joyce8/EMBER2024-capa huggingface dataset:
Function at 0x42553c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2740], 1
jne 0x425598
or dword [0x4c2740], 1
mov dword [0x4c12c0], 0xb8b8a286
mov dword [0x4c12c4], 0xebaca5a2
mov dword [0x4c12c8], 0xaea7ebaa
mov dword [0x4c12cc], 0xbbebbfad
mov dword [0x4c12d0], 0xa5aeb9aa
mov dword [0x4c12d4], 0xb8aea3bf
mov word [0x4c12d8], 0xb8a2
mov byte [0x4c12da], 0xcb
xor eax, eax
mov cl, byte [eax + 0x4c12c0]
xor cl, 0xcb
mov byte [eax + 0x4c1410], cl
inc eax
cmp eax, 0x1b
jb 0x42559a
mov eax, 0x4c1410
ret

Function at 0x4255b5
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c273c], 1
jne 0x42561e
or dword [0x4c273c], 1
mov dword [0x4c12dc], 0xebbfa485
mov dword [0x4c12e0], 0xbea4a5ae
mov dword [0x4c12e4], 0xa4eba3ac
mov dword [0x4c12e8], 0xaab9aebb
mov dword [0x4c12ec], 0xebb8afa5
mov dword [0x4c12f0], 0xaeeba5a2
mov dword [0x4c12f4], 0xaeb9bbb3
mov dword [0x4c12f8], 0xa4a2b8b8
mov word [0x4c12fc], 0xcba5
xor eax, eax
mov cl, byte [eax + 0x4c12dc]
xor cl, 0xcb
mov byte [eax + 0x4c142c], cl
inc eax
cmp eax, 0x22
jb 0x425620
mov eax, 0x4c142c
ret

Function at 0x42563b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2738], 1
jne 0x42569b
or dword [0x4c2738], 1
mov dword [0x4c1300], 0xeba4a49f
mov dword [0x4c1304], 0xb2a5aaa6
mov dword [0x4c1308], 0xaebba4eb
mov dword [0x4c130c], 0xafa5aab9
mov dword [0x4c1310], 0xa5a2ebb8
mov dword [0x4c1314], 0xbbb3aeeb
mov dword [0x4c1318], 0xb8b8aeb9
mov dword [0x4c131c], 0xcba5a4a2
xor eax, eax
mov cl, byte [eax + 0x4c1300]
xor cl, 0xcb
mov byte [eax + 0x4c1450], cl
inc eax
cmp eax, 0x20
jb 0x42569d
mov eax, 0x4c1450
ret

Function at 0x4256b8
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2734], 1
jne 0x42570e
or dword [0x4c2734], 1
mov dword [0x4c1320], 0xb8b8a286
mov dword [0x4c1324], 0xebaca5a2
mov dword [0x4c1328], 0xa2b9ebaa
mov dword [0x4c132c], 0xebbfa3ac
mov dword [0x4c1330], 0xaeb9aabb
mov dword [0x4c1334], 0xaea3bfa5
mov dword [0x4c1338], 0xcbb8a2b8
xor eax, eax
mov cl, byte [eax + 0x4c1320]
xor cl, 0xcb
mov byte [eax + 0x4c1470], cl
inc eax
cmp eax, 0x1c
jb 0x425710
mov eax, 0x4c1470
ret

Function at 0x42572b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2730], 1
jne 0x42579c
or dword [0x4c2730], 1
mov dword [0x4c133c], 0xb9aaa59e
mov dword [0x4c1340], 0xbba4ebb2
mov dword [0x4c1344], 0xbfaab9ae
mov dword [0x4c1348], 0xa6ebb9a4
mov dword [0x4c134c], 0xebbfb8be
mov dword [0x4c1350], 0xaebdaaa3
mov dword [0x4c1354], 0xaea5a4eb
mov dword [0x4c1358], 0xaebba4eb
mov dword [0x4c135c], 0xafa5aab9
mov byte [0x4c1360], 0xcb
xor eax, eax
mov cl, byte [eax + 0x4c133c]
xor cl, 0xcb
mov byte [eax + 0x4c148c], cl
inc eax
cmp eax, 0x25
jb 0x42579e
mov eax, 0x4c148c
ret
Function at 0x4257b9
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c272c], 1
jne 0x425833
or dword [0x4c272c], 1
mov dword [0x4c1364], 0xaaa5a289
mov dword [0x4c1368], 0xa4ebb2b9
mov dword [0x4c136c], 0xaab9aebb
mov dword [0x4c1370], 0xebb9a4bf
mov dword [0x4c1374], 0xbfb8bea6
mov dword [0x4c1378], 0xbdaaa3eb
mov dword [0x4c137c], 0xbcbfebae
mov dword [0x4c1380], 0xbba4eba4
mov dword [0x4c1384], 0xa5aab9ae
mov word [0x4c1388], 0xb8af
mov byte [0x4c138a], 0xcb
xor eax, eax
mov cl, byte [eax + 0x4c1364]
xor cl, 0xcb
mov byte [eax + 0x4c14b4], cl
inc eax
cmp eax, 0x27
jb 0x425835
mov eax, 0x4c14b4
ret

Function at 0x425850
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2728], 1
jne 0x4258b9
or dword [0x4c2728], 1
mov dword [0x4c138c], 0xaaa5a289
mov dword [0x4c1390], 0xa4ebb2b9
mov dword [0x4c1394], 0xaab9aebb
mov dword [0x4c1398], 0xebb9a4bf
mov dword [0x4c139c], 0xebbfa4a5
mov dword [0x4c13a0], 0xa7bba6a2
mov dword [0x4c13a4], 0xa5aea6ae
mov dword [0x4c13a8], 0xf1afaebf
mov word [0x4c13ac], 0xcbeb
xor eax, eax
mov cl, byte [eax + 0x4c138c]
xor cl, 0xcb
mov byte [eax + 0x4c14dc], cl
inc eax
cmp eax, 0x22
jb 0x4258bb
mov eax, 0x4c14dc
ret
Function at 0x42726b
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
or eax, 0xffffffff
cmp dword [ebp + 8], 0
je 0x4272ad
push esi
mov cl, byte [edx]
dec dword [ebp + 8]
movzx ecx, cl
mov esi, ecx
xor esi, eax
and esi, 0xf
shr eax, 4
xor eax, dword [esi*4 + 0x4abe30]
shr ecx, 4
mov esi, eax
and esi, 0xf
xor ecx, esi
shr eax, 4
xor eax, dword [ecx*4 + 0x4abe30]
inc edx
cmp dword [ebp + 8], 0
jne 0x427278
pop esi
not eax
pop ebp
ret

Function at 0x428ef8
Capabilities:
Enumerate pe sections

Disassembly:
push ebx
xor ebx, ebx
push edi
cmp ecx, ebx
je 0x428f1d
cmp dword [ecx + 0x38], ebx
je 0x428f1d
cmp eax, dword [ecx + 0x10]
jae 0x428f1d
cmp dword [ecx + 0x14], 1
jne 0x428f1d
mov edx, dword [ecx + 0x38]
mov edi, dword [edx + 0x10]
mov edi, dword [edi + eax*4]
add edi, dword [edx]
jmp 0x428f1f
xor edi, edi
cmp edi, ebx
je 0x429002
cmp esi, ebx
je 0x429002
mov dword [esi], eax
mov ecx, dword [ecx + 0x38]
mov ecx, dword [ecx + 0x10]
mov eax, dword [ecx + eax*4]
mov dword [esi + 4], eax
mov ax, word [edi + 4]
mov word [esi + 8], ax
mov ax, word [edi + 6]
mov word [esi + 0xa], ax
mov ax, word [edi + 8]
mov word [esi + 0xc], ax
mov ax, word [edi + 0xa]
mov word [esi + 0xe], ax
movzx eax, word [edi + 0xe]
movzx edx, word [edi + 0xc]
call fcn.004286a1
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], edx
mov eax, dword [edi + 0x10]
mov dword [esi + 0x18], eax
mov eax, dword [edi + 0x14]
mov dword [esi + 0x20], eax
mov dword [esi + 0x24], ebx
mov eax, dword [edi + 0x18]
mov dword [esi + 0x28], eax
mov dword [esi + 0x2c], ebx
mov ax, word [edi + 0x24]
mov word [esi + 0x30], ax
mov eax, dword [edi + 0x26]
mov dword [esi + 0x34], eax
mov eax, dword [edi + 0x2a]
mov dword [esi + 0x38], eax
mov dword [esi + 0x3c], ebx
movzx ebx, word [edi + 0x1c]
mov eax, 0x103
cmp ebx, eax
jb 0x428fae
mov ebx, eax
push ebx
lea eax, [edi + 0x2e]
push eax
lea eax, [esi + 0x44]
push eax
call fcn.00467010
mov byte [ebx + esi + 0x44], 0
movzx ebx, word [edi + 0x20]
mov eax, 0xff
add esp, 0xc
cmp ebx, eax
jb 0x428fd3
mov ebx, eax
mov dword [esi + 0x40], ebx
movzx eax, word [edi + 0x1e]
movzx ecx, word [edi + 0x1c]
add eax, edi
lea eax, [ecx + eax + 0x2e]
push ebx
push eax
lea eax, [esi + 0x148]
push eax
call fcn.00467010
xor eax, eax
add esp, 0xc
mov byte [ebx + esi + 0x148], 0
inc eax
jmp 0x429004
xor eax, eax
pop edi
pop ebx
ret

Function at 0x4299f8
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c271c], 1
jne 0x429a7d
or dword [0x4c271c], 1
mov dword [0x4c1518], 0xa1a4ac8b
mov dword [0x4c151c], 0xb9eda9a8
mov dword [0x4c1520], 0xbfaeeda2
mov dword [0x4c1524], 0xa8b9aca8
mov dword [0x4c1528], 0xacb8a1ed
mov dword [0x4c152c], 0xacb9beed
mov dword [0x4c1530], 0xe5eda8b9
mov dword [0x4c1534], 0xa6bfa2ba
mov dword [0x4c1538], 0xb9edbfa8
mov dword [0x4c153c], 0xaca8bfa5
mov dword [0x4c1540], 0xedf7e4a9
mov byte [0x4c1544], 0xcd
xor eax, eax
mov cl, byte [eax + 0x4c1518]
xor cl, 0xcd
mov byte [eax + 0x4c15e0], cl
inc eax
cmp eax, 0x2d
jb 0x429a7f
mov eax, 0x4c15e0
ret
Function at 0x429a9a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c270c], 1
jne 0x429b01
or dword [0x4c270c], 1
mov dword [0x4c1554], 0xa8eda283
mov dword [0x4c1558], 0xbfa2bfbf
mov dword [0x4c155c], 0xbea8a0ed
mov dword [0x4c1560], 0xa8aaacbe
mov dword [0x4c1564], 0xb9a8bfed
mov dword [0x4c1568], 0xa8a3bfb8
mov dword [0x4c156c], 0xb4afeda9
mov dword [0x4c1570], 0xafa2a7ed
mov byte [0x4c1574], 0xcd
xor eax, eax
mov cl, byte [eax + 0x4c1554]
xor cl, 0xcd
mov byte [eax + 0x4c161c], cl
inc eax
cmp eax, 0x21
jb 0x429b03
mov eax, 0x4c161c
ret

Function at 0x429b1e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2700], 1
jne 0x429b87
or dword [0x4c2700], 1
mov dword [0x4c15a0], 0xedacb881
mov dword [0x4c15a4], 0xa2bfbfa8
mov dword [0x4c15a8], 0xb8bfedbf
mov dword [0x4c15ac], 0xa3a4a3a3
mov dword [0x4c15b0], 0xbfa8edaa
mov dword [0x4c15b4], 0xedbfa2bf
mov dword [0x4c15b8], 0xa9a3aca5
mov dword [0x4c15bc], 0xf7bfa8a1
mov word [0x4c15c0], 0xcded
xor eax, eax
mov cl, byte [eax + 0x4c15a0]
xor cl, 0xcd
mov byte [eax + 0x4c1668], cl
inc eax
cmp eax, 0x22
jb 0x429b89
mov eax, 0x4c1668
ret

Function at 0x429ba4
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c26fc], 1
jne 0x429bf6
or dword [0x4c26fc], 1
mov dword [0x4c15c4], 0x81acb8a1
mov dword [0x4c15c8], 0xaca2a192
mov dword [0x4c15cc], 0xbfb9bea9
mov dword [0x4c15d0], 0xedaaa3a4
mov dword [0x4c15d4], 0xa1a4acab
mov word [0x4c15d8], 0xa9a8
mov byte [0x4c15da], 0xcd
xor eax, eax
mov cl, byte [eax + 0x4c15c4]
xor cl, 0xcd
mov byte [eax + 0x4c168c], cl
inc eax
cmp eax, 0x17
jb 0x429bf8
mov eax, 0x4c168c
ret
Function at 0x42a914
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x48ad9b
call fcn.00489c78
sub esp, 0xb0
push ebx
push esi
push edi
xor ebx, ebx
push ebx
push ebx
lea eax, [ebp - 0x10]
push eax
push ebx
push dword [ebp + 0xc]
mov dword [ebp - 0x10], ebx
push ebx
push 0x1300
call dword [0x49212c]
test eax, eax
jne 0x42a95c
call fcn.0042aab5
mov ecx, dword [ebp + 8]
push eax
call fcn.00406b3f
mov eax, dword [ebp + 8]
jmp 0x42aaa6
test byte [0x4c26f0], 1
jne 0x42a97d
or dword [0x4c26f0], 1
mov dword [0x4c16c8], 0xefc5c2c6
mov byte [0x4c16cc], 0xcf
xor eax, eax
mov cl, byte [eax + 0x4c16c8]
xor cl, 0xcf
mov byte [eax + 0x4c1e9c], cl
inc eax
cmp eax, 5
jb 0x42a97f
push 0xf
mov esi, 0x4c1e9c
pop edi
mov eax, esi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x48], bl
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x42a9aa
sub eax, ecx
push eax
push esi
lea ecx, [ebp - 0x48]
call fcn.00404ceb
mov dword [ebp - 4], ebx
push dword [ebp - 0x10]
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.00404d60
lea eax, [ebp - 0x2c]
push eax
lea edi, [ebp - 0x48]
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 1
call fcn.0042fda9
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.00404d81
push ebx
push 1
mov ecx, edi
mov byte [ebp - 4], 4
call fcn.00404d81
push dword [ebp - 0x10]
call dword [0x4920e0]
push ebx
push dword [ebp + 0xc]
lea esi, [ebp - 0xb8]
call fcn.0042ae00
pop ecx
pop ecx
push eax
mov byte [ebp - 4], 5
call fcn.0042ab1e
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.00406b7c
add esp, 0xc
push 0x4ad294
push eax
lea eax, [ebp - 0x9c]
push eax
mov byte [ebp - 4], 6
call fcn.0040d6fb
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea esi, [ebp - 0x64]
mov byte [ebp - 4], 7
call fcn.0040b620
push ebx
push 1
lea ecx, [ebp - 0x9c]
call fcn.00404d81
push ebx
push 1
lea ecx, [ebp - 0x80]
call fcn.00404d81
push ebx
push 1
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 4
call fcn.00404d81
mov edi, dword [ebp + 8]
mov dword [edi + 0x14], 0xf
mov dword [edi + 0x10], ebx
mov byte [edi], bl
call fcn.00404ca1
push ebx
push 1
mov ecx, esi
call fcn.00404d81
mov eax, edi
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret

Function at 0x42aab5
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c26f4], 1
jne 0x42ab01
or dword [0x4c26f4], 1
mov dword [0x4c16b0], 0xaabda19a
mov dword [0x4c16b4], 0xa1a8a0ac
mov dword [0x4c16b8], 0xabaab5a6
mov dword [0x4c16bc], 0xbdbdaaef
mov dword [0x4c16c0], 0xacefbda0
mov dword [0x4c16c4], 0xcfaaaba0
xor eax, eax
mov cl, byte [eax + 0x4c16b0]
xor cl, 0xcf
mov byte [eax + 0x4c1e84], cl
inc eax
cmp eax, 0x18
jb 0x42ab03
mov eax, 0x4c1e84
ret

Function at 0x42ab1e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c26ec], 1
jne 0x42ab5c
or dword [0x4c26ec], 1
mov dword [0x4c16d0], 0xbdaae7ef
mov dword [0x4c16d4], 0xefbda0bd
mov dword [0x4c16d8], 0xaaaba0ac
mov word [0x4c16dc], 0xeff5
mov byte [0x4c16de], 0xcf
xor eax, eax
mov cl, byte [eax + 0x4c16d0]
xor cl, 0xcf
mov byte [eax + 0x4c1ea4], cl
inc eax
cmp eax, 0xf
jb 0x42ab5e
mov eax, 0x4c1ea4
ret
Function at 0x42ae00
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
and dword [ebp - 4], 0
test byte [0x4c26e8], 1
jne 0x42ae2b
or dword [0x4c26e8], 1
mov dword [0x4c16e0], 0xaba3a3ea
mov byte [0x4c16e4], 0xcf
xor eax, eax
mov cl, byte [eax + 0x4c16e0]
xor cl, 0xcf
mov byte [eax + 0x4c1eb4], cl
inc eax
cmp eax, 5
jb 0x42ae2d
push dword [ebp + 0xc]
lea eax, [ebp - 0x48]
push dword [ebp + 8]
push 0x4c1eb4
push eax
call fcn.0042fe02
and dword [esi + 0x10], 0
add esp, 0x10
lea eax, [ebp - 0x48]
mov dword [esi + 0x14], 0xf
push eax
mov ecx, esi
mov byte [esi], 0
call fcn.00404d60
mov eax, esi
leave
ret

Function at 0x42afd0
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c26e4], 1
jne 0x42b02c
or dword [0x4c26e4], 1
mov dword [0x4c16e8], 0x82bbaa88
mov dword [0x4c16ec], 0xa3baaba0
mov dword [0x4c16f0], 0xa3a689aa
mov dword [0x4c16f4], 0xa2ae81aa
mov dword [0x4c16f8], 0xaea9efaa
mov dword [0x4c16fc], 0xabaaa3a6
mov word [0x4c1700], 0xeff5
mov byte [0x4c1702], 0xcf
xor eax, eax
mov cl, byte [eax + 0x4c16e8]
xor cl, 0xcf
mov byte [eax + 0x4c1ebc], cl
inc eax
cmp eax, 0x1b
jb 0x42b02e
mov eax, 0x4c1ebc
ret

Function at 0x42b049
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c26e0], 1
jne 0x42b0a6
or dword [0x4c26e0], 1
mov dword [0x4c1704], 0x8cbbaa9c
mov dword [0x4c1708], 0xaabdbdba
mov dword [0x4c170c], 0xa68bbba1
mov dword [0x4c1710], 0xbbacaabd
mov dword [0x4c1714], 0xefb6bda0
mov dword [0x4c1718], 0xa3a6aea9
mov dword [0x4c171c], 0xeff5abaa
mov byte [0x4c1720], 0xcf
xor eax, eax
mov cl, byte [eax + 0x4c1704]
xor cl, 0xcf
mov byte [eax + 0x4c1ed8], cl
inc eax
cmp eax, 0x1d
jb 0x42b0a8
mov eax, 0x4c1ed8
ret

Function at 0x42b1ba
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c26dc], 1
jne 0x42b217
or dword [0x4c26dc], 1
mov dword [0x4c1724], 0x8cbbaa88
mov dword [0x4c1728], 0xaabdbdba
mov dword [0x4c172c], 0xa68bbba1
mov dword [0x4c1730], 0xbbacaabd
mov dword [0x4c1734], 0xefb6bda0
mov dword [0x4c1738], 0xa3a6aea9
mov dword [0x4c173c], 0xeff5abaa
mov byte [0x4c1740], 0xcf
xor eax, eax
mov cl, byte [eax + 0x4c1724]
xor cl, 0xcf
mov byte [eax + 0x4c1ef8], cl
inc eax
cmp eax, 0x1d
jb 0x42b219
mov eax, 0x4c1ef8
ret
Function at 0x42b3d2
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c26d8], 1
jne 0x42b541
mov eax, 0xdd93
mov ecx, eax
mov word [0x4c1748], cx
mov word [0x4c174a], cx
add ecx, 9
mov word [0x4c174c], cx
lea ecx, [eax + 0x28]
mov word [0x4c174e], cx
add ecx, 2
lea edx, [eax + 0x13]
mov word [0x4c1750], cx
push ebx
mov ecx, edx
mov word [0x4c1752], cx
add ecx, 0xfffffffb
push esi
mov esi, ecx
lea ecx, [eax + 0x16]
mov word [0x4c1754], si
lea esi, [eax + 0x15]
mov word [0x4c1756], si
mov word [0x4c1764], cx
add esi, 0xfffffff8
add edx, 0xfffffffd
mov ecx, esi
push edi
lea edi, [eax + 0x17]
mov word [0x4c1766], cx
mov ecx, eax
mov word [0x4c175c], dx
mov edx, edi
mov word [0x4c1768], cx
mov word [0x4c176a], cx
add ecx, 0x6c
mov word [0x4c175e], dx
mov edx, ecx
or dword [0x4c26d8], 1
mov word [0x4c176c], dx
lea edx, [eax + 0x68]
mov ebx, edx
mov word [0x4c176e], bx
mov ebx, ecx
mov word [0x4c1770], bx
lea ebx, [eax + 0x63]
mov word [0x4c177e], ax
mov word [0x4c1772], bx
mov ebx, ecx
mov ecx, eax
add eax, 0xc
mov word [0x4c1780], ax
lea eax, [ecx + 0x18]
mov word [0x4c1786], ax
add eax, 0xf
mov word [0x4c1788], ax
lea eax, [ecx + 0x19]
mov word [0x4c178a], ax
add eax, 0xf
mov word [0x4c178c], ax
lea eax, [ecx - 0x12]
mov word [0x4c178e], ax
add eax, 0x2d
pop edi
mov word [0x4c1790], ax
lea eax, [ecx + 0x3c]
pop esi
mov word [0x4c1774], bx
mov dword [0x4c1758], 0xdda6dd89
mov dword [0x4c1760], 0xdda1dd86
mov word [0x4c1776], dx
mov dword [0x4c1778], 0xddffdd8d
mov word [0x4c177c], cx
mov dword [0x4c1782], 0xdda0ddbd
mov dword [0x4c1792], 0xddaadda2
mov word [0x4c1796], ax
pop ebx
xor eax, eax
mov ecx, 0xddcf
xor cx, word [eax + 0x4c1748]
add eax, 2
mov word [eax + 0x4c1f16], cx
cmp eax, 0x50
jb 0x42b543
mov eax, 0x4c1f18
ret

Function at 0x42b564
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c26d4], 1
jne 0x42b5b9
or dword [0x4c26d4], 1
mov dword [0x4c1798], 0xb9efa081
mov dword [0x4c179c], 0xa6bcbdaa
mov dword [0x4c17a0], 0xa6efa1a0
mov dword [0x4c17a4], 0xefa0a9a1
mov dword [0x4c17a8], 0xa6aeb9ae
mov dword [0x4c17ac], 0xa3adaea3
mov word [0x4c17b0], 0xcfaa
xor eax, eax
mov cl, byte [eax + 0x4c1798]
xor cl, 0xcf
mov byte [eax + 0x4c1f68], cl
inc eax
cmp eax, 0x1a
jb 0x42b5bb
mov eax, 0x4c1f68
ret

Function at 0x42b7a8
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c26d0], 1
jne 0x42b7fd
or dword [0x4c26d0], 1
mov dword [0x4c17b4], 0xb9efa081
mov dword [0x4c17b8], 0xa6bcbdaa
mov dword [0x4c17bc], 0xa6efa1a0
mov dword [0x4c17c0], 0xefa0a9a1
mov dword [0x4c17c4], 0xa6aeb9ae
mov dword [0x4c17c8], 0xa3adaea3
mov word [0x4c17cc], 0xcfaa
xor eax, eax
mov cl, byte [eax + 0x4c17b4]
xor cl, 0xcf
mov byte [eax + 0x4c1f84], cl
inc eax
cmp eax, 0x1a
jb 0x42b7ff
mov eax, 0x4c1f84
ret
Function at 0x42b81a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c26cc], 1
jne 0x42b880
or dword [0x4c26cc], 1
mov dword [0x4c17d0], 0xaeb9a186
mov dword [0x4c17d4], 0xefaba6a3
mov dword [0x4c17d8], 0xbcbdaab9
mov dword [0x4c17dc], 0xefa1a0a6
mov dword [0x4c17e0], 0xa0a9a1a6
mov dword [0x4c17e4], 0xa8a6bcef
mov dword [0x4c17e8], 0xbabbaea1
mov word [0x4c17ec], 0xaabd
mov byte [0x4c17ee], 0xcf
xor eax, eax
mov cl, byte [eax + 0x4c17d0]
xor cl, 0xcf
mov byte [eax + 0x4c1fa0], cl
inc eax
cmp eax, 0x1f
jb 0x42b882
mov eax, 0x4c1fa0
ret

Function at 0x42bb87
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c26c8], 1
jne 0x42bbed
or dword [0x4c26c8], 1
mov dword [0x4c17f0], 0xa3a6ae89
mov dword [0x4c17f4], 0xbbefabaa
mov dword [0x4c17f8], 0xaaa8efa0
mov dword [0x4c17fc], 0xaabbefbb
mov dword [0x4c1800], 0xa9efbfa2
mov dword [0x4c1804], 0xaaaba3a0
mov dword [0x4c1808], 0xaebfefbd
mov word [0x4c180c], 0xa7bb
mov byte [0x4c180e], 0xcf
xor eax, eax
mov cl, byte [eax + 0x4c17f0]
xor cl, 0xcf
mov byte [eax + 0x4c1fc0], cl
inc eax
cmp eax, 0x1f
jb 0x42bbef
mov eax, 0x4c1fc0
ret

Function at 0x42bd5f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c26c4], 1
jne 0x42bdb1
or dword [0x4c26c4], 1
mov dword [0x4c1810], 0x89bbaa88
mov dword [0x4c1814], 0xaaaba3a0
mov dword [0x4c1818], 0xbbae9fbd
mov dword [0x4c181c], 0xaea9efa7
mov dword [0x4c1820], 0xabaaa3a6
mov word [0x4c1824], 0xeff5
mov byte [0x4c1826], 0xcf
xor eax, eax
mov cl, byte [eax + 0x4c1810]
xor cl, 0xcf
mov byte [eax + 0x4c1fe0], cl
inc eax
cmp eax, 0x17
jb 0x42bdb3
mov eax, 0x4c1fe0
ret

Function at 0x42c07b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c26c0], 1
mov edx, 0xddcf
jne 0x42c112
or dword [0x4c26c0], 1
lea ecx, [edx + 0x1b]
mov eax, ecx
mov word [0x4c1828], ax
add eax, 0xffffffb5
mov word [0x4c182a], ax
push esi
lea eax, [edx - 0x12]
mov esi, eax
add eax, 0xfffffff1
mov word [0x4c1834], ax
lea eax, [edx - 0x2d]
mov word [0x4c1836], ax
add eax, 0xfffffff6
mov word [0x4c1838], ax
lea eax, [edx + 0x2a]
mov word [0x4c182c], si
add esi, 0xffffffe3
mov word [0x4c183a], ax
add eax, 2
mov word [0x4c183c], ax
lea eax, [edx + 0x2d]
mov word [0x4c183e], ax
mov eax, edx
mov word [0x4c182e], si
mov dword [0x4c1830], 0xddbddda8
mov dword [0x4c1840], 0xddeaddfd
mov word [0x4c1844], ax
pop esi
xor eax, eax
mov ecx, edx
xor cx, word [eax + 0x4c1828]
add eax, 2
mov word [eax + 0x4c1ff6], cx
cmp eax, 0x1e
jb 0x42c114
mov eax, 0x4c1ff8
ret

Function at 0x42c132
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c26bc], 1
mov ecx, 0xddcf
jne 0x42c173
or dword [0x4c26bc], 1
lea eax, [ecx - 0x1b]
mov word [0x4c1848], ax
add eax, 0xb
mov word [0x4c184a], ax
lea eax, [ecx - 0x26]
mov word [0x4c184c], ax
add eax, 9
mov word [0x4c184e], ax
mov eax, ecx
mov word [0x4c1850], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c1848]
add eax, 2
mov word [eax + 0x4c2016], dx
cmp eax, 0xa
jb 0x42c175
mov eax, 0x4c2018
ret
Function at 0x42c193
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c26b8], 1
mov ecx, 0xddcf
jne 0x42c1e6
or dword [0x4c26b8], 1
lea eax, [ecx - 0x1b]
mov word [0x4c1854], ax
add eax, 0xb
mov word [0x4c1856], ax
lea eax, [ecx - 0x26]
mov word [0x4c1858], ax
add eax, 0x53
mov word [0x4c185a], ax
lea eax, [ecx + 0x2e]
mov word [0x4c185c], ax
add eax, 0xffffffb5
mov word [0x4c185e], ax
mov eax, ecx
mov word [0x4c1860], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c1854]
add eax, 2
mov word [eax + 0x4c2022], dx
cmp eax, 0xe
jb 0x42c1e8
mov eax, 0x4c2024
ret

Function at 0x42c206
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c26b4], 1
mov ecx, 0xddcf
jne 0x42c259
or dword [0x4c26b4], 1
lea eax, [ecx - 0x1b]
mov word [0x4c1864], ax
add eax, 0xb
mov word [0x4c1866], ax
lea eax, [ecx - 0x26]
mov word [0x4c1868], ax
add eax, 0x50
mov word [0x4c186a], ax
lea eax, [ecx + 0x2c]
mov word [0x4c186c], ax
add eax, 0xffffffb7
mov word [0x4c186e], ax
mov eax, ecx
mov word [0x4c1870], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c1864]
add eax, 2
mov word [eax + 0x4c2032], dx
cmp eax, 0xe
jb 0x42c25b
mov eax, 0x4c2034
ret

Function at 0x42c279
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c26b0], 1
mov ecx, 0xddcf
jne 0x42c2ba
or dword [0x4c26b0], 1
lea eax, [ecx - 0x1b]
mov word [0x4c1874], ax
add eax, 0xb
mov word [0x4c1876], ax
lea eax, [ecx - 0x26]
mov word [0x4c1878], ax
add eax, 9
mov word [0x4c187a], ax
mov eax, ecx
mov word [0x4c187c], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c1874]
add eax, 2
mov word [eax + 0x4c2042], dx
cmp eax, 0xa
jb 0x42c2bc
mov eax, 0x4c2044
ret

Function at 0x42c2da
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c26ac], 1
mov ecx, 0xddcf
jne 0x42c32d
or dword [0x4c26ac], 1
lea eax, [ecx - 0x1b]
mov word [0x4c1880], ax
add eax, 0xb
mov word [0x4c1882], ax
lea eax, [ecx - 0x26]
mov word [0x4c1884], ax
add eax, 0x53
mov word [0x4c1886], ax
lea eax, [ecx + 0x2e]
mov word [0x4c1888], ax
add eax, 0xffffffb5
mov word [0x4c188a], ax
mov eax, ecx
mov word [0x4c188c], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c1880]
add eax, 2
mov word [eax + 0x4c204e], dx
cmp eax, 0xe
jb 0x42c32f
mov eax, 0x4c2050
ret