joyce8/EMBER2024-capa huggingface dataset:
Function at 0x45cbcb
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
mov esi, dword [ebp + 0xc]
mov ebx, ecx
push edi
cmp esi, dword [ebx + 0x6c]
jle 0x45cbe9
push ecx
push esi
lea ecx, [ebx + 0x68]
mov dword [ebx + 0x6c], esi
call fcn.0044fa7f
mov edi, dword [ebx + 0x68]
push esi
push dword [ebp + 8]
mov ecx, ebx
push edi
call fcn.004601ea
mov eax, dword [ebx + 0x48]
mov ecx, dword [eax + 0xc]
imul ecx, dword [ebp + 8]
mov eax, dword [ebx + 0x50]
imul eax, dword [ebp + 0x10]
add ecx, dword [ebx + 0x64]
sar eax, 8
mov dword [ebp + 8], ecx
cmp eax, 0xfe
jge 0x45ccc2
lea esi, [eax + 1]
lea edx, [edi + 1]
mov dword [ebp - 4], esi
mov dword [ebp + 0x10], edx
movzx edi, byte [edx + 1]
movzx eax, byte [edx - 1]
shl edi, 0x10
or edi, eax
movzx eax, byte [edx]
imul edi, esi
or eax, 0xffff0000
imul eax, esi
shr edi, 8
xor edi, eax
movzx eax, byte [edx]
or eax, 0xff0000
imul eax, esi
mov esi, dword [ecx]
mov ecx, esi
and edi, 0xff00ff
xor edi, eax
shr ecx, 8
and esi, 0xff00ff
mov eax, edi
shr eax, 0x18
mov edx, 0x100
sub edx, eax
imul esi, edx
mov eax, ecx
and eax, 0xffff00ff
imul eax, edx
shr esi, 8
xor esi, eax
mov eax, 0xff00ff
and ecx, eax
imul ecx, edx
mov edx, dword [ebp + 0x10]
and esi, eax
xor esi, ecx
mov ecx, dword [ebp + 8]
add esi, edi
mov dword [ecx], esi
mov eax, dword [ebx + 0x48]
mov esi, dword [ebp - 4]
add ecx, dword [eax + 0xc]
mov eax, dword [ebp + 0xc]
add edx, 3
dec eax
mov dword [ebp + 0x10], edx
mov dword [ebp + 8], ecx
mov dword [ebp + 0xc], eax
test eax, eax
jg 0x45cc29
jmp 0x45ccf0
inc edi
mov edx, ecx
movzx ecx, byte [edi + 1]
movzx eax, byte [edi]
or ecx, 0xffffff00
shl ecx, 8
or ecx, eax
movzx eax, byte [edi - 1]
shl ecx, 8
or ecx, eax
mov dword [edx], ecx
mov eax, dword [ebx + 0x48]
lea edi, [edi + 3]
add edx, dword [eax + 0xc]
dec esi
test esi, esi
jg 0x45ccc5
pop edi
pop esi
pop ebx
leave
ret 0xc
Function at 0x45ccf7
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
mov esi, dword [ebp + 0xc]
mov ebx, ecx
push edi
cmp esi, dword [ebx + 0x6c]
jle 0x45cd1e
mov dword [ebx + 0x6c], esi
push dword [ebx + 0x68]
call fcn.004a50b4
push esi
call fcn.004a50ec
pop ecx
pop ecx
mov dword [ebx + 0x68], eax
mov edi, dword [ebx + 0x68]
push esi
push dword [ebp + 8]
mov ecx, ebx
push edi
mov dword [ebp - 4], edi
call fcn.0046043b
mov eax, dword [ebx + 0x48]
mov esi, dword [eax + 0xc]
imul esi, dword [ebp + 8]
mov eax, dword [ebx + 0x50]
imul eax, dword [ebp + 0x10]
add esi, dword [ebx + 0x64]
sar eax, 8
mov dword [ebp + 8], esi
cmp eax, 0xfe
jge 0x45cdda
lea edx, [eax + 1]
mov dword [ebp + 0x10], edx
movzx eax, byte [edi]
mov esi, dword [esi]
mov ecx, eax
shl ecx, 0x10
or ecx, eax
imul ecx, edx
mov edi, ecx
shr edi, 8
xor edi, ecx
and edi, 0xff00ff
xor edi, ecx
mov ecx, esi
and esi, 0xff00ff
mov eax, edi
shr eax, 0x18
shr ecx, 8
mov edx, 0x100
sub edx, eax
imul esi, edx
mov eax, ecx
and eax, 0xffff00ff
imul eax, edx
shr esi, 8
xor esi, eax
mov eax, 0xff00ff
and ecx, eax
imul ecx, edx
mov edx, dword [ebp + 0x10]
and esi, eax
mov eax, dword [ebp + 8]
xor esi, ecx
add esi, edi
mov edi, dword [ebp - 4]
mov dword [eax], esi
mov eax, dword [ebx + 0x48]
mov esi, dword [ebp + 8]
add esi, dword [eax + 0xc]
mov eax, dword [ebp + 0xc]
inc edi
dec eax
mov dword [ebp - 4], edi
mov dword [ebp + 8], esi
mov dword [ebp + 0xc], eax
test eax, eax
jg 0x45cd5b
jmp 0x45ce4c
movzx eax, byte [edi]
mov esi, dword [esi]
mov edi, eax
shl edi, 8
or edi, eax
shl edi, 8
or edi, eax
shl edi, 8
or edi, eax
mov ecx, esi
and esi, 0xff00ff
mov eax, edi
shr eax, 0x18
shr ecx, 8
mov edx, 0x100
sub edx, eax
imul esi, edx
mov eax, ecx
and eax, 0xffff00ff
imul eax, edx
shr esi, 8
xor esi, eax
mov eax, 0xff00ff
and ecx, eax
imul ecx, edx
and esi, eax
mov eax, dword [ebp + 8]
xor esi, ecx
add esi, edi
mov edi, dword [ebp - 4]
mov dword [eax], esi
mov eax, dword [ebx + 0x48]
mov esi, dword [ebp + 8]
add esi, dword [eax + 0xc]
mov eax, dword [ebp + 0xc]
inc edi
dec eax
mov dword [ebp - 4], edi
mov dword [ebp + 8], esi
mov dword [ebp + 0xc], eax
test eax, eax
jg 0x45cdda
pop edi
pop esi
pop ebx
leave
ret 0xc
Function at 0x45ce53
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
mov esi, dword [ebp + 0xc]
mov ebx, ecx
push edi
cmp esi, dword [ebx + 0x6c]
jle 0x45ce7a
mov dword [ebx + 0x6c], esi
push dword [ebx + 0x68]
call fcn.004a50b4
push esi
call fcn.004a50ec
pop ecx
pop ecx
mov dword [ebx + 0x68], eax
mov edi, dword [ebx + 0x68]
push esi
push dword [ebp + 8]
mov ecx, ebx
push edi
mov dword [ebp - 4], edi
call fcn.0045b247
mov eax, dword [ebx + 0x48]
mov esi, dword [eax + 0xc]
imul esi, dword [ebp + 8]
mov eax, dword [ebx + 0x50]
imul eax, dword [ebp + 0x10]
add esi, dword [ebx + 0x64]
sar eax, 8
mov dword [ebp + 8], esi
cmp eax, 0xfe
jge 0x45cf36
lea edx, [eax + 1]
mov dword [ebp + 0x10], edx
movzx eax, byte [edi]
mov esi, dword [esi]
mov ecx, eax
shl ecx, 0x10
or ecx, eax
imul ecx, edx
mov edi, ecx
shr edi, 8
xor edi, ecx
and edi, 0xff00ff
xor edi, ecx
mov ecx, esi
and esi, 0xff00ff
mov eax, edi
shr eax, 0x18
shr ecx, 8
mov edx, 0x100
sub edx, eax
imul esi, edx
mov eax, ecx
and eax, 0xffff00ff
imul eax, edx
shr esi, 8
xor esi, eax
mov eax, 0xff00ff
and ecx, eax
imul ecx, edx
mov edx, dword [ebp + 0x10]
and esi, eax
mov eax, dword [ebp + 8]
xor esi, ecx
add esi, edi
mov edi, dword [ebp - 4]
mov dword [eax], esi
mov eax, dword [ebx + 0x48]
mov esi, dword [ebp + 8]
add esi, dword [eax + 0xc]
mov eax, dword [ebp + 0xc]
inc edi
dec eax
mov dword [ebp - 4], edi
mov dword [ebp + 8], esi
mov dword [ebp + 0xc], eax
test eax, eax
jg 0x45ceb7
jmp 0x45cfa8
movzx eax, byte [edi]
mov esi, dword [esi]
mov edi, eax
shl edi, 8
or edi, eax
shl edi, 8
or edi, eax
shl edi, 8
or edi, eax
mov ecx, esi
and esi, 0xff00ff
mov eax, edi
shr eax, 0x18
shr ecx, 8
mov edx, 0x100
sub edx, eax
imul esi, edx
mov eax, ecx
and eax, 0xffff00ff
imul eax, edx
shr esi, 8
xor esi, eax
mov eax, 0xff00ff
and ecx, eax
imul ecx, edx
and esi, eax
mov eax, dword [ebp + 8]
xor esi, ecx
add esi, edi
mov edi, dword [ebp - 4]
mov dword [eax], esi
mov eax, dword [ebx + 0x48]
mov esi, dword [ebp + 8]
add esi, dword [eax + 0xc]
mov eax, dword [ebp + 0xc]
inc edi
dec eax
mov dword [ebp - 4], edi
mov dword [ebp + 8], esi
mov dword [ebp + 0xc], eax
test eax, eax
jg 0x45cf36
pop edi
pop esi
pop ebx
leave
ret 0xc
Function at 0x45cfaf
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
mov esi, dword [ebp + 0xc]
push edi
mov edi, ecx
cmp esi, dword [edi + 0x6c]
jle 0x45cfcd
push ecx
push esi
lea ecx, [edi + 0x68]
mov dword [edi + 0x6c], esi
call fcn.0044c6c7
mov eax, dword [edi + 0x68]
push esi
push dword [ebp + 8]
mov ecx, edi
push eax
mov dword [ebp - 4], eax
call fcn.0045fe3a
mov eax, dword [edi + 0x48]
mov ebx, dword [eax + 0xc]
mov eax, dword [edi + 0x50]
imul ebx, dword [ebp + 8]
imul eax, dword [ebp + 0x10]
add ebx, dword [edi + 0x64]
sar eax, 8
cmp eax, 0xfe
jge 0x45d09d
inc eax
mov dword [ebp + 8], eax
mov edx, 0xff00ff
mov ecx, dword [ebp - 4]
add dword [ebp - 4], 4
mov ecx, dword [ecx]
mov esi, ecx
and esi, edx
imul esi, eax
mov eax, ecx
shr eax, 8
and eax, 0xffff00ff
imul eax, dword [ebp + 8]
shr ecx, 8
and ecx, edx
imul ecx, dword [ebp + 8]
shr esi, 8
xor esi, eax
and esi, edx
xor esi, ecx
movzx ecx, byte [ebx + 2]
mov eax, esi
shr eax, 0x18
shl ecx, 0x10
mov edx, 0x100
sub edx, eax
movzx eax, byte [ebx]
or ecx, eax
movzx eax, byte [ebx + 1]
imul ecx, edx
imul eax, edx
and eax, 0xff00
add eax, esi
shr ecx, 8
and ecx, 0xff00ff
add ecx, eax
mov byte [ebx], cl
mov eax, ecx
shr eax, 8
mov byte [ebx + 1], al
shr ecx, 0x10
mov byte [ebx + 2], cl
mov eax, dword [edi + 0x48]
mov edx, 0xff00ff
add ebx, dword [eax + 0xc]
mov eax, dword [ebp + 0xc]
dec eax
mov dword [ebp + 0xc], eax
test eax, eax
mov eax, dword [ebp + 8]
jg 0x45d00a
jmp 0x45d0fa
mov edx, dword [ebp - 4]
mov eax, dword [edx]
movzx ecx, byte [ebx + 2]
shr eax, 0x18
shl ecx, 0x10
mov edx, 0x100
sub edx, eax
movzx eax, byte [ebx]
or ecx, eax
movzx eax, byte [ebx + 1]
imul ecx, edx
imul eax, edx
mov edx, dword [ebp - 4]
and eax, 0xff00
add eax, dword [edx]
shr ecx, 8
and ecx, 0xff00ff
add ecx, eax
mov eax, ecx
shr eax, 0x10
mov byte [ebx + 2], al
mov eax, ecx
shr eax, 8
mov byte [ebx + 1], al
mov byte [ebx], cl
mov eax, dword [edi + 0x48]
add edx, 4
add ebx, dword [eax + 0xc]
dec esi
mov dword [ebp - 4], edx
test esi, esi
jg 0x45d0a0
pop edi
pop esi
pop ebx
leave
ret 0xc
Function at 0x45d101
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
mov esi, dword [ebp + 0xc]
push edi
mov edi, ecx
cmp esi, dword [edi + 0x6c]
jle 0x45d11f
push ecx
push esi
lea ecx, [edi + 0x68]
mov dword [edi + 0x6c], esi
call fcn.0044c6c7
mov eax, dword [edi + 0x68]
push esi
push dword [ebp + 8]
mov ecx, edi
push eax
mov dword [ebp - 4], eax
call fcn.0045b001
mov eax, dword [edi + 0x48]
mov ebx, dword [eax + 0xc]
mov eax, dword [edi + 0x50]
imul ebx, dword [ebp + 8]
imul eax, dword [ebp + 0x10]
add ebx, dword [edi + 0x64]
sar eax, 8
cmp eax, 0xfe
jge 0x45d1ef
inc eax
mov dword [ebp + 8], eax
mov edx, 0xff00ff
mov ecx, dword [ebp - 4]
add dword [ebp - 4], 4
mov ecx, dword [ecx]
mov esi, ecx
and esi, edx
imul esi, eax
mov eax, ecx
shr eax, 8
and eax, 0xffff00ff
imul eax, dword [ebp + 8]
shr ecx, 8
and ecx, edx
imul ecx, dword [ebp + 8]
shr esi, 8
xor esi, eax
and esi, edx
xor esi, ecx
movzx ecx, byte [ebx + 2]
mov eax, esi
shr eax, 0x18
shl ecx, 0x10
mov edx, 0x100
sub edx, eax
movzx eax, byte [ebx]
or ecx, eax
movzx eax, byte [ebx + 1]
imul ecx, edx
imul eax, edx
and eax, 0xff00
add eax, esi
shr ecx, 8
and ecx, 0xff00ff
add ecx, eax
mov byte [ebx], cl
mov eax, ecx
shr eax, 8
mov byte [ebx + 1], al
shr ecx, 0x10
mov byte [ebx + 2], cl
mov eax, dword [edi + 0x48]
mov edx, 0xff00ff
add ebx, dword [eax + 0xc]
mov eax, dword [ebp + 0xc]
dec eax
mov dword [ebp + 0xc], eax
test eax, eax
mov eax, dword [ebp + 8]
jg 0x45d15c
jmp 0x45d24c
mov edx, dword [ebp - 4]
mov eax, dword [edx]
movzx ecx, byte [ebx + 2]
shr eax, 0x18
shl ecx, 0x10
mov edx, 0x100
sub edx, eax
movzx eax, byte [ebx]
or ecx, eax
movzx eax, byte [ebx + 1]
imul ecx, edx
imul eax, edx
mov edx, dword [ebp - 4]
and eax, 0xff00
add eax, dword [edx]
shr ecx, 8
and ecx, 0xff00ff
add ecx, eax
mov eax, ecx
shr eax, 0x10
mov byte [ebx + 2], al
mov eax, ecx
shr eax, 8
mov byte [ebx + 1], al
mov byte [ebx], cl
mov eax, dword [edi + 0x48]
add edx, 4
add ebx, dword [eax + 0xc]
dec esi
mov dword [ebp - 4], edx
test esi, esi
jg 0x45d1f2
pop edi
pop esi
pop ebx
leave
ret 0xc
Function at 0x45d253
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
mov esi, dword [ebp + 0xc]
mov ebx, ecx
push edi
cmp esi, dword [ebx + 0x6c]
jle 0x45d271
push ecx
push esi
lea ecx, [ebx + 0x68]
mov dword [ebx + 0x6c], esi
call fcn.0044fa7f
mov eax, dword [ebx + 0x68]
push esi
push dword [ebp + 8]
mov ecx, ebx
push eax
mov dword [ebp - 4], eax
call fcn.0046000d
mov eax, dword [ebx + 0x48]
mov ecx, dword [ebp - 4]
mov edi, dword [eax + 0xc]
mov eax, dword [ebx + 0x50]
imul edi, dword [ebp + 8]
imul eax, dword [ebp + 0x10]
add edi, dword [ebx + 0x64]
sar eax, 8
cmp eax, 0xfe
jge 0x45d34c
lea edx, [eax + 1]
inc ecx
mov dword [ebp + 0x10], edx
mov dword [ebp + 8], ecx
movzx esi, byte [ecx + 1]
movzx eax, byte [ecx - 1]
shl esi, 0x10
or esi, eax
movzx eax, byte [ecx]
imul esi, edx
or eax, 0xffff0000
imul eax, edx
shr esi, 8
xor esi, eax
movzx eax, byte [ecx]
movzx ecx, byte [edi + 2]
or eax, 0xff0000
imul eax, edx
and esi, 0xff00ff
xor esi, eax
shl ecx, 0x10
mov eax, esi
shr eax, 0x18
mov edx, 0x100
sub edx, eax
movzx eax, byte [edi]
or ecx, eax
movzx eax, byte [edi + 1]
imul ecx, edx
imul eax, edx
mov edx, dword [ebp + 0x10]
shr ecx, 8
and eax, 0xff00
add eax, esi
and ecx, 0xff00ff
add ecx, eax
mov byte [edi], cl
mov eax, ecx
shr eax, 8
shr ecx, 0x10
mov byte [edi + 1], al
mov byte [edi + 2], cl
mov eax, dword [ebx + 0x48]
mov ecx, dword [ebp + 8]
add edi, dword [eax + 0xc]
mov eax, dword [ebp + 0xc]
add ecx, 3
dec eax
mov dword [ebp + 8], ecx
mov dword [ebp + 0xc], eax
test eax, eax
jg 0x45d2b2
jmp 0x45d36d
add ecx, 2
mov al, byte [ecx - 2]
mov byte [edi], al
mov al, byte [ecx - 1]
mov byte [edi + 1], al
mov al, byte [ecx]
mov byte [edi + 2], al
mov eax, dword [ebx + 0x48]
lea ecx, [ecx + 3]
add edi, dword [eax + 0xc]
dec esi
test esi, esi
jg 0x45d34f
pop edi
pop esi
pop ebx
leave
ret 0xc
Function at 0x45d374
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
mov esi, dword [ebp + 0xc]
mov ebx, ecx
push edi
cmp esi, dword [ebx + 0x6c]
jle 0x45d392
push ecx
push esi
lea ecx, [ebx + 0x68]
mov dword [ebx + 0x6c], esi
call fcn.0044fa7f
mov eax, dword [ebx + 0x68]
push esi
push dword [ebp + 8]
mov ecx, ebx
push eax
mov dword [ebp - 4], eax
call fcn.004601ea
mov eax, dword [ebx + 0x48]
mov ecx, dword [ebp - 4]
mov edi, dword [eax + 0xc]
mov eax, dword [ebx + 0x50]
imul edi, dword [ebp + 8]
imul eax, dword [ebp + 0x10]
add edi, dword [ebx + 0x64]
sar eax, 8
cmp eax, 0xfe
jge 0x45d46d
lea edx, [eax + 1]
inc ecx
mov dword [ebp + 0x10], edx
mov dword [ebp + 8], ecx
movzx esi, byte [ecx + 1]
movzx eax, byte [ecx - 1]
shl esi, 0x10
or esi, eax
movzx eax, byte [ecx]
imul esi, edx
or eax, 0xffff0000
imul eax, edx
shr esi, 8
xor esi, eax
movzx eax, byte [ecx]
movzx ecx, byte [edi + 2]
or eax, 0xff0000
imul eax, edx
and esi, 0xff00ff
xor esi, eax
shl ecx, 0x10
mov eax, esi
shr eax, 0x18
mov edx, 0x100
sub edx, eax
movzx eax, byte [edi]
or ecx, eax
movzx eax, byte [edi + 1]
imul ecx, edx
imul eax, edx
mov edx, dword [ebp + 0x10]
shr ecx, 8
and eax, 0xff00
add eax, esi
and ecx, 0xff00ff
add ecx, eax
mov byte [edi], cl
mov eax, ecx
shr eax, 8
shr ecx, 0x10
mov byte [edi + 1], al
mov byte [edi + 2], cl
mov eax, dword [ebx + 0x48]
mov ecx, dword [ebp + 8]
add edi, dword [eax + 0xc]
mov eax, dword [ebp + 0xc]
add ecx, 3
dec eax
mov dword [ebp + 8], ecx
mov dword [ebp + 0xc], eax
test eax, eax
jg 0x45d3d3
jmp 0x45d48e
add ecx, 2
mov al, byte [ecx - 2]
mov byte [edi], al
mov al, byte [ecx - 1]
mov byte [edi + 1], al
mov al, byte [ecx]
mov byte [edi + 2], al
mov eax, dword [ebx + 0x48]
lea ecx, [ecx + 3]
add edi, dword [eax + 0xc]
dec esi
test esi, esi
jg 0x45d470
pop edi
pop esi
pop ebx
leave
ret 0xc
Function at 0x45d495
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
mov ebx, dword [ebp + 0xc]
push esi
push edi
mov edi, ecx
cmp ebx, dword [edi + 0x6c]
jle 0x45d4bc
mov dword [edi + 0x6c], ebx
push dword [edi + 0x68]
call fcn.004a50b4
push ebx
call fcn.004a50ec
pop ecx
pop ecx
mov dword [edi + 0x68], eax
mov esi, dword [edi + 0x68]
push ebx
push dword [ebp + 8]
mov ecx, edi
push esi
mov dword [ebp - 4], esi
call fcn.0046043b
mov eax, dword [edi + 0x48]
mov ebx, dword [eax + 0xc]
mov eax, dword [edi + 0x50]
imul ebx, dword [ebp + 8]
imul eax, dword [ebp + 0x10]
add ebx, dword [edi + 0x64]
sar eax, 8
cmp eax, 0xfe
jge 0x45d573
lea edx, [eax + 1]
mov dword [ebp + 8], edx
movzx eax, byte [esi]
mov ecx, eax
shl ecx, 0x10
or ecx, eax
imul ecx, edx
mov esi, ecx
shr esi, 8
xor esi, ecx
and esi, 0xff00ff
xor esi, ecx
movzx ecx, byte [ebx + 2]
mov eax, esi
shr eax, 0x18
shl ecx, 0x10
mov edx, 0x100
sub edx, eax
movzx eax, byte [ebx]
or ecx, eax
movzx eax, byte [ebx + 1]
imul ecx, edx
imul eax, edx
mov edx, dword [ebp + 8]
and eax, 0xff00
add eax, esi
mov esi, dword [ebp - 4]
shr ecx, 8
and ecx, 0xff00ff
add ecx, eax
mov byte [ebx], cl
mov eax, ecx
shr eax, 8
shr ecx, 0x10
mov byte [ebx + 1], al
mov byte [ebx + 2], cl
mov eax, dword [edi + 0x48]
inc esi
add ebx, dword [eax + 0xc]
mov eax, dword [ebp + 0xc]
dec eax
mov dword [ebp - 4], esi
mov dword [ebp + 0xc], eax
test eax, eax
jg 0x45d4f6
jmp 0x45d5e5
movzx eax, byte [esi]
movzx ecx, byte [ebx + 2]
mov esi, eax
shl esi, 8
or esi, eax
shl esi, 8
or esi, eax
shl esi, 8
or esi, eax
mov eax, esi
shr eax, 0x18
shl ecx, 0x10
mov edx, 0x100
sub edx, eax
movzx eax, byte [ebx]
or ecx, eax
movzx eax, byte [ebx + 1]
imul ecx, edx
imul eax, edx
and eax, 0xff00
add eax, esi
mov esi, dword [ebp - 4]
shr ecx, 8
and ecx, 0xff00ff
add ecx, eax
mov eax, ecx
shr eax, 0x10
mov byte [ebx + 2], al
mov eax, ecx
shr eax, 8
mov byte [ebx + 1], al
mov byte [ebx], cl
mov eax, dword [edi + 0x48]
inc esi
add ebx, dword [eax + 0xc]
mov eax, dword [ebp + 0xc]
dec eax
mov dword [ebp - 4], esi
mov dword [ebp + 0xc], eax
test eax, eax
jg 0x45d573
pop edi
pop esi
pop ebx
leave
ret 0xc
Function at 0x45d5ec
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
mov ebx, dword [ebp + 0xc]
push esi
push edi
mov edi, ecx
cmp ebx, dword [edi + 0x6c]
jle 0x45d613
mov dword [edi + 0x6c], ebx
push dword [edi + 0x68]
call fcn.004a50b4
push ebx
call fcn.004a50ec
pop ecx
pop ecx
mov dword [edi + 0x68], eax
mov esi, dword [edi + 0x68]
push ebx
push dword [ebp + 8]
mov ecx, edi
push esi
mov dword [ebp - 4], esi
call fcn.0045b247
mov eax, dword [edi + 0x48]
mov ebx, dword [eax + 0xc]
mov eax, dword [edi + 0x50]
imul ebx, dword [ebp + 8]
imul eax, dword [ebp + 0x10]
add ebx, dword [edi + 0x64]
sar eax, 8
cmp eax, 0xfe
jge 0x45d6ca
lea edx, [eax + 1]
mov dword [ebp + 8], edx
movzx eax, byte [esi]
mov ecx, eax
shl ecx, 0x10
or ecx, eax
imul ecx, edx
mov esi, ecx
shr esi, 8
xor esi, ecx
and esi, 0xff00ff
xor esi, ecx
movzx ecx, byte [ebx + 2]
mov eax, esi
shr eax, 0x18
shl ecx, 0x10
mov edx, 0x100
sub edx, eax
movzx eax, byte [ebx]
or ecx, eax
movzx eax, byte [ebx + 1]
imul ecx, edx
imul eax, edx
mov edx, dword [ebp + 8]
and eax, 0xff00
add eax, esi
mov esi, dword [ebp - 4]
shr ecx, 8
and ecx, 0xff00ff
add ecx, eax
mov byte [ebx], cl
mov eax, ecx
shr eax, 8
shr ecx, 0x10
mov byte [ebx + 1], al
mov byte [ebx + 2], cl
mov eax, dword [edi + 0x48]
inc esi
add ebx, dword [eax + 0xc]
mov eax, dword [ebp + 0xc]
dec eax
mov dword [ebp - 4], esi
mov dword [ebp + 0xc], eax
test eax, eax
jg 0x45d64d
jmp 0x45d73c
movzx eax, byte [esi]
movzx ecx, byte [ebx + 2]
mov esi, eax
shl esi, 8
or esi, eax
shl esi, 8
or esi, eax
shl esi, 8
or esi, eax
mov eax, esi
shr eax, 0x18
shl ecx, 0x10
mov edx, 0x100
sub edx, eax
movzx eax, byte [ebx]
or ecx, eax
movzx eax, byte [ebx + 1]
imul ecx, edx
imul eax, edx
and eax, 0xff00
add eax, esi
mov esi, dword [ebp - 4]
shr ecx, 8
and ecx, 0xff00ff
add ecx, eax
mov eax, ecx
shr eax, 0x10
mov byte [ebx + 2], al
mov eax, ecx
shr eax, 8
mov byte [ebx + 1], al
mov byte [ebx], cl
mov eax, dword [edi + 0x48]
inc esi
add ebx, dword [eax + 0xc]
mov eax, dword [ebp + 0xc]
dec eax
mov dword [ebp - 4], esi
mov dword [ebp + 0xc], eax
test eax, eax
jg 0x45d6ca
pop edi
pop esi
pop ebx
leave
ret 0xc
Function at 0x45daa1
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
mov esi, ecx
push edi
mov eax, dword [esi]
mov edi, dword [ebp + 8]
mov ebx, dword [eax + 0xc]
mov eax, dword [esi + 8]
imul ebx, edi
imul eax, dword [ebp + 0x10]
sub edi, dword [esi + 0xc]
add ebx, dword [esi + 0x14]
sar eax, 8
mov dword [ebp - 4], esi
mov dword [ebp + 8], edi
cmp eax, 0xfe
jge 0x45db7e
inc eax
mov dword [ebp + 0x10], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp + 0xc], eax
mov ecx, dword [esi + 4]
mov eax, edi
cdq
idiv dword [ecx + 0x10]
mov eax, dword [ecx + 0xc]
inc edi
mov dword [ebp + 8], edi
imul eax, edx
add eax, dword [esi + 0x18]
mov esi, dword [ebp + 0x10]
mov edx, 0xff00ff
mov ecx, dword [eax]
mov edi, ecx
and edi, edx
imul edi, esi
mov eax, ecx
shr eax, 8
and eax, 0xffff00ff
imul eax, esi
shr ecx, 8
and ecx, edx
imul ecx, esi
mov esi, dword [ebx]
shr edi, 8
xor edi, eax
and edi, edx
xor edi, ecx
mov ecx, esi
and esi, 0xff00ff
mov eax, edi
shr eax, 0x18
shr ecx, 8
mov edx, 0x100
sub edx, eax
imul esi, edx
mov eax, ecx
and eax, 0xffff00ff
imul eax, edx
shr esi, 8
xor esi, eax
mov eax, 0xff00ff
and ecx, eax
imul ecx, edx
and esi, eax
xor esi, ecx
add esi, edi
mov edi, dword [ebp + 8]
mov dword [ebx], esi
mov esi, dword [ebp - 4]
mov eax, dword [esi]
add ebx, dword [eax + 0xc]
mov eax, dword [ebp + 0xc]
dec eax
mov dword [ebp + 0xc], eax
test eax, eax
jg 0x45dae0
jmp 0x45dbee
mov eax, dword [ebp + 0xc]
mov dword [ebp + 0xc], eax
mov ecx, dword [esi + 4]
mov eax, edi
cdq
idiv dword [ecx + 0x10]
mov eax, dword [esi + 0x18]
mov esi, dword [ebx]
imul edx, dword [ecx + 0xc]
mov ecx, esi
mov edi, dword [edx + eax]
and esi, 0xff00ff
mov eax, edi
shr eax, 0x18
shr ecx, 8
mov edx, 0x100
sub edx, eax
imul esi, edx
mov eax, ecx
and eax, 0xffff00ff
imul eax, edx
shr esi, 8
xor esi, eax
mov eax, 0xff00ff
and ecx, eax
imul ecx, edx
and esi, eax
xor esi, ecx
add esi, edi
mov edi, dword [ebp + 8]
mov dword [ebx], esi
mov esi, dword [ebp - 4]
inc edi
mov eax, dword [esi]
mov dword [ebp + 8], edi
add ebx, dword [eax + 0xc]
mov eax, dword [ebp + 0xc]
dec eax
mov dword [ebp + 0xc], eax
test eax, eax
jg 0x45db84
pop edi
pop esi
pop ebx
leave
ret 0xc
Function at 0x45dbf5
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
mov esi, ecx
push edi
mov eax, dword [esi]
mov edi, dword [ebp + 8]
mov ebx, dword [eax + 0xc]
mov eax, dword [ebp + 0xc]
imul ebx, edi
sub edi, dword [esi + 0xc]
add ebx, dword [esi + 0x14]
cmp dword [esi + 8], 0xfe
mov dword [ebp - 4], esi
mov dword [ebp + 8], edi
mov dword [ebp + 0xc], eax
jge 0x45dcc7
mov ecx, dword [esi + 4]
mov eax, edi
cdq
idiv dword [ecx + 0x10]
mov eax, dword [ecx + 0xc]
inc edi
mov dword [ebp + 8], edi
imul eax, edx
add eax, dword [esi + 0x18]
mov edx, dword [esi + 8]
inc edx
mov ecx, dword [eax]
mov edi, ecx
mov eax, ecx
shr eax, 8
and eax, 0xffff00ff
imul eax, edx
mov esi, 0xff00ff
and edi, esi
imul edi, edx
shr ecx, 8
and ecx, esi
imul ecx, edx
shr edi, 8
xor edi, eax
and edi, esi
mov esi, dword [ebx]
xor edi, ecx
mov ecx, esi
and esi, 0xff00ff
mov eax, edi
shr eax, 0x18
shr ecx, 8
mov edx, 0x100
sub edx, eax
imul esi, edx
mov eax, ecx
and eax, 0xffff00ff
imul eax, edx
shr esi, 8
xor esi, eax
mov eax, 0xff00ff
and ecx, eax
imul ecx, edx
and esi, eax
xor esi, ecx
add esi, edi
mov edi, dword [ebp + 8]
mov dword [ebx], esi
mov esi, dword [ebp - 4]
mov eax, dword [esi]
add ebx, dword [eax + 0xc]
mov eax, dword [ebp + 0xc]
dec eax
mov dword [ebp + 0xc], eax
test eax, eax
jg 0x45dc28
jmp 0x45dd31
mov ecx, dword [esi + 4]
mov eax, edi
cdq
idiv dword [ecx + 0x10]
mov eax, dword [esi + 0x18]
mov esi, dword [ebx]
imul edx, dword [ecx + 0xc]
mov ecx, esi
mov edi, dword [edx + eax]
and esi, 0xff00ff
mov eax, edi
shr eax, 0x18
shr ecx, 8
mov edx, 0x100
sub edx, eax
imul esi, edx
mov eax, ecx
and eax, 0xffff00ff
imul eax, edx
shr esi, 8
xor esi, eax
mov eax, 0xff00ff
and ecx, eax
imul ecx, edx
and esi, eax
xor esi, ecx
add esi, edi
mov edi, dword [ebp + 8]
mov dword [ebx], esi
mov esi, dword [ebp - 4]
inc edi
mov eax, dword [esi]
mov dword [ebp + 8], edi
add ebx, dword [eax + 0xc]
mov eax, dword [ebp + 0xc]
dec eax
mov dword [ebp + 0xc], eax
test eax, eax
jg 0x45dcc7
pop edi
pop esi
pop ebx
leave
ret 8