joyce8/EMBER2024-capa huggingface dataset:
Function at 0x421688
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffcc
mov eax, 0x50c0e0
push ebx
push esi
push edi
call fcn.004c0000
mov word [ebp - 0x24], 0x14
xor edx, edx
mov eax, dword [0x525edc]
mov dword [ebp - 8], edx
lea edx, [ebp - 8]
inc dword [ebp - 0x18]
mov eax, dword [eax]
call fcn.0047cf20
lea eax, [ebp - 8]
mov eax, dword [eax]
xor edx, edx
mov dword [ebp - 0xc], edx
lea edx, [ebp - 0xc]
inc dword [ebp - 0x18]
call fcn.004b59f0
lea eax, [ebp - 0xc]
push eax
mov edx, str.datamanualindex.htm
lea eax, [ebp - 0x10]
call fcn.004ceebc
inc dword [ebp - 0x18]
xor eax, eax
mov dword [ebp - 4], eax
lea edx, [ebp - 0x10]
inc dword [ebp - 0x18]
lea ecx, [ebp - 4]
pop eax
call fcn.004cf074
dec dword [ebp - 0x18]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.004cf01c
dec dword [ebp - 0x18]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.004cf01c
dec dword [ebp - 0x18]
lea eax, [ebp - 8]
mov edx, 2
call fcn.004cf01c
mov word [ebp - 0x24], 8
mov word [ebp - 0x24], 0x20
push 1
push 0
push 0
mov ecx, dword [ebp - 4]
test ecx, ecx
je 0x421743
mov eax, dword [ebp - 4]
jmp 0x421748
mov eax, 0x50c04c
mov edx, dword [0x525edc]
push eax
push str.open
mov ecx, dword [edx]
mov eax, dword [ecx + 0x24]
push eax
call sub.SHELL32.DLL_ShellExecuteA
mov word [ebp - 0x24], 8
jmp 0x42178a
dec dword [ebp - 0x18]
lea eax, [ebp - 4]
mov edx, 2
call fcn.004cf01c
mov ecx, dword [ebp - 0x34]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x42be20
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push ebp
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x14]
mov ebp, dword [ebp + 0x10]
and ecx, ecx
je 0x42be64
nop
nop
nop
nop
mov ax, word [esi]
mov bx, word [ebp]
mov dx, ax
and dx, bx
xor ax, bx
and ax, 0xf7de
shr ax, 1
add ax, dx
mov word [edi], ax
add esi, 2
add ebp, 2
add edi, 2
dec ecx
jne 0x42be3b
pop ebp
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
pop ebp
ret

Function at 0x42be70
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push ebp
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x14]
mov ebp, dword [ebp + 0x10]
and ecx, ecx
je 0x42beb4
nop
nop
nop
nop
mov ax, word [esi]
mov bx, word [ebp]
mov dx, ax
and dx, bx
xor ax, bx
and ax, 0x7bde
shr ax, 1
add ax, dx
mov word [edi], ax
add esi, 2
add ebp, 2
add edi, 2
dec ecx
jne 0x42be8b
pop ebp
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
pop ebp
ret

Function at 0x42bec0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push ebp
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x14]
mov ebp, dword [ebp + 0x10]
and ecx, ecx
je 0x42bf04
nop
nop
nop
nop
mov ax, word [esi]
mov bx, word [ebp]
mov dx, ax
and dx, bx
xor ax, bx
and ax, 0x7bde
shr ax, 1
add ax, dx
mov word [edi], ax
add esi, 2
add ebp, 2
add edi, 2
dec ecx
jne 0x42bedb
pop ebp
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
pop ebp
ret
Function at 0x42bf10
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push ebp
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x14]
mov ebp, dword [ebp + 0x10]
and ecx, ecx
je 0x42bf54
nop
nop
nop
nop
mov ax, word [esi]
mov bx, word [ebp]
mov dx, ax
and dx, bx
xor ax, bx
and ax, 0xeeee
shr ax, 1
add ax, dx
mov word [edi], ax
add esi, 2
add ebp, 2
add edi, 2
dec ecx
jne 0x42bf2b
pop ebp
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
pop ebp
ret

Function at 0x42bf60
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push ebp
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x14]
mov ebp, dword [ebp + 0x10]
and ecx, ecx
je 0x42bffb
mov edx, ecx
add ecx, ecx
add ecx, edx
push ecx
shr ecx, 3
and ecx, ecx
je 0x42bfd2
nop
nop
nop
nop
shl ecx, 3
add edi, ecx
add esi, ecx
add ebp, ecx
shr ecx, 3
neg ecx
mov eax, dword [esi + ecx*8]
mov ebx, dword [ebp + ecx*8]
mov edx, eax
xor eax, ebx
and edx, ebx
and eax, 0xfefefefe
shr eax, 1
add eax, edx
mov dword [edi + ecx*8], eax
mov eax, dword [esi + ecx*8 + 4]
mov ebx, dword [ebp + ecx*8 + 4]
mov edx, eax
xor eax, ebx
and edx, ebx
and eax, 0xfefefefe
shr eax, 1
add eax, edx
mov dword [edi + ecx*8 + 4], eax
inc ecx
jne 0x42bf9b
pop ecx
and ecx, 7
je 0x42bffb
nop
nop
nop
nop
add edi, ecx
add esi, ecx
add ebp, ecx
neg ecx
xor eax, eax
xor edx, edx
mov al, byte [esi + ecx]
mov bl, byte [ebp + ecx]
add ax, bx
shr ax, 1
mov byte [edi + ecx], al
inc ecx
jne 0x42bfe8
pop ebp
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
pop ebp
ret

Function at 0x42c004
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push ebp
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x14]
mov ebp, dword [ebp + 0x10]
and ecx, ecx
je 0x42c09c
shl ecx, 2
push ecx
shr ecx, 3
and ecx, ecx
je 0x42c073
nop
nop
nop
nop
shl ecx, 3
add edi, ecx
add esi, ecx
add ebp, ecx
shr ecx, 3
neg ecx
mov eax, dword [esi + ecx*8]
mov ebx, dword [ebp + ecx*8]
mov edx, eax
xor eax, ebx
and edx, ebx
and eax, 0xfefefefe
shr eax, 1
add eax, edx
mov dword [edi + ecx*8], eax
mov eax, dword [esi + ecx*8 + 4]
mov ebx, dword [ebp + ecx*8 + 4]
mov edx, eax
xor eax, ebx
and edx, ebx
and eax, 0xfefefefe
shr eax, 1
add eax, edx
mov dword [edi + ecx*8 + 4], eax
inc ecx
jne 0x42c03c
pop ecx
and ecx, 7
je 0x42c09c
nop
nop
nop
nop
add edi, ecx
add esi, ecx
add ebp, ecx
neg ecx
xor eax, eax
xor edx, edx
mov al, byte [esi + ecx]
mov bl, byte [ebp + ecx]
add ax, bx
shr ax, 1
mov byte [edi + ecx], al
inc ecx
jne 0x42c089
pop ebp
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
pop ebp
ret
Function at 0x42c0a8
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push ebp
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x14]
mov ebp, dword [ebp + 0x10]
and ecx, ecx
je 0x42c140
shl ecx, 2
push ecx
shr ecx, 3
and ecx, ecx
je 0x42c117
nop
nop
nop
nop
shl ecx, 3
add edi, ecx
add esi, ecx
add ebp, ecx
shr ecx, 3
neg ecx
mov eax, dword [esi + ecx*8]
mov ebx, dword [ebp + ecx*8]
mov edx, eax
xor eax, ebx
and edx, ebx
and eax, 0xfefefefe
shr eax, 1
add eax, edx
mov dword [edi + ecx*8], eax
mov eax, dword [esi + ecx*8 + 4]
mov ebx, dword [ebp + ecx*8 + 4]
mov edx, eax
xor eax, ebx
and edx, ebx
and eax, 0xfefefefe
shr eax, 1
add eax, edx
mov dword [edi + ecx*8 + 4], eax
inc ecx
jne 0x42c0e0
pop ecx
and ecx, 7
je 0x42c140
nop
nop
nop
nop
add edi, ecx
add esi, ecx
add ebp, ecx
neg ecx
xor eax, eax
xor edx, edx
mov al, byte [esi + ecx]
mov bl, byte [ebp + ecx]
add ax, bx
shr ax, 1
mov byte [edi + ecx], al
inc ecx
jne 0x42c12d
pop ebp
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
pop ebp
ret

Function at 0x42c14c
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push ebp
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x14]
mov ebp, dword [ebp + 0x10]
and ecx, ecx
je 0x42c1e1
nop
nop
nop
nop
push ecx
shr ecx, 3
and ecx, ecx
je 0x42c1b8
nop
nop
nop
nop
shl ecx, 3
add edi, ecx
add esi, ecx
add ebp, ecx
shr ecx, 3
neg ecx
mov eax, dword [esi + ecx*8]
mov ebx, dword [ebp + ecx*8]
mov edx, eax
xor eax, ebx
and edx, ebx
and eax, 0xfefefefe
shr eax, 1
add eax, edx
mov dword [edi + ecx*8], eax
mov eax, dword [esi + ecx*8 + 4]
mov ebx, dword [ebp + ecx*8 + 4]
mov edx, eax
xor eax, ebx
and edx, ebx
and eax, 0xfefefefe
shr eax, 1
add eax, edx
mov dword [edi + ecx*8 + 4], eax
inc ecx
jne 0x42c181
pop ecx
and ecx, 7
je 0x42c1e1
nop
nop
nop
nop
add edi, ecx
add esi, ecx
add ebp, ecx
neg ecx
xor eax, eax
xor edx, edx
mov al, byte [esi + ecx]
mov bl, byte [ebp + ecx]
add ax, bx
shr ax, 1
mov byte [edi + ecx], al
inc ecx
jne 0x42c1ce
pop ebp
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
pop ebp
ret
Function at 0x42c1ec
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x10]
mov ecx, dword [ebp + 0x14]
and ecx, ecx
je 0x42c2bd
mov edx, ecx
add ecx, ecx
add ecx, edx
cmp ecx, 0x20
jb 0x42c297
mov edx, ecx
and edx, 0xf
add edx, 0x10
shr ecx, 4
dec ecx
shl ecx, 4
pcmpeqb mm7, mm7
psllw mm7, 1
packsswb mm7, mm7
add esi, ecx
add ebx, ecx
add edi, ecx
shr ecx, 3
neg ecx
movq mm1, qword [esi + ecx*8]
movq mm2, qword [ebx + ecx*8]
movq mm3, mm1
pand mm3, mm2
pxor mm1, mm2
nop
nop
movq mm4, qword [esi + ecx*8 + 8]
pand mm1, mm7
movq mm5, qword [ebx + ecx*8 + 8]
psrlq mm1, 1
movq mm6, mm4
paddb mm1, mm3
pand mm6, mm5
movq qword [edi + ecx*8], mm1
pxor mm4, mm5
movq mm1, qword [esi + ecx*8 + 0x10]
pand mm4, mm7
movq mm2, qword [ebx + ecx*8 + 0x10]
psrlq mm4, 1
movq mm3, mm1
paddb mm4, mm6
pand mm3, mm2
movq qword [edi + ecx*8 + 8], mm4
pxor mm1, mm2
inc ecx
inc ecx
jne 0x42c24c
emms
mov ecx, edx
and ecx, ecx
je 0x42c2bd
nop
nop
nop
nop
add esi, ecx
add ebx, ecx
add edi, ecx
neg ecx
xor eax, eax
xor edx, edx
mov al, byte [esi + ecx]
mov dl, byte [ebx + ecx]
add ax, dx
shr ax, 1
mov byte [edi + ecx], al
inc ecx
jne 0x42c2ab
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
pop ebp
ret

Function at 0x42c2c8
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x10]
mov ecx, dword [ebp + 0x14]
and ecx, ecx
je 0x42c396
shl ecx, 2
cmp ecx, 0x20
jb 0x42c370
mov edx, ecx
and edx, 0xf
add edx, 0x10
shr ecx, 4
dec ecx
shl ecx, 4
pcmpeqb mm7, mm7
psllw mm7, 1
packsswb mm7, mm7
add esi, ecx
add ebx, ecx
add edi, ecx
shr ecx, 3
neg ecx
movq mm1, qword [esi + ecx*8]
movq mm2, qword [ebx + ecx*8]
movq mm3, mm1
pand mm3, mm2
pxor mm1, mm2
nop
nop
movq mm4, qword [esi + ecx*8 + 8]
pand mm1, mm7
movq mm5, qword [ebx + ecx*8 + 8]
psrlq mm1, 1
movq mm6, mm4
paddb mm1, mm3
pand mm6, mm5
movq qword [edi + ecx*8], mm1
pxor mm4, mm5
movq mm1, qword [esi + ecx*8 + 0x10]
pand mm4, mm7
movq mm2, qword [ebx + ecx*8 + 0x10]
psrlq mm4, 1
movq mm3, mm1
paddb mm4, mm6
pand mm3, mm2
movq qword [edi + ecx*8 + 8], mm4
pxor mm1, mm2
inc ecx
inc ecx
jne 0x42c325
emms
mov ecx, edx
and ecx, ecx
je 0x42c396
nop
nop
nop
nop
add esi, ecx
add ebx, ecx
add edi, ecx
neg ecx
xor eax, eax
xor edx, edx
mov al, byte [esi + ecx]
mov dl, byte [ebx + ecx]
add ax, dx
shr ax, 1
mov byte [edi + ecx], al
inc ecx
jne 0x42c384
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
pop ebp
ret
Function at 0x42c3a0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x10]
mov ecx, dword [ebp + 0x14]
and ecx, ecx
je 0x42c46e
shl ecx, 2
cmp ecx, 0x20
jb 0x42c448
mov edx, ecx
and edx, 0xf
add edx, 0x10
shr ecx, 4
dec ecx
shl ecx, 4
pcmpeqb mm7, mm7
psllw mm7, 1
packsswb mm7, mm7
add esi, ecx
add ebx, ecx
add edi, ecx
shr ecx, 3
neg ecx
movq mm1, qword [esi + ecx*8]
movq mm2, qword [ebx + ecx*8]
movq mm3, mm1
pand mm3, mm2
pxor mm1, mm2
nop
nop
movq mm4, qword [esi + ecx*8 + 8]
pand mm1, mm7
movq mm5, qword [ebx + ecx*8 + 8]
psrlq mm1, 1
movq mm6, mm4
paddb mm1, mm3
pand mm6, mm5
movq qword [edi + ecx*8], mm1
pxor mm4, mm5
movq mm1, qword [esi + ecx*8 + 0x10]
pand mm4, mm7
movq mm2, qword [ebx + ecx*8 + 0x10]
psrlq mm4, 1
movq mm3, mm1
paddb mm4, mm6
pand mm3, mm2
movq qword [edi + ecx*8 + 8], mm4
pxor mm1, mm2
inc ecx
inc ecx
jne 0x42c3fd
emms
mov ecx, edx
and ecx, ecx
je 0x42c46e
nop
nop
nop
nop
add esi, ecx
add ebx, ecx
add edi, ecx
neg ecx
xor eax, eax
xor edx, edx
mov al, byte [esi + ecx]
mov dl, byte [ebx + ecx]
add ax, dx
shr ax, 1
mov byte [edi + ecx], al
inc ecx
jne 0x42c45c
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
pop ebp
ret

Function at 0x42c478
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x10]
mov ecx, dword [ebp + 0x14]
and ecx, ecx
je 0x42c543
cmp ecx, 0x20
jb 0x42c51d
mov edx, ecx
and edx, 0xf
add edx, 0x10
shr ecx, 4
dec ecx
shl ecx, 4
pcmpeqb mm7, mm7
psllw mm7, 1
packsswb mm7, mm7
add esi, ecx
add ebx, ecx
add edi, ecx
shr ecx, 3
neg ecx
movq mm1, qword [esi + ecx*8]
movq mm2, qword [ebx + ecx*8]
movq mm3, mm1
pand mm3, mm2
pxor mm1, mm2
nop
nop
movq mm4, qword [esi + ecx*8 + 8]
pand mm1, mm7
movq mm5, qword [ebx + ecx*8 + 8]
psrlq mm1, 1
movq mm6, mm4
paddb mm1, mm3
pand mm6, mm5
movq qword [edi + ecx*8], mm1
pxor mm4, mm5
movq mm1, qword [esi + ecx*8 + 0x10]
pand mm4, mm7
movq mm2, qword [ebx + ecx*8 + 0x10]
psrlq mm4, 1
movq mm3, mm1
paddb mm4, mm6
pand mm3, mm2
movq qword [edi + ecx*8 + 8], mm4
pxor mm1, mm2
inc ecx
inc ecx
jne 0x42c4d2
emms
mov ecx, edx
and ecx, ecx
je 0x42c543
nop
nop
nop
nop
add esi, ecx
add ebx, ecx
add edi, ecx
neg ecx
xor eax, eax
xor edx, edx
mov al, byte [esi + ecx]
mov dl, byte [ebx + ecx]
add ax, dx
shr ax, 1
mov byte [edi + ecx], al
inc ecx
jne 0x42c531
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
pop ebp
ret

Function at 0x42c54c
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x10]
and ecx, ecx
je 0x42c5b8
nop
nop
nop
nop
mov ax, word [esi]
mov bx, word [edi]
mov dx, ax
and dx, bx
xor bx, ax
mov ax, dx
shl ax, 1
add ax, bx
and bx, 0xf7de
shr bx, 1
add dx, bx
and dx, 0x8410
shr dx, 4
add dx, 0x801
shr dx, 1
and dx, 0x821
add dx, 0x7bef
xor dx, 0x7bef
sub ax, dx
or ax, dx
mov word [edi], ax
add esi, 2
add edi, 2
dec ecx
jne 0x42c563
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
pop ebp
ret
Function at 0x42c5c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x10]
and ecx, ecx
je 0x42c61f
nop
nop
nop
nop
mov ax, word [esi]
mov bx, word [edi]
mov dx, ax
and dx, bx
xor bx, ax
mov ax, dx
shl ax, 1
add ax, bx
and bx, 0x7bde
shr bx, 1
add dx, bx
and dx, 0x4210
shr dx, 4
add dx, 0x3def
xor dx, 0x3def
sub ax, dx
or ax, dx
mov word [edi], ax
add esi, 2
add edi, 2
dec ecx
jne 0x42c5d7
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
pop ebp
ret

Function at 0x42c628
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x10]
and ecx, ecx
je 0x42c687
nop
nop
nop
nop
mov ax, word [esi]
mov bx, word [edi]
mov dx, ax
and dx, bx
xor bx, ax
mov ax, dx
shl ax, 1
add ax, bx
and bx, 0x7bde
shr bx, 1
add dx, bx
and dx, 0x4210
shr dx, 4
add dx, 0x3def
xor dx, 0x3def
sub ax, dx
or ax, dx
mov word [edi], ax
add esi, 2
add edi, 2
dec ecx
jne 0x42c63f
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
pop ebp
ret

Function at 0x42c690
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x10]
and ecx, ecx
je 0x42c6ef
nop
nop
nop
nop
mov ax, word [esi]
mov bx, word [edi]
mov dx, ax
and dx, bx
xor bx, ax
mov ax, dx
shl ax, 1
add ax, bx
and bx, 0xeee
shr bx, 1
add dx, bx
and dx, 0x888
shr dx, 3
add dx, 0x777
xor dx, 0x777
sub ax, dx
or ax, dx
mov word [edi], ax
add esi, 2
add edi, 2
dec ecx
jne 0x42c6a7
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
pop ebp
ret

Function at 0x42c6f8
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x10]
mov eax, ecx
add ecx, ecx
add ecx, eax
and ecx, ecx
je 0x42c7cc
shr ecx, 3
and ecx, ecx
je 0x42c7a2
shl ecx, 3
add esi, ecx
add edi, ecx
shr ecx, 3
neg ecx
mov eax, dword [esi + ecx*8]
mov ebx, dword [edi + ecx*8]
mov edx, eax
and edx, ebx
xor ebx, eax
mov eax, edx
shl eax, 1
add eax, ebx
and ebx, 0xfefefefe
shr ebx, 1
add edx, ebx
and edx, 0x80808080
shr edx, 7
add edx, 0x7f7f7f7f
xor edx, 0x7f7f7f7f
sub eax, edx
or edx, eax
mov dword [edi + ecx*8], edx
mov eax, dword [esi + ecx*8 + 4]
mov ebx, dword [edi + ecx*8 + 4]
mov edx, eax
and edx, ebx
xor ebx, eax
mov eax, edx
shl eax, 1
add eax, ebx
and ebx, 0xfefefefe
shr ebx, 1
add edx, ebx
and edx, 0x80808080
shr edx, 7
add edx, 0x7f7f7f7f
xor edx, 0x7f7f7f7f
sub eax, edx
or edx, eax
mov dword [edi + ecx*8 + 4], edx
inc ecx
jne 0x42c72c
mov ecx, dword [ebp + 0x10]
mov eax, ecx
add ecx, ecx
add ecx, eax
and ecx, 7
je 0x42c7cc
nop
nop
nop
nop
add esi, ecx
add edi, ecx
neg ecx
mov al, byte [esi + ecx]
mov bl, byte [edi + ecx]
add al, bl
sbb dl, dl
or al, dl
mov byte [edi + ecx], al
inc ecx
jne 0x42c7ba
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
pop ebp
ret
Function at 0x42c7d4
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x10]
shl ecx, 2
and ecx, ecx
je 0x42c8a2
shr ecx, 3
and ecx, ecx
je 0x42c87b
shl ecx, 3
add esi, ecx
add edi, ecx
shr ecx, 3
neg ecx
mov eax, dword [esi + ecx*8]
mov ebx, dword [edi + ecx*8]
mov edx, eax
and edx, ebx
xor ebx, eax
mov eax, edx
shl eax, 1
add eax, ebx
and ebx, 0xfefefefe
shr ebx, 1
add edx, ebx
and edx, 0x80808080
shr edx, 7
add edx, 0x7f7f7f7f
xor edx, 0x7f7f7f7f
sub eax, edx
or edx, eax
mov dword [edi + ecx*8], edx
mov eax, dword [esi + ecx*8 + 4]
mov ebx, dword [edi + ecx*8 + 4]
mov edx, eax
and edx, ebx
xor ebx, eax
mov eax, edx
shl eax, 1
add eax, ebx
and ebx, 0xfefefefe
shr ebx, 1
add edx, ebx
and edx, 0x80808080
shr edx, 7
add edx, 0x7f7f7f7f
xor edx, 0x7f7f7f7f
sub eax, edx
or edx, eax
mov dword [edi + ecx*8 + 4], edx
inc ecx
jne 0x42c805
mov ecx, dword [ebp + 0x10]
shl ecx, 2
and ecx, 7
je 0x42c8a2
nop
nop
nop
nop
add esi, ecx
add edi, ecx
neg ecx
mov al, byte [esi + ecx]
mov bl, byte [edi + ecx]
add al, bl
sbb dl, dl
or al, dl
mov byte [edi + ecx], al
inc ecx
jne 0x42c890
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
pop ebp
ret

Function at 0x42c8ac
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x10]
shl ecx, 2
and ecx, ecx
je 0x42c97a
shr ecx, 3
and ecx, ecx
je 0x42c953
shl ecx, 3
add esi, ecx
add edi, ecx
shr ecx, 3
neg ecx
mov eax, dword [esi + ecx*8]
mov ebx, dword [edi + ecx*8]
mov edx, eax
and edx, ebx
xor ebx, eax
mov eax, edx
shl eax, 1
add eax, ebx
and ebx, 0xfefefefe
shr ebx, 1
add edx, ebx
and edx, 0x80808080
shr edx, 7
add edx, 0x7f7f7f7f
xor edx, 0x7f7f7f7f
sub eax, edx
or edx, eax
mov dword [edi + ecx*8], edx
mov eax, dword [esi + ecx*8 + 4]
mov ebx, dword [edi + ecx*8 + 4]
mov edx, eax
and edx, ebx
xor ebx, eax
mov eax, edx
shl eax, 1
add eax, ebx
and ebx, 0xfefefefe
shr ebx, 1
add edx, ebx
and edx, 0x80808080
shr edx, 7
add edx, 0x7f7f7f7f
xor edx, 0x7f7f7f7f
sub eax, edx
or edx, eax
mov dword [edi + ecx*8 + 4], edx
inc ecx
jne 0x42c8dd
mov ecx, dword [ebp + 0x10]
shl ecx, 2
and ecx, 7
je 0x42c97a
nop
nop
nop
nop
add esi, ecx
add edi, ecx
neg ecx
mov al, byte [esi + ecx]
mov bl, byte [edi + ecx]
add al, bl
sbb dl, dl
or al, dl
mov byte [edi + ecx], al
inc ecx
jne 0x42c968
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
pop ebp
ret

Function at 0x42cb2c
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x10]
and ecx, ecx
je 0x42cba4
nop
nop
nop
nop
mov bx, word [esi]
mov ax, word [edi]
mov dx, ax
not dx
xor ax, bx
and dx, bx
mov bx, ax
not bx
sub ax, dx
sub ax, dx
and bx, 0xf7de
shr bx, 1
add dx, bx
and dx, 0x8410
mov bx, dx
shl bx, 1
shr dx, 4
add dx, 0x801
shr dx, 1
and dx, 0x821
add dx, 0x7bef
xor dx, 0x8410
add ax, bx
and ax, dx
mov word [edi], ax
add esi, 2
add edi, 2
dec ecx
jne 0x42cb43
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
pop ebp
ret
Function at 0x42cbac
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x10]
and ecx, ecx
je 0x42cc17
nop
nop
nop
nop
mov bx, word [esi]
mov ax, word [edi]
mov dx, ax
not dx
xor ax, bx
and dx, bx
mov bx, ax
not bx
sub ax, dx
sub ax, dx
and bx, 0x7bde
shr bx, 1
add dx, bx
and dx, 0x4210
mov bx, dx
shl bx, 1
shr dx, 4
add dx, 0x3def
xor dx, 0x4210
add ax, bx
and ax, dx
mov word [edi], ax
add esi, 2
add edi, 2
dec ecx
jne 0x42cbc3
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
pop ebp
ret

Function at 0x42cc20
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x10]
and ecx, ecx
je 0x42cc8b
nop
nop
nop
nop
mov bx, word [esi]
mov ax, word [edi]
mov dx, ax
not dx
xor ax, bx
and dx, bx
mov bx, ax
not bx
sub ax, dx
sub ax, dx
and bx, 0x7bde
shr bx, 1
add dx, bx
and dx, 0x4210
mov bx, dx
shl bx, 1
shr dx, 4
add dx, 0x3def
xor dx, 0x4210
add ax, bx
and ax, dx
mov word [edi], ax
add esi, 2
add edi, 2
dec ecx
jne 0x42cc37
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
pop ebp
ret

Function at 0x42cc94
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x10]
and ecx, ecx
je 0x42ccff
nop
nop
nop
nop
mov bx, word [esi]
mov ax, word [edi]
mov dx, ax
not dx
xor ax, bx
and dx, bx
mov bx, ax
not bx
sub ax, dx
sub ax, dx
and bx, 0xeee
shr bx, 1
add dx, bx
and dx, 0x888
mov bx, dx
shl bx, 1
shr dx, 3
add dx, 0x777
xor dx, 0x888
add ax, bx
and ax, dx
mov word [edi], ax
add esi, 2
add edi, 2
dec ecx
jne 0x42ccab
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
pop ebp
ret