joyce8/EMBER2024-capa huggingface dataset:
Function at 0xf07af09
Capabilities:
Encode data using xor

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, dword [0xf232b50]
mov ecx, dword [eax + 0x508]
add ecx, dword [ebp + 8]
cmp dword [ebp + 0x18], 0
push esi
push edi
je 0xf07af4b
mov edi, dword [ebp + 0x14]
test edi, edi
je 0xf07af7a
mov esi, dword [ebp + 0xc]
mov dl, byte [eax + 0x514]
and dl, byte [esi]
or dl, byte [eax + 0x510]
xor dl, byte [eax + 0x500]
mov byte [ecx], dl
inc ecx
inc esi
dec edi
jne 0xf07af2e
jmp 0xf07af7a
mov esi, dword [eax + 0x504]
mov edx, dword [ebp + 0x14]
add esi, dword [ebp + 0x10]
test edx, edx
je 0xf07af7a
mov edi, dword [ebp + 0xc]
push ebx
mov bl, byte [eax + 0x514]
and bl, byte [edi]
or bl, byte [eax + 0x510]
xor bl, byte [esi]
add esi, 4
mov byte [ecx], bl
inc ecx
inc edi
dec edx
jne 0xf07af5f
pop ebx
pop edi
pop esi
pop ebp
ret

Function at 0xf07b1fa
Capabilities:
Encode data using xor

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, dword [ebp + 0x14]
push ebx
push esi
mov esi, dword [0xf232b50]
push edi
mov edi, dword [esi + 0x508]
add edi, dword [ebp + 8]
cmp dword [ebp + 0x18], 0
je 0xf07b268
test eax, eax
je 0xf07b2c1
mov dword [ebp + 0x14], eax
mov eax, dword [ebp + 0xc]
movzx ecx, byte [eax]
mov al, byte [esi + 0x514]
mov dl, byte [esi + 0x518]
mov bl, byte [esi + 0x520]
and al, cl
or al, byte [esi + 0x510]
mov cl, byte [esi + 0x500]
and dl, al
xor dl, byte [esi + 0x51c]
xor bl, cl
and dl, cl
and bl, al
or dl, bl
mov byte [edi], dl
inc edi
inc dword [ebp + 0xc]
dec dword [ebp + 0x14]
jne 0xf07b225
jmp 0xf07b2c1
mov ecx, dword [esi + 0x504]
add ecx, dword [ebp + 0x10]
test eax, eax
mov dword [ebp + 0x18], ecx
je 0xf07b2c1
mov dword [ebp + 0x14], eax
jmp 0xf07b280
mov ecx, dword [ebp + 0x18]
mov eax, dword [ebp + 0xc]
movzx edx, byte [eax]
mov al, byte [esi + 0x514]
mov cl, byte [ecx]
mov bl, byte [esi + 0x520]
add dword [ebp + 0x18], 4
and al, dl
or al, byte [esi + 0x510]
mov dl, byte [esi + 0x518]
and dl, al
xor dl, byte [esi + 0x51c]
xor bl, cl
and dl, cl
and bl, al
or dl, bl
mov byte [edi], dl
inc edi
inc dword [ebp + 0xc]
dec dword [ebp + 0x14]
jne 0xf07b27d
pop edi
pop esi
pop ebx
pop ebp
ret
Function at 0xf07da59
Capabilities:
Encode data using xor

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, dword [0xf232b50]
mov ecx, dword [ebp + 0x14]
push ebx
push esi
mov esi, dword [eax + 0x508]
add esi, dword [ebp + 8]
cmp dword [ebp + 0x18], 0
push edi
je 0xf07dac9
test ecx, ecx
je 0xf07db25
mov dword [ebp + 0x14], ecx
mov ecx, dword [ebp + 0xc]
movzx edx, byte [ecx]
mov edi, dword [eax + 0x500]
mov ebx, dword [eax + 0x510]
mov ecx, edx
shl ecx, 8
or ecx, edx
shl ecx, 8
or ecx, edx
shl ecx, 8
or ecx, edx
mov edx, dword [eax + 0x524]
xor ebx, edi
and ebx, edx
and edx, ecx
and ebx, ecx
not edx
and edx, edi
or ebx, edx
mov dword [esi], ebx
sub esi, 4
dec dword [ebp + 0xc]
dec dword [ebp + 0x14]
jne 0xf07da83
jmp 0xf07db25
mov edx, dword [eax + 0x504]
add edx, dword [ebp + 0x10]
test ecx, ecx
mov dword [ebp + 0x18], edx
je 0xf07db25
mov dword [ebp + 0x14], ecx
mov ecx, dword [ebp + 0xc]
movzx edi, byte [ecx]
mov ebx, dword [eax + 0x510]
mov ecx, edi
shl ecx, 8
or ecx, edi
shl ecx, 8
or ecx, edi
shl ecx, 8
or ecx, edi
mov edi, dword [edx]
mov edx, dword [eax + 0x524]
xor ebx, edi
and ebx, edx
and edx, ecx
not edx
and edx, edi
and ebx, ecx
or ebx, edx
mov edx, dword [ebp + 0x18]
mov dword [esi], ebx
sub esi, 4
dec dword [ebp + 0xc]
sub edx, 4
dec dword [ebp + 0x14]
mov dword [ebp + 0x18], edx
jne 0xf07dadc
pop edi
pop esi
pop ebx
pop ebp
ret

Function at 0xf07ddd4
Capabilities:
Encode data using xor

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, dword [0xf232b50]
mov ecx, dword [ebp + 0x14]
mov edx, dword [eax + 0x508]
add edx, dword [ebp + 8]
push ebx
push esi
add ecx, ecx
cmp dword [ebp + 0x18], 0
push edi
je 0xf07de4a
test ecx, ecx
je 0xf07deaa
mov dword [ebp + 0x14], ecx
mov ecx, dword [ebp + 0xc]
movzx esi, byte [ecx]
mov ebx, dword [eax + 0x510]
mov edi, dword [eax + 0x524]
mov ecx, esi
shl ecx, 8
or ecx, esi
shl ecx, 8
or ecx, esi
shl ecx, 8
or ecx, esi
mov esi, dword [eax + 0x500]
and edi, ecx
xor ebx, esi
and ebx, dword [eax + 0x524]
not edi
and edi, esi
and ebx, ecx
or edi, ebx
mov dword [edx], edi
sub edx, 4
dec dword [ebp + 0xc]
dec dword [ebp + 0x14]
jne 0xf07de00
jmp 0xf07deaa
mov esi, dword [eax + 0x504]
add esi, dword [ebp + 0x10]
test ecx, ecx
mov dword [ebp + 0x14], esi
je 0xf07deaa
mov dword [ebp + 0x18], ecx
mov ecx, dword [ebp + 0xc]
movzx edi, byte [ecx]
mov esi, dword [esi]
mov ebx, dword [eax + 0x510]
mov ecx, edi
shl ecx, 8
or ecx, edi
shl ecx, 8
or ecx, edi
shl ecx, 8
or ecx, edi
mov edi, dword [eax + 0x524]
xor ebx, esi
and ebx, dword [eax + 0x524]
and edi, ecx
not edi
and edi, esi
mov esi, dword [ebp + 0x14]
and ebx, ecx
or edi, ebx
mov dword [edx], edi
sub edx, 4
dec dword [ebp + 0xc]
sub esi, 4
dec dword [ebp + 0x18]
mov dword [ebp + 0x14], esi
jne 0xf07de5d
pop edi
pop esi
pop ebx
pop ebp
ret
Function at 0xf07f06d
Capabilities:
Encode data using xor

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, dword [0xf232b50]
mov ecx, dword [ebp + 0x14]
mov edx, dword [eax + 0x508]
add edx, dword [ebp + 8]
push ebx
push esi
add ecx, ecx
cmp dword [ebp + 0x18], 0
push edi
je 0xf07f0e3
test ecx, ecx
je 0xf07f143
mov dword [ebp + 0x14], ecx
mov ecx, dword [ebp + 0xc]
movzx esi, byte [ecx]
mov ebx, dword [eax + 0x510]
mov edi, dword [eax + 0x524]
mov ecx, esi
shl ecx, 8
or ecx, esi
shl ecx, 8
or ecx, esi
shl ecx, 8
or ecx, esi
mov esi, dword [eax + 0x500]
and edi, ecx
xor ebx, esi
and ebx, dword [eax + 0x524]
not edi
and edi, esi
and ebx, ecx
or edi, ebx
mov dword [edx], edi
add edx, 4
inc dword [ebp + 0xc]
dec dword [ebp + 0x14]
jne 0xf07f099
jmp 0xf07f143
mov esi, dword [eax + 0x504]
add esi, dword [ebp + 0x10]
test ecx, ecx
mov dword [ebp + 0x14], esi
je 0xf07f143
mov dword [ebp + 0x18], ecx
mov ecx, dword [ebp + 0xc]
movzx edi, byte [ecx]
mov esi, dword [esi]
mov ebx, dword [eax + 0x510]
mov ecx, edi
shl ecx, 8
or ecx, edi
shl ecx, 8
or ecx, edi
shl ecx, 8
or ecx, edi
mov edi, dword [eax + 0x524]
xor ebx, esi
and ebx, dword [eax + 0x524]
and edi, ecx
not edi
and edi, esi
mov esi, dword [ebp + 0x14]
and ebx, ecx
or edi, ebx
mov dword [edx], edi
add edx, 4
inc dword [ebp + 0xc]
add esi, 4
dec dword [ebp + 0x18]
mov dword [ebp + 0x14], esi
jne 0xf07f0f6
pop edi
pop esi
pop ebx
pop ebp
ret

Function at 0xf07fb03
Capabilities:
Encode data using xor

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, dword [0xf232b50]
mov ecx, dword [ebp + 0x14]
push ebx
push esi
mov esi, dword [eax + 0x508]
add esi, dword [ebp + 8]
cmp dword [ebp + 0x18], 0
push edi
je 0xf07fb73
test ecx, ecx
je 0xf07fbcf
mov dword [ebp + 0x14], ecx
mov ecx, dword [ebp + 0xc]
movzx edx, byte [ecx]
mov edi, dword [eax + 0x500]
mov ebx, dword [eax + 0x510]
mov ecx, edx
shl ecx, 8
or ecx, edx
shl ecx, 8
or ecx, edx
shl ecx, 8
or ecx, edx
mov edx, dword [eax + 0x524]
xor ebx, edi
and ebx, edx
and edx, ecx
and ebx, ecx
not edx
and edx, edi
or ebx, edx
mov dword [esi], ebx
add esi, 4
inc dword [ebp + 0xc]
dec dword [ebp + 0x14]
jne 0xf07fb2d
jmp 0xf07fbcf
mov edx, dword [eax + 0x504]
add edx, dword [ebp + 0x10]
test ecx, ecx
mov dword [ebp + 0x18], edx
je 0xf07fbcf
mov dword [ebp + 0x14], ecx
mov ecx, dword [ebp + 0xc]
movzx edi, byte [ecx]
mov ebx, dword [eax + 0x510]
mov ecx, edi
shl ecx, 8
or ecx, edi
shl ecx, 8
or ecx, edi
shl ecx, 8
or ecx, edi
mov edi, dword [edx]
mov edx, dword [eax + 0x524]
xor ebx, edi
and ebx, edx
and edx, ecx
not edx
and edx, edi
and ebx, ecx
or ebx, edx
mov edx, dword [ebp + 0x18]
mov dword [esi], ebx
add esi, 4
inc dword [ebp + 0xc]
add edx, 4
dec dword [ebp + 0x14]
mov dword [ebp + 0x18], edx
jne 0xf07fb86
pop edi
pop esi
pop ebx
pop ebp
ret
Function at 0xf080330
Capabilities:
Encode data using xor

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, dword [0xf232b50]
mov ecx, dword [eax + 0x508]
add ecx, dword [ebp + 8]
cmp dword [ebp + 0x18], 0
mov edx, dword [ebp + 0x14]
push ebx
push esi
push edi
je 0xf08039d
test edx, edx
je 0xf0803f1
mov dword [ebp + 0x14], edx
mov edx, dword [ebp + 0xc]
movzx edx, byte [edx]
mov esi, dword [eax + 0x530]
mov edi, dword [eax + 0x518]
mov ebx, dword [eax + 0x520]
and edx, 0xf
mov edx, dword [esi + edx*4]
mov esi, dword [eax + 0x500]
and edi, edx
xor edi, dword [eax + 0x51c]
xor ebx, esi
and edi, esi
and ebx, edx
or edi, ebx
mov dword [ecx], edi
sub ecx, 4
dec dword [ebp + 0xc]
dec dword [ebp + 0x14]
jne 0xf08035a
jmp 0xf0803f1
mov esi, dword [eax + 0x504]
add esi, dword [ebp + 0x10]
test edx, edx
je 0xf0803f1
mov dword [ebp + 0x14], edx
mov edx, dword [ebp + 0xc]
movzx edx, byte [edx]
mov edi, dword [eax + 0x530]
mov ebx, dword [eax + 0x518]
and edx, 0xf
mov edi, dword [edi + edx*4]
mov edx, dword [esi]
and ebx, edi
xor ebx, dword [eax + 0x51c]
mov dword [ebp + 0x18], edi
mov edi, dword [eax + 0x520]
xor edi, edx
and edi, dword [ebp + 0x18]
and ebx, edx
or ebx, edi
mov dword [ecx], ebx
sub ecx, 4
dec dword [ebp + 0xc]
sub esi, 4
dec dword [ebp + 0x14]
jne 0xf0803ad
pop edi
pop esi
pop ebx
pop ebp
ret

Function at 0xf08067d
Capabilities:
Encode data using xor

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, dword [0xf232b50]
mov edx, dword [ebp + 0x14]
mov ecx, dword [eax + 0x508]
add ecx, dword [ebp + 8]
push ebx
push esi
add edx, edx
cmp dword [ebp + 0x18], 0
push edi
je 0xf0806ec
test edx, edx
je 0xf080740
mov dword [ebp + 0x14], edx
mov edx, dword [ebp + 0xc]
movzx edx, byte [edx]
mov esi, dword [eax + 0x530]
mov edi, dword [eax + 0x518]
mov ebx, dword [eax + 0x520]
and edx, 0xf
mov edx, dword [esi + edx*4]
mov esi, dword [eax + 0x500]
and edi, edx
xor edi, dword [eax + 0x51c]
xor ebx, esi
and edi, esi
and ebx, edx
or edi, ebx
mov dword [ecx], edi
sub ecx, 4
dec dword [ebp + 0xc]
dec dword [ebp + 0x14]
jne 0xf0806a9
jmp 0xf080740
mov esi, dword [eax + 0x504]
add esi, dword [ebp + 0x10]
test edx, edx
je 0xf080740
mov dword [ebp + 0x14], edx
mov edx, dword [ebp + 0xc]
movzx edx, byte [edx]
mov edi, dword [eax + 0x530]
mov ebx, dword [eax + 0x518]
and edx, 0xf
mov edi, dword [edi + edx*4]
mov edx, dword [esi]
and ebx, edi
xor ebx, dword [eax + 0x51c]
mov dword [ebp + 0x18], edi
mov edi, dword [eax + 0x520]
xor edi, edx
and edi, dword [ebp + 0x18]
and ebx, edx
or ebx, edi
mov dword [ecx], ebx
sub ecx, 4
dec dword [ebp + 0xc]
sub esi, 4
dec dword [ebp + 0x14]
jne 0xf0806fc
pop edi
pop esi
pop ebx
pop ebp
ret
Function at 0xf081839
Capabilities:
Encode data using xor

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, dword [0xf232b50]
mov edx, dword [ebp + 0x14]
mov ecx, dword [eax + 0x508]
add ecx, dword [ebp + 8]
push ebx
push esi
add edx, edx
cmp dword [ebp + 0x18], 0
push edi
je 0xf0818a8
test edx, edx
je 0xf0818fc
mov dword [ebp + 0x14], edx
mov edx, dword [ebp + 0xc]
movzx edx, byte [edx]
mov esi, dword [eax + 0x530]
mov edi, dword [eax + 0x518]
mov ebx, dword [eax + 0x520]
and edx, 0xf
mov edx, dword [esi + edx*4]
mov esi, dword [eax + 0x500]
and edi, edx
xor edi, dword [eax + 0x51c]
xor ebx, esi
and edi, esi
and ebx, edx
or edi, ebx
mov dword [ecx], edi
add ecx, 4
inc dword [ebp + 0xc]
dec dword [ebp + 0x14]
jne 0xf081865
jmp 0xf0818fc
mov esi, dword [eax + 0x504]
add esi, dword [ebp + 0x10]
test edx, edx
je 0xf0818fc
mov dword [ebp + 0x14], edx
mov edx, dword [ebp + 0xc]
movzx edx, byte [edx]
mov edi, dword [eax + 0x530]
mov ebx, dword [eax + 0x518]
and edx, 0xf
mov edi, dword [edi + edx*4]
mov edx, dword [esi]
and ebx, edi
xor ebx, dword [eax + 0x51c]
mov dword [ebp + 0x18], edi
mov edi, dword [eax + 0x520]
xor edi, edx
and edi, dword [ebp + 0x18]
and ebx, edx
or ebx, edi
mov dword [ecx], ebx
add ecx, 4
inc dword [ebp + 0xc]
add esi, 4
dec dword [ebp + 0x14]
jne 0xf0818b8
pop edi
pop esi
pop ebx
pop ebp
ret

Function at 0xf08223d
Capabilities:
Encode data using xor

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, dword [0xf232b50]
mov ecx, dword [eax + 0x508]
add ecx, dword [ebp + 8]
cmp dword [ebp + 0x18], 0
mov edx, dword [ebp + 0x14]
push ebx
push esi
push edi
je 0xf0822aa
test edx, edx
je 0xf0822fe
mov dword [ebp + 0x14], edx
mov edx, dword [ebp + 0xc]
movzx edx, byte [edx]
mov esi, dword [eax + 0x530]
mov edi, dword [eax + 0x518]
mov ebx, dword [eax + 0x520]
and edx, 0xf
mov edx, dword [esi + edx*4]
mov esi, dword [eax + 0x500]
and edi, edx
xor edi, dword [eax + 0x51c]
xor ebx, esi
and edi, esi
and ebx, edx
or edi, ebx
mov dword [ecx], edi
add ecx, 4
inc dword [ebp + 0xc]
dec dword [ebp + 0x14]
jne 0xf082267
jmp 0xf0822fe
mov esi, dword [eax + 0x504]
add esi, dword [ebp + 0x10]
test edx, edx
je 0xf0822fe
mov dword [ebp + 0x14], edx
mov edx, dword [ebp + 0xc]
movzx edx, byte [edx]
mov edi, dword [eax + 0x530]
mov ebx, dword [eax + 0x518]
and edx, 0xf
mov edi, dword [edi + edx*4]
mov edx, dword [esi]
and ebx, edi
xor ebx, dword [eax + 0x51c]
mov dword [ebp + 0x18], edi
mov edi, dword [eax + 0x520]
xor edi, edx
and edi, dword [ebp + 0x18]
and ebx, edx
or ebx, edi
mov dword [ecx], ebx
add ecx, 4
inc dword [ebp + 0xc]
add esi, 4
dec dword [ebp + 0x14]
jne 0xf0822ba
pop edi
pop esi
pop ebx
pop ebp
ret
Function at 0xf0833b5
Capabilities:
Encode data using xor

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, dword [0xf232b50]
mov ecx, dword [ebp + 0x14]
mov edx, dword [eax + 0x508]
add edx, dword [ebp + 8]
push ebx
push esi
add ecx, ecx
cmp dword [ebp + 0x18], 0
push edi
je 0xf083429
test ecx, ecx
je 0xf083487
mov dword [ebp + 0x14], ecx
mov ecx, dword [ebp + 0xc]
movzx esi, byte [ecx]
mov edi, dword [eax + 0x518]
mov ebx, dword [eax + 0x520]
mov ecx, esi
shl ecx, 8
or ecx, esi
shl ecx, 8
or ecx, esi
shl ecx, 8
or ecx, esi
mov esi, dword [eax + 0x500]
and edi, ecx
xor edi, dword [eax + 0x51c]
xor ebx, esi
and edi, esi
and ebx, ecx
or edi, ebx
mov dword [edx], edi
sub edx, 4
dec dword [ebp + 0xc]
dec dword [ebp + 0x14]
jne 0xf0833e1
jmp 0xf083487
mov esi, dword [eax + 0x504]
add esi, dword [ebp + 0x10]
test ecx, ecx
mov dword [ebp + 0x14], esi
je 0xf083487
mov dword [ebp + 0x18], ecx
mov ecx, dword [ebp + 0xc]
movzx edi, byte [ecx]
mov esi, dword [esi]
mov ebx, dword [eax + 0x520]
mov ecx, edi
shl ecx, 8
or ecx, edi
shl ecx, 8
or ecx, edi
shl ecx, 8
or ecx, edi
mov edi, dword [eax + 0x518]
and edi, ecx
xor edi, dword [eax + 0x51c]
xor ebx, esi
and edi, esi
mov esi, dword [ebp + 0x14]
and ebx, ecx
or edi, ebx
mov dword [edx], edi
sub edx, 4
dec dword [ebp + 0xc]
sub esi, 4
dec dword [ebp + 0x18]
mov dword [ebp + 0x14], esi
jne 0xf08343c
pop edi
pop esi
pop ebx
pop ebp
ret

Function at 0xf08367d
Capabilities:
Encode data using xor

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, dword [0xf232b50]
mov ecx, dword [eax + 0x508]
add ecx, dword [ebp + 8]
push ebx
push esi
mov esi, dword [ebp + 0x14]
add esi, esi
cmp dword [ebp + 0x18], 0
push edi
je 0xf0836d6
test esi, esi
je 0xf083719
mov edi, dword [ebp + 0xc]
movzx edx, byte [edi]
mov ebx, edx
shl ebx, 8
or ebx, edx
shl ebx, 8
or ebx, edx
shl ebx, 8
or ebx, edx
and ebx, dword [eax + 0x514]
or ebx, dword [eax + 0x510]
xor ebx, dword [eax + 0x500]
mov dword [ecx], ebx
sub ecx, 4
dec edi
dec esi
jne 0xf0836a5
jmp 0xf083719
mov edx, dword [eax + 0x504]
add edx, dword [ebp + 0x10]
test esi, esi
je 0xf083719
mov edi, dword [ebp + 0xc]
mov dword [ebp + 0x14], esi
movzx esi, byte [edi]
mov ebx, esi
shl ebx, 8
or ebx, esi
shl ebx, 8
or ebx, esi
shl ebx, 8
or ebx, esi
and ebx, dword [eax + 0x514]
or ebx, dword [eax + 0x510]
xor ebx, dword [edx]
sub edx, 4
mov dword [ecx], ebx
sub ecx, 4
dec edi
dec dword [ebp + 0x14]
jne 0xf0836e9
pop edi
pop esi
pop ebx
pop ebp
ret
Function at 0xf0839ce
Capabilities:
Encode data using xor

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, dword [0xf232b50]
mov ecx, dword [ebp + 0x14]
push ebx
push esi
mov esi, dword [eax + 0x508]
add esi, dword [ebp + 8]
add ecx, ecx
cmp dword [ebp + 0x18], 0
push edi
je 0xf083a50
test ecx, ecx
je 0xf083abc
mov dword [ebp + 0x14], ecx
mov ecx, dword [ebp + 0xc]
movzx ecx, byte [ecx]
mov edi, dword [eax + 0x518]
mov ebx, dword [eax + 0x520]
mov edx, ecx
shl edx, 8
or edx, ecx
shl edx, 8
or edx, ecx
shl edx, 8
or edx, ecx
mov ecx, dword [eax + 0x514]
and ecx, edx
or ecx, dword [eax + 0x510]
mov edx, dword [eax + 0x500]
and edi, ecx
xor edi, dword [eax + 0x51c]
xor ebx, edx
and edi, edx
and ebx, ecx
or edi, ebx
mov dword [esi], edi
sub esi, 4
dec dword [ebp + 0xc]
dec dword [ebp + 0x14]
jne 0xf0839fa
jmp 0xf083abc
mov edi, dword [eax + 0x504]
add edi, dword [ebp + 0x10]
test ecx, ecx
mov dword [ebp + 0x14], edi
je 0xf083abc
mov dword [ebp + 0x18], ecx
mov ecx, dword [ebp + 0xc]
movzx ecx, byte [ecx]
mov edi, dword [edi]
mov ebx, dword [eax + 0x520]
mov edx, ecx
shl edx, 8
or edx, ecx
shl edx, 8
or edx, ecx
shl edx, 8
or edx, ecx
mov ecx, dword [eax + 0x514]
and ecx, edx
or ecx, dword [eax + 0x510]
xor ebx, edi
mov edx, ecx
and edx, dword [eax + 0x518]
and ebx, ecx
xor edx, dword [eax + 0x51c]
and edx, edi
mov edi, dword [ebp + 0x14]
or edx, ebx
mov dword [esi], edx
sub esi, 4
dec dword [ebp + 0xc]
sub edi, 4
dec dword [ebp + 0x18]
mov dword [ebp + 0x14], edi
jne 0xf083a63
pop edi
pop esi
pop ebx
pop ebp
ret

Function at 0xf0858ab
Capabilities:
Encode data using xor

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, dword [0xf232b50]
mov ecx, dword [ebp + 0x14]
mov edx, dword [eax + 0x508]
add edx, dword [ebp + 8]
push ebx
push esi
add ecx, ecx
cmp dword [ebp + 0x18], 0
push edi
je 0xf08591f
test ecx, ecx
je 0xf08597d
mov dword [ebp + 0x14], ecx
mov ecx, dword [ebp + 0xc]
movzx esi, byte [ecx]
mov edi, dword [eax + 0x518]
mov ebx, dword [eax + 0x520]
mov ecx, esi
shl ecx, 8
or ecx, esi
shl ecx, 8
or ecx, esi
shl ecx, 8
or ecx, esi
mov esi, dword [eax + 0x500]
and edi, ecx
xor edi, dword [eax + 0x51c]
xor ebx, esi
and edi, esi
and ebx, ecx
or edi, ebx
mov dword [edx], edi
add edx, 4
inc dword [ebp + 0xc]
dec dword [ebp + 0x14]
jne 0xf0858d7
jmp 0xf08597d
mov esi, dword [eax + 0x504]
add esi, dword [ebp + 0x10]
test ecx, ecx
mov dword [ebp + 0x14], esi
je 0xf08597d
mov dword [ebp + 0x18], ecx
mov ecx, dword [ebp + 0xc]
movzx edi, byte [ecx]
mov esi, dword [esi]
mov ebx, dword [eax + 0x520]
mov ecx, edi
shl ecx, 8
or ecx, edi
shl ecx, 8
or ecx, edi
shl ecx, 8
or ecx, edi
mov edi, dword [eax + 0x518]
and edi, ecx
xor edi, dword [eax + 0x51c]
xor ebx, esi
and edi, esi
mov esi, dword [ebp + 0x14]
and ebx, ecx
or edi, ebx
mov dword [edx], edi
add edx, 4
inc dword [ebp + 0xc]
add esi, 4
dec dword [ebp + 0x18]
mov dword [ebp + 0x14], esi
jne 0xf085932
pop edi
pop esi
pop ebx
pop ebp
ret
Function at 0xf085a46
Capabilities:
Encode data using xor

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, dword [0xf232b50]
mov ecx, dword [eax + 0x508]
add ecx, dword [ebp + 8]
push ebx
push esi
mov esi, dword [ebp + 0x14]
add esi, esi
cmp dword [ebp + 0x18], 0
push edi
je 0xf085a9f
test esi, esi
je 0xf085ae2
mov edi, dword [ebp + 0xc]
movzx edx, byte [edi]
mov ebx, edx
shl ebx, 8
or ebx, edx
shl ebx, 8
or ebx, edx
shl ebx, 8
or ebx, edx
and ebx, dword [eax + 0x514]
or ebx, dword [eax + 0x510]
xor ebx, dword [eax + 0x500]
mov dword [ecx], ebx
add ecx, 4
inc edi
dec esi
jne 0xf085a6e
jmp 0xf085ae2
mov edx, dword [eax + 0x504]
add edx, dword [ebp + 0x10]
test esi, esi
je 0xf085ae2
mov edi, dword [ebp + 0xc]
mov dword [ebp + 0x14], esi
movzx esi, byte [edi]
mov ebx, esi
shl ebx, 8
or ebx, esi
shl ebx, 8
or ebx, esi
shl ebx, 8
or ebx, esi
and ebx, dword [eax + 0x514]
or ebx, dword [eax + 0x510]
xor ebx, dword [edx]
add edx, 4
mov dword [ecx], ebx
add ecx, 4
inc edi
dec dword [ebp + 0x14]
jne 0xf085ab2
pop edi
pop esi
pop ebx
pop ebp
ret

Function at 0xf085d83
Capabilities:
Encode data using xor

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, dword [0xf232b50]
mov ecx, dword [ebp + 0x14]
push ebx
push esi
mov esi, dword [eax + 0x508]
add esi, dword [ebp + 8]
add ecx, ecx
cmp dword [ebp + 0x18], 0
push edi
je 0xf085e05
test ecx, ecx
je 0xf085e71
mov dword [ebp + 0x14], ecx
mov ecx, dword [ebp + 0xc]
movzx ecx, byte [ecx]
mov edi, dword [eax + 0x518]
mov ebx, dword [eax + 0x520]
mov edx, ecx
shl edx, 8
or edx, ecx
shl edx, 8
or edx, ecx
shl edx, 8
or edx, ecx
mov ecx, dword [eax + 0x514]
and ecx, edx
or ecx, dword [eax + 0x510]
mov edx, dword [eax + 0x500]
and edi, ecx
xor edi, dword [eax + 0x51c]
xor ebx, edx
and edi, edx
and ebx, ecx
or edi, ebx
mov dword [esi], edi
add esi, 4
inc dword [ebp + 0xc]
dec dword [ebp + 0x14]
jne 0xf085daf
jmp 0xf085e71
mov edi, dword [eax + 0x504]
add edi, dword [ebp + 0x10]
test ecx, ecx
mov dword [ebp + 0x14], edi
je 0xf085e71
mov dword [ebp + 0x18], ecx
mov ecx, dword [ebp + 0xc]
movzx ecx, byte [ecx]
mov edi, dword [edi]
mov ebx, dword [eax + 0x520]
mov edx, ecx
shl edx, 8
or edx, ecx
shl edx, 8
or edx, ecx
shl edx, 8
or edx, ecx
mov ecx, dword [eax + 0x514]
and ecx, edx
or ecx, dword [eax + 0x510]
xor ebx, edi
mov edx, ecx
and edx, dword [eax + 0x518]
and ebx, ecx
xor edx, dword [eax + 0x51c]
and edx, edi
mov edi, dword [ebp + 0x14]
or edx, ebx
mov dword [esi], edx
add esi, 4
inc dword [ebp + 0xc]
add edi, 4
dec dword [ebp + 0x18]
mov dword [ebp + 0x14], edi
jne 0xf085e18
pop edi
pop esi
pop ebx
pop ebp
ret
Function at 0xf086803
Capabilities:
Encode data using xor

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, dword [0xf232b50]
mov edx, dword [eax + 0x508]
add edx, dword [ebp + 8]
cmp dword [ebp + 0x18], 0
mov ecx, dword [ebp + 0x14]
push ebx
push esi
push edi
je 0xf086875
test ecx, ecx
je 0xf0868d3
mov dword [ebp + 0x14], ecx
mov ecx, dword [ebp + 0xc]
movzx esi, byte [ecx]
mov ebx, dword [eax + 0x520]
mov ecx, esi
shl ecx, 8
or ecx, esi
shl ecx, 8
or ecx, esi
shl ecx, 8
or ecx, esi
mov esi, dword [eax + 0x500]
mov edi, ecx
and edi, dword [eax + 0x518]
xor ebx, esi
xor edi, dword [eax + 0x51c]
and ebx, ecx
and edi, esi
or edi, ebx
mov dword [edx], edi
sub edx, 4
dec dword [ebp + 0xc]
dec dword [ebp + 0x14]
jne 0xf08682d
jmp 0xf0868d3
mov esi, dword [eax + 0x504]
add esi, dword [ebp + 0x10]
test ecx, ecx
mov dword [ebp + 0x18], esi
je 0xf0868d3
mov dword [ebp + 0x14], ecx
mov ecx, dword [ebp + 0xc]
movzx edi, byte [ecx]
mov esi, dword [esi]
mov ebx, dword [eax + 0x520]
mov ecx, edi
shl ecx, 8
or ecx, edi
shl ecx, 8
or ecx, edi
shl ecx, 8
or ecx, edi
mov edi, ecx
and edi, dword [eax + 0x518]
xor ebx, esi
xor edi, dword [eax + 0x51c]
and ebx, ecx
and edi, esi
mov esi, dword [ebp + 0x18]
or edi, ebx
mov dword [edx], edi
sub edx, 4
dec dword [ebp + 0xc]
sub esi, 4
dec dword [ebp + 0x14]
mov dword [ebp + 0x18], esi
jne 0xf086888
pop edi
pop esi
pop ebx
pop ebp
ret

Function at 0xf086ab6
Capabilities:
Encode data using xor

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, dword [0xf232b50]
mov ecx, dword [eax + 0x508]
add ecx, dword [ebp + 8]
cmp dword [ebp + 0x18], 0
push ebx
push esi
push edi
je 0xf086b0d
mov edi, dword [ebp + 0x14]
test edi, edi
je 0xf086b53
mov esi, dword [ebp + 0xc]
movzx edx, byte [esi]
mov ebx, edx
shl ebx, 8
or ebx, edx
shl ebx, 8
or ebx, edx
shl ebx, 8
or ebx, edx
and ebx, dword [eax + 0x514]
or ebx, dword [eax + 0x510]
xor ebx, dword [eax + 0x500]
mov dword [ecx], ebx
sub ecx, 4
dec esi
dec edi
jne 0xf086adc
jmp 0xf086b53
mov edx, dword [eax + 0x504]
mov esi, dword [ebp + 0x14]
add edx, dword [ebp + 0x10]
test esi, esi
je 0xf086b53
mov edi, dword [ebp + 0xc]
mov dword [ebp + 0x14], esi
movzx esi, byte [edi]
mov ebx, esi
shl ebx, 8
or ebx, esi
shl ebx, 8
or ebx, esi
shl ebx, 8
or ebx, esi
and ebx, dword [eax + 0x514]
or ebx, dword [eax + 0x510]
xor ebx, dword [edx]
sub edx, 4
mov dword [ecx], ebx
sub ecx, 4
dec edi
dec dword [ebp + 0x14]
jne 0xf086b23
pop edi
pop esi
pop ebx
pop ebp
ret