joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1005c2f0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
mov esi, ecx
mov ecx, 0x1019d47f
push edi
call fcn.10138266
cmp byte [esi], 0
lea edi, [esi + 2]
je 0x1005c35e
cmp byte [esi + 1], 0
jne 0x1005c3a2
xor ecx, ecx
mov byte [esi + 1], 1
mov dword [ebp - 4], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x44]
xor ebx, dword [esi + 0x40]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 4]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [edi + ecx], al
inc ecx
mov dword [ebp - 4], ecx
cmp ecx, 0x38
jb 0x1005c320
jmp 0x1005c3a2
xor ecx, ecx
mov dword [ebp - 4], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x44]
xor ebx, dword [esi + 0x40]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 4]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [edi + ecx]
xor al, bl
mov byte [edi + ecx], al
inc ecx
mov dword [ebp - 4], ecx
cmp ecx, 0x38
jb 0x1005c363
push ecx
mov ecx, dword [ebp + 8]
lea eax, [esi + 0x39]
push eax
push edi
call fcn.1004c790
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x1005c3c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
mov esi, ecx
mov ecx, 0x1019d47f
push edi
call fcn.10138266
cmp byte [esi], 0
lea edi, [esi + 2]
je 0x1005c42e
cmp byte [esi + 1], 0
jne 0x1005c472
xor ecx, ecx
mov byte [esi + 1], 1
mov dword [ebp - 4], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x4c]
xor ebx, dword [esi + 0x48]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 4]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [edi + ecx], al
inc ecx
mov dword [ebp - 4], ecx
cmp ecx, 0x42
jb 0x1005c3f0
jmp 0x1005c472
xor ecx, ecx
mov dword [ebp - 4], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x4c]
xor ebx, dword [esi + 0x48]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 4]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [edi + ecx]
xor al, bl
mov byte [edi + ecx], al
inc ecx
mov dword [ebp - 4], ecx
cmp ecx, 0x42
jb 0x1005c433
push ecx
mov ecx, dword [ebp + 8]
lea eax, [esi + 0x43]
push eax
push edi
call fcn.1004c790
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x1005c490
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
mov esi, ecx
mov ecx, 0x1019d47f
push edi
call fcn.10138266
cmp byte [esi], 0
lea edi, [esi + 2]
je 0x1005c4fe
cmp byte [esi + 1], 0
jne 0x1005c542
xor ecx, ecx
mov byte [esi + 1], 1
mov dword [ebp - 4], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x54]
xor ebx, dword [esi + 0x50]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 4]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [edi + ecx], al
inc ecx
mov dword [ebp - 4], ecx
cmp ecx, 0x4e
jb 0x1005c4c0
jmp 0x1005c542
xor ecx, ecx
mov dword [ebp - 4], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x54]
xor ebx, dword [esi + 0x50]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 4]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [edi + ecx]
xor al, bl
mov byte [edi + ecx], al
inc ecx
mov dword [ebp - 4], ecx
cmp ecx, 0x4e
jb 0x1005c503
push ecx
mov ecx, dword [ebp + 8]
lea eax, [esi + 0x4f]
push eax
push edi
call fcn.1004c790
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x1005c560
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
mov esi, ecx
mov ecx, 0x1019d47f
push edi
call fcn.10138266
cmp byte [esi], 0
lea edi, [esi + 2]
je 0x1005c5d4
cmp byte [esi + 1], 0
jne 0x1005c621
xor ecx, ecx
mov byte [esi + 1], 1
mov dword [esp + 0xc], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x2c]
xor ebx, dword [esi + 0x28]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [esp + 0xc]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [edi + ecx], al
inc ecx
mov dword [esp + 0xc], ecx
cmp ecx, 0x21
jb 0x1005c594
jmp 0x1005c621
xor ecx, ecx
mov dword [esp + 0xc], ecx
nop word [eax + eax]
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x2c]
xor ebx, dword [esi + 0x28]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [esp + 0xc]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [edi + ecx]
xor al, bl
mov byte [edi + ecx], al
inc ecx
mov dword [esp + 0xc], ecx
cmp ecx, 0x21
jb 0x1005c5e0
push ecx
mov ecx, dword [ebp + 8]
lea eax, [esi + 0x22]
push eax
push edi
call fcn.1004c790
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x1005c640
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov ecx, 0x1019d47f
push ebx
push esi
call fcn.10138266
cmp byte [0x10183848], 0
je 0x1005c6b2
cmp byte [0x10183849], 0
jne 0x1005c6f3
mov byte [0x10183849], 1
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10183884]
xor ebx, dword [0x10183880]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1018384a], al
inc esi
cmp esi, 0x33
jb 0x1005c671
jmp 0x1005c6f3
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10183884]
xor ebx, dword [0x10183880]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1018384a], al
inc esi
cmp esi, 0x33
jb 0x1005c6b4
push ecx
mov ecx, dword [ebp + 8]
push 0x1018387c
push 0x1018384a
call fcn.1004c790
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x1005c720
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
mov esi, ecx
mov ecx, 0x1019d47f
push edi
call fcn.10138266
cmp byte [esi], 0
lea edi, [esi + 2]
je 0x1005c794
cmp byte [esi + 1], 0
jne 0x1005c7e1
xor ecx, ecx
mov byte [esi + 1], 1
mov dword [esp + 0xc], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x2c]
xor ebx, dword [esi + 0x28]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [esp + 0xc]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [edi + ecx], al
inc ecx
mov dword [esp + 0xc], ecx
cmp ecx, 0x22
jb 0x1005c754
jmp 0x1005c7e1
xor ecx, ecx
mov dword [esp + 0xc], ecx
nop word [eax + eax]
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x2c]
xor ebx, dword [esi + 0x28]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [esp + 0xc]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [edi + ecx]
xor al, bl
mov byte [edi + ecx], al
inc ecx
mov dword [esp + 0xc], ecx
cmp ecx, 0x22
jb 0x1005c7a0
push ecx
mov ecx, dword [ebp + 8]
lea eax, [esi + 0x23]
push eax
push edi
call fcn.1004c790
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x1005c800
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov ecx, 0x1019d47f
push ebx
push esi
call fcn.10138266
cmp byte [0x10182630], 0
je 0x1005c872
cmp byte [0x10182631], 0
jne 0x1005c8b3
mov byte [0x10182631], 1
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10182684]
xor ebx, dword [0x10182680]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10182632], al
inc esi
cmp esi, 0x4d
jb 0x1005c831
jmp 0x1005c8b3
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10182684]
xor ebx, dword [0x10182680]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10182632], al
inc esi
cmp esi, 0x4d
jb 0x1005c874
push ecx
mov ecx, dword [ebp + 8]
push 0x1018267e
push 0x10182632
call fcn.1004c790
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x1005c8e0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
mov esi, ecx
mov ecx, 0x1019d47f
push edi
call fcn.10138266
cmp byte [esi], 0
lea edi, [esi + 2]
je 0x1005c954
cmp byte [esi + 1], 0
jne 0x1005c9a1
xor ecx, ecx
mov byte [esi + 1], 1
mov dword [esp + 0xc], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x2c]
xor ebx, dword [esi + 0x28]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [esp + 0xc]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [edi + ecx], al
inc ecx
mov dword [esp + 0xc], ecx
cmp ecx, 0x25
jb 0x1005c914
jmp 0x1005c9a1
xor ecx, ecx
mov dword [esp + 0xc], ecx
nop word [eax + eax]
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x2c]
xor ebx, dword [esi + 0x28]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [esp + 0xc]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [edi + ecx]
xor al, bl
mov byte [edi + ecx], al
inc ecx
mov dword [esp + 0xc], ecx
cmp ecx, 0x25
jb 0x1005c960
push ecx
mov ecx, dword [ebp + 8]
lea eax, [esi + 0x26]
push eax
push edi
call fcn.1004c790
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x1005c9c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
mov esi, ecx
mov ecx, 0x1019d47f
push edi
call fcn.10138266
cmp byte [esi], 0
lea edi, [esi + 2]
je 0x1005ca34
cmp byte [esi + 1], 0
jne 0x1005ca81
xor ecx, ecx
mov byte [esi + 1], 1
mov dword [esp + 0xc], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x44]
xor ebx, dword [esi + 0x40]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [esp + 0xc]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [edi + ecx], al
inc ecx
mov dword [esp + 0xc], ecx
cmp ecx, 0x3b
jb 0x1005c9f4
jmp 0x1005ca81
xor ecx, ecx
mov dword [esp + 0xc], ecx
nop word [eax + eax]
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x44]
xor ebx, dword [esi + 0x40]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [esp + 0xc]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [edi + ecx]
xor al, bl
mov byte [edi + ecx], al
inc ecx
mov dword [esp + 0xc], ecx
cmp ecx, 0x3b
jb 0x1005ca40
push ecx
mov ecx, dword [ebp + 8]
lea eax, [esi + 0x3c]
push eax
push edi
call fcn.1004c790
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x1005caa0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov ecx, 0x1019d47f
push ebx
push esi
call fcn.10138266
cmp byte [0x101824d8], 0
je 0x1005cb12
cmp byte [0x101824d9], 0
jne 0x1005cb53
mov byte [0x101824d9], 1
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10182524]
xor ebx, dword [0x10182520]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x101824da], al
inc esi
cmp esi, 0x43
jb 0x1005cad1
jmp 0x1005cb53
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10182524]
xor ebx, dword [0x10182520]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x101824da], al
inc esi
cmp esi, 0x43
jb 0x1005cb14
push ecx
mov ecx, dword [ebp + 8]
push 0x1018251c
push 0x101824da
call fcn.1004c790
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x1005cb80
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov ecx, 0x1019d47f
push ebx
push esi
call fcn.10138266
cmp byte [0x101825d8], 0
je 0x1005cbf2
cmp byte [0x101825d9], 0
jne 0x1005cc33
mov byte [0x101825d9], 1
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x1018262c]
xor ebx, dword [0x10182628]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x101825da], al
inc esi
cmp esi, 0x48
jb 0x1005cbb1
jmp 0x1005cc33
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x1018262c]
xor ebx, dword [0x10182628]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x101825da], al
inc esi
cmp esi, 0x48
jb 0x1005cbf4
push ecx
mov ecx, dword [ebp + 8]
push 0x10182621
push 0x101825da
call fcn.1004c790
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x1005cc60
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
mov esi, ecx
mov ecx, 0x1019d47f
push edi
call fcn.10138266
cmp byte [esi], 0
lea edi, [esi + 2]
je 0x1005ccd4
cmp byte [esi + 1], 0
jne 0x1005cd21
xor ecx, ecx
mov byte [esi + 1], 1
mov dword [esp + 0xc], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x3c]
xor ebx, dword [esi + 0x38]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [esp + 0xc]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [edi + ecx], al
inc ecx
mov dword [esp + 0xc], ecx
cmp ecx, 0x30
jb 0x1005cc94
jmp 0x1005cd21
xor ecx, ecx
mov dword [esp + 0xc], ecx
nop word [eax + eax]
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x3c]
xor ebx, dword [esi + 0x38]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [esp + 0xc]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [edi + ecx]
xor al, bl
mov byte [edi + ecx], al
inc ecx
mov dword [esp + 0xc], ecx
cmp ecx, 0x30
jb 0x1005cce0
push ecx
mov ecx, dword [ebp + 8]
lea eax, [esi + 0x31]
push eax
push edi
call fcn.1004c790
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x1005cd40
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
mov esi, ecx
mov ecx, 0x1019d47f
push edi
call fcn.10138266
cmp byte [esi], 0
lea edi, [esi + 2]
je 0x1005cdb4
cmp byte [esi + 1], 0
jne 0x1005ce01
xor ecx, ecx
mov byte [esi + 1], 1
mov dword [esp + 0xc], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x3c]
xor ebx, dword [esi + 0x38]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [esp + 0xc]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [edi + ecx], al
inc ecx
mov dword [esp + 0xc], ecx
cmp ecx, 0x2f
jb 0x1005cd74
jmp 0x1005ce01
xor ecx, ecx
mov dword [esp + 0xc], ecx
nop word [eax + eax]
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x3c]
xor ebx, dword [esi + 0x38]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [esp + 0xc]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [edi + ecx]
xor al, bl
mov byte [edi + ecx], al
inc ecx
mov dword [esp + 0xc], ecx
cmp ecx, 0x2f
jb 0x1005cdc0
push ecx
mov ecx, dword [ebp + 8]
lea eax, [esi + 0x30]
push eax
push edi
call fcn.1004c790
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x1005ce20
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
mov esi, ecx
mov ecx, 0x1019d47f
push edi
call fcn.10138266
cmp byte [esi], 0
lea edi, [esi + 2]
je 0x1005ce94
cmp byte [esi + 1], 0
jne 0x1005cee1
xor ecx, ecx
mov byte [esi + 1], 1
mov dword [esp + 0xc], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x34]
xor ebx, dword [esi + 0x30]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [esp + 0xc]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [edi + ecx], al
inc ecx
mov dword [esp + 0xc], ecx
cmp ecx, 0x27
jb 0x1005ce54
jmp 0x1005cee1
xor ecx, ecx
mov dword [esp + 0xc], ecx
nop word [eax + eax]
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x34]
xor ebx, dword [esi + 0x30]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [esp + 0xc]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [edi + ecx]
xor al, bl
mov byte [edi + ecx], al
inc ecx
mov dword [esp + 0xc], ecx
cmp ecx, 0x27
jb 0x1005cea0
push ecx
mov ecx, dword [ebp + 8]
lea eax, [esi + 0x28]
push eax
push edi
call fcn.1004c790
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x1005cf00
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
mov esi, ecx
mov ecx, 0x1019d47f
push edi
call fcn.10138266
cmp byte [esi], 0
lea edi, [esi + 2]
je 0x1005cf74
cmp byte [esi + 1], 0
jne 0x1005cfc1
xor ecx, ecx
mov byte [esi + 1], 1
mov dword [esp + 0xc], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x34]
xor ebx, dword [esi + 0x30]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [esp + 0xc]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [edi + ecx], al
inc ecx
mov dword [esp + 0xc], ecx
cmp ecx, 0x2d
jb 0x1005cf34
jmp 0x1005cfc1
xor ecx, ecx
mov dword [esp + 0xc], ecx
nop word [eax + eax]
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x34]
xor ebx, dword [esi + 0x30]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [esp + 0xc]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [edi + ecx]
xor al, bl
mov byte [edi + ecx], al
inc ecx
mov dword [esp + 0xc], ecx
cmp ecx, 0x2d
jb 0x1005cf80
push ecx
mov ecx, dword [ebp + 8]
lea eax, [esi + 0x2e]
push eax
push edi
call fcn.1004c790
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x1005cfe0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
mov esi, ecx
mov ecx, 0x1019d47f
push edi
call fcn.10138266
cmp byte [esi], 0
lea edi, [esi + 2]
je 0x1005d04e
cmp byte [esi + 1], 0
jne 0x1005d092
xor ecx, ecx
mov byte [esi + 1], 1
mov dword [ebp - 4], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x3c]
xor ebx, dword [esi + 0x38]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 4]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [edi + ecx], al
inc ecx
mov dword [ebp - 4], ecx
cmp ecx, 0x36
jb 0x1005d010
jmp 0x1005d092
xor ecx, ecx
mov dword [ebp - 4], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x3c]
xor ebx, dword [esi + 0x38]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 4]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [edi + ecx]
xor al, bl
mov byte [edi + ecx], al
inc ecx
mov dword [ebp - 4], ecx
cmp ecx, 0x36
jb 0x1005d053
push ecx
mov ecx, dword [ebp + 8]
lea eax, [esi + 0x37]
push eax
push edi
call fcn.1004c790
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x1005d0b0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov ecx, 0x1019d47f
push ebx
push esi
call fcn.10138266
cmp byte [0x10183c98], 0
je 0x1005d122
cmp byte [0x10183c99], 0
jne 0x1005d163
mov byte [0x10183c99], 1
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10183ce4]
xor ebx, dword [0x10183ce0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10183c9a], al
inc esi
cmp esi, 0x46
jb 0x1005d0e1
jmp 0x1005d163
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10183ce4]
xor ebx, dword [0x10183ce0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10183c9a], al
inc esi
cmp esi, 0x46
jb 0x1005d124
push ecx
mov ecx, dword [ebp + 8]
push 0x10183cdf
push 0x10183c9a
call fcn.1004c790
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x1005d190
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
mov esi, ecx
mov ecx, 0x1019d47f
push edi
call fcn.10138266
cmp byte [esi], 0
lea edi, [esi + 2]
je 0x1005d1fe
cmp byte [esi + 1], 0
jne 0x1005d242
xor ecx, ecx
mov byte [esi + 1], 1
mov dword [ebp - 4], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x2c]
xor ebx, dword [esi + 0x28]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 4]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [edi + ecx], al
inc ecx
mov dword [ebp - 4], ecx
cmp ecx, 0x26
jb 0x1005d1c0
jmp 0x1005d242
xor ecx, ecx
mov dword [ebp - 4], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x2c]
xor ebx, dword [esi + 0x28]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 4]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [edi + ecx]
xor al, bl
mov byte [edi + ecx], al
inc ecx
mov dword [ebp - 4], ecx
cmp ecx, 0x26
jb 0x1005d203
push ecx
mov ecx, dword [ebp + 8]
lea eax, [esi + 0x27]
push eax
push edi
call fcn.1004c790
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4