joyce8/EMBER2024-capa huggingface dataset:
Function at 0x41adac
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
and dword [ebp - 4], 0
test byte [0x4986d8], 1
jne 0x41add7
or dword [0x4986d8], 1
mov dword [0x4976d0], 0xf07074e
mov byte [0x4976d4], 0x6b
xor eax, eax
mov cl, byte [eax + 0x4976d0]
xor cl, 0x6b
mov byte [eax + 0x497ea4], cl
inc eax
cmp eax, 5
jb 0x41add9
push dword [ebp + 0xc]
lea eax, [ebp - 0x48]
push dword [ebp + 8]
push 0x497ea4
push eax
call fcn.0041fdce
and dword [esi + 0x10], 0
add esp, 0x10
lea eax, [ebp - 0x48]
mov dword [esi + 0x14], 0xf
push eax
mov ecx, esi
mov byte [esi], 0
call fcn.003f4cc5
mov eax, esi
leave
ret

Function at 0x41af7b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4986d4], 1
jne 0x41afd7
or dword [0x4986d4], 1
mov dword [0x4976d8], 0x261f0e2c
mov dword [0x4976dc], 0x71e0f04
mov dword [0x4976e0], 0x7022d0e
mov dword [0x4976e4], 0x60a250e
mov dword [0x4976e8], 0xa0d4b0e
mov dword [0x4976ec], 0xf0e0702
mov word [0x4976f0], 0x4b51
mov byte [0x4976f2], 0x6b
xor eax, eax
mov cl, byte [eax + 0x4976d8]
xor cl, 0x6b
mov byte [eax + 0x497eac], cl
inc eax
cmp eax, 0x1b
jb 0x41afd9
mov eax, 0x497eac
ret

Function at 0x41aff5
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4986d0], 1
jne 0x41b052
or dword [0x4986d0], 1
mov dword [0x4976f4], 0x281f0e38
mov dword [0x4976f8], 0xe19191e
mov dword [0x4976fc], 0x22f1f05
mov dword [0x497700], 0x1f080e19
mov dword [0x497704], 0x4b121904
mov dword [0x497708], 0x7020a0d
mov dword [0x49770c], 0x4b510f0e
mov byte [0x497710], 0x6b
xor eax, eax
mov cl, byte [eax + 0x4976f4]
xor cl, 0x6b
mov byte [eax + 0x497ec8], cl
inc eax
cmp eax, 0x1d
jb 0x41b054
mov eax, 0x497ec8
ret

Function at 0x41b166
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4986cc], 1
jne 0x41b1c3
or dword [0x4986cc], 1
mov dword [0x497714], 0x281f0e2c
mov dword [0x497718], 0xe19191e
mov dword [0x49771c], 0x22f1f05
mov dword [0x497720], 0x1f080e19
mov dword [0x497724], 0x4b121904
mov dword [0x497728], 0x7020a0d
mov dword [0x49772c], 0x4b510f0e
mov byte [0x497730], 0x6b
xor eax, eax
mov cl, byte [eax + 0x497714]
xor cl, 0x6b
mov byte [eax + 0x497ee8], cl
inc eax
cmp eax, 0x1d
jb 0x41b1c5
mov eax, 0x497ee8
ret
Function at 0x41b37e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4986c8], 1
jne 0x41b4eb
or dword [0x4986c8], 1
mov eax, 0xd437
mov ecx, eax
mov word [0x497738], cx
mov word [0x49773a], cx
inc ecx
mov word [0x49773c], cx
lea ecx, [eax - 0x18]
mov word [0x49773e], cx
add ecx, 0xfffffffa
lea edx, [eax - 0x35]
mov word [0x497740], cx
push ebx
mov ecx, edx
mov word [0x497742], cx
add ecx, 3
push esi
mov esi, ecx
lea ecx, [eax - 0x2a]
mov word [0x497744], si
lea esi, [eax - 0x2b]
mov word [0x497746], si
mov word [0x497754], cx
add esi, 0xfffffff8
add edx, 5
mov ecx, esi
push edi
lea edi, [eax - 0x29]
mov word [0x497756], cx
mov ecx, eax
mov word [0x49774c], dx
mov edx, edi
mov word [0x497758], cx
mov word [0x49775a], cx
add ecx, 0x24
mov word [0x49774e], dx
mov edx, ecx
mov word [0x49775c], dx
lea edx, [eax + 0x28]
mov ebx, edx
mov word [0x49775e], bx
mov ebx, ecx
mov word [0x497760], bx
lea ebx, [eax + 0x1b]
mov word [0x49776e], ax
mov word [0x497762], bx
mov ebx, ecx
mov ecx, eax
add eax, 4
mov word [0x497770], ax
lea eax, [ecx - 0x28]
mov word [0x497776], ax
add eax, 0xf
mov word [0x497778], ax
lea eax, [ecx - 0x2f]
mov word [0x49777a], ax
add eax, 0x17
mov word [0x49777c], ax
lea eax, [ecx - 0x12]
mov word [0x49777e], ax
add eax, 0xffffffe5
pop edi
mov word [0x497780], ax
lea eax, [ecx + 0x34]
pop esi
mov word [0x497764], bx
mov dword [0x497748], 0xd402d42d
mov dword [0x497750], 0xd405d422
mov word [0x497766], dx
mov dword [0x497768], 0xd45bd429
mov word [0x49776c], cx
mov dword [0x497772], 0xd404d419
mov dword [0x497782], 0xd40ed406
mov word [0x497786], ax
pop ebx
xor eax, eax
mov ecx, 0xd46b
xor cx, word [eax + 0x497738]
add eax, 2
mov word [eax + 0x497f06], cx
cmp eax, 0x50
jb 0x41b4ed
mov eax, 0x497f08
ret

Function at 0x41b50e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4986c4], 1
jne 0x41b563
or dword [0x4986c4], 1
mov dword [0x497788], 0x1d4b0425
mov dword [0x49778c], 0x218190e
mov dword [0x497790], 0x24b0504
mov dword [0x497794], 0x4b040d05
mov dword [0x497798], 0x20a1d0a
mov dword [0x49779c], 0x7090a07
mov word [0x4977a0], 0x6b0e
xor eax, eax
mov cl, byte [eax + 0x497788]
xor cl, 0x6b
mov byte [eax + 0x497f58], cl
inc eax
cmp eax, 0x1a
jb 0x41b565
mov eax, 0x497f58
ret

Function at 0x41b752
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4986c0], 1
jne 0x41b7a7
or dword [0x4986c0], 1
mov dword [0x4977a4], 0x1d4b0425
mov dword [0x4977a8], 0x218190e
mov dword [0x4977ac], 0x24b0504
mov dword [0x4977b0], 0x4b040d05
mov dword [0x4977b4], 0x20a1d0a
mov dword [0x4977b8], 0x7090a07
mov word [0x4977bc], 0x6b0e
xor eax, eax
mov cl, byte [eax + 0x4977a4]
xor cl, 0x6b
mov byte [eax + 0x497f74], cl
inc eax
cmp eax, 0x1a
jb 0x41b7a9
mov eax, 0x497f74
ret
Function at 0x41b7c4
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4986bc], 1
jne 0x41b82a
or dword [0x4986bc], 1
mov dword [0x4977c0], 0xa1d0522
mov dword [0x4977c4], 0x4b0f0207
mov dword [0x4977c8], 0x18190e1d
mov dword [0x4977cc], 0x4b050402
mov dword [0x4977d0], 0x40d0502
mov dword [0x4977d4], 0xc02184b
mov dword [0x4977d8], 0x1e1f0a05
mov word [0x4977dc], 0xe19
mov byte [0x4977de], 0x6b
xor eax, eax
mov cl, byte [eax + 0x4977c0]
xor cl, 0x6b
mov byte [eax + 0x497f90], cl
inc eax
cmp eax, 0x1f
jb 0x41b82c
mov eax, 0x497f90
ret

Function at 0x41bb31
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4986b8], 1
jne 0x41bb97
or dword [0x4986b8], 1
mov dword [0x4977e0], 0x7020a2d
mov dword [0x4977e4], 0x1f4b0f0e
mov dword [0x4977e8], 0xe0c4b04
mov dword [0x4977ec], 0xe1f4b1f
mov dword [0x4977f0], 0xd4b1b06
mov dword [0x4977f4], 0xe0f0704
mov dword [0x4977f8], 0xa1b4b19
mov word [0x4977fc], 0x31f
mov byte [0x4977fe], 0x6b
xor eax, eax
mov cl, byte [eax + 0x4977e0]
xor cl, 0x6b
mov byte [eax + 0x497fb0], cl
inc eax
cmp eax, 0x1f
jb 0x41bb99
mov eax, 0x497fb0
ret

Function at 0x41bd09
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4986b4], 1
jne 0x41bd5b
or dword [0x4986b4], 1
mov dword [0x497800], 0x2d1f0e2c
mov dword [0x497804], 0xe0f0704
mov dword [0x497808], 0x1f0a3b19
mov dword [0x49780c], 0xa0d4b03
mov dword [0x497810], 0xf0e0702
mov word [0x497814], 0x4b51
mov byte [0x497816], 0x6b
xor eax, eax
mov cl, byte [eax + 0x497800]
xor cl, 0x6b
mov byte [eax + 0x497fd0], cl
inc eax
cmp eax, 0x17
jb 0x41bd5d
mov eax, 0x497fd0
ret

Function at 0x41c025
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4986b0], 1
mov edx, 0xd46b
jne 0x41c0bc
or dword [0x4986b0], 1
lea ecx, [edx - 0x1d]
mov eax, ecx
mov word [0x497818], ax
add eax, 0xffffffed
mov word [0x49781a], ax
push esi
lea eax, [edx - 0x52]
mov esi, eax
add eax, 0xfffffff1
mov word [0x497824], ax
lea eax, [edx - 0x65]
mov word [0x497826], ax
add eax, 0x36
mov word [0x497828], ax
lea eax, [edx - 0xe]
mov word [0x49781c], si
add esi, 0xffffffeb
mov word [0x49782a], ax
add eax, 2
mov word [0x49782c], ax
lea eax, [edx - 0x13]
mov word [0x49782e], ax
mov eax, edx
mov word [0x49781e], si
mov dword [0x497820], 0xd419d40c
mov dword [0x497830], 0xd44ed459
mov word [0x497834], ax
pop esi
xor eax, eax
mov ecx, edx
xor cx, word [eax + 0x497818]
add eax, 2
mov word [eax + 0x497fe6], cx
cmp eax, 0x1e
jb 0x41c0be
mov eax, 0x497fe8
ret

Function at 0x41c0dc
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4986ac], 1
mov ecx, 0xd46b
jne 0x41c11d
or dword [0x4986ac], 1
lea eax, [ecx - 0x5b]
mov word [0x497838], ax
add eax, 0xb
mov word [0x49783a], ax
lea eax, [ecx - 0x5e]
mov word [0x49783c], ax
add eax, 9
mov word [0x49783e], ax
mov eax, ecx
mov word [0x497840], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x497838]
add eax, 2
mov word [eax + 0x498006], dx
cmp eax, 0xa
jb 0x41c11f
mov eax, 0x498008
ret
Function at 0x41c13d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4986a8], 1
mov ecx, 0xd46b
jne 0x41c190
or dword [0x4986a8], 1
lea eax, [ecx - 0x5b]
mov word [0x497844], ax
add eax, 0xb
mov word [0x497846], ax
lea eax, [ecx - 0x5e]
mov word [0x497848], ax
add eax, 0x4b
mov word [0x49784a], ax
lea eax, [ecx - 0x12]
mov word [0x49784c], ax
add eax, 0xffffffbd
mov word [0x49784e], ax
mov eax, ecx
mov word [0x497850], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x497844]
add eax, 2
mov word [eax + 0x498012], dx
cmp eax, 0xe
jb 0x41c192
mov eax, 0x498014
ret

Function at 0x41c1b0
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4986a4], 1
mov ecx, 0xd46b
jne 0x41c203
or dword [0x4986a4], 1
lea eax, [ecx - 0x5b]
mov word [0x497854], ax
add eax, 0xb
mov word [0x497856], ax
lea eax, [ecx - 0x5e]
mov word [0x497858], ax
add eax, 0x50
mov word [0x49785a], ax
lea eax, [ecx - 0xc]
mov word [0x49785c], ax
add eax, 0xffffffb7
mov word [0x49785e], ax
mov eax, ecx
mov word [0x497860], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x497854]
add eax, 2
mov word [eax + 0x498022], dx
cmp eax, 0xe
jb 0x41c205
mov eax, 0x498024
ret

Function at 0x41c223
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4986a0], 1
mov ecx, 0xd46b
jne 0x41c264
or dword [0x4986a0], 1
lea eax, [ecx - 0x5b]
mov word [0x497864], ax
add eax, 0xb
mov word [0x497866], ax
lea eax, [ecx - 0x5e]
mov word [0x497868], ax
add eax, 9
mov word [0x49786a], ax
mov eax, ecx
mov word [0x49786c], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x497864]
add eax, 2
mov word [eax + 0x498032], dx
cmp eax, 0xa
jb 0x41c266
mov eax, 0x498034
ret

Function at 0x41c284
Capabilities:
Encode data using xor

Disassembly:
test byte [0x49869c], 1
mov ecx, 0xd46b
jne 0x41c2d7
or dword [0x49869c], 1
lea eax, [ecx - 0x5b]
mov word [0x497870], ax
add eax, 0xb
mov word [0x497872], ax
lea eax, [ecx - 0x5e]
mov word [0x497874], ax
add eax, 0x4b
mov word [0x497876], ax
lea eax, [ecx - 0x12]
mov word [0x497878], ax
add eax, 0xffffffbd
mov word [0x49787a], ax
mov eax, ecx
mov word [0x49787c], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x497870]
add eax, 2
mov word [eax + 0x49803e], dx
cmp eax, 0xe
jb 0x41c2d9
mov eax, 0x498040
ret
Function at 0x41c3d1
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498698], 1
mov ecx, 0xd46b
jne 0x41c5fa
or dword [0x498698], 1
lea eax, [ecx - 0x10]
mov word [0x497888], ax
dec eax
mov word [0x49788a], ax
lea eax, [ecx - 0x12]
mov word [0x49788c], ax
dec eax
mov word [0x49788e], ax
lea eax, [ecx - 0xc]
mov word [0x497890], ax
dec eax
mov word [0x497892], ax
lea eax, [ecx - 0xe]
mov word [0x497894], ax
dec eax
mov word [0x497896], ax
lea eax, [ecx - 0x18]
mov word [0x497898], ax
dec eax
mov word [0x49789a], ax
lea eax, [ecx - 0x41]
mov word [0x49789c], ax
dec eax
mov word [0x49789e], ax
lea eax, [ecx - 0x43]
mov word [0x4978a0], ax
add eax, 7
mov word [0x4978a2], ax
lea eax, [ecx - 0x3d]
mov word [0x4978a4], ax
dec eax
mov word [0x4978a6], ax
lea eax, [ecx - 0x3f]
mov word [0x4978a8], ax
add eax, 0xfffffff7
mov word [0x4978aa], ax
lea eax, [ecx - 0x49]
mov word [0x4978ac], ax
dec eax
mov word [0x4978ae], ax
lea eax, [ecx - 0x4b]
mov word [0x4978b0], ax
add eax, 7
mov word [0x4978b2], ax
lea eax, [ecx - 0x45]
mov word [0x4978b4], ax
dec eax
mov word [0x4978b6], ax
lea eax, [ecx - 0x47]
mov word [0x4978b8], ax
add eax, 0x17
mov word [0x4978ba], ax
lea eax, [ecx - 0x31]
mov word [0x4978bc], ax
dec eax
mov word [0x4978be], ax
lea eax, [ecx - 0x33]
mov word [0x4978c0], ax
add eax, 7
mov word [0x4978c2], ax
lea eax, [ecx - 0x2d]
mov word [0x4978c4], ax
dec eax
mov word [0x4978c6], ax
lea eax, [ecx - 0x2f]
mov word [0x4978c8], ax
add eax, 0xfffffff7
mov word [0x4978ca], ax
lea eax, [ecx - 0x39]
mov word [0x4978cc], ax
dec eax
mov word [0x4978ce], ax
lea eax, [ecx - 0x61]
mov word [0x4978d0], ax
dec eax
mov word [0x4978d2], ax
lea eax, [ecx - 0x63]
mov word [0x4978d4], ax
add eax, 7
mov word [0x4978d6], ax
lea eax, [ecx - 0x5d]
mov word [0x4978d8], ax
dec eax
mov word [0x4978da], ax
lea eax, [ecx - 0x5f]
mov word [0x4978dc], ax
add eax, 0xfffffff7
mov word [0x4978de], ax
lea eax, [ecx - 0x69]
mov word [0x4978e0], ax
dec eax
mov word [0x4978e2], ax
lea eax, [ecx - 0x6b]
mov word [0x4978e4], ax
add eax, 7
mov word [0x4978e6], ax
lea eax, [ecx - 0x65]
mov word [0x4978e8], ax
dec eax
mov word [0x4978ea], ax
lea eax, [ecx - 0x67]
mov word [0x4978ec], ax
add eax, 0x17
mov word [0x4978ee], ax
lea eax, [ecx - 0x51]
mov word [0x4978f0], ax
dec eax
mov word [0x4978f2], ax
lea eax, [ecx - 0x53]
mov word [0x4978f4], ax
add eax, 7
mov word [0x4978f6], ax
lea eax, [ecx - 0x4d]
mov word [0x4978f8], ax
dec eax
mov word [0x4978fa], ax
lea eax, [ecx - 0x4f]
mov word [0x4978fc], ax
add eax, 0xfffffff7
mov word [0x4978fe], ax
lea eax, [ecx - 0x59]
mov word [0x497900], ax
dec eax
mov word [0x497902], ax
mov eax, ecx
mov word [0x497904], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x497888]
add eax, 2
mov word [eax + 0x49804e], dx
cmp eax, 0x7e
jb 0x41c5fc
mov eax, 0x498050
ret
Function at 0x41cccc
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498694], 1
jne 0x41cd33
or dword [0x498694], 1
mov dword [0x497908], 0x11341106
mov dword [0x49790c], 0x19341b02
mov dword [0x497910], 0xe0f0a0e
mov dword [0x497914], 0x5023419
mov dword [0x497918], 0xd341f02
mov dword [0x49791c], 0x430e0702
mov dword [0x497920], 0xa0d4b42
mov dword [0x497924], 0xf0e0702
mov byte [0x497928], 0x6b
xor eax, eax
mov cl, byte [eax + 0x497908]
xor cl, 0x6b
mov byte [eax + 0x4980d0], cl
inc eax
cmp eax, 0x21
jb 0x41cd35
mov eax, 0x4980d0
ret

Function at 0x41cd50
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498690], 1
jne 0x41cdb7
or dword [0x498690], 1
mov dword [0x49792c], 0x11341106
mov dword [0x497930], 0x19341b02
mov dword [0x497934], 0xe0f0a0e
mov dword [0x497938], 0x20d3419
mov dword [0x49793c], 0x18340e07
mov dword [0x497940], 0x431f0a1f
mov dword [0x497944], 0xa0d4b42
mov dword [0x497948], 0xf0e0702
mov byte [0x49794c], 0x6b
xor eax, eax
mov cl, byte [eax + 0x49792c]
xor cl, 0x6b
mov byte [eax + 0x4980f4], cl
inc eax
cmp eax, 0x21
jb 0x41cdb9
mov eax, 0x4980f4
ret

Function at 0x41cdd4
Capabilities:
Encode data using xor

Disassembly:
test byte [0x49868c], 1
jne 0x41ce52
or dword [0x49868c], 1
mov dword [0x497950], 0x11341106
mov dword [0x497954], 0x19341b02
mov dword [0x497958], 0xe0f0a0e
mov dword [0x49795c], 0x130e3419
mov dword [0x497960], 0x80a191f
mov dword [0x497964], 0x20d341f
mov dword [0x497968], 0x1f340e07
mov dword [0x49796c], 0xe033404
mov dword [0x497970], 0x42431b0a
mov dword [0x497974], 0x20a0d4b
mov dword [0x497978], 0x6b0f0e07
xor eax, eax
mov cl, byte [eax + 0x497950]
xor cl, 0x6b
mov byte [eax + 0x498118], cl
inc eax
cmp eax, 0x2c
jb 0x41ce54
mov eax, 0x498118
ret

Function at 0x41ce6f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498688], 1
jne 0x41ced9
or dword [0x498688], 1
mov dword [0x49797c], 0x7020a2d
mov dword [0x497980], 0x1f4b0f0e
mov dword [0x497984], 0x19084b04
mov dword [0x497988], 0xe1f0a0e
mov dword [0x49798c], 0x180e0f4b
mov dword [0x497990], 0xa05021f
mov dword [0x497994], 0x504021f
mov dword [0x497998], 0x1f0a1b4b
mov dword [0x49799c], 0x6b4b5103
xor eax, eax
mov cl, byte [eax + 0x49797c]
xor cl, 0x6b
mov byte [eax + 0x498144], cl
inc eax
cmp eax, 0x24
jb 0x41cedb
mov eax, 0x498144
ret

Function at 0x41cef6
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498684], 1
jne 0x41cf5c
or dword [0x498684], 1
mov dword [0x4979a0], 0x7020a2d
mov dword [0x4979a4], 0x1f4b0f0e
mov dword [0x4979a8], 0x19084b04
mov dword [0x4979ac], 0xe1f0a0e
mov dword [0x4979b0], 0x1f1e044b
mov dword [0x4979b4], 0x4b1f1e1b
mov dword [0x4979b8], 0xe07020d
mov word [0x4979bc], 0x4b51
mov byte [0x4979be], 0x6b
xor eax, eax
mov cl, byte [eax + 0x4979a0]
xor cl, 0x6b
mov byte [eax + 0x498168], cl
inc eax
cmp eax, 0x1f
jb 0x41cf5e
mov eax, 0x498168
ret
Function at 0x41cf93
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498680], 1
jne 0x41cfd1
or dword [0x498680], 1
mov dword [0x4979c0], 0x43c1822
mov dword [0x4979c4], 0x3b5f5d1c
mov dword [0x4979c8], 0xe080419
mov word [0x4979cc], 0x1818
mov byte [0x4979ce], 0x6b
xor eax, eax
mov cl, byte [eax + 0x4979c0]
xor cl, 0x6b
mov byte [eax + 0x498188], cl
inc eax
cmp eax, 0xf
jb 0x41cfd3
mov eax, 0x498188
ret

Function at 0x41d0e9
Capabilities:
Encode data using xor

Disassembly:
test byte [0x49867c], 1
jne 0x41d152
or dword [0x49867c], 1
mov dword [0x4979d0], 0x407072a
mov dword [0x4979d4], 0xe1f0a08
mov dword [0x4979d8], 0x220f052a
mov dword [0x4979dc], 0x21f0205
mov dword [0x4979e0], 0x1102070a
mov dword [0x4979e4], 0xf02380e
mov dword [0x4979e8], 0x20a0d4b
mov dword [0x4979ec], 0x510f0e07
mov word [0x4979f0], 0x6b4b
xor eax, eax
mov cl, byte [eax + 0x4979d0]
xor cl, 0x6b
mov byte [eax + 0x498198], cl
inc eax
cmp eax, 0x22
jb 0x41d154
mov eax, 0x498198
ret

Function at 0x41d16f
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x498678], 1
jne 0x41d1d0
or dword [0x498678], 1
mov dword [0x4979f4], 0x80e0328
mov dword [0x4979f8], 0x43f00
mov dword [0x4979fc], 0xe26050e
mov dword [0x497a00], 0x190e0906
mov dword [0x497a04], 0x1b020318
mov dword [0x497a08], 0x20a0d4b
mov dword [0x497a0c], 0x510f0e07
mov word [0x497a10], 0x6b4b
mov cl, byte [eax + 0x4979f4]
xor cl, 0x6b
mov byte [eax + 0x4981bc], cl
inc eax
cmp eax, 0x1e
jb 0x41d1d0
mov eax, 0x4981bc
ret

Function at 0x41d434
Capabilities:
Encode data using xor

Disassembly:
test byte [0x49866c], 1
jne 0x41d4b9
or dword [0x49866c], 1
mov dword [0x497a28], 0x5050a28
mov dword [0x497a2c], 0x1a4b1f04
mov dword [0x497a30], 0x12190e1e
mov dword [0x497a34], 0x5d4b0a4b
mov dword [0x497a38], 0x2094b5f
mov dword [0x497a3c], 0x21d4b1f
mov dword [0x497a40], 0x44b1c0e
mov dword [0x497a44], 0x59584b05
mov dword [0x497a48], 0x1f02094b
mov dword [0x497a4c], 0x5021c4b
mov dword [0x497a50], 0x181c040f
mov byte [0x497a54], 0x6b
xor eax, eax
mov cl, byte [eax + 0x497a28]
xor cl, 0x6b
mov byte [eax + 0x4981f0], cl
inc eax
cmp eax, 0x2d
jb 0x41d4bb
mov eax, 0x4981f0
ret

Function at 0x41d4d6
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498668], 1
jne 0x41d58a
push ebx
push esi
or dword [0x498668], 1
mov eax, 0xd423
mov word [0x497a58], ax
add eax, 0xfffffffd
mov word [0x497a5a], ax
push edi
mov edi, 0xd42e
mov eax, edi
mov word [0x497a5c], ax
add eax, 4
mov word [0x497a5e], ax
lea esi, [edi + 6]
mov eax, esi
mov word [0x497a60], ax
lea edx, [edi - 7]
mov eax, edx
mov word [0x497a62], ax
add eax, 0xfffffffd
mov word [0x497a64], ax
lea ecx, [edi - 6]
mov eax, ecx
mov word [0x497a66], ax
add eax, 2
mov ebx, eax
lea eax, [edi - 0xc]
pop edi
mov word [0x497a76], ax
add eax, 0x49
pop esi
mov word [0x497a68], bx
mov dword [0x497a6a], 0xd434d427
mov dword [0x497a6e], 0xd42ad426
mov dword [0x497a72], 0xd423d428
mov dword [0x497a78], 0xd42ed425
mov word [0x497a7c], ax
pop ebx
xor eax, eax
mov ecx, 0xd46b
xor cx, word [eax + 0x497a58]
add eax, 2
mov word [eax + 0x49821e], cx
cmp eax, 0x26
jb 0x41d58c
mov eax, 0x498220
ret
Function at 0x41d5ad
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498664], 1
jne 0x41d65e
or dword [0x498664], 1
mov eax, 0xd423
mov word [0x497a80], ax
add eax, 0xfffffffd
mov word [0x497a82], ax
mov ecx, 0xd42e
push ebx
mov eax, ecx
mov word [0x497a84], ax
add eax, 4
push esi
mov word [0x497a86], ax
lea esi, [ecx + 6]
mov eax, esi
mov word [0x497a88], ax
add eax, 0xfffffff4
mov word [0x497a8a], ax
lea edx, [ecx + 0x10]
mov eax, edx
mov word [0x497a8c], ax
add eax, 0xfffffffb
mov ebx, eax
mov word [0x497a8e], bx
mov word [0x497a90], bx
mov ebx, ecx
mov word [0x497a92], bx
add ebx, 0xfffffff7
mov word [0x497aa0], ax
lea eax, [ecx + 0x3d]
pop esi
mov word [0x497a94], bx
mov dword [0x497a96], 0xd434d43f
mov word [0x497a9a], dx
mov dword [0x497a9c], 0xd42ed438
mov word [0x497aa2], ax
pop ebx
xor eax, eax
mov ecx, 0xd46b
xor cx, word [eax + 0x497a80]
add eax, 2
mov word [eax + 0x498246], cx
cmp eax, 0x24
jb 0x41d660
mov eax, 0x498248
ret

Function at 0x41d681
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498660], 1
mov edx, 0xd46b
jne 0x41d6f5
or dword [0x498660], 1
lea eax, [edx - 0x48]
mov word [0x497aa4], ax
add eax, 0xfffffffd
mov word [0x497aa6], ax
lea ecx, [edx - 0x3d]
mov eax, ecx
mov word [0x497aa8], ax
add eax, 4
mov word [0x497aaa], ax
lea eax, [edx - 0x37]
mov word [0x497aac], ax
add eax, 0xa
mov word [0x497aae], ax
lea eax, [edx - 0x33]
push esi
mov esi, eax
mov eax, edx
mov word [0x497ab0], si
mov word [0x497ab2], cx
mov dword [0x497ab4], 0xd438d439
mov word [0x497ab8], ax
pop esi
xor eax, eax
mov ecx, edx
xor cx, word [eax + 0x497aa4]
add eax, 2
mov word [eax + 0x49826a], cx
cmp eax, 0x16
jb 0x41d6f7
mov eax, 0x49826c
ret

Function at 0x41d715
Capabilities:
Encode data using xor

Disassembly:
test byte [0x49865c], 1
jne 0x41d7d7
push ebx
mov eax, 0xd423
mov word [0x497abc], ax
add eax, 0xfffffffd
mov word [0x497abe], ax
push esi
mov esi, 0xd42e
or dword [0x49865c], 1
mov eax, esi
mov word [0x497ac0], ax
add eax, 4
mov word [0x497ac2], ax
lea edx, [esi + 6]
lea ecx, [esi - 6]
mov eax, edx
mov word [0x497ac4], ax
mov eax, ecx
mov word [0x497ac6], ax
add eax, 0x16
mov word [0x497ac8], ax
lea eax, [esi + 0xb]
mov ebx, eax
add eax, 0xffffffec
mov esi, eax
lea eax, [edx - 7]
mov word [0x497adc], ax
add eax, 0xfffffff5
mov word [0x497ade], ax
lea eax, [edx - 8]
mov word [0x497ad0], si
mov word [0x497ae0], ax
add eax, 0x3f
pop esi
mov word [0x497aca], bx
mov dword [0x497acc], 0xd42ed439
mov dword [0x497ad2], 0xd434d43f
mov word [0x497ad6], cx
mov dword [0x497ad8], 0xd425d424
mov word [0x497ae2], ax
pop ebx
xor eax, eax
mov ecx, 0xd46b
xor cx, word [eax + 0x497abc]
add eax, 2
mov word [eax + 0x498282], cx
cmp eax, 0x28
jb 0x41d7d9
mov eax, 0x498284
ret