword [edi + 4], esi
mov dword [edi + 8], ecx
mov dword [edi + 0xc], edx
cmp dword [ebp - 0x10], 0x7263694d
pop edi
pop esi
pop ebx
jne 0x46171d
cmp dword [ebp - 0xc], 0x666f736f
jne 0x46171d
cmp dword [ebp - 8], 0x76482074
jne 0x46171d
mov al, 1
jmp 0x46171f
xor al, al
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004055b8
mov esp, ebp
pop ebp
ret

Function at 0x46cb9d
Capabilities:
Encode data using xor

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x4ebfa8]
push esi
push edi
mov edi, edx
mov edx, ecx
mov dword [ebp - 4], edx
test eax, eax
jne 0x46cbf0
push ebx
inc eax
xor ecx, ecx
push ebx
cpuid
mov esi, ebx
pop ebx
lea ebx, [ebp - 0x14]
mov dword [ebx], eax
mov dword [ebx + 4], esi
mov dword [ebx + 8], ecx
mov dword [ebx + 0xc], edx
test dword [ebp - 0xc], 0x100000
pop ebx
je 0x46cbe5
mov dword [0x4ebfa8], 1
jmp 0x46cbf5
mov edx, dword [ebp - 4]
push 2
pop eax
mov dword [0x4ebfa8], eax
cmp eax, 1
jne 0x46cc04
push dword [ebp + 8]
mov ecx, dword [ebp - 4]
mov edx, edi
call fcn.0046cb48
jmp 0x46cc2a
xor esi, esi
not edx
cmp dword [ebp + 8], esi
jbe 0x46cc26
movzx ecx, byte [esi + edi]
movzx eax, dl
xor ecx, eax
shr edx, 8
xor edx, dword [ecx*4 + 0x4b72d8]
inc esi
cmp esi, dword [ebp + 8]
jb 0x46cc0d
not edx
mov eax, edx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x46cc32
Capabilities:
Encode data using xor

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push ecx
mov eax, edx
mov edx, dword [ebp + 8]
mov dword [ebp - 4], eax
test edx, edx
je 0x46cc8b
push ebx
push esi
push edi
mov esi, 0x4b7258
test dl, 1
je 0x46cc7e
mov edi, dword [esi]
xor ebx, ebx
test ecx, ecx
je 0x46cc7c
mov eax, ecx
shr eax, 0x1f
neg eax
and eax, edi
xor ebx, eax
mov eax, edi
and al, 1
movzx eax, al
neg eax
sbb eax, eax
shr edi, 1
and eax, 0x82f63b78
xor edi, eax
add ecx, ecx
jne 0x46cc59
mov ecx, ebx
add esi, 4
shr edx, 1
jne 0x46cc4c
mov eax, dword [ebp - 4]
pop edi
pop esi
pop ebx
xor eax, ecx
mov esp, ebp
pop ebp
ret 4