joyce8/EMBER2024-capa huggingface dataset:
Function at 0x45b534
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ecx
push ecx
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, ecx
mov dword [ebp - 4], edi
mov eax, dword [edi]
mov eax, dword [eax + 0xc]
mov ebx, eax
mov dword [ebp - 8], eax
imul ebx, esi
mov eax, dword [edi + 8]
imul eax, dword [ebp + 0x10]
add ebx, dword [edi + 0x14]
sub esi, dword [edi + 0xc]
sar eax, 8
cmp eax, 0xfe
jge 0x45b618
inc eax
mov dword [ebp + 0x10], eax
mov eax, dword [ebp + 0xc]
mov edx, 0xff00ff
mov dword [ebp + 0xc], eax
mov eax, dword [edi + 4]
mov ecx, esi
mov eax, dword [eax + 0xc]
imul eax, ecx
add eax, dword [edi + 0x18]
inc esi
mov dword [ebp + 8], esi
mov ecx, dword [eax]
mov esi, dword [ebp + 0x10]
mov edi, ecx
and edi, edx
imul edi, esi
mov eax, ecx
shr eax, 8
and eax, 0xffff00ff
imul eax, esi
shr ecx, 8
and ecx, edx
imul ecx, esi
mov esi, dword [ebx]
shr edi, 8
xor edi, eax
and edi, edx
xor edi, ecx
mov ecx, esi
and esi, 0xff00ff
mov eax, edi
shr eax, 0x18
shr ecx, 8
mov edx, 0x100
sub edx, eax
imul esi, edx
mov eax, ecx
and eax, 0xffff00ff
imul eax, edx
shr esi, 8
xor esi, eax
mov eax, 0xff00ff
and ecx, eax
imul ecx, edx
and esi, eax
xor esi, ecx
add esi, edi
mov edi, dword [ebp - 4]
mov dword [ebx], esi
mov eax, dword [edi]
mov esi, dword [ebp + 8]
add ebx, dword [eax + 0xc]
mov eax, dword [ebp + 0xc]
dec eax
mov dword [ebp + 0xc], eax
mov edx, 0xff00ff
test eax, eax
jg 0x45b57b
jmp 0x45b6a2
mov eax, dword [edi + 4]
mov edx, dword [ebp + 0xc]
mov ecx, dword [eax + 0xc]
imul ecx, esi
add ecx, dword [edi + 0x18]
cmp dword [eax + 0xc], 3
mov dword [ebp + 0xc], edx
mov dword [ebp + 8], ecx
jne 0x45b649
cmp dword [ebp - 8], 3
jne 0x45b649
imul edx, edx, 3
push edx
push ecx
push ebx
call fcn.004a40e0
add esp, 0xc
jmp 0x45b6a2
mov eax, dword [ecx]
mov esi, dword [ebx]
shr eax, 0x18
mov ecx, esi
shr ecx, 8
and esi, 0xff00ff
mov edx, 0x100
sub edx, eax
imul esi, edx
mov eax, ecx
and eax, 0xffff00ff
imul eax, edx
shr esi, 8
xor esi, eax
mov eax, 0xff00ff
and ecx, eax
imul ecx, edx
and esi, eax
xor esi, ecx
mov ecx, dword [ebp + 8]
add esi, dword [ecx]
mov dword [ebx], esi
mov eax, dword [edi]
add ebx, dword [eax + 0xc]
mov eax, dword [edi + 4]
add ecx, dword [eax + 0xc]
mov eax, dword [ebp + 0xc]
dec eax
mov dword [ebp + 8], ecx
mov dword [ebp + 0xc], eax
test eax, eax
jg 0x45b649
pop edi
pop esi
pop ebx
leave
ret 0xc
Function at 0x45b6a9
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ecx
push ecx
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, ecx
mov dword [ebp - 4], edi
mov eax, dword [edi]
mov eax, dword [eax + 0xc]
mov ebx, eax
imul ebx, esi
add ebx, dword [edi + 0x14]
sub esi, dword [edi + 0xc]
cmp dword [edi + 8], 0xfe
mov dword [ebp - 8], eax
jge 0x45b77d
mov eax, dword [ebp + 0xc]
mov dword [ebp + 0xc], eax
mov eax, dword [edi + 4]
mov edx, dword [edi + 8]
mov eax, dword [eax + 0xc]
mov ecx, esi
imul eax, ecx
add eax, dword [edi + 0x18]
inc esi
mov dword [ebp + 8], esi
mov ecx, dword [eax]
mov edi, ecx
mov eax, ecx
shr eax, 8
and eax, 0xffff00ff
inc edx
imul eax, edx
mov esi, 0xff00ff
and edi, esi
imul edi, edx
shr ecx, 8
and ecx, esi
imul ecx, edx
shr edi, 8
xor edi, eax
and edi, esi
mov esi, dword [ebx]
xor edi, ecx
mov ecx, esi
and esi, 0xff00ff
mov eax, edi
shr eax, 0x18
shr ecx, 8
mov edx, 0x100
sub edx, eax
imul esi, edx
mov eax, ecx
and eax, 0xffff00ff
imul eax, edx
shr esi, 8
xor esi, eax
mov eax, 0xff00ff
and ecx, eax
imul ecx, edx
and esi, eax
xor esi, ecx
add esi, edi
mov edi, dword [ebp - 4]
mov dword [ebx], esi
mov eax, dword [edi]
mov esi, dword [ebp + 8]
add ebx, dword [eax + 0xc]
mov eax, dword [ebp + 0xc]
dec eax
mov dword [ebp + 0xc], eax
test eax, eax
jg 0x45b6df
jmp 0x45b807
mov eax, dword [edi + 4]
mov edx, dword [ebp + 0xc]
mov ecx, dword [eax + 0xc]
imul ecx, esi
add ecx, dword [edi + 0x18]
cmp dword [eax + 0xc], 3
mov dword [ebp + 0xc], edx
mov dword [ebp + 8], ecx
jne 0x45b7ae
cmp dword [ebp - 8], 3
jne 0x45b7ae
imul edx, edx, 3
push edx
push ecx
push ebx
call fcn.004a40e0
add esp, 0xc
jmp 0x45b807
mov eax, dword [ecx]
mov esi, dword [ebx]
shr eax, 0x18
mov ecx, esi
shr ecx, 8
and esi, 0xff00ff
mov edx, 0x100
sub edx, eax
imul esi, edx
mov eax, ecx
and eax, 0xffff00ff
imul eax, edx
shr esi, 8
xor esi, eax
mov eax, 0xff00ff
and ecx, eax
imul ecx, edx
and esi, eax
xor esi, ecx
mov ecx, dword [ebp + 8]
add esi, dword [ecx]
mov dword [ebx], esi
mov eax, dword [edi]
add ebx, dword [eax + 0xc]
mov eax, dword [edi + 4]
add ecx, dword [eax + 0xc]
mov eax, dword [ebp + 0xc]
dec eax
mov dword [ebp + 8], ecx
mov dword [ebp + 0xc], eax
test eax, eax
jg 0x45b7ae
pop edi
pop esi
pop ebx
leave
ret 8
Function at 0x45b9af
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
mov edi, dword [ebp + 0xc]
mov ebx, ecx
cmp edi, dword [ebx + 0x6c]
jle 0x45b9cd
push ecx
push edi
lea ecx, [ebx + 0x68]
mov dword [ebx + 0x6c], edi
call fcn.0044c6c7
mov eax, dword [ebx + 0x68]
push edi
push dword [ebp + 8]
mov ecx, ebx
push eax
mov dword [ebp - 4], eax
call fcn.0045b001
mov eax, dword [ebx + 0x48]
mov esi, dword [eax + 0xc]
imul esi, dword [ebp + 8]
mov eax, dword [ebx + 0x50]
imul eax, dword [ebp + 0x10]
add esi, dword [ebx + 0x64]
sar eax, 8
mov dword [ebp + 8], esi
cmp eax, 0xfe
jge 0x45baa2
inc eax
mov dword [ebp + 0x10], eax
mov edx, 0xff00ff
mov ecx, dword [ebp - 4]
mov esi, dword [esi]
mov ecx, dword [ecx]
mov edi, ecx
and edi, edx
imul edi, eax
mov eax, ecx
shr eax, 8
and eax, 0xffff00ff
imul eax, dword [ebp + 0x10]
shr ecx, 8
and ecx, edx
imul ecx, dword [ebp + 0x10]
shr edi, 8
xor edi, eax
and edi, edx
xor edi, ecx
mov ecx, esi
and esi, 0xff00ff
shr ecx, 8
mov eax, edi
shr eax, 0x18
mov edx, 0x100
sub edx, eax
imul esi, edx
mov eax, ecx
and eax, 0xffff00ff
imul eax, edx
shr esi, 8
xor esi, eax
add dword [ebp - 4], 4
mov eax, 0xff00ff
and ecx, eax
imul ecx, edx
and esi, eax
mov eax, dword [ebp + 8]
xor esi, ecx
add esi, edi
mov dword [eax], esi
mov eax, dword [ebx + 0x48]
mov esi, dword [ebp + 8]
add esi, dword [eax + 0xc]
mov eax, dword [ebp + 0xc]
dec eax
mov dword [ebp + 0xc], eax
test eax, eax
mov eax, dword [ebp + 0x10]
mov dword [ebp + 8], esi
mov edx, 0xff00ff
jg 0x45ba0d
jmp 0x45baff
mov ecx, dword [ebp - 4]
mov esi, dword [esi]
mov eax, dword [ecx]
mov ecx, esi
shr eax, 0x18
and esi, 0xff00ff
shr ecx, 8
mov edx, 0x100
sub edx, eax
imul esi, edx
mov eax, ecx
and eax, 0xffff00ff
imul eax, edx
shr esi, 8
xor esi, eax
mov eax, 0xff00ff
and ecx, eax
imul ecx, edx
and esi, eax
mov eax, dword [ebp + 8]
xor esi, ecx
mov ecx, dword [ebp - 4]
add esi, dword [ecx]
add ecx, 4
mov dword [eax], esi
mov eax, dword [ebx + 0x48]
mov esi, dword [ebp + 8]
add esi, dword [eax + 0xc]
dec edi
mov dword [ebp - 4], ecx
mov dword [ebp + 8], esi
test edi, edi
jg 0x45baa5
pop edi
pop esi
pop ebx
leave
ret 0xc
Function at 0x45be0f
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ecx
push ecx
mov eax, dword [ecx + 0x30]
mov edx, dword [ebp + 8]
push ebx
mov ebx, dword [eax + 0xc]
mov eax, dword [ebp + 0x10]
imul ebx, edx
add ebx, dword [ecx + 0x34]
push esi
push edi
mov dword [ebp - 4], ecx
cmp eax, 0xff
jge 0x45bedd
inc eax
mov dword [ebp + 0x10], eax
mov eax, dword [ebp + 0xc]
mov esi, 0xff00ff
mov dword [ebp + 0xc], eax
push edx
lea eax, [ebp - 8]
push eax
call fcn.0041d104
mov ecx, dword [eax]
mov edx, dword [ebp + 0x10]
mov edi, ecx
and edi, esi
mov eax, ecx
imul edi, edx
shr eax, 8
and eax, 0xffff00ff
imul eax, edx
shr ecx, 8
and ecx, esi
imul ecx, edx
shr edi, 8
xor edi, eax
and edi, esi
mov esi, dword [ebx]
xor edi, ecx
mov ecx, esi
and esi, 0xff00ff
shr ecx, 8
mov eax, edi
shr eax, 0x18
mov edx, 0x100
sub edx, eax
imul esi, edx
mov eax, ecx
and eax, 0xffff00ff
imul eax, edx
shr esi, 8
xor esi, eax
mov eax, 0xff00ff
and ecx, eax
imul ecx, edx
mov edx, dword [ebp + 8]
and esi, eax
xor esi, ecx
mov ecx, dword [ebp - 4]
add esi, edi
mov dword [ebx], esi
mov eax, dword [ecx + 0x30]
inc edx
add ebx, dword [eax + 0xc]
mov eax, dword [ebp + 0xc]
dec eax
mov dword [ebp + 8], edx
mov dword [ebp + 0xc], eax
mov esi, 0xff00ff
test eax, eax
jg 0x45be46
jmp 0x45bf47
mov eax, dword [ebp + 0xc]
mov dword [ebp + 0xc], eax
push edx
lea eax, [ebp + 0x10]
push eax
call fcn.0041d104
mov edi, dword [eax]
mov esi, dword [ebx]
mov ecx, esi
shr ecx, 8
and esi, 0xff00ff
mov eax, edi
shr eax, 0x18
mov edx, 0x100
sub edx, eax
imul esi, edx
mov eax, ecx
and eax, 0xffff00ff
imul eax, edx
shr esi, 8
xor esi, eax
mov eax, 0xff00ff
and ecx, eax
imul ecx, edx
mov edx, dword [ebp + 8]
and esi, eax
xor esi, ecx
mov ecx, dword [ebp - 4]
add esi, edi
mov dword [ebx], esi
mov eax, dword [ecx + 0x30]
inc edx
add ebx, dword [eax + 0xc]
mov eax, dword [ebp + 0xc]
dec eax
mov dword [ebp + 8], edx
mov dword [ebp + 0xc], eax
test eax, eax
jg 0x45bee3
pop edi
pop esi
pop ebx
leave
ret 0xc
Function at 0x45bf4e
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ecx
push ecx
mov eax, dword [ecx + 0x68]
mov edx, dword [ebp + 8]
push ebx
mov ebx, dword [eax + 0xc]
mov eax, dword [ebp + 0x10]
imul ebx, edx
add ebx, dword [ecx + 0x6c]
push esi
push edi
mov dword [ebp - 4], ecx
cmp eax, 0xff
jge 0x45c01c
inc eax
mov dword [ebp + 0x10], eax
mov eax, dword [ebp + 0xc]
mov esi, 0xff00ff
mov dword [ebp + 0xc], eax
push edx
lea eax, [ebp - 8]
push eax
call fcn.0041d16a
mov ecx, dword [eax]
mov edx, dword [ebp + 0x10]
mov edi, ecx
and edi, esi
mov eax, ecx
imul edi, edx
shr eax, 8
and eax, 0xffff00ff
imul eax, edx
shr ecx, 8
and ecx, esi
imul ecx, edx
shr edi, 8
xor edi, eax
and edi, esi
mov esi, dword [ebx]
xor edi, ecx
mov ecx, esi
and esi, 0xff00ff
shr ecx, 8
mov eax, edi
shr eax, 0x18
mov edx, 0x100
sub edx, eax
imul esi, edx
mov eax, ecx
and eax, 0xffff00ff
imul eax, edx
shr esi, 8
xor esi, eax
mov eax, 0xff00ff
and ecx, eax
imul ecx, edx
mov edx, dword [ebp + 8]
and esi, eax
xor esi, ecx
mov ecx, dword [ebp - 4]
add esi, edi
mov dword [ebx], esi
mov eax, dword [ecx + 0x68]
inc edx
add ebx, dword [eax + 0xc]
mov eax, dword [ebp + 0xc]
dec eax
mov dword [ebp + 8], edx
mov dword [ebp + 0xc], eax
mov esi, 0xff00ff
test eax, eax
jg 0x45bf85
jmp 0x45c086
mov eax, dword [ebp + 0xc]
mov dword [ebp + 0xc], eax
push edx
lea eax, [ebp + 0x10]
push eax
call fcn.0041d16a
mov edi, dword [eax]
mov esi, dword [ebx]
mov ecx, esi
shr ecx, 8
and esi, 0xff00ff
mov eax, edi
shr eax, 0x18
mov edx, 0x100
sub edx, eax
imul esi, edx
mov eax, ecx
and eax, 0xffff00ff
imul eax, edx
shr esi, 8
xor esi, eax
mov eax, 0xff00ff
and ecx, eax
imul ecx, edx
mov edx, dword [ebp + 8]
and esi, eax
xor esi, ecx
mov ecx, dword [ebp - 4]
add esi, edi
mov dword [ebx], esi
mov eax, dword [ecx + 0x68]
inc edx
add ebx, dword [eax + 0xc]
mov eax, dword [ebp + 0xc]
dec eax
mov dword [ebp + 8], edx
mov dword [ebp + 0xc], eax
test eax, eax
jg 0x45c022
pop edi
pop esi
pop ebx
leave
ret 0xc
Function at 0x45c08d
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ecx
push ecx
mov eax, dword [ecx + 0x30]
mov edx, dword [ebp + 8]
push ebx
mov ebx, dword [eax + 0xc]
mov eax, dword [ebp + 0x10]
imul ebx, edx
add ebx, dword [ecx + 0x34]
push esi
push edi
mov dword [ebp - 4], ecx
cmp eax, 0xff
jge 0x45c15b
inc eax
mov dword [ebp + 0x10], eax
mov eax, dword [ebp + 0xc]
mov esi, 0xff00ff
mov dword [ebp + 0xc], eax
push edx
lea eax, [ebp - 8]
push eax
call fcn.0041d03e
mov ecx, dword [eax]
mov edx, dword [ebp + 0x10]
mov edi, ecx
and edi, esi
mov eax, ecx
imul edi, edx
shr eax, 8
and eax, 0xffff00ff
imul eax, edx
shr ecx, 8
and ecx, esi
imul ecx, edx
shr edi, 8
xor edi, eax
and edi, esi
mov esi, dword [ebx]
xor edi, ecx
mov ecx, esi
and esi, 0xff00ff
shr ecx, 8
mov eax, edi
shr eax, 0x18
mov edx, 0x100
sub edx, eax
imul esi, edx
mov eax, ecx
and eax, 0xffff00ff
imul eax, edx
shr esi, 8
xor esi, eax
mov eax, 0xff00ff
and ecx, eax
imul ecx, edx
mov edx, dword [ebp + 8]
and esi, eax
xor esi, ecx
mov ecx, dword [ebp - 4]
add esi, edi
mov dword [ebx], esi
mov eax, dword [ecx + 0x30]
inc edx
add ebx, dword [eax + 0xc]
mov eax, dword [ebp + 0xc]
dec eax
mov dword [ebp + 8], edx
mov dword [ebp + 0xc], eax
mov esi, 0xff00ff
test eax, eax
jg 0x45c0c4
jmp 0x45c1c5
mov eax, dword [ebp + 0xc]
mov dword [ebp + 0xc], eax
push edx
lea eax, [ebp + 0x10]
push eax
call fcn.0041d03e
mov edi, dword [eax]
mov esi, dword [ebx]
mov ecx, esi
shr ecx, 8
and esi, 0xff00ff
mov eax, edi
shr eax, 0x18
mov edx, 0x100
sub edx, eax
imul esi, edx
mov eax, ecx
and eax, 0xffff00ff
imul eax, edx
shr esi, 8
xor esi, eax
mov eax, 0xff00ff
and ecx, eax
imul ecx, edx
mov edx, dword [ebp + 8]
and esi, eax
xor esi, ecx
mov ecx, dword [ebp - 4]
add esi, edi
mov dword [ebx], esi
mov eax, dword [ecx + 0x30]
inc edx
add ebx, dword [eax + 0xc]
mov eax, dword [ebp + 0xc]
dec eax
mov dword [ebp + 8], edx
mov dword [ebp + 0xc], eax
test eax, eax
jg 0x45c161
pop edi
pop esi
pop ebx
leave
ret 0xc
Function at 0x45c1cc
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ecx
push ecx
push ebx
mov ebx, ecx
mov ecx, dword [ebp + 8]
mov eax, dword [ebx + 0x30]
push esi
push edi
mov edi, dword [eax + 0xc]
mov eax, dword [ebp + 0x10]
imul edi, ecx
add edi, dword [ebx + 0x34]
cmp eax, 0xff
jge 0x45c29a
inc eax
mov dword [ebp + 0x10], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp + 0xc], eax
push ecx
lea eax, [ebp - 4]
push eax
mov ecx, ebx
call fcn.0041d104
mov ecx, dword [eax]
mov esi, ecx
mov eax, ecx
shr eax, 8
and eax, 0xffff00ff
imul eax, dword [ebp + 0x10]
shr ecx, 8
mov edx, 0xff00ff
and esi, edx
imul esi, dword [ebp + 0x10]
and ecx, edx
imul ecx, dword [ebp + 0x10]
shr esi, 8
xor esi, eax
and esi, edx
xor esi, ecx
movzx ecx, byte [edi + 2]
shl ecx, 0x10
mov eax, esi
shr eax, 0x18
mov edx, 0x100
sub edx, eax
movzx eax, byte [edi]
or ecx, eax
movzx eax, byte [edi + 1]
imul ecx, edx
imul eax, edx
and eax, 0xff00
shr ecx, 8
add eax, esi
and ecx, 0xff00ff
add ecx, eax
mov byte [edi], cl
mov eax, ecx
shr eax, 8
shr ecx, 0x10
mov byte [edi + 1], al
mov byte [edi + 2], cl
mov eax, dword [ebx + 0x30]
mov ecx, dword [ebp + 8]
add edi, dword [eax + 0xc]
mov eax, dword [ebp + 0xc]
inc ecx
dec eax
mov dword [ebp + 8], ecx
mov dword [ebp + 0xc], eax
test eax, eax
jg 0x45c1fd
jmp 0x45c30c
mov eax, dword [ebp + 0xc]
mov dword [ebp + 0xc], eax
push ecx
lea eax, [ebp + 0x10]
push eax
mov ecx, ebx
call fcn.0041d104
mov esi, dword [eax]
movzx ecx, byte [edi + 2]
shl ecx, 0x10
mov eax, esi
shr eax, 0x18
mov edx, 0x100
sub edx, eax
movzx eax, byte [edi]
or ecx, eax
movzx eax, byte [edi + 1]
imul ecx, edx
imul eax, edx
and eax, 0xff00
add eax, esi
shr ecx, 8
and ecx, 0xff00ff
add ecx, eax
mov eax, ecx
shr eax, 0x10
mov byte [edi + 2], al
mov eax, ecx
shr eax, 8
mov byte [edi + 1], al
mov byte [edi], cl
mov eax, dword [ebx + 0x30]
mov ecx, dword [ebp + 8]
add edi, dword [eax + 0xc]
mov eax, dword [ebp + 0xc]
inc ecx
dec eax
mov dword [ebp + 8], ecx
mov dword [ebp + 0xc], eax
test eax, eax
jg 0x45c2a0
pop edi
pop esi
pop ebx
leave
ret 0xc
Function at 0x45c39e
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ecx
push ecx
push ebx
mov ebx, ecx
mov ecx, dword [ebp + 8]
mov eax, dword [ebx + 0x68]
push esi
push edi
mov edi, dword [eax + 0xc]
mov eax, dword [ebp + 0x10]
imul edi, ecx
add edi, dword [ebx + 0x6c]
cmp eax, 0xff
jge 0x45c46c
inc eax
mov dword [ebp + 0x10], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp + 0xc], eax
push ecx
lea eax, [ebp - 4]
push eax
mov ecx, ebx
call fcn.0041d16a
mov ecx, dword [eax]
mov esi, ecx
mov eax, ecx
shr eax, 8
and eax, 0xffff00ff
imul eax, dword [ebp + 0x10]
shr ecx, 8
mov edx, 0xff00ff
and esi, edx
imul esi, dword [ebp + 0x10]
and ecx, edx
imul ecx, dword [ebp + 0x10]
shr esi, 8
xor esi, eax
and esi, edx
xor esi, ecx
movzx ecx, byte [edi + 2]
shl ecx, 0x10
mov eax, esi
shr eax, 0x18
mov edx, 0x100
sub edx, eax
movzx eax, byte [edi]
or ecx, eax
movzx eax, byte [edi + 1]
imul ecx, edx
imul eax, edx
and eax, 0xff00
shr ecx, 8
add eax, esi
and ecx, 0xff00ff
add ecx, eax
mov byte [edi], cl
mov eax, ecx
shr eax, 8
shr ecx, 0x10
mov byte [edi + 1], al
mov byte [edi + 2], cl
mov eax, dword [ebx + 0x68]
mov ecx, dword [ebp + 8]
add edi, dword [eax + 0xc]
mov eax, dword [ebp + 0xc]
inc ecx
dec eax
mov dword [ebp + 8], ecx
mov dword [ebp + 0xc], eax
test eax, eax
jg 0x45c3cf
jmp 0x45c4de
mov eax, dword [ebp + 0xc]
mov dword [ebp + 0xc], eax
push ecx
lea eax, [ebp + 0x10]
push eax
mov ecx, ebx
call fcn.0041d16a
mov esi, dword [eax]
movzx ecx, byte [edi + 2]
shl ecx, 0x10
mov eax, esi
shr eax, 0x18
mov edx, 0x100
sub edx, eax
movzx eax, byte [edi]
or ecx, eax
movzx eax, byte [edi + 1]
imul ecx, edx
imul eax, edx
and eax, 0xff00
add eax, esi
shr ecx, 8
and ecx, 0xff00ff
add ecx, eax
mov eax, ecx
shr eax, 0x10
mov byte [edi + 2], al
mov eax, ecx
shr eax, 8
mov byte [edi + 1], al
mov byte [edi], cl
mov eax, dword [ebx + 0x68]
mov ecx, dword [ebp + 8]
add edi, dword [eax + 0xc]
mov eax, dword [ebp + 0xc]
inc ecx
dec eax
mov dword [ebp + 8], ecx
mov dword [ebp + 0xc], eax
test eax, eax
jg 0x45c472
pop edi
pop esi
pop ebx
leave
ret 0xc
Function at 0x45c570
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
mov ebx, ecx
mov ecx, dword [ebp + 8]
mov eax, dword [ebx + 0x30]
push esi
push edi
mov edi, dword [eax + 0xc]
mov eax, dword [ebp + 0x10]
imul edi, ecx
add edi, dword [ebx + 0x34]
cmp eax, 0xff
jge 0x45c63d
inc eax
mov dword [ebp + 0x10], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp + 0xc], eax
push ecx
lea eax, [ebp - 4]
push eax
mov ecx, ebx
call fcn.0041d03e
mov ecx, dword [eax]
mov esi, ecx
mov eax, ecx
shr eax, 8
and eax, 0xffff00ff
imul eax, dword [ebp + 0x10]
shr ecx, 8
mov edx, 0xff00ff
and esi, edx
imul esi, dword [ebp + 0x10]
and ecx, edx
imul ecx, dword [ebp + 0x10]
shr esi, 8
xor esi, eax
and esi, edx
xor esi, ecx
movzx ecx, byte [edi + 2]
shl ecx, 0x10
mov eax, esi
shr eax, 0x18
mov edx, 0x100
sub edx, eax
movzx eax, byte [edi]
or ecx, eax
movzx eax, byte [edi + 1]
imul ecx, edx
imul eax, edx
and eax, 0xff00
shr ecx, 8
add eax, esi
and ecx, 0xff00ff
add ecx, eax
mov byte [edi], cl
mov eax, ecx
shr eax, 8
shr ecx, 0x10
mov byte [edi + 1], al
mov byte [edi + 2], cl
mov eax, dword [ebx + 0x30]
mov ecx, dword [ebp + 8]
add edi, dword [eax + 0xc]
mov eax, dword [ebp + 0xc]
inc ecx
dec eax
mov dword [ebp + 8], ecx
mov dword [ebp + 0xc], eax
test eax, eax
jg 0x45c5a0
jmp 0x45c6af
mov eax, dword [ebp + 0xc]
mov dword [ebp + 0xc], eax
push ecx
lea eax, [ebp + 0x10]
push eax
mov ecx, ebx
call fcn.0041d03e
mov esi, dword [eax]
movzx ecx, byte [edi + 2]
shl ecx, 0x10
mov eax, esi
shr eax, 0x18
mov edx, 0x100
sub edx, eax
movzx eax, byte [edi]
or ecx, eax
movzx eax, byte [edi + 1]
imul ecx, edx
imul eax, edx
and eax, 0xff00
add eax, esi
shr ecx, 8
and ecx, 0xff00ff
add ecx, eax
mov eax, ecx
shr eax, 0x10
mov byte [edi + 2], al
mov eax, ecx
shr eax, 8
mov byte [edi + 1], al
mov byte [edi], cl
mov eax, dword [ebx + 0x30]
mov ecx, dword [ebp + 8]
add edi, dword [eax + 0xc]
mov eax, dword [ebp + 0xc]
inc ecx
dec eax
mov dword [ebp + 8], ecx
mov dword [ebp + 0xc], eax
test eax, eax
jg 0x45c643
pop edi
pop esi
pop ebx
leave
ret 0xc
Function at 0x45c948
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
mov edi, dword [ebp + 0xc]
mov ebx, ecx
cmp edi, dword [ebx + 0x6c]
jle 0x45c966
push ecx
push edi
lea ecx, [ebx + 0x68]
mov dword [ebx + 0x6c], edi
call fcn.0044c6c7
mov eax, dword [ebx + 0x68]
push edi
push dword [ebp + 8]
mov ecx, ebx
push eax
mov dword [ebp - 4], eax
call fcn.0045fe3a
mov eax, dword [ebx + 0x48]
mov esi, dword [eax + 0xc]
imul esi, dword [ebp + 8]
mov eax, dword [ebx + 0x50]
imul eax, dword [ebp + 0x10]
add esi, dword [ebx + 0x64]
sar eax, 8
mov dword [ebp + 8], esi
cmp eax, 0xfe
jge 0x45ca3b
inc eax
mov dword [ebp + 0x10], eax
mov edx, 0xff00ff
mov ecx, dword [ebp - 4]
mov esi, dword [esi]
mov ecx, dword [ecx]
mov edi, ecx
and edi, edx
imul edi, eax
mov eax, ecx
shr eax, 8
and eax, 0xffff00ff
imul eax, dword [ebp + 0x10]
shr ecx, 8
and ecx, edx
imul ecx, dword [ebp + 0x10]
shr edi, 8
xor edi, eax
and edi, edx
xor edi, ecx
mov ecx, esi
and esi, 0xff00ff
shr ecx, 8
mov eax, edi
shr eax, 0x18
mov edx, 0x100
sub edx, eax
imul esi, edx
mov eax, ecx
and eax, 0xffff00ff
imul eax, edx
shr esi, 8
xor esi, eax
add dword [ebp - 4], 4
mov eax, 0xff00ff
and ecx, eax
imul ecx, edx
and esi, eax
mov eax, dword [ebp + 8]
xor esi, ecx
add esi, edi
mov dword [eax], esi
mov eax, dword [ebx + 0x48]
mov esi, dword [ebp + 8]
add esi, dword [eax + 0xc]
mov eax, dword [ebp + 0xc]
dec eax
mov dword [ebp + 0xc], eax
test eax, eax
mov eax, dword [ebp + 0x10]
mov dword [ebp + 8], esi
mov edx, 0xff00ff
jg 0x45c9a6
jmp 0x45ca98
mov ecx, dword [ebp - 4]
mov esi, dword [esi]
mov eax, dword [ecx]
mov ecx, esi
shr eax, 0x18
and esi, 0xff00ff
shr ecx, 8
mov edx, 0x100
sub edx, eax
imul esi, edx
mov eax, ecx
and eax, 0xffff00ff
imul eax, edx
shr esi, 8
xor esi, eax
mov eax, 0xff00ff
and ecx, eax
imul ecx, edx
and esi, eax
mov eax, dword [ebp + 8]
xor esi, ecx
mov ecx, dword [ebp - 4]
add esi, dword [ecx]
add ecx, 4
mov dword [eax], esi
mov eax, dword [ebx + 0x48]
mov esi, dword [ebp + 8]
add esi, dword [eax + 0xc]
dec edi
mov dword [ebp - 4], ecx
mov dword [ebp + 8], esi
test edi, edi
jg 0x45ca3e
pop edi
pop esi
pop ebx
leave
ret 0xc
Function at 0x45ca9f
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
mov esi, dword [ebp + 0xc]
mov ebx, ecx
push edi
cmp esi, dword [ebx + 0x6c]
jle 0x45cabd
push ecx
push esi
lea ecx, [ebx + 0x68]
mov dword [ebx + 0x6c], esi
call fcn.0044fa7f
mov edi, dword [ebx + 0x68]
push esi
push dword [ebp + 8]
mov ecx, ebx
push edi
call fcn.0046000d
mov eax, dword [ebx + 0x48]
mov ecx, dword [eax + 0xc]
imul ecx, dword [ebp + 8]
mov eax, dword [ebx + 0x50]
imul eax, dword [ebp + 0x10]
add ecx, dword [ebx + 0x64]
sar eax, 8
mov dword [ebp + 8], ecx
cmp eax, 0xfe
jge 0x45cb96
lea esi, [eax + 1]
lea edx, [edi + 1]
mov dword [ebp - 4], esi
mov dword [ebp + 0x10], edx
movzx edi, byte [edx + 1]
movzx eax, byte [edx - 1]
shl edi, 0x10
or edi, eax
movzx eax, byte [edx]
imul edi, esi
or eax, 0xffff0000
imul eax, esi
shr edi, 8
xor edi, eax
movzx eax, byte [edx]
or eax, 0xff0000
imul eax, esi
mov esi, dword [ecx]
mov ecx, esi
and edi, 0xff00ff
xor edi, eax
shr ecx, 8
and esi, 0xff00ff
mov eax, edi
shr eax, 0x18
mov edx, 0x100
sub edx, eax
imul esi, edx
mov eax, ecx
and eax, 0xffff00ff
imul eax, edx
shr esi, 8
xor esi, eax
mov eax, 0xff00ff
and ecx, eax
imul ecx, edx
mov edx, dword [ebp + 0x10]
and esi, eax
xor esi, ecx
mov ecx, dword [ebp + 8]
add esi, edi
mov dword [ecx], esi
mov eax, dword [ebx + 0x48]
mov esi, dword [ebp - 4]
add ecx, dword [eax + 0xc]
mov eax, dword [ebp + 0xc]
add edx, 3
dec eax
mov dword [ebp + 0x10], edx
mov dword [ebp + 8], ecx
mov dword [ebp + 0xc], eax
test eax, eax
jg 0x45cafd
jmp 0x45cbc4
inc edi
mov edx, ecx
movzx ecx, byte [edi + 1]
movzx eax, byte [edi]
or ecx, 0xffffff00
shl ecx, 8
or ecx, eax
movzx eax, byte [edi - 1]
shl ecx, 8
or ecx, eax
mov dword [edx], ecx
mov eax, dword [ebx + 0x48]
lea edi, [edi + 3]
add edx, dword [eax + 0xc]
dec esi
test esi, esi
jg 0x45cb99
pop edi
pop esi
pop ebx
leave
ret 0xc