joyce8/EMBER2024-capa huggingface dataset:
Function at 0x510ee8
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffcc
push ebx
xor ebx, ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0xc], ecx
mov byte [ebp - 5], dl
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x511077
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0xc]
call fcn.00405194
mov dword [ebp - 0x18], 0xefc3
cmp byte [ebp - 5], 0
je 0x510fb3
mov eax, dword [ebp - 4]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x510f44
mov eax, dword [ebp - 0x20]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
test eax, eax
jle 0x51105c
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 1
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x10]
mov al, byte [eax + edx - 1]
mov edx, dword [ebp - 0x18]
shr edx, 8
xor al, dl
mov byte [ebp - 0x11], al
lea ecx, [ebp - 0x28]
xor eax, eax
mov al, byte [ebp - 0x11]
mov edx, 2
call fcn.00409d74
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0xc]
call fcn.00405460
mov eax, dword [ebp - 0xc]
xor eax, eax
mov al, byte [ebp - 0x11]
add eax, 0x173
imul eax, eax, 0x694
add eax, 0x7b64
mov dword [ebp - 0x18], eax
inc dword [ebp - 0x10]
dec dword [ebp - 0x1c]
jne 0x510f59
jmp 0x51105c
mov eax, dword [ebp - 4]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x510fca
mov eax, dword [ebp - 0x24]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
sar eax, 1
jns 0x510fd4
adc eax, 0
test eax, eax
jle 0x51105c
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x10]
dec eax
mov edx, eax
add edx, edx
inc edx
mov ecx, 2
mov eax, dword [ebp - 4]
call fcn.0040568c
mov ecx, dword [ebp - 0x30]
lea eax, [ebp - 0x2c]
mov edx, 0x51108c
call fcn.004054ac
mov eax, dword [ebp - 0x2c]
call fcn.00409d9c
mov byte [ebp - 0x11], al
lea eax, [ebp - 0x34]
mov dl, byte [ebp - 0x11]
mov ecx, dword [ebp - 0x18]
shr ecx, 8
xor dl, cl
call fcn.0040537c
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0xc]
call fcn.00405460
mov eax, dword [ebp - 0xc]
xor eax, eax
mov al, byte [ebp - 0x11]
add eax, 0x173
imul eax, eax, 0x694
add eax, 0x7b64
mov dword [ebp - 0x18], eax
inc dword [ebp - 0x10]
dec dword [ebp - 0x1c]
jne 0x510fe6
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x51107e
lea eax, [ebp - 0x34]
mov edx, 4
call fcn.004051b8
ret
Function at 0x511090
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffcc
push ebx
xor ebx, ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0xc], ecx
mov byte [ebp - 5], dl
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x51121f
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0xc]
call fcn.00405194
mov dword [ebp - 0x18], 0x23d1
cmp byte [ebp - 5], 0
je 0x51115b
mov eax, dword [ebp - 4]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x5110ec
mov eax, dword [ebp - 0x20]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
test eax, eax
jle 0x511204
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 1
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x10]
mov al, byte [eax + edx - 1]
mov edx, dword [ebp - 0x18]
shr edx, 8
xor al, dl
mov byte [ebp - 0x11], al
lea ecx, [ebp - 0x28]
xor eax, eax
mov al, byte [ebp - 0x11]
mov edx, 2
call fcn.00409d74
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0xc]
call fcn.00405460
mov eax, dword [ebp - 0xc]
xor eax, eax
mov al, byte [ebp - 0x11]
add eax, 0x173
imul eax, eax, 0x32f9
add eax, 0xd81c
mov dword [ebp - 0x18], eax
inc dword [ebp - 0x10]
dec dword [ebp - 0x1c]
jne 0x511101
jmp 0x511204
mov eax, dword [ebp - 4]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x511172
mov eax, dword [ebp - 0x24]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
sar eax, 1
jns 0x51117c
adc eax, 0
test eax, eax
jle 0x511204
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x10]
dec eax
mov edx, eax
add edx, edx
inc edx
mov ecx, 2
mov eax, dword [ebp - 4]
call fcn.0040568c
mov ecx, dword [ebp - 0x30]
lea eax, [ebp - 0x2c]
mov edx, 0x511234
call fcn.004054ac
mov eax, dword [ebp - 0x2c]
call fcn.00409d9c
mov byte [ebp - 0x11], al
lea eax, [ebp - 0x34]
mov dl, byte [ebp - 0x11]
mov ecx, dword [ebp - 0x18]
shr ecx, 8
xor dl, cl
call fcn.0040537c
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0xc]
call fcn.00405460
mov eax, dword [ebp - 0xc]
xor eax, eax
mov al, byte [ebp - 0x11]
add eax, 0x173
imul eax, eax, 0x32f9
add eax, 0xd81c
mov dword [ebp - 0x18], eax
inc dword [ebp - 0x10]
dec dword [ebp - 0x1c]
jne 0x51118e
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x511226
lea eax, [ebp - 0x34]
mov edx, 4
call fcn.004051b8
ret
Function at 0x511238
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffcc
push ebx
xor ebx, ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0xc], ecx
mov byte [ebp - 5], dl
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x5113c7
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0xc]
call fcn.00405194
mov dword [ebp - 0x18], 0x2b02
cmp byte [ebp - 5], 0
je 0x511303
mov eax, dword [ebp - 4]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x511294
mov eax, dword [ebp - 0x20]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
test eax, eax
jle 0x5113ac
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 1
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x10]
mov al, byte [eax + edx - 1]
mov edx, dword [ebp - 0x18]
shr edx, 8
xor al, dl
mov byte [ebp - 0x11], al
lea ecx, [ebp - 0x28]
xor eax, eax
mov al, byte [ebp - 0x11]
mov edx, 2
call fcn.00409d74
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0xc]
call fcn.00405460
mov eax, dword [ebp - 0xc]
xor eax, eax
mov al, byte [ebp - 0x11]
add eax, 0x173
imul eax, eax, 0xd6b4
add eax, 0x71fd
mov dword [ebp - 0x18], eax
inc dword [ebp - 0x10]
dec dword [ebp - 0x1c]
jne 0x5112a9
jmp 0x5113ac
mov eax, dword [ebp - 4]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x51131a
mov eax, dword [ebp - 0x24]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
sar eax, 1
jns 0x511324
adc eax, 0
test eax, eax
jle 0x5113ac
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x10]
dec eax
mov edx, eax
add edx, edx
inc edx
mov ecx, 2
mov eax, dword [ebp - 4]
call fcn.0040568c
mov ecx, dword [ebp - 0x30]
lea eax, [ebp - 0x2c]
mov edx, 0x5113dc
call fcn.004054ac
mov eax, dword [ebp - 0x2c]
call fcn.00409d9c
mov byte [ebp - 0x11], al
lea eax, [ebp - 0x34]
mov dl, byte [ebp - 0x11]
mov ecx, dword [ebp - 0x18]
shr ecx, 8
xor dl, cl
call fcn.0040537c
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0xc]
call fcn.00405460
mov eax, dword [ebp - 0xc]
xor eax, eax
mov al, byte [ebp - 0x11]
add eax, 0x173
imul eax, eax, 0xd6b4
add eax, 0x71fd
mov dword [ebp - 0x18], eax
inc dword [ebp - 0x10]
dec dword [ebp - 0x1c]
jne 0x511336
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5113ce
lea eax, [ebp - 0x34]
mov edx, 4
call fcn.004051b8
ret
Function at 0x5113e0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffcc
push ebx
xor ebx, ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0xc], ecx
mov byte [ebp - 5], dl
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x51156f
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0xc]
call fcn.00405194
mov dword [ebp - 0x18], 0xefc3
cmp byte [ebp - 5], 0
je 0x5114ab
mov eax, dword [ebp - 4]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x51143c
mov eax, dword [ebp - 0x20]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
test eax, eax
jle 0x511554
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 1
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x10]
mov al, byte [eax + edx - 1]
mov edx, dword [ebp - 0x18]
shr edx, 8
xor al, dl
mov byte [ebp - 0x11], al
lea ecx, [ebp - 0x28]
xor eax, eax
mov al, byte [ebp - 0x11]
mov edx, 2
call fcn.00409d74
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0xc]
call fcn.00405460
mov eax, dword [ebp - 0xc]
xor eax, eax
mov al, byte [ebp - 0x11]
add eax, 0x173
imul eax, eax, 0x53ea
add eax, 0x58e1
mov dword [ebp - 0x18], eax
inc dword [ebp - 0x10]
dec dword [ebp - 0x1c]
jne 0x511451
jmp 0x511554
mov eax, dword [ebp - 4]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x5114c2
mov eax, dword [ebp - 0x24]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
sar eax, 1
jns 0x5114cc
adc eax, 0
test eax, eax
jle 0x511554
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x10]
dec eax
mov edx, eax
add edx, edx
inc edx
mov ecx, 2
mov eax, dword [ebp - 4]
call fcn.0040568c
mov ecx, dword [ebp - 0x30]
lea eax, [ebp - 0x2c]
mov edx, 0x511584
call fcn.004054ac
mov eax, dword [ebp - 0x2c]
call fcn.00409d9c
mov byte [ebp - 0x11], al
lea eax, [ebp - 0x34]
mov dl, byte [ebp - 0x11]
mov ecx, dword [ebp - 0x18]
shr ecx, 8
xor dl, cl
call fcn.0040537c
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0xc]
call fcn.00405460
mov eax, dword [ebp - 0xc]
xor eax, eax
mov al, byte [ebp - 0x11]
add eax, 0x173
imul eax, eax, 0x53ea
add eax, 0x58e1
mov dword [ebp - 0x18], eax
inc dword [ebp - 0x10]
dec dword [ebp - 0x1c]
jne 0x5114de
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x511576
lea eax, [ebp - 0x34]
mov edx, 4
call fcn.004051b8
ret
Function at 0x511588
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffcc
push ebx
xor ebx, ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0xc], ecx
mov byte [ebp - 5], dl
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x511717
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0xc]
call fcn.00405194
mov dword [ebp - 0x18], 0xa07
cmp byte [ebp - 5], 0
je 0x511653
mov eax, dword [ebp - 4]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x5115e4
mov eax, dword [ebp - 0x20]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
test eax, eax
jle 0x5116fc
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 1
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x10]
mov al, byte [eax + edx - 1]
mov edx, dword [ebp - 0x18]
shr edx, 8
xor al, dl
mov byte [ebp - 0x11], al
lea ecx, [ebp - 0x28]
xor eax, eax
mov al, byte [ebp - 0x11]
mov edx, 2
call fcn.00409d74
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0xc]
call fcn.00405460
mov eax, dword [ebp - 0xc]
xor eax, eax
mov al, byte [ebp - 0x11]
add eax, 0x173
imul eax, eax, 0x985c
add eax, 0x2c4e
mov dword [ebp - 0x18], eax
inc dword [ebp - 0x10]
dec dword [ebp - 0x1c]
jne 0x5115f9
jmp 0x5116fc
mov eax, dword [ebp - 4]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x51166a
mov eax, dword [ebp - 0x24]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
sar eax, 1
jns 0x511674
adc eax, 0
test eax, eax
jle 0x5116fc
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x10]
dec eax
mov edx, eax
add edx, edx
inc edx
mov ecx, 2
mov eax, dword [ebp - 4]
call fcn.0040568c
mov ecx, dword [ebp - 0x30]
lea eax, [ebp - 0x2c]
mov edx, 0x51172c
call fcn.004054ac
mov eax, dword [ebp - 0x2c]
call fcn.00409d9c
mov byte [ebp - 0x11], al
lea eax, [ebp - 0x34]
mov dl, byte [ebp - 0x11]
mov ecx, dword [ebp - 0x18]
shr ecx, 8
xor dl, cl
call fcn.0040537c
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0xc]
call fcn.00405460
mov eax, dword [ebp - 0xc]
xor eax, eax
mov al, byte [ebp - 0x11]
add eax, 0x173
imul eax, eax, 0x985c
add eax, 0x2c4e
mov dword [ebp - 0x18], eax
inc dword [ebp - 0x10]
dec dword [ebp - 0x1c]
jne 0x511686
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x51171e
lea eax, [ebp - 0x34]
mov edx, 4
call fcn.004051b8
ret
Function at 0x511730
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffcc
push ebx
xor ebx, ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0xc], ecx
mov byte [ebp - 5], dl
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x5118bf
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0xc]
call fcn.00405194
mov dword [ebp - 0x18], 0x5dd5
cmp byte [ebp - 5], 0
je 0x5117fb
mov eax, dword [ebp - 4]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x51178c
mov eax, dword [ebp - 0x20]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
test eax, eax
jle 0x5118a4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 1
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x10]
mov al, byte [eax + edx - 1]
mov edx, dword [ebp - 0x18]
shr edx, 8
xor al, dl
mov byte [ebp - 0x11], al
lea ecx, [ebp - 0x28]
xor eax, eax
mov al, byte [ebp - 0x11]
mov edx, 2
call fcn.00409d74
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0xc]
call fcn.00405460
mov eax, dword [ebp - 0xc]
xor eax, eax
mov al, byte [ebp - 0x11]
add eax, 0x173
imul eax, eax, 0xc31e
add eax, 0x6f4
mov dword [ebp - 0x18], eax
inc dword [ebp - 0x10]
dec dword [ebp - 0x1c]
jne 0x5117a1
jmp 0x5118a4
mov eax, dword [ebp - 4]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x511812
mov eax, dword [ebp - 0x24]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
sar eax, 1
jns 0x51181c
adc eax, 0
test eax, eax
jle 0x5118a4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x10]
dec eax
mov edx, eax
add edx, edx
inc edx
mov ecx, 2
mov eax, dword [ebp - 4]
call fcn.0040568c
mov ecx, dword [ebp - 0x30]
lea eax, [ebp - 0x2c]
mov edx, 0x5118d4
call fcn.004054ac
mov eax, dword [ebp - 0x2c]
call fcn.00409d9c
mov byte [ebp - 0x11], al
lea eax, [ebp - 0x34]
mov dl, byte [ebp - 0x11]
mov ecx, dword [ebp - 0x18]
shr ecx, 8
xor dl, cl
call fcn.0040537c
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0xc]
call fcn.00405460
mov eax, dword [ebp - 0xc]
xor eax, eax
mov al, byte [ebp - 0x11]
add eax, 0x173
imul eax, eax, 0xc31e
add eax, 0x6f4
mov dword [ebp - 0x18], eax
inc dword [ebp - 0x10]
dec dword [ebp - 0x1c]
jne 0x51182e
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5118c6
lea eax, [ebp - 0x34]
mov edx, 4
call fcn.004051b8
ret
Function at 0x5118d8
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffcc
push ebx
xor ebx, ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0xc], ecx
mov byte [ebp - 5], dl
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x511a67
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0xc]
call fcn.00405194
mov dword [ebp - 0x18], 0x6116
cmp byte [ebp - 5], 0
je 0x5119a3
mov eax, dword [ebp - 4]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x511934
mov eax, dword [ebp - 0x20]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
test eax, eax
jle 0x511a4c
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 1
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x10]
mov al, byte [eax + edx - 1]
mov edx, dword [ebp - 0x18]
shr edx, 8
xor al, dl
mov byte [ebp - 0x11], al
lea ecx, [ebp - 0x28]
xor eax, eax
mov al, byte [ebp - 0x11]
mov edx, 2
call fcn.00409d74
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0xc]
call fcn.00405460
mov eax, dword [ebp - 0xc]
xor eax, eax
mov al, byte [ebp - 0x11]
add eax, 0x173
imul eax, eax, 0xa289
add eax, 0x8343
mov dword [ebp - 0x18], eax
inc dword [ebp - 0x10]
dec dword [ebp - 0x1c]
jne 0x511949
jmp 0x511a4c
mov eax, dword [ebp - 4]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x5119ba
mov eax, dword [ebp - 0x24]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
sar eax, 1
jns 0x5119c4
adc eax, 0
test eax, eax
jle 0x511a4c
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x10]
dec eax
mov edx, eax
add edx, edx
inc edx
mov ecx, 2
mov eax, dword [ebp - 4]
call fcn.0040568c
mov ecx, dword [ebp - 0x30]
lea eax, [ebp - 0x2c]
mov edx, 0x511a7c
call fcn.004054ac
mov eax, dword [ebp - 0x2c]
call fcn.00409d9c
mov byte [ebp - 0x11], al
lea eax, [ebp - 0x34]
mov dl, byte [ebp - 0x11]
mov ecx, dword [ebp - 0x18]
shr ecx, 8
xor dl, cl
call fcn.0040537c
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0xc]
call fcn.00405460
mov eax, dword [ebp - 0xc]
xor eax, eax
mov al, byte [ebp - 0x11]
add eax, 0x173
imul eax, eax, 0xa289
add eax, 0x8343
mov dword [ebp - 0x18], eax
inc dword [ebp - 0x10]
dec dword [ebp - 0x1c]
jne 0x5119d6
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x511a6e
lea eax, [ebp - 0x34]
mov edx, 4
call fcn.004051b8
ret
Function at 0x511a80
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffcc
push ebx
xor ebx, ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0xc], ecx
mov byte [ebp - 5], dl
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x511c0f
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0xc]
call fcn.00405194
mov dword [ebp - 0x18], 0x9798
cmp byte [ebp - 5], 0
je 0x511b4b
mov eax, dword [ebp - 4]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x511adc
mov eax, dword [ebp - 0x20]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
test eax, eax
jle 0x511bf4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 1
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x10]
mov al, byte [eax + edx - 1]
mov edx, dword [ebp - 0x18]
shr edx, 8
xor al, dl
mov byte [ebp - 0x11], al
lea ecx, [ebp - 0x28]
xor eax, eax
mov al, byte [ebp - 0x11]
mov edx, 2
call fcn.00409d74
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0xc]
call fcn.00405460
mov eax, dword [ebp - 0xc]
xor eax, eax
mov al, byte [ebp - 0x11]
add eax, 0x173
imul eax, eax, 0xa3dc
add eax, 0xa55b
mov dword [ebp - 0x18], eax
inc dword [ebp - 0x10]
dec dword [ebp - 0x1c]
jne 0x511af1
jmp 0x511bf4
mov eax, dword [ebp - 4]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x511b62
mov eax, dword [ebp - 0x24]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
sar eax, 1
jns 0x511b6c
adc eax, 0
test eax, eax
jle 0x511bf4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x10]
dec eax
mov edx, eax
add edx, edx
inc edx
mov ecx, 2
mov eax, dword [ebp - 4]
call fcn.0040568c
mov ecx, dword [ebp - 0x30]
lea eax, [ebp - 0x2c]
mov edx, 0x511c24
call fcn.004054ac
mov eax, dword [ebp - 0x2c]
call fcn.00409d9c
mov byte [ebp - 0x11], al
lea eax, [ebp - 0x34]
mov dl, byte [ebp - 0x11]
mov ecx, dword [ebp - 0x18]
shr ecx, 8
xor dl, cl
call fcn.0040537c
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0xc]
call fcn.00405460
mov eax, dword [ebp - 0xc]
xor eax, eax
mov al, byte [ebp - 0x11]
add eax, 0x173
imul eax, eax, 0xa3dc
add eax, 0xa55b
mov dword [ebp - 0x18], eax
inc dword [ebp - 0x10]
dec dword [ebp - 0x1c]
jne 0x511b7e
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x511c16
lea eax, [ebp - 0x34]
mov edx, 4
call fcn.004051b8
ret
Function at 0x511c28
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffcc
push ebx
xor ebx, ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0xc], ecx
mov byte [ebp - 5], dl
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x511db7
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0xc]
call fcn.00405194
mov dword [ebp - 0x18], 0xb493
cmp byte [ebp - 5], 0
je 0x511cf3
mov eax, dword [ebp - 4]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x511c84
mov eax, dword [ebp - 0x20]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
test eax, eax
jle 0x511d9c
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 1
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x10]
mov al, byte [eax + edx - 1]
mov edx, dword [ebp - 0x18]
shr edx, 8
xor al, dl
mov byte [ebp - 0x11], al
lea ecx, [ebp - 0x28]
xor eax, eax
mov al, byte [ebp - 0x11]
mov edx, 2
call fcn.00409d74
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0xc]
call fcn.00405460
mov eax, dword [ebp - 0xc]
xor eax, eax
mov al, byte [ebp - 0x11]
add eax, 0x173
imul eax, eax, 0x1f1a
add eax, 0x5a64
mov dword [ebp - 0x18], eax
inc dword [ebp - 0x10]
dec dword [ebp - 0x1c]
jne 0x511c99
jmp 0x511d9c
mov eax, dword [ebp - 4]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x511d0a
mov eax, dword [ebp - 0x24]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
sar eax, 1
jns 0x511d14
adc eax, 0
test eax, eax
jle 0x511d9c
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x10]
dec eax
mov edx, eax
add edx, edx
inc edx
mov ecx, 2
mov eax, dword [ebp - 4]
call fcn.0040568c
mov ecx, dword [ebp - 0x30]
lea eax, [ebp - 0x2c]
mov edx, 0x511dcc
call fcn.004054ac
mov eax, dword [ebp - 0x2c]
call fcn.00409d9c
mov byte [ebp - 0x11], al
lea eax, [ebp - 0x34]
mov dl, byte [ebp - 0x11]
mov ecx, dword [ebp - 0x18]
shr ecx, 8
xor dl, cl
call fcn.0040537c
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0xc]
call fcn.00405460
mov eax, dword [ebp - 0xc]
xor eax, eax
mov al, byte [ebp - 0x11]
add eax, 0x173
imul eax, eax, 0x1f1a
add eax, 0x5a64
mov dword [ebp - 0x18], eax
inc dword [ebp - 0x10]
dec dword [ebp - 0x1c]
jne 0x511d26
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x511dbe
lea eax, [ebp - 0x34]
mov edx, 4
call fcn.004051b8
ret