joyce8/EMBER2024-capa huggingface dataset:
Function at 0x100594f0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi], 0
je 0x1005954c
cmp byte [esi + 1], 0
jne 0x1005958e
mov byte [esi + 1], 1
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x44]
xor ebx, dword [esi + 0x40]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + edi + 2], al
inc edi
cmp edi, 0x38
jb 0x10059510
jmp 0x1005958e
xor edi, edi
nop
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x44]
xor ebx, dword [esi + 0x40]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + edi + 2]
xor al, bl
mov byte [esi + edi + 2], al
inc edi
cmp edi, 0x38
jb 0x10059550
lea ecx, [esi + 0x39]
lea eax, [esi + 2]
mov esi, dword [ebp + 8]
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
cmp eax, ecx
je 0x100595b9
push 0x37
push eax
mov ecx, esi
call fcn.10044d60
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x100595d0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi], 0
je 0x1005962c
cmp byte [esi + 1], 0
jne 0x1005966e
mov byte [esi + 1], 1
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x4c]
xor ebx, dword [esi + 0x48]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + edi + 2], al
inc edi
cmp edi, 0x42
jb 0x100595f0
jmp 0x1005966e
xor edi, edi
nop
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x4c]
xor ebx, dword [esi + 0x48]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + edi + 2]
xor al, bl
mov byte [esi + edi + 2], al
inc edi
cmp edi, 0x42
jb 0x10059630
lea ecx, [esi + 0x43]
lea eax, [esi + 2]
mov esi, dword [ebp + 8]
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
cmp eax, ecx
je 0x10059699
push 0x41
push eax
mov ecx, esi
call fcn.10044d60
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x100596b0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi], 0
je 0x1005970c
cmp byte [esi + 1], 0
jne 0x1005974e
mov byte [esi + 1], 1
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x54]
xor ebx, dword [esi + 0x50]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + edi + 2], al
inc edi
cmp edi, 0x4e
jb 0x100596d0
jmp 0x1005974e
xor edi, edi
nop
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x54]
xor ebx, dword [esi + 0x50]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + edi + 2]
xor al, bl
mov byte [esi + edi + 2], al
inc edi
cmp edi, 0x4e
jb 0x10059710
lea ecx, [esi + 0x4f]
lea eax, [esi + 2]
mov esi, dword [ebp + 8]
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
cmp eax, ecx
je 0x10059779
push 0x4d
push eax
mov ecx, esi
call fcn.10044d60
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10059790
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi], 0
je 0x100597f0
cmp byte [esi + 1], 0
jne 0x10059831
mov byte [esi + 1], 1
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x2c]
xor ebx, dword [esi + 0x28]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [esp + 0x14], edx
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + edi + 2], al
inc edi
cmp edi, 0x21
jb 0x100597b3
jmp 0x10059831
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x2c]
xor ebx, dword [esi + 0x28]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [esp + 0x14], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + edi + 2]
xor al, bl
mov byte [esi + edi + 2], al
inc edi
cmp edi, 0x21
jb 0x100597f2
lea ecx, [esi + 0x22]
lea eax, [esi + 2]
mov esi, dword [ebp + 8]
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
cmp eax, ecx
je 0x1005985c
push 0x20
push eax
mov ecx, esi
call fcn.10044d60
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10059870
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
cmp byte [0x101bf8d8], 0
push ebx
push esi
je 0x100598ea
cmp byte [0x101bf8d9], 0
jne 0x10059938
mov byte [0x101bf8d9], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x101bf914]
xor ebx, dword [0x101bf910]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x101bf8da]
xor al, bl
mov byte [esi + 0x101bf8da], al
inc esi
cmp esi, 0x33
jb 0x100598a0
jmp 0x10059938
xor esi, esi
nop dword [eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x101bf914]
xor ebx, dword [0x101bf910]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x101bf8da]
xor al, bl
mov byte [esi + 0x101bf8da], al
inc esi
cmp esi, 0x33
jb 0x100598f0
mov esi, dword [ebp + 8]
mov ecx, esi
push 0x32
push 0x101bf8da
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
call fcn.10044d60
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10059970
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi], 0
je 0x100599d0
cmp byte [esi + 1], 0
jne 0x10059a11
mov byte [esi + 1], 1
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x2c]
xor ebx, dword [esi + 0x28]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [esp + 0x14], edx
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + edi + 2], al
inc edi
cmp edi, 0x22
jb 0x10059993
jmp 0x10059a11
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x2c]
xor ebx, dword [esi + 0x28]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [esp + 0x14], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + edi + 2]
xor al, bl
mov byte [esi + edi + 2], al
inc edi
cmp edi, 0x22
jb 0x100599d2
lea ecx, [esi + 0x23]
lea eax, [esi + 2]
mov esi, dword [ebp + 8]
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
cmp eax, ecx
je 0x10059a3c
push 0x21
push eax
mov ecx, esi
call fcn.10044d60
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10059a50
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
cmp byte [0x101c05a0], 0
push ebx
push esi
je 0x10059aca
cmp byte [0x101c05a1], 0
jne 0x10059b18
mov byte [0x101c05a1], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x101c05f4]
xor ebx, dword [0x101c05f0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x101c05a2]
xor al, bl
mov byte [esi + 0x101c05a2], al
inc esi
cmp esi, 0x4d
jb 0x10059a80
jmp 0x10059b18
xor esi, esi
nop dword [eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x101c05f4]
xor ebx, dword [0x101c05f0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x101c05a2]
xor al, bl
mov byte [esi + 0x101c05a2], al
inc esi
cmp esi, 0x4d
jb 0x10059ad0
mov esi, dword [ebp + 8]
mov ecx, esi
push 0x4c
push 0x101c05a2
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
call fcn.10044d60
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10059b50
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi], 0
je 0x10059bb0
cmp byte [esi + 1], 0
jne 0x10059bf1
mov byte [esi + 1], 1
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x2c]
xor ebx, dword [esi + 0x28]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [esp + 0x14], edx
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + edi + 2], al
inc edi
cmp edi, 0x25
jb 0x10059b73
jmp 0x10059bf1
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x2c]
xor ebx, dword [esi + 0x28]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [esp + 0x14], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + edi + 2]
xor al, bl
mov byte [esi + edi + 2], al
inc edi
cmp edi, 0x25
jb 0x10059bb2
lea ecx, [esi + 0x26]
lea eax, [esi + 2]
mov esi, dword [ebp + 8]
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
cmp eax, ecx
je 0x10059c1c
push 0x24
push eax
mov ecx, esi
call fcn.10044d60
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10059c30
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi], 0
je 0x10059c90
cmp byte [esi + 1], 0
jne 0x10059cd1
mov byte [esi + 1], 1
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x44]
xor ebx, dword [esi + 0x40]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [esp + 0x14], edx
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + edi + 2], al
inc edi
cmp edi, 0x3b
jb 0x10059c53
jmp 0x10059cd1
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x44]
xor ebx, dword [esi + 0x40]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [esp + 0x14], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + edi + 2]
xor al, bl
mov byte [esi + edi + 2], al
inc edi
cmp edi, 0x3b
jb 0x10059c92
lea ecx, [esi + 0x3c]
lea eax, [esi + 2]
mov esi, dword [ebp + 8]
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
cmp eax, ecx
je 0x10059cfc
push 0x3a
push eax
mov ecx, esi
call fcn.10044d60
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10059d10
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
cmp byte [0x101c0410], 0
push ebx
push esi
je 0x10059d8a
cmp byte [0x101c0411], 0
jne 0x10059dd8
mov byte [0x101c0411], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x101c045c]
xor ebx, dword [0x101c0458]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x101c0412]
xor al, bl
mov byte [esi + 0x101c0412], al
inc esi
cmp esi, 0x43
jb 0x10059d40
jmp 0x10059dd8
xor esi, esi
nop dword [eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x101c045c]
xor ebx, dword [0x101c0458]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x101c0412]
xor al, bl
mov byte [esi + 0x101c0412], al
inc esi
cmp esi, 0x43
jb 0x10059d90
mov esi, dword [ebp + 8]
mov ecx, esi
push 0x42
push 0x101c0412
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
call fcn.10044d60
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10059e10
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
cmp byte [0x101c0548], 0
push ebx
push esi
je 0x10059e8a
cmp byte [0x101c0549], 0
jne 0x10059ed8
mov byte [0x101c0549], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x101c059c]
xor ebx, dword [0x101c0598]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x101c054a]
xor al, bl
mov byte [esi + 0x101c054a], al
inc esi
cmp esi, 0x48
jb 0x10059e40
jmp 0x10059ed8
xor esi, esi
nop dword [eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x101c059c]
xor ebx, dword [0x101c0598]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x101c054a]
xor al, bl
mov byte [esi + 0x101c054a], al
inc esi
cmp esi, 0x48
jb 0x10059e90
mov esi, dword [ebp + 8]
mov ecx, esi
push 0x47
push 0x101c054a
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
call fcn.10044d60
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10059f10
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi], 0
je 0x10059f70
cmp byte [esi + 1], 0
jne 0x10059fb1
mov byte [esi + 1], 1
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x3c]
xor ebx, dword [esi + 0x38]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [esp + 0x14], edx
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + edi + 2], al
inc edi
cmp edi, 0x30
jb 0x10059f33
jmp 0x10059fb1
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x3c]
xor ebx, dword [esi + 0x38]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [esp + 0x14], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + edi + 2]
xor al, bl
mov byte [esi + edi + 2], al
inc edi
cmp edi, 0x30
jb 0x10059f72
lea ecx, [esi + 0x31]
lea eax, [esi + 2]
mov esi, dword [ebp + 8]
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
cmp eax, ecx
je 0x10059fdc
push 0x2f
push eax
mov ecx, esi
call fcn.10044d60
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10059ff0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi], 0
je 0x1005a050
cmp byte [esi + 1], 0
jne 0x1005a091
mov byte [esi + 1], 1
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x3c]
xor ebx, dword [esi + 0x38]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [esp + 0x14], edx
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + edi + 2], al
inc edi
cmp edi, 0x2f
jb 0x1005a013
jmp 0x1005a091
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x3c]
xor ebx, dword [esi + 0x38]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [esp + 0x14], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + edi + 2]
xor al, bl
mov byte [esi + edi + 2], al
inc edi
cmp edi, 0x2f
jb 0x1005a052
lea ecx, [esi + 0x30]
lea eax, [esi + 2]
mov esi, dword [ebp + 8]
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
cmp eax, ecx
je 0x1005a0bc
push 0x2e
push eax
mov ecx, esi
call fcn.10044d60
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x1005a0d0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi], 0
je 0x1005a130
cmp byte [esi + 1], 0
jne 0x1005a171
mov byte [esi + 1], 1
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x34]
xor ebx, dword [esi + 0x30]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [esp + 0x14], edx
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + edi + 2], al
inc edi
cmp edi, 0x27
jb 0x1005a0f3
jmp 0x1005a171
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x34]
xor ebx, dword [esi + 0x30]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [esp + 0x14], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + edi + 2]
xor al, bl
mov byte [esi + edi + 2], al
inc edi
cmp edi, 0x27
jb 0x1005a132
lea ecx, [esi + 0x28]
lea eax, [esi + 2]
mov esi, dword [ebp + 8]
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
cmp eax, ecx
je 0x1005a19c
push 0x26
push eax
mov ecx, esi
call fcn.10044d60
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x1005a1b0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi], 0
je 0x1005a210
cmp byte [esi + 1], 0
jne 0x1005a251
mov byte [esi + 1], 1
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x34]
xor ebx, dword [esi + 0x30]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [esp + 0x14], edx
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + edi + 2], al
inc edi
cmp edi, 0x2d
jb 0x1005a1d3
jmp 0x1005a251
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x34]
xor ebx, dword [esi + 0x30]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [esp + 0x14], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + edi + 2]
xor al, bl
mov byte [esi + edi + 2], al
inc edi
cmp edi, 0x2d
jb 0x1005a212
lea ecx, [esi + 0x2e]
lea eax, [esi + 2]
mov esi, dword [ebp + 8]
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
cmp eax, ecx
je 0x1005a27c
push 0x2c
push eax
mov ecx, esi
call fcn.10044d60
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x1005a290
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi], 0
je 0x1005a2ec
cmp byte [esi + 1], 0
jne 0x1005a32e
mov byte [esi + 1], 1
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x3c]
xor ebx, dword [esi + 0x38]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + edi + 2], al
inc edi
cmp edi, 0x36
jb 0x1005a2b0
jmp 0x1005a32e
xor edi, edi
nop
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x3c]
xor ebx, dword [esi + 0x38]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + edi + 2]
xor al, bl
mov byte [esi + edi + 2], al
inc edi
cmp edi, 0x36
jb 0x1005a2f0
lea ecx, [esi + 0x37]
lea eax, [esi + 2]
mov esi, dword [ebp + 8]
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
cmp eax, ecx
je 0x1005a359
push 0x35
push eax
mov ecx, esi
call fcn.10044d60
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x1005a370
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
cmp byte [0x101bfd60], 0
push ebx
push esi
je 0x1005a3ea
cmp byte [0x101bfd61], 0
jne 0x1005a438
mov byte [0x101bfd61], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x101bfdac]
xor ebx, dword [0x101bfda8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x101bfd62]
xor al, bl
mov byte [esi + 0x101bfd62], al
inc esi
cmp esi, 0x46
jb 0x1005a3a0
jmp 0x1005a438
xor esi, esi
nop dword [eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x101bfdac]
xor ebx, dword [0x101bfda8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x101bfd62]
xor al, bl
mov byte [esi + 0x101bfd62], al
inc esi
cmp esi, 0x46
jb 0x1005a3f0
mov esi, dword [ebp + 8]
mov ecx, esi
push 0x45
push 0x101bfd62
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
call fcn.10044d60
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x1005a470
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi], 0
je 0x1005a4cc
cmp byte [esi + 1], 0
jne 0x1005a50e
mov byte [esi + 1], 1
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x2c]
xor ebx, dword [esi + 0x28]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + edi + 2], al
inc edi
cmp edi, 0x26
jb 0x1005a490
jmp 0x1005a50e
xor edi, edi
nop
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x2c]
xor ebx, dword [esi + 0x28]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + edi + 2]
xor al, bl
mov byte [esi + edi + 2], al
inc edi
cmp edi, 0x26
jb 0x1005a4d0
lea ecx, [esi + 0x27]
lea eax, [esi + 2]
mov esi, dword [ebp + 8]
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
cmp eax, ecx
je 0x1005a539
push 0x25
push eax
mov ecx, esi
call fcn.10044d60
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4