joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1004c420
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
mov esi, ecx
mov ecx, 0x1019da78
push edi
call fcn.10138266
cmp byte [esi], 0
lea edi, [esi + 2]
je 0x1004c494
cmp byte [esi + 1], 0
jne 0x1004c4e1
xor ecx, ecx
mov byte [esi + 1], 1
mov dword [esp + 0xc], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x1c]
xor ebx, dword [esi + 0x18]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [esp + 0xc]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [edi + ecx], al
inc ecx
mov dword [esp + 0xc], ecx
cmp ecx, 0xf
jb 0x1004c454
jmp 0x1004c4e1
xor ecx, ecx
mov dword [esp + 0xc], ecx
nop word [eax + eax]
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x1c]
xor ebx, dword [esi + 0x18]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [esp + 0xc]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [edi + ecx]
xor al, bl
mov byte [edi + ecx], al
inc ecx
mov dword [esp + 0xc], ecx
cmp ecx, 0xf
jb 0x1004c4a0
push ecx
mov ecx, dword [ebp + 8]
lea eax, [esi + 0x10]
push eax
push edi
call fcn.1004c790
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x1004c500
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
mov esi, ecx
mov ecx, 0x1019da78
push edi
call fcn.10138266
cmp byte [esi], 0
lea edi, [esi + 2]
je 0x1004c574
cmp byte [esi + 1], 0
jne 0x1004c5c1
xor ecx, ecx
mov byte [esi + 1], 1
mov dword [esp + 0xc], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x1c]
xor ebx, dword [esi + 0x18]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [esp + 0xc]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [edi + ecx], al
inc ecx
mov dword [esp + 0xc], ecx
cmp ecx, 0x12
jb 0x1004c534
jmp 0x1004c5c1
xor ecx, ecx
mov dword [esp + 0xc], ecx
nop word [eax + eax]
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x1c]
xor ebx, dword [esi + 0x18]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [esp + 0xc]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [edi + ecx]
xor al, bl
mov byte [edi + ecx], al
inc ecx
mov dword [esp + 0xc], ecx
cmp ecx, 0x12
jb 0x1004c580
push ecx
mov ecx, dword [ebp + 8]
lea eax, [esi + 0x13]
push eax
push edi
call fcn.1004c790
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x1004c5e0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
mov esi, ecx
mov ecx, 0x1019da78
push edi
call fcn.10138266
cmp byte [esi], 0
lea edi, [esi + 2]
je 0x1004c64e
cmp byte [esi + 1], 0
jne 0x1004c692
xor ecx, ecx
mov byte [esi + 1], 1
mov dword [ebp - 4], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x1c]
xor ebx, dword [esi + 0x18]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 4]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [edi + ecx], al
inc ecx
mov dword [ebp - 4], ecx
cmp ecx, 0x13
jb 0x1004c610
jmp 0x1004c692
xor ecx, ecx
mov dword [ebp - 4], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x1c]
xor ebx, dword [esi + 0x18]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 4]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [edi + ecx]
xor al, bl
mov byte [edi + ecx], al
inc ecx
mov dword [ebp - 4], ecx
cmp ecx, 0x13
jb 0x1004c653
push ecx
mov ecx, dword [ebp + 8]
lea eax, [esi + 0x14]
push eax
push edi
call fcn.1004c790
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x1004c6b0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
mov esi, ecx
mov ecx, 0x1019da78
push edi
call fcn.10138266
cmp byte [esi], 0
lea edi, [esi + 2]
je 0x1004c71e
cmp byte [esi + 1], 0
jne 0x1004c762
xor ecx, ecx
mov byte [esi + 1], 1
mov dword [ebp - 4], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x1c]
xor ebx, dword [esi + 0x18]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 4]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [edi + ecx], al
inc ecx
mov dword [ebp - 4], ecx
cmp ecx, 0x11
jb 0x1004c6e0
jmp 0x1004c762
xor ecx, ecx
mov dword [ebp - 4], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x1c]
xor ebx, dword [esi + 0x18]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 4]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [edi + ecx]
xor al, bl
mov byte [edi + ecx], al
inc ecx
mov dword [ebp - 4], ecx
cmp ecx, 0x11
jb 0x1004c723
push ecx
mov ecx, dword [ebp + 8]
lea eax, [esi + 0x12]
push eax
push edi
call fcn.1004c790
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10052390
Capabilities:
Hash data with crc32

Disassembly:
push ebx
push esi
mov ebx, ecx
mov ecx, 0x1019f887
push edi
call fcn.10138266
mov edi, 4
lea esi, [ebx + 4]
or eax, 0xffffffff
nop word [eax + eax]
jmp dword [edi*4 + 0x100535e8]
Function at 0x1005b200
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov ecx, 0x101a157e
push ebx
push esi
call fcn.10138266
cmp byte [0x101822a0], 0
je 0x1005b272
cmp byte [0x101822a1], 0
jne 0x1005b2b3
mov byte [0x101822a1], 1
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10182304]
xor ebx, dword [0x10182300]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x101822a2], al
inc esi
cmp esi, 0x5e
jb 0x1005b231
jmp 0x1005b2b3
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10182304]
xor ebx, dword [0x10182300]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x101822a2], al
inc esi
cmp esi, 0x5e
jb 0x1005b274
push ecx
mov ecx, dword [ebp + 8]
push 0x101822ff
push 0x101822a2
call fcn.1004c790
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x1005b2e0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov ecx, 0x101a157e
push ebx
push esi
call fcn.10138266
cmp byte [0x101830e0], 0
je 0x1005b352
cmp byte [0x101830e1], 0
jne 0x1005b393
mov byte [0x101830e1], 1
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10183124]
xor ebx, dword [0x10183120]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x101830e2], al
inc esi
cmp esi, 0x3e
jb 0x1005b311
jmp 0x1005b393
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10183124]
xor ebx, dword [0x10183120]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x101830e2], al
inc esi
cmp esi, 0x3e
jb 0x1005b354
push ecx
mov ecx, dword [ebp + 8]
push 0x1018311f
push 0x101830e2
call fcn.1004c790
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x1005b5d0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov ecx, 0x101a157e
push ebx
push esi
call fcn.10138266
cmp byte [0x10183428], 0
je 0x1005b642
cmp byte [0x10183429], 0
jne 0x1005b683
mov byte [0x10183429], 1
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10183474]
xor ebx, dword [0x10183470]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1018342a], al
inc esi
cmp esi, 0x40
jb 0x1005b601
jmp 0x1005b683
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10183474]
xor ebx, dword [0x10183470]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1018342a], al
inc esi
cmp esi, 0x40
jb 0x1005b644
push ecx
mov ecx, dword [ebp + 8]
push 0x10183469
push 0x1018342a
call fcn.1004c790
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x1005b770
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov ecx, 0x101a157e
push ebx
push esi
call fcn.10138266
cmp byte [0x10183988], 0
je 0x1005b7e2
cmp byte [0x10183989], 0
jne 0x1005b823
mov byte [0x10183989], 1
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10183a0c]
xor ebx, dword [0x10183a08]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1018398a], al
inc esi
cmp esi, 0x77
jb 0x1005b7a1
jmp 0x1005b823
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10183a0c]
xor ebx, dword [0x10183a08]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1018398a], al
inc esi
cmp esi, 0x77
jb 0x1005b7e4
push ecx
mov ecx, dword [ebp + 8]
push 0x10183a00
push 0x1018398a
call fcn.1004c790
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x1005ba60
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
mov esi, ecx
mov ecx, 0x1019d47f
push edi
call fcn.10138266
cmp byte [esi], 0
lea edi, [esi + 2]
je 0x1005bace
cmp byte [esi + 1], 0
jne 0x1005bb12
xor ecx, ecx
mov byte [esi + 1], 1
mov dword [ebp - 4], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x74]
xor ebx, dword [esi + 0x70]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 4]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [edi + ecx], al
inc ecx
mov dword [ebp - 4], ecx
cmp ecx, 0x6d
jb 0x1005ba90
jmp 0x1005bb12
xor ecx, ecx
mov dword [ebp - 4], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x74]
xor ebx, dword [esi + 0x70]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 4]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [edi + ecx]
xor al, bl
mov byte [edi + ecx], al
inc ecx
mov dword [ebp - 4], ecx
cmp ecx, 0x6d
jb 0x1005bad3
push ecx
mov ecx, dword [ebp + 8]
lea eax, [esi + 0x6e]
push eax
push edi
call fcn.1004c790
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x1005bb30
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
mov esi, ecx
mov ecx, 0x1019d47f
push edi
call fcn.10138266
cmp byte [esi], 0
lea edi, [esi + 2]
je 0x1005bb9e
cmp byte [esi + 1], 0
jne 0x1005bbe2
xor ecx, ecx
mov byte [esi + 1], 1
mov dword [ebp - 4], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x3c]
xor ebx, dword [esi + 0x38]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 4]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [edi + ecx], al
inc ecx
mov dword [ebp - 4], ecx
cmp ecx, 0x35
jb 0x1005bb60
jmp 0x1005bbe2
xor ecx, ecx
mov dword [ebp - 4], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x3c]
xor ebx, dword [esi + 0x38]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 4]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [edi + ecx]
xor al, bl
mov byte [edi + ecx], al
inc ecx
mov dword [ebp - 4], ecx
cmp ecx, 0x35
jb 0x1005bba3
push ecx
mov ecx, dword [ebp + 8]
lea eax, [esi + 0x36]
push eax
push edi
call fcn.1004c790
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x1005bc00
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
mov esi, ecx
mov ecx, 0x1019d47f
push edi
call fcn.10138266
cmp byte [esi], 0
lea edi, [esi + 2]
je 0x1005bc6e
cmp byte [esi + 1], 0
jne 0x1005bcb2
xor ecx, ecx
mov byte [esi + 1], 1
mov dword [ebp - 4], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x3c]
xor ebx, dword [esi + 0x38]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 4]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [edi + ecx], al
inc ecx
mov dword [ebp - 4], ecx
cmp ecx, 0x32
jb 0x1005bc30
jmp 0x1005bcb2
xor ecx, ecx
mov dword [ebp - 4], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x3c]
xor ebx, dword [esi + 0x38]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [ebp - 4]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [edi + ecx]
xor al, bl
mov byte [edi + ecx], al
inc ecx
mov dword [ebp - 4], ecx
cmp ecx, 0x32
jb 0x1005bc73
push ecx
mov ecx, dword [ebp + 8]
lea eax, [esi + 0x33]
push eax
push edi
call fcn.1004c790
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x1005bcd0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov ecx, 0x1019d47f
push ebx
push esi
call fcn.10138266
cmp byte [0x10182a10], 0
je 0x1005bd42
cmp byte [0x10182a11], 0
jne 0x1005bd83
mov byte [0x10182a11], 1
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10182a44]
xor ebx, dword [0x10182a40]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10182a12], al
inc esi
cmp esi, 0x2e
jb 0x1005bd01
jmp 0x1005bd83
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10182a44]
xor ebx, dword [0x10182a40]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10182a12], al
inc esi
cmp esi, 0x2e
jb 0x1005bd44
push ecx
mov ecx, dword [ebp + 8]
push 0x10182a3f
push 0x10182a12
call fcn.1004c790
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x1005bdb0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
mov esi, ecx
mov ecx, 0x1019d47f
push edi
call fcn.10138266
cmp byte [esi], 0
lea edi, [esi + 2]
je 0x1005be24
cmp byte [esi + 1], 0
jne 0x1005be71
xor ecx, ecx
mov byte [esi + 1], 1
mov dword [esp + 0xc], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x2c]
xor ebx, dword [esi + 0x28]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [esp + 0xc]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [edi + ecx], al
inc ecx
mov dword [esp + 0xc], ecx
cmp ecx, 0x24
jb 0x1005bde4
jmp 0x1005be71
xor ecx, ecx
mov dword [esp + 0xc], ecx
nop word [eax + eax]
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x2c]
xor ebx, dword [esi + 0x28]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [esp + 0xc]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [edi + ecx]
xor al, bl
mov byte [edi + ecx], al
inc ecx
mov dword [esp + 0xc], ecx
cmp ecx, 0x24
jb 0x1005be30
push ecx
mov ecx, dword [ebp + 8]
lea eax, [esi + 0x25]
push eax
push edi
call fcn.1004c790
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x1005be90
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
mov esi, ecx
mov ecx, 0x1019d47f
push edi
call fcn.10138266
cmp byte [esi], 0
lea edi, [esi + 2]
je 0x1005bf04
cmp byte [esi + 1], 0
jne 0x1005bf51
xor ecx, ecx
mov byte [esi + 1], 1
mov dword [esp + 0xc], ecx
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x44]
xor ebx, dword [esi + 0x40]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [esp + 0xc]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [edi + ecx], al
inc ecx
mov dword [esp + 0xc], ecx
cmp ecx, 0x3a
jb 0x1005bec4
jmp 0x1005bf51
xor ecx, ecx
mov dword [esp + 0xc], ecx
nop word [eax + eax]
mov ebx, ecx
xor edx, edx
xor edx, dword [esi + 0x44]
xor ebx, dword [esi + 0x40]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
mov ecx, dword [esp + 0xc]
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, byte [edi + ecx]
xor al, bl
mov byte [edi + ecx], al
inc ecx
mov dword [esp + 0xc], ecx
cmp ecx, 0x3a
jb 0x1005bf10
push ecx
mov ecx, dword [ebp + 8]
lea eax, [esi + 0x3b]
push eax
push edi
call fcn.1004c790
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x1005bf70
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov ecx, 0x1019d47f
push ebx
push esi
call fcn.10138266
cmp byte [0x10183550], 0
je 0x1005bfe2
cmp byte [0x10183551], 0
jne 0x1005c023
mov byte [0x10183551], 1
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x1018358c]
xor ebx, dword [0x10183588]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10183552], al
inc esi
cmp esi, 0x31
jb 0x1005bfa1
jmp 0x1005c023
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x1018358c]
xor ebx, dword [0x10183588]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10183552], al
inc esi
cmp esi, 0x31
jb 0x1005bfe4
push ecx
mov ecx, dword [ebp + 8]
push 0x10183582
push 0x10183552
call fcn.1004c790
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x1005c050
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov ecx, 0x1019d47f
push ebx
push esi
call fcn.10138266
cmp byte [0x10183a48], 0
je 0x1005c0c2
cmp byte [0x10183a49], 0
jne 0x1005c103
mov byte [0x10183a49], 1
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10183acc]
xor ebx, dword [0x10183ac8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10183a4a], al
inc esi
cmp esi, 0x7d
jb 0x1005c081
jmp 0x1005c103
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10183acc]
xor ebx, dword [0x10183ac8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10183a4a], al
inc esi
cmp esi, 0x7d
jb 0x1005c0c4
push ecx
mov ecx, dword [ebp + 8]
push 0x10183ac6
push 0x10183a4a
call fcn.1004c790
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x1005c130
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov ecx, 0x1019d47f
push ebx
push esi
call fcn.10138266
cmp byte [0x10182c10], 0
je 0x1005c1a2
cmp byte [0x10182c11], 0
jne 0x1005c1e3
mov byte [0x10182c11], 1
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10182c54]
xor ebx, dword [0x10182c50]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10182c12], al
inc esi
cmp esi, 0x39
jb 0x1005c161
jmp 0x1005c1e3
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10182c54]
xor ebx, dword [0x10182c50]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10182c12], al
inc esi
cmp esi, 0x39
jb 0x1005c1a4
push ecx
mov ecx, dword [ebp + 8]
push 0x10182c4a
push 0x10182c12
call fcn.1004c790
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x1005c210
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov ecx, 0x1019d47f
push ebx
push esi
call fcn.10138266
cmp byte [0x10182e28], 0
je 0x1005c282
cmp byte [0x10182e29], 0
jne 0x1005c2c3
mov byte [0x10182e29], 1
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10182e7c]
xor ebx, dword [0x10182e78]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10182e2a], al
inc esi
cmp esi, 0x49
jb 0x1005c241
jmp 0x1005c2c3
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x10182e7c]
xor ebx, dword [0x10182e78]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x10182e2a], al
inc esi
cmp esi, 0x49
jb 0x1005c284
push ecx
mov ecx, dword [ebp + 8]
push 0x10182e72
push 0x10182e2a
call fcn.1004c790
mov eax, dword [ebp + 8]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4