joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10059550
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi], 0
je 0x100595ac
cmp byte [esi + 1], 0
jne 0x100595ee
mov byte [esi + 1], 1
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x4c]
xor ebx, dword [esi + 0x48]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + edi + 2], al
inc edi
cmp edi, 0x42
jb 0x10059570
jmp 0x100595ee
xor edi, edi
nop
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x4c]
xor ebx, dword [esi + 0x48]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + edi + 2]
xor al, bl
mov byte [esi + edi + 2], al
inc edi
cmp edi, 0x42
jb 0x100595b0
lea ecx, [esi + 0x43]
lea eax, [esi + 2]
mov esi, dword [ebp + 8]
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
cmp eax, ecx
je 0x10059619
push 0x41
push eax
mov ecx, esi
call fcn.10044cb0
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10059630
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi], 0
je 0x1005968c
cmp byte [esi + 1], 0
jne 0x100596ce
mov byte [esi + 1], 1
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x54]
xor ebx, dword [esi + 0x50]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + edi + 2], al
inc edi
cmp edi, 0x4e
jb 0x10059650
jmp 0x100596ce
xor edi, edi
nop
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x54]
xor ebx, dword [esi + 0x50]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + edi + 2]
xor al, bl
mov byte [esi + edi + 2], al
inc edi
cmp edi, 0x4e
jb 0x10059690
lea ecx, [esi + 0x4f]
lea eax, [esi + 2]
mov esi, dword [ebp + 8]
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
cmp eax, ecx
je 0x100596f9
push 0x4d
push eax
mov ecx, esi
call fcn.10044cb0
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10059710
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi], 0
je 0x10059770
cmp byte [esi + 1], 0
jne 0x100597b1
mov byte [esi + 1], 1
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x2c]
xor ebx, dword [esi + 0x28]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [esp + 0x14], edx
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + edi + 2], al
inc edi
cmp edi, 0x21
jb 0x10059733
jmp 0x100597b1
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x2c]
xor ebx, dword [esi + 0x28]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [esp + 0x14], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + edi + 2]
xor al, bl
mov byte [esi + edi + 2], al
inc edi
cmp edi, 0x21
jb 0x10059772
lea ecx, [esi + 0x22]
lea eax, [esi + 2]
mov esi, dword [ebp + 8]
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
cmp eax, ecx
je 0x100597dc
push 0x20
push eax
mov ecx, esi
call fcn.10044cb0
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x100597f0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
cmp byte [0x101c0c90], 0
push ebx
push esi
je 0x1005986a
cmp byte [0x101c0c91], 0
jne 0x100598b8
mov byte [0x101c0c91], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x101c0ccc]
xor ebx, dword [0x101c0cc8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x101c0c92]
xor al, bl
mov byte [esi + 0x101c0c92], al
inc esi
cmp esi, 0x33
jb 0x10059820
jmp 0x100598b8
xor esi, esi
nop dword [eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x101c0ccc]
xor ebx, dword [0x101c0cc8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x101c0c92]
xor al, bl
mov byte [esi + 0x101c0c92], al
inc esi
cmp esi, 0x33
jb 0x10059870
mov esi, dword [ebp + 8]
mov ecx, esi
push 0x32
push 0x101c0c92
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
call fcn.10044cb0
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x100598f0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi], 0
je 0x10059950
cmp byte [esi + 1], 0
jne 0x10059991
mov byte [esi + 1], 1
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x2c]
xor ebx, dword [esi + 0x28]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [esp + 0x14], edx
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + edi + 2], al
inc edi
cmp edi, 0x22
jb 0x10059913
jmp 0x10059991
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x2c]
xor ebx, dword [esi + 0x28]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [esp + 0x14], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + edi + 2]
xor al, bl
mov byte [esi + edi + 2], al
inc edi
cmp edi, 0x22
jb 0x10059952
lea ecx, [esi + 0x23]
lea eax, [esi + 2]
mov esi, dword [ebp + 8]
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
cmp eax, ecx
je 0x100599bc
push 0x21
push eax
mov ecx, esi
call fcn.10044cb0
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x100599d0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
cmp byte [0x101bf8d0], 0
push ebx
push esi
je 0x10059a4a
cmp byte [0x101bf8d1], 0
jne 0x10059a98
mov byte [0x101bf8d1], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x101bf924]
xor ebx, dword [0x101bf920]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x101bf8d2]
xor al, bl
mov byte [esi + 0x101bf8d2], al
inc esi
cmp esi, 0x4d
jb 0x10059a00
jmp 0x10059a98
xor esi, esi
nop dword [eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x101bf924]
xor ebx, dword [0x101bf920]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x101bf8d2]
xor al, bl
mov byte [esi + 0x101bf8d2], al
inc esi
cmp esi, 0x4d
jb 0x10059a50
mov esi, dword [ebp + 8]
mov ecx, esi
push 0x4c
push 0x101bf8d2
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
call fcn.10044cb0
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10059ad0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi], 0
je 0x10059b30
cmp byte [esi + 1], 0
jne 0x10059b71
mov byte [esi + 1], 1
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x2c]
xor ebx, dword [esi + 0x28]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [esp + 0x14], edx
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + edi + 2], al
inc edi
cmp edi, 0x25
jb 0x10059af3
jmp 0x10059b71
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x2c]
xor ebx, dword [esi + 0x28]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [esp + 0x14], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + edi + 2]
xor al, bl
mov byte [esi + edi + 2], al
inc edi
cmp edi, 0x25
jb 0x10059b32
lea ecx, [esi + 0x26]
lea eax, [esi + 2]
mov esi, dword [ebp + 8]
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
cmp eax, ecx
je 0x10059b9c
push 0x24
push eax
mov ecx, esi
call fcn.10044cb0
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10059bb0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi], 0
je 0x10059c10
cmp byte [esi + 1], 0
jne 0x10059c51
mov byte [esi + 1], 1
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x44]
xor ebx, dword [esi + 0x40]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [esp + 0x14], edx
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + edi + 2], al
inc edi
cmp edi, 0x3b
jb 0x10059bd3
jmp 0x10059c51
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x44]
xor ebx, dword [esi + 0x40]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [esp + 0x14], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + edi + 2]
xor al, bl
mov byte [esi + edi + 2], al
inc edi
cmp edi, 0x3b
jb 0x10059c12
lea ecx, [esi + 0x3c]
lea eax, [esi + 2]
mov esi, dword [ebp + 8]
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
cmp eax, ecx
je 0x10059c7c
push 0x3a
push eax
mov ecx, esi
call fcn.10044cb0
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10059c90
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
cmp byte [0x101bf780], 0
push ebx
push esi
je 0x10059d0a
cmp byte [0x101bf781], 0
jne 0x10059d58
mov byte [0x101bf781], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x101bf7cc]
xor ebx, dword [0x101bf7c8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x101bf782]
xor al, bl
mov byte [esi + 0x101bf782], al
inc esi
cmp esi, 0x43
jb 0x10059cc0
jmp 0x10059d58
xor esi, esi
nop dword [eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x101bf7cc]
xor ebx, dword [0x101bf7c8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x101bf782]
xor al, bl
mov byte [esi + 0x101bf782], al
inc esi
cmp esi, 0x43
jb 0x10059d10
mov esi, dword [ebp + 8]
mov ecx, esi
push 0x42
push 0x101bf782
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
call fcn.10044cb0
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10059d90
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
cmp byte [0x101bf878], 0
push ebx
push esi
je 0x10059e0a
cmp byte [0x101bf879], 0
jne 0x10059e58
mov byte [0x101bf879], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x101bf8cc]
xor ebx, dword [0x101bf8c8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x101bf87a]
xor al, bl
mov byte [esi + 0x101bf87a], al
inc esi
cmp esi, 0x48
jb 0x10059dc0
jmp 0x10059e58
xor esi, esi
nop dword [eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x101bf8cc]
xor ebx, dword [0x101bf8c8]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x101bf87a]
xor al, bl
mov byte [esi + 0x101bf87a], al
inc esi
cmp esi, 0x48
jb 0x10059e10
mov esi, dword [ebp + 8]
mov ecx, esi
push 0x47
push 0x101bf87a
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
call fcn.10044cb0
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x10059e90
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi], 0
je 0x10059ef0
cmp byte [esi + 1], 0
jne 0x10059f31
mov byte [esi + 1], 1
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x3c]
xor ebx, dword [esi + 0x38]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [esp + 0x14], edx
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + edi + 2], al
inc edi
cmp edi, 0x30
jb 0x10059eb3
jmp 0x10059f31
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x3c]
xor ebx, dword [esi + 0x38]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [esp + 0x14], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + edi + 2]
xor al, bl
mov byte [esi + edi + 2], al
inc edi
cmp edi, 0x30
jb 0x10059ef2
lea ecx, [esi + 0x31]
lea eax, [esi + 2]
mov esi, dword [ebp + 8]
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
cmp eax, ecx
je 0x10059f5c
push 0x2f
push eax
mov ecx, esi
call fcn.10044cb0
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x10059f70
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi], 0
je 0x10059fd0
cmp byte [esi + 1], 0
jne 0x1005a011
mov byte [esi + 1], 1
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x3c]
xor ebx, dword [esi + 0x38]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [esp + 0x14], edx
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + edi + 2], al
inc edi
cmp edi, 0x2f
jb 0x10059f93
jmp 0x1005a011
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x3c]
xor ebx, dword [esi + 0x38]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [esp + 0x14], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + edi + 2]
xor al, bl
mov byte [esi + edi + 2], al
inc edi
cmp edi, 0x2f
jb 0x10059fd2
lea ecx, [esi + 0x30]
lea eax, [esi + 2]
mov esi, dword [ebp + 8]
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
cmp eax, ecx
je 0x1005a03c
push 0x2e
push eax
mov ecx, esi
call fcn.10044cb0
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x1005a050
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi], 0
je 0x1005a0b0
cmp byte [esi + 1], 0
jne 0x1005a0f1
mov byte [esi + 1], 1
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x34]
xor ebx, dword [esi + 0x30]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [esp + 0x14], edx
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + edi + 2], al
inc edi
cmp edi, 0x27
jb 0x1005a073
jmp 0x1005a0f1
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x34]
xor ebx, dword [esi + 0x30]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [esp + 0x14], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + edi + 2]
xor al, bl
mov byte [esi + edi + 2], al
inc edi
cmp edi, 0x27
jb 0x1005a0b2
lea ecx, [esi + 0x28]
lea eax, [esi + 2]
mov esi, dword [ebp + 8]
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
cmp eax, ecx
je 0x1005a11c
push 0x26
push eax
mov ecx, esi
call fcn.10044cb0
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x1005a130
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi], 0
je 0x1005a190
cmp byte [esi + 1], 0
jne 0x1005a1d1
mov byte [esi + 1], 1
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x34]
xor ebx, dword [esi + 0x30]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [esp + 0x14], edx
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + edi + 2], al
inc edi
cmp edi, 0x2d
jb 0x1005a153
jmp 0x1005a1d1
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x34]
xor ebx, dword [esi + 0x30]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [esp + 0x14], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + edi + 2]
xor al, bl
mov byte [esi + edi + 2], al
inc edi
cmp edi, 0x2d
jb 0x1005a192
lea ecx, [esi + 0x2e]
lea eax, [esi + 2]
mov esi, dword [ebp + 8]
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
cmp eax, ecx
je 0x1005a1fc
push 0x2c
push eax
mov ecx, esi
call fcn.10044cb0
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x1005a210
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi], 0
je 0x1005a26c
cmp byte [esi + 1], 0
jne 0x1005a2ae
mov byte [esi + 1], 1
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x3c]
xor ebx, dword [esi + 0x38]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + edi + 2], al
inc edi
cmp edi, 0x36
jb 0x1005a230
jmp 0x1005a2ae
xor edi, edi
nop
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x3c]
xor ebx, dword [esi + 0x38]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + edi + 2]
xor al, bl
mov byte [esi + edi + 2], al
inc edi
cmp edi, 0x36
jb 0x1005a270
lea ecx, [esi + 0x37]
lea eax, [esi + 2]
mov esi, dword [ebp + 8]
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
cmp eax, ecx
je 0x1005a2d9
push 0x35
push eax
mov ecx, esi
call fcn.10044cb0
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x1005a2f0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
cmp byte [0x101c10d8], 0
push ebx
push esi
je 0x1005a36a
cmp byte [0x101c10d9], 0
jne 0x1005a3b8
mov byte [0x101c10d9], 1
xor esi, esi
nop word [eax + eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x101c1124]
xor ebx, dword [0x101c1120]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x101c10da]
xor al, bl
mov byte [esi + 0x101c10da], al
inc esi
cmp esi, 0x46
jb 0x1005a320
jmp 0x1005a3b8
xor esi, esi
nop dword [eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x101c1124]
xor ebx, dword [0x101c1120]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + 0x101c10da]
xor al, bl
mov byte [esi + 0x101c10da], al
inc esi
cmp esi, 0x46
jb 0x1005a370
mov esi, dword [ebp + 8]
mov ecx, esi
push 0x45
push 0x101c10da
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
call fcn.10044cb0
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x1005a3f0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi], 0
je 0x1005a44c
cmp byte [esi + 1], 0
jne 0x1005a48e
mov byte [esi + 1], 1
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x2c]
xor ebx, dword [esi + 0x28]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + edi + 2], al
inc edi
cmp edi, 0x26
jb 0x1005a410
jmp 0x1005a48e
xor edi, edi
nop
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x2c]
xor ebx, dword [esi + 0x28]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + edi + 2]
xor al, bl
mov byte [esi + edi + 2], al
inc edi
cmp edi, 0x26
jb 0x1005a450
lea ecx, [esi + 0x27]
lea eax, [esi + 2]
mov esi, dword [ebp + 8]
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
cmp eax, ecx
je 0x1005a4b9
push 0x25
push eax
mov ecx, esi
call fcn.10044cb0
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x1005a4d0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
push esi
mov esi, ecx
push edi
cmp byte [esi], 0
je 0x1005a52c
cmp byte [esi + 1], 0
jne 0x1005a56e
mov byte [esi + 1], 1
xor edi, edi
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x34]
xor ebx, dword [esi + 0x30]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + edi + 2], al
inc edi
cmp edi, 0x2b
jb 0x1005a4f0
jmp 0x1005a56e
xor edi, edi
nop
xor edx, edx
mov ebx, edi
xor edx, dword [esi + 0x34]
xor ebx, dword [esi + 0x30]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov dword [ebp - 4], edx
mov eax, ebx
shrd eax, edx, 7
xor al, byte [esi + edi + 2]
xor al, bl
mov byte [esi + edi + 2], al
inc edi
cmp edi, 0x2b
jb 0x1005a530
lea ecx, [esi + 0x2c]
lea eax, [esi + 2]
mov esi, dword [ebp + 8]
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
cmp eax, ecx
je 0x1005a599
push 0x2a
push eax
mov ecx, esi
call fcn.10044cb0
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4