joyce8/EMBER2024-capa huggingface dataset:
Function at 0x41537d
Capabilities:
Encode data using xor

Disassembly:
push esi
push edi
push 0x31
pop ecx
mov esi, 0x496d48
mov edi, 0x4c8600
push 0x496e0c
rep movsd dword es:[edi], dword [esi]
call fcn.0044f3c0
pop ecx
pop edi
pop esi
cmp eax, 0xffffffff
jne 0x4153a3
xor al, al
ret
push 0x496bd0
call fcn.0044f310
pop ecx
cmp eax, 0xffffffff
je 0x4153a0
push 0x496ea0
call fcn.0044e560
pop ecx
cmp eax, 0xffffffff
je 0x4153a0
test byte [0x4c81fc], 1
jne 0x4153e4
or dword [0x4c81fc], 1
mov dword [0x4c3cf0], 0xdb8b8299
mov byte [0x4c3cf4], 0xea
xor eax, eax
mov cl, byte [eax + 0x4c3cf0]
xor cl, 0xea
mov byte [eax + 0x4c3dbc], cl
inc eax
cmp eax, 5
jb 0x4153e6
push 0x4c3dbc
call fcn.0044f430
pop ecx
mov dword [0x4bd928], eax
test eax, eax
js 0x4153a0
call fcn.0041546f
push eax
call fcn.0044e5d0
pop ecx
mov dword [0x4bd92c], eax
test eax, eax
js 0x4153a0
test byte [0x4c81f4], 1
jne 0x415442
or dword [0x4c81f4], 1
mov dword [0x4c3d00], 0xea998f8b
xor eax, eax
mov cl, byte [eax + 0x4c3d00]
xor cl, 0xea
mov byte [eax + 0x4c3dcc], cl
inc eax
cmp eax, 4
jb 0x415444
push 0x4c3dcc
call fcn.0044f380
test eax, eax
mov dword [0x4bd930], eax
pop ecx
setns al
ret

Function at 0x41546f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81f8], 1
jne 0x415493
or dword [0x4c81f8], 1
mov dword [0x4c3cf8], 0x9e98858c
mov dword [0x4c3cfc], 0xea8b849f
xor eax, eax
mov cl, byte [eax + 0x4c3cf8]
xor cl, 0xea
mov byte [eax + 0x4c3dc4], cl
inc eax
cmp eax, 8
jb 0x415495
mov eax, 0x4c3dc4
ret

Function at 0x415713
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81f0], 1
jne 0x415751
or dword [0x4c81f0], 1
mov dword [0x4c3d04], 0x83ca9a87
mov dword [0x4c3d08], 0xca9e8384
mov dword [0x4c3d0c], 0x86838b8c
mov word [0x4c3d10], 0x8e8f
mov byte [0x4c3d12], 0xea
xor eax, eax
mov cl, byte [eax + 0x4c3d04]
xor cl, 0xea
mov byte [eax + 0x4c3dd0], cl
inc eax
cmp eax, 0xf
jb 0x415753
mov eax, 0x4c3dd0
ret

Function at 0x41576e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81ec], 1
jne 0x4157ac
or dword [0x4c81ec], 1
mov dword [0x4c3d14], 0x83ca9a87
mov dword [0x4c3d18], 0xca9e8384
mov dword [0x4c3d1c], 0x86838b8c
mov word [0x4c3d20], 0x8e8f
mov byte [0x4c3d22], 0xea
xor eax, eax
mov cl, byte [eax + 0x4c3d14]
xor cl, 0xea
mov byte [eax + 0x4c3de0], cl
inc eax
cmp eax, 0xf
jb 0x4157ae
mov eax, 0x4c3de0
ret

Function at 0x4157c9
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81e8], 1
jne 0x415807
or dword [0x4c81e8], 1
mov dword [0x4c3d24], 0xb59e8f99
mov dword [0x4c3d28], 0xca9e8483
mov dword [0x4c3d2c], 0x86838b8c
mov word [0x4c3d30], 0x8e8f
mov byte [0x4c3d32], 0xea
xor eax, eax
mov cl, byte [eax + 0x4c3d24]
xor cl, 0xea
mov byte [eax + 0x4c3df0], cl
inc eax
cmp eax, 0xf
jb 0x415809
mov eax, 0x4c3df0
ret
Function at 0x415824
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81e4], 1
jne 0x41586d
or dword [0x4c81e4], 1
mov dword [0x4c3d34], 0x8399849f
mov dword [0x4c3d38], 0x8e8f848d
mov dword [0x4c3d3c], 0x8b8f98b5
mov dword [0x4c3d40], 0x8b8cca8e
mov dword [0x4c3d44], 0x8e8f8683
mov byte [0x4c3d48], 0xea
xor eax, eax
mov cl, byte [eax + 0x4c3d34]
xor cl, 0xea
mov byte [eax + 0x4c3e00], cl
inc eax
cmp eax, 0x15
jb 0x41586f
mov eax, 0x4c3e00
ret

Function at 0x41588a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81e0], 1
jne 0x4158c9
or dword [0x4c81e0], 1
mov dword [0x4c3d4c], 0x8d84989a
mov dword [0x4c3d50], 0x818b87ca
mov dword [0x4c3d54], 0x8b8cca8f
mov dword [0x4c3d58], 0x8e8f8683
mov byte [0x4c3d5c], 0xea
xor eax, eax
mov cl, byte [eax + 0x4c3d4c]
xor cl, 0xea
mov byte [eax + 0x4c3e18], cl
inc eax
cmp eax, 0x11
jb 0x4158cb
mov eax, 0x4c3e18
ret

Function at 0x4158e6
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81dc], 1
jne 0x415928
or dword [0x4c81dc], 1
mov dword [0x4c3d60], 0x9e98858c
mov dword [0x4c3d64], 0xb58b849f
mov dword [0x4c3d68], 0x8e8b8f98
mov dword [0x4c3d6c], 0x838b8cca
mov dword [0x4c3d70], 0xea8e8f86
xor eax, eax
mov cl, byte [eax + 0x4c3d60]
xor cl, 0xea
mov byte [eax + 0x4c3e2c], cl
inc eax
cmp eax, 0x14
jb 0x41592a
mov eax, 0x4c3e2c
ret

Function at 0x415945
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81d8], 1
jne 0x41598d
or dword [0x4c81d8], 1
mov dword [0x4c3d74], 0x9a939889
mov dword [0x4c3d78], 0x83ca859e
mov dword [0x4c3d7c], 0xca9e8384
mov dword [0x4c3d80], 0x86838b8c
mov word [0x4c3d84], 0x8e8f
mov byte [0x4c3d86], 0xea
xor eax, eax
mov cl, byte [eax + 0x4c3d74]
xor cl, 0xea
mov byte [eax + 0x4c3e40], cl
inc eax
cmp eax, 0x13
jb 0x41598f
mov eax, 0x4c3e40
ret

Function at 0x415ba2
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81d4], 1
jne 0x415bc5
or dword [0x4c81d4], 1
mov dword [0x4c3d88], 0x8e999983
mov word [0x4c3d8c], 0xea81
xor eax, eax
mov cl, byte [eax + 0x4c3d88]
xor cl, 0xea
mov byte [eax + 0x4c3e54], cl
inc eax
cmp eax, 6
jb 0x415bc7
mov eax, 0x4c3e54
ret

Function at 0x415be2
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81d0], 1
jne 0x415c0f
or dword [0x4c81d0], 1
mov dword [0x4c3d90], 0x88989f82
mov dword [0x4c3d94], 0x989f8e8b
mov word [0x4c3d98], 0xea98
xor eax, eax
mov cl, byte [eax + 0x4c3d90]
xor cl, 0xea
mov byte [eax + 0x4c3e5c], cl
inc eax
cmp eax, 0xa
jb 0x415c11
mov eax, 0x4c3e5c
ret

Function at 0x415cef
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81cc], 1
jne 0x415d1c
or dword [0x4c81cc], 1
mov dword [0x4c3d9c], 0x88989f82
mov dword [0x4c3da0], 0x989f8e8b
mov word [0x4c3da4], 0xea98
xor eax, eax
mov cl, byte [eax + 0x4c3d9c]
xor cl, 0xea
mov byte [eax + 0x4c3e68], cl
inc eax
cmp eax, 0xa
jb 0x415d1e
mov eax, 0x4c3e68
ret
Function at 0x416406
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81c8], 1
jne 0x41644e
or dword [0x4c81c8], 1
mov dword [0x4c3e74], 0x9d949f8e
mov dword [0x4c3e78], 0x84cd8299
mov dword [0x4c3e7c], 0xcd998483
mov dword [0x4c3e80], 0x81848c8b
mov word [0x4c3e84], 0x8988
mov byte [0x4c3e86], 0xed
xor eax, eax
mov cl, byte [eax + 0x4c3e74]
xor cl, 0xed
mov byte [eax + 0x4c3f88], cl
inc eax
cmp eax, 0x13
jb 0x416450
mov eax, 0x4c3f88
ret

Function at 0x41646b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81c4], 1
jne 0x4164b3
or dword [0x4c81c4], 1
mov dword [0x4c3e88], 0x9d949f8e
mov dword [0x4c3e8c], 0x84cd8299
mov dword [0x4c3e90], 0xcd998483
mov dword [0x4c3e94], 0x81848c8b
mov word [0x4c3e98], 0x8988
mov byte [0x4c3e9a], 0xed
xor eax, eax
mov cl, byte [eax + 0x4c3e88]
xor cl, 0xed
mov byte [eax + 0x4c3f9c], cl
inc eax
cmp eax, 0x13
jb 0x4164b5
mov eax, 0x4c3f9c
ret

Function at 0x4164d0
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81bc], 1
jne 0x416518
or dword [0x4c81bc], 1
mov dword [0x4c3ea4], 0x9d949f8e
mov dword [0x4c3ea8], 0x84cd8299
mov dword [0x4c3eac], 0xcd998483
mov dword [0x4c3eb0], 0x81848c8b
mov word [0x4c3eb4], 0x8988
mov byte [0x4c3eb6], 0xed
xor eax, eax
mov cl, byte [eax + 0x4c3ea4]
xor cl, 0xed
mov byte [eax + 0x4c3fb8], cl
inc eax
cmp eax, 0x13
jb 0x41651a
mov eax, 0x4c3fb8
ret

Function at 0x416535
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81b4], 1
jne 0x41657d
or dword [0x4c81b4], 1
mov dword [0x4c3ebc], 0x9d949f8e
mov dword [0x4c3ec0], 0x84cd8299
mov dword [0x4c3ec4], 0xcd998483
mov dword [0x4c3ec8], 0x81848c8b
mov word [0x4c3ecc], 0x8988
mov byte [0x4c3ece], 0xed
xor eax, eax
mov cl, byte [eax + 0x4c3ebc]
xor cl, 0xed
mov byte [eax + 0x4c3fd0], cl
inc eax
cmp eax, 0x13
jb 0x41657f
mov eax, 0x4c3fd0
ret

Function at 0x41659a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81b0], 1
jne 0x4165d1
or dword [0x4c81b0], 1
mov dword [0x4c3ed0], 0x9d949f8e
mov dword [0x4c3ed4], 0x8bcd8299
mov dword [0x4c3ed8], 0x8881848c
mov word [0x4c3edc], 0xed89
xor eax, eax
mov cl, byte [eax + 0x4c3ed0]
xor cl, 0xed
mov byte [eax + 0x4c3fe4], cl
inc eax
cmp eax, 0xe
jb 0x4165d3
mov eax, 0x4c3fe4
ret

Function at 0x4165ee
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81ac], 1
jne 0x416625
or dword [0x4c81ac], 1
mov dword [0x4c3ee0], 0x9d949f8e
mov dword [0x4c3ee4], 0x8bcd8299
mov dword [0x4c3ee8], 0x8881848c
mov word [0x4c3eec], 0xed89
xor eax, eax
mov cl, byte [eax + 0x4c3ee0]
xor cl, 0xed
mov byte [eax + 0x4c3ff4], cl
inc eax
cmp eax, 0xe
jb 0x416627
mov eax, 0x4c3ff4
ret

Function at 0x416642
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81a8], 1
jne 0x41666f
or dword [0x4c81a8], 1
mov dword [0x4c3ef0], 0x9d9f8885
mov dword [0x4c3ef4], 0x9f8889c6
mov word [0x4c3ef8], 0xed9d
xor eax, eax
mov cl, byte [eax + 0x4c3ef0]
xor cl, 0xed
mov byte [eax + 0x4c4004], cl
inc eax
cmp eax, 0xa
jb 0x416671
mov eax, 0x4c4004
ret
Function at 0x41668c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81a4], 1
jne 0x4166c3
or dword [0x4c81a4], 1
mov dword [0x4c3efc], 0x9d949f8e
mov dword [0x4c3f00], 0x8bcd8299
mov dword [0x4c3f04], 0x8881848c
mov word [0x4c3f08], 0xed89
xor eax, eax
mov cl, byte [eax + 0x4c3efc]
xor cl, 0xed
mov byte [eax + 0x4c4010], cl
inc eax
cmp eax, 0xe
jb 0x4166c5
mov eax, 0x4c4010
ret

Function at 0x4166e0
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81a0], 1
jne 0x416717
or dword [0x4c81a0], 1
mov dword [0x4c3f0c], 0x9d949f8e
mov dword [0x4c3f10], 0x8bcd8299
mov dword [0x4c3f14], 0x8881848c
mov word [0x4c3f18], 0xed89
xor eax, eax
mov cl, byte [eax + 0x4c3f0c]
xor cl, 0xed
mov byte [eax + 0x4c4020], cl
inc eax
cmp eax, 0xe
jb 0x416719
mov eax, 0x4c4020
ret

Function at 0x4167e5
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c819c], 1
jne 0x41681c
or dword [0x4c819c], 1
mov dword [0x4c3f1c], 0x9d949f8e
mov dword [0x4c3f20], 0x8bcd8299
mov dword [0x4c3f24], 0x8881848c
mov word [0x4c3f28], 0xed89
xor eax, eax
mov cl, byte [eax + 0x4c3f1c]
xor cl, 0xed
mov byte [eax + 0x4c4030], cl
inc eax
cmp eax, 0xe
jb 0x41681e
mov eax, 0x4c4030
ret

Function at 0x4169cb
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8198], 1
jne 0x416a02
or dword [0x4c8198], 1
mov dword [0x4c3f2c], 0x9d949f8e
mov dword [0x4c3f30], 0x8bcd8299
mov dword [0x4c3f34], 0x8881848c
mov word [0x4c3f38], 0xed89
xor eax, eax
mov cl, byte [eax + 0x4c3f2c]
xor cl, 0xed
mov byte [eax + 0x4c4040], cl
inc eax
cmp eax, 0xe
jb 0x416a04
mov eax, 0x4c4040
ret

Function at 0x416a1f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8194], 1
jne 0x416a56
or dword [0x4c8194], 1
mov dword [0x4c3f3c], 0x9d949f8e
mov dword [0x4c3f40], 0x8bcd8299
mov dword [0x4c3f44], 0x8881848c
mov word [0x4c3f48], 0xed89
xor eax, eax
mov cl, byte [eax + 0x4c3f3c]
xor cl, 0xed
mov byte [eax + 0x4c4050], cl
inc eax
cmp eax, 0xe
jb 0x416a58
mov eax, 0x4c4050
ret
Function at 0x416a73
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x48d467
call fcn.0048cc68
sub esp, 0x10
push ebx
push esi
mov esi, 0x110
push esi
call fcn.004673c0
mov ebx, eax
pop ecx
test ebx, ebx
je 0x416aa4
push esi
push 0
push ebx
call fcn.0046b880
add esp, 0xc
mov esi, ebx
jmp 0x416aa6
xor esi, esi
mov dword [ebp - 0x10], esi
and dword [ebp - 4], 0
mov eax, dword [edi + 4]
mov dword [esi + 0x100], eax
mov eax, dword [edi + 8]
sub eax, 0x14
test byte [0x4c818c], 1
mov dword [esi + 0x104], eax
mov eax, dword [edi + 0xc]
mov dword [esi + 0x108], eax
mov eax, dword [ebp + 8]
mov dword [esi + 0x10c], eax
jne 0x416af5
or dword [0x4c818c], 1
mov dword [0x4c3f60], 0x8f82818f
mov byte [0x4c3f64], 0xed
xor eax, eax
mov cl, byte [eax + 0x4c3f60]
xor cl, 0xed
mov byte [eax + 0x4c4060], cl
inc eax
cmp eax, 5
jb 0x416af7
push 0
push 0x4c4060
push esi
push 0x416734
push dword [edi]
call fcn.00454207
add esp, 0x14
test eax, eax
je 0x416b5f
push 0
call fcn.00416c4f
push eax
push 0xffffffffffffffff
push dword [edi]
call fcn.00452eaf
mov dword [ebp + 8], eax
add esp, 0x10
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00466965
push 0x4b2d20
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x1c], vtable.std::runtime_error.0
call fcn.00470885
push esi
call fcn.00467283
pop ecx
mov ecx, dword [ebp - 0xc]
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 4

Function at 0x416b76
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
test byte [0x4c8184], 1
jne 0x416bb3
or dword [0x4c8184], 1
mov dword [0x4c3f78], 0x9d949f8e
mov dword [0x4c3f7c], 0x8bcd8299
mov dword [0x4c3f80], 0x8881848c
mov word [0x4c3f84], 0xed89
xor eax, eax
mov cl, byte [eax + 0x4c3f78]
xor cl, 0xed
mov byte [eax + 0x4c4078], cl
inc eax
cmp eax, 0xe
jb 0x416bb5
lea eax, [ebp - 4]
push eax
lea ecx, [ebp - 0x10]
mov dword [ebp - 4], 0x4c4078
call fcn.00466965
push 0x4b2d20
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x10], vtable.std::runtime_error.0
call fcn.00470885
int3

Function at 0x416bf3
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8190], 1
jne 0x416c32
or dword [0x4c8190], 1
mov dword [0x4c3f4c], 0xb28c9881
mov dword [0x4c3f50], 0x818c8e9d
mov dword [0x4c3f54], 0x8c8bcd81
mov dword [0x4c3f58], 0x89888184
mov byte [0x4c3f5c], 0xed
xor eax, eax
mov cl, byte [eax + 0x4c3f4c]
xor cl, 0xed
mov byte [eax + 0x4c4088], cl
inc eax
cmp eax, 0x11
jb 0x416c34
mov eax, 0x4c4088
ret

Function at 0x416c4f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8188], 1
jne 0x416c87
or dword [0x4c8188], 1
mov dword [0x4c3f68], 0xb28c9881
mov dword [0x4c3f6c], 0x898c8281
mov dword [0x4c3f70], 0x848c8bcd
mov dword [0x4c3f74], 0xed898881
xor eax, eax
mov cl, byte [eax + 0x4c3f68]
xor cl, 0xed
mov byte [eax + 0x4c4068], cl
inc eax
cmp eax, 0x10
jb 0x416c89
mov eax, 0x4c4068
ret
Function at 0x417424
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c816c], 1
jne 0x41746d
or dword [0x4c816c], 1
mov dword [0x4c412c], 0x94829093
mov dword [0x4c4130], 0x94d1c5c7
mov dword [0x4c4134], 0x959e929f
mov dword [0x4c4138], 0x9097d194
mov dword [0x4c413c], 0x95949d98
mov byte [0x4c4140], 0xf1
xor eax, eax
mov cl, byte [eax + 0x4c412c]
xor cl, 0xf1
mov byte [eax + 0x4c4190], cl
inc eax
cmp eax, 0x15
jb 0x41746f
mov eax, 0x4c4190
ret

Function at 0x4175b5
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8168], 1
jne 0x4175fe
or dword [0x4c8168], 1
mov dword [0x4c4144], 0x94829093
mov dword [0x4c4148], 0x95d1c5c7
mov dword [0x4c414c], 0x959e9294
mov dword [0x4c4150], 0x9097d194
mov dword [0x4c4154], 0x95949d98
mov byte [0x4c4158], 0xf1
xor eax, eax
mov cl, byte [eax + 0x4c4144]
xor cl, 0xf1
mov byte [eax + 0x4c41a8], cl
inc eax
cmp eax, 0x15
jb 0x417600
mov eax, 0x4c41a8
ret

Function at 0x419e18
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c80c8], 1
jne 0x419ec2
or dword [0x4c80c8], 1
mov dword [0x4c4580], 0x849598b3
mov dword [0x4c4584], 0x9f82868f
mov dword [0x4c4588], 0x84d69899
mov dword [0x4c458c], 0x93838793
mov dword [0x4c4590], 0x92938285
mov dword [0x4c4594], 0x828394d6
mov dword [0x4c4598], 0x9f9e82d6
mov dword [0x4c459c], 0x9e82d685
mov dword [0x4c45a0], 0x92979384
mov dword [0x4c45a4], 0x85979ed6
mov dword [0x4c45a8], 0xd69998d6
mov dword [0x4c45ac], 0x868f8495
mov dword [0x4c45b0], 0x9fd69982
mov dword [0x4c45b4], 0x97828598
mov dword [0x4c45b8], 0xf6939598
xor eax, eax
mov cl, byte [eax + 0x4c4580]
xor cl, 0xf6
mov byte [eax + 0x4c46a4], cl
inc eax
cmp eax, 0x3c
jb 0x419ec4
mov eax, 0x4c46a4
ret

Function at 0x419edf
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c80c4], 1
jne 0x419f35
or dword [0x4c80c4], 1
mov dword [0x4c45bc], 0x9a9f97b0
mov dword [0x4c45c0], 0x82d69293
mov dword [0x4c45c4], 0x9893d699
mov dword [0x4c45c8], 0x868f8495
mov dword [0x4c45cc], 0x9986d682
mov dword [0x4c45d0], 0x94d68285
mov dword [0x4c45d4], 0xf68f9299
xor eax, eax
mov cl, byte [eax + 0x4c45bc]
xor cl, 0xf6
mov byte [eax + 0x4c46e0], cl
inc eax
cmp eax, 0x1c
jb 0x419f37
mov eax, 0x4c46e0
ret

Function at 0x419fda
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c80c0], 1
jne 0x41a043
or dword [0x4c80c0], 1
mov dword [0x4c45d8], 0x9a9f97b0
mov dword [0x4c45dc], 0x82d69293
mov dword [0x4c45e0], 0x9392d699
mov dword [0x4c45e4], 0x868f8495
mov dword [0x4c45e8], 0x9385d682
mov dword [0x4c45ec], 0x84938084
mov dword [0x4c45f0], 0x859384d6
mov dword [0x4c45f4], 0x85989986
mov word [0x4c45f8], 0xf693
xor eax, eax
mov cl, byte [eax + 0x4c45d8]
xor cl, 0xf6
mov byte [eax + 0x4c46fc], cl
inc eax
cmp eax, 0x22
jb 0x41a045
mov eax, 0x4c46fc
ret
Function at 0x41a3b9
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c80bc], 1
jne 0x41a418
or dword [0x4c80bc], 1
mov dword [0x4c45fc], 0xb2baa4a3
mov dword [0x4c4600], 0x9a988199
mov dword [0x4c4604], 0xa2929799
mov dword [0x4c4608], 0x9a9fb099
mov dword [0x4c460c], 0x9790d693
mov dword [0x4c4610], 0x92939a9f
mov dword [0x4c4614], 0x849ed6cc
mov word [0x4c4618], 0xf6cb
xor eax, eax
mov cl, byte [eax + 0x4c45fc]
xor cl, 0xf6
mov byte [eax + 0x4c4720], cl
inc eax
cmp eax, 0x1e
jb 0x41a41a
mov eax, 0x4c4720
ret

Function at 0x41afaa
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c80a4], 1
jne 0x41aff6
or dword [0x4c80a4], 1
mov dword [0x4c479c], 0xb58d9cbe
mov dword [0x4c47a0], 0xb08d8a98
mov dword [0x4c47a4], 0x8d8c8997
mov dword [0x4c47a8], 0x969f97b0
mov dword [0x4c47ac], 0x90989fd9
mov dword [0x4c47b0], 0xf99d9c95
xor eax, eax
mov cl, byte [eax + 0x4c479c]
xor cl, 0xf9
mov byte [eax + 0x4c4828], cl
inc eax
cmp eax, 0x18
jb 0x41aff8
mov eax, 0x4c4828
ret

Function at 0x41b18b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c80a0], 1
jne 0x41b1ea
or dword [0x4c80a0], 1
mov dword [0x4c47b4], 0x8c9a9cab
mov dword [0x4c47b8], 0x96908a8b
mov dword [0x4c47bc], 0x94d98a97
mov dword [0x4c47c0], 0xd98d8a8c
mov dword [0x4c47c4], 0x98d99c9b
mov dword [0x4c47c8], 0x9c95d98d
mov dword [0x4c47cc], 0xd98d8a98
mov word [0x4c47d0], 0xf9c8
xor eax, eax
mov cl, byte [eax + 0x4c47b4]
xor cl, 0xf9
mov byte [eax + 0x4c4840], cl
inc eax
cmp eax, 0x1e
jb 0x41b1ec
mov eax, 0x4c4840
ret

Function at 0x41b207
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8098], 1
jne 0x41b25c
or dword [0x4c8098], 1
mov dword [0x4c47e0], 0xa68d9c9e
mov dword [0x4c47e4], 0x9c94908d
mov dword [0x4c47e8], 0x97908aa6
mov dword [0x4c47ec], 0x95a69c9a
mov dword [0x4c47f0], 0xa68d8a98
mov dword [0x4c47f4], 0x8c899790
mov word [0x4c47f8], 0xf98d
xor eax, eax
mov cl, byte [eax + 0x4c47e0]
xor cl, 0xf9
mov byte [eax + 0x4c486c], cl
inc eax
cmp eax, 0x1a
jb 0x41b25e
mov eax, 0x4c486c
ret

Function at 0x41b279
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8094], 1
jne 0x41b2cc
or dword [0x4c8094], 1
mov dword [0x4c47fc], 0xa68d9c9e
mov dword [0x4c4800], 0x9c9a9798
mov dword [0x4c4804], 0x8b968d8a
mov dword [0x4c4808], 0x9d9694a6
mov dword [0x4c480c], 0xa69c958c
mov dword [0x4c4810], 0x918d9889
mov byte [0x4c4814], 0xf9
xor eax, eax
mov cl, byte [eax + 0x4c47fc]
xor cl, 0xf9
mov byte [eax + 0x4c4888], cl
inc eax
cmp eax, 0x19
jb 0x41b2ce
mov eax, 0x4c4888
ret

Function at 0x41b54f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c808c], 1
jne 0x41b5b5
or dword [0x4c808c], 1
mov dword [0x4c48b4], 0x989783a9
mov dword [0x4c48b8], 0x99da9695
mov dword [0x4c48bc], 0x9e968f95
mov dword [0x4c48c0], 0x8e9594da
mov dword [0x4c48c4], 0xda9f98da
mov dword [0x4c48c8], 0x95899f88
mov dword [0x4c48cc], 0x9e9f8c96
mov word [0x4c48d0], 0xdac0
mov byte [0x4c48d2], 0xfa
xor eax, eax
mov cl, byte [eax + 0x4c48b4]
xor cl, 0xfa
mov byte [eax + 0x4c48f4], cl
inc eax
cmp eax, 0x1f
jb 0x41b5b7
mov eax, 0x4c48f4
ret
Function at 0x41bb54
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8080], 1
jne 0x41bbb0
or dword [0x4c8080], 1
mov dword [0x4c4934], 0x9a8d95b2
mov dword [0x4c4938], 0xdb9f9297
mov dword [0x4c493c], 0x968e959e
mov dword [0x4c4940], 0x8f9a899e
mov dword [0x4c4944], 0xdb959492
mov dword [0x4c4948], 0x9f959a93
mov word [0x4c494c], 0x9e97
mov byte [0x4c494e], 0xfb
xor eax, eax
mov cl, byte [eax + 0x4c4934]
xor cl, 0xfb
mov byte [eax + 0x4c4ae4], cl
inc eax
cmp eax, 0x1b
jb 0x41bbb2
mov eax, 0x4c4ae4
ret

Function at 0x41bcb2
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c807c], 1
jne 0x41bd0e
or dword [0x4c807c], 1
mov dword [0x4c4950], 0x9a8d95b2
mov dword [0x4c4954], 0xdb9f9297
mov dword [0x4c4958], 0x968e959e
mov dword [0x4c495c], 0x8f9a899e
mov dword [0x4c4960], 0xdb959492
mov dword [0x4c4964], 0x9f959a93
mov word [0x4c4968], 0x9e97
mov byte [0x4c496a], 0xfb
xor eax, eax
mov cl, byte [eax + 0x4c4950]
xor cl, 0xfb
mov byte [eax + 0x4c4b00], cl
inc eax
cmp eax, 0x1b
jb 0x41bd10
mov eax, 0x4c4b00
ret

Function at 0x41bf62
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8078], 1
jne 0x41bfbe
or dword [0x4c8078], 1
mov dword [0x4c496c], 0x9a8d95b2
mov dword [0x4c4970], 0xdb9f9297
mov dword [0x4c4974], 0x968e959e
mov dword [0x4c4978], 0x8f9a899e
mov dword [0x4c497c], 0xdb959492
mov dword [0x4c4980], 0x9f959a93
mov word [0x4c4984], 0x9e97
mov byte [0x4c4986], 0xfb
xor eax, eax
mov cl, byte [eax + 0x4c496c]
xor cl, 0xfb
mov byte [eax + 0x4c4b1c], cl
inc eax
cmp eax, 0x1b
jb 0x41bfc0
mov eax, 0x4c4b1c
ret

Function at 0x41c0c0
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8074], 1
jne 0x41c11c
or dword [0x4c8074], 1
mov dword [0x4c4988], 0x9a8d95b2
mov dword [0x4c498c], 0xdb9f9297
mov dword [0x4c4990], 0x968e959e
mov dword [0x4c4994], 0x8f9a899e
mov dword [0x4c4998], 0xdb959492
mov dword [0x4c499c], 0x9f959a93
mov word [0x4c49a0], 0x9e97
mov byte [0x4c49a2], 0xfb
xor eax, eax
mov cl, byte [eax + 0x4c4988]
xor cl, 0xfb
mov byte [eax + 0x4c4b38], cl
inc eax
cmp eax, 0x1b
jb 0x41c11e
mov eax, 0x4c4b38
ret

Function at 0x41c30d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8070], 1
jne 0x41c376
or dword [0x4c8070], 1
mov dword [0x4c49a4], 0x9a8d95b2
mov dword [0x4c49a8], 0xdb9f9297
mov dword [0x4c49ac], 0x9a8f9a9f
mov dword [0x4c49b0], 0x819288db
mov dword [0x4c49b4], 0x949ddb9e
mov dword [0x4c49b8], 0x928cdb89
mov dword [0x4c49bc], 0xa9db9e9f
mov dword [0x4c49c0], 0xa8a4bcbe
mov word [0x4c49c4], 0xfba1
xor eax, eax
mov cl, byte [eax + 0x4c49a4]
xor cl, 0xfb
mov byte [eax + 0x4c4b54], cl
inc eax
cmp eax, 0x22
jb 0x41c378
mov eax, 0x4c4b54
ret